Update all non-major dependencies by renovate[bot] · Pull Request #76 · Moulick/debug-image

renovate · 2026-09-08T16:03:24Z

This PR contains the following updates:

Package	Type	Update	Change
aws-cli		minor	`2.35.13` → `2.36.41`
docker (source)		minor	`29.6.1` → `29.8.0`
ghcr.io/astral-sh/uv	final	minor	`0.11` → `0.12`
grpcurl		patch	`v1.9.3` → `v1.9.4`
helm		patch	`v4.2.2` → `v4.2.4`
kubectl		minor	`v1.36.2` → `v1.37.0`
libserdes		patch	`v8.3.0` → `v8.3.1`
oha		minor	`v1.14.0` → `v1.16.0`
yq		patch	`v4.53.3` → `v4.53.6`

Release Notes

aws/aws-cli (aws-cli)

astral-sh/uv (ghcr.io/astral-sh/uv)

`v0.12`

Released on 2026-09-04.

Enhancements

Attempt to revoke short-lived PyPI trusted-publishing tokens after uv publish completes, including when publishing fails (#21423)

Preview features

Omit exclude-newer-package settings for packages outside the resolution from uv.lock with the missing-exclude-newer-package-lock preview feature (#21455)
Show terminal dependency cycles in uv tree --invert output (#21404)

Performance

Speed up locking large workspaces with conflicts by excluding unrelated extras and dependency groups from conflict simplification (#21399)
Speed up uv publish by hashing each artifact in a single blocking task and reusing the buffer across reads (#21389)

Bug fixes

Prevent --locked from failing when exclude-newer-package settings differ only for packages outside the resolution (#21454)
Allow uv lock --check to reuse a lockfile when an absolute exclude-newer cutoff is moved later (#19571)
Allow uv lock --check to reuse a lockfile when a package-specific exclude-newer cutoff is disabled (#21450)
Require an explicit --name when uv init would infer a project name reserved for a Python interpreter (#21395)
Write package-specific exclude-newer cutoffs to uv.lock in a deterministic order (#21453)

fullstorydev/grpcurl (grpcurl)

`v1.9.4`

Compare Source

What's Changed

Dependencies

Bump golang.org/x/net from 0.33.0 to 0.36.0 in the go_modules group by @dependabot[bot] in #511
Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @dependabot[bot] in #515
Bump golang.org/x/net from 0.36.0 to 0.38.0 in the go_modules group by @dependabot[bot] in #517
Bump golang.org/x/oauth2 from 0.14.0 to 0.27.0 in the go_modules group by @dependabot[bot] in #520
Bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @dependabot[bot] in #525
Bump google.golang.org/protobuf from 1.36.7 to 1.36.8 by @dependabot[bot] in #527
Bump google.golang.org/protobuf from 1.36.8 to 1.36.10 by @dependabot[bot] in #535
Bump github.com/jhump/protoreflect from 1.17.0 to 1.18.0 by @dependabot[bot] in #545
Bump golang.org/x/net from 0.49.0 to 0.55.0 in the go_modules group across 1 directory by @dependabot[bot] in #569
Bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by @dependabot[bot] in #576

Changes

snap by @PietroPasotti in #512
Set GOWORK=off and GOPATHS=-trimpath when building by @gpassini in #513
Restore Unix socket support by @zhyuri in #498
Snap: strict confinement, stable grade and docs by @PietroPasotti in #514
test: Update TLS error checks for Go 1.25 compatibility by @mikelolasagasti in #522
feat: add arm snap build by @PietroPasotti in #534
refactor: use slices.Contains to simplify code by @vastonus in #536
refactor: use strings.Builder to improve performance by @rifeplight in #537
update lead version to Go 1.25 by @dragonsinth in #543
Add Windows Arm64 release by @kpreisser in #542
refactor: remove obsolete // +build tag by @cuoguojida in #560
Bump google.golang.org/grpc to v1.79.3 (CVE-2026-33186 + 3 transitive CVEs) by @shreyas-sriram in #559
Bump google.golang.org/grpc from 1.66.2 to 1.80.0 by @olegbonar in #556
Add support for TLS 1.3 by @bcleenders in #564
Fast-fail on connection errors by @bcleenders in #567
fix xds credentials being silently ignored by @erikjoh in #566
docs: fix typo "foor" -> "foo" in README example by @maxtaran2010 in #571
Fix flaky TLS test by waiting for dial outcome before closing connection by @bcleenders in #572
Fix path traversal attack in -proto-out-dir by @bcleenders in #573
remove old SA1019 lint:ignore by @dragonsinth in #574
go mod update by @dragonsinth in #578
remove old SA1019 lint:ignore by @dragonsinth in #577
fix: preserve wrapped request and descriptor errors by @ginavalent in #579
update release to cut and upload via gh actions by @SamKirsch10 in #580

New Contributors

@PietroPasotti made their first contribution in #512
@zhyuri made their first contribution in #498
@mikelolasagasti made their first contribution in #522
@vastonus made their first contribution in #536
@rifeplight made their first contribution in #537
@kpreisser made their first contribution in #542
@cuoguojida made their first contribution in #560
@shreyas-sriram made their first contribution in #559
@olegbonar made their first contribution in #556
@bcleenders made their first contribution in #564
@maxtaran2010 made their first contribution in #571
@ginavalent made their first contribution in #579
@SamKirsch10 made their first contribution in #580

Full Changelog: fullstorydev/grpcurl@v1.9.3...v1.9.4

helm/helm (helm)

`v4.2.4`: Helm v4.2.4

Compare Source

Helm v4.2.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

fix: Improve error reporting for helm template --debug with --show-only- #31185 by @kyokuping
fix: fetch logs from all containers in test pods- #32099 by @SebTardif
fix(provenance): check error return in Digest and encodeRelease- #32136 by @SebTardif
fix panic on repeated IsReachable calls- #32184 by @atkrad
fix: set [pull,push] scope when helm push to a registry(use token auth) - v4- #31211 by @kimsungmin1
Fix missing conflict retry with server-side apply- #32088 by @Kajot-dev
Properly format the extra field in gzipped packages- #31884 by @ouillie
Fix vanishing empty lines- #32327 by @matheuscscp
fix: pass registry client to downloader.Manager in upgrade- #32400 by @SetagGnaw
chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1- for GO-2026-6061 #32450
fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158- #32521 by @TerryHowe

Installation and Upgrading

Download Helm v4.2.4. The common platform binaries are here:

MacOS amd64 (checksum / 6c163d687ca03c3b5c01928e53bbbcf9518278f47ce7a2f249a5a08e8bdaa2bc)
MacOS arm64 (checksum / d747eb4e28bd2727173d15b759fa0a17822291ec09db7ced3d55af290a3661a2)
Linux amd64 (checksum / c306b46f719b0a4da32d0f78ee21bf90ce8d602f15b22ab753f0674d1670a7f3)
Linux arm (checksum / 894e901f7daaf9b458baad7b5c685bfeef49070d7d53f99687bd5846a6c13639)
Linux arm64 (checksum / 564de2191b881e9f71b5606b25345821ea1682f06ab90499d3ab22b530176da1)
Linux i386 (checksum / 45297aeac0c65173a89e8de832997f952ba5115c2db09b2e3f2c23a601e70583)
Linux loong64 (checksum / faafbfecc1a06196e650c3ce0c74d5ac32cb1c0c0a855fa76e59dd100cb8d4c4)
Linux ppc64le (checksum / 5c00073e9d493de201384bb7eb19d60615bd7c39db52148473e8ce6da84bc70a)
Linux s390x (checksum / 5396a35fca5fa46e5614140363f389ce66f96886c1b25f256d9e3028299422fa)
Linux riscv64 (checksum / d8532a3524ca842887b15ab794377dc9c8ced8f26264c84171b4b0aafff05411)
Windows amd64 (checksum / e94d83a4706fd82078c98dade2079fa9d9680c1c2bfb93bfc304ee6bc2412a32)
Windows arm64 (checksum / dbe8b49ea9877abe3d77354a792efb01920da9f65a492fcb8b4fce4e08bbae8f)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

Minimal fix to build failure from #31211. 3900f43 (Scott Rigby)
fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 (#32521) f7c6e8f (Terry Howe)
chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 035a2c3 (dependabot[bot])
fix: pass registry client to downloader.Manager in upgrade f76a5f4 (Gates Wang)
Apply suggestions 5a7c6c7 (Will Noble)
Properly format the extra field in gzipped packages 2281848 (Will Noble)
Fix missing conflict retry with server-side apply (#32088) 2c979a1 (Jakub Jaruszewski)
Potential fix for pull request finding 2bd2c66 (kimsungmin1)
fix(registry): resolve golangci-lint issues in token-auth tests 183a540 (kimsm28)
chore: go mod tidy after rebase on main 08d8da1 (kimsm28)
fix(registry): use plain-http registry in token-auth scope test 9655b5a (kimsm28)
Update pkg/registry/client.go 430dfac (Terry Howe)
test: improve client_scope_test.go to avoid data races and brittle assertions 9569605 (kimsm28)
fix typos in withScopeHint function comment 63f2b68 (kimsm28)
fix registry test failures by adjusting DockerRegistryHost and auth server listener management f7488c0 (kimsm28)
fix variable naming requestUrl -> requestURL 8fe78fb (kimsm28)
fix typo, remove unnecessary code, fix to avoid to use the assertion in http hanlder d0670d2 (kimsm28)
change suite.Nil, suite.NotNill to more proper function(suite.NoError, suite.Error) 804256e (kimsungmin1)
change client_scope_test.go to use httptest d79bceb (kimsungmin1)
fix typo d34fcd9 (kimsungmin1)
remove freeport dependency 9fbd190 (kimsungmin1)
add newline in license header 9275661 (kimsungmin1)
fix scope when helm push to a registry that use token auth fef91f3 (kimsungmin1)
fix panic on repeated IsReachable calls e89ce68 (Mohammad Abdolirad)
fix(provenance): check error return in Digest ff1ac83 (Sebastien Tardif)
fix: address review feedback 4b4dedb (Sebastien Tardif)
fix: fetch logs from all containers in test pods 7c80103 (Sebastien Tardif)
chore: rename savedErr to clear its specific purpose ecc9cd2 (Jeaeun Kim)
chore: fix lint f6211ba (Jeaeun Kim)
chore: store err separately for clarity 3507ea5 (Jeaeun Kim)
chore: Improve error reporting for helm template --debug with --show-only 211ffae (Jeaeun Kim)
Address review comments 51a9837 (Matheus Pimenta)
Fix vanishing empty lines 83a8b70 (Matheus Pimenta)

Full Changelog: helm/helm@v4.2.3...v4.2.4

`v4.2.3`

Compare Source

kubernetes/kubernetes (kubectl)

`v1.37.0`

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

`v1.36.4`

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

`v1.36.3`

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

confluentinc/libserdes (libserdes)

`v8.3.1`

Compare Source

hatoo/oha (oha)

`v1.16.0`

Compare Source

What's Changed

Avoid TenSeconds/TenMinutes time scales in summary output by @hatoo in #891
Tune HTTP/3 client performance by @hatoo in #892
Add --worker-threads flag to set the runtime thread count by @ChrisJr404 in #893
Update deps by @hatoo in #894

New Contributors

@ChrisJr404 made their first contribution in #893

Full Changelog: hatoo/oha@v1.15.0...v1.16.0

`v1.15.0`

Compare Source

What's Changed

Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #862
Add shell completion support by @jpds in #861
fix(conn): cap connections to minimum needed by @tuliperis in #874
Fix H3 library link in README by @Microwonk in #877
refactor: replace tokio::select with tokio::time::timeout for request… by @hatoo in #880
Update deps by @hatoo in #881
add metrics to output by @ahmed-mekky in #882
Fix NO_COLOR convention regression by @nel in #886
Change default redirect limit to 0 by @hatoo in #887
Update deps by @hatoo in #888
1.15.0 by @hatoo in #889

New Contributors

@jpds made their first contribution in #861
@tuliperis made their first contribution in #874
@Microwonk made their first contribution in #877
@nel made their first contribution in #886

Full Changelog: hatoo/oha@v1.14.0...v1.15.0

mikefarah/yq (yq)

`v4.53.6`

Compare Source

Fixing release build issue
- Fixed line wrapping bug (#2824, #2823) Thanks @mxey
- Bumped dependencies

`v4.53.4`

Compare Source

Close input files after processing each one (#2796) (#2808) Thanks @MsfPablo
Fixed non string HCL string keys (#2795)
Fixed heap allocation bug (#2809) Thanks @MsfPablo
Fix deleting commented empty list YAML output (#2765) Thanks @dpersek
Fix (has) return false for negative array indices (#2769) Thanks @maximilize
Fix (sort): avoid int64 overflow comparing large integers (#2771) Thanks @maximilize
Fix: preserve correct parent references in explode merge anchor reconstruction (#2730) Thanks @vomba
Improve Guard ExpressionParser initialization with sync.Once (#2789) Thanks @arcaven
Fix: reject negative indent instead of panicking (#2746) Thanks @StressTestor
Fix: parse signed hex and octal integers (#2749) Thanks @StressTestor
Fix: skip UTF-8 BOM when processing front matter (#2751) Thanks @StressTestor
Fix !!merge tag regression for yq (#2705) Thanks @W-Floyd
Default to yaml when a file's extension is not a recognised format (#2785) Thanks @devthedevil
Bumped dependencies

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 04:00 PM and 04:59 PM, only on Tuesday (* 16 * * TUE)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot assigned Moulick Sep 8, 2026

renovate Bot requested a review from Moulick September 8, 2026 16:03

Update all non-major dependencies

483ef25

renovate Bot force-pushed the renovate/all-minor-patch branch from 2ae5dd1 to 483ef25 Compare September 8, 2026 22:38

Moulick approved these changes Sep 9, 2026

View reviewed changes

Moulick merged commit 31dbc2d into main Sep 9, 2026
3 checks passed

Moulick deleted the renovate/all-minor-patch branch September 9, 2026 00:29

Navigation Menu

Update all non-major dependencies - #76

Update all non-major dependencies#76
Moulick merged 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Sep 8, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Enhancements

Preview features

Performance

Bug fixes

What's Changed

Dependencies

Changes

New Contributors

v4.2.4: Helm v4.2.4

Notable Changes

Installation and Upgrading

What's Next

Changelog

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Sep 8, 2026 •

edited

Loading

`v4.2.4`: Helm v4.2.4