fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #18 · f4z3r/wasmcloud-tutorial

renovate · 2025-09-27T12:30:24Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v6.0.1` → `v6.0.2`
anyhow	dependencies	patch	`1.0.100` → `1.0.102`
anyhow	dependencies	patch	`1.0.99` → `1.0.102`
async-nats	dependencies	minor	`0.43.0` → `0.48.0`
cargo		minor	`1.89.0` → `1.94.1`
futures (source)	dependencies	patch	`0.3.31` → `0.3.32`
jetify-com/devbox-install-action	action	minor	`v0.14.0` → `v0.15.0`
kubectl		minor	`1.33.4` → `1.36.0`
kubernetes-helm		minor	`3.19.0` → `3.20.2`
natscli		minor	`0.2.2` → `0.4.0`
rustup		minor	`1.28.2` → `1.29.0`
serde (source)	dependencies	patch	`1.0.219` → `1.0.228`
serde (source)	dependencies	patch	`1.0.225` → `1.0.228`
serde_json	dependencies	patch	`1.0.143` → `1.0.149`
serde_json	dependencies	patch	`1.0.145` → `1.0.149`
taiki-e/install-action	action	minor	`v2.62.10` → `v2.77.7`
tokio (source)	dependencies	minor	`1.47.1` → `1.52.3`
tracing (source)	dependencies	patch	`0.1.41` → `0.1.44`
url	dependencies	patch	`2.5.7` → `2.5.8`
uv		minor	`0.8.14` → `0.11.10`
wac-cli		minor	`latest` → `0.10.0`
wasm-tools		minor	`1.239.0` → `1.248.0`
wasmcloud-provider-sdk	dependencies	minor	`0.13.0` → `0.17.0`
wit-bindgen	dependencies	minor	`0.46` → `0.57`
wit-bindgen-wrpc	dependencies	minor	`0.9.0` → `0.10.0`
wkg		minor	`0.12.0` → `0.15.0`

Release Notes

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

dtolnay/anyhow (anyhow)

`v1.0.102`

Compare Source

Remove backtrace dependency (#438, #439, #440, #441, #442)

`v1.0.101`

Compare Source

Add #[inline] to anyhow::Ok helper (#437, thanks @Ibitier)

rust-lang/futures-rs (futures)

`v0.3.32`

Compare Source

Bump MSRV of utility crates to 1.71. (#2989)
Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#2925)
Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#2929)
Add FuturesOrdered::clear (#2927)
Add mpsc::*Receiver::recv (#2947)
Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#2944)
Implement FusedStream for sink::With (#2948)
Add no_std support for shared (#2868)
Make Mutex::new() const (#2956)
Add #[clippy::has_significant_drop] to guards (#2967)
Remove dependency to pin-utils (#2929)
Remove dependency on num_cpus (#2946)
Performance improvements (#2983)
Documentation improvements (#2925, #2926, #2940, #2971)

jetify-com/devbox-install-action (jetify-com/devbox-install-action)

`v0.15.0`

Compare Source

What's Changed

Bump DeterminateSystems/nix-installer-action from 19 to 20 by @dependabot[bot] in #86
ci: Replace deprecated macos-13 runner with macos-15 by @Lagoja in #91
Try moving to Nix Experimental installer by @Lagoja in #85
Bump actions/cache from 4 to 5 by @dependabot[bot] in #89

Full Changelog: jetify-com/devbox-install-action@v0.14.0...v0.15.0

kubernetes/kubectl (kubectl)

`v1.36.0`

`v1.35.4`

`v1.35.3`

`v1.35.2`

`v1.35.0`

`v1.34.3`

`v1.34.2`

`v1.34.1`

helm/helm (kubernetes-helm)

`v3.20.2`: Helm v3.20.2

v3.20.2

Helm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Security fixes

GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment

Installation and Upgrading

Download Helm v3.20.2. The common platform binaries are here:

MacOS amd64 (checksum / 7de04301f28b902a74f6286ed941cadc86ee5e6a9086a18f2ccf1f548e99d618)
MacOS arm64 (checksum / 139c794c22f16b579d08ddd3008c8038b9bb2814f35b5bcca91f50a1f458978d)
Linux amd64 (checksum / 258e830a9e613c8a7a302d6059b4bb3b9758f2f3e1bb8ea0d707ce10a9a72fea)
Linux arm (checksum / a8a614c740399ff1ef32bcea6be6e4523f17e3376f9cf55c192cc48c8f2d1f19)
Linux arm64 (checksum / 5ea2d6bc2cda3f8edf985e028809f5a9278f404fb8ab24044de9b7cb9b79a691)
Linux i386 (checksum / 88e4c1834307cdbc9f3b80920e1a383e4ba50bb488fb0be1b1fbd4918bb6ae73)
Linux ppc64le (checksum / 98bb26a2f3c0b0c1a50db3181dff192554e0c204a07427d98d6b01e259f23cbe)
Linux s390x (checksum / 584dd77ef8096d6ef939a1822f72840e749fc8311b2b13ae94df5f786862a56b)
Linux riscv64 (checksum / 957391d0710d72678acd09959b5dc77888cd007a78a4b99944d3b2fc7e1895ca)
Windows amd64 (checksum / 24e8e5b71bab4ee17e6f989931ecf4fb144f9916cbe9990c0b6b2ec7b925c454)
Windows arm64 (checksum / 7c940a73a6882f50b69aec3282549da4a49917669db18fc503db930fb74b9789)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026
4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026

Changelog

fix: Chart dot-name path bug 8fb76d6 (George Jenkins)
fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e (Terry Howe)

`v3.20.1`: Helm v3.20.1

Helm v3.20.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Backport of #31644: Fixed a bug where user-provided nil value was not preserved when chart has an empty map or no default for a key
Backport of #31601: Fixed a bug where OCI references with tag+digest failed with "invalid byte" error

Installation and Upgrading

Download Helm v3.20.1. The common platform binaries are here:

MacOS amd64 (checksum / 580515b544d5c966edc6f782c9ae88e21a9e10c786a7d6c5fd4b52613f321076)
MacOS arm64 (checksum / 75cc96ac3fe8b8b9928eb051e55698e98d1e026967b6bffe4f0f3c538a551b65)
Linux amd64 (checksum / 0165ee4a2db012cc657381001e593e981f42aa5707acdd50658326790c9d0dc3)
Linux arm (checksum / 758375df78fb8f91f4056244bda539710a73be79284b24b4bdad68384348ca33)
Linux arm64 (checksum / 56b9d1b0e0efbb739be6e68a37860ace8ec9c7d3e6424e3b55d4c459bc3a0401)
Linux i386 (checksum / 22b350307d5e5897b3a14f096cb6b2212cc03c22ba29ab7b4ee3e64ab9f3f190)
Linux ppc64le (checksum / 77b7d9bc62b209c044b873bc773055c5c0d17ef055e54c683f33209ebbe8883c)
Linux s390x (checksum / 3c43d45149a425c7bf15ba3653ddee13e7b1a4dd6d4534397b6f317f83c51b58)
Linux riscv64 (checksum / 0eeae246112b4780e61651f9fbe6d778eebf8c8eccca590139b97d167d1b8aeb)
Windows amd64 (checksum / 16d5256f4c2cde0745acb922ba88b7759dfced4bf547b99381084211f81c8629)
Windows arm64 (checksum / 2aac2b87e92c32d44aa81c6412286d9db7e43b22b4c8ac112b68cf69185429bd)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
4.1.4 and 3.20.2 are the next patch releases and will be on April 8, 2026

Changelog

chore(deps): bump the k8s-io group with 7 updates a2369ca (dependabot[bot])
add image index test 90e1056 (Pedro Tôrres)
fix pulling charts from OCI indices 911f2e9 (Pedro Tôrres)
Remove refactorring changes from coalesce_test.go 76dad33 (Evans Mungai)
Fix import 45c12f7 (Evans Mungai)
Update pkg/chart/common/util/coalesce_test.go 26c6f19 (Evans Mungai)
Fix lint warning 09f5129 (Evans Mungai)
Preserve nil values in chart already 417deb2 (Evans Mungai)
fix(values): preserve nil values when chart default is empty map 5417bfa (Evans Mungai)

`v3.19.1`: Helm v3.19.1

Helm v3.19.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.1. The common platform binaries are here:

MacOS amd64 (checksum / 567f50c5855c45e85ecfa50846bf30adad5d68e1d35ff216866b4897e91bcb80)
MacOS arm64 (checksum / 080f320cfc4ee3816fd6c8f73820f4b3d941b10f709e69bf9afd78f8f8e7c92a)
Linux amd64 (checksum / 966bed9b1e0dda11268f59bd7268c3cd3e308b37b070546e1d78a02526ff63f2)
Linux arm (checksum / cd21c7ee767b4138e13ca856f102732cae7270c1bbe6d080a3d98153953550ac)
Linux arm64 (checksum / ceed150305a1d1ef4a37923a7f66931a6807c34a38ea487fa8340e102dd2c7f7)
Linux i386 (checksum / be3b70efa7b0ddaddd60d94ef0a37b69e22a5ee05efbec579729cdaacc2e7c5e)
Linux ppc64le (checksum / acb8a92d873cc2ae2dd44593d88a0bc3a78eb7abd6b3784c3fced9e005401018)
Linux s390x (checksum / 279dcdeaa9f3b42c8558e6e1815466852a80bd373f9a9e83ae7f724ff2cda17f)
Linux riscv64 (checksum / ed0a8b03c2163157a948a67702d1884f4936575f9be953c673748b41bd2a9881)
Windows amd64 (checksum / 3fd3ab4a47364c04c51e0e7387e0598aa2c8c43dd535128665aa43e695cec11e)
Windows arm64 (checksum / 361b04b599ada09be194461cd0347db20276849c22f57adc697963d57a515c6a)

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.0.0 is the next major release and will be on November 12, 2025
3.19.2 and 4.0.01 are the next patch releases and will be on December 10, 2025
3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 4f953c2 (dependabot[bot])
jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 6801f4d (Benoit Tigeot)
Avoid "panic: interface conversion: interface {} is nil" 2f619be (Benoit Tigeot)
Fix helm pull untar dir check with repo urls 8112d47 (Luna Stadler)
Fix deprecation warning 5dff7ce (Benoit Tigeot)
chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 2dad4d2 (dependabot[bot])
Add timeout flag to repo add and update flags a833710 (Reinhard Nägele)
chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0 2e12c81 (Dirk Müller)

nats-io/natscli (natscli)

`v0.4.0`: Release 0.4.0

Enhancements

Adds nats server watch api requests
Support for --window-size for stream backups
Report snapshot time in nats server watch jsz
Support fast batch ingest stream configuration (NATS Server 2.14)
When using nats via Claude Code render help and general UI in Markdown
Add some JSON output features to nats auth
Render account and user names in nats account info
Optimise expected responses for leader only jsz requests
Suoports waiting for replies till empty message received in nats req
Add nats service request command
Report issystem account in nats account info
Support publishing scheduled messages in nats pub (NATS Server 2.14)
Support durable sourcing and add nats consumer reset (NATS Server 2.14)

Removals

Remove the experimental nats server run command

Bug Fixes

Fix typo in flag description for stream command
Various bug fixes and quality improvements to pub and req commands
Various UX and help improvements
Subject name logged is not actual but a template in pub and req
Populate missing Raft group in stream/consumer check
When filtering on host/name force wait=1 for increased responsiveness in a few reports
Fix pub/req commands with piped stdin

New Contributors

@ashumkin made their first contribution in #1601

Full Changelog: nats-io/natscli@v0.3.1...v0.4.0

`v0.3.2`: Release 0.3.2

Updates

This release is identical to version 0.3.1 but updates all dependencies for recent CVE disclosures.

`v0.3.1`: Release 0.3.1

Bug Fixes

Make server a required argument in server graph
Fail when nats sub is called with subjects and durable is set
Fix reported stream name on nats stream cp
Clarify max consumers tier limits in nats account info
Fix queue groups for nats sub graph and report subjects
Fix nil pointer panic in object edit
Default to a hour timeout for obj get
Handle missing selected context
Improve aggregated stats printing in nats bench
Avoid unneeded consumer info in nats c next
Misuse of error var in account backup cmd dir scan
Handle missing objects, keys and buckets better
Clarify the purpose of stream purge in help
Improve nats server password UX
Improve connection logging
Various bug fixes and UX improvements in nats bench
Support mirrors in nats kv edit
Update consumer command description from Stream state to Consumer state

Enhancements

When creating streams create a basic mirror when --defaults are given
Adds a basic counter access tool in nats counter (Requires NATS Server 2.12)
Support metadata in KV buckets
Add additional option to account connections report such as connection state filtering
Add --atomic flag to pub command (Requires NATS Server 2.12)
Add chunk-size option for object put
List multiple RAFT meta groups in server report jetstream
Add support for --jwt auth (bearer token)
Support rendering cluster wide asset leaders by with nats server report js -l
Support terminating at num pending 0 in nats sub using --terminate-at-end
Show details about how many messages were removed in nats s purge
Record cli version when audit gathering, report in output
Adds a --cluster filter to nats audit gather
Implements latency tracking for individual operations in nats bench
Add --cluster option to nats server cluster balance and some safety warnings
Add --seed flag to nats context
Add --tls-cert-warn and --tls-cert-crit flags to server check server (Requires NATS Server 2.12.4)
Add --multisubjectrandomize flag to nats bench
Add --randomize flag to nats bench kv put

New Contributors

@Hoiyeuhng made their first contribution in #1523
@adelina-t made their first contribution in #1541
@ktarplee made their first contribution in #1556
@superlevure made their first contribution in #1578
@hooksie1 made their first contribution in #1567

Full Changelog: nats-io/natscli@v0.3.0...v0.3.1

`v0.3.0`: Release 0.3.0

Enhancements

Add downgrade safety report in nats server report downgrade (requires NATS Server 2.12)
Support configuring and reporting on Batch Publishing (requires NATS Server 2.12)
Support Prioritized consumer groups (requires NATS Server 2.12)
Support offline JetStream assets (requires NATS Server 2.12)
Support message schedules (requires NATS Server 2.12)
Support benchmarking batch publishing using nats bench js pub (requires NATS Server 2.12)
Show when a leader became leader (requires NATS Server 2.12)
Support Stream Persistence Mode (requires NATS Server 2.12)
Support removing mirror configuration in nats stream edit (requires NATS Server 2.12)
Show missing streams in list/report (requires NATS Server 2.12)
Rewrite nats sub to use nats.go/jetstream
Allow stream retention to be edited
Remove API Errors from JetStream reports
Report missing Raft group in stream/consumer check
Batched direct gets in nats bench
Allow sorting nats server watch by names

Bug Fixes

Ensure parsed ints are in correct units
Improve publishing from STDIN for nats pub
Always fail when context doesn't exist
Ensure API calls made by nats.go uses correct timeout
Fix steam-check breaking on pretty-printed JSON
Prints a warning at the end of a nats bench run if a disconnection happened
Validate history falls within limits rather than overflowing
Align with the needs of go 1.24 go vet
Fix MULTILEADER detection in stream/consumer check
Improve help output in various commands
Skip failed nats rtt targets rather than error
Various UX and behaviour improvements to nats bench
Fix stdin handling for nats req command
Perform exact matching when accessing z endpoints (requires NATS Server 2.12)
Improved display of nats bench statistics
Force number of decimal places on Y axis on graphs
Allow B and b when specifying number of bytes
Correctly read the trace message body from user input

Full Changelog: nats-io/natscli@v0.2.4...v0.3.0

serde-rs/serde (serde)

`v1.0.228`

Compare Source

Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#2995)

`v1.0.227`

Compare Source

Documentation improvements (#2991)

`v1.0.226`

Compare Source

Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#2935, thanks @Mingun)

`v1.0.225`

Compare Source

Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#2879, thanks @rcrisanti)

`v1.0.224`

Compare Source

Remove private types being suggested in rustc diagnostics (#2979)

`v1.0.223`

Compare Source

Fix serde_core documentation links (#2978)

`v1.0.222`

Compare Source

Make serialize_with attribute produce code that works if respanned to 2024 edition (#2950, thanks @aytey)

`v1.0.221`

Compare Source

Documentation improvements (#2973)
Deprecate serde_if_integer128! macro (#2975)

`v1.0.220`

Compare Source

Add a way for data formats to depend on serde traits without waiting for serde_derive compilation: https://docs.rs/serde_core (#2608, thanks @osiewicz)

serde-rs/json (serde_json)

`v1.0.149`

Compare Source

Align arbitrary_precision number strings with zmij's formatting (#1306, thanks @b41sh)

`v1.0.148`

Compare Source

Update zmij dependency to 1.0

`v1.0.147`

Compare Source

Switch float-to-string algorithm from Ryū to Żmij for better f32 and f64 serialization performance (#1304)

`v1.0.146`

Compare Source

Set fast_arithmetic=64 for riscv64 (#1305, thanks @Xeonacid)

`v1.0.145`

Compare Source

Raise serde version requirement to >=1.0.220

`v1.0.144`

Compare Source

Switch serde dependency to serde_core (#1285)

taiki-e/install-action (taiki-e/install-action)

`v2.77.7`: 2.77.7

Compare Source

Update mise@latest to 2026.5.6.
Update cargo-deny@latest to 0.19.6.

`v2.77.6`: 2.77.6

Compare Source

Fix wasm-pack installation failure.
Update mise@latest to 2026.5.5.
Update release-plz@latest to 0.3.158.
Update just@latest to 1.51.0.

`v2.77.5`: 2.77.5

Compare Source

Update biome@latest to 2.4.15.
Update mise@latest to 2026.5.4.
Update cargo-deny@latest to 0.19.5.

`v2.77.4`: 2.77.4

Compare Source

Update tombi@latest to 0.11.1.
Update cargo-llvm-cov@latest to 0.8.6.
Update uv@latest to 0.11.12.

`v2.77.3`: 2.77.3

Compare Source

Update typos@latest to 1.46.1.
Update rclone@latest to 1.74.1.
Update tombi@latest to 0.11.0.
Update osv-scanner@latest to 2.3.8.
Update mise@latest to 2026.5.3.

`v2.77.2`: 2.77.2

Compare Source

Update martin@latest to 1.9.0.
Update wasm-bindgen@latest to 0.2.121.
Update uv@latest to 0.11.11.
Update mise@latest to 2026.5.1.
Update prek@latest to 0.3.13.
Update tombi@latest to 0.10.6.

`v2.77.1`: 2.77.1

Compare Source

Support taiki-e/install-action@rust tag.
Update tombi@latest to 0.10.3.
Update martin@latest to 1.8.2.

`v2.77.0`: 2.77.0

Compare Source

Support rust. (#1779)

This installs rust using rustup.

If rustup is not yet installed, this action downloads rustup-init for the current platform using HTTPS with tlsv1.2+, verifies SHA256 checksum, and then installs rustup using it.

This also supports installing additional components at the same time by +<additional> syntax:
```
- uses: taiki-e/install-action@v2
  with:
    # Install rust stable with rustfmt component and wasm32-wasip1 target.
    tool: rust+rustfmt+wasm32-wasip1
    # When installing another rust version:
    # tool: rust@nightly + rustfmt + wasm32-wasip1
```
Fix issue where x86_64 binary will be installed on AArch64 Windows even when AArch64 Windows binary available.
Update mise@latest to 2026.5.0.
Diagnostic improvements.