chore(deps): update all non-major dependencies#2909
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
added
area: dependencies
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
13 times, most recently
from
39011ed to
f0caa2f
Compare
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
140eb61 to
297025f
Compare
renovate
Bot
added
the
area: github actions
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
297025f to
b9056fe
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
24.13.2→24.13.3v2.1.0→v2.1.1v2.0.7→v2.0.8v2.0.4→v2.0.5v0.20.0→v0.21.0v1.33.0→v1.34.0v0.57.0→v0.58.0v0.57.0→v0.58.0v1.42.0→v1.42.1v1.7.13→v1.7.14v1.32.26→v1.32.29v1.19.25→v1.19.28v1.18.29→v1.18.30v1.4.29→v1.4.30v2.7.29→v2.7.30v1.4.30→v1.4.31v1.13.12→v1.13.13v1.9.22→v1.9.23v1.13.29→v1.13.30v1.104.1→v1.105.0v1.2.1→v1.4.0v1.31.4→v1.32.0v1.36.7→v1.37.0v1.43.4→v1.44.0f39628c→f5a850fv2.2.2→v2.3.0v0.3.17→v0.3.18v2.22.0→v2.23.0v1.18.7→v1.19.0ba97887→8ae5a481.26.4→1.26.5v0.53.0→v0.54.0c48552f→9ea1abev0.56.0→v0.57.0v0.21.0→v0.22.0v0.46.0→v0.47.0v0.44.0→v0.45.0v0.38.0→v0.40.0v1.0.4→v1.1.0v0.287.0→v0.288.0925bb5d→f0a9213925bb5d→f0a9213925bb5d→f0a921319def06→225512226.1.0→26.2.011.9.0+sha512.bd682d5d03fe525ef7c9fd6780c6884d1e756ac4c9c9fe00c538782824310dcf90e3ddc4f53835f06dfaebd5085e41855e0bcbb3b60de2ac5bbab89e5036f03b→11.11.011.9.0→11.11.03.9.4→3.9.5Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
charmbracelet/bubbles (charm.land/bubbles/v2)
v2.1.1Compare Source
Lil’ Textarea Fix
This is a tiny patch to fix a bug in
textareawhere the prompt character could be missing styling on empty lines. That’s all for now!Thanks for using Bubbles,
Charm 🌞
Changelog
Fixed
d2b2217: fix(textarea): apply prompt style on all lines, including fillers (@meowgorithm)Docs
a13f110: docs: fix typo in README (#921) (@Rohan5commit)Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.
charmbracelet/bubbletea (charm.land/bubbletea/v2)
v2.0.8Compare Source
Graphemes, schmraphemes
No terminal can render emojis perfectly, but we can try. This release improves some very specific edge cases around emoji rendering. Enjoy!
Changelog
db569ad: fix(deps): bump ultraviolet for emoji-related rendering improvementsThoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.
charmbracelet/lipgloss (charm.land/lipgloss/v2)
v2.0.5Compare Source
Changelog
Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.
googleapis/google-cloud-go (cloud.google.com/go/auth)
v0.21.0Compare Source
bigquery:
firestore:
whose Exists method returns false. DocumentRef.Get and Transaction.Get
return the non-nil DocumentSnapshot in addition to a NotFound error.
DocumentRef.GetAll and Transaction.GetAll return a non-nil
DocumentSnapshot instead of nil.
DocumentIterator.
notification of updates. See https://cloud.google.com/firestore/docs/query-data/listen.
spanner:
CommitTimestamp, which supports inserting the commit timestamp of atransaction into a column.
aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)
v1.42.1Compare Source
Module Highlights
github.com/aws/aws-sdk-go-v2/service/acm: v1.37.0github.com/aws/aws-sdk-go-v2/service/aiops: v1.6.0github.com/aws/aws-sdk-go-v2/service/appflow: v1.50.0github.com/aws/aws-sdk-go-v2/service/appsync: v1.51.0github.com/aws/aws-sdk-go-v2/service/athena: v1.55.0github.com/aws/aws-sdk-go-v2/service/autoscaling: v1.58.0github.com/aws/aws-sdk-go-v2/service/b2bi: v1.0.0-preview.79github.com/aws/aws-sdk-go-v2/service/bedrock: v1.45.0github.com/aws/aws-sdk-go-v2/service/bedrockagent: v1.50.0github.com/aws/aws-sdk-go-v2/service/bedrockdataautomation: v1.9.0github.com/aws/aws-sdk-go-v2/service/bedrockdataautomationruntime: v1.7.0github.com/aws/aws-sdk-go-v2/service/braket: v1.37.0github.com/aws/aws-sdk-go-v2/service/chatbot: v1.14.0github.com/aws/aws-sdk-go-v2/service/chimesdkmediapipelines: v1.26.0github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.31.0github.com/aws/aws-sdk-go-v2/service/cloudcontrol: v1.28.0github.com/aws/aws-sdk-go-v2/service/cloudformation: v1.65.0github.com/aws/aws-sdk-go-v2/service/cloudsearch: v1.31.0github.com/aws/aws-sdk-go-v2/service/cloudtraildata: v1.16.0github.com/aws/aws-sdk-go-v2/service/cloudwatchevents: v1.32.0github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.57.0github.com/aws/aws-sdk-go-v2/service/codeartifact: v1.38.0github.com/aws/aws-sdk-go-v2/service/codegurusecurity: v1.16.3github.com/aws/aws-sdk-go-v2/service/codestarnotifications: v1.31.0github.com/aws/aws-sdk-go-v2/service/connectparticipant: v1.34.0github.com/aws/aws-sdk-go-v2/service/controltower: v1.26.0github.com/aws/aws-sdk-go-v2/service/costandusagereportservice: v1.33.0github.com/aws/aws-sdk-go-v2/service/datazone: v1.39.0github.com/aws/aws-sdk-go-v2/service/dax: v1.28.0github.com/aws/aws-sdk-go-v2/service/devicefarm: v1.35.0github.com/aws/aws-sdk-go-v2/service/devopsguru: v1.39.0github.com/aws/aws-sdk-go-v2/service/directconnect: v1.37.0github.com/aws/aws-sdk-go-v2/service/docdbelastic: v1.19.0github.com/aws/aws-sdk-go-v2/service/ec2: v1.246.0github.com/aws/aws-sdk-go-v2/service/eks: v1.72.0github.com/aws/aws-sdk-go-v2/service/emrcontainers: v1.39.0github.com/aws/aws-sdk-go-v2/service/finspacedata: v1.33.0github.com/aws/aws-sdk-go-v2/service/forecast: v1.41.0github.com/aws/aws-sdk-go-v2/service/fsx: v1.61.0github.com/aws/aws-sdk-go-v2/service/groundstation: v1.37.0github.com/aws/aws-sdk-go-v2/service/health: v1.34.0github.com/aws/aws-sdk-go-v2/service/iotdataplane: v1.32.0github.com/aws/aws-sdk-go-v2/service/iotfleethub: v1.29.0github.com/aws/aws-sdk-go-v2/service/iotsitewise: v1.51.0github.com/aws/aws-sdk-go-v2/service/kendra: v1.60.0github.com/aws/aws-sdk-go-v2/service/keyspaces: v1.23.0github.com/aws/aws-sdk-go-v2/service/kinesisanalytics: v1.30.0github.com/aws/aws-sdk-go-v2/service/kinesisvideoarchivedmedia: v1.32.0github.com/aws/aws-sdk-go-v2/service/lambda: v1.77.0github.com/aws/aws-sdk-go-v2/service/lexmodelsv2: v1.56.0github.com/aws/aws-sdk-go-v2/service/lexruntimeservice: v1.29.0github.com/aws/aws-sdk-go-v2/service/licensemanager: v1.36.0github.com/aws/aws-sdk-go-v2/service/lookoutequipment: v1.35.0github.com/aws/aws-sdk-go-v2/service/mailmanager: v1.17.0github.com/aws/aws-sdk-go-v2/service/marketplacecatalog: v1.36.0github.com/aws/aws-sdk-go-v2/service/mediaconvert: v1.82.0github.com/aws/aws-sdk-go-v2/service/mediapackagevod: v1.39.0github.com/aws/aws-sdk-go-v2/service/mediastore: v1.29.0github.com/aws/aws-sdk-go-v2/service/migrationhubstrategy: v1.26.0github.com/aws/aws-sdk-go-v2/service/odb: v1.4.0github.com/aws/aws-sdk-go-v2/service/opensearchserverless: v1.25.0github.com/aws/aws-sdk-go-v2/service/opsworkscm: v1.32.0github.com/aws/aws-sdk-go-v2/service/outposts: v1.56.0github.com/aws/aws-sdk-go-v2/service/pcaconnectorad: v1.15.0github.com/aws/aws-sdk-go-v2/service/personalizeruntime: v1.32.0github.com/aws/aws-sdk-go-v2/service/qbusiness: v1.33.0github.com/aws/aws-sdk-go-v2/service/redshiftserverless: v1.31.0github.com/aws/aws-sdk-go-v2/service/repostspace: v1.14.0github.com/aws/aws-sdk-go-v2/service/resiliencehub: v1.34.0github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi: v1.30.0github.com/aws/aws-sdk-go-v2/service/sagemakeredge: v1.30.0github.com/aws/aws-sdk-go-v2/service/sagemakerfeaturestoreruntime: v1.34.0github.com/aws/aws-sdk-go-v2/service/sagemakerruntime: v1.37.0github.com/aws/aws-sdk-go-v2/service/serverlessapplicationrepository: v1.29.0github.com/aws/aws-sdk-go-v2/service/servicecatalog: v1.38.0github.com/aws/aws-sdk-go-v2/service/sfn: v1.39.0github.com/aws/aws-sdk-go-v2/service/shield: v1.34.0github.com/aws/aws-sdk-go-v2/service/snowball: v1.35.0github.com/aws/aws-sdk-go-v2/service/sqs: v1.42.1github.com/aws/aws-sdk-go-v2/service/ssoadmin: v1.35.0github.com/aws/aws-sdk-go-v2/service/storagegateway: v1.42.0github.com/aws/aws-sdk-go-v2/service/support: v1.31.0github.com/aws/aws-sdk-go-v2/service/supportapp: v1.18.0github.com/aws/aws-sdk-go-v2/service/taxsettings: v1.16.0github.com/aws/aws-sdk-go-v2/service/timestreaminfluxdb: v1.16.0github.com/aws/aws-sdk-go-v2/service/transcribe: v1.52.0github.com/aws/aws-sdk-go-v2/service/transcribestreaming: v1.31.0github.com/aws/aws-sdk-go-v2/service/translate: v1.33.0github.com/aws/aws-sdk-go-v2/service/wellarchitected: v1.39.0github.com/aws/aws-sdk-go-v2/service/workspacesthinclient: v1.20.0dlclark/regexp2 (github.com/dlclark/regexp2/v2)
v2.3.0Compare Source
googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)
v0.3.18Compare Source
googleapis/gax-go (github.com/googleapis/gax-go/v2)
v2.23.0Compare Source
Features
Bug Fixes
klauspost/compress (github.com/klauspost/compress)
v1.19.0Compare Source
What's Changed
decodedLenby @eustas in #1148New Contributors
Full Changelog: klauspost/compress@v1.18.6...v1.19.0
golang/go (go)
v1.26.5Compare Source
golang/govulncheck-action (golang/govulncheck-action)
v1.1.0Compare Source
Full Changelog: golang/govulncheck-action@v1.0.4...v1.1.0
googleapis/google-api-go-client (google.golang.org/api)
v0.288.0Compare Source
Features
v0.287.1Compare Source
Documentation
netlify/cli (netlify-cli)
v26.2.0Compare Source
Features
Bug Fixes
&&,||, etc.) (#8234) (d07599e)pnpm/pnpm (pnpm)
v11.11.0Compare Source
Minor Changes
508b8c2: Added thepnpm accesscommand for managing package access and visibility on the registry, supporting listing packages and collaborators, getting and setting package status and MFA requirements, and granting or revoking team access.Patch Changes
c70e33e: AllowallowBuildsentries for git-hosted packages to match by repository URL without pinning the resolved commit hash. This lets trusted git repositories keep running their build scripts after branch updates without approving each new commit, while package-name-only rules still do not approve git-hosted artifacts.3067e4f: Reduced peak memory usage during cold-cache dependency resolution. The metadata fetch is memoized for the whole resolution phase, and it was retaining each package's raw registry response body (used only to mirror the response to disk) for that entire time. The memoized cache now holds a body-less copy, so the raw body only lives as long as the call that writes the disk mirror. On large graphs that fetch full metadata (e.g. withminimumReleaseAgeortrustPolicyenabled) this cuts peak RSS by roughly 30%, back in line with pnpm 10. The resolved lockfile is unchanged.51300fd: Prevent a craftedpnpm-lock.yamlfrom writing package content outside the virtual store. A dependency path key whose name reconstructs to a path-traversal sequence (e.g.../../../tmp/x@1.0.0) is now rejected by the isolated (virtual-store) linker and the Plug'n'Play resolver map, matching the containment already applied to the hoisted linker. Under the global virtual store, a traversal in the version-derived path segment (e.g. a snapshotversion: "../../x") is now rejected atformatGlobalVirtualStorePath, the single point every global-virtual-store slot path funnels through — closing the same escape in the isolated linker, the resolver's dependency-graph builder, and the config-dependency installer.f8058eb: Reject symlinkedpnpm-lock.yamlfiles when reading or writing the env lockfile document.9318a11: AllowregistriesandnamedRegistriesto be configured in the globalconfig.yamlfile.51300fd: Fixed a path traversal vulnerability where a dependency whose manifestnamewas a scoped path traversal (e.g.@x/../../../<path>) could be written outsidenode_modulesto an attacker-controlled location duringpnpm install, even with--ignore-scripts. The isolated linker now validates the package name before using it as a directory name, matching the existing protection in the hoisted linker.14332f0: Fail instead of silently removing an optional dependency's locked entries frompnpm-lock.yamlwhen the registry cannot resolve it. Previously, when registry metadata lacked a version that the lockfile already pinned (for example, a mirror that had not synced a recent release yet),pnpm installandpnpm dedupesilently dropped the optional dependency's entries — emptying maps such as the platform binaries of@napi-rs/canvas— so the lockfile differed between machines and frozen installs on other hosts had nothing to link #12853.fecfe83: Fixed peer dependency resolution withautoInstallPeerswhen a workspace package depends on a version of a package that a transitive dependency's self-contained closure also provides for itself. The peer providers that are attached to the root project for reuse are no longer peer-resolved a second time in the root context, so packages inside such a closure no longer get their peers bound to the root project's incompatible version #4993.5a4daec:${...}environment-variable placeholders in thehttpProxy,httpsProxy,noProxy,proxy, andnoproxysettings are no longer expanded when these settings come from a project'spnpm-workspace.yaml. They now receive the same protection already applied toregistry,namedRegistries, andpnprServer.d1da02e:pnpm publishno longer prints credentials when the target registry is configured with inlineuser:pass@credentials (e.g.registry=https://user:pass@example.com/). They are now redacted both from the "publishing to registry" line and from the OIDC (trusted publishing) failure messages.dcfc611:pnpm self-updatenow honorstrustPolicy=no-downgrade. It resolves the target pnpm version against full registry metadata, so it refuses to switch to a version whose supply-chain trust evidence is weaker than an earlier-published one, the same way a regular install does.a8ad82d: Register thepnalias in generated shell completion scripts.25bd5c3: Fixed standalone installer downgrades from pnpm v12 to v11.23996e9:pnpm runtime set <name> <version>now validates its arguments: the name must benode,deno, orbun, and the version must not contain a comma. Previously these were interpolated straight into apnpm addselector, where an unsupported name or a comma (e.g.node 22,is-positive) could be misread as a list of packages or a local directory and install unintended packages or bins.v11.10.0Compare Source
Minor Changes
e2e3c81: Added theissuescommand as an alias ofbugs, sopnpm issuesopens the package's bug tracker URL in the browser.8491f8e: Added theprefixcommand which prints the current package prefix directory (or global prefix directory if-g/--globalis used).3425e80: Added an_authsetting for configuring registry authentication as a single structured (URL-keyed) value. It can be set in the global pnpm config (config.yaml) or, for CI, via thepnpm_config__authenvironment variable. The env form sidesteps the GitHub Actions / bash / zsh limitation that broke the existingpnpm_config_//host/:_authToken=…form (env var names containing/,:, or.are silently dropped). Closes [#12314](htConfiguration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.