Skip to content

fix(deps): update all non-major dependencies #99

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all non-major dependencies #99

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 18, 2025 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action patch v5.0.0 → v5.0.1 age confidence
actions/setup-go action minor v5.5.0 → v5.6.0 age confidence
alpine final minor 3.22.1 → 3.23.2 age confidence
alpine stage minor 3.22.1 → 3.23.2 age confidence
codecov/codecov-action action minor v5.4.3 → v5.5.2 age confidence
github.com/go-vela/server require patch v0.27.0 → v0.27.4 age confidence
github.com/spf13/afero require minor v1.14.0 → v1.15.0 age confidence
github.com/urfave/cli/v3 require minor v3.4.1 → v3.6.1 age confidence
github/codeql-action action minor v3.29.9 → v3.31.10 age confidence
gohugoio/hugo minor 0.148.2 → 0.154.5 age confidence

Release Notes

actions/checkout (actions/checkout)

v5.0.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

actions/setup-go (actions/setup-go)

v5.6.0

Compare Source

What's Changed

Full Changelog: actions/setup-go@v5...v5.6.0

codecov/codecov-action (codecov/codecov-action)

v5.5.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

go-vela/server (github.com/go-vela/server)

v0.27.4

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.3...v0.27.4

v0.27.3

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.2...v0.27.3

v0.27.2

Compare Source

What's Changed

  • fix(compiler): always include build repo in install and add VELA_GIT_TOKEN by @​ecrupper in #​1346
  • fix(db/log): remove redundant service_id and step_id indices from log table by @​wass3r in #​1344
  • fix(oidc): no trailing colon on non-action events in claim by @​ecrupper in #​1355

Full Changelog: go-vela/server@v0.27.1...v0.27.2

v0.27.1

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.0...v0.27.1

spf13/afero (github.com/spf13/afero)

v1.15.0

Compare Source

What's Changed

New Contributors

Full Changelog: spf13/afero@v1.14.0...v1.15.0

urfave/cli (github.com/urfave/cli/v3)

v3.6.1

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.6.0...v3.6.1

v3.6.0

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.5.0...v3.6.0

v3.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.4.1...v3.5.0

github/codeql-action (github/codeql-action)

v3.31.10

Compare Source

v3.31.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.9 - 16 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.31.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.8 - 11 Dec 2025
  • Update default CodeQL bundle version to 2.23.8. #​3354

See the full CHANGELOG.md for more information.

v3.31.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.7 - 05 Dec 2025
  • Update default CodeQL bundle version to 2.23.7. #​3343

See the full CHANGELOG.md for more information.

v3.31.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.31.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.5 - 24 Nov 2025

  • Update default CodeQL bundle version to 2.23.6. #​3321

See the full CHANGELOG.md for more information.

v3.31.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.31.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.3 - 13 Nov 2025

  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #​3288

See the full CHANGELOG.md for more information.

v3.31.2

Compare Source

v3.31.1

Compare Source

v3.31.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.0 - 24 Oct 2025
  • Bump minimum CodeQL bundle version to 2.17.6. #​3223
  • When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #​3222

See the full CHANGELOG.md for more information.

v3.30.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.9 - 17 Oct 2025
  • Update default CodeQL bundle version to 2.23.3. #​3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #​3204

See the full CHANGELOG.md for more information.

v3.30.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.7 - 06 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.6 - 02 Oct 2025

  • Update default CodeQL bundle version to 2.23.2. #​3168

See the full CHANGELOG.md for more information.

v3.30.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.5 - 26 Sep 2025

  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #​3160

See the full CHANGELOG.md for more information.

v3.30.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.4 - 25 Sep 2025

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #​3099 and #​3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #​3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #​3130
  • Update default CodeQL bundle version to 2.23.1. #​3118

See the full CHANGELOG.md for more information.

v3.30.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #​3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #​3064

See the full CHANGELOG.md for more information.

v3.30.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.1 - 05 Sep 2025

  • Update default CodeQL bundle version to 2.23.0. #​3077

See the full CHANGELOG.md for more information.

v3.30.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

  • Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #​3054

See the full CHANGELOG.md for more information.

v3.29.11

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.11 - 21 Aug 2025

  • Update default CodeQL bundle version to 2.22.4. #​3044

See the full CHANGELOG.md for more information.

v3.29.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

gohugoio/hugo (gohugoio/hugo)

v0.154.5

Compare Source

What's Changed

v0.154.4

Compare Source

What's Changed

Also see the new Page.OutputFormats.Canonical method.

v0.154.3

Compare Source

What's Changed

v0.154.2

Compare Source

What's Changed

  • Fix alpha/fuzzy border issue with new webp decoder for images with with transparent background e9b9b36 @​bep #​14339

v0.154.1

Compare Source

What's Changed

v0.154.0

Compare Source

Hugo v0.154.0 is the 14th release this year (not counting patch releases) and introduces partial decorators, or “partials with a twist.” This is a very powerful construct that I, @​bep, have always wanted to have in Hugo, but I could never wrap my head around an implementation. Until now.

A small and not very useful example:

{{ with partial "b.html" "World" }}Hello {{ . }}{{ end }}
{{ define "_partials/b.html" }}<b>{{ inner . }}</b>{{ end }}

The above renders to:

<b>Hello World</b>
  • The new inner keyword can be used zero or more times in a partial template, typically with different data (e.g. pages in a range), and its presence signals a reversal of the execution -- the callee becomes the caller.
  • Decorators can be deeply nested, see this PR for an example.

This release also brings some new utility funcs in the reflect package to identify the core types in Hugo. For example, to identify an processable image hasn't been trivial, now it is:

{{ $obj := . }}
{{ if reflect.IsResource $obj }}
   {{ if reflect.IsImageResource $obj }}
        // It has width/height and we can process it.
   {{ else }}
       // Just link to it.
   {{ end }}
{{ end }}

Bug fixes

Improvements

Dependency Updates

v0.153.5

Compare Source

What's Changed

v0.153.4

Compare Source

What's Changed

v0.153.3

Compare Source

What's Changed

v0.153.2

Compare Source

What's Changed

v0.153.1

Compare Source

[!note]
This is a bug fix release. See the main release for a list of new features.

v0.153.0

Compare Source

[!note]
There is a newer bug fix release available here.

This is a good one! Hugo v0.153.0 comes with a powerful new multidimensional content model (languages, versions and roles) and completely overhauls WebP image support, and much more:

  • For the new multidimensional content model, start reading sites matrix and sites complements. The matrix is what gets written to disk, complements allows e.g. a site in Swedish to fill in missing gaps in the site in Norwegian's page and resource collections. Also see the new Rotate method, that allows you to rotate the content tree in a given dimension.
  • For WebP we now build a WASM version of libwebp (v1.6.0) and run it in the Wazero runtime. We use this for both encoding and decoding. This solves an old and annoying issue with Go's stdlib's decoder, with loss of contrast and muted colors in some photos, but it also means that you don't need the extended version of Hugo to handle WebP images. And, drum roll, we now also support animated WebP, including converting to and from animated GIFs.
  • For MacOS, we now build signed and notarised pkg installers.

Also:

Notes

  • tpl/css: Deprecate libsass in favor of dartsass (note) 9937a5d @​bep #​14261
  • Build Order: Hugo builds sites based on the sorted dimensions (see below). In earlier versions, we built the sites starting with the default content language. This change is also reflected in the sort order of .Site.Sites to make it consistent with .Site.Languages.
  • Sort Order: The dimensions are sorted as follows, which affects build order and complement selection:
    • languages: By weight, then by name.
    • versions: By weight, then by semantic versioning (descending).
    • roles: By weight, then by name.
  • Deprecations:
  • Logging: We no longer log warnings about potential duplicate content paths, as this becomes impractical to reason about with a
    complex sites matrix.

Bug fixes

Improvements

  • resources/images: Don't trust the file extension when decoding JPEG and PNG images 65d43e1 @​bep
  • Add full filename to image processing error messages if possible [`65a76

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner August 18, 2025 15:48
@renovate renovate bot added the dependencies Indicates a change to dependencies label Aug 18, 2025
@codecov
Copy link

codecov bot commented Aug 18, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 21.52%. Comparing base (df661b0) to head (c0a15aa).

❌ Your project check has failed because the head coverage (21.52%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main      #99      +/-   ##
==========================================
- Coverage   28.76%   21.52%   -7.24%     
==========================================
  Files           7        7              
  Lines         584      432     -152     
==========================================
- Hits          168       93      -75     
+ Misses        414      337      -77     
  Partials        2        2

see 7 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate bot changed the title chore(deps): update github/codeql-action action to v3.29.10 chore(deps): update all non-major dependencies Aug 20, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 8efe7cb to 6f79143 Compare August 27, 2025 17:37
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 6f79143 to 351184a Compare August 31, 2025 09:21
@renovate renovate bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Aug 31, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Aug 31, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
golang.org/x/sys v0.34.0 -> v0.35.0
golang.org/x/text v0.27.0 -> v0.28.0

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from ddb72be to b0512fd Compare September 10, 2025 18:39
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 6f2b7f1 to 5101ce6 Compare September 26, 2025 21:23
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from a9a2a9b to bce8d65 Compare October 9, 2025 01:07
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from e3a04e2 to 314229d Compare October 17, 2025 17:52
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from b5d6d61 to 89bfc7a Compare October 24, 2025 19:55
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from b8ec20e to a47494e Compare October 30, 2025 20:42
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 266395e to 8b807fa Compare November 24, 2025 13:49
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 564836d to c14b9b9 Compare December 7, 2025 20:52
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from be2bcf8 to afe1fc2 Compare December 9, 2025 19:47
@renovate
Copy link
Contributor Author

renovate bot commented Dec 10, 2025 •
edited
Loading

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.6 -> 1.25.5
golang.org/x/sys v0.34.0 -> v0.39.0
golang.org/x/text v0.27.0 -> v0.32.0

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 6 times, most recently from 3d67686 to a39aff1 Compare December 18, 2025 10:12
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from ad7c6d5 to 76b062e Compare December 22, 2025 21:01
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 5 times, most recently from 0aeb69d to cd302a0 Compare January 1, 2026 21:41
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 18fb3f3 to f6c2029 Compare January 6, 2026 21:23
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from fa7511b to 2d07ed4 Compare January 12, 2026 01:04
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 2d07ed4 to c0a15aa Compare January 12, 2026 18:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Indicates a change to dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant