Skip to content

Comments

fix(deps): update all non-major dependencies#191

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pin
Open

fix(deps): update all non-major dependencies#191
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pin

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 26, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action minor v4.2.2 → v4.3.1 age confidence
actions/setup-go action minor v5.5.0 → v5.6.0 age confidence
alpine final minor 3.22.1 → 3.23.3 age confidence
alpine stage minor 3.22.1 → 3.23.3 age confidence
codecov/codecov-action action minor v5.3.1 → v5.5.2 age confidence
elgohr/Publish-Docker-Github-Action (changelog) action digest eb53b3e → 4feac4d
github.com/Masterminds/semver/v3 require minor v3.3.1 → v3.4.0 age confidence
github.com/gin-gonic/gin require minor v1.10.0 → v1.11.0 age confidence
github.com/go-vela/server require minor v0.26.4 → v0.27.5 age confidence
github.com/hashicorp/go-retryablehttp require patch v0.7.7 → v0.7.8 age confidence
github.com/jfrog/jfrog-client-go require minor v1.50.0 → v1.55.0 age confidence
github.com/sirupsen/logrus require patch v1.9.3 → v1.9.4 age confidence
github.com/urfave/cli/v3 require minor v3.3.8 → v3.6.2 age confidence
github/codeql-action action minor v3.28.10 → v3.32.4 age confidence
github/codeql-action action minor v3.29.4 → v3.32.4 age confidence

Release Notes

actions/checkout (actions/checkout)

v4.3.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

actions/setup-go (actions/setup-go)

v5.6.0

Compare Source

What's Changed

Full Changelog: actions/setup-go@v5...v5.6.0

codecov/codecov-action (codecov/codecov-action)

v5.5.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

v5.4.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

v5.4.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

Masterminds/semver (github.com/Masterminds/semver/v3)

v3.4.0

Compare Source

There are a few changes in this release to highlight:

  1. Constraints now has a property IncludePrerelease. When set to true the Check and Validate methods will include prereleases.
  2. When an AND group has one constraint with a prerelease but more than one constraint then prereleases will be included. For example, >1.0.0-beta.1 < 2. In the past this would not have included prereleases because each constraint needed to have a prerelease. Now, only one constraint needs to have a prerelease. This is considered a long standing bug fix. Note, this does not carry across OR groups. For example, >1.0.0-beta.1 < 2 || > 3. In this case, prereleases will not be included when evaluating against >3.
  3. NewVersion coercion with leading "0"'s is restored. This can be disabled by setting the package level property CoerceNewVersion to false.

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.3.1...v3.4.0

gin-gonic/gin (github.com/gin-gonic/gin)

v1.11.0

Compare Source

Features
  • feat(gin): Experimental support for HTTP/3 using quic-go/quic-go (#​3210)
  • feat(form): add array collection format in form binding (#​3986), add custom string slice for form tag unmarshal (#​3970)
  • feat(binding): add BindPlain (#​3904)
  • feat(fs): Export, test and document OnlyFilesFS (#​3939)
  • feat(binding): add support for unixMilli and unixMicro (#​4190)
  • feat(form): Support default values for collections in form binding (#​4048)
  • feat(context): GetXxx added support for more go native types (#​3633)
Enhancements
  • perf(context): optimize getMapFromFormData performance (#​4339)
  • refactor(tree): replace string(/) with "/" in node.insertChild (#​4354)
  • refactor(render): remove headers parameter from writeHeader (#​4353)
  • refactor(context): simplify "GetType()" functions (#​4080)
  • refactor(slice): simplify SliceValidationError Error method (#​3910)
  • refactor(context):Avoid using filepath.Dir twice in SaveUploadedFile (#​4181)
  • refactor(context): refactor context handling and improve test robustness (#​4066)
  • refactor(binding): use strings.Cut to replace strings.Index (#​3522)
  • refactor(context): add an optional permission parameter to SaveUploadedFile (#​4068)
  • refactor(context): verify URL is Non-nil in initQueryCache() (#​3969)
  • refactor(context): YAML judgment logic in Negotiate (#​3966)
  • tree: replace the self-defined 'min' to official one (#​3975)
  • context: Remove redundant filepath.Dir usage (#​4181)
Bug Fixes
  • fix: prevent middleware re-entry issue in HandleContext (#​3987)
  • fix(binding): prevent duplicate decoding and add validation in decodeToml (#​4193)
  • fix(gin): Do not panic when handling method not allowed on empty tree (#​4003)
  • fix(gin): data race warning for gin mode (#​1580)
  • fix(context): verify URL is Non-nil in initQueryCache() (#​3969)
  • fix(context): YAML judgment logic in Negotiate (#​3966)
  • fix(context): check handler is nil (#​3413)
  • fix(readme): fix broken link to English documentation (#​4222)
  • fix(tree): Keep panic infos consistent when wildcard type build faild (#​4077)
Build process updates / CI
  • ci: integrate Trivy vulnerability scanning into CI workflow (#​4359)
  • ci: support Go 1.25 in CI/CD (#​4341)
  • build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#​4342)
  • ci: add Go version 1.24 to GitHub Actions (#​4154)
  • build: update Gin minimum Go version to 1.21 (#​3960)
  • ci(lint): enable new linters (testifylint, usestdlibvars, perfsprint, etc.) (#​4010, #​4091, #​4090)
  • ci(lint): update workflows and improve test request consistency (#​4126)
Dependency updates
  • chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#​4346, #​4356)
  • chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#​4347)
  • chore(deps): bump actions/setup-go from 5 to 6 (#​4351)
  • chore(deps): bump github.com/quic-go/quic-go from 0.53.0 to 0.54.0 (#​4328)
  • chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 (#​4178, #​4221)
  • chore(deps): bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.1 (#​4052)
Documentation updates
  • docs(changelog): update release notes for Gin v1.10.1 (#​4360)
  • docs: Fixing English grammar mistakes and awkward sentence structure in doc/doc.md (#​4207)
  • docs: update documentation and release notes for Gin v1.10.0 (#​3953)
  • docs: fix typo in Gin Quick Start (#​3997)
  • docs: fix comment and link issues (#​4205, #​3938)
  • docs: fix route group example code (#​4020)
  • docs(readme): add Portuguese documentation (#​4078)
  • docs(context): fix some function names in comment (#​4079)

v1.10.1

Compare Source

Features
  • refactor: strengthen HTTPS security and improve code organization
  • feat(binding): Support custom BindUnmarshaler for binding. (#​3933)
Enhancements
  • chore(deps): bump github.com/bytedance/sonic from 1.11.3 to 1.11.6 (#​3940)
  • chore(deps): bump golangci/golangci-lint-action from 4 to 5 (#​3941)
  • chore: update external dependencies to latest versions (#​3950)
  • chore: update various Go dependencies to latest versions (#​3901)
  • chore: refactor configuration files for better readability (#​3951)
  • chore: update changelog categories and improve documentation (#​3917)
  • feat: update version constant to v1.10.0 (#​3952)
Build process updates
  • ci(release): refactor changelog regex patterns and exclusions (#​3914)
  • ci(Makefile): vet command add .PHONY (#​3915)
go-vela/server (github.com/go-vela/server)

v0.27.5

Compare Source

No changes. API spec and JSONSchema were not attached as release assets to the previous release (immutable release). The latter of which powers validation in IDEs and such. This release should address that issue.

Full Changelog: go-vela/server@v0.27.4...v0.27.5

v0.27.4

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.3...v0.27.4

v0.27.3

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.2...v0.27.3

v0.27.2

Compare Source

What's Changed

  • fix(compiler): always include build repo in install and add VELA_GIT_TOKEN by @​ecrupper in #​1346
  • fix(db/log): remove redundant service_id and step_id indices from log table by @​wass3r in #​1344
  • fix(oidc): no trailing colon on non-action events in claim by @​ecrupper in #​1355

Full Changelog: go-vela/server@v0.27.1...v0.27.2

v0.27.1

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.0...v0.27.1

v0.27.0

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.26.4...v0.27.0

v0.26.5

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.26.4...v0.26.5

hashicorp/go-retryablehttp (github.com/hashicorp/go-retryablehttp)

v0.7.8

Compare Source

jfrog/jfrog-client-go (github.com/jfrog/jfrog-client-go)

v1.55.0

Compare Source

What's Changed

Exciting New Features 🎉
Improvements 🌱
Other Changes 📚

New Contributors

Full Changelog: jfrog/jfrog-client-go@v1.54.7...v1.55.0

v1.54.7

Compare Source

What's Changed

Exciting New Features 🎉
Other Changes 📚

Full Changelog: jfrog/jfrog-client-go@v1.54.6...v1.54.7

v1.54.6

Compare Source

What's Changed

Other Changes 📚

New Contributors

Full Changelog: jfrog/jfrog-client-go@v1.54.5...v1.54.6

v1.54.5

Compare Source

What's Changed

Bug Fixes 🛠

Full Changelog: jfrog/jfrog-client-go@v1.54.4...v1.54.5

v1.54.4

Compare Source

What's Changed

Other Changes 📚

New Contributors

Full Changelog: jfrog/jfrog-client-go@v1.54.3...v1.54.4

v1.54.3

Compare Source

What's Changed

Exciting New Features 🎉
Other Changes 📚

New Contributors

Full Changelog: jfrog/jfrog-client-go@v1.54.2...v1.54.3

v1.54.2

Compare Source

What's Changed

Exciting New Features 🎉
Improvements 🌱
Other Changes 📚

New Contributors

Full Changelog: jfrog/jfrog-client-go@v1.54.1...v1.54.2

v1.54.1

Compare Source

What's Changed

Improvements 🌱

Full Changelog: jfrog/jfrog-client-go@v1.54.0...v1.54.1

v1.54.0

Compare Source

What's Changed

Exciting New Features 🎉
Improvements 🌱
Bug Fixes 🛠

Full Changelog: jfrog/jfrog-client-go@v1.53.1...v1.54.0

v1.53.1

Compare Source

What's Changed

Improvements 🌱
Other Changes 📚

Full Changelog: jfrog/jfrog-client-go@v1.53.0...v1.53.1

v1.53.0

Compare Source

What's Ch

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner February 26, 2025 16:27
@renovate renovate bot added the dependencies Indicates a change to dependencies label Feb 26, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Feb 26, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 16 additional dependencies were updated

Details:

Package Change
github.com/ProtonMail/go-crypto v1.1.5 -> v1.1.6
github.com/bytedance/sonic v1.12.10 -> v1.13.3
github.com/gabriel-vasile/mimetype v1.4.8 -> v1.4.9
github.com/gin-contrib/sse v1.0.0 -> v1.1.0
github.com/go-git/go-git/v5 v5.13.2 -> v5.14.0
github.com/go-playground/validator/v10 v10.25.0 -> v10.26.0
github.com/jfrog/build-info-go v1.10.9 -> v1.10.15
github.com/pelletier/go-toml/v2 v2.2.3 -> v2.2.4
github.com/ugorji/go/codec v1.2.12 -> v1.3.0
golang.org/x/crypto v0.36.0 -> v0.40.0
golang.org/x/exp v0.0.0-20250218142911-aa4b98e5adaa -> v0.0.0-20250305212735-054e65f0b394
golang.org/x/net v0.38.0 -> v0.41.0
golang.org/x/sync v0.12.0 -> v0.16.0
golang.org/x/term v0.30.0 -> v0.33.0
golang.org/x/text v0.23.0 -> v0.27.0
google.golang.org/protobuf v1.36.5 -> v1.36.6

@codecov
Copy link

codecov bot commented Feb 26, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 27.30%. Comparing base (cbf1e3a) to head (9753505).

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #191      +/-   ##
==========================================
- Coverage   33.27%   27.30%   -5.97%     
==========================================
  Files          11       11              
  Lines        1109      835     -274     
==========================================
- Hits          369      228     -141     
+ Misses        721      588     -133     
  Partials       19       19

see 11 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 68bb1f1 to c679e51 Compare February 27, 2025 01:45
@renovate renovate bot changed the title fix(deps): update module github.com/jfrog/jfrog-client-go to v1.51.0 fix(deps): update all non-major dependencies Feb 27, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 9c1fec4 to a5961bb Compare March 10, 2025 23:19
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 5 times, most recently from ddc7f3f to 2b9a26d Compare March 24, 2025 13:31
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from e199901 to a1c6238 Compare March 25, 2025 11:02
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from a15b806 to df9bc26 Compare April 10, 2025 18:41
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 22223c3 to 6d7a18f Compare April 14, 2025 23:05
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 6d7a18f to 360736d Compare April 23, 2025 16:52
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 8014379 to 42f2cbd Compare May 8, 2025 03:31
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from a61d65a to d79a6be Compare May 20, 2025 13:32
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from d79a6be to 3c3fe68 Compare May 22, 2025 23:04
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 487ccf8 to 80de231 Compare November 19, 2025 10:38
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 80de231 to ae17494 Compare November 24, 2025 12:33
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 03b9af2 to 8bd0cdd Compare December 3, 2025 20:49
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 5 times, most recently from 48d59b8 to a09d235 Compare December 16, 2025 04:54
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from ddb60d9 to aee694d Compare December 18, 2025 05:48
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from aee694d to 8b53d50 Compare December 31, 2025 13:59
@renovate
Copy link
Contributor Author

renovate bot commented Dec 31, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 23 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.5 -> 1.25.5
dario.cat/mergo v1.0.1 -> v1.0.2
github.com/ProtonMail/go-crypto v1.1.5 -> v1.1.6
github.com/bytedance/sonic v1.12.10 -> v1.14.2
github.com/bytedance/sonic/loader v0.3.0 -> v0.4.0
github.com/cloudwego/base64x v0.1.5 -> v0.1.6
github.com/gabriel-vasile/mimetype v1.4.8 -> v1.4.11
github.com/gin-contrib/sse v1.0.0 -> v1.1.0
github.com/go-git/go-git/v5 v5.13.2 -> v5.14.0
github.com/go-playground/validator/v10 v10.25.0 -> v10.29.0
github.com/jfrog/build-info-go v1.10.9 -> v1.11.0
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/pelletier/go-toml/v2 v2.2.3 -> v2.2.4
github.com/ugorji/go/codec v1.2.12 -> v1.3.1
github.com/ulikunitz/xz v0.5.12 -> v0.5.14
golang.org/x/arch v0.19.0 -> v0.23.0
golang.org/x/crypto v0.36.0 -> v0.46.0
golang.org/x/exp v0.0.0-20250218142911-aa4b98e5adaa -> v0.0.0-20250305212735-054e65f0b394
golang.org/x/net v0.38.0 -> v0.48.0
golang.org/x/sync v0.12.0 -> v0.19.0
golang.org/x/sys v0.34.0 -> v0.39.0
golang.org/x/term v0.30.0 -> v0.38.0
golang.org/x/text v0.23.0 -> v0.32.0
google.golang.org/protobuf v1.36.5 -> v1.36.11

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 7271e9b to 0675c6e Compare January 18, 2026 05:53
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 620e2f1 to df86381 Compare January 28, 2026 06:59
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 1d633cc to 15ff5a7 Compare February 6, 2026 13:46
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from e5e0039 to da4c007 Compare February 18, 2026 20:43
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from da4c007 to 9753505 Compare February 20, 2026 17:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Indicates a change to dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants