Release v1.18.9#854
Merged
Merged
Conversation
… (#6012) <!-- CURSOR_AGENT_PR_BODY_BEGIN --> ## Summary - `GetHcpConfig` no longer returns the HMAC secret on the read path, so the shared HCP Terraform run-task HMAC key never leaves the server when a tenant member calls the read API. - The settings page reveals the HMAC key once after create or regenerate-credentials by stashing the `CreateHcpConfig` response in `sessionStorage` across the OAuth redirect; normal revisits show guidance to regenerate instead. - `get-tfc` no longer prints the HMAC key and directs users to `create-tfc` or the settings regenerate flow for a one-time reveal. ## Changes ### API server (`configservice.go`, `configservice_test.go`) - `GetHcpConfig` constructs `HcpConfig` with `Endpoint` only; `Secret` is omitted on read. - `CreateHcpConfig` and `ReplaceHcpApiKey` unchanged as one-time reveal paths. - Integration test (`TestCreateHcpConfig/with_the_right_permissions`) asserts `GetHcpConfig` returns a non-empty endpoint and an empty secret after create. ### Frontend (`HCPTerraform.tsx`, `hcp-terraform.test.ts`) - `enableIntegration` persists `response.config.secret` to `sessionStorage` before OAuth redirect (covers regenerate-credentials via the same path). - `integrationSuccess` effect reads and clears the stashed secret into `revealedSecret` for one-time display with copy and a "shown only once" note. - When no revealed secret, shows guidance to use Regenerate credentials instead of an empty HMAC field. - Removed form defaults and `setValue` wiring for `config.secret` from the read path. - E2E configured-state test asserts `mock-hmac-secret` from the mocked GET response is not visible on the page. ### CLI (`integrations_tfc.go`) - `GetTfc` drops the HMAC key print line and prints a note that the key is only shown when credentials are generated. - `CreateTfc` unchanged. ## Brent Plan - **Plan ID**: BRENT-641 - **Plan**: [Stop returning HCP HMAC secret from GetHcpConfig read path](https://brent-dev.overmind-demo.com/open/plans/89a15f85-7ec1-4785-9243-8325cdea91d9) > Deviation analysis and reviewer assignment are handled automatically by the > pre-approved PR review automation (see docs/PREAPPROVED_CHANGES.md). <!-- CURSOR_AGENT_PR_BODY_END --> <div><a href="https://cursor.com/agents/bc-ab5de03f-53cb-4a73-a76e-6fa4c19a2470"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-web-light.png"><img alt="Open in Web" width="114" height="28" src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a href="https://cursor.com/background-agent?bcId=bc-ab5de03f-53cb-4a73-a76e-6fa4c19a2470"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img alt="Open in Cursor" width="131" height="28" src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: carabasdaniel <carabasdaniel@users.noreply.github.com> GitOrigin-RevId: 1813b42ab98488fab98ad9ad670cfc8663dcb954
<!-- CURSOR_AGENT_PR_BODY_BEGIN --> ## Summary Brent dogfood backend Sentry events were labeled `prod` because AWS deployments use `run-mode=release` while the real environment lives in `BRENT_BACKEND_HONEYCOMB_ENVIRONMENT`. This change prefers a configured `honeycomb-environment` for Sentry's environment option, and keeps the existing run-mode mapping as the fallback when that value is absent. ## Approach (incorporating review notes) Thomas Honey's approval noted that Brent's cobra default of `dev` meant a naive non-empty check would never fall back. Fix: 1. Change Brent's `--honeycomb-environment` default from `dev` to empty. 2. In `go/tracing`, prefer a non-empty `honeycomb-environment`; otherwise use the run-mode mapping. 3. `ServerConfig` still defaults empty HoneycombEnvironment to `dev` for audit-event trace URLs. That cleanly separates "explicitly configured" (AWS overlays / CLI / env) from "unconfigured". ## Changes - `go/tracing/main.go`: `sentryEnvironment` / `sentryEnvironmentFromViper` - `go/tracing/sentry_environment_test.go`: unit + Brent BindEnv/BindFlagsToViper path tests (empty default) - `services/brent-backend/cmd/root.go`: empty flag default ## Verification - `go test -race ./go/tracing/` — pass - `golangci-lint` on touched packages — clean - Rendered manifests still set `BRENT_BACKEND_HONEYCOMB_ENVIRONMENT` to `dogfood` / `prod` ## CI notes `api-server test server` previously failed on `TestReadSourcesCaching` (unrelated source-count race); not touched by this change. ## After deploy Confirm one dogfood backend Sentry event is labeled `dogfood` and production remains `prod`. Brent-Plan: BRENT-651 <!-- CURSOR_AGENT_PR_BODY_END --> <div><a href="https://cursor.com/agents/bc-53ec9150-152e-40e5-9a88-59d82b075062"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-web-light.png"><img alt="Open in Web" width="114" height="28" src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a href="https://cursor.com/background-agent?bcId=bc-53ec9150-152e-40e5-9a88-59d82b075062"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img alt="Open in Cursor" width="131" height="28" src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Dylan <dylanratcliffe@users.noreply.github.com> GitOrigin-RevId: debbc26cf4d1bd5d321b5330d3961ede6e917c14
<!-- CURSOR_SUMMARY --> > [!NOTE] > **Low Risk** > Dependency-only pins with no runtime logic changes; main watch-outs are native sharp upgrade and @hono/node-server 2.x (Node 20+) affecting MCP-related transitive usage. > > **Overview** > Addresses **Dependabot-reported vulnerabilities** by pinning patched versions through workspace overrides and refreshing lockfiles—no application source changes. > > **Go:** bumps indirect `go.opentelemetry.io/otel/schema` from **v0.0.12 → v0.0.17** in `go.mod` / `go.sum`. > > **pnpm (root + `gtm/presentations`):** adds documented **security overrides** and resolves locks to: > - **`sharp`** → **0.35.3** (libvips / GHSA-f88m-g3jw-g9cj) > - **`svgo`** → **3.3.4** / **4.0.2** (SVG script sanitization / GHSA-2p49-hgcm-8545) > - **`@hono/node-server`** → **2.0.5** (Windows path traversal / GHSA-frvp-7c67-39w9; **Node ≥20**) > - **`fast-uri`** → **3.1.4** in the presentations workspace (URI host confusion / GHSA-v2hh-gcrm-f6hx) > > Lock updates also drop **`sharp@0.34.5`** platform packages in favor of **0.35.3**, and adjust peer resolution (e.g. **`@types/node`** on Argos / Next-related entries). > > <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 79cd55a4b4ad77bc241e9725a65ae4de9f2ec16d. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup> <!-- /CURSOR_SUMMARY --> GitOrigin-RevId: c1d2cc228162818b6aaf92c833f103472216ea4a
![https://cursor.com/assets/images/open-in-web-dark.png"><source](https://cursor.com/assets/images/open-in-web-dark.png"><source){kind=link}
![https://cursor.com/assets/images/open-in-web-light.png"><img](https://cursor.com/assets/images/open-in-web-light.png"><img){kind=link}
![https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a](https://cursor.com/assets/images/open-in-web-dark.png"></picture></a> <a){kind=link}
![https://cursor.com/assets/images/open-in-cursor-dark.png"><source](https://cursor.com/assets/images/open-in-cursor-dark.png"><source){kind=link}
![https://cursor.com/assets/images/open-in-cursor-light.png"><img](https://cursor.com/assets/images/open-in-cursor-light.png"><img){kind=link}
![https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div](https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a> </div){kind=link}
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/jedib0t/go-pretty/v6](https://redirect.github.com/jedib0t/go-pretty) | `v6.8.2` → `v6.8.3` |  |  | | [github.com/openai/openai-go/v3](https://redirect.github.com/openai/openai-go) | `v3.43.0` → `v3.46.0` |  |  | | [github.com/posthog/posthog-go](https://redirect.github.com/posthog/posthog-go) | `v1.19.0` → `v1.22.0` |  |  | | [github.com/resend/resend-go/v3](https://redirect.github.com/resend/resend-go) | `v3.10.1` → `v3.11.0` |  |  | | [github.com/tiktoken-go/tokenizer](https://redirect.github.com/tiktoken-go/tokenizer) | `v0.8.0` → `v0.8.1` |  |  | | [gitlab.com/gitlab-org/api/client-go/v2](https://gitlab.com/gitlab-org/api/client-go) | `v2.50.0` → `v2.51.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>jedib0t/go-pretty (github.com/jedib0t/go-pretty/v6)</summary> ### [`v6.8.3`](https://redirect.github.com/jedib0t/go-pretty/releases/tag/v6.8.3) [Compare Source](https://redirect.github.com/jedib0t/go-pretty/compare/v6.8.2...v6.8.3) #### What's Changed - table: stack vertically-merged rows into wrapped cell height; fixes [#​261](https://redirect.github.com/jedib0t/go-pretty/issues/261) by [@​jedib0t](https://redirect.github.com/jedib0t) in [#​411](https://redirect.github.com/jedib0t/go-pretty/pull/411) - README.md: drop Go Report Card badge by [@​jedib0t](https://redirect.github.com/jedib0t) in [#​412](https://redirect.github.com/jedib0t/go-pretty/pull/412) **Full Changelog**: <jedib0t/go-pretty@v6.8.2...v6.8.3> </details> <details> <summary>openai/openai-go (github.com/openai/openai-go/v3)</summary> ### [`v3.46.0`](https://redirect.github.com/openai/openai-go/blob/HEAD/CHANGELOG.md#3460-2026-07-23) [Compare Source](https://redirect.github.com/openai/openai-go/compare/v3.45.0...v3.46.0) Full Changelog: [v3.45.0...v3.46.0](https://redirect.github.com/openai/openai-go/compare/v3.45.0...v3.46.0) ##### Features - **api:** add support for `spend_limit` admin apis ([8de8d9b](https://redirect.github.com/openai/openai-go/commit/8de8d9b41f2ad94562b42643a06c85a6c7e3a8f4)) ##### Bug Fixes - **api:** safely format project spend limit paths ([ac981e4](https://redirect.github.com/openai/openai-go/commit/ac981e4c1feb83e1be1e7e26055819ccc3eda820)) ### [`v3.45.0`](https://redirect.github.com/openai/openai-go/releases/tag/v3.45.0) [Compare Source](https://redirect.github.com/openai/openai-go/compare/v3.44.0...v3.45.0) #### 3.45.0 (2026-07-22) Full Changelog: [v3.44.0...v3.45.0](https://redirect.github.com/openai/openai-go/compare/v3.44.0...v3.45.0) ##### Go version requirement openai-go v3.45.0 requires Go 1.25 or newer. This release upgrades `golang.org/x/net` to v0.57.0 to address security findings and aligns the SDK with supported Go toolchains. v3.44.0 is the final release that builds with Go 1.22–1.24; older SDK releases do not receive guaranteed security backports. No exported SDK API or `/v3` import path changes are included. ##### Features - **api:** accept `None` for prompt\_cache\_key/safety\_identifier ([711460e](https://redirect.github.com/openai/openai-go/commit/711460ea11963cd250be5e420269b25488b02ef9)) - **stlc:** configurable CI runner and private-production-repo support in workflow templates ([6669f50](https://redirect.github.com/openai/openai-go/commit/6669f5011fc02c2160024d26ab6f9240560a778d)) ### [`v3.44.0`](https://redirect.github.com/openai/openai-go/releases/tag/v3.44.0) [Compare Source](https://redirect.github.com/openai/openai-go/compare/v3.43.0...v3.44.0) #### 3.44.0 (2026-07-17) Full Changelog: [v3.43.0...v3.44.0](https://redirect.github.com/openai/openai-go/compare/v3.43.0...v3.44.0) ##### Features - **api:** /organization/projects/{project\_id}/service\_accounts/{service\_account\_id}/api\_keys" endpoint ([28d2a6a](https://redirect.github.com/openai/openai-go/commit/28d2a6ab978f78d10b29087e70539ed230340274)) - **api:** manual updates ([a531d4a](https://redirect.github.com/openai/openai-go/commit/a531d4a994c75177a7ed3edaf0c909db188147ce)) - **api:** manual updates ([8073e1e](https://redirect.github.com/openai/openai-go/commit/8073e1e1a20907ae89433008157c238bccd4eca9)) ##### Bug Fixes - **api:** format service account API key path ([999e165](https://redirect.github.com/openai/openai-go/commit/999e16536e7dc5ea4040d13b94c413cfc9df98ec)) - format service account API key path ([9fb19bb](https://redirect.github.com/openai/openai-go/commit/9fb19bbb13c067a12c14153f8ba5e57b233cd927)) </details> <details> <summary>posthog/posthog-go (github.com/posthog/posthog-go)</summary> ### [`v1.22.0`](https://redirect.github.com/PostHog/posthog-go/releases/tag/v1.22.0): 1.22.0 [Compare Source](https://redirect.github.com/posthog/posthog-go/compare/v1.21.0...v1.22.0) #### Unreleased ### [`v1.21.0`](https://redirect.github.com/PostHog/posthog-go/releases/tag/v1.21.0): 1.21.0 [Compare Source](https://redirect.github.com/posthog/posthog-go/compare/v1.20.0...v1.21.0) #### Unreleased ### [`v1.20.0`](https://redirect.github.com/PostHog/posthog-go/releases/tag/v1.20.0): 1.20.0 [Compare Source](https://redirect.github.com/posthog/posthog-go/compare/v1.19.0...v1.20.0) #### Unreleased </details> <details> <summary>resend/resend-go (github.com/resend/resend-go/v3)</summary> ### [`v3.11.0`](https://redirect.github.com/resend/resend-go/releases/tag/v3.11.0) [Compare Source](https://redirect.github.com/resend/resend-go/compare/v3.10.1...v3.11.0) #### What's Changed - chore: sync prs to linear with latest workflow by [@​gabrielmfern](https://redirect.github.com/gabrielmfern) in [#​137](https://redirect.github.com/resend/resend-go/pull/137) - chore: update sync\_prs\_to\_linear action hash to [`a54e429`](https://redirect.github.com/resend/resend-go/commit/a54e4298f0) by [@​dielduarte](https://redirect.github.com/dielduarte) in [#​139](https://redirect.github.com/resend/resend-go/pull/139) - test(batch): cover tags and scheduledAt serialization in batch emails by [@​dielduarte](https://redirect.github.com/dielduarte) in [#​140](https://redirect.github.com/resend/resend-go/pull/140) - feat: add domain claims endpoints by [@​drish](https://redirect.github.com/drish) in [#​132](https://redirect.github.com/resend/resend-go/pull/132) **Full Changelog**: <resend/resend-go@v3.10.1...v3.11.0> </details> <details> <summary>tiktoken-go/tokenizer (github.com/tiktoken-go/tokenizer)</summary> ### [`v0.8.1`](https://redirect.github.com/tiktoken-go/tokenizer/releases/tag/v0.8.1) [Compare Source](https://redirect.github.com/tiktoken-go/tokenizer/compare/v0.8.0...v0.8.1) Bugfix with generated regular expressions </details> <details> <summary>gitlab-org/api/client-go (gitlab.com/gitlab-org/api/client-go/v2)</summary> ### [`v2.51.0`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.51.0) [Compare Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.50.0...v2.51.0) #### 2.51.0 ##### 🚀 Features - feat(client): add option to retry only idempotent requests ([!2945](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2945)) by [Patrick Dawkins](https://gitlab.com/pjcdawkins) ##### 🔄 Other Changes - feat(workitems): Add `Children` field to `WorkItem` struct. ([!2950](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2950)) by [Florian Forster](https://gitlab.com/fforster) ### [2.51.0](https://gitlab.com/gitlab-org/api/client-go/compare/v2.50.0...v2.51.0) (2026-07-17) ##### Features * **client:** add option to retry only idempotent requests ([8260b22](https://gitlab.com/gitlab-org/api/client-go/commit/8260b221903a0c6670e2ff0399a4f9700b34fc19)) * **workitems:** Add `Children` field to `WorkItem` struct. ([6a5eca2](https://gitlab.com/gitlab-org/api/client-go/commit/6a5eca23b44d1370149284d698c4aaab89f2683e)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI3NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: cee8136bca10077a86fc4499b1f4b9a9f52cf2af
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | Type | Update | |---|---|---|---|---|---| | [cloud.google.com/go/aiplatform](https://redirect.github.com/googleapis/google-cloud-go) | `v1.125.0` → `v1.126.0` |  |  | require | minor | | [cloud.google.com/go/auth](https://redirect.github.com/googleapis/google-cloud-go) | `v0.20.0` → `v0.22.0` |  |  | require | minor | | [cloud.google.com/go/bigquery](https://redirect.github.com/googleapis/google-cloud-go) | `v1.77.0` → `v1.79.0` |  |  | require | minor | | [cloud.google.com/go/bigtable](https://redirect.github.com/googleapis/google-cloud-go) | `v1.50.0` → `v1.51.0` |  |  | require | minor | | [cloud.google.com/go/certificatemanager](https://redirect.github.com/googleapis/google-cloud-go) | `v1.14.0` → `v1.15.0` |  |  | require | minor | | [cloud.google.com/go/compute](https://redirect.github.com/googleapis/google-cloud-go) | `v1.64.0` → `v1.65.0` |  |  | require | minor | | [cloud.google.com/go/dataplex](https://redirect.github.com/googleapis/google-cloud-go) | `v1.35.0` → `v1.36.0` |  |  | require | minor | | [cloud.google.com/go/dataproc/v2](https://redirect.github.com/googleapis/google-cloud-go) | `v2.23.0` → `v2.25.0` |  |  | require | minor | | [cloud.google.com/go/eventarc](https://redirect.github.com/googleapis/google-cloud-go) | `v1.23.0` → `v1.25.0` |  |  | require | minor | | [cloud.google.com/go/filestore](https://redirect.github.com/googleapis/google-cloud-go) | `v1.15.0` → `v1.16.0` |  |  | require | minor | | [cloud.google.com/go/functions](https://redirect.github.com/googleapis/google-cloud-go) | `v1.24.0` → `v1.25.0` |  |  | require | minor | | [cloud.google.com/go/iam](https://redirect.github.com/googleapis/google-cloud-go) | `v1.11.0` → `v1.12.0` |  |  | require | minor | | [cloud.google.com/go/kms](https://redirect.github.com/googleapis/google-cloud-go) | `v1.31.0` → `v1.33.0` |  |  | require | minor | | [cloud.google.com/go/logging](https://redirect.github.com/googleapis/google-cloud-go) | `v1.18.0` → `v1.19.0` |  |  | require | minor | | [cloud.google.com/go/monitoring](https://redirect.github.com/googleapis/google-cloud-go) | `v1.29.0` → `v1.30.0` |  |  | require | minor | | [cloud.google.com/go/networksecurity](https://redirect.github.com/googleapis/google-cloud-go) | `v0.17.0` → `v0.19.0` |  |  | require | minor | | [cloud.google.com/go/redis](https://redirect.github.com/googleapis/google-cloud-go) | `v1.23.0` → `v1.25.0` |  |  | require | minor | | [cloud.google.com/go/resourcemanager](https://redirect.github.com/googleapis/google-cloud-go) | `v1.15.0` → `v1.16.0` |  |  | require | minor | | [cloud.google.com/go/run](https://redirect.github.com/googleapis/google-cloud-go) | `v1.21.0` → `v1.22.0` |  |  | require | minor | | [cloud.google.com/go/secretmanager](https://redirect.github.com/googleapis/google-cloud-go) | `v1.20.0` → `v1.21.0` |  |  | require | minor | | [cloud.google.com/go/spanner](https://redirect.github.com/googleapis/google-cloud-go) | `v1.92.0` → `v1.93.0` |  |  | require | minor | | [cloud.google.com/go/storage](https://redirect.github.com/googleapis/google-cloud-go) | `v1.63.0` → `v1.64.0` |  |  | require | minor | | [cloud.google.com/go/storagetransfer](https://redirect.github.com/googleapis/google-cloud-go) | `v1.18.0` → `v1.19.0` |  |  | require | minor | | [google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client) | `v0.287.1` → `v0.290.0` |  |  | require | minor | | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | `925bb5d` → `3fe39f3` |  |  | require | digest | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>googleapis/google-cloud-go (cloud.google.com/go/auth)</summary> ### [`v0.22.0`](https://redirect.github.com/googleapis/google-cloud-go/blob/HEAD/CHANGES.md#v0220) [Compare Source](https://redirect.github.com/googleapis/google-cloud-go/compare/v0.21.0...v0.22.0) - bigtable: - cbt: Support cells per column limit for row read. - bttest: Correctly handle empty RowSet. - Fix ReadModifyWrite operation in emulator. - Fix API path in GetCluster. - bigquery: - BEHAVIOR CHANGE: Retry on 503 status code. - Add dataset.DeleteWithContents. - Add SchemaUpdateOptions for query jobs. - Add Timeline to QueryStatistics. - Add more stats to ExplainQueryStage. - Support Parquet data format. - datastore: - Support omitempty for times. - dlp: - **BREAKING CHANGE:** Remove v1beta1 client. Please migrate to the v2 client, which is now out of beta. - Add v2 client. - firestore: - BEHAVIOR CHANGE: Treat set({}, MergeAll) as valid. - iam: - Support JWT signing via SignJwt callopt. - profiler: - BEHAVIOR CHANGE: PollForSerialOutput returns an error when context.Done. - BEHAVIOR CHANGE: Increase the initial backoff to 1 minute. - Avoid returning empty serial port output. - pubsub: - BEHAVIOR CHANGE: Don't backoff during next retryable error once stream is healthy. - BEHAVIOR CHANGE: Don't backoff on EOF. - pstest: Support Acknowledge and ModifyAckDeadline RPCs. - redis: - Add v1 beta Redis client. - spanner: - Support SessionLabels. - speech: - Add api v1 beta1 client. - storage: - BEHAVIOR CHANGE: Retry reads when retryable error occurs. - Fix delete of object in requester-pays bucket. - Support KMS integration. ### [`v0.21.0`](https://redirect.github.com/googleapis/google-cloud-go/blob/HEAD/CHANGES.md#v0210) [Compare Source](https://redirect.github.com/googleapis/google-cloud-go/compare/v0.20.0...v0.21.0) - bigquery: - Add OpenCensus tracing. - firestore: - **BREAKING CHANGE:** If a document does not exist, return a DocumentSnapshot whose Exists method returns false. DocumentRef.Get and Transaction.Get return the non-nil DocumentSnapshot in addition to a NotFound error. **DocumentRef.GetAll and Transaction.GetAll return a non-nil DocumentSnapshot instead of nil.** - Add DocumentIterator.Stop. **Call Stop whenever you are done with a DocumentIterator.** - Added Query.Snapshots and DocumentRef.Snapshots, which provide realtime notification of updates. See <https://cloud.google.com/firestore/docs/query-data/listen>. - Canceling an RPC now always returns a grpc.Status with codes.Canceled. - spanner: - Add `CommitTimestamp`, which supports inserting the commit timestamp of a transaction into a column. </details> <details> <summary>googleapis/google-api-go-client (google.golang.org/api)</summary> ### [`v0.290.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.290.0) [Compare Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.289.0...v0.290.0) ##### Features - **all:** Auto-regenerate discovery clients ([#​3661](https://redirect.github.com/googleapis/google-api-go-client/issues/3661)) ([dea11c2](https://redirect.github.com/googleapis/google-api-go-client/commit/dea11c224ee6b69cc88ebd03460e95cf11f8733c)) - **all:** Auto-regenerate discovery clients ([#​3663](https://redirect.github.com/googleapis/google-api-go-client/issues/3663)) ([93d30d4](https://redirect.github.com/googleapis/google-api-go-client/commit/93d30d482d74cf2f49ada20c06fcdfa9ceb0ed87)) ### [`v0.289.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.289.0) [Compare Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.288.0...v0.289.0) ##### Features - **all:** Auto-regenerate discovery clients ([#​3649](https://redirect.github.com/googleapis/google-api-go-client/issues/3649)) ([6e259cb](https://redirect.github.com/googleapis/google-api-go-client/commit/6e259cbb923dd10f071e2f724be23914f8ccd78b)) - **all:** Auto-regenerate discovery clients ([#​3652](https://redirect.github.com/googleapis/google-api-go-client/issues/3652)) ([5116a48](https://redirect.github.com/googleapis/google-api-go-client/commit/5116a48938fa4674df57289ca63e75d209c06e10)) - **all:** Auto-regenerate discovery clients ([#​3653](https://redirect.github.com/googleapis/google-api-go-client/issues/3653)) ([6c876b4](https://redirect.github.com/googleapis/google-api-go-client/commit/6c876b4102b2db7dabc6a0f69eb0e854d298f48d)) - **all:** Auto-regenerate discovery clients ([#​3655](https://redirect.github.com/googleapis/google-api-go-client/issues/3655)) ([69af635](https://redirect.github.com/googleapis/google-api-go-client/commit/69af635fafd38d3623f52c173715883d93d7ead5)) - **all:** Auto-regenerate discovery clients ([#​3656](https://redirect.github.com/googleapis/google-api-go-client/issues/3656)) ([1fc8f45](https://redirect.github.com/googleapis/google-api-go-client/commit/1fc8f4539d0bf40f8272c1eb36f1e84cfa0ecea7)) - **all:** Auto-regenerate discovery clients ([#​3657](https://redirect.github.com/googleapis/google-api-go-client/issues/3657)) ([aa8d256](https://redirect.github.com/googleapis/google-api-go-client/commit/aa8d256cb84dcc38ee3888c983515cae283d7436)) - **all:** Auto-regenerate discovery clients ([#​3659](https://redirect.github.com/googleapis/google-api-go-client/issues/3659)) ([af8d033](https://redirect.github.com/googleapis/google-api-go-client/commit/af8d03336daad8d37f8de7e4692a8b67a7d35b7e)) ### [`v0.288.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.288.0) [Compare Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.287.1...v0.288.0) ##### Features - **all:** Auto-regenerate discovery clients ([#​3647](https://redirect.github.com/googleapis/google-api-go-client/issues/3647)) ([510a0c1](https://redirect.github.com/googleapis/google-api-go-client/commit/510a0c19483ea5631b7b0a453f9d6df1b9ef596a)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI3NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 3a22420bfbdaf5d4d2fb16a7f52aacc74532c47c
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/aws/aws-sdk-go-v2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.42.1` → `v1.43.0` |  |  | | [github.com/aws/aws-sdk-go-v2/config](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.32.30` → `v1.32.31` |  |  | | [github.com/aws/aws-sdk-go-v2/credentials](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.19.29` → `v1.19.30` |  |  | | [github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.18.30` → `v1.18.31` |  |  | | [github.com/aws/aws-sdk-go-v2/service/apigateway](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.41.1` → `v1.42.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/autoscaling](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.69.1` → `v1.70.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/cloudfront](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.66.1` → `v1.67.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/cloudwatch](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.63.1` → `v1.65.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/directconnect](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.42.1` → `v1.43.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.60.1` → `v1.61.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/ec2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.316.1` → `v1.317.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/ecs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.88.1` → `v1.89.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/efs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.43.1` → `v1.44.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/eks](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.89.1` → `v1.90.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.35.1` → `v1.36.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.57.0` → `v1.58.1` |  |  | | [github.com/aws/aws-sdk-go-v2/service/iam](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.55.1` → `v1.56.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/kms](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.54.1` → `v1.55.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/networkfirewall](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.63.1` → `v1.64.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/networkmanager](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.43.1` → `v1.44.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/rds](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.121.0` → `v1.123.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/route53](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.64.1` → `v1.65.2` |  |  | | [github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.105.2` → `v1.106.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/sesv2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.63.1` → `v1.66.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/sns](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.41.1` → `v1.42.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/sqs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.45.1` → `v1.46.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/ssm](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.72.0` → `v1.73.0` |  |  | | [github.com/aws/aws-sdk-go-v2/service/sts](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.44.1` → `v1.45.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)</summary> ### [`v1.43.0`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2025-11-18) [Compare Source](https://redirect.github.com/aws/aws-sdk-go-v2/compare/v1.42.1...v1.43.0) #### Module Highlights - `github.com/aws/aws-sdk-go-v2/service/autoscaling`: [v1.61.0](service/autoscaling/CHANGELOG.md#v1610-2025-11-18) - **Feature**: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. - `github.com/aws/aws-sdk-go-v2/service/backup`: [v1.53.0](service/backup/CHANGELOG.md#v1530-2025-11-18) - **Feature**: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. - `github.com/aws/aws-sdk-go-v2/service/bedrockruntime`: [v1.43.0](service/bedrockruntime/CHANGELOG.md#v1430-2025-11-18) - **Feature**: Amazon Bedrock Runtime Service Tier Support Launch - `github.com/aws/aws-sdk-go-v2/service/cloudformation`: [v1.70.0](service/cloudformation/CHANGELOG.md#v1700-2025-11-18) - **Feature**: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. - `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs`: [v1.59.0](service/cloudwatchlogs/CHANGELOG.md#v1590-2025-11-18) - **Feature**: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. - `github.com/aws/aws-sdk-go-v2/service/connect`: [v1.146.0](service/connect/CHANGELOG.md#v11460-2025-11-18) - **Feature**: This release added support for ring timer configuration for campaign calls. - `github.com/aws/aws-sdk-go-v2/service/ec2`: [v1.271.0](service/ec2/CHANGELOG.md#v12710-2025-11-18) - **Feature**: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises. - `github.com/aws/aws-sdk-go-v2/service/iam`: [v1.51.0](service/iam/CHANGELOG.md#v1510-2025-11-18) - **Feature**: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. - `github.com/aws/aws-sdk-go-v2/service/kafka`: [v1.46.0](service/kafka/CHANGELOG.md#v1460-2025-11-18) - **Feature**: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. - `github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi`: [v1.31.0](service/resourcegroupstaggingapi/CHANGELOG.md#v1310-2025-11-18) - **Feature**: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. - `github.com/aws/aws-sdk-go-v2/service/wafv2`: [v1.70.0](service/wafv2/CHANGELOG.md#v1700-2025-11-18) - **Feature**: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI3NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 81121bf5edc7e050b18950db5d9b71d63072a2a2
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [k8s.io/api](https://redirect.github.com/kubernetes/api) | `v0.36.2` → `v0.36.3` |  |  | | [k8s.io/apimachinery](https://redirect.github.com/kubernetes/apimachinery) | `v0.36.2` → `v0.36.3` |  |  | | [k8s.io/client-go](https://redirect.github.com/kubernetes/client-go) | `v0.36.2` → `v0.36.3` |  |  | | [k8s.io/component-base](https://redirect.github.com/kubernetes/component-base) | `v0.36.2` → `v0.36.3` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>kubernetes/api (k8s.io/api)</summary> ### [`v0.36.3`](https://redirect.github.com/kubernetes/api/compare/v0.36.2...v0.36.3) [Compare Source](https://redirect.github.com/kubernetes/api/compare/v0.36.2...v0.36.3) </details> <details> <summary>kubernetes/apimachinery (k8s.io/apimachinery)</summary> ### [`v0.36.3`](https://redirect.github.com/kubernetes/apimachinery/compare/v0.36.2...v0.36.3) [Compare Source](https://redirect.github.com/kubernetes/apimachinery/compare/v0.36.2...v0.36.3) </details> <details> <summary>kubernetes/client-go (k8s.io/client-go)</summary> ### [`v0.36.3`](https://redirect.github.com/kubernetes/client-go/compare/v0.36.2...v0.36.3) [Compare Source](https://redirect.github.com/kubernetes/client-go/compare/v0.36.2...v0.36.3) </details> <details> <summary>kubernetes/component-base (k8s.io/component-base)</summary> ### [`v0.36.3`](https://redirect.github.com/kubernetes/component-base/compare/v0.36.2...v0.36.3) [Compare Source](https://redirect.github.com/kubernetes/component-base/compare/v0.36.2...v0.36.3) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI3NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 167a2535b3824ee6c083ab78b463d7a1ce82026e
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/onsi/ginkgo/v2](https://redirect.github.com/onsi/ginkgo) | `v2.31.0` → `v2.32.0` |  |  | | [github.com/onsi/gomega](https://redirect.github.com/onsi/gomega) | `v1.42.0` → `v1.42.1` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>onsi/ginkgo (github.com/onsi/ginkgo/v2)</summary> ### [`v2.32.0`](https://redirect.github.com/onsi/ginkgo/releases/tag/v2.32.0) [Compare Source](https://redirect.github.com/onsi/ginkgo/compare/v2.31.0...v2.32.0) #### 2.32.0 `-fd` generate RSpec-style documentation output. Thank [@​woodie](https://redirect.github.com/woodie) ! \--sleep-on-failure pauses a failed spec before teardown. Thanks [@​qinqon](https://redirect.github.com/qinqon) ! </details> <details> <summary>onsi/gomega (github.com/onsi/gomega)</summary> ### [`v1.42.1`](https://redirect.github.com/onsi/gomega/releases/tag/v1.42.1) [Compare Source](https://redirect.github.com/onsi/gomega/compare/v1.42.0...v1.42.1) #### 1.42.1 Bump Dependencies </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI3NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 48e2b0017117851a181add16c194a25b8d29c4d5
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [1password/install-cli-action](https://redirect.github.com/1password/install-cli-action) | action | minor | `v4.0.0` → `v4.1.0` | | [1password/load-secrets-action](https://redirect.github.com/1password/load-secrets-action) | action | minor | `v4.0.1` → `v4.1.1` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | patch | `v7.0.0` → `v7.0.1` | | [actions/setup-go](https://redirect.github.com/actions/setup-go) | action | minor | `v6.4.0` → `v6.5.0` | | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | minor | `v6.4.0` → `v6.5.0` | | [aws-actions/configure-aws-credentials](https://redirect.github.com/aws-actions/configure-aws-credentials) | action | patch | `v6.2.0` → `v6.2.3` | | [azure/setup-helm](https://redirect.github.com/azure/setup-helm) | action | patch | `v5.0.0` → `v5.0.1` | | [docker/login-action](https://redirect.github.com/docker/login-action) | action | minor | `v4.2.0` → `v4.5.0` | | [dorny/paths-filter](https://redirect.github.com/dorny/paths-filter) | action | patch | `v4.0.1` → `v4.0.2` | | [golangci/golangci-lint-action](https://redirect.github.com/golangci/golangci-lint-action) | action | minor | `v9.2.1` → `v9.3.0` | | [goreleaser/goreleaser-action](https://redirect.github.com/goreleaser/goreleaser-action) | action | patch | `v7.2.2` → `v7.2.3` | | [lycheeverse/lychee-action](https://redirect.github.com/lycheeverse/lychee-action) | action | minor | `v2.8.0` → `v2.9.0` | | [marocchino/sticky-pull-request-comment](https://redirect.github.com/marocchino/sticky-pull-request-comment) | action | patch | `v3.0.4` → `v3.0.5` | | [millionco/react-doctor](https://redirect.github.com/millionco/react-doctor) | action | patch | `v2.2.7` → `v2.2.8` | | [slackapi/slack-github-action](https://redirect.github.com/slackapi/slack-github-action) | action | patch | `v3.0.3` → `v3.0.5` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>1password/install-cli-action (1password/install-cli-action)</summary> ### [`v4.1.0`](https://redirect.github.com/1password/install-cli-action/compare/v4.0.0...v4.1.0) [Compare Source](https://redirect.github.com/1password/install-cli-action/compare/v4.0.0...v4.1.0) </details> <details> <summary>1password/load-secrets-action (1password/load-secrets-action)</summary> ### [`v4.1.1`](https://redirect.github.com/1Password/load-secrets-action/releases/tag/v4.1.1) [Compare Source](https://redirect.github.com/1password/load-secrets-action/compare/v4.0.1...v4.1.1) ##### What's Changed ##### Features - Add fallback version resolution so if app-updates.agilebits.com is unavailable, the action now falls back to Docker Hub and then a baked-in pinned version. ([#​173](https://redirect.github.com/1password/load-secrets-action/issues/173) ) ##### Security - Harden CI security: add `StepSecurity` harden runner and pin GitHub Actions to commit SHAs across workflows, restrict workflow permissions, and add Dependabot config. ([#​174](https://redirect.github.com/1password/load-secrets-action/issues/174) ) **Full Changelog**: <1Password/load-secrets-action@v4.0.1...v4.1.1> </details> <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v7.0.1`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.1) - Bump github/codeql-action from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2475](https://redirect.github.com/actions/checkout/pull/2475) - Bump actions/setup-node from 4 to 6 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2477](https://redirect.github.com/actions/checkout/pull/2477) - Bump docker/build-push-action from 6.5.0 to 7.2.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2478](https://redirect.github.com/actions/checkout/pull/2478) - Bump docker/login-action from 3.3.0 to 4.2.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2479](https://redirect.github.com/actions/checkout/pull/2479) - Bump actions/checkout from 6 to 7 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2488](https://redirect.github.com/actions/checkout/pull/2488) - Bump actions/upload-artifact from 4 to 7 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2476](https://redirect.github.com/actions/checkout/pull/2476) - eslint 9 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2474](https://redirect.github.com/actions/checkout/pull/2474) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2499](https://redirect.github.com/actions/checkout/pull/2499) - skip running unsafe pr check if input is default by [@​aiqiaoy](https://redirect.github.com/aiqiaoy) in [#​2518](https://redirect.github.com/actions/checkout/pull/2518) - trim only ascii whitespace for branch by [@​aiqiaoy](https://redirect.github.com/aiqiaoy) in [#​2521](https://redirect.github.com/actions/checkout/pull/2521) - escape values passed to --unset by [@​aiqiaoy](https://redirect.github.com/aiqiaoy) in [#​2530](https://redirect.github.com/actions/checkout/pull/2530) </details> <details> <summary>actions/setup-go (actions/setup-go)</summary> ### [`v6.5.0`](https://redirect.github.com/actions/setup-go/compare/v6.4.0...v6.5.0) [Compare Source](https://redirect.github.com/actions/setup-go/compare/v6.4.0...v6.5.0) </details> <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v6.5.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.5.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v6.4.0...v6.5.0) ##### What's Changed - Update [@​actions/cache](https://redirect.github.com/actions/cache) to 5.1.0 and add security overrides for undici and fast-xml-parser by [@​HarithaVattikuti](https://redirect.github.com/HarithaVattikuti) in [#​1579](https://redirect.github.com/actions/setup-node/pull/1579) **Full Changelog**: <actions/setup-node@v6.4.0...v6.5.0> </details> <details> <summary>aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)</summary> ### [`v6.2.3`](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/6.2.2...v6.2.3) [Compare Source](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/6.2.2...v6.2.3) ### [`v6.2.2`](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/v6.2.1...v6.2.2) [Compare Source](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/6.2.2...6.2.2) ### [`v6.2.2`](https://redirect.github.com/aws-actions/configure-aws-credentials/blob/HEAD/CHANGELOG.md#622-2026-07-07) [Compare Source](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/v6.2.1...6.2.2) ##### Miscellaneous Chores - release 6.2.2 ([d01d678](https://redirect.github.com/aws-actions/configure-aws-credentials/commit/d01d678e65d6d2bd9d5ca7a95d6f07b00e25f2c2)) ### [`v6.2.1`](https://redirect.github.com/aws-actions/configure-aws-credentials/releases/tag/v6.2.1) [Compare Source](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/v6.2.0...v6.2.1) ##### Bug Fixes - enforce allowed-account-ids on all auth paths ([#​1847](https://redirect.github.com/aws-actions/configure-aws-credentials/issues/1847)) ([4d281fb](https://redirect.github.com/aws-actions/configure-aws-credentials/commit/4d281fbc56a82e63c3fc14f2cc22361f34c97493)) </details> <details> <summary>azure/setup-helm (azure/setup-helm)</summary> ### [`v5.0.1`](https://redirect.github.com/azure/setup-helm/compare/v5.0.0...v5.0.1) [Compare Source](https://redirect.github.com/azure/setup-helm/compare/v5...v5.0.1) </details> <details> <summary>docker/login-action (docker/login-action)</summary> ### [`v4.5.0`](https://redirect.github.com/docker/login-action/compare/v4.4.0...v4.5.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v4.4.0...v4.5.0) ### [`v4.4.0`](https://redirect.github.com/docker/login-action/compare/v4.3.0...v4.4.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v4.3.0...v4.4.0) ### [`v4.3.0`](https://redirect.github.com/docker/login-action/releases/tag/v4.3.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v4.2.0...v4.3.0) - Preserve names in esbuild bundle by [@​crazy-max](https://redirect.github.com/crazy-max) in [#​1022](https://redirect.github.com/docker/login-action/pull/1022) - Bump [@​aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr) and [@​aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public) to 3.1076.0 [#​999](https://redirect.github.com/docker/login-action/pull/999) [#​1030](https://redirect.github.com/docker/login-action/pull/1030) - Bump [@​docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#​1004](https://redirect.github.com/docker/login-action/pull/1004) [#​1027](https://redirect.github.com/docker/login-action/pull/1027) - Bump [@​sigstore/core](https://redirect.github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#​1023](https://redirect.github.com/docker/login-action/pull/1023) - Bump [@​sigstore/verify](https://redirect.github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#​1029](https://redirect.github.com/docker/login-action/pull/1029) - Bump http-proxy-agent and https-proxy-agent to 9.1.0 in [#​1017](https://redirect.github.com/docker/login-action/pull/1017) - Bump js-yaml from 4.1.1 to 5.2.0 in [#​1028](https://redirect.github.com/docker/login-action/pull/1028) - Bump sigstore from 4.1.0 to 4.1.1 in [#​1031](https://redirect.github.com/docker/login-action/pull/1031) - Bump tmp from 0.2.5 to 0.2.7 in [#​1002](https://redirect.github.com/docker/login-action/pull/1002) - Bump undici from 6.24.1 to 6.27.0 in [#​1020](https://redirect.github.com/docker/login-action/pull/1020) - Bump vite from 7.3.3 to 7.3.6 in [#​1019](https://redirect.github.com/docker/login-action/pull/1019) **Full Changelog**: <docker/login-action@v4.2.0...v4.3.0> </details> <details> <summary>dorny/paths-filter (dorny/paths-filter)</summary> ### [`v4.0.2`](https://redirect.github.com/dorny/paths-filter/blob/HEAD/CHANGELOG.md#v402) [Compare Source](https://redirect.github.com/dorny/paths-filter/compare/v4.0.1...v4.0.2) - [Work around git dubious ownership errors in container jobs](https://redirect.github.com/dorny/paths-filter/pull/317) - [Use rev-parse instead of branch --show-current for older git compat](https://redirect.github.com/dorny/paths-filter/pull/303) - [Fix warning message](https://redirect.github.com/dorny/paths-filter/pull/282) </details> <details> <summary>golangci/golangci-lint-action (golangci/golangci-lint-action)</summary> ### [`v9.3.0`](https://redirect.github.com/golangci/golangci-lint-action/releases/tag/v9.3.0) [Compare Source](https://redirect.github.com/golangci/golangci-lint-action/compare/v9.2.1...v9.3.0) <!-- Release notes generated using configuration in .github/release.yml at v9.3.0 --> #### What's Changed ##### Changes - feat: add no-run-logs-group as experimental option by [@​ldez](https://redirect.github.com/ldez) in [#​1403](https://redirect.github.com/golangci/golangci-lint-action/pull/1403) ##### Dependencies - build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 in the github-actions group by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1395](https://redirect.github.com/golangci/golangci-lint-action/pull/1395) - build(deps): bump tmp from 0.2.5 to 0.2.6 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1397](https://redirect.github.com/golangci/golangci-lint-action/pull/1397) - build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the github-actions group by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1398](https://redirect.github.com/golangci/golangci-lint-action/pull/1398) - build(deps): bump tmp from 0.2.6 to 0.2.7 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1399](https://redirect.github.com/golangci/golangci-lint-action/pull/1399) - build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1400](https://redirect.github.com/golangci/golangci-lint-action/pull/1400) **Full Changelog**: <golangci/golangci-lint-action@v9.2.1...v9.3.0> </details> <details> <summary>goreleaser/goreleaser-action (goreleaser/goreleaser-action)</summary> ### [`v7.2.3`](https://redirect.github.com/goreleaser/goreleaser-action/releases/tag/v7.2.3) [Compare Source](https://redirect.github.com/goreleaser/goreleaser-action/compare/v7.2.2...v7.2.3) #### What's Changed - ci(deps): bump the actions group with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​563](https://redirect.github.com/goreleaser/goreleaser-action/pull/563) - chore(deps): bump undici from 6.24.1 to 6.27.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​565](https://redirect.github.com/goreleaser/goreleaser-action/pull/565) - build: regenerate dist after undici 6.27.0 bump by [@​caarlos0](https://redirect.github.com/caarlos0) in [#​567](https://redirect.github.com/goreleaser/goreleaser-action/pull/567) - ci: auto-rebuild dist on dependabot PRs by [@​caarlos0](https://redirect.github.com/caarlos0) in [#​568](https://redirect.github.com/goreleaser/goreleaser-action/pull/568) - ci: use a GitHub App token to rebuild dist on dependabot PRs by [@​caarlos0](https://redirect.github.com/caarlos0) in [#​569](https://redirect.github.com/goreleaser/goreleaser-action/pull/569) **Full Changelog**: <goreleaser/goreleaser-action@v7.2.2...v7.2.3> </details> <details> <summary>lycheeverse/lychee-action (lycheeverse/lychee-action)</summary> ### [`v2.9.0`](https://redirect.github.com/lycheeverse/lychee-action/releases/tag/v2.9.0) [Compare Source](https://redirect.github.com/lycheeverse/lychee-action/compare/v2.8.0...v2.9.0) #### Summary This release updates the default lychee version from `v0.23.0` to `v0.24.2`. The main reason for this release is compatibility with the new lychee `0.24.x` release artifacts. Starting with lychee `v0.24.0`, the archive layout changed, and the `lychee` binary may now be packaged inside a subdirectory. `lychee-action` now detects that layout automatically, so users can upgrade without changing their workflows. If you use: ```yaml uses: lycheeverse/lychee-action@v2 ``` you will get the new version once the floating `v2` tag has been updated. If you pin exact versions, update to: ```yaml uses: lycheeverse/lychee-action@v2.9.0 ``` #### What’s new from lychee `v0.24.x` ##### Better diagnostics lychee now reports line and column numbers for detected links. This makes broken link reports easier to act on, especially in larger documentation sites or generated reports. ##### Text fragment checking lychee can now check URL text fragments, such as links containing `#:~:text=...`. This helps catch links that point to a valid page but no longer points to the intended highlighted text. ##### Sitemap support lychee can now read `sitemap.xml` inputs. This is useful for checking published websites or generated documentation sites where the sitemap is the easiest source of URLs to validate. ##### JUnit output lychee now supports JUnit output. This makes it easier to integrate link checking results with CI systems and test reporting tools that understand JUnit XML. ##### Redirect and remap visibility lychee can now show redirects and remaps more clearly. This helps explain why a URL was checked as a different final URL and makes debugging link-checking behavior easier. ##### Multiple config files lychee now supports multiple configuration files and expanded config handling. This is useful for repositories that split documentation, website, or package-specific link-checking settings. ##### Timeout handling lychee can now accept timeouts explicitly. This gives users more control over how strict their link checks should be for flaky or slow endpoints. #### Fixes and reliability improvements ##### Fixed lychee `0.24.x` archive compatibility `lychee-action` now handles the new lychee release archive layout by detecting whether the `lychee` binary is inside a subdirectory. This fixes compatibility with lychee `0.24.x`. ##### More stable installation path The action now installs lychee into `$RUNNER_TEMP/lychee/bin` instead of `$HOME`. This avoids failures on runners where `$HOME` differs between composite action steps. In those environments, the action could add one directory to `PATH` but install the binary somewhere else, causing `lychee: command not found`. ##### Safer automatic lychee version updates The workflow that checks for new lychee releases now guards against `null` release versions before creating update PRs. This prevents invalid automated PRs such as “Update lycheeVersion to null”. ##### Dependency updates - Updated `actions/checkout` from `v6` to `v7` - Updated `actions/cache` from `v5` to `v6` #### Upstream lychee changelog For the full lychee changelog, see: - <https://github.com/lycheeverse/lychee/releases/tag/lychee-v0.24.0> - <https://github.com/lycheeverse/lychee/releases/tag/lychee-v0.24.1> - <https://github.com/lycheeverse/lychee/releases/tag/lychee-v0.24.2> #### What’s Changed - bump default to 0.24.1 and auto-detect lychee bin in subfolder by [@​kaitlyndotmoe](https://redirect.github.com/kaitlyndotmoe) in [#​330](https://redirect.github.com/lycheeverse/lychee-action/pull/330) - fixes [#​322](https://redirect.github.com/lycheeverse/lychee-action/issues/322) check for null by [@​bgermann](https://redirect.github.com/bgermann) in [#​336](https://redirect.github.com/lycheeverse/lychee-action/pull/336) - Install into `$RUNNER_TEMP` instead of `$HOME` by [@​mre](https://redirect.github.com/mre) in [#​338](https://redirect.github.com/lycheeverse/lychee-action/pull/338) - Bump actions/checkout from 6 to 7 by [@​dependabot](https://redirect.github.com/dependabot) in [#​339](https://redirect.github.com/lycheeverse/lychee-action/pull/339) - Bump actions/cache from 5 to 6 by [@​dependabot](https://redirect.github.com/dependabot) in [#​340](https://redirect.github.com/lycheeverse/lychee-action/pull/340) **Full Changelog**: <lycheeverse/lychee-action@v2.8.0...v2.9.0> </details> <details> <summary>marocchino/sticky-pull-request-comment (marocchino/sticky-pull-request-comment)</summary> ### [`v3.0.5`](https://redirect.github.com/marocchino/sticky-pull-request-comment/compare/v3.0.4...v3.0.5) [Compare Source](https://redirect.github.com/marocchino/sticky-pull-request-comment/compare/v3.0.4...v3.0.5) </details> <details> <summary>millionco/react-doctor (millionco/react-doctor)</summary> ### [`v2.2.8`](https://redirect.github.com/millionco/react-doctor/compare/v2.2.7...v2.2.8) [Compare Source](https://redirect.github.com/millionco/react-doctor/compare/v2.2.7...v2.2.8) </details> <details> <summary>slackapi/slack-github-action (slackapi/slack-github-action)</summary> ### [`v3.0.5`](https://redirect.github.com/slackapi/slack-github-action/releases/tag/v3.0.5): Slack GitHub Action v3.0.5 [Compare Source](https://redirect.github.com/slackapi/slack-github-action/compare/v3.0.4...v3.0.5) ##### Patch Changes - [`96fddbe`](https://redirect.github.com/slackapi/slack-github-action/commit/96fddbe): fix: revert multiline yaml parsing indentation change ### [`v3.0.4`](https://redirect.github.com/slackapi/slack-github-action/releases/tag/v3.0.4): Slack GitHub Action v3.0.4 [Compare Source](https://redirect.github.com/slackapi/slack-github-action/compare/v3.0.3...v3.0.4) ##### Patch Changes - [`fa03fe4`](https://redirect.github.com/slackapi/slack-github-action/commit/fa03fe4): refactor: send webhooks with the [`@slack/webhook`](https://docs.slack.dev/tools/node-slack-sdk/webhook) package </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI3NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 407d0f1f27a85ebc79eaf2671388b495308d1ecf
carabasdaniel
approved these changes
Jul 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Copybara Sync - Release v1.18.9
This PR was automatically created by Copybara, syncing changes from the overmindtech/workspace monorepo.
Original author: renovate[bot] (29139614+renovate[bot]@users.noreply.github.com)
What happens when this PR is merged?
tag-on-mergeworkflow will automatically create thev1.18.9tag on mainReview Checklist