Skip to content

fix(deps): update all non-major dependencies #617

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all non-major dependencies #617

renovate wants to merge 1 commit into from
+237 −221

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 1, 2025 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action minor v4.2.2 → v4.3.1 age confidence
actions/github-script action minor v7.0.1 → v7.1.0 age confidence
actions/setup-go action minor v5.5.0 → v5.6.0 age confidence
alpine digest 4bcff63 → 865b95f
alpine final minor 3.22.1 → 3.23.2 age confidence
codecov/codecov-action action minor v5.4.3 → v5.5.2 age confidence
docker.io/library/alpine minor 3.22.1 → 3.23.2 age confidence
docker.io/target/vela-git-slim minor v0.12.1 → v0.13.0 age confidence
docker/login-action action minor v3.4.0 → v3.6.0 age confidence
docker/metadata-action action minor v5.7.0 → v5.10.0 age confidence
github.com/alecthomas/chroma/v2 require minor v2.19.0 → v2.22.0 age confidence
github.com/gin-gonic/gin require minor v1.10.1 → v1.11.0 age confidence
github.com/go-git/go-git/v5 require patch v5.16.2 → v5.16.4 age confidence
github.com/go-vela/server require patch v0.27.1 → v0.27.4 age confidence
github.com/go-vela/worker require patch v0.27.2 → v0.27.3 age confidence
github.com/spf13/afero require minor v1.14.0 → v1.15.0 age confidence
github.com/urfave/cli-docs/v3 require minor v3.0.0-alpha6 → v3.1.0 age confidence
github.com/urfave/cli/v3 require minor v3.4.1 → v3.6.1 age confidence
github/codeql-action action minor v3.29.5 → v3.31.10 age confidence
golang.org/x/term require minor v0.34.0 → v0.39.0 age confidence

Release Notes

actions/checkout (actions/checkout)

v4.3.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

actions/github-script (actions/github-script)

v7.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/github-script@v7...v7.1.0

actions/setup-go (actions/setup-go)

v5.6.0

Compare Source

What's Changed

Full Changelog: actions/setup-go@v5...v5.6.0

codecov/codecov-action (codecov/codecov-action)

v5.5.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

docker/login-action (docker/login-action)

v3.6.0

Compare Source

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

Full Changelog: docker/login-action@v3.4.0...v3.5.0

docker/metadata-action (docker/metadata-action)

v5.10.0

Compare Source

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

Compare Source

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

v5.8.0

Compare Source

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

alecthomas/chroma (github.com/alecthomas/chroma/v2)

v2.22.0

Compare Source

Changelog

v2.21.1

Compare Source

Changelog

v2.21.0

Compare Source

Changelog

v2.20.0

Compare Source

Changelog

gin-gonic/gin (github.com/gin-gonic/gin)

v1.11.0

Compare Source

Features
  • feat(gin): Experimental support for HTTP/3 using quic-go/quic-go (#​3210)
  • feat(form): add array collection format in form binding (#​3986), add custom string slice for form tag unmarshal (#​3970)
  • feat(binding): add BindPlain (#​3904)
  • feat(fs): Export, test and document OnlyFilesFS (#​3939)
  • feat(binding): add support for unixMilli and unixMicro (#​4190)
  • feat(form): Support default values for collections in form binding (#​4048)
  • feat(context): GetXxx added support for more go native types (#​3633)
Enhancements
  • perf(context): optimize getMapFromFormData performance (#​4339)
  • refactor(tree): replace string(/) with "/" in node.insertChild (#​4354)
  • refactor(render): remove headers parameter from writeHeader (#​4353)
  • refactor(context): simplify "GetType()" functions (#​4080)
  • refactor(slice): simplify SliceValidationError Error method (#​3910)
  • refactor(context):Avoid using filepath.Dir twice in SaveUploadedFile (#​4181)
  • refactor(context): refactor context handling and improve test robustness (#​4066)
  • refactor(binding): use strings.Cut to replace strings.Index (#​3522)
  • refactor(context): add an optional permission parameter to SaveUploadedFile (#​4068)
  • refactor(context): verify URL is Non-nil in initQueryCache() (#​3969)
  • refactor(context): YAML judgment logic in Negotiate (#​3966)
  • tree: replace the self-defined 'min' to official one (#​3975)
  • context: Remove redundant filepath.Dir usage (#​4181)
Bug Fixes
  • fix: prevent middleware re-entry issue in HandleContext (#​3987)
  • fix(binding): prevent duplicate decoding and add validation in decodeToml (#​4193)
  • fix(gin): Do not panic when handling method not allowed on empty tree (#​4003)
  • fix(gin): data race warning for gin mode (#​1580)
  • fix(context): verify URL is Non-nil in initQueryCache() (#​3969)
  • fix(context): YAML judgment logic in Negotiate (#​3966)
  • fix(context): check handler is nil (#​3413)
  • fix(readme): fix broken link to English documentation (#​4222)
  • fix(tree): Keep panic infos consistent when wildcard type build faild (#​4077)
Build process updates / CI
  • ci: integrate Trivy vulnerability scanning into CI workflow (#​4359)
  • ci: support Go 1.25 in CI/CD (#​4341)
  • build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#​4342)
  • ci: add Go version 1.24 to GitHub Actions (#​4154)
  • build: update Gin minimum Go version to 1.21 (#​3960)
  • ci(lint): enable new linters (testifylint, usestdlibvars, perfsprint, etc.) (#​4010, #​4091, #​4090)
  • ci(lint): update workflows and improve test request consistency (#​4126)
Dependency updates
  • chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#​4346, #​4356)
  • chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#​4347)
  • chore(deps): bump actions/setup-go from 5 to 6 (#​4351)
  • chore(deps): bump github.com/quic-go/quic-go from 0.53.0 to 0.54.0 (#​4328)
  • chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 (#​4178, #​4221)
  • chore(deps): bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.1 (#​4052)
Documentation updates
  • docs(changelog): update release notes for Gin v1.10.1 (#​4360)
  • docs: Fixing English grammar mistakes and awkward sentence structure in doc/doc.md (#​4207)
  • docs: update documentation and release notes for Gin v1.10.0 (#​3953)
  • docs: fix typo in Gin Quick Start (#​3997)
  • docs: fix comment and link issues (#​4205, #​3938)
  • docs: fix route group example code (#​4020)
  • docs(readme): add Portuguese documentation (#​4078)
  • docs(context): fix some function names in comment (#​4079)
go-git/go-git (github.com/go-git/go-git/v5)

v5.16.4

Compare Source

What's Changed

Full Changelog: go-git/go-git@v5.16.3...v5.16.4

v5.16.3

Compare Source

What's Changed

  • internal: Expand regex to fix build [5.x] by @​baloo in #​1644
  • build: raise timeouts for windows CI tests and disable CIFuzz [5.x] by @​baloo in #​1646
  • plumbing: support commits extra headers, support jujutsu signed commit [5.x] by @​baloo in #​1633

Full Changelog: go-git/go-git@v5.16.2...v5.16.3

go-vela/server (github.com/go-vela/server)

v0.27.4

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.3...v0.27.4

v0.27.3

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.2...v0.27.3

v0.27.2

Compare Source

What's Changed

  • fix(compiler): always include build repo in install and add VELA_GIT_TOKEN by @​ecrupper in #​1346
  • fix(db/log): remove redundant service_id and step_id indices from log table by @​wass3r in #​1344
  • fix(oidc): no trailing colon on non-action events in claim by @​ecrupper in #​1355

Full Changelog: go-vela/server@v0.27.1...v0.27.2

go-vela/worker (github.com/go-vela/worker)

v0.27.3

Compare Source

What's Changed

Full Changelog: go-vela/worker@v0.27.2...v0.27.3

spf13/afero (github.com/spf13/afero)

v1.15.0

Compare Source

What's Changed

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Indicates a change to dependencies label Aug 1, 2025
@renovate renovate bot requested a review from a team as a code owner August 1, 2025 10:35
@codecov
Copy link

codecov bot commented Aug 1, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.84%. Comparing base (70c52a9) to head (cbfd276).

❌ Your project check has failed because the head coverage (70.84%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #617   +/-   ##
=======================================
  Coverage   70.84%   70.84%           
=======================================
  Files         173      173           
  Lines        4662     4662           
=======================================
  Hits         3303     3303           
  Misses       1055     1055           
  Partials      304      304
Files with missing lines Coverage Δ
command/pipeline/exec.go 0.00% <ø> (ø)
command/pipeline/validate.go 64.28% <ø> (ø)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 7a34212 to a431981 Compare August 4, 2025 11:45
@renovate renovate bot changed the title chore(deps): update docker/metadata-action action to v5.8.0 fix(deps): update all non-major dependencies Aug 4, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 6 times, most recently from 0fd97be to ea8972d Compare August 11, 2025 14:27
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 43896be to 66ad1b7 Compare August 18, 2025 13:25
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 0bf66b6 to 6a853eb Compare August 21, 2025 18:06
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 2ca2135 to 3a18b40 Compare August 29, 2025 19:59
wass3rw3rk
wass3rw3rk previously approved these changes Aug 29, 2025
View reviewed changes
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 8c23321 to 68b5dec Compare September 8, 2025 05:03
@renovate
Copy link
Contributor Author

renovate bot commented Sep 8, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 14 additional dependencies were updated

Details:

Package Change
github.com/bytedance/sonic v1.13.3 -> v1.14.0
github.com/bytedance/sonic/loader v0.2.4 -> v0.3.0
github.com/cloudwego/base64x v0.1.5 -> v0.1.6
github.com/docker/docker v28.3.3+incompatible -> v28.5.1+incompatible
github.com/go-playground/validator/v10 v10.26.0 -> v10.27.0
github.com/klauspost/cpuid/v2 v2.2.11 -> v2.3.0
golang.org/x/arch v0.18.0 -> v0.20.0
golang.org/x/net v0.42.0 -> v0.43.0
golang.org/x/sync v0.16.0 -> v0.17.0
golang.org/x/sys v0.35.0 -> v0.39.0
google.golang.org/protobuf v1.36.6 -> v1.36.9
k8s.io/api v0.34.0 -> v0.34.1
k8s.io/apimachinery v0.34.0 -> v0.34.1
k8s.io/client-go v0.34.0 -> v0.34.1

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from b2ce7ee to a1e8c1b Compare September 10, 2025 18:10
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 4b148dc to 467ca38 Compare September 25, 2025 10:45
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 06ea206 to cd9dcc8 Compare November 14, 2025 05:49
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 847d829 to 7e98ee8 Compare November 19, 2025 14:42
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from ab96170 to 85a2e5f Compare November 27, 2025 17:15
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 5338287 to af564f2 Compare December 3, 2025 21:30
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 7983da6 to 880f1b6 Compare December 10, 2025 03:16
@renovate
Copy link
Contributor Author

renovate bot commented Dec 10, 2025 •
edited
Loading

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 47 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.4 -> 1.25.5
dario.cat/mergo v1.0.1 -> v1.0.2
github.com/bytedance/sonic v1.13.3 -> v1.14.2
github.com/bytedance/sonic/loader v0.2.4 -> v0.4.0
github.com/cloudwego/base64x v0.1.5 -> v0.1.6
github.com/docker/docker v28.3.3+incompatible -> v28.5.1+incompatible
github.com/gabriel-vasile/mimetype v1.4.9 -> v1.4.11
github.com/go-playground/validator/v10 v10.26.0 -> v10.29.0
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 -> v2.27.3
github.com/jackc/pgx/v5 v5.7.4 -> v5.7.6
github.com/klauspost/cpuid/v2 v2.2.11 -> v2.3.0
github.com/lestrrat-go/httprc/v3 v3.0.0 -> v3.0.2
github.com/lestrrat-go/jwx/v3 v3.0.10 -> v3.0.12
github.com/mailru/easyjson v0.9.0 -> v0.9.1
github.com/mattn/go-sqlite3 v1.14.28 -> v1.14.32
github.com/segmentio/asm v1.2.0 -> v1.2.1
github.com/spf13/cast v1.8.0 -> v1.10.0
github.com/ugorji/go/codec v1.3.0 -> v1.3.1
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.62.0 -> v0.64.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.62.0 -> v0.64.0
go.opentelemetry.io/otel v1.37.0 -> v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0 -> v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.37.0 -> v1.39.0
go.opentelemetry.io/otel/metric v1.37.0 -> v1.39.0
go.opentelemetry.io/otel/sdk v1.37.0 -> v1.39.0
go.opentelemetry.io/otel/trace v1.37.0 -> v1.39.0
go.opentelemetry.io/proto/otlp v1.7.0 -> v1.9.0
go.starlark.net v0.0.0-20250826212936-2a4f36945129 -> v0.0.0-20251109183026-be02852a5e1f
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
golang.org/x/arch v0.18.0 -> v0.23.0
golang.org/x/crypto v0.41.0 -> v0.46.0
golang.org/x/net v0.42.0 -> v0.48.0
golang.org/x/oauth2 v0.30.0 -> v0.34.0
golang.org/x/sync v0.16.0 -> v0.19.0
golang.org/x/sys v0.35.0 -> v0.40.0
golang.org/x/text v0.28.0 -> v0.32.0
golang.org/x/time v0.12.0 -> v0.14.0
google.golang.org/genproto/googleapis/api v0.0.0-20250603155806-513f23925822 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/rpc v0.0.0-20250603155806-513f23925822 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/grpc v1.73.0 -> v1.77.0
google.golang.org/protobuf v1.36.6 -> v1.36.11
gorm.io/gorm v1.30.2 -> v1.31.1
k8s.io/api v0.34.0 -> v0.34.1
k8s.io/apimachinery v0.34.0 -> v0.34.3
k8s.io/client-go v0.34.0 -> v0.34.1
k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 -> v0.0.0-20251002143259-bc988d571ff4
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 8 times, most recently from c3106d8 to ab1684f Compare December 18, 2025 06:30
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from ab1684f to 1ce5a6f Compare December 31, 2025 13:11
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from dcf3e3e to 68950a1 Compare January 10, 2026 00:28
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 68950a1 to cbfd276 Compare January 12, 2026 18:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wass3rw3rk wass3rw3rk wass3rw3rk left review comments

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Indicates a change to dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@wass3rw3rk