chore(dev-tools): update mise packages (non-major)

[ppat-self-hosted-renovate-bot]

This PR contains the following updates:

Package	Update	Change
node (source)	patch	24.18.0 → 24.18.1
tflint	minor	0.58.1 → 0.64.0

---

Release Notes

nodejs/node (node)

v24.18.1: 2026-07-29, Version 24.18.1 'Krypton' (LTS), @​juanarbol

Compare Source

This is a security release.

Notable Changes

• (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
• (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
• (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
• (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
• (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
• (CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) – Medium
• (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
• (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
• (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
• (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
• (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
• deps: update llhttp to 9.4.3 (Paolo Insogna)
• deps: update undici to 7.29.0 (Node.js GitHub Bot)

Commits

• [6cb0475751] - deps: update llhttp to 9.4.3 (Paolo Insogna) nodejs-private/node-private#935
• [bcfe21d3dc] - deps: update undici to 7.29.0 (Node.js GitHub Bot) #​64713
• [9d0d36cffd] - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) nodejs-private/node-private#929
• [8a008fb523] - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) nodejs-private/node-private#922
• [a77c7f7354] - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) nodejs-private/node-private#921
• [34ed88a069] - (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) #​63752
• [95ba2cfde7] - (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) nodejs-private/node-private#904
• [fcbdbe47ea] - (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) nodejs-private/node-private#930
• [ea26c12b56] - (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) nodejs-private/node-private#911
• [9a6b7e343a] - (CVE-2026-58039) permission: check final report output path (RafaelGSS) nodejs-private/node-private#926
• [6c0c990880] - (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) nodejs-private/node-private#927
• [af9ff0490c] - (CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) nodejs-private/node-private#896
• [05f541b5c0] - (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) nodejs-private/node-private#931

terraform-linters/tflint (tflint)

v0.64.0

Compare Source

What's Changed

Enhancements

• cmd: include worker dir for no-range recursive issues by @​Zakharden in #​2524
• config: add ignorable rule setting by @​Zakharden in #​2525
• formatter(junit): include range in testcase name by @​Zakharden in #​2538

Bug Fixes

• plugin: fetch attestation bundles from bundle_url by @​Kunalbehbud in #​2593
  • Merged as #​2600

Chores

• Refactor formatter dispatch into format adapters by @​bendrucker in #​2556
• Inline per-format print methods into their adapters by @​bendrucker in #​2557
• build(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​2559
• build(deps): Bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15 by @​dependabot[bot] in #​2560
• build(deps): Bump golang from 1.26.3-alpine3.23 to 1.26.4-alpine3.23 by @​dependabot[bot] in #​2558
• release: Set branch name for Homebrew tap by @​wata727 in #​2561
• Extract the shared runner-setup pipeline by @​bendrucker in #​2555
• formatter: guard diagnostics with no source range by @​bendrucker in #​2562
• docs: add Go install instructions to README by @​RoseSecurity in #​2563
• build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​2565
• build(deps): Bump alpine from 3.23.4 to 3.24.0 by @​dependabot[bot] in #​2566
• build(deps): Bump the go-x group with 2 updates by @​dependabot[bot] in #​2567
• build(deps): Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 by @​dependabot[bot] in #​2568
• fix(install): close download and zip readers by @​RoseSecurity in #​2564
• build(deps): Bump alpine from 3.24.0 to 3.24.1 by @​dependabot[bot] in #​2570
• build(deps): Bump golang.org/x/net from 0.55.0 to 0.56.0 in the go-x group by @​dependabot[bot] in #​2571
• build(deps): Bump github.com/sigstore/sigstore-go from 1.2.0 to 1.2.1 by @​dependabot[bot] in #​2572
• build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in #​2579
• build(deps): Bump actions/setup-go from 6.4.0 to 6.5.0 by @​dependabot[bot] in #​2580
• build(deps): Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @​dependabot[bot] in #​2583
• build(deps): Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by @​dependabot[bot] in #​2582
• build(deps): Bump actions/attest from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​2581
• build(deps): Bump docker/build-push-action from 7.2.0 to 7.3.0 by @​dependabot[bot] in #​2584
• build(deps): Bump golang.org/x/text from 0.38.0 to 0.39.0 in the go-x group by @​dependabot[bot] in #​2585
• build(deps): Bump github.com/sigstore/sigstore-go from 1.2.1 to 1.2.2 by @​dependabot[bot] in #​2588
• build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @​dependabot[bot] in #​2587

New Contributors

• @​Zakharden made their first contribution in #​2524
• @​RoseSecurity made their first contribution in #​2563
• @​Kunalbehbud made their first contribution in #​2593

Full Changelog: terraform-linters/tflint@v0.63.1...v0.64.0

v0.63.1

Compare Source

What's Changed

[!NOTE]
This release contains only a fix for the release pipeline; the actual behavior remains unchanged from v0.63.0.

Chores

• Pass the GitHub App token as the step output by @​wata727 in #​2553
• Remove unneeded job dependency by @​wata727 in #​2554

Full Changelog: terraform-linters/tflint@v0.63.0...v0.63.1

v0.63.0

Compare Source

What's Changed

[!NOTE]
Due to a release pipeline issue, this release does not have a corresponding artifact attestation.
If you need to pass gh attestation verify, please use v0.63.1.

Enhancements

• Add support for Terraform v1.15 by @​wata727 in #​2521
• Bump tflint-ruleset-terraform to v0.15.0 by @​wata727 in #​2551

Chores

• Migrate homebrew-core to third-party tap by @​wata727 in #​2531
• Revise installation instructions in README.md by @​wata727 in #​2532
• build(deps): Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​2535
• build(deps): Bump the go-x group with 3 updates by @​dependabot[bot] in #​2536
• Migrate homebrew auto bump action to GoReleaser by @​wata727 in #​2534
• Fix variable reference for client-id in release.yml by @​wata727 in #​2537
• build(deps): Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @​dependabot[bot] in #​2546
• build(deps): Bump docker/build-push-action from 7.1.0 to 7.2.0 by @​dependabot[bot] in #​2548
• build(deps): Bump docker/metadata-action from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​2549
• build(deps): Bump docker/login-action from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2550
• build(deps): Bump the go-x group with 2 updates by @​dependabot[bot] in #​2547
• build(deps): Bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @​dependabot[bot] in #​2542
• build(deps): Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @​dependabot[bot] in #​2540
• build(deps): Bump golang from 1.26-alpine3.23 to 1.26.3-alpine3.23 by @​dependabot[bot] in #​2541
• build(deps): Bump alpine from 3.23 to 3.23.4 by @​dependabot[bot] in #​2539
• Add warning message to installation script by @​wata727 in #​2533

Full Changelog: terraform-linters/tflint@v0.62.1...v0.63.0

v0.62.1

Compare Source

What's Changed

Bug Fixes

• plugin: Skip fetching artifact attestations in GHES by @​wata727 in #​2527

Chores

• build(deps): Bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 by @​dependabot[bot] in #​2511
• build(deps): Bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 by @​dependabot[bot] in #​2512
• docs: deprecate curl pipe bash installation by @​dbuaon in #​2514
• build(deps): Bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by @​dependabot[bot] in #​2516
• build(deps): Bump github.com/apparentlymart/go-cidr from 1.1.0 to 1.1.1 by @​dependabot[bot] in #​2517
• build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 by @​dependabot[bot] in #​2518
• build(deps): Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @​dependabot[bot] in #​2519
• build(deps): Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 by @​dependabot[bot] in #​2520

New Contributors

• @​dbuaon made their first contribution in #​2514

Full Changelog: terraform-linters/tflint@v0.62.0...v0.62.1

v0.62.0

Compare Source

What's Changed

Enhancements

• plugin: Add signature mode to control plugin verifications by @​wata727 in #​2483

Bug Fixes

• plugin: Ignore forbidden attestation fetch errors by @​wata727 in #​2481

Chores

• build(deps): Bump the go-x group with 4 updates by @​dependabot[bot] in #​2461
• build(deps): Bump docker/build-push-action from 6.18.0 to 6.19.2 by @​dependabot[bot] in #​2463
• build(deps): Bump google.golang.org/grpc from 1.78.0 to 1.79.1 by @​dependabot[bot] in #​2464
• build(deps): Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @​dependabot[bot] in #​2467
• build(deps): Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @​dependabot[bot] in #​2469
• build(deps): Bump actions/setup-go from 6.2.0 to 6.3.0 by @​dependabot[bot] in #​2470
• build(deps): Bump golang.org/x/net from 0.50.0 to 0.51.0 in the go-x group by @​dependabot[bot] in #​2472
• build(deps): Bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 by @​dependabot[bot] in #​2473
• build(deps): Bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by @​dependabot[bot] in #​2471
• build(deps): Bump docker/metadata-action from 5.10.0 to 6.0.0 by @​dependabot[bot] in #​2474
• build(deps): Bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​2476
• build(deps): Bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 in the go-x group by @​dependabot[bot] in #​2479
• build(deps): Bump google.golang.org/grpc from 1.79.1 to 1.79.2 by @​dependabot[bot] in #​2480
• build(deps): Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @​dependabot[bot] in #​2475
• build(deps): Bump docker/build-push-action from 6.19.2 to 7.0.0 by @​dependabot[bot] in #​2477
• build(deps): Bump docker/login-action from 3.7.0 to 4.0.0 by @​dependabot[bot] in #​2478
• deps: Bump Go version to 1.26 by @​wata727 in #​2482
• build(deps): Bump the go-x group with 3 updates by @​dependabot[bot] in #​2484
• build(deps): Bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @​dependabot[bot] in #​2489
• build(deps): Bump mislav/bump-homebrew-formula-action from 3.6 to 4.1 by @​dependabot[bot] in #​2490
• build(deps): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.23.1 to 0.24.0 by @​dependabot[bot] in #​2491
• build(deps): Bump github.com/fatih/color from 1.18.0 to 1.19.0 by @​dependabot[bot] in #​2492
• dependabot: Set cooldown period by @​wata727 in #​2493
• build(deps): Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @​dependabot[bot] in #​2495
• build(deps): Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by @​dependabot[bot] in #​2496
• build(deps): Bump actions/setup-go from 6.3.0 to 6.4.0 by @​dependabot[bot] in #​2498
• build(deps): Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.4 to 1.7.8 by @​dependabot[bot] in #​2499
• build(deps): Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.95.0 to 1.97.3 by @​dependabot[bot] in #​2500
• build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @​dependabot[bot] in #​2501
• build(deps): Bump github.com/hashicorp/go-getter from 1.8.4 to 1.8.6 by @​dependabot[bot] in #​2502
• build(deps): Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by @​dependabot[bot] in #​2506
• build(deps): Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @​dependabot[bot] in #​2503
• build(deps): Bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​2497
• build(deps): Bump docker/login-action from 4.0.0 to 4.1.0 by @​dependabot[bot] in #​2504
• build(deps): Bump docker/build-push-action from 7.0.0 to 7.1.0 by @​dependabot[bot] in #​2507
• release: Migrate attest-build-provenance to attest by @​wata727 in #​2508

Full Changelog: terraform-linters/tflint@v0.61.0...v0.62.0

v0.61.0

Compare Source

What's Changed

Enhancements

• version: add update notifications, json output by @​bendrucker in #​2421
• build(deps): Bump github.com/terraform-linters/tflint-ruleset-terraform from 0.13.0 to 0.14.1 by @​dependabot[bot] in #​2445
• plugin: Enable plugin keyless verification by default by @​wata727 in #​2453

Chores

• build(deps): Bump actions/checkout from 5.0.0 to 5.0.1 by @​dependabot[bot] in #​2414
• build(deps): Bump the go-x group with 3 updates by @​dependabot[bot] in #​2415
• build(deps): Bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @​dependabot[bot] in #​2416
• build(deps): Bump google.golang.org/grpc from 1.76.0 to 1.77.0 by @​dependabot[bot] in #​2417
• build(deps): Bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 by @​dependabot[bot] in #​2418
• build(deps): Bump actions/checkout from 5.0.1 to 6.0.0 by @​dependabot[bot] in #​2420
• build(deps): Bump actions/setup-go from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​2419
• build(deps): Bump docker/metadata-action from 5.9.0 to 5.10.0 by @​dependabot[bot] in #​2422
• build(deps): Bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0 by @​dependabot[bot] in #​2423
• build(deps): Bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​2425
• build(deps): Bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 in the go-x group by @​dependabot[bot] in #​2428
• build(deps): Bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 by @​dependabot[bot] in #​2426
• build(deps): Bump the go-x group with 3 updates by @​dependabot[bot] in #​2432
• build(deps): Bump github.com/sigstore/sigstore-go from 1.1.3 to 1.1.4 by @​dependabot[bot] in #​2433
• Add support for Terraform v1.14 by @​wata727 in #​2424
• build(deps): Bump alpine from 3.22 to 3.23 by @​dependabot[bot] in #​2427
• build(deps): Bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by @​dependabot[bot] in #​2437
• build(deps): Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @​dependabot[bot] in #​2438
• build(deps): Bump github.com/zclconf/go-cty-yaml from 1.1.0 to 1.2.0 by @​dependabot[bot] in #​2439
• Add an integration test for root only traversal by @​wata727 in #​2436
• build(deps): Bump google.golang.org/grpc from 1.77.0 to 1.78.0 by @​dependabot[bot] in #​2441
• build(deps): Bump the go-x group with 3 updates by @​dependabot[bot] in #​2444
• build(deps): Bump actions/setup-go from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​2446
• docs: windows plugin development by @​Netkracker in #​2334
• build(deps): Bump github.com/theupdateframework/go-tuf/v2 from 2.3.0 to 2.3.1 by @​dependabot[bot] in #​2450
• build(deps): Bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 by @​dependabot[bot] in #​2451
• build(deps): Bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 by @​dependabot[bot] in #​2452
• build(deps): Bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​2454
• build(deps): Bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @​dependabot[bot] in #​2455
• build(deps): Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 by @​dependabot[bot] in #​2456
• build(deps): Bump docker/login-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in #​2458

New Contributors

• @​Netkracker made their first contribution in #​2334

Full Changelog: terraform-linters/tflint@v0.60.0...v0.61.0

v0.60.0

Compare Source

What's Changed

This release introduces a new configuration file format: .tflint.json. This is useful for workflows such as automatically generating configuration files.
Please note that in order to use the .tflint.json, enabled plugins must be built with SDK v0.23+.

From this release, Cosign signatures (checksums.txt.keyless.sig and checksums.txt.pem) are deprecated. They will not be included in future releases. If your installation scripts depend on them, please migrate to gh attestation verify.

Enhancements

• Add JSON configuration file support by @​rorychatterton in #​2391
• Report structured errors in JUnit and CheckStyle XML formatters by @​bendrucker in #​2407

Changes

• Alphabetize rulesets in version output by @​bendrucker in #​2404
• release: Pin Cosign version and deprecate Cosign signatures by @​wata727 in #​2405

Bug Fixes

• fix: only read TF_VAR for root module by @​bendrucker in #​2413

Chores

• build(deps): Bump actions/attest-build-provenance from 2.4.0 to 3.0.0 by @​dependabot[bot] in #​2376
• build(deps): Bump actions/setup-go from 5.5.0 to 6.0.0 by @​dependabot[bot] in #​2377
• build(deps): Bump the go-x group with 3 updates by @​dependabot[bot] in #​2378
• build(deps): Bump github.com/spf13/afero from 1.14.0 to 1.15.0 by @​dependabot[bot] in #​2380
• build(deps): Bump github.com/zclconf/go-cty from 1.16.4 to 1.17.0 by @​dependabot[bot] in #​2379
• build(deps): Bump golang.org/x/net from 0.43.0 to 0.44.0 in the go-x group by @​dependabot[bot] in #​2381
• build(deps): Bump google.golang.org/grpc from 1.75.0 to 1.75.1 by @​dependabot[bot] in #​2382
• build(deps): Bump github.com/sigstore/sigstore-go from 1.1.1 to 1.1.2 by @​dependabot[bot] in #​2383
• build(deps): Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @​dependabot[bot] in #​2384
• build(deps): Bump mislav/bump-homebrew-formula-action from 3.5 to 3.6 by @​dependabot[bot] in #​2388
• fix(script): GitHub API rate limit by @​Sander0542 in #​2390
• Bump tflint-plugin-sdk to v0.23.0 by @​wata727 in #​2393
• build(deps): Bump github.com/sigstore/sigstore-go from 1.1.2 to 1.1.3 by @​dependabot[bot] in #​2394
• build(deps): Bump docker/login-action from 3.5.0 to 3.6.0 by @​dependabot[bot] in #​2395
• build(deps): Bump the go-x group with 4 updates by @​dependabot[bot] in #​2397
• build(deps): Bump google.golang.org/grpc from 1.75.1 to 1.76.0 by @​dependabot[bot] in #​2398
• build(deps): Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @​dependabot[bot] in #​2399
• build(deps): Bump golang.org/x/net from 0.45.0 to 0.46.0 in the go-x group by @​dependabot[bot] in #​2400
• build(deps): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.23.0 to 0.23.1 by @​dependabot[bot] in #​2402
• build(deps): Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 by @​dependabot[bot] in #​2408
• build(deps): Bump docker/metadata-action from 5.8.0 to 5.9.0 by @​dependabot[bot] in #​2409
• build(deps): Bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 in the go-x group by @​dependabot[bot] in #​2410

New Contributors

• @​Sander0542 made their first contribution in #​2390
• @​rorychatterton made their first contribution in #​2391

Full Changelog: terraform-linters/tflint@v0.59.1...v0.60.0

v0.59.1

Compare Source

What's Changed

Enhancements

• build(deps): Bump github.com/terraform-linters/tflint-ruleset-terraform from 0.12.0 to 0.13.0 by @​dependabot[bot] in #​2351
• json: add fixed, fixable by @​bendrucker in #​2355

Bug Fixes

• format(sarif): Add tflint-errors rules for errors by @​wata727 in #​2373

Chores

• build(deps): Bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0 by @​dependabot[bot] in #​2343
• build(deps): Bump golang.org/x/net from 0.41.0 to 0.42.0 in the go-x group across 1 directory by @​dependabot[bot] in #​2346
• build(deps): Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by @​dependabot[bot] in #​2347
• workflow: validate issues by @​bendrucker in #​2348
• build(deps): Bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @​dependabot[bot] in #​2349
• build(deps): Bump docker/login-action from 3.4.0 to 3.5.0 by @​dependabot[bot] in #​2350
• build(deps): Bump mislav/bump-homebrew-formula-action from 3.4 to 3.5 by @​dependabot[bot] in #​2353
• dependabot: allow actions writes by @​bendrucker in #​2356
• build(deps): Bump docker/metadata-action from 5.7.0 to 5.8.0 by @​dependabot[bot] in #​2352
• build(deps): Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​2357
• build(deps): Bump the go-x group with 3 updates by @​dependabot[bot] in #​2358
• build(deps): Bump github.com/sigstore/sigstore-go from 1.1.0 to 1.1.1 by @​dependabot[bot] in #​2359
• build(deps): Bump github.com/hashicorp/go-plugin from 1.6.3 to 1.7.0 by @​dependabot[bot] in #​2360
• build(deps): Bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 by @​dependabot[bot] in #​2361
• build(deps): Bump golang from 1.24-alpine3.21 to 1.25-alpine3.21 by @​dependabot[bot] in #​2362
• build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @​dependabot[bot] in #​2363
• build(deps): Bump github.com/hashicorp/go-getter from 1.7.8 to 1.7.9 by @​dependabot[bot] in #​2364
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @​dependabot[bot] in #​2365
• build(deps): Bump github.com/zclconf/go-cty from 1.16.3 to 1.16.4 by @​dependabot[bot] in #​2366
• build(deps): Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @​dependabot[bot] in #​2371
• Add support for Terraform v1.13 by @​wata727 in #​2372
• deps: Bump Go version to 1.25 by @​wata727 in #​2374
• Bump github.com/ulikunitz/xz to v0.5.15 by @​wata727 in #​2375

Full Changelog: terraform-linters/tflint@v0.58.1...v0.59.1

v0.59.0

Compare Source

---

Configuration

📅 Schedule: (in timezone US/Eastern)

• Branch creation
  • "every 14 day"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.