fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #644 · go-vela/cli

renovate · 2026-04-02T19:08:03Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v6.0.2` → `v6.0.3`
actions/setup-go	action	minor	`v6.4.0` → `v6.5.0`
alpine		digest	`2510918` → `28bd5fe`
alpine	final	minor	`3.23.3` → `3.24.1`
codecov/codecov-action	action	patch	`v6.0.0` → `v6.0.2`
docker.io/library/alpine		minor	`3.23.3` → `3.24.1`
docker/build-push-action	action	minor	`v7.0.0` → `v7.2.0`
docker/login-action	action	minor	`v4.0.0` → `v4.2.0`
docker/metadata-action	action	minor	`v6.0.0` → `v6.1.0`
github.com/Masterminds/semver/v3	require	minor	`v3.4.0` → `v3.5.0`
github.com/alecthomas/chroma/v2	require	minor	`v2.23.1` → `v2.27.0`
github.com/go-vela/sdk-go	require	patch	`v0.28.0` → `v0.28.1`
github.com/go-vela/server	require	patch	`v0.28.0` → `v0.28.8`
github.com/go-vela/worker	require	patch	`v0.28.0` → `v0.28.2`
github.com/urfave/cli/v3	require	minor	`v3.8.0` → `v3.10.1`
github/codeql-action	action	minor	`v4.35.1` → `v4.36.2`
golang.org/x/term	require	minor	`v0.41.0` → `v0.44.0`

Release Notes

actions/checkout (actions/checkout)

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

actions/setup-go (actions/setup-go)

`v6.5.0`

Compare Source

codecov/codecov-action (codecov/codecov-action)

`v6.0.2`

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

`v6.0.1`

Compare Source

What's Changed

fix: prevent template injection in run: steps (VULN-1652) by @thomasrockhu-codecov in #1947
chore(release): 6.0.1 by @thomasrockhu-codecov in #1949

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

docker/build-push-action (docker/build-push-action)

`v7.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #1525
Bump @docker/actions-toolkit from 0.87.0 to 0.90.0 in #1517
Bump brace-expansion from 2.0.2 to 5.0.6 in #1534
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #1529
Bump fast-xml-parser from 5.5.7 to 5.8.0 in #1521
Bump postcss from 8.5.6 to 8.5.10 in #1526
Bump tar from 6.2.1 to 7.5.15 in #1533

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

`v7.1.0`

Compare Source

Git context query format support by @crazy-max in #1505
Bump @docker/actions-toolkit from 0.79.0 to 0.87.0 by @crazy-max in #1505
Bump brace-expansion from 1.1.12 to 1.1.13 in #1500
Bump fast-xml-parser from 5.4.2 to 5.5.7 in #1489
Bump flatted from 3.3.3 to 3.4.2 in #1491
Bump glob from 10.3.12 to 10.5.0 in #1490
Bump handlebars from 4.7.8 to 4.7.9 in #1497
Bump lodash from 4.17.23 to 4.18.1 in #1510
Bump picomatch from 4.0.3 to 4.0.4 in #1496
Bump undici from 6.23.0 to 6.24.1 in #1486
Bump vite from 7.3.1 to 7.3.2 in #1509

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

docker/login-action (docker/login-action)

`v4.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #976
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
Bump brace-expansion from 2.0.1 to 5.0.6 in #993
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
Bump postcss from 8.5.6 to 8.5.10 in #979
Bump tar from 6.2.1 to 7.5.15 in #991
Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

`v4.1.0`

Compare Source

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
Bump brace-expansion from 1.1.12 to 1.1.13 in #952
Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
Bump flatted from 3.3.3 to 3.4.2 in #944
Bump glob from 10.3.12 to 10.5.0 in #940
Bump handlebars from 4.7.8 to 4.7.9 in #949
Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
Bump lodash from 4.17.23 to 4.18.1 in #958
Bump minimatch from 3.1.2 to 3.1.5 in #941
Bump picomatch from 4.0.3 to 4.0.4 in #948
Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

docker/metadata-action (docker/metadata-action)

`v6.1.0`

Compare Source

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #613
Bump brace-expansion from 1.1.12 to 5.0.6 in #658 #630
Bump csv-parse from 6.1.0 to 6.2.1 in #617
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #620
Bump flatted from 3.3.3 to 3.4.2 in #623
Bump glob from 10.3.15 to 10.5.0 in #621
Bump handlebars from 4.7.8 to 4.7.9 in #629
Bump lodash from 4.17.23 to 4.18.1 in #639
Bump moment-timezone from 0.6.0 to 0.6.1 in #619
Bump picomatch from 4.0.3 to 4.0.4 in #626
Bump postcss from 8.5.6 to 8.5.10 in #649
Bump tar from 6.2.1 to 7.5.15 in #657
Bump undici from 6.23.0 to 6.25.0 in #614
Bump vite from 7.3.1 to 7.3.2 in #637

Full Changelog: docker/metadata-action@v6.0.0...v6.1.0

Masterminds/semver (github.com/Masterminds/semver/v3)

`v3.5.0`

Compare Source

What's Changed

Adding more prerelease tests by @mattfarina in #273
Update constraint error messages by @mattfarina in #278
Fix edge cases by @mattfarina in #279
Adding some checks in by @mattfarina in #280
Updating deps by @mattfarina in #281
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #282
Bump actions/cache from 4.2.3 to 5.0.5 by @dependabot[bot] in #283
Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by @dependabot[bot] in #284
Updating gitignore for devcontainers by @mattfarina in #286
Fixing some quality issues by @mattfarina in #287

New Contributors

@dependabot[bot] made their first contribution in #282

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

alecthomas/chroma (github.com/alecthomas/chroma/v2)

`v2.27.0`

Compare Source

Changelog

a6d00fe fix(html): make mode class output opt-in via WithModeClasses
f52d015 chore: some house-keeping
f08a9ab chore: add fmt + test to BUILD.bit
6da8f88 fix(yaml): comments can be key-values (#1289)
67785a4 chore(deps): update all non-major dependencies (#1285)
d9dd73f Add templ XML lexer (#1283)
effffdb chore(deps): update all non-major dependencies (#1280)
03236a4 support for PostScript font files (#1282)
e10d532 Fix YAML slash comments with colons (#1278)

`v2.26.1`

Compare Source

Changelog

56c7702 fix: downgrade go.mod version to 1.25

`v2.26.0`

Compare Source

Changelog

a4d3f60 feat(chromad): use style counterparts for theme switching
ce159e6 chore: migrate to new bit format
180ea9f perf(colour): replace Sprintf/ParseUint round-trip in NewColour with direct bit arithmetic (#1274)
68a08b0 docs: how to support dynamic theme switching
6fb9d92 feat(html): tag output with style mode
a71fea3 feat(styles): add light/dark mode support

`v2.25.0`

Compare Source

Changelog

c3826f0 chore: go mod tidy
fb5bc39 fix: emit HTTP body tokens without Coalesce
a3c2946 Improve Nu file detection (#1260)
e841b1a chore(deps): update all non-major dependencies (#1272)
3ed2db8 Add Gemfile.lock lexer (& ruby improvements) (#1269)
41fb546 Add YAML+Jinja lexer (#1268)
e99b881 chore(deps): update all non-major dependencies (#1263)
e67dd2f (Markless) Fix parse issue for embed directives without options (#1266)
dffa370 fix(go): tokenize trailing // as comment instead of consuming next line (#1265)
1cf1560 chore: upgrade to github.com/dlclark/regexp2/v2
2cbcf7b chore: upgrade golangci-lint
786675b chore(deps): update all non-major dependencies (#1257)
235590c feat: add JSONL support to JSON lexer (#1262)
f9b5c97 fix(dart): match single-line comments without trailing newline (#1225) (#1261)
097f8e9 Mention Arturo in README (#1256)
d46ce60 feat(markdown): highlight frontmatter and comments (#1245)
f786b2a feat(lexers): add support for LilyPond (#1255)
0a02b98 chore(deps): update actions/checkout digest to de0fac2 (#1212)
c55009e Fix AGENTS.md referencing a non-existent scripts directory (#1231)
c5e763e Improve protobuf lexer (#1253)
113cd0e Add Arturo lexer (#1232)
4498d71 chore(deps): update dependency binaryen to v129 (#1238)
885f912 Added f4 to "Projects using Chroma" list (#1242)
c42c9ef Update java lexer (#1254)

`v2.24.1`

Compare Source

Changelog

d2a3784 fix: fallback bug

`v2.24.0`

Compare Source

Changelog

0b841ee chore: go mod tidy
10fcb68 chore(deps): update ubuntu docker tag to v26 (#1251)
2218de6 chore(deps): update all non-major dependencies (#1236)
2099887 Update Solarized Light to use correct background color (#1250)
ce43442 Add Lateralus lexer (#1249)
2b00673 fix: commenting issues on gas lexer (#1247)
8d04def Add NameOther entry to github-dark theme (#1240)
f2db790 chore(deps): update all non-major dependencies (#1234)
fc18a48 Include embedded font license in COPYING file (#1233)
e11ef85 chore(deps): update all non-major dependencies (#1211)
79e0fa7 Add ERB lexer (#1228)
b59560d Add Spade lexer (#1229)
83b5491 Import Luau lexer (#1209)
da72a97 Add JetBrains Darcula theme (#1226)
8087957 styles: case-insensitive style registration and lookup (#1223)
10daf04 Add .json5 to json Lexer (#1224)
dccba78 Add AMPL lexer (#1219)
ee4ad0a Fix MySQL lexer single comment render error (#1214)
b160804 Add using Keyword to JavaScript (#1215)
17e5911 Pop type state when encountering punctuation for graphql (#1210)
893841b Show error message in chromad (#1208)
fef8258 Fix error handling in needRules() (#1207)
d8a3315 Update the PHP lexer (#1206)
353c35b Add the Kanagawa themes (#1198)
41448fe Update the Materialize lexer (#1201)
020d1c0 Add .qrc as extension for XML (#1205)
6a63b3a Add meson.options as filename for Meson (#1204)
d398caf Import Gettext lexer (#1202)
43245c9 chore(deps): update dependency biome to v2.3.12 (#1200)
8215091 feat: add scdoc support (#1199)
3fce7ab chore(deps): update all non-major dependencies (#1188)

go-vela/sdk-go (github.com/go-vela/sdk-go)

`v0.28.1`

Compare Source

What's Changed

fix(scm): add sync for refresh by @wass3rw3rk in #398
fix(deps): update all non-major dependencies by @renovate[bot] in #393

Full Changelog: go-vela/sdk-go@v0.28.0...v0.28.1

go-vela/server (github.com/go-vela/server)

`v0.28.8`

Compare Source

What's Changed

fix: correct install token ttl and set cancel status on CancelRunning by @ecrupper in #1471

Full Changelog: go-vela/server@v0.28.7...v0.28.8

`v0.28.7`

Compare Source

What's Changed

fix(cache): set proper timeout for build SCM token by @ecrupper in #1466
fix: use app tokens for all hot path SCM calls if app installed by @ecrupper in #1464
fix(cancel): send status update always on cancel update by @ecrupper in #1468
fix(deps): update all non-major dependencies by @renovate[bot] in #1458

Full Changelog: go-vela/server@v0.28.6...v0.28.7

`v0.28.6`

Compare Source

What's Changed

fix(restart): store status token by @ecrupper in #1459

Full Changelog: go-vela/server@v0.28.5...v0.28.6

`v0.28.5`

Compare Source

What's Changed

fix: Consider all commits' touched files for push events by @colindean in #1455
fix(auto_cancel): correct build on nil + number order enforcement by @ecrupper in #1456

Full Changelog: go-vela/server@v0.28.4...v0.28.5

`v0.28.4`

Compare Source

What's Changed

chore(deps): bump github.com/jackc/pgx/v5 from 5.7.4 to 5.9.2 by @dependabot[bot] in #1447
fix(scm): use slug in team list for user by @ecrupper in #1448
fix(regression): re-introduce owner check for build scm token by @ecrupper in #1451
fix(merge_group): adjust auto-cancel logic for destroyed group event by @ecrupper in #1452
fix(compiler): add validation for origin secrets by @ecrupper in #1453
fix(deps): update all non-major dependencies by @renovate[bot] in #1443
chore: bump Go version to 1.26.3 by @ecrupper in #1454

Full Changelog: go-vela/server@v0.28.3...v0.28.4

`v0.28.3`

Compare Source

What's Changed

fix(db/hook): trim error to fit db column by @wass3rw3rk in #1440
fix: tighten up UpdateRepo calls and add sync-up to repair by @ecrupper in #1438
fix(router): use install token for caller token and fix ptr derefs by @ecrupper in #1439
fix(cancel): follow through cancel on missing executor by @ecrupper in #1441
fix(hook): matching error with other updatehook calls by @wass3rw3rk in #1442
chore(deps): update all non-major dependencies by @renovate[bot] in #1437

Full Changelog: go-vela/server@v0.28.2...v0.28.3

`v0.28.2`

Compare Source

What's Changed

fix(compiler/types): use struct walk for Substitute instead of JSON marshal by @ecrupper in #1432
fix(scm): handle nil on getcontents by @wass3rw3rk in #1434
fix(deps): update module golang.org/x/crypto to v0.50.0 by @renovate[bot] in #1433

Full Changelog: go-vela/server@v0.28.1...v0.28.2

`v0.28.1`

Compare Source

What's Changed

fix(compiler): address logic bug in de-dup for origin secrets in templates by @ecrupper in #1431
chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #1429
fix(deps): update all non-major dependencies by @renovate[bot] in #1428

Full Changelog: go-vela/server@v0.28.0...v0.28.1

go-vela/worker (github.com/go-vela/worker)

`v0.28.2`

Compare Source

What's Changed

fix(exec): use client err for substitution failures and delay PlanStep by @ecrupper in #701
fix(deps): update all non-major dependencies by @renovate[bot] in #695
fix(scm): fix scm token refresh by @wass3rw3rk in #705
fix(deps): update all non-major dependencies by @renovate[bot] in #702

Full Changelog: go-vela/worker@v0.28.1...v0.28.2

`v0.28.1`

Compare Source

What's Changed

chore(release): bump server to v0.28.2 + deps by @ecrupper in #698

Full Changelog: go-vela/worker@v0.28.0...v0.28.1

urfave/cli (github.com/urfave/cli/v3)

`v3.10.1`

Compare Source

`v3.10.0`

Compare Source

What's Changed

feat: add Flag.SchemaType() and Flag.SchemaItemsType() for JSON Schema introspection by @dearchap in #2368
feat: add Command.Walk() and Command.Path() convenience methods by @dearchap in #2353
fix: let --help flag take precedence over parse errors by @dearchap in #2360
fix: resolve remaining help invocation inconsistencies by @dearchap in #2361
fix: skip After hook when help is displayed on subcommand by @dearchap in #2363
fix: show GLOBAL OPTIONS in SubcommandHelpTemplate by @dearchap in #2359
fix: resolve broken links in CHANGELOG.md by @dearchap in #2357
docs: document what happened to build tags in v3 migration guide by @dearchap in #2358
Various docs updates and dependency bumps

Full Changelog: urfave/cli@v3.9.1...v3.10.0

`v3.9.1`

Compare Source

What's Changed

fix: inherit Reader/Writer/ErrWriter from parent on subcommand setup by @c-tonneslan in #2329
fix: correct greedy colon parsing in bash completion script by @TimSoethout in #2336
fix: Honor env sources on duplicated flags by @ibobgunardi in #2355
fix: Remove incorrect flag check by @MohitPanchariya in #2280
fix: let completion command use normal flag parsing pipeline by @suzuki-shunsuke in #2279
fix: bash completion spacing by @cyphercodes in #2337
fix: fish custom completion arguments by @puneetdixit200 in #2338
fix: empty positional arg after a flag regression test by @c-tonneslan in #2328
docs: document build tags in v3 migration guide by @dearchap in #2358
chore(deps): bump mkdocs-git-revision-date-localized-plugin by @dependabot in #2347
Fix typos by @myfloss in #2339

Full Changelog: urfave/cli@v3.9.0...v3.9.1

`v3.9.0`

Compare Source

What's Changed

chore(deps): bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in #2300
chore(deps): bump the python-packages group across 1 directory with 3 updates by @dependabot[bot] in #2301
docs: fix typo by @acrobatstick in #2299
feat: add descriptions for bash and powershell autocompletion by @gabelluardo in #2298
Made command help more consistent by @markshep-wbg in #2287
Fix:(issue_2285): correct function and variable naming in fish completion script by @TimSoethout in #2286
fix(ci): update docs after bash completion update by @gabelluardo in #2307
fix: apply SliceFlagSeparator to env var sources by @lawrence3699 in #2309
fix: don't print empty line to stderr when Exit message is empty by @Yanhu007 in #2310
flag: prevent BoolWithInverseFlag.String from panicking without a tab by @alliasgher in #2311
refactor: bash completion script by @gabelluardo in #2308
fix: drop shebang from bash completion template by @barry3406 in #2317
fix: show flag completions when completing a double-dash prefix by @morozov in #2316
fix: parse flags for help subcommand (#2271) by @barry3406 in #2319
fix: show BoolWithInverseFlag aliases in help text by @wucm667 in #2321

New Contributors

@gabelluardo made their first contribution in #2298
@markshep-wbg made their first contribution in #2287
@lawrence3699 made their first contribution in #2309
@Yanhu007 made their first contribution in #2310
@alliasgher made their first contribution in #2311
@barry3406 made their first contribution in #2317
@morozov made their first contribution in #2316
@wucm667 made their first contribution in #2321

Full Changelog: urfave/cli@v3.8.0...v3.9.0

github/codeql-action (github/codeql-action)

`v4.36.2`

Compare Source

Cache CodeQL CLI version information across Actions steps. #3943
Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937
Update default CodeQL bundle version to 2.25.6. #3948

`v4.36.1`

Compare Source

No user facing changes.

`v4.36.0`

Compare Source

Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #3894
Add support for SHA-256 Git object IDs. #3893
Update default CodeQL bundle version to 2.25.5. #3926

`v4.35.5`

Compare Source

We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #3899
For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #3791
If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #3892
Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #3880

`v4.35.4`

Compare Source

Update default CodeQL bundle version to 2.25.4. #3881

`v4.35.3`

Compare Source

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #3837
Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #3850
Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with va

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2026-04-02T19:12:58Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.27%. Comparing base (3220a25) to head (913ccba).

❌ Your project check has failed because the head coverage (71.27%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #644   +/-   ##
=======================================
  Coverage   71.27%   71.27%           
=======================================
  Files         174      174           
  Lines        4741     4741           
=======================================
  Hits         3379     3379           
  Misses       1053     1053           
  Partials      309      309

Files with missing lines	Coverage Δ
command/pipeline/exec.go	`0.00% <ø> (ø)`

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate · 2026-04-07T21:34:54Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

59 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.26.1` -> `1.26.3`
`github.com/adhocore/gronx`	`v1.19.6` -> `v1.20.0`
`github.com/alicebob/miniredis/v2`	`v2.37.0` -> `v2.38.0`
`github.com/bytedance/gopkg`	`v0.1.3` -> `v0.1.4`
`github.com/bytedance/sonic`	`v1.15.0` -> `v1.15.1`
`github.com/bytedance/sonic/loader`	`v0.5.0` -> `v0.5.1`
`github.com/cloudwego/base64x`	`v0.1.6` -> `v0.1.7`
`github.com/decred/dcrd/dcrec/secp256k1/v4`	`v4.4.0` -> `v4.4.1`
`github.com/docker/go-connections`	`v0.6.0` -> `v0.7.0`
`github.com/emicklei/go-restful/v3`	`v3.12.2` -> `v3.13.0`
`github.com/fatih/color`	`v1.16.0` -> `v1.19.0`
`github.com/gin-contrib/sse`	`v1.1.0` -> `v1.1.1`
`github.com/go-playground/validator/v10`	`v10.30.1` -> `v10.30.2`
`github.com/goccy/go-json`	`v0.10.5` -> `v0.10.6`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.28.0` -> `v2.29.0`
`github.com/invopop/jsonschema`	`v0.13.0` -> `v0.14.0`
`github.com/jackc/pgx/v5`	`v5.7.6` -> `v5.9.2`
`github.com/klauspost/compress`	`v1.18.2` -> `v1.18.6`
`github.com/lestrrat-go/httprc/v3`	`v3.0.2` -> `v3.0.5`
`github.com/lestrrat-go/jwx/v3`	`v3.0.13` -> `v3.1.1`
`github.com/lib/pq`	`v1.12.1` -> `v1.12.3`
`github.com/lucasb-eyer/go-colorful`	`v1.2.0` -> `v1.4.0`
`github.com/mattn/go-colorable`	`v0.1.13` -> `v0.1.14`
`github.com/mattn/go-isatty`	`v0.0.20` -> `v0.0.22`
`github.com/mattn/go-runewidth`	`v0.0.13` -> `v0.0.23`
`github.com/minio/minio-go/v7`	`v7.0.99` -> `v7.2.0`
`github.com/moby/moby/api`	`v1.54.0` -> `v1.55.0`
`github.com/moby/moby/client`	`v0.3.0` -> `v0.5.0`
`github.com/pelletier/go-toml/v2`	`v2.2.4` -> `v2.3.1`
`github.com/quic-go/quic-go`	`v0.59.0` -> `v0.59.1`
`github.com/redis/go-redis/v9`	`v9.18.0` -> `v9.20.0`
`github.com/spf13/pflag`	`v1.0.9` -> `v1.0.10`
`go.mongodb.org/mongo-driver/v2`	`v2.5.0` -> `v2.6.0`
`go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace`	`v0.67.0` -> `v0.69.0`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.67.0` -> `v0.69.0`
`go.opentelemetry.io/otel`	`v1.42.0` -> `v1.44.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.42.0` -> `v1.44.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`	`v1.42.0` -> `v1.44.0`
`go.opentelemetry.io/otel/metric`	`v1.42.0` -> `v1.44.0`
`go.opentelemetry.io/otel/sdk`	`v1.42.0` -> `v1.44.0`
`go.opentelemetry.io/otel/trace`	`v1.42.0` -> `v1.44.0`
`go.opentelemetry.io/proto/otlp`	`v1.9.0` -> `v1.10.0`
`go.starlark.net`	`v0.0.0-20260326113308-fadfc96def35` -> `v0.0.0-20260522144826-ec58d4b459e2`
`golang.org/x/arch`	`v0.24.0` -> `v0.27.0`
`golang.org/x/crypto`	`v0.49.0` -> `v0.52.0`
`golang.org/x/net`	`v0.51.0` -> `v0.55.0`
`golang.org/x/sync`	`v0.20.0` -> `v0.21.0`
`golang.org/x/sys`	`v0.42.0` -> `v0.46.0`
`golang.org/x/text`	`v0.35.0` -> `v0.37.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260209200024-4cfbd4190f57` -> `v0.0.0-20260526163538-3dc84a4a5aaa`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260209200024-4cfbd4190f57` -> `v0.0.0-20260526163538-3dc84a4a5aaa`
`google.golang.org/grpc`	`v1.79.3` -> `v1.81.1`
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12-0.20260120151049-f2248ac996af`
`k8s.io/api`	`v0.35.3` -> `v0.36.2`
`k8s.io/apimachinery`	`v0.35.3` -> `v0.36.2`
`k8s.io/client-go`	`v0.35.3` -> `v0.36.2`
`k8s.io/klog/v2`	`v2.130.1` -> `v2.140.0`
`k8s.io/kube-openapi`	`v0.0.0-20250910181357-589584f1c912` -> `v0.0.0-20260317180543-43fb72c5454a`
`k8s.io/utils`	`v0.0.0-20251002143259-bc988d571ff4` -> `v0.0.0-20260210185600-b8788abfbbc2`
`sigs.k8s.io/structured-merge-diff/v6`	`v6.3.0` -> `v6.3.2`

renovate Bot requested a review from a team as a code owner April 2, 2026 19:08

renovate Bot added the dependencies Indicates a change to dependencies label Apr 2, 2026

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch from 669006f to a978d6a Compare April 7, 2026 21:34

renovate Bot changed the title ~~chore(deps): update docker/login-action action to v4.1.0~~ fix(deps): update all non-major dependencies Apr 7, 2026

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from eb973f2 to 217d25e Compare April 16, 2026 08:57

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 0405e11 to c60db64 Compare April 18, 2026 00:55

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from a76f618 to e0616a7 Compare May 1, 2026 18:58

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 423d5e2 to fdebfb7 Compare May 13, 2026 18:26

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 275b42d to caba379 Compare May 21, 2026 16:54

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 083afdf to e0893fa Compare May 29, 2026 01:54

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from b503420 to afbd1d4 Compare June 2, 2026 18:04

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 8 times, most recently from 6861dd4 to c528426 Compare June 10, 2026 23:32

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from e2c70f0 to 204a5ab Compare June 17, 2026 05:38

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 95ff368 to 7d7eb35 Compare June 28, 2026 13:37

fix(deps): update all non-major dependencies

913ccba

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch from 7d7eb35 to 913ccba Compare June 30, 2026 17:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all non-major dependencies#644

fix(deps): update all non-major dependencies#644
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch-digest-pin

renovate Bot commented Apr 2, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Apr 2, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Apr 7, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

New Contributors

Changelog

Changelog

Changelog

Changelog

Changelog

Changelog

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

Configuration

Uh oh!

codecov Bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

renovate Bot commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Apr 2, 2026 •

edited

Loading

codecov Bot commented Apr 2, 2026 •

edited

Loading

renovate Bot commented Apr 7, 2026 •

edited

Loading