fix(deps): update all non-major dependencies #617

renovate · 2025-08-01T10:35:10Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	`v4.2.2` → `v4.3.1`
actions/github-script	action	minor	`v7.0.1` → `v7.1.0`
actions/setup-go	action	minor	`v5.5.0` → `v5.6.0`
alpine		digest	`4bcff63` → `2510918`
alpine	final	minor	`3.22.1` → `3.23.3`
codecov/codecov-action	action	minor	`v5.4.3` → `v5.5.2`
docker.io/library/alpine		minor	`3.22.1` → `3.23.3`
docker.io/target/vela-git-slim		minor	`v0.12.1` → `v0.13.0`
docker/login-action	action	minor	`v3.4.0` → `v3.7.0`
docker/metadata-action	action	minor	`v5.7.0` → `v5.10.0`
github.com/alecthomas/chroma/v2	require	minor	`v2.19.0` → `v2.23.1`
github.com/go-git/go-git/v5	require	patch	`v5.16.2` → `v5.16.4`
github.com/go-vela/server	require	patch	`v0.27.3-0.20260107161845-56fd3db7dbff` → `v0.27.4`
github.com/golang-jwt/jwt/v5	require	patch	`v5.3.0` → `v5.3.1`
github.com/sirupsen/logrus	require	patch	`v1.9.3` → `v1.9.4`
github.com/spf13/afero	require	minor	`v1.14.0` → `v1.15.0`
github.com/urfave/cli-docs/v3	require	minor	`v3.0.0-alpha6` → `v3.1.0`
github.com/urfave/cli/v3	require	minor	`v3.5.0` → `v3.6.2`
github/codeql-action	action	minor	`v3.29.5` → `v3.32.0`
golang.org/x/term	require	minor	`v0.34.0` → `v0.39.0`

Release Notes

actions/checkout (actions/checkout)

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

actions/github-script (actions/github-script)

`v7.1.0`

Compare Source

What's Changed

Upgrade husky to v9 by @benelan in #482
Add workflow file for publishing releases to immutable action package by @Jcambass in #485
Upgrade IA Publish by @Jcambass in #486
Fix workflow status badges by @joshmgross in #497
Update usage of actions/upload-artifact by @joshmgross in #512
Clear up package name confusion by @joshmgross in #514
Update dependencies with npm audit fix by @joshmgross in #515
Specify that the used script is JavaScript by @timotk in #478
chore: Add Dependabot for NPM and Actions by @nschonni in #472
Define permissions in workflows and update actions by @joshmgross in #531
chore: Add Dependabot for .github/actions/install-dependencies by @nschonni in #532
chore: Remove .vscode settings by @nschonni in #533
ci: Use github/setup-licensed by @nschonni in #473
make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by @iamstarkov in #508
Remove octokit README updates for v7 by @joshmgross in #557
docs: add "exec" usage examples by @neilime in #546
Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by @dependabot[bot] in #563
Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by @dependabot[bot] in #575
Clearly document passing inputs to the script by @joshmgross in #603
Update README.md by @nebuk89 in #610

New Contributors

@benelan made their first contribution in #482
@Jcambass made their first contribution in #485
@timotk made their first contribution in #478
@iamstarkov made their first contribution in #508
@neilime made their first contribution in #546
@nebuk89 made their first contribution in #610

Full Changelog: actions/github-script@v7...v7.1.0

actions/setup-go (actions/setup-go)

`v5.6.0`

Compare Source

What's Changed

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @aparnajyothi-y in #689

Full Changelog: actions/setup-go@v5...v5.6.0

codecov/codecov-action (codecov/codecov-action)

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in #1871
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in #1868
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in #1867
fix: update to use local app/ dir by @thomasrockhu-codecov in #1872
docs: fix typo in README by @datalater in #1866
Document a codecov-cli version reference example by @webknjaz in #1774
build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in #1861
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in #1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

`v5.5.0`

Compare Source

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in #1864
Pin actions/github-script by Git SHA by @martincostello in #1859
fix: check reqs exist by @joseph-sentry in #1835
fix: Typo in README by @spalmurray in #1838
docs: Refine OIDC docs by @spalmurray in #1837
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in #1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

docker/login-action (docker/login-action)

`v3.7.0`

Compare Source

`v3.6.0`

Compare Source

Add registry-auth input for raw authentication to registries by @crazy-max in #887
Bump @aws-sdk/client-ecr to 3.890.0 in #882 #890
Bump @aws-sdk/client-ecr-public to 3.890.0 in #882 #890
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #883
Bump brace-expansion from 1.1.11 to 1.1.12 in #880
Bump undici from 5.28.4 to 5.29.0 in #879
Bump tmp from 0.2.3 to 0.2.4 in #881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

`v3.5.0`

Compare Source

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in #874 #876
Bump @aws-sdk/client-ecr to 3.859.0 in #860 #878
Bump @aws-sdk/client-ecr-public to 3.859.0 in #860 #878
Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in #870
Bump form-data from 2.5.1 to 2.5.5 in #875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

docker/metadata-action (docker/metadata-action)

`v5.10.0`

Compare Source

Bump @docker/actions-toolkit from 0.66.0 to 0.68.0 in #559 #569
Bump js-yaml from 3.14.1 to 3.14.2 in #564

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

`v5.9.0`

Compare Source

Add tag-names output to return tag names without image base name by @crazy-max in #553
Bump @babel/runtime-corejs3 from 7.14.7 to 7.28.2 in #539
Bump @docker/actions-toolkit from 0.62.1 to 0.66.0 in #555
Bump brace-expansion from 1.1.11 to 1.1.12 in #540
Bump csv-parse from 5.6.0 to 6.1.0 in #532
Bump semver from 7.7.2 to 7.7.3 in in #554
Bump tmp from 0.2.3 to 0.2.5 in #541

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

`v5.8.0`

Compare Source

New is_not_default_branch global expression by @crazy-max in #535
Allow to match part of the git tag or value for semver/pep440 types by @crazy-max in #536 #537
Bump @actions/github from 6.0.0 to 6.0.1 in #523
Bump @docker/actions-toolkit from 0.56.0 to 0.62.1 in #526
Bump form-data from 2.5.1 to 2.5.5 in #533
Bump moment-timezone from 0.5.47 to 0.6.0 in #525
Bump semver from 7.7.1 to 7.7.2 in #524

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

alecthomas/chroma (github.com/alecthomas/chroma/v2)

`v2.23.1`

Compare Source

Changelog

5b4188b fix: remove AGPL licensed testdata
b9b4edc Add .env.* pattern to bash lexer (#1197)
f163adc docs: add AGENTS.md
fe6f0f3 fix: title link to Chroma

`v2.23.0`

Compare Source

Changelog

610afd8 feat: add light/dark mode toggle
1b5aad9 fix: make just commands faster
84583c6 fix: wait for WASM runtime to become ready at startup
1b6f6e7 fix: need relative import for wasm_exec.js
2a78195 fix: wasm builds got broken by the last change
f8a34ec feat: fix local dev so it falls back to server
6827057 refactor: migrate to Just
a60896f Create a lexer for Markless (#1195)

`v2.22.0`

Compare Source

Changelog

467c878 fix: reverse order of --lexer to name, then file
649c24d Add KDL lexer (#1192)
249a634 Add MoonBit lexer (#1191)
3e1f428 Update Zig lexer and example (#1189)
31592d5 fix: no text auto-sizing on webkit (#1186)
2e611c1 Add APKBUILD as filename to Bash lexer (#1187)
c1adec8 chore(deps): update all non-major dependencies (#1185)
24cc733 fix(styles): update punctuation in Aura Theme to meet style guidelines (#1184)
b0358e8 Add lexer for microcad (#1171)

`v2.21.1`

Compare Source

Changelog

0fe6941 fix(styles): use kebab-case for style name in Aura Theme variants (#1183)
2408917 chore(deps): update all non-major dependencies (#1178)
b527a28 Update lexer lox (#1175)

`v2.21.0`

Compare Source

Changelog

26a0cc1 feat(styles): add Aura Theme primary variants (#1177)
fc10487 Fix (D): multiline comments (#1173)
aec4bfc Add support for Device tree (#1172)
8ea696b chore(deps): update actions/checkout action to v6 (#1167)
a40a9d3 chore(deps): update dependency binaryen to v125 (#1168)
5486d21 chore(deps): update all non-major dependencies (#1164)
42c2aa1 Add helper script to generate supported langs markdown table (#1170)
e799618 chore(deps): update actions/checkout digest to 93cb6ef (#1163)
6b58845 Add Ashen style (#1169)
8b8574c Add Protocol Buffer Text Format Language (txtpb) (#1165)
c07ef4b chore(deps): update all non-major dependencies (#1160)
3b5a164 Add lexer for WebAssembly Text Format (#1161)
84d187e github style: background should be grey (#1159)
60e616c Add an alias for Starlark and match *.star files (#1158)
6e68adb chore(deps): update all non-major dependencies (#1157)
9297a7c chore(deps): update all non-major dependencies (#1155)
1074a2a fix(Kotlin): Number literals (#1139)
9c8da0f chore(deps): update all non-major dependencies (#1153)
fa92e28 Add file extensions for systemd units using Podman Quadlet (#1151)
57823f0 Add Kakoune lexer (#1150)
1c5b8cb chore(deps): update all non-major dependencies (#1149)
c688d92 feat: add support for C3 (#1148)
ba111b7 chore(deps): update all non-major dependencies (#1147)
b05fcfb tango: Don't underline whitespace (#1146)
daa879b chore(deps): update all non-major dependencies (#1141)
a5dc086 Add argparse to pygemnts2chroma_xml.py script (#1140)
3f991b1 chore(deps): update dependency binaryen to v124 (#1138)
0ae5ef0 chore(deps): update all non-major dependencies (#1137)
8f9e82f Update Core lexer to adjust for removed keyword enum (#1136)
685ad2c Update Core lexer to adjust for removed keyword const (#1134)
e9ffd5a fix: don't emit empty tail tokens (#1121)
4e1403e Add lexer for Ring Language (#1133)
66a939a Add lexer for Game Boy Development System ASM. (#1117)
2984b60 chore(deps): update all non-major dependencies (#1132)
260fa90 update css.xml with current properties (#1130)
70521cf Modelica language support #1122 (#1129)
09cd573 update css.xml for current grid gap properties (#1128)
339bd37 Fixed **free analysis in RPGLE (#1116)
ff52be8 chore(deps): update actions/checkout action to v5 (#1127)
254ca83 Update Core lexer to incorporate change of keyword from use to import (#1124)
2d9c0d1 chore(deps): update all non-major dependencies (#1123)
bd10a05 moar has been renamed to moor (#1125)
db626fd Analyse() now cares about case-insensitivity (#1120)

`v2.20.0`

Compare Source

Changelog

303b65d feat: improve tracing
1f48e65 fix(markdown): don't delegate to HTML lexer
ea89498 chore(deps): update ubuntu docker tag to v24 (#1104)
14227ee chore(deps): update dependency biome to v2 (#1109)
4a1dcb2 chore(deps): update dependency uv to v0.8.4 (#1115)
dca61f8 chore(deps): pin dependencies (#1098)
a21d7b8 chore: go mod tidy + update README list of languages
1ca24c9 correct lexing AS keyword for docker (#1114)
1dfa2b6 update css.xml with current properties (#1113)
5b2a4c5 feat(formatter): add writeCSSComments option (#1112)
02ff9d4 Sync Catppuccin styles (#1111)
a53c924 Create Lexer for Nu (#1110)
0e031c7 chore(deps): update all non-major dependencies (#1108)
673bbb4 chore(deps): update all non-major dependencies (#1103)
5d56970 Add uv.lock to TOML lexer (#1105)
eb9a552 fix: Dockerfile $PORT should be just a port
acaae4e feat: add Dockerfile for chromad
f3be4c6 Create lexer for Gemtext (#1102)
a0c6dff chore(deps): update all non-major dependencies (#1099)
abe0195 Create lexer for lox (#1100)
dfb2819 Fixed ObjectPascal comment issue (#1097)
908d2a3 sync catppuccin-mocha.xml with upstream (#1094)
acd21c6 add aspect-ratio property to css.xml (#1095)
55d924d chore(deps): update all non-major dependencies (#1092)
d0ad679 feat: improve Go lexer
d2f8caa refactor: simplify WASM init
fb36d31 chore: apply biome linter fixes
b69cd3d chore: add JS formatting with biome

go-git/go-git (github.com/go-git/go-git/v5)

`v5.16.4`

Compare Source

What's Changed

backport plumbing: format/idxfile, prevent panic by @swills in #1732
[backport] build: test, Fix build on Windows. by @pjbgf in #1734
build: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1742
build: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1741
build: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1743

Full Changelog: go-git/go-git@v5.16.3...v5.16.4

`v5.16.3`

Compare Source

What's Changed

internal: Expand regex to fix build [5.x] by @baloo in #1644
build: raise timeouts for windows CI tests and disable CIFuzz [5.x] by @baloo in #1646
plumbing: support commits extra headers, support jujutsu signed commit [5.x] by @baloo in #1633

Full Changelog: go-git/go-git@v5.16.2...v5.16.3

go-vela/server (github.com/go-vela/server)

`v0.27.4`

Compare Source

What's Changed

fix(api): regen install token if expired for status update by @ecrupper in #1375
chore(deps): update all non major deps for v0.27.4 patch release by @ecrupper in #1376

Full Changelog: go-vela/server@v0.27.3...v0.27.4

golang-jwt/jwt (github.com/golang-jwt/jwt/v5)

`v5.3.1`

Compare Source

What's Changed

🔐 Features

Add spellcheck Github action to catch common spelling mistakes by @equalsgibson in #458
Add WithNotBeforeRequired parser option and add test coverage by @equalsgibson in #456
Update godoc example func to properly refer to NewWithClaims() by @equalsgibson in #459
Update github workflows by @mfridman in #462
Additional test for CustomClaims that validates unmarshalling behaviour by @equalsgibson in #457
Fix early file close in jwt cli by @mfridman in #472
Add TPM signature reference by @salrashid123 in #473
Remove misleading ParserOptions documentation in #484
Save signature to Token struct after successful signing by @EgorSheff in #417
Set token.Signature in ParseUnverified by @slickwilli in #414

👒 Dependencies

Bump crate-ci/typos from 1.34.0 to 1.35.3 by @dependabot[bot] in #461
Bump crate-ci/typos from 1.35.4 to 1.36.2 by @dependabot[bot] in #470
Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #478
Bump crate-ci/typos from 1.36.2 to 1.39.0 by @dependabot[bot] in #480
Bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #481
Bump actions/setup-go from 5 to 6 by @dependabot[bot] in #469
Bump crate-ci/typos from 1.39.0 to 1.40.0 by @dependabot[bot] in #488
Bump actions/checkout from 5 to 6 by @dependabot[bot] in #487
Bump crate-ci/typos from 1.40.0 to 1.41.0 by @dependabot[bot] in #490
Bump crate-ci/typos from 1.41.0 to 1.42.1 by @dependabot[bot] in #492

New Contributors

@equalsgibson made their first contribution in #458
@salrashid123 made their first contribution in #473
@EgorSheff made their first contribution in #417
@slickwilli made their first contribution in #414

Full Changelog: golang-jwt/jwt@v5.3.0...v5.3.1

sirupsen/logrus (github.com/sirupsen/logrus)

`v1.9.4`

Compare Source

Notable changes

go.mod: update minimum supported go version to v1.17 #1460
go.mod: bump up dependencies #1460
Touch-up godoc and add "doc" links.
README: fix links, grammar, and update examples.
Add GNU/Hurd support #1364
Add WASI wasip1 support #1388
Remove uses of deprecated ioutil package #1472
CI: update actions and golangci-lint #1459
CI: remove appveyor, add macOS #1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

spf13/afero (github.com/spf13/afero)

`v1.15.0`

Compare Source

What's Changed

Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by @dependabot[bot] in #479
Lint by @sagikazarmark in #492
build(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by @dependabot[bot] in #494
build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @dependabot[bot] in #493
Bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot[bot] in #480
build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in #496
support aliyun oss storage with third-party link by @messikiller in #491
build(deps): bump github/codeql-action from 3.28.16 to 3.28.17 by @dependabot[bot] in #497
chore: update x/test by @sagikazarmark in #502
build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot[bot] in #503
build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.1 by @dependabot[bot] in #505
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot[bot] in #506
fix(gcsfs): update object not exist check logic by @ahkui in #485
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in #508
build(deps): bump github/codeql-action from 3.28.18 to 3.29.4 by @dependabot[bot] in #519
build(deps): bump github/codeql-action from 3.29.4 to 3.29.7 by @dependabot[bot] in #524
build(deps): bump github/codeql-action from 3.29.7 to 3.30.1 by @dependabot[bot] in #537
build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #536
build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.3 by @dependabot[bot] in #533
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by [@dependabot](https://redirect.github.com

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2025-08-01T10:38:50Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.84%. Comparing base (70c52a9) to head (aa6f0af).

❌ Your project check has failed because the head coverage (70.84%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #617   +/-   ##
=======================================
  Coverage   70.84%   70.84%           
=======================================
  Files         173      173           
  Lines        4662     4662           
=======================================
  Hits         3303     3303           
  Misses       1055     1055           
  Partials      304      304

Files with missing lines	Coverage Δ
command/pipeline/exec.go	`0.00% <ø> (ø)`
command/pipeline/validate.go	`64.28% <ø> (ø)`

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate · 2025-09-08T05:03:23Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

14 additional dependencies were updated

Details:

Package	Change
`github.com/bytedance/sonic`	`v1.13.3` -> `v1.14.0`
`github.com/bytedance/sonic/loader`	`v0.2.4` -> `v0.3.0`
`github.com/cloudwego/base64x`	`v0.1.5` -> `v0.1.6`
`github.com/docker/docker`	`v28.3.3+incompatible` -> `v28.5.1+incompatible`
`github.com/go-playground/validator/v10`	`v10.26.0` -> `v10.27.0`
`github.com/klauspost/cpuid/v2`	`v2.2.11` -> `v2.3.0`
`golang.org/x/arch`	`v0.18.0` -> `v0.20.0`
`golang.org/x/net`	`v0.42.0` -> `v0.43.0`
`golang.org/x/sync`	`v0.16.0` -> `v0.17.0`
`golang.org/x/sys`	`v0.35.0` -> `v0.39.0`
`google.golang.org/protobuf`	`v1.36.6` -> `v1.36.9`
`k8s.io/api`	`v0.34.0` -> `v0.34.1`
`k8s.io/apimachinery`	`v0.34.0` -> `v0.34.1`
`k8s.io/client-go`	`v0.34.0` -> `v0.34.1`

renovate · 2025-12-10T16:00:53Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

47 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.4` -> `1.25.5`
`dario.cat/mergo`	`v1.0.1` -> `v1.0.2`
`github.com/bytedance/sonic`	`v1.13.3` -> `v1.14.2`
`github.com/bytedance/sonic/loader`	`v0.2.4` -> `v0.4.0`
`github.com/cloudwego/base64x`	`v0.1.5` -> `v0.1.6`
`github.com/docker/docker`	`v28.3.3+incompatible` -> `v28.5.1+incompatible`
`github.com/gabriel-vasile/mimetype`	`v1.4.9` -> `v1.4.11`
`github.com/go-playground/validator/v10`	`v10.26.0` -> `v10.29.0`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.27.1` -> `v2.27.3`
`github.com/jackc/pgx/v5`	`v5.7.4` -> `v5.7.6`
`github.com/klauspost/cpuid/v2`	`v2.2.11` -> `v2.3.0`
`github.com/lestrrat-go/httprc/v3`	`v3.0.0` -> `v3.0.2`
`github.com/lestrrat-go/jwx/v3`	`v3.0.10` -> `v3.0.12`
`github.com/mailru/easyjson`	`v0.9.0` -> `v0.9.1`
`github.com/mattn/go-sqlite3`	`v1.14.28` -> `v1.14.32`
`github.com/segmentio/asm`	`v1.2.0` -> `v1.2.1`
`github.com/spf13/cast`	`v1.8.0` -> `v1.10.0`
`github.com/ugorji/go/codec`	`v1.3.0` -> `v1.3.1`
`go.opentelemetry.io/auto/sdk`	`v1.1.0` -> `v1.2.1`
`go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace`	`v0.62.0` -> `v0.64.0`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.62.0` -> `v0.64.0`
`go.opentelemetry.io/otel`	`v1.37.0` -> `v1.39.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.37.0` -> `v1.39.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`	`v1.37.0` -> `v1.39.0`
`go.opentelemetry.io/otel/metric`	`v1.37.0` -> `v1.39.0`
`go.opentelemetry.io/otel/sdk`	`v1.37.0` -> `v1.39.0`
`go.opentelemetry.io/otel/trace`	`v1.37.0` -> `v1.39.0`
`go.opentelemetry.io/proto/otlp`	`v1.7.0` -> `v1.9.0`
`go.starlark.net`	`v0.0.0-20250826212936-2a4f36945129` -> `v0.0.0-20251109183026-be02852a5e1f`
`go.yaml.in/yaml/v2`	`v2.4.2` -> `v2.4.3`
`golang.org/x/arch`	`v0.18.0` -> `v0.23.0`
`golang.org/x/crypto`	`v0.41.0` -> `v0.46.0`
`golang.org/x/net`	`v0.42.0` -> `v0.48.0`
`golang.org/x/oauth2`	`v0.30.0` -> `v0.34.0`
`golang.org/x/sync`	`v0.16.0` -> `v0.19.0`
`golang.org/x/sys`	`v0.35.0` -> `v0.40.0`
`golang.org/x/text`	`v0.28.0` -> `v0.32.0`
`golang.org/x/time`	`v0.12.0` -> `v0.14.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250603155806-513f23925822` -> `v0.0.0-20251202230838-ff82c1b0f217`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250603155806-513f23925822` -> `v0.0.0-20251202230838-ff82c1b0f217`
`google.golang.org/grpc`	`v1.73.0` -> `v1.77.0`
`google.golang.org/protobuf`	`v1.36.6` -> `v1.36.11`
`gorm.io/gorm`	`v1.30.2` -> `v1.31.1`
`k8s.io/api`	`v0.34.0` -> `v0.34.1`
`k8s.io/apimachinery`	`v0.34.0` -> `v0.34.3`
`k8s.io/client-go`	`v0.34.0` -> `v0.34.1`
`k8s.io/utils`	`v0.0.0-20250604170112-4c0f3b243397` -> `v0.0.0-20251002143259-bc988d571ff4`
`sigs.k8s.io/json`	`v0.0.0-20241014173422-cfa47c3a1cc8` -> `v0.0.0-20250730193827-2d320260d730`

renovate · 2026-01-21T21:00:28Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/go-vela/server@v0.27.4 requires go >= 1.25.5; switching to go1.25.6
go: downloading go1.25.6 (linux/amd64)
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/urfave/cli/v3 v3.6.2
go: downloading github.com/go-vela/server v0.27.4
go: downloading github.com/dustin/go-humanize v1.0.1
go: downloading github.com/go-vela/sdk-go v0.27.2-0.20251230154052-e1dae5f07d93
go: downloading github.com/gosuri/uitable v0.0.4
go: downloading github.com/spf13/afero v1.15.0
go: downloading go.yaml.in/yaml/v3 v3.0.4
go: downloading github.com/urfave/cli-docs/v3 v3.1.0
go: downloading github.com/cli/browser v1.3.0
go: downloading github.com/manifoldco/promptui v0.9.0
go: downloading github.com/go-vela/worker v0.27.4-0.20260121151236-120915fe35a9
go: downloading github.com/gin-gonic/gin v1.11.0
go: downloading github.com/joho/godotenv v1.5.1
go: downloading github.com/chainguard-dev/git-urls v1.0.2
go: downloading github.com/go-git/go-git/v5 v5.16.4
go: downloading github.com/alecthomas/chroma/v2 v2.23.1
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading golang.org/x/term v0.39.0
go: downloading github.com/golang-jwt/jwt/v5 v5.3.1
go: downloading github.com/Masterminds/semver/v3 v3.4.0
go: downloading golang.org/x/sys v0.40.0
go: downloading github.com/lestrrat-go/jwx/v3 v3.0.12
go: downloading github.com/google/go-querystring v1.1.0
go: downloading github.com/ghodss/yaml v1.0.0
go: downloading github.com/fatih/color v1.16.0
go: downloading golang.org/x/text v0.32.0
go: downloading github.com/invopop/jsonschema v0.13.0
go: downloading github.com/cpuguy83/go-md2man/v2 v2.0.5
go: downloading github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e
go: downloading github.com/drone/envsubst v1.0.3
go: downloading github.com/expr-lang/expr v1.17.6
go: downloading github.com/docker/docker v28.5.1+incompatible
go: downloading k8s.io/api v0.34.1
go: downloading github.com/hashicorp/go-cleanhttp v0.5.2
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/hashicorp/go-retryablehttp v0.7.8
go: downloading github.com/gin-contrib/sse v1.1.0
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/quic-go/quic-go v0.57.1
go: downloading golang.org/x/net v0.48.0
go: downloading github.com/microcosm-cc/bluemonday v1.0.27
go: downloading dario.cat/mergo v1.0.2
go: downloading github.com/ProtonMail/go-crypto v1.1.6
go: downloading github.com/go-git/go-billy/v5 v5.6.2
go: downloading github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3
go: downloading github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0
go: downloading github.com/lestrrat-go/blackmagic v1.0.4
go: downloading github.com/lestrrat-go/httprc/v3 v3.0.2
go: downloading github.com/lestrrat-go/option/v2 v2.0.0
go: downloading github.com/lestrrat-go/option v1.0.1
go: downloading github.com/coreos/go-semver v0.3.1
go: downloading gopkg.in/yaml.v2 v2.4.0
go: downloading github.com/mattn/go-colorable v0.1.13
go: downloading github.com/mattn/go-runewidth v0.0.13
go: downloading github.com/wk8/go-ordered-map/v2 v2.1.8
go: downloading github.com/russross/blackfriday/v2 v2.1.0
go: downloading github.com/uptrace/opentelemetry-go-extra/otelgorm v0.3.2
go: downloading gorm.io/driver/postgres v1.6.0
go: downloading gorm.io/driver/sqlite v1.6.0
go: downloading gorm.io/gorm v1.31.1
go: downloading github.com/buildkite/yaml v0.0.0-20181016232759-0caa5f0796e3
go: downloading github.com/hashicorp/go-envparse v0.1.0
go: downloading golang.org/x/sync v0.19.0
go: downloading github.com/containerd/containerd/v2 v2.1.3
go: downloading github.com/containerd/log v0.1.0
go: downloading github.com/containerd/errdefs v1.0.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading k8s.io/apimachinery v0.34.3
go: downloading k8s.io/client-go v0.34.1
go: downloading sigs.k8s.io/yaml v1.6.0
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading github.com/google/go-github/v80 v80.0.0
go: downloading github.com/goware/urlx v0.3.2
go: downloading golang.org/x/oauth2 v0.34.0
go: downloading github.com/Masterminds/sprig/v3 v3.3.0
go: downloading go.starlark.net v0.0.0-20251109183026-be02852a5e1f
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/go-playground/validator/v10 v10.29.0
go: downloading github.com/goccy/go-yaml v1.19.0
go: downloading github.com/pelletier/go-toml/v2 v2.2.4
go: downloading github.com/ugorji/go/codec v1.3.1
go: downloading google.golang.org/protobuf v1.36.11
go: downloading github.com/bytedance/sonic v1.14.2
go: downloading github.com/goccy/go-json v0.10.5
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/quic-go/qpack v0.6.0
go: downloading github.com/aymerick/douceur v0.2.0
go: downloading golang.org/x/crypto v0.46.0
go: downloading github.com/cyphar/filepath-securejoin v0.4.1
go: downloading github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376
go: downloading github.com/pjbgf/sha1cd v0.3.2
go: downloading github.com/emirpasic/gods v1.18.1
go: downloading github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99
go: downloading github.com/dlclark/regexp2 v1.11.5
go: downloading github.com/lestrrat-go/httpcc v1.0.1
go: downloading github.com/segmentio/asm v1.2.1
go: downloading github.com/rivo/uniseg v0.2.0
go: downloading github.com/bahlo/generic-list-go v0.2.0
go: downloading github.com/buger/jsonparser v1.1.1
go: downloading github.com/mailru/easyjson v0.9.1
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading go.opentelemetry.io/otel v1.39.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.39.0
go: downloading go.opentelemetry.io/otel/sdk v1.39.0
go: downloading go.opentelemetry.io/otel/trace v1.39.0
go: downloading golang.org/x/time v0.14.0
go: downloading github.com/uptrace/opentelemetry-go-extra/otelsql v0.3.2
go: downloading github.com/jackc/pgx/v5 v5.7.6
go: downloading github.com/mattn/go-sqlite3 v1.14.32
go: downloading github.com/jinzhu/now v1.1.5
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.64.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0
go: downloading github.com/docker/go-connections v0.4.0
go: downloading github.com/moby/docker-image-spec v1.3.1
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/Microsoft/go-winio v0.6.2
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/pkg/errors v0.9.1
go: downloading k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
go: downloading sigs.k8s.io/randfill v1.0.0
go: downloading k8s.io/klog/v2 v2.130.1
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading github.com/spf13/pflag v1.0.6
go: downloading go.yaml.in/yaml/v2 v2.4.3
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.0
go: downloading github.com/PuerkitoBio/purell v1.2.1
go: downloading github.com/Masterminds/goutils v1.1.1
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/huandu/xstrings v1.5.0
go: downloading github.com/mitchellh/copystructure v1.2.0
go: downloading github.com/shopspring/decimal v1.4.0
go: downloading github.com/spf13/cast v1.10.0
go: downloading github.com/gabriel-vasile/mimetype v1.4.11
go: downloading github.com/go-playground/universal-translator v0.18.1
go: downloading github.com/leodido/go-urn v1.4.0
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
go: downloading github.com/gorilla/css v1.0.1
go: downloading github.com/cloudflare/circl v1.6.1
go: downloading gopkg.in/warnings.v0 v0.1.2
go: downloading github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8
go: downloading github.com/kevinburke/ssh_config v1.2.0
go: downloading github.com/skeema/knownhosts v1.3.1
go: downloading github.com/xanzy/ssh-agent v0.3.3
go: downloading github.com/adhocore/gronx v1.19.6
go: downloading github.com/lib/pq v1.10.9
go: downloading github.com/go-logr/logr v1.4.3
go: downloading go.opentelemetry.io/otel/metric v1.39.0
go: downloading go.opentelemetry.io/proto/otlp v1.9.0
go: downloading github.com/jackc/pgpassfile v1.0.0
go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
go: downloading github.com/jinzhu/inflection v1.0.0
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading github.com/google/gnostic-models v0.7.0
go: downloading gopkg.in/evanphx/json-patch.v4 v4.12.0
go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
go: downloading github.com/fxamacker/cbor/v2 v2.9.0
go: downloading github.com/google/go-cmp v0.7.0
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading github.com/mitchellh/reflectwalk v1.0.2
go: downloading github.com/go-playground/locales v0.14.1
go: downloading github.com/bytedance/gopkg v0.1.3
go: downloading github.com/cloudwego/base64x v0.1.6
go: downloading golang.org/x/arch v0.23.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading google.golang.org/grpc v1.77.0
go: downloading github.com/cenkalti/backoff/v5 v5.0.3
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3
go: downloading github.com/jackc/puddle/v2 v2.2.2
go: downloading k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b
go: downloading github.com/x448/float16 v0.8.4
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217
go: downloading github.com/go-openapi/swag v0.23.0
go: downloading github.com/go-openapi/jsonreference v0.20.2
go: downloading github.com/klauspost/cpuid/v2 v2.3.0
go: downloading github.com/bytedance/sonic/loader v0.4.0
go: downloading github.com/twitchyliquid64/golang-asm v0.15.1
go: downloading github.com/emicklei/go-restful/v3 v3.12.2
go: downloading github.com/go-openapi/jsonpointer v0.21.0
go: downloading github.com/josharian/intern v1.0.0
go: github.com/go-vela/cli/action/pipeline imports
	github.com/go-vela/server/compiler/types/yaml: cannot find module providing package github.com/go-vela/server/compiler/types/yaml

renovate bot added the dependencies Indicates a change to dependencies label Aug 1, 2025

renovate bot requested a review from a team as a code owner August 1, 2025 10:35

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 7a34212 to a431981 Compare August 4, 2025 11:45

renovate bot changed the title ~~chore(deps): update docker/metadata-action action to v5.8.0~~ fix(deps): update all non-major dependencies Aug 4, 2025

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 6 times, most recently from 0fd97be to ea8972d Compare August 11, 2025 14:27

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 43896be to 66ad1b7 Compare August 18, 2025 13:25

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 0bf66b6 to 6a853eb Compare August 21, 2025 18:06

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 2ca2135 to 3a18b40 Compare August 29, 2025 19:59

wass3rw3rk previously approved these changes Aug 29, 2025

View reviewed changes

renovate bot dismissed wass3rw3rk’s stale review via 8c23321 September 7, 2025 23:34

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 8c23321 to 68b5dec Compare September 8, 2025 05:03

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from b2ce7ee to a1e8c1b Compare September 10, 2025 18:10

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 4b148dc to 467ca38 Compare September 25, 2025 10:45

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 5338287 to af564f2 Compare December 3, 2025 21:30

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 7983da6 to 880f1b6 Compare December 10, 2025 03:16

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 8 times, most recently from c3106d8 to ab1684f Compare December 18, 2025 06:30

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from ab1684f to 1ce5a6f Compare December 31, 2025 13:11

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 68950a1 to cbfd276 Compare January 12, 2026 18:25

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from aa6f0af to 439f56b Compare January 21, 2026 21:00

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 8e6f0e1 to d7a77e9 Compare January 27, 2026 10:01

fix(deps): update all non-major dependencies

fa2d3b7

renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from d7a77e9 to fa2d3b7 Compare January 29, 2026 03:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies #617

fix(deps): update all non-major dependencies #617

Uh oh!

renovate bot commented Aug 1, 2025 •

edited

Loading

Uh oh!

codecov bot commented Aug 1, 2025 •

edited

Loading

Uh oh!

renovate bot commented Sep 8, 2025 •

edited

Loading

Uh oh!

renovate bot commented Dec 10, 2025 •

edited

Loading

Uh oh!

renovate bot commented Jan 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

fix(deps): update all non-major dependencies #617

Are you sure you want to change the base?

fix(deps): update all non-major dependencies #617

Uh oh!

Conversation

renovate bot commented Aug 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

Changelog

Changelog

Changelog

Changelog

Changelog

Changelog

What's Changed

What's Changed

What's Changed

What's Changed

🔐 Features

👒 Dependencies

New Contributors

Notable changes

What's Changed

Configuration

Uh oh!

codecov bot commented Aug 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

renovate bot commented Sep 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

Uh oh!

renovate bot commented Dec 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

renovate bot commented Jan 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Aug 1, 2025 •

edited

Loading

codecov bot commented Aug 1, 2025 •

edited

Loading

renovate bot commented Sep 8, 2025 •

edited

Loading

renovate bot commented Dec 10, 2025 •

edited

Loading

renovate bot commented Jan 21, 2026 •

edited

Loading