fix(deps): update all non-major dependencies - abandoned by renovate[bot] · Pull Request #1345 · go-vela/server

renovate · 2025-08-31T10:11:23Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v5.0.0` → `v5.0.1`
actions/github-script	action	minor	`v7.0.1` → `v7.1.0`
actions/setup-go	action	minor	`v5.5.0` → `v5.6.0`
alpine	final	minor	`3.22.1` → `3.23.3`
codecov/codecov-action	action	patch	`v5.5.0` → `v5.5.2`
docker/build-push-action	action	minor	`v6.18.0` → `v6.19.2`
docker/login-action	action	minor	`v3.5.0` → `v3.7.0`
docker/metadata-action	action	minor	`v5.8.0` → `v5.10.0`
github.com/alicebob/miniredis/v2	require	minor	`v2.35.0` → `v2.36.1`
github.com/aws/aws-sdk-go-v2	require	minor	`v1.39.6` → `v1.41.2`
github.com/aws/aws-sdk-go-v2/config	require	minor	`v1.31.17` → `v1.32.10`
github.com/aws/aws-sdk-go-v2/service/sts	require	minor	`v1.39.1` → `v1.41.7`
github.com/expr-lang/expr	require	patch	`v1.17.7` → `v1.17.8`
github.com/gin-gonic/gin	require	minor	`v1.10.1` → `v1.11.0`
github.com/golang-jwt/jwt/v5	require	patch	`v5.3.0` → `v5.3.1`
github.com/hashicorp/vault/api	require	minor	`v1.20.0` → `v1.22.0`
github.com/lestrrat-go/jwx/v3	require	patch	`v3.0.10` → `v3.0.13`
github.com/lib/pq	require	minor	`v1.10.9` → `v1.11.2`
github.com/minio/minio-go/v7	require	patch	`v7.0.83` → `v7.0.98`
github.com/prometheus/client_golang	require	patch	`v1.23.0` → `v1.23.2`
github.com/redis/go-redis/v9	require	minor	`v9.12.1` → `v9.18.0`
github.com/sirupsen/logrus	require	patch	`v1.9.3` → `v1.9.4`
github.com/spf13/afero	require	minor	`v1.14.0` → `v1.15.0`
github.com/urfave/cli/v3	require	minor	`v3.4.1` → `v3.6.2`
github/codeql-action	action	minor	`v3.29.11` → `v3.32.4`
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	require	minor	`v0.62.0` → `v0.65.0`
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace	require	minor	`v0.62.0` → `v0.65.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	require	minor	`v0.62.0` → `v0.65.0`
go.opentelemetry.io/otel	require	minor	`v1.37.0` → `v1.40.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	require	minor	`v1.37.0` → `v1.40.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	require	minor	`v1.37.0` → `v1.40.0`
go.opentelemetry.io/otel/sdk	require	minor	`v1.37.0` → `v1.40.0`
go.opentelemetry.io/otel/trace	require	minor	`v1.37.0` → `v1.40.0`
go.starlark.net	require	digest	`2a4f369` → `b62fd89`
golang.org/x/crypto	require	minor	`v0.45.0` → `v0.48.0`
golang.org/x/oauth2	require	minor	`v0.30.0` → `v0.35.0`
golang.org/x/sync	require	minor	`v0.18.0` → `v0.19.0`
golang.org/x/time	require	minor	`v0.12.0` → `v0.14.0`
gorm.io/gorm	require	minor	`v1.30.2` → `v1.31.1`
k8s.io/apimachinery	require	minor	`v0.34.0` → `v0.35.1`

Release Notes

actions/checkout (actions/checkout)

`v5.0.1`

Compare Source

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: actions/checkout@v5...v5.0.1

actions/github-script (actions/github-script)

`v7.1.0`

Compare Source

What's Changed

Upgrade husky to v9 by @benelan in #482
Add workflow file for publishing releases to immutable action package by @Jcambass in #485
Upgrade IA Publish by @Jcambass in #486
Fix workflow status badges by @joshmgross in #497
Update usage of actions/upload-artifact by @joshmgross in #512
Clear up package name confusion by @joshmgross in #514
Update dependencies with npm audit fix by @joshmgross in #515
Specify that the used script is JavaScript by @timotk in #478
chore: Add Dependabot for NPM and Actions by @nschonni in #472
Define permissions in workflows and update actions by @joshmgross in #531
chore: Add Dependabot for .github/actions/install-dependencies by @nschonni in #532
chore: Remove .vscode settings by @nschonni in #533
ci: Use github/setup-licensed by @nschonni in #473
make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by @iamstarkov in #508
Remove octokit README updates for v7 by @joshmgross in #557
docs: add "exec" usage examples by @neilime in #546
Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by @dependabot[bot] in #563
Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by @dependabot[bot] in #575
Clearly document passing inputs to the script by @joshmgross in #603
Update README.md by @nebuk89 in #610

New Contributors

@benelan made their first contribution in #482
@Jcambass made their first contribution in #485
@timotk made their first contribution in #478
@iamstarkov made their first contribution in #508
@neilime made their first contribution in #546
@nebuk89 made their first contribution in #610

Full Changelog: actions/github-script@v7...v7.1.0

actions/setup-go (actions/setup-go)

`v5.6.0`

Compare Source

What's Changed

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @aparnajyothi-y in #689

Full Changelog: actions/setup-go@v5...v5.6.0

codecov/codecov-action (codecov/codecov-action)

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in #1871
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in #1868
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in #1867
fix: update to use local app/ dir by @thomasrockhu-codecov in #1872
docs: fix typo in README by @datalater in #1866
Document a codecov-cli version reference example by @webknjaz in #1774
build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in #1861
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in #1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

docker/build-push-action (docker/build-push-action)

`v6.19.2`

Compare Source

Preserve port in GIT_AUTH_TOKEN host by @crazy-max in #1458

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

`v6.19.1`

Compare Source

Derive GIT_AUTH_TOKEN host from GitHub server URL by @crazy-max in #1456

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

`v6.19.0`

Compare Source

Scope default git auth token to github.com by @crazy-max in #1451
Bump brace-expansion from 1.1.11 to 1.1.12 in #1396
Bump form-data from 2.5.1 to 2.5.5 in #1391
Bump js-yaml from 3.14.1 to 3.14.2 in #1429
Bump lodash from 4.17.21 to 4.17.23 in #1446
Bump tmp from 0.2.3 to 0.2.4 in #1398
Bump undici from 5.28.4 to 5.29.0 in #1397

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

docker/login-action (docker/login-action)

`v3.7.0`

Compare Source

Add scope input to set scopes for the authentication token by @crazy-max in #912
Add support for AWS European Sovereign Cloud ECR by @dphi in #914
Ensure passwords are redacted with registry-auth input by @crazy-max in #911
build(deps): bump lodash from 4.17.21 to 4.17.23 in #915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

`v3.6.0`

Compare Source

Add registry-auth input for raw authentication to registries by @crazy-max in #887
Bump @aws-sdk/client-ecr to 3.890.0 in #882 #890
Bump @aws-sdk/client-ecr-public to 3.890.0 in #882 #890
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #883
Bump brace-expansion from 1.1.11 to 1.1.12 in #880
Bump undici from 5.28.4 to 5.29.0 in #879
Bump tmp from 0.2.3 to 0.2.4 in #881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

docker/metadata-action (docker/metadata-action)

`v5.10.0`

Compare Source

Bump @docker/actions-toolkit from 0.66.0 to 0.68.0 in #559 #569
Bump js-yaml from 3.14.1 to 3.14.2 in #564

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

`v5.9.0`

Compare Source

Add tag-names output to return tag names without image base name by @crazy-max in #553
Bump @babel/runtime-corejs3 from 7.14.7 to 7.28.2 in #539
Bump @docker/actions-toolkit from 0.62.1 to 0.66.0 in #555
Bump brace-expansion from 1.1.11 to 1.1.12 in #540
Bump csv-parse from 5.6.0 to 6.1.0 in #532
Bump semver from 7.7.2 to 7.7.3 in in #554
Bump tmp from 0.2.3 to 0.2.5 in #541

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

alicebob/miniredis (github.com/alicebob/miniredis/v2)

`v2.36.1`

Compare Source

support CLUSTER SHARDS (thanks @dadrus)

`v2.36.0`

Compare Source

return actual server address by CLUSTER NODES (thanks @nastik-kum)
support DUMP and RESTORE (thanks @alyssaruth)
support EVALRO (thanks @max-frank)
add WAIT command as no-op (thanks @aroullet)
support info stats (thanks @destinyoooo)
add "-*" keys
compare against Redis 8.4.0

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

`v1.41.2`

Compare Source

Module Highlights

github.com/aws/aws-sdk-go-v2/service/deadline: v1.14.0
- Feature: Added fields to track cumulative task retry attempts for steps and jobs
github.com/aws/aws-sdk-go-v2/service/ec2: v1.227.0
- Feature: This release adds support for OdbNetworkArn as a target in VPC Route Tables
github.com/aws/aws-sdk-go-v2/service/iotmanagedintegrations: v1.1.0
- Feature: Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations.
github.com/aws/aws-sdk-go-v2/service/keyspaces: v1.19.0
- Feature: This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API.
github.com/aws/aws-sdk-go-v2/service/keyspacesstreams: v1.0.0
- Release: New AWS service client module
- Feature: This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API.
github.com/aws/aws-sdk-go-v2/service/kms: v1.41.2
- Documentation: This release updates AWS CLI examples for KMS APIs.
github.com/aws/aws-sdk-go-v2/service/qbusiness: v1.27.0
- Feature: Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer
github.com/aws/aws-sdk-go-v2/service/workspaces: v1.58.0
- Feature: Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories

`v1.41.1`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.39.5
- Bug Fix: Deprecate http.AddResponseReadTimeoutMiddleware.
github.com/aws/aws-sdk-go-v2/service/amp: v1.41.0
- Feature: Add Anomaly Detection APIs for Amazon Managed Prometheus
github.com/aws/aws-sdk-go-v2/service/apigateway: v1.36.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/appconfig: v1.43.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/appflow: v1.51.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler: v1.27.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/appmesh: v1.35.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/appsync: v1.52.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/artifact: v1.14.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.46.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/bedrockagent: v1.51.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol: v1.12.0
- Feature: Web-Bot-Auth support for AgentCore Browser tool to help reduce captcha challenges.
github.com/aws/aws-sdk-go-v2/service/chime: v1.41.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.37.0
- Feature: Added support for advanced Spark configurations to optimize SQL performance
github.com/aws/aws-sdk-go-v2/service/cloudcontrol: v1.29.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/clouddirectory: v1.30.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/cloudsearch: v1.32.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.52.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/codecatalyst: v1.21.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/codecommit: v1.33.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/codedeploy: v1.35.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/cognitosync: v1.29.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/computeoptimizer: v1.48.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/connectcases: v1.33.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/deadline: v1.22.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/devopsguru: v1.40.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/docdb: v1.48.0
- Feature: Adding FailoverState and TagList to GlobalCluster and SynchronizationStatus to GlobalClusterMember.
github.com/aws/aws-sdk-go-v2/service/ecs: v1.67.0
- Feature: Amazon ECS Service Connect now supports Envoy access logs, providing deeper observability into request-level traffic patterns and service interactions.
github.com/aws/aws-sdk-go-v2/service/eksauth: v1.12.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/elasticache: v1.51.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/emrserverless: v1.37.0
- Feature: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on EMR Serverless Applications.
github.com/aws/aws-sdk-go-v2/service/firehose: v1.42.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/frauddetector: v1.41.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/geoplaces: v1.7.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/glue: v1.132.0
- Feature: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on AWS Glue.
github.com/aws/aws-sdk-go-v2/service/greengrassv2: v1.42.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/ioteventsdata: v1.30.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/iotmanagedintegrations: v1.6.0
- Feature: Add a new GetManagedThingCertificate API to expose Iot ManagedIntegrations (MI) device certificate, and add "-" support for name, properties, actions and events in the CapabilityReportCapability object.
github.com/aws/aws-sdk-go-v2/service/keyspacesstreams: v1.5.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/kinesis: v1.41.1
- Bug Fix: Remove arbitrary read timeout on GetRecords which was causing response read panic. See #2752.
github.com/aws/aws-sdk-go-v2/service/kms: v1.47.0
- Feature: Add cross account VPC endpoint service connectivity support to CustomKeyStore.
github.com/aws/aws-sdk-go-v2/service/licensemanagerlinuxsubscriptions: v1.20.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/marketplacereporting: v1.7.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/neptune: v1.43.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/rtbfabric: v1.1.1
- Documentation: RTB Fabric documentation update.
github.com/aws/aws-sdk-go-v2/service/s3outposts: v1.34.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/sagemakerruntime: v1.38.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/schemas: v1.34.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/serverlessapplicationrepository: v1.30.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/servicecatalog: v1.39.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/sso: v1.30.0
- Feature: Update endpoint ruleset parameters casing
github.com/aws/aws-sdk-go-v2/service/sts: v1.39.0
- Feature: Update endpoint ruleset parameters casing

`v1.41.0`

Compare Source

Module Highlights

github.com/aws/aws-sdk-go-v2/service/apigateway: v1.31.3
- Documentation: Documentation updates for Amazon API Gateway
github.com/aws/aws-sdk-go-v2/service/apigatewayv2: v1.28.3
- Documentation: Documentation updates for Amazon API Gateway
github.com/aws/aws-sdk-go-v2/service/connectcampaignsv2: v1.3.0
- Feature: Added PutInstanceCommunicationLimits and GetInstanceCommunicationLimits APIs
github.com/aws/aws-sdk-go-v2/service/ecs: v1.57.5
- Documentation: This Amazon ECS release supports updating the capacityProviderStrategy parameter in update-service.
github.com/aws/aws-sdk-go-v2/service/emrserverless: v1.31.0
- Feature: This release adds support for retrieval of the optional executionIamPolicy field in the GetJobRun API response.
github.com/aws/aws-sdk-go-v2/service/iotfleetwise: v1.27.0
- Feature: Add new status READY_FOR_CHECKIN used for vehicle synchronisation
github.com/aws/aws-sdk-go-v2/service/kms: v1.41.0
- Feature: AWS KMS announces the support of ML-DSA key pairs that creates post-quantum safe digital signatures.

`v1.40.1`

Compare Source

`v1.40.0`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.40.0
- Feature: Add support for AWS Login credentials (package credentials/logincreds) to the default credential chain.
github.com/aws/aws-sdk-go-v2/config: v1.32.0
- Feature: Add support for AWS Login credentials (package credentials/logincreds) to the default credential chain.
github.com/aws/aws-sdk-go-v2/credentials: v1.19.0
- Feature: Add support for AWS Login credentials (package credentials/logincreds) to the default credential chain.

expr-lang/expr (github.com/expr-lang/expr)

`v1.17.8`

Compare Source

Expr is an expression language designed to deliver dynamic configurations with unparalleled accuracy,
safety, and speed.

program, err := expr.Compile(`let foo = bar(); baz(foo, foo)`)

In this release:

New feature: added bytes literal syntax (#894)
Improved performance: count comparisons to any (#897)
Improved performance: added sum range optimization (#896)
Improved performance: added count threshold comparisons (#898)
Improved performance: optimize loop iteration with scope pool (#908)
Improved performance: added fast paths for min, max, mean, and median (#909)
Fixed: ctx into nested custom funcs and Env (#883)
Fixed: disable check for missing predicate during parseing (#924)
Fixed: detect $env() calls at compile time (#923)
Fixed: bounds check to get() (#918)
Fixed: validate sortBy order argument type (#912)
Fixed: reduce empty array without init val (#911)
Fixed: validate arg count before OpCall (#904)
Fixed: correct variadic method arg type (#889)

gin-gonic/gin (github.com/gin-gonic/gin)

`v1.11.0`

Compare Source

Features

feat(gin): Experimental support for HTTP/3 using quic-go/quic-go (#3210)
feat(form): add array collection format in form binding (#3986), add custom string slice for form tag unmarshal (#3970)
feat(binding): add BindPlain (#3904)
feat(fs): Export, test and document OnlyFilesFS (#3939)
feat(binding): add support for unixMilli and unixMicro (#4190)
feat(form): Support default values for collections in form binding (#4048)
feat(context): GetXxx added support for more go native types (#3633)

Enhancements

perf(context): optimize getMapFromFormData performance (#4339)
refactor(tree): replace string(/) with "/" in node.insertChild (#4354)
refactor(render): remove headers parameter from writeHeader (#4353)
refactor(context): simplify "GetType()" functions (#4080)
refactor(slice): simplify SliceValidationError Error method (#3910)
refactor(context):Avoid using filepath.Dir twice in SaveUploadedFile (#4181)
refactor(context): refactor context handling and improve test robustness (#4066)
refactor(binding): use strings.Cut to replace strings.Index (#3522)
refactor(context): add an optional permission parameter to SaveUploadedFile (#4068)
refactor(context): verify URL is Non-nil in initQueryCache() (#3969)
refactor(context): YAML judgment logic in Negotiate (#3966)
tree: replace the self-defined 'min' to official one (#3975)
context: Remove redundant filepath.Dir usage (#4181)

Bug Fixes

fix: prevent middleware re-entry issue in HandleContext (#3987)
fix(binding): prevent duplicate decoding and add validation in decodeToml (#4193)
fix(gin): Do not panic when handling method not allowed on empty tree (#4003)
fix(gin): data race warning for gin mode (#1580)
fix(context): verify URL is Non-nil in initQueryCache() (#3969)
fix(context): YAML judgment logic in Negotiate (#3966)
fix(context): check handler is nil (#3413)
fix(readme): fix broken link to English documentation (#4222)
fix(tree): Keep panic infos consistent when wildcard type build faild (#4077)

Build process updates / CI

ci: integrate Trivy vulnerability scanning into CI workflow (#4359)
ci: support Go 1.25 in CI/CD (#4341)
build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#4342)
ci: add Go version 1.24 to GitHub Actions (#4154)
build: update Gin minimum Go version to 1.21 (#3960)
ci(lint): enable new linters (testifylint, usestdlibvars, perfsprint, etc.) (#4010, #4091, #4090)
ci(lint): update workflows and improve test request consistency (#4126)

Dependency updates

chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#4346, #4356)
chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#4347)
chore(deps): bump actions/setup-go from 5 to 6 (#4351)
chore(deps): bump github.com/quic-go/quic-go from 0.53.0 to 0.54.0 (#4328)
chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 (#4178, #4221)
chore(deps): bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.1 (#4052)

Documentation updates

docs(changelog): update release notes for Gin v1.10.1 (#4360)
docs: Fixing English grammar mistakes and awkward sentence structure in doc/doc.md (#4207)
docs: update documentation and release notes for Gin v1.10.0 (#3953)
docs: fix typo in Gin Quick Start (#3997)
docs: fix comment and link issues (#4205, #3938)
docs: fix route group example code (#4020)
docs(readme): add Portuguese documentation (#4078)
docs(context): fix some function names in comment (#4079)

golang-jwt/jwt (github.com/golang-jwt/jwt/v5)

`v5.3.1`

Compare Source

What's Changed

🔐 Features

Add spellcheck Github action to catch common spelling

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-08-31T10:11:24Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

25 additional dependencies were updated

Details:

Package	Change
`golang.org/x/crypto`	`v0.41.0` -> `v0.45.0`
`github.com/bytedance/sonic`	`v1.13.3` -> `v1.14.2`
`github.com/bytedance/sonic/loader`	`v0.2.4` -> `v0.4.0`
`github.com/cenkalti/backoff/v5`	`v5.0.2` -> `v5.0.3`
`github.com/cloudwego/base64x`	`v0.1.5` -> `v0.1.6`
`github.com/gabriel-vasile/mimetype`	`v1.4.9` -> `v1.4.11`
`github.com/go-jose/go-jose/v4`	`v4.1.0` -> `v4.1.3`
`github.com/go-playground/validator/v10`	`v10.26.0` -> `v10.28.0`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.27.1` -> `v2.27.3`
`github.com/klauspost/cpuid/v2`	`v2.2.11` -> `v2.3.0`
`github.com/lestrrat-go/httprc/v3`	`v3.0.0` -> `v3.0.1`
`github.com/prometheus/common`	`v0.65.0` -> `v0.66.1`
`github.com/segmentio/asm`	`v1.2.0` -> `v1.2.1`
`github.com/ugorji/go/codec`	`v1.3.0` -> `v1.3.1`
`go.opentelemetry.io/auto/sdk`	`v1.1.0` -> `v1.2.1`
`go.opentelemetry.io/otel/metric`	`v1.37.0` -> `v1.39.0`
`go.opentelemetry.io/proto/otlp`	`v1.7.0` -> `v1.9.0`
`golang.org/x/arch`	`v0.18.0` -> `v0.23.0`
`golang.org/x/net`	`v0.42.0` -> `v0.47.0`
`golang.org/x/sys`	`v0.35.0` -> `v0.39.0`
`golang.org/x/text`	`v0.28.0` -> `v0.31.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250603155806-513f23925822` -> `v0.0.0-20251202230838-ff82c1b0f217`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250603155806-513f23925822` -> `v0.0.0-20251202230838-ff82c1b0f217`
`google.golang.org/grpc`	`v1.73.0` -> `v1.77.0`
`google.golang.org/protobuf`	`v1.36.6` -> `v1.36.10`

codecov · 2025-08-31T10:15:19Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 58.27%. Comparing base (36f9b1d) to head (a3c62a7).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1345   +/-   ##
=======================================
  Coverage   58.27%   58.27%           
=======================================
  Files         644      644           
  Lines       25024    25024           
=======================================
  Hits        14582    14582           
  Misses       9762     9762           
  Partials      680      680

Files with missing lines	Coverage Δ
database/context.go	`93.33% <ø> (ø)`
router/middleware/build/context.go	`100.00% <ø> (ø)`
router/middleware/claims/context.go	`100.00% <ø> (ø)`
router/middleware/cli/context.go	`100.00% <ø> (ø)`
router/middleware/dashboard/context.go	`100.00% <ø> (ø)`
router/middleware/hook/context.go	`100.00% <ø> (ø)`
router/middleware/org/context.go	`100.00% <ø> (ø)`
router/middleware/pipeline/context.go	`100.00% <ø> (ø)`
router/middleware/repo/context.go	`100.00% <ø> (ø)`
router/middleware/schedule/context.go	`100.00% <ø> (ø)`
... and 8 more

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

renovate · 2025-12-10T12:50:42Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

34 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.4` -> `1.25.0`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.18.21` -> `v1.19.10`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.18.13` -> `v1.18.18`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.4.13` -> `v1.4.18`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.13` -> `v2.7.18`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.13.3` -> `v1.13.5`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.13.13` -> `v1.13.18`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.30.1` -> `v1.30.11`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.35.5` -> `v1.35.15`
`github.com/aws/smithy-go`	`v1.23.2` -> `v1.24.1`
`github.com/bytedance/sonic`	`v1.13.3` -> `v1.15.0`
`github.com/bytedance/sonic/loader`	`v0.2.4` -> `v0.5.0`
`github.com/cenkalti/backoff/v5`	`v5.0.2` -> `v5.0.3`
`github.com/cloudwego/base64x`	`v0.1.5` -> `v0.1.6`
`github.com/gabriel-vasile/mimetype`	`v1.4.9` -> `v1.4.13`
`github.com/go-jose/go-jose/v4`	`v4.1.0` -> `v4.1.3`
`github.com/go-playground/validator/v10`	`v10.26.0` -> `v10.30.1`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.27.1` -> `v2.27.7`
`github.com/klauspost/compress`	`v1.18.0` -> `v1.18.2`
`github.com/klauspost/cpuid/v2`	`v2.2.11` -> `v2.3.0`
`github.com/lestrrat-go/httprc/v3`	`v3.0.0` -> `v3.0.2`
`github.com/prometheus/common`	`v0.65.0` -> `v0.66.1`
`github.com/segmentio/asm`	`v1.2.0` -> `v1.2.1`
`github.com/ugorji/go/codec`	`v1.3.0` -> `v1.3.1`
`go.opentelemetry.io/auto/sdk`	`v1.1.0` -> `v1.2.1`
`go.opentelemetry.io/otel/metric`	`v1.37.0` -> `v1.40.0`
`go.opentelemetry.io/proto/otlp`	`v1.7.0` -> `v1.9.0`
`golang.org/x/arch`	`v0.18.0` -> `v0.23.0`
`golang.org/x/net`	`v0.47.0` -> `v0.49.0`
`golang.org/x/sys`	`v0.38.0` -> `v0.41.0`
`golang.org/x/text`	`v0.31.0` -> `v0.34.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250603155806-513f23925822` -> `v0.0.0-20260128011058-8636f8732409`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250603155806-513f23925822` -> `v0.0.0-20260128011058-8636f8732409`
`k8s.io/utils`	`v0.0.0-20250604170112-4c0f3b243397` -> `v0.0.0-20251002143259-bc988d571ff4`
`sigs.k8s.io/json`	`v0.0.0-20241014173422-cfa47c3a1cc8` -> `v0.0.0-20250730193827-2d320260d730`

renovate · 2026-02-24T21:31:35Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate · 2026-02-24T22:56:53Z

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

renovate Bot added the dependencies Indicates a change to dependencies label Aug 31, 2025

renovate Bot requested a review from a team as a code owner August 31, 2025 10:11

renovate Bot added the dependencies Indicates a change to dependencies label Aug 31, 2025

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 14 times, most recently from 00239db to f205226 Compare September 10, 2025 13:12

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from a177859 to ffb30ac Compare September 14, 2025 08:39

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 6489d53 to 54c6b3d Compare September 24, 2025 16:35

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from af59be1 to 3646e27 Compare September 29, 2025 14:33

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch from 3646e27 to 7dec787 Compare October 2, 2025 16:47

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 5 times, most recently from b0b13c9 to 68917ad Compare November 2, 2025 18:39

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 5 times, most recently from a6166d9 to 2ab8c19 Compare November 9, 2025 21:28

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 7 times, most recently from 2532871 to 41ec51b Compare November 18, 2025 03:07

renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 5 times, most recently from 1044ec7 to ac918b1 Compare November 26, 2025 12:41

ecrupper previously approved these changes Feb 20, 2026

View reviewed changes

timhuynh94 previously approved these changes Feb 24, 2026

View reviewed changes

renovate Bot and others added 2 commits February 24, 2026 21:30

fix(deps): update all non-major dependencies

0d6ada3

Merge branch 'main' into renovate/all-minor-patch-digest-pin

a7a36c5

ecrupper mentioned this pull request Feb 24, 2026

chore(deps): upgrade minor deps and apply some go fix changes #1395

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies - abandoned#1345

fix(deps): update all non-major dependencies - abandoned#1345
renovate[bot] wants to merge 2 commits intomainfrom
renovate/all-minor-patch-digest-pin

renovate Bot commented Aug 31, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Aug 31, 2025 •

edited

Loading

Uh oh!

codecov Bot commented Aug 31, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Dec 10, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Feb 24, 2026

Uh oh!

renovate Bot commented Feb 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

renovate Bot commented Aug 31, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

Module Highlights

General Highlights

Module Highlights

Module Highlights

General Highlights

Module Highlights

Features

Enhancements

Bug Fixes

Build process updates / CI

Dependency updates

Documentation updates

What's Changed

🔐 Features

Configuration

Uh oh!

renovate Bot commented Aug 31, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

Uh oh!

codecov Bot commented Aug 31, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

renovate Bot commented Dec 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

renovate Bot commented Feb 24, 2026

Edited/Blocked Notification

Uh oh!

renovate Bot commented Feb 24, 2026

Autoclosing Skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate Bot commented Aug 31, 2025 •

edited

Loading

renovate Bot commented Aug 31, 2025 •

edited

Loading

codecov Bot commented Aug 31, 2025 •

edited

Loading

renovate Bot commented Dec 10, 2025 •

edited

Loading