Skip to content

chore(deps): update all non-major dependencies - #3075

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/setup-python action minor v7.0.0 → v7.1.0 age confidence
cel.dev/expr indirect patch v0.25.2 → v0.25.3 age confidence
charm.land/bubbles/v2 require minor v2.1.1 → v2.2.1 age confidence
cloud.google.com/go/iam indirect minor v1.14.0 → v1.15.0 age confidence
cloud.google.com/go/monitoring indirect minor v1.31.0 → v1.32.0 age confidence
cloud.google.com/go/storage indirect minor v1.69.0 → v1.70.0 age confidence
github.com/aws/aws-sdk-go-v2 indirect patch v1.47.1 → v1.47.4 age confidence
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream indirect patch v1.7.20 → v1.7.24 age confidence
github.com/aws/aws-sdk-go-v2/config indirect patch v1.33.6 → v1.33.10 age confidence
github.com/aws/aws-sdk-go-v2/credentials indirect patch v1.20.6 → v1.20.10 age confidence
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect patch v1.20.1 → v1.20.4 age confidence
github.com/aws/aws-sdk-go-v2/internal/configsources indirect patch v1.5.4 → v1.5.7 age confidence
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 indirect patch v2.8.4 → v2.8.7 age confidence
github.com/aws/aws-sdk-go-v2/internal/v4a indirect patch v1.5.4 → v1.5.7 age confidence
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect patch v1.13.19 → v1.13.22 age confidence
github.com/aws/aws-sdk-go-v2/service/internal/checksum indirect patch v1.11.5 → v1.11.8 age confidence
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url indirect patch v1.14.4 → v1.14.7 age confidence
github.com/aws/aws-sdk-go-v2/service/internal/s3shared indirect patch v1.20.4 → v1.20.7 age confidence
github.com/aws/aws-sdk-go-v2/service/s3 indirect patch v1.114.0 → v1.114.5 age confidence
github.com/aws/aws-sdk-go-v2/service/signin indirect patch v1.10.1 → v1.10.5 age confidence
github.com/aws/aws-sdk-go-v2/service/sso indirect patch v1.38.1 → v1.38.5 age confidence
github.com/aws/aws-sdk-go-v2/service/ssooidc indirect patch v1.43.1 → v1.43.5 age confidence
github.com/aws/aws-sdk-go-v2/service/sts indirect patch v1.51.1 → v1.51.5 age confidence
github.com/aws/smithy-go indirect patch v1.28.1 → v1.28.6 age confidence
github.com/dlclark/regexp2/v2 indirect minor v2.7.1 → v2.10.0 age confidence
github.com/dustin/go-humanize indirect minor v1.0.1 → v1.1.0 age confidence
github.com/envoyproxy/go-control-plane/envoy indirect minor v1.39.0 → v1.40.0 age confidence
github.com/go-jose/go-jose/v4 indirect patch v4.1.4 → v4.1.6 age confidence
github.com/googleapis/enterprise-certificate-proxy indirect patch v0.3.22 → v0.3.24 age confidence
github.com/googleapis/gax-go/v2 indirect minor v2.26.2 → v2.27.0 age confidence
github.com/hashicorp/aws-sdk-go-base/v2 indirect patch v2.0.0-beta.75 → v2.0.0-beta.76 age confidence
github.com/klauspost/compress indirect patch v1.20.1 → v1.20.3 age confidence
github.com/klauspost/cpuid/v2 indirect patch v2.4.0 → v2.4.1 age confidence
github.com/klauspost/pgzip indirect minor v1.2.6 → v1.3.0 age confidence
github.com/mattn/go-colorable indirect patch v0.1.15 → v0.1.16 age confidence
github.com/mattn/go-runewidth indirect patch v0.0.30 → v0.0.31 age confidence
github.com/pierrec/lz4/v4 indirect patch v4.1.27 → v4.1.33 age confidence
github.com/spiffe/go-spiffe/v2 indirect minor v2.8.1 → v2.9.0 age confidence
github.com/stretchr/objx indirect minor v0.5.3 → v0.8.0 age confidence
github.com/xo/terminfo indirect minor v1.0.0 → v1.2.0 age confidence
go tools patch 1.27.2 → 1.27.3 age confidence
golangci-lint tools minor 2.14.0 → 2.15.0 age confidence
golangci/golangci-lint minor v2.14.0 → v2.15.0 age confidence
golangci/golangci-lint uses-with minor v2.14.0 → v2.15.0 age confidence
google.golang.org/api indirect minor v0.301.0 → v0.308.0 age confidence
goreleaser tools minor 2.18.3 → 2.19.0 age confidence
goreleaser/goreleaser-action (changelog) action digest f06c13b → a4f02ab
hustcer/setup-nu action minor v3.28 → v3.29 age confidence
mvdan.cc/sh/x require digest 0e8ea6f → 7afdecf age confidence
netlify-cli devDependencies minor 27.12.0 → 27.14.2 age confidence
node (source) tools minor 24.21.0 → v24.22.1 age confidence
pnpm (source) packageManager minor 12.11.2+sha512.25a51652a196785af5f28bda6dfe8dc582ebefa4ac1d180221ce1390231c5fb76637822ea4b6e4633ce74acdcb0a77f725af11bad38177fdeddaee818a955cb9 → 12.15.0 age confidence
pnpm (source) tools minor 12.11.2 → 12.15.0 age confidence
vitepress-plugin-group-icons devDependencies minor 1.7.7 → 1.8.1 age confidence
vue (source) devDependencies patch 3.5.43 → 3.5.44 age confidence

Release Notes

actions/setup-python

v7.1.0

Compare Source

What's Changed

Enhancements
Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

cel-expr/cel-spec (cel.dev/expr)

v0.25.3

Compare Source

What's Changed

New Contributors

Full Changelog: cel-expr/cel-spec@v0.25.2...v0.25.3

charmbracelet/bubbles (charm.land/bubbles/v2)

v2.2.1

Compare Source

Tiny Monday bugfix

Textarea element had a bug, where you used to be able to go 1 word backwards, even if there was nothing, which resulted in the whole TUI freezing. It was now fixed by @​OxQuasar!

Changelog

Fixed
Docs
Other stuff

The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

v2.2.0

Compare Source

A new Bubble and some new Textarea stuff

There are a couple nice features in today's release. Let's check em out!

If a tree falls in the forest…

At last, the tree Bubble from all star contributor @​dlvhdr’s is here! He built it for DiffNav and graciously contributed to Bubbles. We've been working with Dolev for a long time and were totally stoked when he offerd to contribute.

Select all, ctrl+c, ctrl+v…done!

Our own @​andrinoff added a bunch of awesome stuff to Textarea, including the long awaited text selection. Select, copy, and cut your way into mini text editing.

For more info see the docs.

And special thanks to @​zoriya for adding ctrl+left/right bindings.

xoxo,
Charm! 💌

Changelog

New!
Fixed
Other stuff

The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

googleapis/google-cloud-go (cloud.google.com/go/iam)

v1.15.0: cloudtasks: v1.15.0

v1.15.0 (2026-04-09)

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

v1.47.4

Compare Source

v1.47.3

Compare Source

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/acmpca: v1.37.3
    • Documentation: Documentation updates for AWS Private CA.
  • github.com/aws/aws-sdk-go-v2/service/databasemigrationservice: v1.43.0
    • Feature: Introduces DescribeDataMigrations, CreateDataMigration, ModifyDataMigration, DeleteDataMigration, StartDataMigration, StopDataMigration operations to SDK. Provides FailedDependencyFault error message.
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.182.0
    • Feature: This release adds support for assigning the billing of shared Amazon EC2 On-Demand Capacity Reservations.
  • github.com/aws/aws-sdk-go-v2/service/ecs: v1.47.3
    • Documentation: This is a documentation only release that updates to documentation to let customers know that Amazon Elastic Inference is no longer available.
  • github.com/aws/aws-sdk-go-v2/service/elasticinference: v1.23.3
    • Documentation: Elastic Inference - Documentation update to add service shutdown notice.
  • github.com/aws/aws-sdk-go-v2/service/iotfleetwise: v1.20.0
    • Feature: Refine campaign related API validations
  • github.com/aws/aws-sdk-go-v2/service/neptunegraph: v1.14.0
    • Feature: Support for 16 m-NCU graphs available through account allowlisting
  • github.com/aws/aws-sdk-go-v2/service/outposts: v1.45.0
    • Feature: Adding new "DELIVERED" enum value for Outposts Order status
  • github.com/aws/aws-sdk-go-v2/service/route53resolver: v1.33.0
    • Feature: Route 53 Resolver Forwarding Rules can now include a server name indication (SNI) in the target address for rules that use the DNS-over-HTTPS (DoH) protocol. When a DoH-enabled Outbound Resolver Endpoint forwards a request to a DoH server, it will provide the SNI in the TLS handshake.
  • github.com/aws/aws-sdk-go-v2/service/socialmessaging: v1.0.0
    • Release: New AWS service client module
    • Feature: This release for AWS End User Messaging includes a public SDK, providing a suite of APIs that enable sending WhatsApp messages to end users.

v1.47.2

Compare Source

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/customerprofiles: v1.49.0
    • Feature: The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate.
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.239.0
    • Feature: Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem.
  • github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2: v1.47.2
    • Documentation: This release enables secondary IP addresses for Network Load Balancers.
  • github.com/aws/aws-sdk-go-v2/service/entityresolution: v1.21.0
    • Feature: Add support for creating advanced rule-based matching workflows in AWS Entity Resolution.
  • github.com/aws/aws-sdk-go-v2/service/glue: v1.121.0
    • Feature: Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types.
  • github.com/aws/aws-sdk-go-v2/service/inspector2: v1.40.0
    • Feature: Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource type
  • github.com/aws/aws-sdk-go-v2/service/iot: v1.66.0
    • Feature: This release allows AWS IoT Core users to use their own AWS KMS keys for data protection
  • github.com/aws/aws-sdk-go-v2/service/opensearch: v1.49.0
    • Feature: Granular access control support for NEO-SAML with IAMFederation for AOS data source
  • github.com/aws/aws-sdk-go-v2/service/quicksight: v1.90.0
    • Feature: Added Impala connector support
  • github.com/aws/aws-sdk-go-v2/service/s3control: v1.62.0
    • Feature: Add Tags field to CreateAccessPoint
  • github.com/aws/aws-sdk-go-v2/service/sesv2: v1.49.0
    • Feature: This release introduces support for Multi-tenant management
  • github.com/aws/aws-sdk-go-v2/service/workspacesweb: v1.29.0
    • Feature: Added ability to log session activity on a portal to an S3 bucket.
aws/smithy-go (github.com/aws/smithy-go)

v1.28.6

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.6
    • Bug Fix: Enforce event stream header key value length limit instead of truncating
    • Bug Fix: Retain the value in a list with the zero value when encountering a null entry on a dense list. This matches how legacy code-generated JSON deserializers behaved.

v1.28.5

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.5
    • Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

v1.28.4

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.4
    • Bug Fix: Revert #​698 that fixed JoinPath with trailing slash. This has a side effect on certain S3 API paths in the downstream SDK that need more consideration.

v1.28.3

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.3
    • Bug Fix: Accept either casing of message/Message on modeled JSON error structures in schema-based deserialization, and emit the smithy.api#error trait in generated schemas
    • Bug Fix: Include the underlying error when logging failures to discard or close an HTTP response body

v1.28.2

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.2
    • Bug Fix: Avoid allocating a slice in ValidateEndpointHost by indexing into the hostname instead of using strings.Split.
    • Bug Fix: Fix event stream decode panic on unknown header value type.
    • Bug Fix: Fix schema-serde CBOR decode panic on malformed string/blob length.
    • Bug Fix: JoinPath keeps a trailing slash when the added path is a slash.
dlclark/regexp2 (github.com/dlclark/regexp2/v2)

v2.10.0

Compare Source

v2.9.1

Compare Source

v2.9.0

Compare Source

v2.8.4

Compare Source

v2.8.3

Compare Source

v2.8.2

Compare Source

v2.8.1

Compare Source

v2.8.0

Compare Source

v2.7.2

Compare Source

dustin/go-humanize (github.com/dustin/go-humanize)

v1.1.0

Compare Source

envoyproxy/go-control-plane (github.com/envoyproxy/go-control-plane/envoy)

v1.40.0

Full Changelog: envoy/v1.39.0...envoy/v1.40.0

go-jose/go-jose (github.com/go-jose/go-jose/v4)

v4.1.6

Compare Source

Fixed Security Issues

This release contains a fix for GHSA-mgcc-cww5-fp2q

Breaking Changes

The fix for GHSA-mgcc-cww5-fp2q involves capping the size of the RSA modulus of keys accepted by JWK parsing. This limit is 4096 bits. If you need this to be higher, set MaxRSAModulusBits before performing any JWK parsing.

Changed

Full Changelog: go-jose/go-jose@v4.1.5...v4.1.6

v4.1.5

Compare Source

Fixed security issues

  • cipher/cbc_hmac: don't panic on empty ciphertext (#​292)
  • cipher/cbc_hmac: don't panic on invalid key (#​291)
  • json: limit stack depth (#​290)
  • jwt: reject out-of-range NumericDate values (#​278)
  • Check alg against pubkey curve during verify. (#​293)
  • Reject malformed Ed25519 JWKs (#​250)
  • jws: choose verification key per-signature (#​243)

Breaking Changes

In #​226, we un-exported jose.RandReader. This was used to be able to stub out the randomness function in tests, but is ignored as of Go 1.26 in some APIs, so no longer serves a useful function.

Changed

  • Verify OpaqueSigner's Public() return is public (#​260)
  • jws: skip signature on ErrJWKSKidNotFound (#​248)
  • Handle JWE JSON without protected header (#​240)
  • jws: don't strip internal whitespace before parsing JSON (#​239)
  • jws: fewer calls to OpaqueSigner.Public() (#​224)
  • Return a specific error when parsing empty string (#​216)
  • Reject typed nil at Verify time (#​285)
googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)

v0.3.24

Compare Source

What's Changed

New Contributors

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.23...v0.3.24

v0.3.23

Compare Source

What's Changed

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.22...v0.3.23

googleapis/gax-go (github.com/googleapis/gax-go/v2)

v2.27.0

Compare Source

Features
hashicorp/aws-sdk-go-base (github.com/hashicorp/aws-sdk-go-base/v2)

v2.0.0-beta.76

Compare Source

BUG FIXES

  • Fixes error when logging long request or response lines in payload. (#​1539)
klauspost/compress (github.com/klauspost/compress)

v1.20.3

Compare Source

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.20.1...v1.20.3

v1.20.2

Compare Source

Full Changelog: klauspost/compress@v1.20.1...v1.20.2

klauspost/cpuid (github.com/klauspost/cpuid/v2)

v2.4.1

Compare Source

What's Changed

New Contributors

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added area: dependencies Changes related to dependency files. area: github actions Pull requests that update GitHub Actions code lang: go Pull requests that update Go code. lang: javascript Pull requests that update Javascript code. labels Oct 19, 2026
@renovate

renovate Bot commented Oct 19, 2026 •

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated

Details:

Package Change
google.golang.org/genproto v0.0.0-20260724162435-b2f20204f0df -> v0.0.0-20261012220534-4341edf3f941
google.golang.org/genproto/googleapis/api v0.0.0-20260724162435-b2f20204f0df -> v0.0.0-20261012220534-4341edf3f941
google.golang.org/genproto/googleapis/rpc v0.0.0-20260928230214-8a89bd6388cc -> v0.0.0-20261019180522-ce908d29299b

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from 4e12a37 to 5c2a467 Compare October 24, 2026 17:11
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 5c2a467 to 014bf71 Compare October 24, 2026 21:52

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: dependencies Changes related to dependency files. area: github actions Pull requests that update GitHub Actions code lang: go Pull requests that update Go code. lang: javascript Pull requests that update Javascript code.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants