chore(deps): update all minor and patch dependencies by renovate[bot] · Pull Request #61 · cloudnativedaysjp/reusable-workflows

renovate · 2025-09-05T04:34:36Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	`v4.3.0` → `v4.4.0`
actions/create-github-app-token	action	minor	`v2.1.1` → `v2.2.2`
actions/github-script	action	minor	`v7.0.1` → `v7.1.0`
actions/setup-go	action	minor	`v5.5.0` → `v5.6.0`
aquaproj/aqua		minor	`v2.53.9` → `v2.62.3`
aquaproj/aqua-installer	action	patch	`v4.0.2` → `v4.0.5`
aquaproj/aqua-registry		minor	`v4.407.0` → `v4.550.0`
aquaproj/aqua-renovate-config		minor	`2.8.2` → `2.13.0`
aws-actions/amazon-ecr-login	action	minor	`v2.0.1` → `v2.1.6`
docker/build-push-action	action	minor	`v6.18.0` → `v6.19.2`
docker/metadata-action	action	minor	`v5.8.0` → `v5.10.0`
docker/setup-buildx-action	action	minor	`v3.11.1` → `v3.12.0`
dorny/paths-filter	action	patch	`v3.0.2` → `v3.0.4`
reviewdog/action-actionlint	action	minor	`v1.66.1` → `v1.73.1`
softprops/action-gh-release	action	minor	`v2.3.2` → `v2.6.2`
suzuki-shunsuke/commit-action	action	minor	`v0.0.10` → `v0.1.2`
suzuki-shunsuke/ghalint		patch	`v1.5.3` → `v1.5.6`
suzuki-shunsuke/pinact-action	action	minor	`v1.0.0` → `v1.4.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/checkout (actions/checkout)

`v4.4.0`

Compare Source

`v4.3.1`

Compare Source

Port v6 cleanup to v4 by @ericsciple in #2305

actions/create-github-app-token (actions/create-github-app-token)

`v2.2.2`

Compare Source

Bug Fixes

deps: bump @actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

`v2.1.4`

Compare Source

Bug Fixes

deps: bump @octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

`v2.1.3`

Compare Source

Bug Fixes

deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

`v2.1.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

actions/github-script (actions/github-script)

`v7.1.0`

Compare Source

What's Changed

Upgrade husky to v9 by @benelan in #482
Add workflow file for publishing releases to immutable action package by @Jcambass in #485
Upgrade IA Publish by @Jcambass in #486
Fix workflow status badges by @joshmgross in #497
Update usage of actions/upload-artifact by @joshmgross in #512
Clear up package name confusion by @joshmgross in #514
Update dependencies with npm audit fix by @joshmgross in #515
Specify that the used script is JavaScript by @timotk in #478
chore: Add Dependabot for NPM and Actions by @nschonni in #472
Define permissions in workflows and update actions by @joshmgross in #531
chore: Add Dependabot for .github/actions/install-dependencies by @nschonni in #532
chore: Remove .vscode settings by @nschonni in #533
ci: Use github/setup-licensed by @nschonni in #473
make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by @iamstarkov in #508
Remove octokit README updates for v7 by @joshmgross in #557
docs: add "exec" usage examples by @neilime in #546
Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by @dependabot[bot] in #563
Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by @dependabot[bot] in #575
Clearly document passing inputs to the script by @joshmgross in #603
Update README.md by @nebuk89 in #610

New Contributors

@benelan made their first contribution in #482
@Jcambass made their first contribution in #485
@timotk made their first contribution in #478
@iamstarkov made their first contribution in #508
@neilime made their first contribution in #546
@nebuk89 made their first contribution in #610

Full Changelog: actions/github-script@v7...v7.1.0

actions/setup-go (actions/setup-go)

`v5.6.0`

Compare Source

What's Changed

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @aparnajyothi-y in #689

Full Changelog: actions/setup-go@v5...v5.6.0

aquaproj/aqua (aquaproj/aqua)

`v2.62.3`

Compare Source

🐛 Bug Fixes

#4840 update-checksum: Consider variants when enumerating package assets

`v2.62.2`

Compare Source

Features

#5085 Update github.com/suzuki-shunsuke/ghtkn-go-sdk v0.4.1 to v0.5.0

https://github.com/suzuki-shunsuke/ghtkn-go-sdk/releases/tag/v0.5.0

`v2.62.1`

Compare Source

🐛 Bug Fixes

#5048 unarchive: expand a pkg file into a non-existent destination
#5051 installpackage: create package directories with the usual permissions

`v2.62.0`

Compare Source

Features

#5024 Embed fallback X.509 roots to support sandboxed environments

Fixes

#5018 More signature related filename extension exclusions @scop
#5025 Extract packages into a temp dir and rename atomically

Documentation

#5023 Add a guide to use aqua with Claude Code's sandbox

`v2.61.0`

Compare Source

Features

#5002 unarchive: Fall back to the system tar for GNU sparse tarballs
#4971 genrate-registry: Prefer .sha512 > .sha256 > .sha1 > .md5 @scop

`v2.60.2`

Compare Source

Improvements

Update ghtkn-go-sdk to v0.4.1

Disable the automatic device flow by default
Support min_expiration and backend.type in the configuration file
Add app names to error messages

🐛 Bug Fixes

#4990 #4992 unarchive: allow benign symlinks that point outside the extraction directory
#4974 help: make the help message consistent

Refactoring

#4958 Remove more GitHub release attestation support remnants @scop

Documentation

#4967 Checksum pattern extraction from first capturing group @scop

`v2.60.1`

Compare Source

⚠️ Security Fixes

d5b02b2 fix(unarchive): prevent archive extraction from writing outside the destination
For more details, please see the security advisory.

⚠️ Release Asset Naming Convention for Cosign Was Changed

*.sig and *.pem files are no longer included in the release assets
*.bundle files are renamed to *.sigstore.json

Fixes

#4938 Remove GitHub Release Attestation verification

`v2.60.0`

Compare Source

Features

#4894 Update ghtkn-go-sdk to v0.3.0 to support new features suche as backends and disabling device flow

New Contributors

@mehm8128 made their first contribution in #4875
@shuuji3 made their first contribution in #4887

`v2.59.1`

Compare Source

Fixes

#4865 gr: don't treat *.minisig as checksum files @scop

`v2.59.0`

Compare Source

Features

#4517 Get checksums from GitHub API Release Asset Digest

`v2.58.1`

Compare Source

Fixes

#4786 checksum: Change the algorithm to sha256 when registry file isn't cached

`v2.58.0`

Compare Source

Features

#4733 #4742 #4755 Add the variants override mechanism with libc detection

https://aquaproj.github.io/docs/reference/registry-config/overrides/#variants

#4667 Refactor GitHub release attestations control naming @scop

[!WARNING]
github_immutable_release was deprecated. Use github_release_attestations instead.

#4634 Get a GitHub access token from AQUA_GITHUB_TOKEN and pass it to gh command if GH_TOKEN and GITHUB_TOKEN aren't set

Document

#4729 Update edit URL in docusaurus configuration @dsychin
#4756 Add musl vs glibc section to registry style guide

`v2.57.2`

Compare Source

Fixes

#4719 Fix jar support
#4722 Map x86-64 to amd64
#4688 Normalize CRLF line endings in checksum file parser

Documentation

#4668 Deprecate signer-workflow @scop
#4663 JSON Schema: signer-workflow string format @scop

`v2.57.1`

Compare Source

🐛 Bug Fixes

#4659 Fix a bug that aqua update-checksum doesn't verify checksum files using tools like Cosign

`v2.57.0`

Compare Source

Features

#4625 Support executing .jar

If aqua which returns a .jar file, aqua executes it by java -jar.
This requires java command.

Fixes

#4629 Re-add env field to log

`v2.56.7`

Compare Source

Bug Fixes

#4585 remove: fix a bug that -i doesn't work

Refactoring

#4527 Refactor Checksum Verification

Document

#4560 Fix typos and invalid links in documents @kangetsu121

Dependency Updates

chore(deps): update dependency anchore/syft to v1.42.1 in #4576
chore(deps): update dependency go to v1.26.0 in #4550
fix(deps): update module golang.org/x/sys to v0.41.0 in #4545
refactor: migrate to math/rand/v2 by @scop in #4547
fix(deps): update module golang.org/x/oauth2 to v0.35.0 in #4541
fix(deps): update module github.com/expr-lang/expr to v1.17.8 in #4564
fix(deps): update module github.com/suzuki-shunsuke/urfave-cli-v3-util to v0.2.2 in #4574
chore(deps): update dependency sigstore/cosign to v3.0.5 in #4578
fix(deps): update module github.com/google/go-github/v82 to v83 in #4568
chore: update aqua-proxy to v1.2.13 in #4588

`v2.56.6`

Compare Source

🐛 Bug Fixes

#4510 Fix a bug that -log-color doesn't work
#4526 aqua gr: Fix a bug that win32 are excluded

`v2.56.5`

Compare Source

🐛 Bug Fixes

#4495 Fix a bug that aqua gr's -cmd option doesn't work

This was a bug of v2.56.2 ~ v2.56.4. #4450

`v2.56.4`

Compare Source

🐛 Bub Fixes

#4484 #4485 Prevent duplicate log field output

`v2.56.3`

Compare Source

🐛 Bug Fixes

#4475 cp: Fix a bug that command arguments are ignored and always all commands are copied
#4476 update-aqua: Fix a bug that a command argument is ignored and always the latest version is installed

Others

#4471 Update sigstore/cosign to v3.0.4

`v2.56.2`

Compare Source

Refactoring

#4448 Replace logrus with slog
#4450 Use urfave/cli/v3 Destination pattern for flag values

`v2.56.1`

Compare Source

Fixes

#4436 gr: Exclude eabihf

`v2.56.0`

Compare Source

Features

#4422 Get pseudo-versions from Go Proxy if no tagged version exists @gizmoguy

Fixes

#4401 Add YAML tags @Shion1305
#4404 Update golangci-lint to v2.7.2, with lint fixes @Shion1305

Dependency Updates

#4402 Update goreleaser to v2.13.1
#4405 Update anchore/syft to v1.38.2
#4406 Update Cosign to v3.0.3
#4420 Update expr to v1.17.7
#4424 Update goccy/go-yaml to v1.19.1

`v2.55.3`

Compare Source

Bug Fixes

#4393 gr: Fix the support of sigstore and sigstore.json file extensions

Refactoring

#4369 Enable tagalign rule in golangci-lint @Shion1305
#4394 chore(deps): migrate to go.yaml.in/yaml @scop

`v2.55.2`

Compare Source

Performance Improvement

#4342 Skip packages that cannot provide the desired exe @refi64

Others

#4312 Update Go to 1.25.4

`v2.55.1`

Compare Source

🐛 Bug Fixes

#4274 #4276 exec: Fix the command name (args[0])

Dependency Updates

#4220 #4266 Update github.com/google/go-github/v74 to v76
#4233 #4251 #4261 Update Go to 1.25.2

Others

Release Cosign Bundle file *.bundle

`v2.55.0`

Compare Source

Features

#4195 #4213 Support verifying the integrity of GitHub Releases

https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/verifying-the-integrity-of-a-release
https://aquaproj.github.io/docs/reference/security/github-immutable-release

`v2.54.1`

Compare Source

🐛 Bug Fixes

#4182 Fix a bug of generate-registry command that arm64 is replaced to arm incorrectly

`v2.54.0`

Compare Source

Features

#4173 ghtkn integration

https://aquaproj.github.io/docs/reference/security/ghtkn/

Now aqua can get a GitHub App User Access Token by ghtkn integration.
Stop risking token leaks - Use secure, short-lived GitHub tokens for local development.

Requirements

The ghtkn integration requires:

Keyring

This feature doesn't depend on ghtkn CLI.

Limitation

The integration requires the user interaction when creating an access token via Device Flow, so it's unavailable in CI.

Set up

For more details, please see https://github.com/suzuki-shunsuke/ghtkn .

Create a GitHub App
Create a configuration file of ghtkn
Set the environment variable AQUA_GHTKN_ENABLED=true

export AQUA_GHTKN_ENABLED=true

Then aqua gets a user access token using ghtkn Go SDK when aqua calls GitHub APIs.

`v2.53.11`

Compare Source

Performance Improvement

#4159 Update github.com/gdamore/tcell/v2 to reduce startup time @refi64

Benchmark

$ git rev-parse HEAD
380a2334230ec9fd22adac3f4e137a4cf47d42b2

$ go version
go version go1.25.1 darwin/arm64

$ hyperfine --version
hyperfine 1.19.0

$ ls dist                         
aqua  aqua-25310

aqua.yaml

registries:
- type: standard
  ref: v4.408.0 # renovate: depName=aquaproj/aqua-registry
packages:
- name: suzuki-shunsuke/mkghtag@v0.1.11
- name: suzuki-shunsuke/cmdx@v2.0.2

$ hyperfine --warmup=20 -N 'dist/aqua'{-25310,}' exec -- mkghtag -version'
Benchmark 1: dist/aqua-25310 exec -- mkghtag -version
  Time (mean ± σ):      24.7 ms ±   1.3 ms    [User: 2.7 ms, System: 1.6 ms]
  Range (min … max):    23.5 ms …  29.6 ms    125 runs
 
  Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
 
Benchmark 2: dist/aqua exec -- mkghtag -version
  Time (mean ± σ):      10.8 ms ±   1.4 ms    [User: 2.4 ms, System: 1.6 ms]
  Range (min … max):     9.2 ms …  17.1 ms    250 runs
 
Summary
  dist/aqua exec -- mkghtag -version ran
    2.30 ± 0.33 times faster than dist/aqua-25310 exec -- mkghtag -version

$ hyperfine --warmup=20 -N 'dist/aqua'{-25310,}' exec -- cmdx -v'         
Benchmark 1: dist/aqua-25310 exec -- cmdx -v
  Time (mean ± σ):      25.7 ms ±   1.3 ms    [User: 3.5 ms, System: 1.7 ms]
  Range (min … max):    24.5 ms …  31.7 ms    120 runs
 
  Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
 
Benchmark 2: dist/aqua exec -- cmdx -v
  Time (mean ± σ):      11.2 ms ±   1.0 ms    [User: 3.1 ms, System: 1.6 ms]
  Range (min … max):    10.2 ms …  15.9 ms    253 runs
 
  Warning: Statistical outliers were detected. Consider re-running this benchmark on a quiet system without any interferences from other programs. It might help to use the '--warmup' or '--prepare' options.
 
Summary
  dist/aqua exec -- cmdx -v ran
    2.30 ± 0.24 times faster than dist/aqua-25310 exec -- cmdx -v

`v2.53.10`

Compare Source

🛡️ Starting from this release, Immutable Release is enabled!

#4147 Update Go to v1.25.1
#4145 Update aqua-proxy to v1.2.12

🐛 Bug Fixes

#4140 Fix error messages

aquaproj/aqua-installer (aquaproj/aqua-installer)

`v4.0.5`

Compare Source

SHA256 Checksum

451028d56959cc738564885b1dbebc2691ea038ffde04e2472e4d486a3591146  aqua-installer

Fixes

#932 Add --force flag @ianlewis

Others

#935 Update the bootstrap version to v2.60.1

`v4.0.4`

Compare Source

Pull Requests aquaproj/aqua-installer@v4.0.3...v4.0.4

SHA256 Checksum

acd21cbb06609dd9a701b0032ba4c21fa37b0e3b5cc4c9d721cc02f25ea33a28  aqua-installer

#886 Configure export-ignore in .gitattributes
#887 Update the bootstrap version of aqua to v2.55.1

`v4.0.3`

Compare Source

🛡️ Starting from this release, Immutable Release is enabled!

SHA256 Checksum

d76bb5c3a23025e9d344aeba04c0a4d4ed6c9fb05e85530c8c3be2ef8e8f3a6a  aqua-installer

#867 Update the bootstrap aqua version to v2.53.10

aquaproj/aqua-registry (aquaproj/aqua-registry)

`v4.550.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.549.0...v4.550.0

🎉 New Packages

#58316 matteo-sung/lockvet - Explain any lockfile change before you merge it — bumps, breaking jumps, new vulns, release ages & deprecations across 30 lockfile formats + SBOMs. CLI, GitHub Action, browser playground, and MCP server so AI assistants can vet PRs too @matteo-sung

Fixes

#58319 CircleCI-Public/circleci-cli: Unset files[].src for >= v1.0.39747-pre @nirojan

`v4.549.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.548.0...v4.549.0

🎉 New Packages

#58263 jolars/arity - Language server, formatter, and linter for R @jolars
#58262 jolars/badness - LaTeX language server, formatter, and linter @jolars
#58261 jolars/fatou - Julia language server, formatter, and linter built in Rust @jolars

Fixes

#58313 smithy-lang/smithy: Use smithy.bat on Windows @cogwirrel
#58314 hadolint/hadolint: Download checksums.sha256 for >= v2.15.0 @iwata

`v4.548.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.547.0...v4.548.0

🎉 New Packages

#58114 babarot/gh-infra - Declarative GitHub infrastructure management via YAML @yashikota
#58257 jolars/panache - Language server, formatter, and linter for Markdown, Quarto, and R Markdown @jolars

`v4.547.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.546.0...v4.547.0

🎉 New Packages

#58105 linnea-bakshi/gha-doctor - Diagnose GitHub Actions: flaky jobs, wasted minutes, slow steps, and anti-patterns @linnea-bakshi
#58069 protonpass/pass-cli - A command-line interface for Proton Pass @scop

Fixes

#58111 nodejs/node: use unofficial-builds to support musl
#58098 Rename terrastruct/d2 to d2lang/d2
#57837 snyk/cli: musl libc variant @scop
#57516 pnpm/pnpm: select musl assets on musl @risu729
#57303 grafana/flint: Add musl Linux assets @zeitlinger

`v4.546.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.545.0...v4.546.0

🎉 New Packages

#58066 asmz/agedir - A CLI tool to bulk-encrypt, decrypt, and place multiple secret files across a project using age encryption and a simple YAML mapping config @asmz
#57836 ProtonDriveApps/sdk/cli - Manage your Proton Drive files from the CLI @scop

Fixes

#58065 supabase/cli: Use checksums.txt for v2.99.0 and later @nkoji21
#57982 haskell/cabal/cabal-install: Support v3.18.1.0 @FranciscoPombal
#57965 itamae-kitchen/mitamae: Support the v2 bare-binary release layout @takumin
#57934 entireio/cli: Support Windows
#57930 Rename ogulcancelik/herdr to herdrdev/herdr

Security

#57968 lintnet/lintnet: GitHub artifact attestations config @scop
#57967 Byron/dua-cli: Upgrade to 2.39.1, add GH artifact attestations config @scop
#57966 hadolint/hadolint: Upgrade to 2.15.0, add GH artifact attestations config @scop

`v4.545.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.544.0...v4.545.0

🎉 New Packages

#57820 grafana/otel-checker checks whether OpenTelemetry instrumentation is implemented correctly @zeitlinger

Fixes

#57882 goss-org/goss: Support 0.4.10 or later @eliebleton-manomano
#57797 Rename fbtransfer/ktfmt to Kotlin/ktfmt

Security

#57873 supernovae-st/nika: SLSA provenance config @scop

`v4.544.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.543.0...v4.544.0

🎉 New Packages

#57715 borghei/ink - Terminal markdown reader with syntax highlighting, inline images, and themes @borghei

Security

#57725 UpCloudLtd/upcloud-cli: Cosign config @scop
#57724 dex4er/tf: GitHub artifact attestations config @scop

`v4.543.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.542.0...v4.543.0

🎉 New Packages

#57669 isksss/isksh - A cross-platform POSIX-oriented shell written in Rust @isksss
#57625 checkstyle/checkstyle - A development tool for checking Java source code against a coding standard @zeitlinger

Fixes

#57660 Rename facebook/ktfmt to fbtransfer/ktfmt

#57570 eth-p/bat-extras: Prevent downgrade @risu729
#57559 nektro/zigmod: Restrict r101 and newer to Linux and macOS @risu729
#57545 uutils/coreutils: Use GNU Windows archive @risu729
#57543 ovh/venom: Support Windows executable extension @risu729
#57525 Avoid pwsh proxy in Windows tests @risu729
#57522 jreleaser/jreleaser: Support v1.25.0 @risu729

#57541 ekristen/aws-nuke: Support sigstore bundles @risu729
#57544 smallstep/cli: Use sigstore bundle for v0.30.0+ @risu729
#57542 jenkins-x/jx: Use sigstore bundle for v3.17.10+ @risu729
#57540 version-fox/vfox: Use sigstore bundle for v1.0.10+ @risu729
#57526 sigstore/gitsign: Use sigstore bundle for v0.15.1+ @risu729
#57523 getsops/sops: Use sigstore bundle for v3.13.0+ @risu729

`v4.542.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.541.0...v4.542.0

🎉 New Packages

#57502 dyoshikawa/rulesync - A Utility CLI for AI Coding Agents @saitota

Fixes

#57592 suzuki-shunsuke/pinact: Support v4.1.1-0 or later

Security

#57469 colbymchenry/codegraph: GitHub artifact attestations config @scop

`v4.541.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.540.0...v4.541.0

🎉 New Packages

#57411 yvgude/lean-ctx - Local-first context intelligence layer for AI agents @TyceHerrman
#57357 envoyproxy/gateway/egctl - Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway @yuriy-yarosh
#57357 envoyproxy/gateway/envoy-gateway - Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway @yuriy-yarosh

Security

#57387 abhinav/git-spice: Update to 0.31.2, add cosign config @scop

`v4.540.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.539.0...v4.540.0

🎉 New Packages

#57296 tedilabs/ota - k9s for Okta — a Go/Bubbletea TUI to inspect Okta admin resources @posquit0
#57300 abhinav/git-spice - Manage stacked Git branches @scop

Fixes

#57356 suzuki-shunsuke/tfcmt: Support tfmct v4.14.16 and resolve warning

Security

#57245 suzuki-shunsuke/tfrstate: SLSA provenance config @scop
#57318 supernovae-st/nika: Update to 0.105.0, add GitHub artifact attestations config @scop

Others

#57328 aqua-registry-updater: Update list of archived projects @scop

`v4.539.0`

Compare Source

Issues | Pull Requests | aquaproj/aqua-registry@v4.538.1...v4.539.0

🎉 New Packages

#57117 kbrdn1/gwm-cli - git worktree manager — Rust CLI + ratatui TUI, native libgit2, per-repo bootstrap via .gwm.toml @kbrdn1
[#57206](https://red

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the dependencies label Sep 5, 2025

renovate Bot force-pushed the renovate/all-minor-and-patch-dependencies branch 7 times, most recently from ddc45c8 to 9027d2e Compare September 11, 2025 01:42

renovate Bot force-pushed the renovate/all-minor-and-patch-dependencies branch 6 times, most recently from edbca37 to af80514 Compare September 19, 2025 12:38

renovate Bot force-pushed the renovate/all-minor-and-patch-dependencies branch 7 times, most recently from a4707dc to 7813e7f Compare September 28, 2025 01:05

renovate Bot force-pushed the renovate/all-minor-and-patch-dependencies branch 5 times, most recently from cb1bf16 to 0984124 Compare October 6, 2025 10:37

renovate Bot force-pushed the renovate/all-minor-and-patch-dependencies branch 4 times, most recently from 02f0220 to bc84f7c Compare October 9, 2025 01:37

renovate Bot force-pushed the renovate/all-minor-and-patch-dependencies branch 5 times, most recently from c17ef70 to fbc2561 Compare November 8, 2025 21:47

renovate Bot force-pushed the renovate/all-minor-and-patch-dependencies branch 4 times, most recently from 5ed3add to 4c7163b Compare November 18, 2025 02:11

renovate Bot force-pushed the renovate/all-minor-and-patch-dependencies branch 7 times, most recently from aafffe2 to 32cde77 Compare November 26, 2025 16:15

renovate Bot force-pushed the renovate/all-minor-and-patch-dependencies branch 7 times, most recently from b7ef631 to e865137 Compare December 4, 2025 03:02

renovate Bot force-pushed the renovate/all-minor-and-patch-dependencies branch 6 times, most recently from 3b6c911 to b2191a7 Compare December 10, 2025 04:43

chore(deps): update all minor and patch dependencies

268eb1c

Navigation Menu

Uh oh!

chore(deps): update all minor and patch dependencies - #61

chore(deps): update all minor and patch dependencies#61
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-and-patch-dependencies

renovate Bot commented Sep 5, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Sep 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

What's Changed

New Contributors

What's Changed

🐛 Bug Fixes

Features

🐛 Bug Fixes

Features

Fixes

Documentation

Features

Improvements

🐛 Bug Fixes

Refactoring

Documentation

⚠️ Security Fixes

⚠️ Release Asset Naming Convention for Cosign Was Changed

Fixes

Features

New Contributors

Fixes

Features

Fixes

Features

Document

Fixes

Documentation

🐛 Bug Fixes

Features

Fixes

Bug Fixes

Refactoring

Document

Dependency Updates

🐛 Bug Fixes

🐛 Bug Fixes

🐛 Bub Fixes

🐛 Bug Fixes

Others

Refactoring

Fixes

Features

Fixes

Dependency Updates

Bug Fixes

Refactoring

Performance Improvement

Others

🐛 Bug Fixes

Dependency Updates

Others

Features

🐛 Bug Fixes

Features

Requirements

Limitation

Set up

Performance Improvement

Benchmark

🐛 Bug Fixes

SHA256 Checksum

Fixes

Others

SHA256 Checksum

SHA256 Checksum

🎉 New Packages

Fixes

🎉 New Packages

Fixes

renovate Bot commented Sep 5, 2025 •

edited

Loading