Repository navigation
fix(deps): update all non-major dependencies - #324
Merged
Merged
Conversation
renovate
Bot
requested review from
Kiran01bm,
aparajon and
eeSeeGee
as code owners
November 9, 2026 01:16
renovate
Bot
requested review from
JashLal,
jayjanssen,
jemiahw and
morgo
as code owners
November 9, 2026 01:16
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by Details:
|
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
21 times, most recently
from
November 10, 2026 21:09
6789e5f to
bfb50dd
Compare
This was referenced Nov 10, 2026
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
November 10, 2026 22:55
0cc64c2 to
6cbce9e
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
November 11, 2026 00:26
6cbce9e to
f505eff
Compare
Kiran01bm
approved these changes
Nov 11, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
v3.0.3→v3.0.4v1.15.0→v1.17.0v1.54.2→v1.56.1v0.4.0→v0.6.2v2.12.2→v2.15.0v2.8.2→v2.20.0v6.3.0→v6.4.0Release Notes
dorny/paths-filter
v3.0.4Compare Source
alecthomas/kong (github.com/alecthomas/kong)
v1.17.0Compare Source
v1.16.1Compare Source
v1.16.0Compare Source
moby/moby (github.com/moby/moby/api)
v1.56.11.56.1
Changelog
v1.56.01.56.0
Changelog
GET /containers/jsonnow supports anannotationfilter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existinglabelfilter. moby/moby#53538POST /containers/createnow supportsHostConfig.Umaskto set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463plugin.Privilegessorting methods in favor ofslices.SortFunc. moby/moby#53511namesfilter forGET /configs. moby/moby#53447v1.55.01.55.0
Changelog
POST /containers/{id}/updatenow supports per-device blkio resource settingss. moby/moby#52651GET /images/{name}/attestationsendpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-instatementquery parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636golangci/golangci-lint
v2.15.0Compare Source
Released on 2026-10-16
errcheck: from 1.20.0 to 1.30.0exhaustive: from 0.13.0 to 0.15.0 (gocognit: from 1.2.1 to 1.3.0golines: from 0.15.0 to 0.16.0govet-modernize: from 0.50.0 to 0.52.0loggercheck: from 0.12.0 to 0.13.0predeclared: from 0.2.2 to 0.3.0wrapcheck: from 2.12.0 to 2.13.0bidichk: from 0.3.3 to 0.3.4canonicalheader: froma25c71ctoe18e5c5gofumpt: improve deprecation logsgosec: improve concurrency default valueiface: from 1.5.1 to 1.5.3paralleltest: from 1.0.15 to 1.0.16revive: from 1.17.0 to 1.17.1revive: the rulescontext-keys-type,errorf,modifies-value-receiver,range-val-address,string-of-int,time-equal,time-naming,unexported-return,unhandled-error,var-declarationare working (less randomly).rowserrcheck: fromc5f79b8toe0740d5staticcheck: from 0.8.1 to 0.8.2revive)exhaustivelinter:explicit-exhaustive-switchandexplicit-exhaustive-maphave been replaced byexplicit-exhaustive.checkthe valuemaphas been replaced bymapliteral.ignore-enum-members(string) has been replaced byignore-constants(slice).ignore-enum-types(string) has been replaced byignore-types(slice).v2.14.0Compare Source
Released on 2026-09-24
bodyclose: from73d1f95to857993a(new directivehandled)exhaustive: from 0.12.0 to 0.13.0exhaustruct_v5: from 5.0.3 to 5.2.0 (new option:allow-empty-blank-assignments)go-check-sumtype: from 0.3.1 toae6904dgocritic: from 0.14.4 to 0.15.0gofumpt: from 0.11.0 to 0.12.0gomoddirectives: from 0.9.0 to 0.10.0gosec: from 2.28.0 to 2.29.0 (re-enableG407)govet-modernize: from 0.49.0 to 0.50.0loggercheck: from 0.11.0 to 0.12.0revive: from 1.15.0 to 1.17.0 (new rules:marshal-receiver,multiline-if-init,use-slices-concat)tagliatelle: from 0.7.2 to 0.8.0fatcontext: from 0.10.0 to 0.10.1flock: from 0.13.0 to 0.13.1godoclint: from 0.11.2 to 0.11.4protogetter: from 0.3.21 to 1.0.1recvcheck: from 0.3.0 to 0.3.1tagalign: from 1.4.3 to 1.4.4v2.13.2Compare Source
Released on 2026-08-28
iface: from 1.5.0 to 1.5.1staticcheck: from 0.8.0 to 0.8.1unparam: from3f964bcto2fa3d84canonicalheader: from v1.1.2 to a temporary forkv2.13.1Compare Source
Released on 2026-08-20
ginkgolinter: from 0.23.1 to 0.24.0gofmt: fromd62b90etoe84e050staticcheck: from 0.8.0-rc.1 to 0.8.0wsl_v5: from 5.8.0 to 5.9.0v2.13.0Compare Source
Released on 2026-08-19
dupword: from 0.1.7 to 0.1.8 (new optionskip-raw-strings)errcheck: from 1.10.0 to 1.20.0exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)exhaustruct: deprecated and replaced byexhaustruct_v5fatcontext: from 0.9.0 to 0.10.0 (new options:check-loops,check-function-literals)goconst: from 1.10.0 to 1.11.0 (new options:ignore-map-keys,exclude-types)gofumpt: from 0.9.2 to 0.11.0 (new options:extra.group-params,extra.clothe-returns,extra.balance-calls)gomoddirectives: from 0.8.0 to 0.9.0 (new option:replace-allow-all)gosec: from 2.26.1 to 2.27.1govet-modernize: from 0.44.0 to 0.49.0 (fmtappendfis removed. New analyzersatomictypes,embedlit,errorsastype,importcomment,reflecttypeassert,slicesclip, andslicesbackward.waitgroupis renamedwaitgroupgo)iface: from 1.4.3 to 1.5.0 (new analyzer:unusedmethod)noinlineerr: from 1.0.5 to 1.0.6nonamedreturns: from 1.0.6 to 1.0.8 (new option:allow-unused-named-returns)recvcheck: from 0.2.0 to 0.3.0 (new default exclusions)unparam: from5beb8c8to3f964bcclickhouse-go-linter: from 1.2.0 to 1.2.1errname: from 1.1.1 to 1.1.2exhaustruct_v5: from 5.0.2 to 5.0.3funcorder: add missingFunctionfieldginkgolinter: from 0.23.0 to 0.23.1gocheckcompilerdirectives: from 1.3.0 to 1.4.0gocritic: from 0.14.3 to 0.14.4gomoddirectives: add missingIgnoreForbiddenfieldiface: from 1.4.2 to 1.4.3mirror: from 1.3.0 to 1.3.3nilnil: from 1.1.1 to 1.1.2protogetter: from 0.3.20 to 0.3.21goreleaser/goreleaser
v2.20.0Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.20.
Security
GoReleaser v2.20.0 fixes an issue that could write inline publishing SSH private keys in cleartext to
dist/artifacts.json. Upgrade to v2.20.0 and revoke and replace any keys exposed through shared or uploaded release metadata.See GHSA-9422-8p9m-393x for details.
Changelog
New Features
e1176e6: feat(cask): renderzap :not_requiredwhen no zap directives are set (#7253) (@SimonMiaou)afd8f84: feat(gitlab): add asset type selection (#7255) (@mavogel)b8f79e0: feat(ko): allow templates in platforms (#7233) (@mrueg and @caarlos0)2e260e4: feat(winget): update manifest schema to latest (1.28.0) (#7242) (@abemedia)4a1a1ae: feat: allow skipping the changelog with --skip=changelog (#7234) (@mrueg and @caarlos0)Bug fixes
24ec0fd: fix(bluesky): do not add a link facet when there is no release URL (#7262) (@10kartik)bfa11d9: fix(nodedist): handle prerelease versions in generation (#7263) (@caarlos0)3d5c3a2: fix(tmpl): escape backslashes in mdv2escape (#7261) (@10kartik)e39e2fe: refactor: move marshaljson methods to right place (@caarlos0)Documentation updates
53e5668: docs: add --snapshot to quick start single-target builds (#7232) (@dcadolph)3467d0f: docs: github app (#7271) (@caarlos0)81042d3: docs: update Pro page copy (#7270) (@caarlos0)2d9b4c9: docs: v2.19 announcement and docs (@caarlos0)Other work
6ac2967: Merge commit from fork (@Divsonar and @caarlos0)94bc193: chore: auto-update generated files (#7231) (@goreleaserbot)538a99e: chore: auto-update generated files (#7254) (@goreleaserbot)6e4f864: chore: auto-update generated files (#7264) (@goreleaserbot)9b610a1: chore: auto-update generated files (#7266) (@goreleaserbot)27f55a0: chore: lint (@caarlos0)Full Changelog: goreleaser/goreleaser@v2.19.0...v2.20.0
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them?
You can sponsor, get a Pro License or contribute with code.
Where to go next?
v2.19.0Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.19.
Changelog
New Features
35f2281: feat(archive): configure zstd compression level and window size (#7206) (@caarlos0)4ebadf5: feat(cask): add hooks install_steps, deprecate raw Ruby hooks (#6873) (@caarlos0)f1e16bf: feat(ko): support linux_capabilities (#7225) (@mrueg and @caarlos0)9926cef: feat(nix): drop the nix-hash dependency (#6824) (@caarlos0)6386def: feat: graduate stable features out of experimental (#7126) (@caarlos0)Security updates
6ade066: sec(deps): bump golang.org/x/ (#7201) (@caarlos0)b690fd8: sec: update to Go 1.27.3 (#7220) (@shaanmajid)Bug fixes
09301ea: fix(archive): propagate tar read errors in Copy (#7194) (@Lzcwbcgs)68e5e34: fix(cask): emit brew-valid casks when builds.ignore drops os/arch combos (#7218) (@Mihir-Rabari)e6c4afc: fix(deps): bump moby/sys/user to v0.4.1 (#7202) (@caarlos0)713c236: fix(docker): select baseline CPU variants for Docker v2 platforms (#7189) (@zachary-satterly and @caarlos0)26ffaba: fix(docker/v2): expand global ARG references when resolving the base image (#7203) (@LemonCondor and @caarlos0)1b7b6a4: fix(git): redact credentials from http remote URLs too (#7191) (@Mihir-Rabari)2d708ed: fix(ko): use actual ko version in SPDX SBOM creator (#7226) (@mrueg)2279d65: fix: share HTTP client per upload config (#6919) (#7212) (@manish-9245 and @caarlos0)0c3be49: fix: write cask completion stanzas in Homebrew's order (#7198) (@mustafaakcakaya)Documentation updates
d84a697: docs: fix broken cosign link in rust-zig blog post (#7228) (@jvS0uzx)Other work
ccaac66: chore: auto-update generated files (#7190) (@goreleaserbot)c96c314: chore: auto-update generated files (#7200) (@goreleaserbot)4a71e1e: chore: auto-update generated files (#7204) (@goreleaserbot)b58a061: chore: auto-update generated files (#7223) (@goreleaserbot)a9fb415: chore: auto-update generated files (#7230) (@goreleaserbot)Full Changelog: goreleaser/goreleaser@v2.18.3...v2.19.0
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them?
You can sponsor, get a Pro License or contribute with code.
Where to go next?
v2.18.3Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.18.
Changelog
Bug fixes
6f22aef: fix(announce): let webhook headers override the default headers (#7174) (@NitinKumar004)16edc75: fix(aur,aursources): reject duplicate package names (#7171) (@hktitof)d396fca: fix(brew,cask): sort dependencies case-insensitively (#7186) (@caarlos0)b091543: fix(ci): restore linux build (#7175) (@caarlos0)1942d44: fix(docker): preserve buildx metadata key in lint checks (#7187) (@caarlos0)1a1adec: fix(docs): point nightly links to the current nightly release (#7155) (@caarlos0)01e1d6f: fix(git): handle remote URLs with a trailing slash (#7170) (@00200200)ede6721: fix(github): explain upload redirects caused by a moved repository (#7179) (@MrBeldum)3205096: fix: dockers_v2 reports the image config digest (#7181) (@Zak4sad)Other work
048a586: chore: auto-update generated files (#7152) (@goreleaserbot)827aa03: chore: auto-update generated files (#7159) (@goreleaserbot)ff8de3d: chore: auto-update generated files (#7165) (@goreleaserbot)27ef66d: chore: auto-update generated files (#7166) (@goreleaserbot)a9d676f: chore: auto-update generated files (#7172) (@goreleaserbot)38962f0: chore: auto-update generated files (#7183) (@goreleaserbot)Full Changelog: goreleaser/goreleaser@v2.18.2...v2.18.3
Helping out
This release is only possible thanks to all the support of some awesome people!
Want to be one of them?
You can sponsor, get a Pro License or contribute with code.
Where to go next?
v2.18.2Compare Source
Announcement
Read the official announcement: Announcing GoReleaser v2.18.
Changelog
Security updates
8ec05d6: sec(builds): redact secrets from builder subprocess output (@caarlos0)Bug fixes
f285d13: fix(archive,sourcearchive,gio): backups, ZIP metadata, mtime and CPU variants (#7089) (@caarlos0)d4e9f25: fix(aur): several PKGBUILD and SRCINFO generation bugs (#7100) (@caarlos0)b428c4c: fix(aur): tell users how to fix a duplicate architecture (#7141) (@caarlos0)2e991d2: fix(blob): KMS encryption limits and bucket lifetime on error (#7101) (@caarlos0)7ba40dc: fix(blob): stream unencrypted uploads instead of buffering files (#7134) (@raviayadav and @caarlos0)924f5eb: fix(brew,cask): formula escaping, token matching and binary stanzas (#7086) (@caarlos0)7c77e11: fix(build): resolve dependent hook environment entries and hook dir templates (#7078) (@caarlos0)d22c274: fix(builder/go): give a single ellipsis main an exact output path (#7114) (@caarlos0)be63647: fix(builder/go): keep override env entries in a stable order (#7112) (@caarlos0)4a635ab: fix(builder/go): register the generated C header after compiling (#7113) (@caarlos0)34619ef: fix(builder/node,builder/bun): per-target SEA config, prebuild templates and target aliases (#7088) (@caarlos0)c87158e: fix(builder/rust,builder/zig): toolchain context and wrapped binary copying (#7080) (@caarlos0)566bc69: fix(builder/uv,builder/poetry): match built artifact filenames (#7084) (@caarlos0)13ebd4d: fix(builders,partial): canonical artifact architectures and target matching (#7083) (@caarlos0)e1d9f7f: fix(cmd): auto-snapshot ordering, schema error reporting and --output selection (#7103) (@caarlos0)591a0b8: fix(cmd): correct check counting and init gitignore and failure handling (#7081) (@caarlos0)4f4febf: fix(docker): a bare platform means the baseline CPU variant (#7148) (@caarlos0)000ae78: fix(docker): keep arm64 minor variants above the v8 baseline (#7149) (@caarlos0)d2f775e: fix(docker): quote entrypoint paths and forward arguments verbatim (#7073) (@caarlos0)f2b3611: fix(docker): v1 wheel build IDs, push flags and empty manifests (#7077) (@caarlos0)ea7bc7a: fix(docker): v2 build context, annotations and ARM64 handling (#7095) (@caarlos0)a1f860f: fix(env,log): redact secrets across writes and honour force_token (#7104) (@caarlos0)0d4fe16: fix(exec,publish): cancellation, empty commands, SRPM artifacts and upload URLs (#7093) (@caarlos0)eba5886: fix(flatpak,docker): quote install paths and respect project environment (#7085) (@caarlos0)a95c9a0: fix(git): force column.ui=never so tag output is not columnized (#7127) (@KR-Ravindra)2d7ecb2: fix(git): tag not in the local repository is not an error (#7124) (@caarlos0)aebed26: fix(git,changelog): metadata quoting, dirty detection, key cleanup and mailmap (#7102) (@caarlos0)dce409c: fix(gitea,gitlab): pagination, subpath URLs, default branch, links and cancellation (#7097) (@caarlos0)0348bfb: fix(github): UTF-8 safe truncation, draft reuse, asset replacement and token override (#7094) (@caarlos0)0087e68: fix(github): honor short Retry-After delays (#7110) (@0jaspahwa)f45f629: fix(gomod): scope proxying to Go builds and validate the right module (#7096) (@caarlos0)cf292ef: fix(healthcheck): handle blank and space-containing signer commands (#7076) (@caarlos0)edd3fd0: fix(healthcheck): panic on dependency commands that are only shell syntax (#7106) (@caarlos0)43c0c94: fix(ko): repository image names, digest ordering and signing references (#7079) (@caarlos0)6ceb354: fix(mcp): support package transport URLs (#7090) (@caarlos0)acbfcf5: fix(nfpm): per-format Lintian overrides and colliding filenames (#7099) (@caarlos0)752baca: fix(nix): formatter output, string escaping and post_install (#7082) (@caarlos0)05ee35f: fix(nix): template the description only once (#7146) (@caarlos0)a3a8903](https://redirect.github.com/goreleaser/goreleaser/commit/a3a89033cc7f71b19919244ee21bb2bConfiguration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.