Skip to content

Conversation

@renovate-bot
Copy link
Collaborator

@renovate-bot renovate-bot commented Oct 16, 2025

This PR contains the following updates:

Package Type Update Change Age Confidence
lockFileMaintenance All locks refreshed
cloud.google.com/go/secretmanager require minor v1.15.0 -> v1.16.0 age confidence
gcr.io/google.com/cloudsdktool/google-cloud-cli final digest cdac858 -> 4cc9437
github.com/go-git/go-git/v5 require patch v5.16.2 -> v5.16.3 age confidence
github.com/ossf/osv-schema/bindings/go require digest f6ae0b6 -> a45f3f3 age confidence
golang stage patch 1.25.1-alpine -> 1.25.3-alpine age confidence
golang.org/x/exp require digest 8b4c13b -> a4bb9ff age confidence
google.golang.org/api require minor v0.247.0 -> v0.253.0 age confidence
pylint (changelog) dev patch 3.3.8 -> 3.3.9 age confidence

🔧 This Pull Request updates lock files to use the latest dependency versions.


Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.16.3

Compare Source

What's Changed

  • internal: Expand regex to fix build [5.x] by @​baloo in #​1644
  • build: raise timeouts for windows CI tests and disable CIFuzz [5.x] by @​baloo in #​1646
  • plumbing: support commits extra headers, support jujutsu signed commit [5.x] by @​baloo in #​1633

Full Changelog: go-git/go-git@v5.16.2...v5.16.3

googleapis/google-api-go-client (google.golang.org/api)

v0.253.0

Compare Source

Features

v0.252.0

Compare Source

Features

v0.251.0

Compare Source

Features

v0.250.0

Compare Source

Features

v0.249.0

Compare Source

Features

v0.248.0

Compare Source

Features
pylint-dev/pylint (pylint)

v3.3.9

Compare Source

What's new in Pylint 3.3.9?

Release date: 2025-10-05

False Positives Fixed

  • Fix used-before-assignment for PEP 695 type aliases and parameters.

    Closes #​9815

  • No longer flag undeprecated functions in importlib.resources as deprecated.

    Closes #​10593

  • Fix false positive inconsistent-return-statements when using quit() or exit() functions.

    Closes #​10508

  • Fix false positive undefined-variable (E0602) for for-loop variable shadowing patterns like for item in item: when the variable was previously defined.

    Closes #​10562

Other Bug Fixes

  • Fixed crash in 'unnecessary-list-index-lookup' when starting an enumeration using
    minus the length of an iterable inside a dict comprehension when the len call was only
    made in this dict comprehension, and not elsewhere. Also changed the approach,
    to use inference in all cases but the simple ones, so we don't have to fix crashes
    one by one for arbitrarily complex expressions in enumerate.

    Closes #​10510


Configuration

📅 Schedule: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate bot added the dependencies Pull requests that update a dependency file label Oct 16, 2025
@forking-renovate
Copy link

forking-renovate bot commented Oct 16, 2025

ℹ Artifact update notice

File name: vulnfeeds/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 19 additional dependencies were updated

Details:

Package Change
cloud.google.com/go/auth v0.16.5 -> v0.17.0
cloud.google.com/go/compute/metadata v0.8.0 -> v0.9.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.27.0 -> v1.29.0
github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.2
go.opentelemetry.io/otel v1.36.0 -> v1.37.0
go.opentelemetry.io/otel/metric v1.36.0 -> v1.37.0
go.opentelemetry.io/otel/sdk v1.36.0 -> v1.37.0
go.opentelemetry.io/otel/sdk/metric v1.36.0 -> v1.37.0
go.opentelemetry.io/otel/trace v1.36.0 -> v1.37.0
golang.org/x/crypto v0.41.0 -> v0.43.0
golang.org/x/net v0.43.0 -> v0.46.0
golang.org/x/oauth2 v0.30.0 -> v0.32.0
golang.org/x/sync v0.16.0 -> v0.17.0
golang.org/x/sys v0.35.0 -> v0.37.0
golang.org/x/text v0.28.0 -> v0.30.0
golang.org/x/time v0.12.0 -> v0.14.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20250818200422-3122310a409c -> v0.0.0-20251014184007-4626949a642f
google.golang.org/grpc v1.74.3 -> v1.76.0
google.golang.org/protobuf v1.36.7 -> v1.36.10

@renovate-bot renovate-bot force-pushed the renovate/vulnfeeds branch 9 times, most recently from cfb858c to 52deb1f Compare October 24, 2025 02:04
@cuixq cuixq self-assigned this Oct 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants