Skip to content

chore(deps): update all non-major dependencies - #3063

Merged
vmaerten merged 1 commit into
mainfrom
renovate/all-minor-patch
Oct 12, 2026
Merged

chore(deps): update all non-major dependencies#3063
vmaerten merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@types/node (source) 24.19.0 → 24.19.2 age confidence devDependencies patch
actions/setup-node v7.0.0 → v7.1.0 age confidence action minor
charm.land/bubbletea/v2 v2.0.10 → v2.1.0 age confidence require minor
cloud.google.com/go/auth v0.24.0 → v0.24.1 age confidence indirect patch
cloud.google.com/go/storage v1.65.1 → v1.69.0 age confidence indirect minor
github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.74 → v2.0.0-beta.75 age confidence indirect patch
github.com/hashicorp/go-getter v1.8.9 → v1.8.10 age confidence require patch
go 1.27.1 → 1.27.2 age confidence tools patch
go 1.26.x → 1.27.x age confidence uses-with minor
go.opentelemetry.io/contrib/detectors/gcp v1.45.0 → v1.47.0 age confidence indirect minor
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0 → v0.72.0 age confidence indirect minor
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 → v0.72.0 age confidence indirect minor
go.opentelemetry.io/otel v1.45.0 → v1.47.0 age confidence indirect minor
go.opentelemetry.io/otel/metric v1.45.0 → v1.47.0 age confidence indirect minor
go.opentelemetry.io/otel/sdk v1.45.0 → v1.47.0 age confidence indirect minor
go.opentelemetry.io/otel/sdk/metric v1.45.0 → v1.47.0 age confidence indirect minor
go.opentelemetry.io/otel/trace v1.45.0 → v1.47.0 age confidence indirect minor
golang.org/x/crypto v0.57.0 → v0.58.0 age confidence indirect minor
golang.org/x/sync v0.23.0 → v0.24.0 age confidence require minor
golang.org/x/sys v0.48.0 → v0.49.0 age confidence indirect minor
golang.org/x/term v0.46.0 → v0.47.0 age confidence require minor
golang.org/x/text v0.42.0 → v0.43.0 age confidence indirect minor
google.golang.org/api v0.299.0 → v0.301.0 age confidence indirect minor
goreleaser 2.18.2 → 2.18.3 age confidence tools patch
goreleaser/goreleaser-action (changelog) f06c13b → a4f02ab action digest
hustcer/setup-nu v3.26 → v3.28 age confidence action minor
mockery 3.8.0 → 3.8.1 age confidence tools patch
mvdan.cc/sh/x aebdf2b → 0e8ea6f age confidence require digest
netlify-cli 27.10.0 → 27.12.0 age confidence devDependencies minor
pnpm (source) 12.6.0+sha512.3ef68f951cb111ac204b4a5a16f0b2ddf0da56a96e0413e81d855d9f0b55ef926714709028e1cd00c405c2c5fb7b9e8ec4dc46777c805d0373c2f2ff00fd20ec → 12.11.2 age confidence packageManager minor
pnpm (source) 12.6.0 → 12.11.2 age confidence tools minor
prettier (source) 3.9.9 → 3.9.10 age confidence devDependencies patch
python 3.14 → 3.15 age confidence uses-with minor
shiki (source) 4.4.3 → 4.5.0 age confidence devDependencies minor
vitepress-plugin-group-icons 1.7.6 → 1.7.7 age confidence devDependencies patch

Release Notes

actions/setup-node (actions/setup-node)

v7.1.0

Compare Source

What's Changed

Enhancements:
Bug fixes:
Documentation updates:
Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

charmbracelet/bubbletea (charm.land/bubbletea/v2)

v2.1.0

Compare Source

Hello OSC 7501

The exciting news in this release is support for the brand new Program Status Protocol, otherwise known as OSC 7501, released just a few days ago. The protocol is designed to allow terminal applications to report what they're doing (e.g. idle, working, waiting on the user, finished, or failed) and why.

The obvious case for the design is AI agents, but are lots of other use cases for this, and we’re excited to see what you build with it.

It’s subtle, but here’s Crush in Superlogical’s Rex with the feature integrated (notice the dot in the first tab).

Bugfixes

Also, this release brings some very important fixes done by @​AdamMagued, @​simpleqt and @​GreedyC.

Cheers!
Charm 🌞

Changelog

New!
Fixed
Docs
Other stuff

The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.24.1: auth: v0.24.1

Bug Fixes
hashicorp/aws-sdk-go-base (github.com/hashicorp/aws-sdk-go-base/v2)

v2.0.0-beta.75

Compare Source

NOTES

  • Updates to Go 1.26.

BUG FIXES

  • Fixes error introduced in #​1496 where API requests and responses were corrupted by shared memory buffers. (#​1503)
  • Logging: Fixes redacted S3 object body sizes of 1 TiB or greater being reported in gigabytes, and bodies of unknown length being reported as -1 bytes.
  • Updates dependencies.
hashicorp/go-getter (github.com/hashicorp/go-getter)

v1.8.10

Compare Source

Bug fixes

  • s3: only force path-style addressing for non-AWS endpoints (fixes FIPS endpoints) (#​676)
  • sanitize destination path of keys received from S3/GCS List (#​693)

Full Changelog: hashicorp/go-getter@v1.8.9...v1.8.10

golang/go (go)

v1.27.2

Compare Source

actions/go-versions (go)

v1.27.2: 1.27.2

Compare Source

Go 1.27.2

v1.27.1: 1.27.1

Compare Source

Go 1.27.1

v1.27.0: 1.27.0

Compare Source

Go 1.27.0

open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/detectors/gcp)

v1.47.0: /v2.6.0/v0.72.0/v0.38.0/v0.27.0/v0.21.0/v0.17.0/v0.19.0

Compare Source

Added
  • Add NewResourceDetectorWithOptions and the WithAWSLogger option to go.opentelemetry.io/contrib/detectors/aws/ec2/v2, allowing a custom AWS SDK logging.Logger to be supplied to the EC2 resource detector. (#​9132)
  • Add go.opentelemetry.io/contrib/detectors/openshift, a new resource detector for OpenShift 4 clusters, ported from processor/resourcedetectionprocessor/internal/openshift in opentelemetry-collector-contrib. Detects k8s.cluster.name, and cloud.provider, cloud.platform and cloud.region for clusters running on AWS, Google Cloud and IBM Cloud; Azure clusters report cloud.provider and cloud.platform only. (#​9499)
  • Add go.opentelemetry.io/contrib/detectors/kubeadm, a new resource detector for kubeadm-provisioned Kubernetes clusters, ported from processor/resourcedetectionprocessor/internal/kubeadm in opentelemetry-collector-contrib. Detects k8s.cluster.name from the ClusterConfiguration document in the kube-system/kubeadm-config ConfigMap and k8s.cluster.uid from the kube-system namespace UID. (#​9500)
Changed
  • Client metrics in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp no longer include attributes from the server-side Labeler, preventing attributes such as http.route from leaking into outbound requests.
    This is a breaking change for applications that use ContextWithLabeler to add custom client metric attributes: use ContextWithClientLabeler / ClientLabelerFromContext or the WithMetricAttributesFn option instead.
    Server-side use of ContextWithLabeler / LabelerFromContext is unchanged. (#​8924)
  • Stop emitting the legacy http.read_bytes and http.wrote_bytes attributes on the per-operation span events enabled by WithMessageEvents in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp.
    The read and write events remain, while total body sizes continue to be recorded on the server span as http.request.body.size and http.response.body.size according to HTTP semantic conventions. (#​9624)
Deprecated
  • Deprecate go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws. (#​9707)
  • Deprecate go.opentelemetry.io/contrib/propagators/aws. (#​9706)
  • Deprecate go.opentelemetry.io/contrib/samplers/probability/consistent. (#​9633)
  • Deprecate ReadBytesKey, ReadErrorKey, WroteBytesKey, and WriteErrorKey in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp.
    The identifiers remain available and their values are unchanged, but WithMessageEvents no longer emits http.read_bytes or http.wrote_bytes.
    There is no semantic-convention replacement for per-read or per-write byte counts or the human-readable error fields.
    Use HTTPRequestBodySizeKey and HTTPResponseBodySizeKey from go.opentelemetry.io/otel/semconv/v1.43.0 to record total body sizes on the span.
    If an error causes the HTTP request to fail, set the span status to Error and record ErrorType(err) from go.opentelemetry.io/otel/semconv/v1.43.0 on the span. (#​9624)
Fixed
  • Treat empty Prometheus exporter environment variable values as unset in go.opentelemetry.io/contrib/exporters/autoexport, restoring the documented defaults. (#​9636)
  • Bound converter-owned recursive map, slice, array, and pointer traversal in go.opentelemetry.io/contrib/bridges/otellogr, go.opentelemetry.io/contrib/bridges/otellogrus, go.opentelemetry.io/contrib/bridges/otelslog, and go.opentelemetry.io/contrib/bridges/otelzap.
    A field requiring more than 100 such levels is replaced with <max-depth-exceeded> and the record continues to be emitted. Existing fmt and user-method behavior remains unchanged. (#​9691)
  • Format span attributes in go.opentelemetry.io/contrib/zpages using attribute.Value.String instead of the deprecated attribute.Value.Emit, following the OpenTelemetry AnyValue representation for non-OTLP protocols. (#​9453)
  • Set error.type on the span and on the request-duration, request-body-size, and response-body-size metrics when a client disconnects mid-request in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin, using the request context's cancellation error as the classification source when the handler has not already recorded an error via c.Error. Previously a disconnect was recorded with span status Error and no error.type, indistinguishable from a genuine server fault. (#​9394)
  • Report Prometheus metrics HTTP server errors in go.opentelemetry.io/contrib/otelconf when using the v0.2.0 configuration schema.
    The error check was inverted, so a clean shutdown (http.ErrServerClosed) was reported as unexpected while real Serve errors were ignored. (#​9653)
  • Fix temporary file cleanup for multipart requests in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp by copying the parsed multipart form back to the original request during deferred cleanup, preserving net/http cleanup during panic unwinding for HTTP/2 panic handling and outer recovery middleware paths. Unrecovered HTTP/1 handler panics remain uncleaned because net/http skips finishRequest in that path. (#​9685)
  • Fix http.client.request.body.size recording for streaming request bodies in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#​8684)
  • Bound Kubernetes ConfigMap requests in go.opentelemetry.io/contrib/detectors/aws/eks with a 10-second timeout so Detect cannot hang indefinitely when the caller-provided context has no deadline. (#​9419)
Removed
  • Drop support for Go 1.25. (#​9584)
  • Remove go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho. Use github.com/labstack/echo-opentelemetry instead. (#​9613)

What's Changed

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added area: dependencies Changes related to dependency files. area: github actions Pull requests that update GitHub Actions code lang: go Pull requests that update Go code. lang: javascript Pull requests that update Javascript code. labels Oct 5, 2026
@renovate

renovate Bot commented Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 26 additional dependencies were updated

Details:

Package Change
github.com/stretchr/testify v1.11.1 -> v1.12.1
go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
golang.org/x/net v0.59.0 -> v0.61.0
github.com/aws/aws-sdk-go-v2 v1.44.0 -> v1.47.1
github.com/aws/aws-sdk-go-v2/config v1.32.40 -> v1.33.6
github.com/aws/aws-sdk-go-v2/credentials v1.19.39 -> v1.20.6
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.40 -> v1.20.1
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.40 -> v1.5.4
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.40 -> v2.8.4
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.41 -> v1.5.4
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.10.0 -> v1.11.5
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.40 -> v1.14.4
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.41 -> v1.20.4
github.com/aws/aws-sdk-go-v2/service/s3 v1.108.0 -> v1.114.0
github.com/aws/aws-sdk-go-v2/service/signin v1.6.0 -> v1.10.1
github.com/aws/aws-sdk-go-v2/service/sso v1.34.0 -> v1.38.1
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.39.0 -> v1.43.1
github.com/aws/aws-sdk-go-v2/service/sts v1.46.0 -> v1.51.1
github.com/charmbracelet/ultraviolet v0.0.0-20260811164956-006e29f97886 -> v0.0.0-20261008173134-6b8d4baf91b4
github.com/charmbracelet/x/ansi v0.11.8 -> v0.11.9
github.com/google/s2a-go v0.1.10 -> v0.1.11
github.com/klauspost/compress v1.19.2 -> v1.20.1
github.com/mattn/go-runewidth v0.0.27 -> v0.0.30
github.com/ulikunitz/xz v0.5.16 -> v0.5.17
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e -> v1.0.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20260921155816-b14227669459 -> v0.0.0-20260928230214-8a89bd6388cc

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 18 times, most recently from 278ab4f to bfed7ea Compare October 12, 2026 08:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from bfed7ea to 574a2c7 Compare October 12, 2026 15:23
@vmaerten
vmaerten merged commit e62e47f into main Oct 12, 2026
24 checks passed
@vmaerten
vmaerten deleted the renovate/all-minor-patch branch October 12, 2026 20:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@vmaerten vmaerten vmaerten approved these changes

Assignees

No one assigned

Labels

area: dependencies Changes related to dependency files. area: github actions Pull requests that update GitHub Actions code lang: go Pull requests that update Go code. lang: javascript Pull requests that update Javascript code.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vmaerten