Skip to content

fix(deps): update go deps - #675

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-deps
Open

fix(deps): update go deps#675
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-deps

Conversation

@renovate

@renovate renovate Bot commented Sep 8, 2025

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/charmbracelet/x/ansi v0.11.7v0.11.8 age confidence
github.com/go-task/task/v3 v3.51.1v3.53.1 age confidence
github.com/google/go-containerregistry v0.21.7v0.21.9 age confidence
github.com/klauspost/compress v1.19.1v1.19.2 age confidence
github.com/mattn/go-isatty v0.0.22v0.0.24 age confidence
github.com/moby/moby/client v0.4.1v0.5.1 age confidence
github.com/stretchr/testify v1.12.0v1.12.1 age confidence
github.com/urfave/cli/v3 v3.9.0v3.11.0 age confidence
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996afv1.36.12 age confidence
k8s.io/apimachinery v0.36.1v0.36.3 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

go-task/task (github.com/go-task/task/v3)

v3.53.1

Compare Source

🚀 Features
  • Remote Taskfiles are now generally available! This has been an
    experimental feature for 3 years, but is now enabled by default. Massive
    thanks to all those that contributed and gave feedback (too many to list
    here). We've also given the
    Remote Taskfiles documentation a
    bit of a polish (#​1317, #​2906 by @​pd93).
  • Added a per-command timeout that terminates a command once it exceeds the
    given duration (Go duration syntax). It covers shell commands, task calls,
    deferred commands, deps and the if condition, obeys ignore_error, and
    reports exit code 124. Callers that join a run: once or when_changed
    task already running now honor their own timeout, and inherit that task's
    failure instead of being told it succeeded (#​1569, #​2898 by @​vmaerten).
  • Considerably improve performance of fingerprinting on large repositories
    (monorepos). Fingerprinting is up to 86% faster and make up to 70% fewer
    memory allocations on the more advanced scenarios. Benchmarks were added as
    well. We're basically skipping work when not needed. (#​2853, #​2883 by
    @​Napolitain, #​2884 by @​Napolitain).
  • Further improved fingerprinting performance on large repositories: hashing
    source files now reuses a single buffer, reducing memory allocations by ~98%
    and wall-clock time by ~7% (#​2925 by @​vmaerten).
  • includes.excludes can now exclude a whole namespace: append :* to the
    namespace name, e.g. excludes: ['debug:*']. Bare entries still match a
    single task name exactly (#​2300, #​2959 by @​xmxxc).
  • Added support for enum.ref in --interactive prompts. Required vars using
    enum.ref now show the selection list like static enums, instead of falling
    back to free-form input (#​2817 by @​vmaerten).
  • Added Nushell completions, available via task --completion nu. They complete
    task names and aliases, every flag with its description, and the values of
    --completion, --output and --sort (#​2966 by @​vmaerten).
  • Added a verbose log line for failed tasks. In --verbose mode, a task whose
    command exits non-zero now reports task: "<name>" failed: <error> instead of
    stopping without a trace (#​2240 by @​Drino).
🐛 Fixes
  • Fixed a pinned checksum: not being verified when a remote Taskfile came from
    the cache (#​2980 by @​vmaerten).
  • Fixed the fingerprint variable ({{.CHECKSUM}}/{{.TIMESTAMP}}) ignoring a
    method: set at the Taskfile level: the variable now follows the same method
    resolution as the up-to-date check. Only the variable matching the effective
    method is injected, so a task inheriting a Taskfile-level method: timestamp
    gets {{.TIMESTAMP}} and no longer a {{.CHECKSUM}} (which now renders as an
    empty string), and neither variable is injected when the effective method is
    none (#​2924 by @​vmaerten).
  • Fixed ref: in for: matrix: and enum: only accepting literal lists. Refs
    computed with template functions like keys or splitList no longer fail
    with "must resolve to a list" (#​2544, #​2956 by @​no-hup).
  • Fixed pressing Esc at an interactive variable prompt not cancelling the run
    (#​2942 by @​anilnatha).
  • Fixed joinUrl collapsing the // in a URL scheme (e.g. producing
    http:/localhost instead of http://localhost) (#​2915 by @​vsaraikin).
  • Fixed the JSON schema rejecting ignore_error on a command inside a for
    loop. Editors no longer flag a Taskfile that Task runs perfectly fine (#​2044
    by @​gokeefe-atb).
  • Fixed the JSON schema rejecting more keys the Taskfile parser accepts:
    ignore_error on a task: call, and if, set and shopt on a command
    inside a for loop (#​2967 by @​vmaerten).
📚 Documentation & Website
  • Updated taskfile versions doc to mention when version checks were introduced
    (#​2184 by @​jubr).
  • Load the sidebar data and titles/excerpts from the blog post markdown document
    and its frontmatter on the website (#​2981 by @​pd93).

v3.53.0

Compare Source

  • Failed due to an issue with our release process.

v3.52.0

Compare Source

  • Fixed --interactive prompts for required vars sometimes appearing in a random
    order. Prompts now follow the order the vars are declared in the Taskfile.
    (#​2871 by @​caproven)
  • Fixed Fish completions not being picked up correctly by installing them to
    Fish's vendor_completions.d directory instead of completions (#​2850, #​2859
    by @​Legimity).
  • PowerShell completions now work with aliases of the task command, not just
    the task binary itself (#​2852 by @​kojiishi).
  • Fixed task and namespace aliases not being completed by the Zsh completion. A
    show-aliases zstyle can turn this off (#​2865, #​2864 by @​vmaerten).
  • Fixed task names containing certain characters (e.g. \, _, ^) leaking
    into checksum/timestamp filenames, breaking sources:/generates: up-to-date
    detection (#​2886 by @​s3onghyun).
  • Fixed for: matrix: loops using ref: rows producing wrong values when the
    same task was run concurrently (e.g. by parallel deps) with different vars
    (#​2890, #​2894 by @​amitmishra11).
  • Added a secret: true flag for variables that masks their value in logs,
    task --summary, and command output (#​2514 by @​vmaerten).
  • Added the use_gitignore setting (global or per-task) to skip files matched
    by your .gitignore when fingerprinting sources/generates and when
    watching (#​2773 by @​vmaerten).
  • Added support for configuring output flags (--output,
    --output-group-begin, --output-group-end, --output-group-error-only) via
    the TASK_OUTPUT* environment variables (#​2873 by @​liiight).
  • Added a --temp-dir flag (with TASK_TEMP_DIR env var and temp-dir taskrc
    config) to customise the directory where Task stores temporary files such as
    checksums. Relative paths are resolved against the root Taskfile (#​2891 by
    @​kjasn).
  • Defined environment variable behavior for remote taskfiles (#​2267, #​2847 by
    @​vmaerten).
  • Added support for remote Taskfiles hosted on Azure DevOps, whose git URLs use
    a /_git/ path segment rather than a .git suffix (#​2904 by @​pd93).
  • Re-added the example remote taskfile at
    taskfile.dev/Taskfile.yml (#​2905 by
    @​pd93).
  • Fixed malformed includes: entries (missing taskfile/dir) reporting a
    misleading "include cycle detected" error instead of a clear configuration
    error (#​1881, #​2892 by @​Lewin671).
google/go-containerregistry (github.com/google/go-containerregistry)

v0.21.9

Compare Source

What's Changed

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

Compare Source

The artifacts attached to this release are missing SLSA provenance, see #​2390.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

klauspost/compress (github.com/klauspost/compress)

v1.19.2

Compare Source

What's Changed
New Contributors

Full Changelog: klauspost/compress@v1.19.1...v1.19.2

mattn/go-isatty (github.com/mattn/go-isatty)

v0.0.24

Compare Source

v0.0.23

Compare Source

moby/moby (github.com/moby/moby/client)

v0.5.1

Compare Source

v0.5.0

Compare Source

stretchr/testify (github.com/stretchr/testify)

v1.12.1

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed
New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed
New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

urfave/cli (github.com/urfave/cli/v3)

v3.11.0

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.10.1...v3.11.0

v3.10.1

Compare Source

What's Changed
New Contributors

Full Changelog: urfave/cli@v3.10.0...v3.10.1

v3.10.0

Compare Source

What's Changed

Full Changelog: urfave/cli@v3.9.1...v3.10.0

v3.9.1

Compare Source

What's Changed

Full Changelog: urfave/cli@v3.9.0...v3.9.1

kubernetes/apimachinery (k8s.io/apimachinery)

v0.36.3

Compare Source

v0.36.2

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Sep 8, 2025

Copy link
Copy Markdown
Contributor Author

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated

Details:

Package Change
github.com/alecthomas/chroma/v2 v2.19.0 -> v2.20.0
github.com/charmbracelet/bubbletea v1.3.6 -> v1.3.10
github.com/charmbracelet/x/ansi v0.9.3 -> v0.10.1
github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0
github.com/go-git/go-git/v5 v5.16.2 -> v5.16.3

@renovate
renovate Bot force-pushed the renovate/go-deps branch 5 times, most recently from cfe5463 to 1d00451 Compare September 15, 2025 05:46
@renovate
renovate Bot force-pushed the renovate/go-deps branch 3 times, most recently from 3a3cde4 to 454732b Compare September 22, 2025 09:47
@renovate
renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 7414232 to 9d84f67 Compare September 29, 2025 09:59
@renovate
renovate Bot force-pushed the renovate/go-deps branch 9 times, most recently from d203676 to 2a00a77 Compare October 5, 2025 16:42
@renovate
renovate Bot force-pushed the renovate/go-deps branch 5 times, most recently from 73f7ae5 to a28c63b Compare October 14, 2025 11:07
@renovate
renovate Bot force-pushed the renovate/go-deps branch 3 times, most recently from a2927db to 2a88f28 Compare October 21, 2025 19:12
@renovate
renovate Bot force-pushed the renovate/go-deps branch 3 times, most recently from 6b5bc0a to 76c4580 Compare December 15, 2025 02:34
@renovate
renovate Bot force-pushed the renovate/go-deps branch 7 times, most recently from b02c775 to 48f2fa8 Compare December 25, 2025 02:08
@renovate
renovate Bot force-pushed the renovate/go-deps branch from 48f2fa8 to 7b45b9d Compare January 17, 2026 06:25
@coderabbitai

coderabbitai Bot commented Jan 17, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate
renovate Bot force-pushed the renovate/go-deps branch 6 times, most recently from 350aeb8 to 3af717d Compare January 23, 2026 14:40
@renovate
renovate Bot force-pushed the renovate/go-deps branch 2 times, most recently from 34294f2 to f28d9eb Compare January 26, 2026 14:00
@renovate
renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 5e18c33 to 1c89754 Compare February 9, 2026 10:04
@renovate
renovate Bot force-pushed the renovate/go-deps branch 4 times, most recently from 7feeab4 to 8ec32e9 Compare February 16, 2026 13:11
@renovate

renovate Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 63 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=2 weeks

Details:

Package Change
charm.land/bubbles/v2 v2.1.0 -> v2.1.1
charm.land/bubbletea/v2 v2.0.6 -> v2.0.8
charm.land/lipgloss/v2 v2.0.3 -> v2.0.6
cloud.google.com/go/auth v0.20.0 -> v0.23.1
cloud.google.com/go/iam v1.8.0 -> v1.13.0
cloud.google.com/go/monitoring v1.26.0 -> v1.30.0
cloud.google.com/go/storage v1.62.0 -> v1.64.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.33.0 -> v1.35.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.56.0 -> v0.59.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.56.0 -> v0.59.0
github.com/alecthomas/chroma/v2 v2.23.1 -> v2.27.0
github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.4
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14 -> v1.7.16
github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.35
github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.34
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.35
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.35
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.35
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.36
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.15
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.24 -> v1.9.28
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.35
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.32 -> v1.19.36
github.com/aws/aws-sdk-go-v2/service/s3 v1.106.0 -> v1.106.5
github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.4
github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.4
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.4
github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.4
github.com/aws/smithy-go v1.27.4 -> v1.27.6
github.com/charmbracelet/ultraviolet v0.0.0-20260416155717-489999b90468 -> v0.0.0-20260811164956-006e29f97886
github.com/elliotchance/orderedmap/v3 v3.1.0 -> v3.1.1
github.com/envoyproxy/go-control-plane/envoy v1.37.0 -> v1.39.0
github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
github.com/googleapis/enterprise-certificate-proxy v0.3.14 -> v0.3.20
github.com/googleapis/gax-go/v2 v2.21.0 -> v2.23.0
github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.72 -> v2.0.0-beta.74
github.com/hashicorp/go-getter v1.8.6 -> v1.8.8
github.com/klauspost/cpuid/v2 v2.3.0 -> v2.4.0
github.com/lucasb-eyer/go-colorful v1.4.0 -> v1.4.1
github.com/mattn/go-colorable v0.1.14 -> v0.1.15
github.com/mattn/go-runewidth v0.0.23 -> v0.0.27
github.com/moby/moby/api v1.54.2 -> v1.55.0
github.com/pierrec/lz4/v4 v4.1.26 -> v4.1.27
github.com/spiffe/go-spiffe/v2 v2.7.0 -> v2.8.1
github.com/ulikunitz/xz v0.5.15 -> v0.5.16
go.opentelemetry.io/contrib/detectors/gcp v1.44.0 -> v1.45.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
go.opentelemetry.io/otel v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
golang.org/x/crypto v0.54.0 -> v0.55.0
golang.org/x/exp v0.0.0-20260603202125-055de637280b -> v0.0.0-20260718201538-764159d718ef
golang.org/x/net v0.57.0 -> v0.58.0
golang.org/x/text v0.40.0 -> v0.41.0
google.golang.org/api v0.275.0 -> v0.293.0
google.golang.org/genproto v0.0.0-20260406210006-6f92a3bedf2d -> v0.0.0-20260724162435-b2f20204f0df
google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa -> v0.0.0-20260724162435-b2f20204f0df
google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa -> v0.0.0-20260807164820-c8921c73eeea
mvdan.cc/sh/moreinterp v0.0.0-20260120230322-19def062a997 -> v0.0.0-20260817215856-d6550df7ed8d
mvdan.cc/sh/v3 v3.13.2-0.20260510185049-f5c6e2779117 -> v3.13.2-0.20260817215856-d6550df7ed8d

Generated by renovateBot
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants