Skip to content

feat: bump the direct group across 1 directory with 2 updates - #17

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/direct-70d6cbf519
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/direct-70d6cbf519

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the direct group with 2 updates in the / directory: github.com/hairyhenderson/gomplate/v5 and github.com/werf/nelm.

Updates github.com/hairyhenderson/gomplate/v5 from 5.2.0 to 5.3.1

Release notes

Sourced from github.com/hairyhenderson/gomplate/v5's releases.

v5.3.1

5.3.1 (2026-10-21)

Bug Fixes

  • coll: make Uniq O(n) for scalar values (#2872) (eae9ddc)
  • datafs: make path lookups faster by not looking up the working directory on Unix (#2880) (445fa5f)
  • datasources: don't mix up cached reads of different datasources (#2873) (a053aa2)
  • gomod: update module github.com/hairyhenderson/go-fsimpl to v0.5.0 (#2889) (3027c8b)
  • iohelpers: don't rewrite unchanged output files larger than 4KiB (#2882) (aaad933)
  • parsers: make data.ToJSON faster by reusing the JSON codec handle (#2883) (a1c8b9c)
  • random: make StringRE much faster by caching matched characters per pattern (#2874) (aa803b1)
  • random: return an error when no characters match the pattern (#2885) (434e132)
  • render: make rendering faster by reading nested templates only once (#2876) (ffb82c2)
  • strings: don't panic on empty input in SnakeCase, KebabCase, and CamelCase (#2884) (4967736)
  • template: make --input-dir faster by walking the directory once when possible (#2881) (fe296d8)

Documentation

  • release-check: bump latest known release to v5.3.0 (#2863) (07c4be0)

v5.3.0

5.3.0 (2026-10-17)

Features

  • net: add net.GenerateMAC function (#2791) (7934e59)
  • test: add test.JSONSchema function to validate values against a JSON Schema (#2839) (352403b)
  • uuid: add uuid.V7 for time-ordered UUID generation (#2769) (74761f8)

Bug Fixes

  • ci: set LAB_CORE_HOST/LAB_CORE_TOKEN for lab mr create in aports deploy (#2719) (a7dd869)
  • config: Merge missing fields in MergeFrom (#2721) (2d7fd56)
  • deps: update aws-sdk-go-v2 monorepo (#2723) (737b66b)
  • deps: update aws-sdk-go-v2 monorepo (#2737) (566cb7d)
  • deps: update aws-sdk-go-v2 monorepo (#2777) (59210bb)
  • deps: update aws-sdk-go-v2 monorepo (#2794) (15bf9a4)
  • deps: update go4.org/netipx digest to 3075585 (#2787) (428142d)
  • deps: update module cuelang.org/go to v0.17.1 (#2730) (a5a97fa)
  • deps: update module github.com/hairyhenderson/go-fsimpl to v0.4.5 (#2750) (cb010e8)
  • deps: update module github.com/hairyhenderson/go-fsimpl to v0.4.6 (#2772) (fc29616)
  • deps: update module github.com/hairyhenderson/go-fsimpl to v0.4.7 (#2824) (0f09f60)
  • deps: update module github.com/santhosh-tekuri/jsonschema/v6 to v6.0.3 (#2756) (7f8f788)
  • deps: update module github.com/shopify/ejson to v1.5.5 (#2758) (05375c2)
  • deps: update module github.com/stretchr/testify to v1.12.1 (#2775) (379db17)

... (truncated)

Changelog

Sourced from github.com/hairyhenderson/gomplate/v5's changelog.

5.3.1 (2026-10-21)

Bug Fixes

  • coll: make Uniq O(n) for scalar values (#2872) (eae9ddc)
  • datafs: make path lookups faster by not looking up the working directory on Unix (#2880) (445fa5f)
  • datasources: don't mix up cached reads of different datasources (#2873) (a053aa2)
  • gomod: update module github.com/hairyhenderson/go-fsimpl to v0.5.0 (#2889) (3027c8b)
  • iohelpers: don't rewrite unchanged output files larger than 4KiB (#2882) (aaad933)
  • parsers: make data.ToJSON faster by reusing the JSON codec handle (#2883) (a1c8b9c)
  • random: make StringRE much faster by caching matched characters per pattern (#2874) (aa803b1)
  • random: return an error when no characters match the pattern (#2885) (434e132)
  • render: make rendering faster by reading nested templates only once (#2876) (ffb82c2)
  • strings: don't panic on empty input in SnakeCase, KebabCase, and CamelCase (#2884) (4967736)
  • template: make --input-dir faster by walking the directory once when possible (#2881) (fe296d8)

Documentation

  • release-check: bump latest known release to v5.3.0 (#2863) (07c4be0)

5.3.0 (2026-10-17)

Features

  • net: add net.GenerateMAC function (#2791) (7934e59)
  • test: add test.JSONSchema function to validate values against a JSON Schema (#2839) (352403b)
  • uuid: add uuid.V7 for time-ordered UUID generation (#2769) (74761f8)

Bug Fixes

  • ci: set LAB_CORE_HOST/LAB_CORE_TOKEN for lab mr create in aports deploy (#2719) (a7dd869)
  • config: Merge missing fields in MergeFrom (#2721) (2d7fd56)
  • deps: update aws-sdk-go-v2 monorepo (#2723) (737b66b)
  • deps: update aws-sdk-go-v2 monorepo (#2737) (566cb7d)
  • deps: update aws-sdk-go-v2 monorepo (#2777) (59210bb)
  • deps: update aws-sdk-go-v2 monorepo (#2794) (15bf9a4)
  • deps: update go4.org/netipx digest to 3075585 (#2787) (428142d)
  • deps: update module cuelang.org/go to v0.17.1 (#2730) (a5a97fa)
  • deps: update module github.com/hairyhenderson/go-fsimpl to v0.4.5 (#2750) (cb010e8)
  • deps: update module github.com/hairyhenderson/go-fsimpl to v0.4.6 (#2772) (fc29616)
  • deps: update module github.com/hairyhenderson/go-fsimpl to v0.4.7 (#2824) (0f09f60)
  • deps: update module github.com/santhosh-tekuri/jsonschema/v6 to v6.0.3 (#2756) (7f8f788)
  • deps: update module github.com/shopify/ejson to v1.5.5 (#2758) (05375c2)
  • deps: update module github.com/stretchr/testify to v1.12.1 (#2775) (379db17)
  • deps: update module github.com/ugorji/go/codec to v1.3.2 (#2754) (42622a3)
  • deps: update module golang.org/x/crypto to v0.55.0 (#2766) (983de72)

... (truncated)

Commits
  • 6f33b7a chore(main): release 5.3.1 (#2864)
  • 1e41796 chore(github-actions): update ghcr.io/hairyhenderson/gomplate-ci-build docker...
  • 3027c8b fix(gomod): update module github.com/hairyhenderson/go-fsimpl to v0.5.0 (#2889)
  • d3a2c3f chore(test): accept bare AWS endpoint paths in Vault integration tests (#2888)
  • 434e132 fix(random): return an error when no characters match the pattern (#2885)
  • 4967736 fix(strings): don't panic on empty input in SnakeCase, KebabCase, and CamelCa...
  • 3307689 chore(gomod): run go mod tidy (#2886)
  • a1c8b9c fix(parsers): make data.ToJSON faster by reusing the JSON codec handle (#2883)
  • aaad933 fix(iohelpers): don't rewrite unchanged output files larger than 4KiB (#2882)
  • fe296d8 fix(template): make --input-dir faster by walking the directory once when pos...
  • Additional commits viewable in compare view

Updates github.com/werf/nelm from 1.28.0 to 1.31.1

Release notes

Sourced from github.com/werf/nelm's releases.

v1.31.1 [beta]

Changelog

Bug Fixes

  • recreate StatefulSet and other custom-validated kinds on immutable field change (#733) (7d2829e)

Install via trdl (with autoupdates, highly secure)

  1. Install trdl client binary, preferably to ~/bin.

  2. Add Nelm TUF repository to trdl:

    trdl add nelm https://tuf.nelm.sh 1 2122fb476c48de4609fe6d3636759645996088ff6796857fc23ba4b8331a6e3a58fc40f1714c31bda64c709ef6f49bcc4691d091bad6cb1b9a631d8e06e1f308
  3. Make nelm binary available in the current shell:

    source "$(trdl use nelm 1 stable)"

Install binaries directly (no autoupdates)

Download nelm binaries from here:

These binaries were signed with PGP and could be verified with the Nelm PGP public key. For example, nelm binary can be downloaded and verified with gpg on Linux with these commands:

curl -sSLO "https://tuf.nelm.sh/targets/releases/1.31.1/linux-amd64/bin/nelm" -O "https://tuf.nelm.sh/targets/signatures/1.31.1/linux-amd64/bin/nelm.sig"
curl -sSL https://raw.githubusercontent.com/werf/nelm/refs/heads/main/nelm.asc | gpg --import
gpg --verify nelm.sig nelm

v1.31.0

Changelog

Features

  • action: return rendered resources from ReleaseInstall (#718) (312d2f2)
  • expose operation graph in progress report (#717) (7bf3d70)

Install via trdl (with autoupdates, highly secure)

... (truncated)

Changelog

Sourced from github.com/werf/nelm's changelog.

1.31.1 (2026-10-01)

Bug Fixes

  • recreate StatefulSet and other custom-validated kinds on immutable field change (#733) (7d2829e)

2.0.0-alpha.1 (2026-09-29)

⚠ BREAKING CHANGES

  • new major release 2.0

Features

  • ability to init ts files with WerfRenderContext type (#593) (4b90254)
  • action: return rendered resources from ReleaseInstall (#718) (312d2f2)
  • add --diff-patches and patches.yaml support (9241ea8)
  • add --lookup-resources flag for offline lookup in render/lint commands (#657) (a984242)
  • add renderPatches support for --patches/patches.yaml (#696) (191171c)
  • add werf.io/resource-policy annotation (5a2517f)
  • add automatic deploy dependency detection for KEDA ScaledObjects (#631) (6ccf7ec), closes #456
  • add case-insensitive-condition-tracking feature gate (3d2d2d0)
  • add case-insensitive-condition-tracking feature gate (5647588)
  • add DockerConfig flag (#605) (d0b1f53)
  • add feat gate to own deckhouse-controller fields (6092c11)
  • add LegacyPatches option for programmatic patches (#720) (8103cd3)
  • add LintMode in chart render options and pass it to the Helm engine (#695) (f5cff5a)
  • add option LegacyNoReleaseLock to install/uninstall/rollback actions (#656) (da9a86a)
  • adopt chart ts init for werf (#594) (671cf54)
  • allow to disable values schema validation (#616) (ec40944)
  • always track resource conditions case-insensitively (0585a1f)
  • bump default local kube version for rendering to 1.36.0 (2159f96)
  • case insensitive group/version/kind for deploy/delete-dependency (#626) (adf8a42)
  • clean null fields in rendered manifests by default for better compat (e9bbd6e)
  • deno runtime for typescript (#565) (942d8aa)
  • embed deno binary into release binaries behind embeddeno tag (cb96a15)
  • embed kubeconform validation schemas into the binary (#673) (f6ce79b)
  • enhance Deno embedding process and sync platform lists (615df53)
  • explain required install with no planned resource changes (cdbacfd)
  • explain required install with no planned resource changes (#645) (cdbacfd)
  • expose operation graph in progress report (#717) (7bf3d70)
  • expose plan artifact in actions api (#586) (1a42481)
  • expose the render context to render patches as jq variables (#727) (778e12c)
  • fail on invalid annotations or labels (#614) (a8c983f)
  • forbid resource recreation if helm.sh/resource-policy set (d1b6297)
  • improve runtime annotations and labels handling (#615) (73d4a88)
  • move repo commands from root to chart repo (#640) (ec0af5b)
  • native Chart v3 and Release v2 support (ae98e04)

... (truncated)

Commits
  • c80c496 chore(main): release 1.31.1
  • 7d2829e fix: recreate StatefulSet and other custom-validated kinds on immutable field...
  • ecae560 chore(release): add 3 dev channel (#732)
  • d45a5ef chore: run AI-written tests in the normal unit suite (#728)
  • b38817d chore(ci): prepare the release workflows for a parallel 2.x line (#722)
  • 6393382 chore(main): release 1.31.0
  • 312d2f2 feat(action): return rendered resources from ReleaseInstall (#718)
  • 7bf3d70 feat: expose operation graph in progress report (#717)
  • b8dcafc chore: bump alpha
  • af83545 chore(main): release 1.30.4
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the direct group with 2 updates in the / directory: [github.com/hairyhenderson/gomplate/v5](https://github.com/hairyhenderson/gomplate) and [github.com/werf/nelm](https://github.com/werf/nelm).


Updates `github.com/hairyhenderson/gomplate/v5` from 5.2.0 to 5.3.1
- [Release notes](https://github.com/hairyhenderson/gomplate/releases)
- [Changelog](https://github.com/hairyhenderson/gomplate/blob/main/CHANGELOG.md)
- [Commits](hairyhenderson/gomplate@v5.2.0...v5.3.1)

Updates `github.com/werf/nelm` from 1.28.0 to 1.31.1
- [Release notes](https://github.com/werf/nelm/releases)
- [Changelog](https://github.com/werf/nelm/blob/main/CHANGELOG.md)
- [Commits](werf/nelm@v1.28.0...v1.31.1)

---
updated-dependencies:
- dependency-name: github.com/hairyhenderson/gomplate/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: direct
- dependency-name: github.com/werf/nelm
  dependency-version: 1.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: direct
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the skip-changelog This PR needs no changie fragment (CI-only, cosmetic, or a release PR) label Oct 26, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 9, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/direct-70d6cbf519 branch November 9, 2026 04:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/L skip-changelog This PR needs no changie fragment (CI-only, cosmetic, or a release PR)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants