Skip to content

Comments

fix(deps): update all non-major dependencies#246

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pin
Open

fix(deps): update all non-major dependencies#246
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pin

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 9, 2025

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action patch v5.0.0v5.0.1 age confidence
actions/setup-go action minor v6.0.0v6.2.0 age confidence
alpine stage minor 3.22.23.23.3 age confidence
codecov/codecov-action action patch v5.5.1v5.5.2 age confidence
github.com/go-vela/server require patch v0.27.2v0.27.5 age confidence
github.com/sirupsen/logrus require patch v1.9.3v1.9.4 age confidence
github.com/urfave/cli/v3 require minor v3.5.0v3.6.2 age confidence
github/codeql-action action minor v4.31.2v4.32.4 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/checkout (actions/checkout)

v5.0.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

actions/setup-go (actions/setup-go)

v6.2.0

Compare Source

What's Changed
Enhancements
Dependency updates
New Contributors

Full Changelog: actions/setup-go@v6...v6.2.0

v6.1.0

Compare Source

What's Changed

Enhancements
Dependency updates

New Contributors

Full Changelog: actions/setup-go@v6...v6.1.0

codecov/codecov-action (codecov/codecov-action)

v5.5.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

go-vela/server (github.com/go-vela/server)

v0.27.5

Compare Source

No changes. API spec and JSONSchema were not attached as release assets to the previous release (immutable release). The latter of which powers validation in IDEs and such. This release should address that issue.

Full Changelog: go-vela/server@v0.27.4...v0.27.5

v0.27.4

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.3...v0.27.4

v0.27.3

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.2...v0.27.3

sirupsen/logrus (github.com/sirupsen/logrus)

v1.9.4

Compare Source

Notable changes

  • go.mod: update minimum supported go version to v1.17 #​1460
  • go.mod: bump up dependencies #​1460
  • Touch-up godoc and add "doc" links.
  • README: fix links, grammar, and update examples.
  • Add GNU/Hurd support #​1364
  • Add WASI wasip1 support #​1388
  • Remove uses of deprecated ioutil package #​1472
  • CI: update actions and golangci-lint #​1459
  • CI: remove appveyor, add macOS #​1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

urfave/cli (github.com/urfave/cli/v3)

v3.6.2

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.6.1...v3.6.2

v3.6.1

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.6.0...v3.6.1

v3.6.0

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.5.0...v3.6.0

github/codeql-action (github/codeql-action)

v4.32.4

Compare Source

  • Update default CodeQL bundle version to 2.24.2. #​3493
  • Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when private package registries are configured. This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. #​3473
  • When the CodeQL Action is run with debugging enabled in Default Setup and private package registries are configured, the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. #​3486
  • Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. #​3485
  • Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a nightly CodeQL CLI release instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. #​3484

v4.32.3

Compare Source

  • Added experimental support for testing connections to private package registries. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. #​3466

v4.32.2

Compare Source

v4.32.1

Compare Source

  • A warning is now shown in Default Setup workflow logs if a private package registry is configured using a GitHub Personal Access Token (PAT), but no username is configured. #​3422
  • Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. #​3421

v4.32.0

Compare Source

v4.31.11

Compare Source

  • When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #​3409
  • Improved error handling throughout the CodeQL Action. #​3415
  • Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #​3318
  • The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #​3403

v4.31.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026
  • Update default CodeQL bundle version to 2.23.9. #​3393

See the full CHANGELOG.md for more information.

v4.31.9

Compare Source

v4.31.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025
  • Update default CodeQL bundle version to 2.23.8. #​3354

See the full CHANGELOG.md for more information.

v4.31.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025
  • Update default CodeQL bundle version to 2.23.7. #​3343

See the full CHANGELOG.md for more information.

v4.31.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025
  • Update default CodeQL bundle version to 2.23.6. #​3321

See the full CHANGELOG.md for more information.

v4.31.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025
  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #​3288

See the full CHANGELOG.md for more information.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Indicates a change to dependencies label Nov 9, 2025
@renovate renovate bot requested a review from a team as a code owner November 9, 2025 13:37
@codecov
Copy link

codecov bot commented Nov 9, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 42.65%. Comparing base (af534b9) to head (eba72d7).

❌ Your project check has failed because the head coverage (42.65%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #246   +/-   ##
=======================================
  Coverage   42.65%   42.65%           
=======================================
  Files          10       10           
  Lines         483      483           
=======================================
  Hits          206      206           
  Misses        276      276           
  Partials        1        1           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate bot changed the title fix(deps): update module github.com/urfave/cli/v3 to v3.6.0 fix(deps): update all non-major dependencies Nov 13, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 6 times, most recently from d7f5dca to 4631a10 Compare November 20, 2025 04:41
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 4631a10 to 5f01995 Compare November 24, 2025 10:06
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from df19c18 to c1bb21c Compare December 5, 2025 17:36
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 63aab72 to 33bf2d9 Compare December 15, 2025 18:05
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 7f6a01a to 7b81ee5 Compare December 18, 2025 06:07
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from 7b81ee5 to ba0d98d Compare December 31, 2025 12:55
@renovate
Copy link
Contributor Author

renovate bot commented Dec 31, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.5 -> 1.25.5
golang.org/x/sys v0.35.0 -> v0.39.0
golang.org/x/text v0.28.0 -> v0.32.0

@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from c7322ab to a2930ac Compare January 18, 2026 04:55
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from d2122a6 to 88ec466 Compare January 28, 2026 09:02
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from c251756 to 0340d42 Compare February 5, 2026 22:45
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 1b0eaff to a9e470d Compare February 18, 2026 21:55
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 3d6807b to eba72d7 Compare February 25, 2026 08:10
@renovate renovate bot force-pushed the renovate/all-minor-patch-digest-pin branch from eba72d7 to 3ffb070 Compare February 25, 2026 13:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Indicates a change to dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants