Repository navigation
chore(deps): update all non-major dependencies - #3094
Merged
Merged
Conversation
renovate
Bot
added
area: dependencies
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
vmaerten
approved these changes
Nov 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
v0.24.2→v0.24.3v1.47.5→v1.47.8v1.7.25→v1.7.26v1.33.13→v1.33.16v1.20.13→v1.20.16v1.20.5→v1.20.8v1.5.8→v1.5.11v2.8.8→v2.8.11v1.5.8→v1.5.11v1.13.23→v1.13.24v1.11.9→v1.11.12v1.14.8→v1.14.11v1.20.8→v1.20.11v1.114.6→v1.114.9v1.12.1→v1.12.4v1.39.1→v1.39.4v1.44.1→v1.44.4v1.51.6→v1.51.9v1.28.7→v1.28.8v2.12.0→v2.13.0v4.1.8→v4.1.9v0.3.24→v0.3.25v1.0.10→v1.1.0v1.3.0→v1.3.1v0.4.0→v0.4.1v0.310.0→v0.311.02.19.0→2.20.0167b267→fb5c2e512.16.1+sha512.091d1dee7927575661b25dab3c2ae31cafc1c54d6b71ed6a6600cf0c1cb10434a447eae14015f1b23e2e6bedeed79df94a932e2164d2832280dce3fb32f656d1→12.18.012.16.1→12.18.0v6.0.10→v6.1.1Release Notes
googleapis/google-cloud-go (cloud.google.com/go/auth)
v0.24.3: auth: v0.24.3Bug Fixes
aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)
v1.47.8v1.47.7General Highlights
Module Highlights
github.com/aws/aws-sdk-go-v2: v1.47.7hub.lumenfield.work/aws/aws-sdk-go-v2/service/accountaccessruntime: v1.0.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/agentregistrycontrol: v1.9.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/appintegrations: v1.53.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol: v1.78.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/bedrockagentruntime: v1.67.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.92.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/datasync: v1.69.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/glue: v1.173.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/lambdamicrovms: v1.12.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/qconnect: v1.43.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/quicksight: v1.139.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/route53domains: v1.46.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/sagemaker: v1.287.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/securityagent: v1.28.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/wafv2: v1.85.0v1.47.6Module Highlights
github.com/aws/aws-sdk-go-v2/service/appstream: v1.55.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/autoscaling: v1.65.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/bedrockagentcore: v1.17.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.66.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/deadline: v1.27.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/devopsagent: v1.0.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/ecs: v1.75.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/gamelift: v1.51.4hub.lumenfield.work/aws/aws-sdk-go-v2/service/lakeformation: v1.47.6hub.lumenfield.work/aws/aws-sdk-go-v2/service/opensearch: v1.62.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/partnercentralaccount: v1.2.0hub.lumenfield.work/aws/aws-sdk-go-v2/service/sagemaker: v1.238.0aws/smithy-go (github.com/aws/smithy-go)
v1.28.8Compare Source
General Highlights
Module Highlights
github.com/aws/smithy-go: v1.28.8dlclark/regexp2 (github.com/dlclark/regexp2/v2)
v2.13.0Compare Source
go-jose/go-jose (github.com/go-jose/go-jose/v4)
v4.1.9Compare Source
Fixed
Full Changelog: go-jose/go-jose@v4.1.8...v4.1.9
googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)
v0.3.25Compare Source
What's Changed
Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.24...v0.3.25
spf13/pflag (github.com/spf13/pflag)
v1.1.0Compare Source
It's been long enough, and enough things have been fixed, that it might be time to release a new version, even if there isn't any particular big new issue to market as the reason for this release.
If you notice anything breaking, it is entirely un-intentional, but you might also have been relying on undocumented or buggy behavior. Please file an issue describing what you're doing, how it worked before this release and why it doesn't work anymore, and pin your projects to
v1.0.10(the latest release before this one) while we decide how to address your concerns.What's Changed
UnknownFlagstoUnknownFlagsHandlingand introducePassUnknownFlagToArgs(#337) by @ikedam in #440New Contributors
Full Changelog: spf13/pflag@v1.0.10...v1.1.0
xo/terminfo (github.com/xo/terminfo)
v1.3.1: terminfo v1.3.1Compare Source
Fixed
DecodereturnsErrInvalidHeaderfor a negative count in the main header, as ncurses does. Before, such a file panicked.Decodeno longer panics on anacs_charsvalue of odd length. The value now matchesinfocmp: an unpaired last byte stays at the end, and when a source character repeats, the last pair wins.Printfreads a%format as ncursestparmdoes. Before the verb, a format accepts only the flags, a width and a precision. A width or precision over 10000 drops the flags. Before, a 12-byte string such as%:%%999999XXreturned 1 MB.Changed
%cignores its width, and%:+is the+operator, as in ncurses.Thanks to Andrei Beshkov (@aibeshkov), who found these faults with fuzzing.
Full Changelog: xo/terminfo@v1.3.0...v1.3.1
github/gh-actions-lock
v0.4.1: gh-actions-lock 0.4.1Compare Source
What's Changed
Full Changelog: github/gh-actions-lock@v0.4.0...v0.4.1
googleapis/google-api-go-client (google.golang.org/api)
v0.311.0Compare Source
Features
goreleaser/goreleaser (goreleaser)
v2.20.0Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.20.
Security
GoReleaser v2.20.0 fixes an issue that could write inline publishing SSH private keys in cleartext to
dist/artifacts.json. Upgrade to v2.20.0 and revoke and replace any keys exposed through shared or uploaded release metadata.See GHSA-9422-8p9m-393x for details.
Changelog
New Features
e1176e6: feat(cask): renderzap :not_requiredwhen no zap directives are set (#7253) (@SimonMiaou)afd8f84: feat(gitlab): add asset type selection (#7255) (@mavogel)b8f79e0: feat(ko): allow templates in platforms (#7233) (@mrueg and @caarlos0)2e260e4: feat(winget): update manifest schema to latest (1.28.0) (#7242) (@abemedia)4a1a1ae: feat: allow skipping the changelog with --skip=changelog (#7234) (@mrueg and @caarlos0)Bug fixes
24ec0fd: fix(bluesky): do not add a link facet when there is no release URL (#7262) (@10kartik)bfa11d9: fix(nodedist): handle prerelease versions in generation (#7263) (@caarlos0)3d5c3a2: fix(tmpl): escape backslashes in mdv2escape (#7261) (@10kartik)e39e2fe: refactor: move marshaljson methods to right place (@caarlos0)Documentation updates
53e5668: docs: add --snapshot to quick start single-target builds (#7232) (@dcadolph)3467d0f: docs: github app (#7271) (@caarlos0)81042d3: docs: update Pro page copy (#7270) (@caarlos0)2d9b4c9: docs: v2.19 announcement and docs (@caarlos0)Other work
6ac2967: Merge commit from fork (@Divsonar and @caarlos0)94bc193: chore: auto-update generated files (#7231) (@goreleaserbot)538a99e: chore: auto-update generated files (#7254) (@goreleaserbot)6e4f864: chore: auto-update generated files (#7264) (@goreleaserbot)9b610a1: chore: auto-update generated files (#7266) (@goreleaserbot)27f55a0: chore: lint (@caarlos0)Full Changelog: goreleaser/goreleaser@v2.19.0...v2.20.0
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them?
You can sponsor, get a Pro License or contribute with code.
Where to go next?
pnpm/pnpm (pnpm)
v12.18.0: pnpm 12.18Compare Source
pnpm 12.18.0 packs, publishes, and installs packages with platform variants on pnpr registries. It also adds per-skill approval of agent skills and
pnpm store addfor offline installs from downloaded tarballs. Repeat installs andverifyDepsBeforeRunno longer read thepackage.jsonof unchanged workspace projects. The release fixes several peer dependency resolution bugs too.Minor Changes
Agent skills
pnpm now names the link to a dependency's agent skill after the skill alone. A skill that the
@acme/kitpackage ships inskills/auth/is linked as.claude/skills/auth, not.claude/skills/pnpm-@acme+kit-auth. The next install replaces links with the old names. pnpm lists the linked skills in a# pnpmblock of each agent skill directory's.gitignore#17455.When two approved packages ship a skill of the same name, or the name is already taken in an agent skill directory, pnpm links the skill as
pnpm-<package>-<skill>. Before, the install failed.pnpm approvenow asks which agent skills to link when a package ships more than one. pnpm records the chosen skills as a list, such aspermissions.<pkg>.skills: [guide, migrate], and does not offer the other skills for approval again. The first time a project approves a skill,pnpm approvealso asks which agent directories to link skills into, and records the answer underskills.dirs.pnpm links agent skills nested in category directories, such as
skills/engineering/implement/SKILL.md, up to three levels belowskills/. Before, it linked only the skills directly underskills/.Platform variants
These features need a registry declared with
serverType: pnpr.pnpm packpacks one archive per entry ofpublishConfig.variants, each platform variant as<name>-<version>~<tag>.tgz.pnpm pack --variant <target>packs only the archive whose entry lists that target.pnpm pack --jsonprints theintegrityandsizeof every archive it writes.pnpm publishpublishes a package'spublishConfig.variants. pnpm uploads every archive before the publish request that references them. Publishing variants to any other registry is refused unless--no-variantsis given, which publishes only the archive that targetsany.pnpm publish --upload-variant <target>uploads the archive of onepublishConfig.variantsentry to the registry's staging area and prints<target>=<integrity>.pnpm publish --variant-integrity <target>=<integrity>then publishes the version from archives that other jobs uploaded. With--recursive, each value names its package as<name>~<target>=<integrity>.pnpm publish -r --batchnow uploads each package archive on its own request and skips archives the registry already holds, so the batch request no longer grows with the archives it publishes. A batcConfiguration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.