Skip to content

fix(deps): update all non-major dependencies#617

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pin
Open

fix(deps): update all non-major dependencies#617
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pin

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 1, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action minor v4.2.2 → v4.3.1 age confidence
actions/github-script action minor v7.0.1 → v7.1.0 age confidence
actions/setup-go action minor v5.5.0 → v5.6.0 age confidence
alpine digest 4bcff63 → 2510918
alpine final minor 3.22.1 → 3.23.3 age confidence
codecov/codecov-action action minor v5.4.3 → v5.5.2 age confidence
docker.io/library/alpine minor 3.22.1 → 3.23.3 age confidence
docker.io/target/vela-git-slim minor v0.12.1 → v0.13.0 age confidence
docker/build-push-action action minor v6.18.0 → v6.19.2 age confidence
docker/login-action action minor v3.4.0 → v3.7.0 age confidence
docker/metadata-action action minor v5.7.0 → v5.10.0 age confidence
github.com/alecthomas/chroma/v2 require minor v2.19.0 → v2.23.1 age confidence
github.com/gin-gonic/gin require minor v1.11.0 → v1.12.0 age confidence
github.com/go-vela/sdk-go require minor v0.27.2-0.20251230154052-e1dae5f07d93 → v0.28.0-rc2 age confidence
github.com/go-vela/server require patch v0.27.3-0.20260107161845-56fd3db7dbff → v0.27.5 age confidence
github.com/go-vela/worker require minor v0.27.4-0.20260121151236-120915fe35a9 → v0.28.0-rc1 age confidence
github.com/golang-jwt/jwt/v5 require patch v5.3.0 → v5.3.1 age confidence
github.com/sirupsen/logrus require patch v1.9.3 → v1.9.4 age confidence
github.com/spf13/afero require minor v1.14.0 → v1.15.0 age confidence
github.com/urfave/cli-docs/v3 require minor v3.0.0-alpha6 → v3.1.0 age confidence
github.com/urfave/cli/v3 require minor v3.5.0 → v3.7.0 age confidence
github/codeql-action action minor v3.29.5 → v3.32.4 age confidence
golang.org/x/term require minor v0.34.0 → v0.40.0 age confidence

Release Notes

actions/checkout (actions/checkout)

v4.3.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

actions/github-script (actions/github-script)

v7.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/github-script@v7...v7.1.0

actions/setup-go (actions/setup-go)

v5.6.0

Compare Source

What's Changed

Full Changelog: actions/setup-go@v5...v5.6.0

codecov/codecov-action (codecov/codecov-action)

v5.5.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

docker/build-push-action (docker/build-push-action)

v6.19.2

Compare Source

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Compare Source

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Compare Source

  • Scope default git auth token to github.com by @​crazy-max in #​1451
  • Bump brace-expansion from 1.1.11 to 1.1.12 in #​1396
  • Bump form-data from 2.5.1 to 2.5.5 in #​1391
  • Bump js-yaml from 3.14.1 to 3.14.2 in #​1429
  • Bump lodash from 4.17.21 to 4.17.23 in #​1446
  • Bump tmp from 0.2.3 to 0.2.4 in #​1398
  • Bump undici from 5.28.4 to 5.29.0 in #​1397

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

docker/login-action (docker/login-action)

v3.7.0

Compare Source

Full Changelog: docker/login-action@v3.6.0...v3.7.0

v3.6.0

Compare Source

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

Full Changelog: docker/login-action@v3.4.0...v3.5.0

docker/metadata-action (docker/metadata-action)

v5.10.0

Compare Source

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

Compare Source

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

v5.8.0

Compare Source

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

alecthomas/chroma (github.com/alecthomas/chroma/v2)

v2.23.1

Compare Source

Changelog

v2.23.0

Compare Source

Changelog

  • 610afd8 feat: add light/dark mode toggle
  • 1b5aad9 fix: make just commands faster
  • 84583c6 fix: wait for WASM runtime to become ready at startup
  • 1b6f6e7 fix: need relative import for wasm_exec.js
  • 2a78195 fix: wasm builds got broken by the last change
  • f8a34ec feat: fix local dev so it falls back to server
  • 6827057 refactor: migrate to Just
  • a60896f Create a lexer for Markless (#​1195)

v2.22.0

Compare Source

Changelog

v2.21.1

Compare Source

Changelog

v2.21.0

Compare Source

Changelog

v2.20.0

Compare Source

Changelog

gin-gonic/gin (github.com/gin-gonic/gin)

v1.12.0

Compare Source

Features
  • feat(render): add bson protocol (#​4145)
  • feat(context): add GetError and GetErrorSlice methods for error retrieval (#​4502)
  • feat(binding): add support for encoding.UnmarshalText in uri/query binding (#​4203)
  • feat(gin): add option to use escaped path (#​4420)
  • feat(context): add Protocol Buffers support to content negotiation (#​4423)
  • feat(context): implemented Delete method (#​38e7651)
  • feat(logger): color latency (#​4146)
Enhancements
  • perf(tree): reduce allocations in findCaseInsensitivePath (#​4417)
  • perf(recovery): optimize line reading in stack function (#​4466)
  • perf(path): replace regex with custom functions in redirectTrailingSlash (#​4414)
  • perf(tree): optimize path parsing using strings.Count (#​4246)
  • chore(logger): allow skipping query string output (#​4547)
  • chore(context): always trust xff headers from unix socket (#​3359)
  • chore(response): prevent Flush() panic when the underlying ResponseWriter does not implement http.Flusher (#​4479)
  • refactor(recovery): smart error comparison (#​4142)
  • refactor(context): replace hardcoded localhost IPs with constants (#​4481)
  • refactor(utils): move util functions to utils.go (#​4467)
  • refactor(binding): use maps.Copy for cleaner map handling (#​4352)
  • refactor(context): using maps.Clone (#​4333)
  • refactor(ginS): use sync.OnceValue to simplify engine function (#​4314)
  • refactor: replace magic numbers with named constants in bodyAllowedForStatus (#​4529)
  • refactor: for loop can be modernized using range over int (#​4392)
Bug Fixes
  • fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (#​4535)
  • fix(render): write content length in Data.Render (#​4206)
  • fix(context): ClientIP handling for multiple X-Forwarded-For header values (#​4472)
  • fix(binding): empty value error (#​2169)
  • fix(recover): suppress http.ErrAbortHandler in recover (#​4336)
  • fix(gin): literal colon routes not working with engine.Handler() (#​4415)
  • fix(gin): close os.File in RunFd to prevent resource leak (#​4422)
  • fix(response): refine hijack behavior for response lifecycle (#​4373)
  • fix(binding): improve empty slice/array handling in form binding (#​4380)
  • fix(debug): version mismatch (#​4403)
  • fix: correct typos, improve documentation clarity, and remove dead code (#​4511)
Build process updates / CI
  • ci: update Go version support to 1.25+ across CI and docs (#​4550)
  • chore(binding): upgrade bson dependency to mongo-driver v2 (#​4549)
go-vela/sdk-go (github.com/go-vela/sdk-go)

v0.28.0-rc2

Compare Source

What's Changed

Full Changelog: go-vela/sdk-go@v0.28.0-rc1...v0.28.0-rc2

go-vela/server (github.com/go-vela/server)

v0.27.5

Compare Source

No changes. API spec and JSONSchema were not attached as release assets to the previous release (immutable release). The latter of which powers validation in IDEs and such. This release should address that issue.

Full Changelog: go-vela/server@v0.27.4...v0.27.5

v0.27.4

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.3...v0.27.4

go-vela/worker (github.com/go-vela/worker)

v0.28.0-rc1

Compare Source

What's Changed

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Indicates a change to dependencies label Aug 1, 2025
@renovate renovate bot requested a review from a team as a code owner August 1, 2025 10:35
@codecov
Copy link

codecov bot commented Aug 1, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.44%. Comparing base (15bda2c) to head (bc8f1ff).

❌ Your project check has failed because the head coverage (71.44%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #617   +/-   ##
=======================================
  Coverage   71.44%   71.44%           
=======================================
  Files         174      174           
  Lines        4718     4718           
=======================================
  Hits         3371     3371           
  Misses       1042     1042           
  Partials      305      305
Files with missing lines Coverage Δ
command/pipeline/exec.go 0.00% <ø> (ø)
command/pipeline/validate.go 64.28% <ø> (ø)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 7a34212 to a431981 Compare August 4, 2025 11:45
@renovate renovate bot changed the title chore(deps): update docker/metadata-action action to v5.8.0 fix(deps): update all non-major dependencies Aug 4, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 6 times, most recently from 0fd97be to ea8972d Compare August 11, 2025 14:27
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 43896be to 66ad1b7 Compare August 18, 2025 13:25
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 0bf66b6 to 6a853eb Compare August 21, 2025 18:06
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 2ca2135 to 3a18b40 Compare August 29, 2025 19:59
wass3rw3rk
wass3rw3rk previously approved these changes Aug 29, 2025
View reviewed changes
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 8c23321 to 68b5dec Compare September 8, 2025 05:03
@renovate
Copy link
Contributor Author

renovate bot commented Sep 8, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 14 additional dependencies were updated

Details:

Package Change
github.com/bytedance/sonic v1.13.3 -> v1.14.0
github.com/bytedance/sonic/loader v0.2.4 -> v0.3.0
github.com/cloudwego/base64x v0.1.5 -> v0.1.6
github.com/docker/docker v28.3.3+incompatible -> v28.5.1+incompatible
github.com/go-playground/validator/v10 v10.26.0 -> v10.27.0
github.com/klauspost/cpuid/v2 v2.2.11 -> v2.3.0
golang.org/x/arch v0.18.0 -> v0.20.0
golang.org/x/net v0.42.0 -> v0.43.0
golang.org/x/sync v0.16.0 -> v0.17.0
golang.org/x/sys v0.35.0 -> v0.39.0
google.golang.org/protobuf v1.36.6 -> v1.36.9
k8s.io/api v0.34.0 -> v0.34.1
k8s.io/apimachinery v0.34.0 -> v0.34.1
k8s.io/client-go v0.34.0 -> v0.34.1

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from b2ce7ee to a1e8c1b Compare September 10, 2025 18:10
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 4b148dc to 467ca38 Compare September 25, 2025 10:45
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from cbfd276 to 1b0fd0c Compare January 15, 2026 10:57
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 5 times, most recently from daf428e to 11cb3a0 Compare January 23, 2026 19:10
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from fa2d3b7 to c0de5e9 Compare February 2, 2026 17:01
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 10 times, most recently from 36debe4 to c9665ad Compare February 12, 2026 19:46
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from c9665ad to f21091b Compare February 13, 2026 14:01
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 4aafdd7 to 7501c6b Compare February 27, 2026 01:39
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 3db7cd1 to 06911f9 Compare February 28, 2026 13:29
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 06911f9 to bc8f1ff Compare March 1, 2026 21:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wass3rw3rk wass3rw3rk wass3rw3rk left review comments

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Indicates a change to dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@wass3rw3rk