fix(deps): update all dependencies#790
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
Contributor
Author
|
renovate
Bot
force-pushed
the
renovate/all
branch
5 times, most recently
from
31530f0 to
5ed29c3
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.4.0→v3.5.0v2.23.1→v2.24.1v1.299.1→v1.300.0v5.7.0→v5.8.01ea3e7f→c113ba3v1.9.0→v1.10.1d62b90e→e7be49av2.11.4→v2.12.1v0.5.0→v0.6.0v1.62.0→v1.63.0v7.27.0→v7.28.0v3.232.0→v3.234.0v2.25.0→v2.26.1v0.11.1→v0.12.0v1.56.0→v1.57.0v1.56.0→v1.57.0v1.27.1→v1.28.0e10c466→60b97b3e10c466→60b97b3v1.80.0→v1.81.0v0.35.4→v0.36.0v0.35.4→v0.36.0ec9c827→7bfe71fv0.9.2→v0.10.03.232.0→3.234.0v7.27.0→v7.28.0v1.62.0→v1.63.035f0803→59ec475fd3612e→3895254Release Notes
Masterminds/semver (github.com/Masterminds/semver/v3)
v3.5.0Compare Source
What's Changed
New Contributors
Full Changelog: Masterminds/semver@v3.4.0...v3.5.0
alecthomas/chroma (github.com/alecthomas/chroma/v2)
v2.24.1Compare Source
Changelog
d2a3784fix: fallback bugv2.24.0Compare Source
Changelog
0b841eechore: go mod tidy10fcb68chore(deps): update ubuntu docker tag to v26 (#1251)2218de6chore(deps): update all non-major dependencies (#1236)2099887Update Solarized Light to use correct background color (#1250)ce43442Add Lateralus lexer (#1249)2b00673fix: commenting issues on gas lexer (#1247)8d04defAdd NameOther entry to github-dark theme (#1240)f2db790chore(deps): update all non-major dependencies (#1234)fc18a48Include embedded font license in COPYING file (#1233)e11ef85chore(deps): update all non-major dependencies (#1211)79e0fa7Add ERB lexer (#1228)b59560dAdd Spade lexer (#1229)83b5491Import Luau lexer (#1209)da72a97Add JetBrains Darcula theme (#1226)8087957styles: case-insensitive style registration and lookup (#1223)10daf04Add.json5to json Lexer (#1224)dccba78Add AMPL lexer (#1219)ee4ad0aFix MySQL lexer single comment render error (#1214)b160804AddusingKeyword to JavaScript (#1215)17e5911Pop type state when encountering punctuation for graphql (#1210)893841bShow error message in chromad (#1208)fef8258Fix error handling inneedRules()(#1207)d8a3315Update the PHP lexer (#1206)353c35bAdd the Kanagawa themes (#1198)41448feUpdate the Materialize lexer (#1201)020d1c0Add.qrcas extension for XML (#1205)6a63b3aAddmeson.optionsas filename for Meson (#1204)d398cafImport Gettext lexer (#1202)43245c9chore(deps): update dependency biome to v2.3.12 (#1200)8215091feat: add scdoc support (#1199)3fce7abchore(deps): update all non-major dependencies (#1188)aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/service/ec2)
v1.300.0Module Highlights
github.com/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol: v1.35.0github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.73.0github.com/aws/aws-sdk-go-v2/service/ec2: v1.300.0github.com/aws/aws-sdk-go-v2/service/georoutes: v1.9.0github.com/aws/aws-sdk-go-v2/service/lexmodelbuildingservice: v1.35.0github.com/aws/aws-sdk-go-v2/service/medialive: v1.96.0github.com/aws/aws-sdk-go-v2/service/securityagent: v1.1.0github.com/aws/aws-sdk-go-v2/service/vpclattice: v1.21.0bombsimon/wsl (github.com/bombsimon/wsl/v5)
v5.8.0Compare Source
What's Changed
cuddle-max-statementsby @bombsimon in #258cuddle-groupcheck by @bombsimon in #257deferallows any expression with intersecting variables by @bombsimon in #260gocuddling same asdeferby @bombsimon in #261CheckErrtakes precedence over all other cuddling rules by @bombsimon in #263Full Changelog: bombsimon/wsl@v5.7.0...v5.8.0
fsnotify/fsnotify (github.com/fsnotify/fsnotify)
v1.10.1Compare Source
Changes and fixes
inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)
v1.10.0Compare Source
This version of fsnotify needs Go 1.23.
Changes and fixes
inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)
golangci/golangci-lint (github.com/golangci/golangci-lint/v2)
v2.12.1Compare Source
Released on 2026-05-01
gomodguard_v2: fix panic with migration suggestioninstall.shscript (if you are still using an URL based on the branchmaster, please update to usehttps://golangci-lint.run/install.sh)v2.12.0Compare Source
Released on 2026-05-01
clickhouselintlinter https://github.com/ClickHouse/clickhouse-go-linterdupl: fromf665c8dtoc99c5cf(extended detection)funcorder: from 0.5.0 to 0.6.0 (new option:function)goconst: add an option to ignore strings from testsgoconst: from 1.8.2 to 1.10.0 (extended detection)gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)gosec: from619ce21to 2.26.1 (new checks:G124,G708,G709,G710)govet: addinlineanalyzermakezero: from 2.1.0 to 2.2.1 (support slice type aliases)paralleltest: exposecheckcleanupoptionsloglint: from 0.11.1 to 0.12.0 (new options:allowed-keys,custom-funcs)wsl_v5: from 5.6.0 to 5.8.0 (new option:cuddle-max-statements; new checks:after-decl,after-defer,after-expr,after-go,cuddle-group)forbidigo: from 2.3.0 to 2.3.1godot: from 1.5.4 to 1.5.6govet-modernize: from 0.43.0 to 0.44.0ireturn: from 0.4.0 to 0.4.1rowserrcheck: from 1.1.1 toc5f79b8customcommandpjbgf/sha1cd (github.com/pjbgf/sha1cd)
v0.6.0Compare Source
What's Changed
crypto.RegisterHashby @pjbgf in #206Full Changelog: pjbgf/sha1cd@v0.5.0...v0.6.0
pulumi/pulumi-aws-native (github.com/pulumi/pulumi-aws-native/sdk)
v1.63.0Compare Source
Changelog
b5eb363Automated SDK generation @ aws-cloudformation-user-guide19dc52c(#2958)pulumi/pulumi-aws (github.com/pulumi/pulumi-aws/sdk/v7)
v7.28.0Compare Source
What's Changed
Full Changelog: pulumi/pulumi-aws@v7.27.0...v7.28.0
pulumi/pulumi (github.com/pulumi/pulumi/sdk/v3)
v3.234.0Compare Source
3.234.0 (2026-05-01)
Features
[cli/cloud] Add
pulumi cloud api describefor inspecting the parameters, requestbody, and response schema of any Pulumi Cloud API operation, with
text, markdown, and JSON output
#22770
[cli/cloud] Add
pulumi cloud api listfor browsing every endpoint exposed by the PulumiCloud OpenAPI spec, with table and JSON output
#22769
Bug Fixes
v3.233.0Compare Source
3.233.0 (2026-04-30)
Features
[auto/python] Expose the auto-generated Pulumi CLI interface as
workspace.cli_api#22638
[cli] Add encrypted logging to ~/.pulumi/logs; use the PULUMI_ENABLE_AUTOMATIC_LOGGING feature flag to turn it on
#22494
[cli] Implement the
filesystem__grepandfilesystem__content_replacelocal toolsfor
pulumi neo.grepruns a regex search across files in the project rootwith an optional
includeglob filter and returns results inpath:lineno: lineform.
content_replaceperforms a literal multi-file search-and-replace with afile_patternglob anddry_runpreview mode. Both tools skip binary files,hidden directories, and
node_modules, and reject paths outside the projectroot. Their input schemas match the cloud-side tool definitions.
#22655
[cli] Add
pulumi_previewandpulumi_upas local tools for the experimentalpulumi neoagent. The Neo TUI renders a persistent bordered block for each operation that
streams changed resources and diagnostics as the engine runs and finalizes with a
summary of the op counts. Hidden behind PULUMI_EXPERIMENTAL.
#22697
[engine] Add
Listto the provider protocol and schema#22693
Bug Fixes
[engine] Return a clear error when two installed plugins claim the same default provider package name (for example, a native
scalewayprovider alongside aterraform-providerbridge parameterized asscaleway) instead of panicking with "Should not have seen an older plugin if sorting is correct!"#22679
[programgen] Do not wrap a
call(...)on a method whose return type is marked plain in an Output. PreviouslyPCL bound every method call's return type as
Output<T>, which caused downstream program-gento emit broken
.apply(...)/.ApplyT(...)traversals against plain struct returns (e.g.methods with
liftSingleValueMethodReturns=trueorReturnTypePlain=true).#22696
[backend/diy] When using a backend url containing creds (e.g. PostgreSQL conn string), mask user:pass as in lock-related error messages
#22701
[codegen/go] Generate unqualified
Providerreferences for the package's own provider resource. Previouslythe Go codegen always emitted
<pkg>.Providereven when the reference appeared inside<pkg>itself, producing identifiers that would not compile. Affects generated code for method return
types (and other schema positions) that reference
pulumi:providers:<pkg>.#22696
[codegen/nodejs] Generate unqualified
Providerreferences for the package's own provider resource when emittingTypeScript code inside that package. Previously the generator always qualified the name as
<pkg>.Provider, which does not resolve when no<pkg>namespace import is in scope.#22696
[codegen/nodejs] Import the correct class name for a provider resource. Imports for
pulumi:providers:<pkg>usedthe title-cased package name instead of
Provider, producing a phantom identifier that clashedwith the containing package's component/resource classes.
#22696
[programgen/nodejs] Emit
awaitforcall(...)invocations of methods whose return type is marked plain, andforce the generated program into an async
export = async () => ...wrapper whenever such acall is present. The Node SDK returns
Promise<T>for plain methods; previously program-genused the result directly, which did not match its runtime type.
#22696
[codegen/python] Avoid a self-import (
import pulumi_<pkg>insidepulumi_<pkg>/<module>.py) when referencingthe package's own provider resource. Python referenced the Provider as
pulumi_<pkg>.Providereven inside that package, which caused a circular import at runtime.
#22696
[sdk/python] Reduce internal
Output[T]data to a singleasyncio.Future#22661
[sdkgen/{nodejs,python}] Generate optional input types that accept undefined/None values
#22552
Miscellaneous
#22682
securego/gosec (github.com/securego/gosec/v2)
v2.26.1Compare Source
Changelog
4a3bd8aUpdate cosign to v3.0.6 (#1659)v2.26.0Compare Source
go-simpler/sloglint (go-simpler.org/sloglint)
v0.12.0Compare Source
Changelog
d2dd10cfix(message-style): don't report non-letter characters (#133)e7ecbdddocs(all): update documentation (#129)e4e07d6chore(ci): cleanups (#124)6e334cachore(deps): bump golang.org/x/tools from 0.41.0 to 0.42.0 (#123)381703bfeat(all): add support for custom functions (#122)ea3ad7cfeat(all): analyze all slog.Attr calls (#121)30e6134feat(all): analyze slog.Group calls + clean up tests (#120)d0ace02dev(all): split parser and checks (#119)c90ef4bdev(all): use ast/inspector.Cursor (#117)848c3b2feat(context-only): add support for http.Request (#116)e9058ccfix(context-only): check only functions with a context alternative (#114)5bee55bfix: check args length before slicing (#113)33420d9fix(kv-only): don't report slog.Group calls (#112)07e3b4ffix(msg-style): trim space before validation (#111)582d548feat: add option to only allow specific keys (#106)59a0521chore(deps): bump golang.org/x/tools from 0.35.0 to 0.41.0 (#108)9ac4e1dfix(context): do a separate visitor.WithStack run for context=scope (#110)36433cdchore(deps): bump golang.org/x/tools from 0.34.0 to 0.35.0 (#94)open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/featuregate)
v1.57.0🛑 Breaking changes 🛑
cmd/builder: In the generated Collector source, thereplacestatements in the Go module will now use relative paths by default. (#15097)We expect that this will not break existing use-cases where the generated collector is only used in an interim manner for builds. It enables the possibility of tracking the generated Collector code as a longer living artifact, allowing it to be run on any machine (whereas absolute paths will be different depending on the machine the Collector source is generated on.) We have added
dist::use_absolute_replace_pathsto go back to the absolute path behaviour in the case where there is an unforeseen use-case that requires absolute paths.pkg/confighttp: Stabilize framedSnappy feature gate. (#15096)💡 Enhancements 💡
all: Add declarative schema support for service telemetry resource configuration. (#14411)The
service::telemetry::resourceconfiguration now accepts the declarative schema with explicit name/value pairs:The legacy inline attribute map format is still supported for backward compatibility:
Note:
resource.detectorsis accepted for forward compatibility but is not yet applied by the collector.exporter/otlp_grpc: Added theserver.addressandurl.pathattributes to metrics generated by the otlp exporter. (#14998)exporter/otlp_http: Added theserver.addressandurl.pathattributes to metrics generated by the otlp_http exporter. (#14998)pkg/config/configgrpc: AddUserAgentfield toClientConfigto allow overriding the default gRPC user-agent string. (#14686)The otlp gRPC exporter was unconditionally setting the User-Agent via
grpc.WithUserAgent() at dial time, which takes precedence over per-call
metadata, causing any user-configured User-Agent to be silently discarded.
A dedicated
UserAgentfield has been added toClientConfigwhich, whenset, is used in the dial option directly instead of the default BuildInfo-derived string.
pkg/config/configgrpc: Accept gRPC resolver scheme URIs in client endpoint (e.g. passthrough:///host:port) to allow control over name resolution (#14990)After the migration to grpc.NewClient, some gRPC client components such as the OTLP
exporter experienced connection issues in dual-stack DNS environments. This can now be
fixed by using the passthrough:/// gRPC resolver scheme in the endpoint field.
pkg/config/confignet: Add support for Windows Named Pipe (npipe) transport (#15085)pkg/service: Emit a warning when using the old v0.2.0 declarative config format (#15088)🧰 Bug fixes 🧰
pkg/otelcol: Print components exactly once in theotelcol componentscommand (#14682)This resolves an issue where aliased components were skipped.
pkg/otelcol: Synchronize Collector Run and Shutdown lifecycles so that Shutdown blocks until Run completes all cleanup. (#4947)Shutdown now blocks until Run finishes cleanup, matching http.Server semantics.
If Shutdown is called before Run, the next Run call returns nil after cleaning up
the config provider.
pkg/pdata: Use spec-compliant string representation for NaN, Infinity, and -Infinity in Value.AsString(). (#14487)pkg/pprofile: Fix data corruption of resource and scope attributes after marshal-unmarshal-merge round-trip. (#15084)pkg/service: Non-string resource attributes in telemetry configuration now return an error instead of panicking (#15171)pkg/xscraperhelper: fix the merge of profiles in the profiling scraper helpers (#14790)receiver/otlp: Fix profiles receiver reporting its samples as spans (#15089)uber-go/zap (go.uber.org/zap)
v1.28.0Compare Source
Enhancements:
zapcore.CheckPreWriteHookandCheckedEntry.Beforemethod for transforming entries before they are written to any Cores.grpc/grpc-go (google.golang.org/grpc)
v1.81.0: Release 1.81.0Compare Source
Behavior Changes
Dependencies
Bug Fixes
RST_STREAMwhen receiving anEND_STREAMwhen the stream is not already half-closed. (#8832)New Features
GRPC_EXPERIMENTAL_XDS_SNI=trueenvironment variable. (#9016)GRPC_EXPERIMENTAL_XDS_ORCA_LRS_PROPAGATION=true. (#9005)grpc.subchannel.disconnectionsmetric by adding disconnection reason to thegrpc.disconnect_errorlabel (gRFC A94). This provides granular insights into why subchannels are closing. (#8973)mem.Buffer.Slice()API to slice the buffer like a slice. (#8977)Performance Improvements
GRPC_GO_EXPERIMENTAL_HTTP_FRAMER_READ_BUFFER_POOLING=falseand report any issues. (#9032)kubernetes/apimachinery (k8s.io/apimachinery)
v0.36.0Compare Source
kubernetes/client-go (k8s.io/client-go)
v0.36.0Compare Source
mvdan/gofumpt (mvdan.cc/gofumpt)
v0.10.0Compare Source
This release is based on Go 1.26's gofmt, and requires Go 1.25 or later.
A new rule is introduced to drop unnecessary parentheses around expressions
where the inner expression is unambiguous on its own, such as
f((3)).Parentheses are kept where they are useful, such as on binary expressions. See #44.
A new rule is introduced to require multi-line function calls to match
the opening and closing parenthesis in terms of the use of newlines. See #74.
The
-extraflag now accepts a comma-separated list of rule names to enableindividual extra rules, rather than enabling all of them at once. See #339.
The following changes are included as well:
go.modfiles without amoduledirective - #350Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.