Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 6, 2025

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/github-script action minor v7.0.1 -> v7.1.0 age confidence
alpine final patch 3.22.1 -> 3.22.2 age confidence
codecov/codecov-action action patch v5.5.0 -> v5.5.1 age confidence
docker/login-action action minor v3.5.0 -> v3.6.0 age confidence
github.com/docker/docker require minor v28.3.3+incompatible -> v28.5.1+incompatible age confidence
github.com/gin-gonic/gin require minor v1.10.1 -> v1.11.0 age confidence
github.com/go-vela/server require patch v0.27.1 -> v0.27.2 age confidence
github.com/prometheus/client_golang require patch v1.23.0 -> v1.23.2 age confidence
github.com/urfave/cli/v3 require minor v3.4.1 -> v3.5.0 age confidence
github/codeql-action action minor v3.29.11 -> v3.31.0 age confidence
golang.org/x/sync require minor v0.16.0 -> v0.17.0 age confidence
k8s.io/api require patch v0.34.0 -> v0.34.1 age confidence
k8s.io/apimachinery require patch v0.34.0 -> v0.34.1 age confidence
k8s.io/client-go require patch v0.34.0 -> v0.34.1 age confidence

Release Notes

actions/github-script (actions/github-script)

v7.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/github-script@v7...v7.1.0

codecov/codecov-action (codecov/codecov-action)

v5.5.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

docker/login-action (docker/login-action)

v3.6.0

Compare Source

Full Changelog: docker/login-action@v3.5.0...v3.6.0

docker/docker (github.com/docker/docker)

v28.5.1+incompatible

Compare Source

v28.5.0+incompatible

Compare Source

v28.4.0+incompatible

Compare Source

gin-gonic/gin (github.com/gin-gonic/gin)

v1.11.0

Compare Source

Features
  • feat(gin): Experimental support for HTTP/3 using quic-go/quic-go (#​3210)
  • feat(form): add array collection format in form binding (#​3986), add custom string slice for form tag unmarshal (#​3970)
  • feat(binding): add BindPlain (#​3904)
  • feat(fs): Export, test and document OnlyFilesFS (#​3939)
  • feat(binding): add support for unixMilli and unixMicro (#​4190)
  • feat(form): Support default values for collections in form binding (#​4048)
  • feat(context): GetXxx added support for more go native types (#​3633)
Enhancements
  • perf(context): optimize getMapFromFormData performance (#​4339)
  • refactor(tree): replace string(/) with "/" in node.insertChild (#​4354)
  • refactor(render): remove headers parameter from writeHeader (#​4353)
  • refactor(context): simplify "GetType()" functions (#​4080)
  • refactor(slice): simplify SliceValidationError Error method (#​3910)
  • refactor(context):Avoid using filepath.Dir twice in SaveUploadedFile (#​4181)
  • refactor(context): refactor context handling and improve test robustness (#​4066)
  • refactor(binding): use strings.Cut to replace strings.Index (#​3522)
  • refactor(context): add an optional permission parameter to SaveUploadedFile (#​4068)
  • refactor(context): verify URL is Non-nil in initQueryCache() (#​3969)
  • refactor(context): YAML judgment logic in Negotiate (#​3966)
  • tree: replace the self-defined 'min' to official one (#​3975)
  • context: Remove redundant filepath.Dir usage (#​4181)
Bug Fixes
  • fix: prevent middleware re-entry issue in HandleContext (#​3987)
  • fix(binding): prevent duplicate decoding and add validation in decodeToml (#​4193)
  • fix(gin): Do not panic when handling method not allowed on empty tree (#​4003)
  • fix(gin): data race warning for gin mode (#​1580)
  • fix(context): verify URL is Non-nil in initQueryCache() (#​3969)
  • fix(context): YAML judgment logic in Negotiate (#​3966)
  • fix(context): check handler is nil (#​3413)
  • fix(readme): fix broken link to English documentation (#​4222)
  • fix(tree): Keep panic infos consistent when wildcard type build faild (#​4077)
Build process updates / CI
  • ci: integrate Trivy vulnerability scanning into CI workflow (#​4359)
  • ci: support Go 1.25 in CI/CD (#​4341)
  • build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#​4342)
  • ci: add Go version 1.24 to GitHub Actions (#​4154)
  • build: update Gin minimum Go version to 1.21 (#​3960)
  • ci(lint): enable new linters (testifylint, usestdlibvars, perfsprint, etc.) (#​4010, #​4091, #​4090)
  • ci(lint): update workflows and improve test request consistency (#​4126)
Dependency updates
  • chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#​4346, #​4356)
  • chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#​4347)
  • chore(deps): bump actions/setup-go from 5 to 6 (#​4351)
  • chore(deps): bump github.com/quic-go/quic-go from 0.53.0 to 0.54.0 (#​4328)
  • chore(deps): bump golang.org/x/net from 0.33.0 to 0.38.0 (#​4178, #​4221)
  • chore(deps): bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.1 (#​4052)
Documentation updates
  • docs(changelog): update release notes for Gin v1.10.1 (#​4360)
  • docs: Fixing English grammar mistakes and awkward sentence structure in doc/doc.md (#​4207)
  • docs: update documentation and release notes for Gin v1.10.0 (#​3953)
  • docs: fix typo in Gin Quick Start (#​3997)
  • docs: fix comment and link issues (#​4205, #​3938)
  • docs: fix route group example code (#​4020)
  • docs(readme): add Portuguese documentation (#​4078)
  • docs(context): fix some function names in comment (#​4079)

go-vela/server (github.com/go-vela/server)

v0.27.2

Compare Source

What's Changed

  • fix(compiler): always include build repo in install and add VELA_GIT_TOKEN by @​ecrupper in #​1346
  • fix(db/log): remove redundant service_id and step_id indices from log table by @​wass3r in #​1344
  • fix(oidc): no trailing colon on non-action events in claim by @​ecrupper in #​1355

Full Changelog: go-vela/server@v0.27.1...v0.27.2

prometheus/client_golang (github.com/prometheus/client_golang)

v1.23.2: - 2025-09-05

Compare Source

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

All Changes

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1: - 2025-09-04

Compare Source

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

All Changes

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

urfave/cli (github.com/urfave/cli/v3)

v3.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.4.1...v3.5.0

github/codeql-action (github/codeql-action)

v3.31.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.0 - 24 Oct 2025
  • Bump minimum CodeQL bundle version to 2.17.6. #​3223
  • When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #​3222

See the full CHANGELOG.md for more information.

v3.30.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.9 - 17 Oct 2025
  • Update default CodeQL bundle version to 2.23.3. #​3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #​3204

See the full CHANGELOG.md for more information.

v3.30.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.7 - 06 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.6 - 02 Oct 2025

  • Update default CodeQL bundle version to 2.23.2. #​3168

See the full CHANGELOG.md for more information.

v3.30.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.5 - 26 Sep 2025

  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #​3160

See the full CHANGELOG.md for more information.

v3.30.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.4 - 25 Sep 2025

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #​3099 and #​3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #​3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #​3130
  • Update default CodeQL bundle version to 2.23.1. #​3118

See the full CHANGELOG.md for more information.

v3.30.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #​3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #​3064

See the full CHANGELOG.md for more information.

v3.30.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.1 - 05 Sep 2025

  • Update default CodeQL bundle version to 2.23.0. #​3077

See the full CHANGELOG.md for more information.

v3.30.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

  • Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #​3054

See the full CHANGELOG.md for more information.

kubernetes/api (k8s.io/api)

v0.34.1

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.34.1

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.34.1

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Indicates a change to dependencies label Sep 6, 2025
@renovate renovate bot requested a review from a team as a code owner September 6, 2025 20:14
@renovate
Copy link
Contributor Author

renovate bot commented Sep 6, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 9 additional dependencies were updated

Details:

Package Change
github.com/bytedance/sonic v1.13.3 -> v1.14.0
github.com/bytedance/sonic/loader v0.2.4 -> v0.3.0
github.com/cloudwego/base64x v0.1.5 -> v0.1.6
github.com/go-playground/validator/v10 v10.26.0 -> v10.27.0
github.com/klauspost/cpuid/v2 v2.2.11 -> v2.3.0
github.com/prometheus/common v0.65.0 -> v0.66.1
golang.org/x/arch v0.18.0 -> v0.20.0
golang.org/x/net v0.42.0 -> v0.43.0
google.golang.org/protobuf v1.36.6 -> v1.36.9

@codecov
Copy link

codecov bot commented Sep 6, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 52.72%. Comparing base (a32db6a) to head (3c11c7e).

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #660      +/-   ##
==========================================
- Coverage   58.16%   52.72%   -5.45%     
==========================================
  Files         123      123              
  Lines        8379     5354    -3025     
==========================================
- Hits         4874     2823    -2051     
+ Misses       3294     2320     -974     
  Partials      211      211              

see 102 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 1370830 to 06751eb Compare September 10, 2025 22:24
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 6aebb50 to 8e0e501 Compare September 26, 2025 21:26
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from b0e78d3 to 80c8d7f Compare October 2, 2025 20:51
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from c77447c to 18f712d Compare October 10, 2025 18:42
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 28157e5 to d926900 Compare October 22, 2025 15:07
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from d926900 to 3c11c7e Compare October 24, 2025 21:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Indicates a change to dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant