fix(deps): update minor/patch updates

[descope]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
github.com/descope/terraform-provider-descope/shim	v0.2.4 → v0.3.6			require	minor
github.com/pulumi/pulumi-terraform-bridge/v3	v3.117.0 → v3.121.0			require	minor	v3.122.0
go (source)	1.25.4 → 1.26.0			toolchain	minor
go (source)	1.24.8 → 1.26.0			toolchain	minor
golang.org/x/text	v0.31.0 → v0.34.0			require	minor
golangci-lint	2.6.2 → 2.10.1				minor
node (source)	20.19.5 → 20.20.0				minor
python	3.11.8 → 3.14.3				minor

---

Release Notes

descope/terraform-provider-descope (github.com/descope/terraform-provider-descope/shim)

v0.3.6

Compare Source

What's Changed

• Add exclude_permission_claim, override_subject_claim, and add_jti_claim to JWT templates.
• Add mandatory user attributes configuration to SSO settings.

Upgrading

See the release notes for v0.3.1 for important notes if you're upgrading from a v0.2.x version.

v0.3.5

Compare Source

What's Changed

• Add resource descope_management_key for managing management keys in a Descope account.
• Add resource descope_descoper for managing console users in a Descope account.
• Add groups_priority attribute to sso settings.
• Add admin_portal attribute to project settings.
• Add support for managing custom attributes on access keys.
• Add new connector types.

Upgrading

See the release notes for v0.3.1 for important notes if you're upgrading from a v0.2.x version.

v0.3.4

Compare Source

What's Changed

• Add disable_jit_updates attribute to OAuth settings.
• Add mask_pii attribute to datadog connector.
• Fix issue with service_label attribute in TOTP settings.

Upgrading

See the release notes for v0.3.1 for important notes if you're upgrading from a v0.2.x version.

v0.3.3

Compare Source

What's Changed

• Remove requirement to provide a principal project_id and from now on only a management_key is needed to use the Descope provider.
• Add allow_override_roles attribute to sso settings.
• Add support for general purpose lists in projects.
• Always read jwt_templates value when any are set in the project settings.

Upgrading

See the release notes for v0.3.1 for important notes if you're upgrading from a v0.2.x version.

v0.3.2

Compare Source

What's Changed

• Add allow_duplicate_domains attribute to sso settings.
• Fix certificate attribute to not be required in saml applications.

Upgrading

See the release notes for v0.3.1 for important notes if you're upgrading from a v0.2.x version.

v0.3.1

Compare Source

What's Changed

• Add key attribute to roles objects to maintain user role consistency.
• Role matching will keep the same behavior as before until the key attributes are set.
• Add temporary_lock and associated attributes to password settings.

Upgrading

If you're managing authorization using the Terraform provider, it's recommended to give each object in the roles list a unique value for the new key attribute (see more details about this attribute below). You can follow these steps:

1. For each role object in your .tf file, add a new attribute called key and give it a unique value. The specific value doesn't matter, but taking the role name and converting to camel_case is a good option.

   

2. Do not make any other changes to your roles. Run terraform apply and ensure that the diff only shows the new key attributes as being added.

   

3. Confirm the terraform apply operation to update the .tfstate.

   

4. If you run terraform apply without setting the key attributes the provider will show a warning for each role.

   

5. Any changes made to existing roles from now on should always make sure to preserve the key value (see below).

Role Keys

The role objects in the roles list now support a new key attribute. The key is a persistent value that identifies a role uniquely across plan changes and configuration updates. It is used exclusively by the Terraform provider during planning, to ensure that user roles are maintained consistently even when role names or other details are changed. Once the key is set it should never be changed, otherwise the role will be removed and a new one will be created instead.

When upgrading to this release it's recommended to set an explicit key value on each role object, and then to apply the plan without any other changes. The provider will display a warning as long as there roles without a key attribute set.

v0.3.0

Compare Source

What's Changed

• Add key attribute to roles objects to maintain user role consistency.
• Add validation to ensure flows have their role requirements satisfied.
• Added service_label attribute to totp authentication settings.
• Add support for key generators and native clients in apple OAuth provider.
• Add invite_expiration and expire_invited_users attributes to invite_settings object.

Upgrading

See the release notes for v0.3.1 for important notes about upgrading.

pulumi/pulumi-terraform-bridge (github.com/pulumi/pulumi-terraform-bridge/v3)

v3.121.0

Compare Source

What's Changed

• Remove downstream test workflow and downstream test script by @​guineveresaenger in #​3330
• Fix import section for new format by @​corymhall in #​3310
• Remove tfgen keyword-based doc elision by @​corymhall in #​3329
• Better example cache key invalidation by @​blampe in #​3336

Full Changelog: pulumi/pulumi-terraform-bridge@v3.120...v3.121.0

v3.120.0

Compare Source

What's Changed

• Restore default make goal to be 'build' by @​pose in #​3291
• [pf] Fix Required() for pf-bridged providers by @​pgavlin in #​3298
• Only parse stdout by @​blampe in #​3302
• Add deprecation notice for Wavefront by @​guineveresaenger in #​3305
• Update Opentofu to 1.11.4 by @​guineveresaenger in #​3321
• Upgrade Pulumi to v3.218.0 by @​guineveresaenger in #​3322

Full Changelog: pulumi/pulumi-terraform-bridge@v3.119.0...v3.120.0

v3.119.0

Compare Source

What's Changed

• Set Checker interface for schema.go by @​VenelinMartinov in #​3270
• Terraform State interface for schema.go by @​VenelinMartinov in #​3271
• Expose ToCtyType by @​VenelinMartinov in #​3274
• Propagate secretness in marshalled provider info by @​VenelinMartinov in #​3285
• Drop schema-tools dependency by @​blampe in #​3287

Full Changelog: pulumi/pulumi-terraform-bridge@v3.118.0...v3.119.0

v3.118.0

Compare Source

What's Changed

• [doc gen] Add support for console code blocks by @​pose in #​3243
• Fix timeout handling when computing raw state delta by @​Zaid-Ajaj in #​3248
• deps: updating go modules for dependabot by @​rshade in #​3256
• Unbreak main by @​blampe in #​3266

Full Changelog: pulumi/pulumi-terraform-bridge@v3.117.0...v3.118.0

golangci/golangci-lint (golangci-lint)

v2.10.1

Compare Source

Released on 2026-02-17

1. Fixes
   • buildssa panic

v2.10.0

Compare Source

Released on 2026-02-17

1. Linters new features or changes
   • ginkgolinter: from 0.22.0 to 0.23.0
   • gosec: from 2.22.11 to 2.23.0 (new rules: G117, G602, G701, G702, G703, G704, G705, G706)
   • staticcheck: from 0.6.1 to 0.7.0
2. Linters bug fixes
   • godoclint: from 0.11.1 to 0.11.2

v2.9.0

Compare Source

Released on 2026-02-10

1. Enhancements
   • 🎉 go1.26 support
2. Linters new features or changes
   • arangolint: from 0.3.1 to 0.4.0 (new rule: detect potential query injections)
   • ginkgolinter: from 0.21.2 to 0.22.0 (support for wrappers)
   • golines: from 0.14.0 to 0.15.0
   • misspell: from 0.7.0 to 0.8.0
   • revive: from v1.13.0 to v1.14.0 (new rules: epoch-naming, use-slices-sort)
   • unqueryvet: from 1.4.0 to 1.5.3 (new options: check-n1, check-sql-injection, check-tx-leaks, allow, custom-rules)
   • wsl_v5: from 5.3.0 to 5.6.0 (new rule: after-block)
3. Linters bug fixes
   • modernize: from 0.41.0 to 0.42.0
   • prealloc: from 1.0.1 to 1.0.2
   • protogetter: from 0.3.18 to 0.3.20
4. Misc.
   • Log information about files when configuration verification
   • Emit an error when no linters enabled
   • Do not collect VCS information when loading code

v2.8.0

Compare Source

Released on 2026-01-07

1. Linters new features or changes
   • godoclint: from 0.10.2 to 0.11.1 (new rule: require-stdlib-doclink)
   • golines: from 442fd00 to 0.14.0
   • gomoddirectives: from 0.7.1 to 0.8.0
   • gosec: from daccba6 to 2.22.11 (new rule: G116)
   • modernize: from 0.39.0 to 0.40.0 (new analyzers: stringscut, unsafefuncs)
   • prealloc: from 1.0.0 to 1.0.1 (message changes)
   • unqueryvet: from 1.3.0 to 1.4.0 (new options: check-aliased-wildcard, check-string-concat, check-format-strings, check-string-builder, check-subqueries, ignored-functions, sql-builders)
2. Linters bug fixes
   • gocritic: from 0.14.2 to 0.14.3
   • errorlint: from 1.8.0 to 1.9.0
   • govet: from 0.39.0 to 0.40.0
   • protogetter: from 0.3.17 to 0.3.18
   • revive: add missing enable-default-rules setting
3. Documentation
   • docs: split installation page

v2.7.2

Compare Source

Released on 2025-12-07

1. Linter bug fixes
   • gosec: from 2.22.10 to daccba6

v2.7.1

Compare Source

Released on 2025-12-04

1. Linter bug fixes
   • modernize: disable stringscut analyzer

v2.7.0

Compare Source

Released on 2025-12-03

1. Bug fixes
   • fix: clone args used by custom command
2. Linters new features or changes
   • nosprintfhostport: from 0.2.0 to 0.3.1 (ignore string literals without a colon)
   • unqueryvet: from 1.2.1 to 1.3.0 (handles const and var declarations)
   • revive: from 1.12.0 to 1.13.0 (new option: enable-default-rules, new rules: forbidden-call-in-wg-go, unnecessary-if, inefficient-map-lookup)
   • modernize: from 0.38.0 to 0.39.0 (new analyzers: plusbuild, stringscut)
3. Linters bug fixes
   • perfsprint: from 0.10.0 to 0.10.1
   • wrapcheck: from 2.11.0 to 2.12.0
   • godoclint: from 0.10.1 to 0.10.2
4. Misc.
   • Add some flags to the custom command
5. Documentation
   • docs: split changelog v1 and v2

nodejs/node (node)

v20.20.0: 2026-01-13, Version 20.20.0 'Iron' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

• (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#802
• (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
  lib,permission:
• (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
  src:
• (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
  src,lib:
• (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
  tls:
• (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

Commits

• [8f9ba3f623] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #​60997
• [97fc9b0eb7] - deps: update undici to 6.23.0 (Matteo Collina) nodejs-private/node-private#792
• [14fbbb510c] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#802
• [1febc48d5b] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
• [494f62dc23] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
• [d7a5c587c0] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
• [51f4de4b4a] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
• [85f73e7057] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

v20.19.6: 2025-11-25, Version 20.19.6 'Iron' (LTS), @​marco-ippolito

Compare Source

Notable Changes

• [6277910a15] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #​59571
• [082e50d4a2] - doc: update the instruction on how to verify releases (Antoine du Hamel) #​59113
• [db68cec4cb] - doc: deprecate HTTP/2 priority signaling (Matteo Collina) #​58313

Commits

• [0f644df42e] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #​59547
• [fba0025b9c] - build: use windows-2025 runner (Michaël Zasso) #​59673
• [3456ec946d] - crypto: update root certificates to NSS 3.116 (Node.js GitHub Bot) #​59956
• [6277910a15] - crypto: update root certificates to NSS 3.114 (Node.js GitHub Bot) #​59571
• [1788fb5f3d] - deps: update undici to 6.22.0 (Matteo Collina) #​60112
• [5d61b55f24] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #​59791
• [9f1e5e4637] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #​59689
• [d0edb01d25] - deps: update googletest to eb2d85e (Node.js GitHub Bot) #​59335
• [576242ff39] - deps: V8: cherry-pick a0d0d4f (Ho Cheung) #​60716
• [a07a277020] - deps: update corepack to 0.34.1 (Node.js GitHub Bot) #​60314
• [fa5c5af8ce] - deps: update archs files for openssl-3.0.17 (Node.js GitHub Bot) #​59134
• [556113e2fc] - deps: upgrade openssl sources to openssl-3.0.17 (Node.js GitHub Bot) #​59134
• [cd1536ca90] - deps: update corepack to 0.34.0 (Node.js GitHub Bot) #​59133
• [acec79989e] - deps: V8: cherry-pick 6b1b9bc (zhoumingtao) #​59283
• [e65b930aa7] - deps: V8: backport 2e4c5cf (Michaël Zasso) #​60654
• [1b75a601f7] - doc: fix typo on child_process.md (Angelo Gazzola) #​60114
• [a2bcb217c6] - doc: fix typo in section on microtask order (Tobias Nießen) #​59932
• [2426d3f3ff] - doc: add security escalation policy (Ulises Gascón) #​59806
• [e7f6f04758] - doc: add Miles Guicent as triager (Miles Guicent) #​59562
• [e51ef3f48b] - doc: update install_tools.bat free disk space (Stefan Stojanovic) #​59579
• [8a504d900a] - doc: fix missing link to the Error documentation in the http page (Alexander Makarenko) #​59080
• [8c5c8aa71d] - doc: clarify experimental platform vulnerability policy (Matteo Collina) #​59591
• [109c4bff77] - doc: add security incident reponse plan (Rafael Gonzaga) #​59470
• [4f004efdf3] - doc: add RafaelGSS as performance strategic lead (Rafael Gonzaga) #​59445
• [caa2db4bac] - doc: fix links in test.md (Vas Sudanagunta) #​58876
• [082e50d4a2] - doc: update the instruction on how to verify releases (Antoine du Hamel) #​59113
• [19a66365d9] - doc: clarify DEP0194 scope (Antoine du Hamel) #​58504
• [db68cec4cb] - doc: deprecate HTTP/2 priority signaling (Matteo Collina) #​58313
• [3b2368774f] - doc: make Stability labels not sticky in Stability index (Livia Medeiros) #​58291
• [960d05ad7d] - doc: add history entries to --input-type section (Antoine du Hamel) #​58175
• [20616f1750] - http2: do not crash on mismatched ping buffer length (René) #​60135
• [9eb94232c8] - lib: handle superscript variants on windows device (Rafael Gonzaga) #​59261
• [dc58b4e35f] - meta: move Michael to emeritus (Michael Dawson) #​60070
• [d943cfb260] - meta: bump actions/setup-node from 4.4.0 to 5.0.0 (dependabot[bot]) #​60093
• [de9a3aaf0f] - meta: bump step-security/harden-runner from 2.12.2 to 2.13.1 (dependabot[bot]) #​60094
• [b4b5d4a4d7] - meta: bump ossf/scorecard-action from 2.4.2 to 2.4.3 (dependabot[bot]) #​60096
• [e5b4eee901] - meta: bump actions/setup-python from 5.6.0 to 6.0.0 (dependabot[bot]) #​60090
• [7cb032c2c1] - meta: update devcontainer to the latest schema (Aviv Keller) #​54347
• [bb108191aa] - meta: call create-release-post.yml post release (Aviv Keller) #​60366
• [2a11d50526] - module: correctly detect top-level await in ambiguous contexts (Shima Ryuhei) #​58646
• [144233b71a] - process: fix wrong asyncContext under unhandled-rejections=strict (Shima Ryuhei) #​60103
• [409cb773a4] - repl: fix cpu overhead pasting big strings to the REPL (Ruben Bridgewater) #​59857
• [d1c9d80cac] - repl: add isValidParentheses check before wrap input (Xuguang Mei) #​59607
• [b8d145db2c] - src: fix order of CHECK_NOT_NULL/dereference (Tobias Nießen) #​59487
• [2c8a73f95f] - src: remove duplicate assignment of O_EXCL in node_constants.cc (Daniel Osvaldo R) #​59049
• [b1da374503] - test: fix typo of test-benchmark-readline.js (Deokjin Kim) #​59993
• [4b4e38f497] - test: mark sea tests flaky on macOS x64 (Richard Lau) #​60068
• [cbf4fc34c3] - test: skip more sea tests on Linux ppc64le (Richard Lau) #​59755
• [9543facad7] - test: mark test-inspector-network-fetch as flaky again (Joyee Cheung) #​59640
• [4f858d22ac] - test: skip test-fs-cp* tests that are constantly failing on Windows (Joyee Cheung) #​59637
• [3ec534dbe8] - test: skip sea tests on Linux ppc64le (Richard Lau) #​59563
• [a7a109f926] - test: fix typos (Lee Jiho) #​59330
• [fd9d43da46] - test: skip failing test on macOS 15.7+ (Antoine du Hamel) #​60419
• [bc3ffbd713] - test_runner: fix isSkipped check in junit (Sungwon) #​59414
• [0cace96472] - test_runner: correct "already mocked" error punctuation placement (Jacob Smith) #​58840
• [76001f9480] - tools: remove unused actions from build-tarball.yml (Antoine du Hamel) #​59787
• [69904844bb] - tools: do not attempt to compress tgz archive (Antoine du Hamel) #​59785
• [a6e7adb173] - tools: fix return value of try_check_compiler (theanarkh) #​59434
• [6443ad2da5] - tools: drop deprecated macos-13 runner (Richard Lau) #​60679
• [45ec702ef7] - tools: fix tools/make-v8.sh for clang (Richard Lau) #​59893
• [393ff7226e] - util: fix numericSeparator with negative fractional numbers (sangwook) #​59379
• [9e8beff0f4] - util: fix error's namespaced node_modules highlighting using inspect (Ruben Bridgewater) #​59446

python/cpython (python)

v3.14.3

Compare Source

v3.14.2

Compare Source

v3.14.1

Compare Source

v3.14.0

Compare Source

v3.13.12

Compare Source

v3.13.11

Compare Source

v3.13.10

Compare Source

v3.13.9

Compare Source

v3.13.8

Compare Source

v3.13.7

Compare Source

v3.13.6

Compare Source

v3.13.5

Compare Source

v3.13.4

Compare Source

v3.13.3

Compare Source

v3.13.2

Compare Source

v3.13.1

Compare Source

v3.13.0

Compare Source

v3.12.12

Compare Source

v3.12.11

Compare Source

v3.12.10

Compare Source

v3.12.9

Compare Source

v3.12.8

Compare Source

v3.12.7

Compare Source

v3.12.6

Compare Source

v3.12.5

Compare Source

v3.12.4

Compare Source

v3.12.3

Compare Source

v3.12.2

Compare Source

v3.12.1

Compare Source

v3.12.0

Compare Source

v3.11.14

Compare Source

v3.11.13

Compare Source

v3.11.12

Compare Source

v3.11.11

Compare Source

v3.11.10

Compare Source

v3.11.9

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.