Skip to content

fix(deps): update all patch and digest versions #2365

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate-sh-app wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all patch and digest versions #2365

renovate-sh-app wants to merge 1 commit into from
+425 −508

Conversation

@renovate-sh-app
Copy link
Contributor

@renovate-sh-app renovate-sh-app bot commented Dec 8, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
actions/checkout action patch v5.0.0 -> v5.0.1 age confidence
actions/checkout action patch v4.3.0 -> v4.3.1 age confidence
actions/upload-release-asset action patch v1 -> v1.0.2 age confidence
actix-files (source) dependencies patch 0.6.6 -> 0.6.9 age confidence
alpine final digest 4b7ce07 -> 51183f2
alpine/curl digest d9d4516 -> bd3d6bf
async-stream dependencies patch 0.3.5 -> 0.3.6 age confidence
azure/setup-helm action patch v4.3.0 -> v4.3.1 age confidence
debian final digest 26f2a7c -> 7e5bc0e
debian final digest 78d2f66 -> 1371f81
debian stage digest 26f2a7c -> 7e5bc0e
eclipse-temurin final patch 17-jre -> 17.0.17_10-jre age confidence
eclipse-temurin stage digest 54a16ef -> 5a66a3f
express (source) dependencies patch 5.2.0 -> 5.2.1 age confidence
express (source) dependencies patch 4.22.0 -> 4.22.1 age confidence
github.com/grafana/pyroscope-go/godeltaprof require patch v0.1.8 -> v0.1.9 age confidence
github.com/segmentio/kafka-go require patch v0.4.47 -> v0.4.49 age confidence
go.mongodb.org/mongo-driver require patch v1.17.4 -> v1.17.6 age confidence
go.uber.org/zap require patch v1.27.0 -> v1.27.1 age confidence
golang final patch 1.25.3 -> 1.25.4 1.25.5 age confidence
golang stage patch 1.25.3 -> 1.25.4 1.25.5 age confidence
golang stage patch 1.25.3-alpine -> 1.25.5-alpine age confidence
grafana/agent digest fd70f05 -> 173c271
grafana/beyla digest c3b5fd3 -> 1670e79
grafana/grafana digest 35c41e0 -> 70d9599
grafana/helm-charts action digest 64b1c82 -> 37c5e12
grafana/mimir digest 5788fc3 -> e648c34
grafana/shared-workflows action digest fa48192 -> c40eb37
grafana/tempo digest f11e4d5 -> e5fa69c
grafana/vale container digest 5eded74 -> 7da4bbf
grafana/writers-toolkit action digest 1dd3173 -> f49dd90
grafana/writers-toolkit action digest 39cdc38 -> 9aed4f7
k8s.io/apimachinery require patch v0.34.1 -> v0.34.2 age confidence
k8s.io/client-go require patch v0.34.1 -> v0.34.2 age confidence
log dependencies patch 0.4.22 -> 0.4.29 age confidence
maven-wrapper (source) patch 3.3.2 -> 3.3.4 age confidence
mongo final patch 8.2.1 -> 8.2.2 age confidence
mysql final patch 8.0.34-debian -> 8.0.43-debian 8.0.44-debian age confidence
mysql final digest b306273 -> 5cdee9b
mysql stage digest b306273 -> 5cdee9b
nginx final digest 029d446 -> e21f8d0
nginx digest 029d446 -> e21f8d0
node (changelog) final digest cba1d7b -> 29a14aa
opensearchproject/opensearch patch 3.3.1 -> 3.3.2 age confidence
peter-evans/create-pull-request action patch v5 -> v5.0.3 age confidence
php final digest 14b7774 -> 8214d12
php digest 231ab3a -> b516fb1
postgres final digest 7499fa0 -> 0033c19
python final digest 872565c -> e8a8b07
python final digest 80d0556 -> 3f33059
python final digest 671d854 -> 165e434
redis digest acb90ce -> 8ee6646
rouille dependencies patch 3.6.1 -> 3.6.2 age confidence
ruby final digest 4bef3ee -> 72214e6
rust stage digest 52e36cd -> 9eb64ff
rust final digest 52e36cd -> 9eb64ff
serde (source) dependencies patch 1.0.210 -> 1.0.228 age confidence
serde_json dependencies patch 1.0.128 -> 1.0.145 age confidence
ubuntu final digest 66460d5 -> c35e29c

Release Notes

actions/checkout (actions/checkout)

v5.0.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

actions/upload-release-asset (actions/upload-release-asset)

v1.0.2: Automate sliding major version number

Compare Source

This is a minor update to make the current release have the latest code from master, and additionally allows for a new automation workflow to execute to automate the sliding of the major (v1, v2, v3, etc) version numbers for ease of referencing

v1.0.1: Fix upload asset logic

Compare Source

This release patches a bug in the upload-asset logic that was preventing the asset from actually being uploaded properly.

actix/actix-web (actix-files)

v0.6.9: Actix web 0.6.9

Compare Source

Changes

  • Drop connection if request's payload is not fully consumed #​236

  • Fix streaming response with body compression

v0.6.8: Actix web 0.6.8

Compare Source

Changes

  • Fix scope resource path extractor #​234

  • Re-use tcp listener on pause/resume

v0.6.7: Actix web 0.6.7

Compare Source

Changes
  • Fix compilation with --no-default-features
tokio-rs/async-stream (async-stream)

v0.3.6

Compare Source

azure/setup-helm (azure/setup-helm)

v4.3.1

Compare Source

Changed
Added
expressjs/express (express)

v5.2.1

Compare Source

=======================

grafana/pyroscope-go (github.com/grafana/pyroscope-go/godeltaprof)

v0.1.9

Compare Source

segmentio/kafka-go (github.com/segmentio/kafka-go)

v0.4.49

Compare Source

What's Changed
New Contributors

Full Changelog: segmentio/kafka-go@v0.4.48...v0.4.49

v0.4.48

Compare Source

What's Changed
New Contributors

Full Changelog: segmentio/kafka-go@v0.4.47...v0.4.48

mongodb/mongo-go-driver (go.mongodb.org/mongo-driver)

v1.17.6: MongoDB Go Driver 1.17.6

Compare Source

The MongoDB Go Driver Team is pleased to release version 1.17.6 of the official MongoDB Go Driver.

[!NOTE]
Due to a bug in the Go Driver release automation, there is no 1.17.5 release.

Release Highlights

This release makes various maintainability improvements to the Go Driver development and release automation.

What's Changed

📝 Other Changes

Full Changelog: mongodb/mongo-go-driver@v1.17.4...v1.17.6

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

uber-go/zap (go.uber.org/zap)

v1.27.1

Compare Source

Enhancements:

  • #​1501: prevent Object from panicking on nils
  • #​1511: Fix a race condition in WithLazy.

Thanks to @​rabbbit, @​alshopov, @​jquirke, @​arukiidou for their contributions to this release.

kubernetes/apimachinery (k8s.io/apimachinery)

v0.34.2

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.34.2

Compare Source

rust-lang/log (log)

v0.4.29

Compare Source

v0.4.28

Compare Source

v0.4.27

Compare Source

What's Changed

Full Changelog: rust-lang/log@0.4.26...0.4.27

v0.4.26

Compare Source

What's Changed

Full Changelog: rust-lang/log@0.4.26...0.4.27

v0.4.25

Compare Source

What's Changed

Full Changelog: rust-lang/log@0.4.25...0.4.26

v0.4.24

Compare Source

What's Changed

Full Changelog: rust-lang/log@0.4.24...0.4.25

v0.4.23

Compare Source

What's Changed

Full Changelog: rust-lang/log@0.4.23...0.4.24

apache/maven-wrapper (maven-wrapper)

v3.3.4: 3.3.4

Compare Source

🐛 Bug Fixes
👻 Maintenance

v3.3.3: 3.3.3

Compare Source

💥 Breaking changes
🚀 New features and improvements
🐛 Bug Fixes
📝 Documentation updates
👻 Maintenance
📦 Dependency updates
opensearch-project/OpenSearch (opensearchproject/opensearch)

v3.3.2

Compare Source

Version 3.3.2 Release Notes

Compatible with OpenSearch 3.3.2 and OpenSearch Dashboards 3.3.0

Fixed
  • [Star Tree] Fix sub-aggregator casting for search with profile=true (#​19652)
  • [Java Agent] Allow JRT protocol URLs in protection domain extraction (#​19683)
  • Fix bwc @​timestamp upgrade issue by adding a version check on skip_list param (#​19671)
  • Fix issue with updating core with a patch number other than 0 (#​19377)
  • Fix IndexOutOfBoundsException when running include/exclude on non-existent prefix in terms aggregations (#​19637)
  • Add S3Repository.LEGACY_MD5_CHECKSUM_CALCULATION to list of repository-s3 settings (#​19789)
Dependencies
  • Bump ch.qos.logback modules from 1.5.18 to 1.5.20 in HDFS test fixture (#​19764)
  • Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2 (#​19817)
peter-evans/create-pull-request (peter-evans/create-pull-request)

v5.0.3

Compare Source

v5.0.2: Create Pull Request v5.0.2

Compare Source

⚙️ Fixes an issue that occurs when using push-to-fork and both base and head repositories are in the same org/user account.

What's Changed

Full Changelog: peter-evans/create-pull-request@v5.0.1...v5.0.2

v5.0.1: Create Pull Request v5.0.1

Compare Source

What's Changed

Full Changelog: peter-evans/create-pull-request@v5.0.0...v5.0.1

tomaka/rouille (rouille)

v3.6.2

Compare Source

  • Expose new_ssl feature for rustls support from tiny-http.
  • Switch to sha1-smol for a smaller footprint, more stable hash library.
  • Remove dependency on num_cpus using std::thread::available_parallelism instead.
serde-rs/serde (serde)

v1.0.228

Compare Source

  • Allow building documentation with RUSTDOCFLAGS='--cfg=docsrs' set for the whole dependency graph (#​2995)

v1.0.227

Compare Source

v1.0.226

Compare Source

  • Deduplicate variant matching logic inside generated Deserialize impl for adjacently tagged enums (#​2935, thanks @​Mingun)

v1.0.225

Compare Source

  • Avoid triggering a deprecation warning in derived Serialize and Deserialize impls for a data structure that contains its own deprecations (#​2879, thanks @​rcrisanti)

v1.0.224

Compare Source

  • Remove private types being suggested in rustc diagnostics (#​2979)

v1.0.223

Compare Source

  • Fix serde_core documentation links (#​2978)

v1.0.222

Compare Source

  • Make serialize_with attribute produce code that works if respanned to 2024 edition (#​2950, thanks @​aytey)

v1.0.221

Compare Source

  • Documentation improvements (#​2973)
  • Deprecate serde_if_integer128! macro (#​2975)

v1.0.220

Compare Source

v1.0.219

Compare Source

  • Prevent absolute_paths Clippy restriction being triggered inside macro-generated code (#​2906, thanks @​davidzeng0)

v1.0.218

Compare Source

  • Documentation improvements

v1.0.217

Compare Source

  • Support serializing externally tagged unit variant inside flattened field (#​2786, thanks @​Mingun)

v1.0.216

Compare Source

v1.0.215

Compare Source

v1.0.214

Compare Source

  • Implement IntoDeserializer for all Deserializers in serde::de::value module (#​2568, thanks @​Mingun)

v1.0.213

Compare Source

  • Fix support for macro-generated with attributes inside a newtype struct (#​2847)

v1.0.212

Compare Source

  • Fix hygiene of macro-generated local variable accesses in serde(with) wrappers (#​2845)

v1.0.211

Compare Source

  • Improve error reporting about mismatched signature in with and default attributes (#​2558, thanks @​Mingun)
  • Show variant aliases in error message when variant deserialization fails (#​2566, thanks @​Mingun)
  • Improve binary size of untagged enum and internally tagged enum deserialization by about 12% (#​2821)
serde-rs/json (serde_json)

v1.0.145

Compare Source

  • Raise serde version requirement to >=1.0.220

v1.0.144

Compare Source

  • Switch serde dependency to serde_core (#​1285)

v1.0.143

Compare Source

v1.0.142

Compare Source

v1.0.141

Compare Source

v1.0.140

Compare Source

  • Documentation improvements

v1.0.139

Compare Source

  • Documentation improvements

v1.0.138

Compare Source

  • Documentation improvements

v1.0.137

Compare Source

  • Turn on "float_roundtrip" and "unbounded_depth" features for serde_json in play.rust-lang.org (#​1231)

v1.0.136

Compare Source

  • Optimize serde_json::value::Serializer::serialize_map by using Map::with_capacity (#​1230, thanks @​goffrie)

v1.0.135

Compare Source

v1.0.134

Compare Source

  • Add RawValue associated constants for literal null, true, false (#​1221, thanks @​bheylin)

v1.0.133

Compare Source

  • Implement From<[T; N]> for serde_json::Value (#​1215)

v1.0.132

Compare Source

  • Improve binary size and compile time for JSON array and JSON object deserialization by about 50% (#​1205)
  • Improve performance of JSON array and JSON object deserialization by about 8% (#​1206)

v1.0.131

Compare Source

  • Implement Deserializer and IntoDeserializer for Map<String, Value> and &Map<String, Value> (#​1135, thanks @​swlynch99)

v1.0.130

Compare Source

  • Support converting and deserializing Number from i128 and u128 (#​1141, thanks @​druide)

v1.0.129

Compare Source

Configuration

📅 Schedule: Branch creation - "before 8am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

@renovate-sh-app renovate-sh-app bot requested review from a team and jdbaldry as code owners December 8, 2025 00:42
@renovate-sh-app
Copy link
Contributor Author

renovate-sh-app bot commented Dec 8, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: go.opentelemetry.io/[email protected] (replaced by ./.obi-src): reading .obi-src/go.mod: open /tmp/renovate/repos/github/grafana/beyla/.obi-src/go.mod: no such file or directory

@renovate-sh-app renovate-sh-app bot force-pushed the renovate/all-patch-and-digest-versions branch 6 times, most recently from 7bb0a93 to d2a9946 Compare December 9, 2025 06:34
@renovate-sh-app
fix(deps): update all patch and digest versions
4940f24 
| datasource  | package                                     | from    | to             |
| ----------- | ------------------------------------------- | ------- | -------------- |
| github-tags | actions/checkout                            | v5.0.0  | v5.0.1         |
| github-tags | actions/checkout                            | v4.3.0  | v4.3.1         |
| github-tags | actions/upload-release-asset                | v1.0.0  | v1.0.2         |
| crate       | actix-files                                 | 0.6.6   | 0.6.9          |
| crate       | async-stream                                | 0.3.5   | 0.3.6          |
| github-tags | azure/setup-helm                            | v4.3.0  | v4.3.1         |
| docker      | eclipse-temurin                             | 17-jre  | 17.0.17_10-jre |
| npm         | express                                     | 5.2.0   | 5.2.1          |
| npm         | express                                     | 4.22.0  | 4.22.1         |
| go          | github.com/grafana/pyroscope-go/godeltaprof | v0.1.8  | v0.1.9         |
| go          | github.com/segmentio/kafka-go               | v0.4.47 | v0.4.49        |
| go          | go.mongodb.org/mongo-driver                 | v1.17.4 | v1.17.6        |
| go          | go.uber.org/zap                             | v1.27.0 | v1.27.1        |
| docker      | golang                                      | 1.25.3  | 1.25.4         |
| docker      | golang                                      | 1.25.3  | 1.25.5         |
| go          | k8s.io/apimachinery                         | v0.34.1 | v0.34.2        |
| go          | k8s.io/client-go                            | v0.34.1 | v0.34.2        |
| crate       | log                                         | 0.4.22  | 0.4.29         |
| maven       | org.apache.maven.wrapper:maven-wrapper      | 3.3.2   | 3.3.4          |
| docker      | mongo                                       | 8.2.1   | 8.2.2          |
| docker      | mysql                                       | 8.0.34  | 8.0.43         |
| docker      | opensearchproject/opensearch                | 3.3.1   | 3.3.2          |
| github-tags | peter-evans/create-pull-request             | v5.0.0  | v5.0.3         |
| crate       | rouille                                     | 3.6.1   | 3.6.2          |
| crate       | serde                                       | 1.0.210 | 1.0.228        |
| crate       | serde_json                                  | 1.0.128 | 1.0.145        |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/all-patch-and-digest-versions branch from d2a9946 to 4940f24 Compare December 9, 2025 09:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jdbaldry jdbaldry Awaiting requested review from jdbaldry jdbaldry is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file docker github-actions shared-workflows update-patch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants