Skip to content

tools: bump mise tools#9

Open
pandascience-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/mise-tools
Open

tools: bump mise tools#9
pandascience-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/mise-tools

Conversation

@pandascience-renovate

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change Pending Age Confidence
aqua:anomalyco/opencode patch 1.15.71.15.12 1.17.4 (+7) age confidence
aqua:anthropics/claude-code patch 2.1.1482.1.156 2.1.175 (+16) age confidence
aqua:argoproj/argo-cd patch 3.4.23.4.3 age confidence
aqua:aws/aws-cli patch 2.34.522.34.56 2.35.3 (+11) age confidence
aqua:crossplane/crossplane patch 2.3.02.3.1 2.3.2 age confidence
aqua:hashicorp/terraform patch 1.15.41.15.5 1.15.6 age confidence
aqua:opentofu/opentofu patch 1.12.01.12.1 age confidence
github:always-further/nono minor 0.57.00.59.0 v0.62.0 (+4) age confidence
npm:@fsouza/prettierd minor 0.27.00.28.0 age confidence

Release Notes

anomalyco/opencode (aqua:anomalyco/opencode)

v1.15.12

Compare Source

Core

Improvements
  • ACP integrations can now send prompts, slash commands, and usage updates through acp-next
  • Added WebSocket transport for OpenAI responses on supported channels (set OPENCODE_EXPERIMENTAL_WEBSOCKETS=true)
Bugfixes
  • Enabled adaptive reasoning controls for Anthropic Opus 4.7+ models
  • Allowed colons in passwords (@​neriousy)
  • Sped up warm acp-next model and config switches
  • Improved first-session acp-next startup time
  • Kept OpenAI WebSocket response timeouts active
  • Retried failed OpenAI WebSocket streams before falling back
  • Handled acp-next permission prompts correctly
  • Used the persisted session directory for existing-session requests
  • Forwarded remote workspace request bodies correctly
  • Supported custom base URLs for OpenAI WebSocket responses (@​Tarquinen)

TUI

Improvements
  • Added a workspace management dialog
Bugfixes
  • Kept session navigation working while prompt modes are open
  • Restored the thinking spinner
  • Surfaced subagent retry status
  • Fixed opening editors from non-Git project paths (@​OpeOginni)

Desktop

Improvements
  • Added a setting to switch tab layouts
Bugfixes
  • Improved the home empty state and fixed V2 font usage
  • Fixed tab close buttons not showing reliably

Thank you to 5 community contributors:

v1.15.11

Compare Source

Core

Improvements
  • Added headerTimeout config for provider requests, with a 10s default for default OpenAI setups.
  • Experimental background agents now push updates without polling.
  • You can now set only modalities.input or modalities.output in config. (@​robposch)
  • Remote-backed projects now resolve a stable project identity.
Bugfixes
  • Dynamically added MCP servers now disconnect cleanly when removed.
  • DigitalOcean inference now uses your OAuth token directly instead of creating a MAK. (@​Spherrrical)
  • Config loading now falls back cleanly when user info is unavailable.
  • Fixed Google tool calling after the upstream tool ID regression.
  • Experimental flags can now override the umbrella experimental flag.
  • Resumed sessions no longer continue orphaned interrupted tools. (@​edevil)
  • OpenAI reasoning summaries now render as separate blocks.
  • Updated Google Vertex support for reasoning signatures.
  • The shell tool now advertises your configured timeout to the model.

TUI

Improvements
  • Made the prompt resize with terminal width and added prompt size config. (@​bjschafer)
Bugfixes
  • Accelerated diff viewer scrolling.
  • External editors now open from the worktree directory when available.

Desktop

Improvements
  • Refined the Desktop v2 home screen, prompt, status popover, and session controls.
Bugfixes
  • Fixed V2 titlebar errors when a session sync cache was deleted. (@​Eric-Guo)
  • Web deployments no longer run desktop health checks.
  • Duplicate server connections are now merged in the server list.
  • Stabilized virtualized session timeline interactions.
  • Fixed the white flash when restoring the desktop window.

Extensions

Improvements
  • Added a dispose hook for plugins.
Bugfixes
  • Fixed Codex plugin requests to send the expected session ID header.

Thank you to 7 community contributors:

v1.15.10

Compare Source

Desktop

Bugfixes
  • Restored the legacy production desktop flows for opening projects and starting sessions.

v1.15.9

Compare Source

Core

Improvements
  • Redesigned the diff viewer with a file tree and refreshed layout.
Bugfixes
  • Return to the previous screen when closing the diff viewer.
  • Show clearer errors when a default model is invalid or unavailable.
  • Surface missing PTY session errors instead of failing generically.
  • Improve diff viewer empty states and context handling.
  • Show clearer errors when a skill invocation fails as expected.
  • Show clearer errors when an installation upgrade fails.
  • Show clearer project not found errors from the HTTP API.
  • Return PTY error bodies from the HTTP API.
  • Enable the diff viewer by default.
  • Return MCP server not found errors from the HTTP API.
  • Let MCP OAuth configs set a callback port and include configured scopes in client metadata. (@​sebin)
  • Use working Vertex Anthropic endpoints for us and eu multi-region setups. (@​JPFrancoia)
  • Return session busy error bodies from the HTTP API.
  • Preserve native reasoning continuation metadata across turns.

TUI

Improvements
  • Copy the current worktree path from the command palette.
Bugfixes
  • Refine diff viewer keyboard shortcuts.
  • Restore question prompt key handling.
  • Keep the spinner color aligned with the active agent. (@​OpeOginni)

Desktop

Improvements
  • Move tab navigation into the title bar and tighten session tab shortcuts.
  • Show session status in the title bar.
Bugfixes
  • Extract user codes correctly from callback URLs that contain multiple colons. (@​OpeOginni)
  • Debounce VCS refreshes to reduce session page churn.

Thank you to 4 community contributors:

anthropics/claude-code (aqua:anthropics/claude-code)

v2.1.156

Compare Source

  • Fixed an issue when using Opus 4.8 where thinking blocks were modified, leading to API errors.

v2.1.154

Compare Source

  • Opus 4.8 is here! Now defaults to high effort · /effort xhigh for your hardest tasks
  • Introducing dynamic workflows: ask Claude to create a workflow and it orchestrates work across tens to hundreds of agents in the background, so you can take on larger, more complex tasks. Run /workflows to view your runs
  • Fast mode on Opus 4.8 is now available at a fraction of its previous cost: 2x the standard rate for 2.5x the speed
  • The lean system prompt is now the default for all models except Haiku, Sonnet, and Opus 4.7 and earlier
  • Claude now reserves the multiple-choice question prompt for decisions it genuinely cannot make itself, instead of asking when it already has enough context to proceed
  • /simplify now runs a cleanup-only review (reuse, simplification, efficiency, altitude) and applies the fixes, instead of running the full /code-review --fix bug-hunting review
  • Renamed the /effort slider labels from "Speed"/"Intelligence" to "Faster"/"Smarter" for clarity
  • claude agents: type ! <command> to run a shell command as a background session you can attach to and detach from. Also available as claude --bg --exec '<command>'
  • claude agents: /logout now signs you out instead of being sent to a background session
  • ←← to open the agents view now works on Bedrock, Vertex, Foundry, and with telemetry disabled
  • Claude in Chrome: pick which connected browser to use via /chrome → "Select browser…", or in-chat when a browser action runs with multiple connected
  • Plugins can now declare defaultEnabled: false in plugin.json or a marketplace entry; enable them with /plugin or claude plugin enable. Dependencies of enabled plugins are still enabled automatically
  • The /plugin Discover tab now pins plugins whose relevance signals match the current directory with a "suggested for this directory" annotation
  • Streaming tool execution is now always enabled, including when telemetry is disabled or on Bedrock/Vertex/Foundry (previously behind a feature flag)
  • Stdio MCP server subprocesses now receive CLAUDE_CODE_SESSION_ID and CLAUDECODE=1 in their environment
  • claude mcp list/get now show unapproved .mcp.json servers as ⏸ Pending approval instead of auto-approving and connecting when output is piped
  • /remote-control autocomplete now shows "Disconnect Remote Control" when Remote Control is already active
  • Added Claude Opus 4.8 support and 4.7 → 4.8 migration guidance to the /claude-api skill
  • Deprecated CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE (will be removed on 06/01). To use fast mode on Opus 4.6, switch with /model claude-opus-4-6[1m] and then /fast on
  • Improved the auto-mode classifier's detection of data exfiltration, particularly bulk transfers of repository contents
  • Fixed rm -rf $HOME not being blocked as a dangerous path when HOME has a trailing slash
  • Fixed $TMPDIR resolving to different directories in sandboxed vs unsandboxed Bash commands within the same session
  • Fixed unreadable highlighted-row text in claude agents when the Claude Code theme doesn't match the terminal background
  • Fixed background-agent completion notifications triggering premature "out of context" behavior on some 1M-context models
  • Fixed background-session classifier losing the user's goal when a scheduled /command fires
  • Fixed pinned background sessions respawning every minute after a Claude Code update, causing repeated agent-start notifications and process churn at idle
  • Fixed background sessions stuck at "blocked", "running", or "working" not retiring after the idle grace period
  • Fixed subagents in background sessions bypassing the worktree-isolation guard and writing to the shared checkout
  • Fixed orphaned claude --bg-pty-host processes spinning at 100% CPU after the daemon exits on macOS
  • Fixed number key shortcuts not working for options shown below the divider in option dialogs
  • Fixed worktree.baseRef: "head" resolving to the main checkout's HEAD instead of the current worktree's HEAD when spawning subagents or calling EnterWorktree from inside a linked worktree
  • Fixed a stray leading space on wrapped lines when the previous line ended exactly at the terminal width
  • Fixed intermittent terminal rendering corruption in VS Code by capping the number of distinct colors the thinking spinner produces
  • Fixed plan file names including [Image #N] / [Pasted text #N] placeholders when a plan-mode prompt starts with pasted images or text
  • Fixed a phantom expand/click affordance on colored tool output: short ANSI-colored lines that fit on screen no longer show a "ctrl+o to expand" hint
  • Fixed a single invalid allowedMcpServers/deniedMcpServers entry in managed settings discarding all managed-settings policy; the bad entry is now dropped with a claude doctor warning
  • Fixed API 400 errors on models that don't support the effort parameter when CLAUDE_CODE_ALWAYS_ENABLE_EFFORT is set
  • Windows: Fixed update failures caused by claude.exe being in use showing a generic error instead of telling you to close other sessions and retry
  • Removed the stale "& for background" hint from the shortcuts help panel
  • [VSCode] Auto mode no longer requires the bypass-permissions setting to appear in the mode picker, and a dismissable notice on the new-session screen explains auto mode the first time it's active
  • Fixed the task panel below the prompt showing a stray unselectable "main" row when only a workflow is running
  • Fixed /mcp tools list and tool detail rendering when MCP servers have long or multi-line tool names or long descriptions
  • Fixed the /model picker not showing fast mode pricing on the Default option for API (pay-as-you-go) users when fast mode is on
  • Fixed auto mode incorrectly blocking actions with "could not evaluate this action" when the safety classifier ran out of output tokens while reasoning

v2.1.153

Compare Source

  • Added skipLfs option to github/git plugin marketplace sources to skip Git LFS downloads during clone and update
  • Claude Code now shows a one-time notice when your npm global install can't auto-update; /doctor lists the fixes
  • Status line commands now receive COLUMNS and LINES environment variables so scripts can size output to the terminal width
  • claude agents: autocomplete in the dispatch input now suggests native slash commands and bundled skills, not just project skills
  • claude agents: PR column now shows PR #N for a single PR or N PRs for multiple
  • claude doctor now shows the result of your last update attempt
  • Combined the separate "needs authentication" startup notifications for MCP servers and connectors into a single message
  • macOS: background agents now appear as "Claude Code" in Privacy & Security and keep their permission grants across upgrades
  • Fixed stateful MCP servers without the optional GET SSE stream reconnect-looping on tools/list (regression in v2.1.147)
  • Fixed a regression where a custom API gateway could receive the user's Anthropic OAuth credential instead of the gateway's own token
  • Fixed subagent (Agent tool) frontmatter MCP servers ignoring --strict-mcp-config, --bare, remote mode, enterprise managed MCP config, and managed-settings MCP server allow/deny policies
  • --strict-mcp-config no longer strips inline mcpServers from explicitly-passed agent definitions (--agents / SDK agents), and blocked subagent MCP servers now surface a visible warning
  • Fixed the Windows PowerShell installer reporting "Installation complete!" when installation actually failed
  • Fixed claude update installing the latest version instead of the configured release channel's version for npm installations
  • Fixed excessive memory usage (multiple GB) when resuming a session by transcript file path on machines with many stored sessions
  • Fixed claude agents and claude --bg running on a stale daemon started before binary-takeover support, even after upgrading
  • Fixed a hang where the CLI could fail to exit when stdin was closed without EOF in stream-json mode, leaving a stale session marker behind
  • Fixed malformed file:// links in Claude's responses not being clickable in the terminal
  • Fixed claude --help rendering unwrapped output on terminals narrower than 92 columns
  • Fixed MCP tool progress notifications not rendering in the collapsed tool view
  • Fixed Agent tool with subagent_type: 'claude' running in an undocumented temporary worktree, which could silently discard outputs written to gitignored paths
  • /bg while Claude is responding now continues the response in the background session instead of dropping it
  • Fixed /btw keyboard shortcuts becoming unresponsive in background sessions while a task is running
  • Fixed background sessions writing temp files to $CLAUDE_JOB_DIR triggering a "sensitive file" permission prompt
  • Fixed recovering a background agent whose working directory was deleted showing a truncated stack trace instead of a clear error message
  • Fixed EnterWorktree not being available immediately in background sessions (previously required ToolSearch first)
  • Fixed cmd+k in iTerm2/Terminal.app not repainting attached background sessions
  • Fixed the IME candidate window appearing at the bottom of the screen instead of next to the input caret in attached background sessions on Windows
  • Fixed background-color bleed when attaching to a background agent from 256-color-only terminals after the agent had rendered file diffs
  • Fixed /copy and copy-on-select silently failing to update the system clipboard when attached to a background session inside tmux
  • Fixed opening claude agents with Remote Control enabled leaving zombie session entries on the Code tab after exiting
  • Fixed /rename in background sessions not updating the session banner immediately
  • Fixed Windows update rollback: if a Windows update fails, Claude Code now restores the original executable by copy and tells you how to recover
  • [VSCode] Fixed Claude Code processes not shutting down cleanly when VS Code closed on Windows, causing false "unclean exit" reports and orphaned MCP servers
  • /model now saves your selection as the default for new sessions (matching the IDE). Press s in the picker to switch models for the current session only.
  • If you customized the modelPicker:setAsDefault keybinding, rename it to modelPicker:thisSessionOnly in keybindings.json (the d action was replaced by s)

v2.1.152

Compare Source

  • /code-review --fix now applies review findings to your working tree after the review, surfacing reuse, simplification, and efficiency suggestions; /simplify now invokes /code-review --fix
  • Skills and slash commands can now set disallowed-tools in frontmatter to remove tools from the model while the skill is active
  • Added /reload-skills command to re-scan skill directories without restarting the session
  • SessionStart hooks can now return reloadSkills: true to re-scan skill directories, making skills installed by the hook available in the same session
  • SessionStart hooks can now set the session title via hookSpecificOutput.sessionTitle on startup and resume
  • Added a MessageDisplay hook event that lets hooks transform or hide assistant message text as it is displayed
  • Added pluginSuggestionMarketplaces managed setting: admins can allowlist org marketplaces whose plugins may be suggested via context-aware tips
  • claude plugin marketplace remove now accepts --scope user|project|local for symmetry with marketplace add, install, and uninstall
  • Claude Code now switches to your configured --fallback-model for the rest of the session when the primary model is not found, instead of failing every request
  • Auto mode no longer requires opt-in consent
  • Vim mode: / in NORMAL mode now opens reverse history search (like Ctrl+R), matching bash/zsh vi-mode
  • The /usage breakdown now includes large session files; files are scanned with a streaming read so memory usage stays flat
  • Thinking summaries in the collapsed group now stay readable for at least 3 seconds, render as markdown, and cap at 10 lines (Ctrl+O shows the full thinking)
  • In fullscreen mode, the "Thinking for Ns" indicator now counts up live while the model is thinking, and keeps its value if you interrupt mid-thought
  • Simplified the Workflow tool's inline progress display — live agent counts now show only in the persistent workflow status row below the prompt
  • The post-response timer now shows "Waiting for N background agents/workflows to finish" when backgrounded agents or workflows are still running, and reports the cumulative time once their results are processed
  • Added the session entrypoint as an OpenTelemetry metric attribute (app.entrypoint, opt-in via OTEL_METRICS_INCLUDE_ENTRYPOINT=true)
  • Fixed terminal styling degrading in very long sessions by recycling the renderer's style pool
  • Fixed the sandbox-enabled warning not appearing in condensed startup mode — it now shows in every layout
  • Fixed the loading spinner showing "still thinking"/"almost done thinking" while a tool is running, and reset the thinking status to "thinking" after each tool
  • Fixed focus mode showing a spurious "N messages hidden" count on turns with no hidden activity
  • Fixed clicking a link inside an expanded tool result collapsing the section instead of opening the link
  • Fixed markdown table cell borders inheriting the color of inline code, wrapped continuation lines losing their style, and empty header cells showing a label in the narrow-terminal stacked layout
  • Fixed plugin MCP servers with the same command but different environment variables being incorrectly deduplicated
  • Fixed /doctor reporting "marketplace not found" or "plugin not found" for stale enabledPlugins entries referencing removed marketplaces or dropped plugins
  • Fixed plugins that track a git branch silently no longer receiving updates after the plugin registry was rebuilt
  • Fixed remote MCP servers failing to connect in Claude Code Remote sessions when the egress proxy is enabled
  • Fixed the effort-change confirmation dialog appearing when the conversation has no messages or when switching between effort levels that resolve to the same underlying value
  • Fixed the Agent tool description referencing an agent list that is never delivered when running with --bare or with attachments disabled
  • Fixed a background worker crash in claude agents when accepting a stale permission prompt after a subagent was cancelled
  • Fixed cache_creation_input_tokens reporting as 0 in transcript and result usage when the API reports cache writes only via the nested cache_creation breakdown
  • Fixed the PushNotification tool incorrectly reporting "Mobile push not sent (Remote Control inactive)" in SDK-hosted sessions when Remote Control is enabled
  • Fixed sessions getting stuck after a model or login switch left stale thinking-block signatures in history; now stripped proactively with a retry safety-net

v2.1.150

Compare Source

  • Internal infrastructure improvements (no user-facing changes)

v2.1.149

Compare Source

  • /usage now shows a per-category breakdown of what's driving your limits usage — skills, subagents, plugins, and per-MCP-server cost
  • /diff detail view can now be scrolled with the keyboard (arrows, j/k, PgUp/PgDn, Space, Home/End)
  • Markdown output now renders GFM task list checkboxes (- [ ] todo / - [x] done) instead of plain bullets
  • Enterprise: added the allowAllClaudeAiMcps managed setting to load claude.ai cloud MCP connectors alongside managed-mcp.json
  • Fixed a PowerShell permission bypass: built-in cd functions (cd.., cd\, cd~, X:) changed the working directory undetected, letting a later command read outside the workspace
  • Fixed the sandbox write allowlist in git worktrees covering the entire main repository root instead of only the shared .git directory (with hooks/ and config denied)
  • Fixed PowerShell prefix/wildcard allow rules (e.g. PowerShell(dotnet.exe build *)) not pre-approving native executables and scripts
  • Fixed a permission-analysis gap where the parser trusted stale variable-tracking values for PWD/OLDPWD/DIRSTACK across cd/pushd/popd
  • Fixed find in the Bash tool exhausting the macOS system file/vnode table and crashing the host on large directory trees
  • Fixed the managed-settings approval dialog leaving the terminal frozen after accepting at startup
  • Fixed /ultraplan and remote session creation failing with "Could not capture uncommitted changes" when the working tree has no real changes
  • Fixed otelHeadersHelper failing silently when the script path contains spaces; helper failures are now reported in /doctor and the debug log
  • Fixed the thinking spinner staying amber across tool calls and onto fresh thinking bursts
  • Fixed collapsed Bash output reporting the wrong hidden-line count for outputs with many short lines
  • Fixed slash-command argument-hint clipping trailing typed characters when the hint overflows the input box
  • Fixed argument-hint and progressive arg suggestions not appearing after Tab-completing a skill whose frontmatter name: differs from its directory basename
  • Fixed the status bar showing the user's baseline /effort setting instead of the effort level applied by skill/agent effort: frontmatter
  • Fixed Ctrl+O transcript view freezing at the moment it was opened instead of tailing new messages
  • Fixed editing a recalled prompt-history entry losing the edit when navigating further up/down with arrow keys
  • Fixed /config exit summary reporting phantom changes to auto-compact and theme when toggling unrelated settings
  • Fixed /insights crashing when cached session-meta files are missing optional fields
  • Fixed malformed PowerShell and History tool calls with missing input being misclassified as reads in transcript collapsing
  • Fixed renaming a Remote Control session from claude.ai or the Claude mobile app not updating the local session name for claude --resume
  • Fixed a race where a just-submitted prompt could appear twice in the up-arrow history
  • Fixed tapping the "Jump to bottom" pill in fullscreen mode not dismissing it immediately
  • Improved /feedback reports to include the conversation that happened before context compaction, making issues from earlier in long sessions easier to triage
argoproj/argo-cd (aqua:argoproj/argo-cd)

v3.4.3

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.3/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes
  • f435b0f fix(cli): return immediately from 'app wait' when app is already in desired state (#​12211) (#​27503) (#​27713) (jheyduk)
  • b39fe4f fix(lint): unnecessary nesting (cherry-pick #​27815 for 3.4) (#​27817) (argo-cd-cherry-pick-bot[bot], Michael Crenshaw)
  • 668f2c5 fix(ui): don't prefetch errors (#​27877) (cherry-pick #​27925 for 3.4) (#​28024) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)
  • b796979 fix(ui): return full source for non-hydrator apps in Parameters tab (cherry-pick #​26946 for 3.4) (#​27964) (Gabriel Barreto, himeshp)
  • 5d3f8a0 fix: honor repo depth setting in gitSourceHasChanges and fetch functions (cherry-pick #​27838 for 3.4) (#​28043) (argo-cd-cherry-pick-bot[bot], alexandresavicki, Cursor)
  • 35ed877 fix: nil-check (cherry-pick #​28039 for 3.4) (#​28040) (argo-cd-cherry-pick-bot[bot], Blake Pettersson, Soumya Ghosh Dastidar)
  • b0f1553 fix: prevent InvalidSpecError race in application controller startup (cherry-pick #​27672 for 3.4) (#​27845) (argo-cd-cherry-pick-bot[bot], Michele Baldessari)
  • 4fa0950 fix: truncate labels for deletion hook resources (cherry-pick #​27542 for 3.4) (#​27714) (argo-cd-cherry-pick-bot[bot], Jaewoo Choi)
Dependency updates
Other work
  • ce55c85 fix(gitops-engine): fix nil pointer dereference error in removeWebookMutation() (cherry-pick #​27749 for 3.4) (#​28031) (argo-cd-cherry-pick-bot[bot], Pierre Guinoiseau)

Full Changelog: argoproj/argo-cd@v3.4.2...v3.4.3

aws/aws-cli (aqua:aws/aws-cli)

v2.34.56

Compare Source

v2.34.55

Compare Source

v2.34.54

Compare Source

v2.34.53

Compare Source

crossplane/crossplane (aqua:crossplane/crossplane)

v2.3.1

Compare Source

v2.3.1 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies.

What's Changed

Full Changelog: crossplane/crossplane@v2.3.0...v2.3.1

hashicorp/terraform (aqua:hashicorp/terraform)

v1.15.5

Compare Source

1.15.5 (May 27, 2026)

ENHANCEMENTS:

  • Support for module version evaluating to null (in the context of dynamic module sources) (#​38632)

BUG FIXES:

  • Fix crash on init for modules with empty source (#​38628)
opentofu/opentofu (aqua:opentofu/opentofu)

v1.12.1

Compare Source

SECURITY ADVISORIES:

  • Previous releases in the v1.12 series could be affected by several vulnerabilities:

    • ssh usage through OpenTofu generate hangs or panics.
    • Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

    This is fixed now by (#​4145)

BUG FIXES:

  • Address a bug introduced in v1.12.0 causing excessive memory usage by providers. (#​4126)
  • Address a bug introduced in v1.12.0 where replace_triggered_by was validated incorrectly. (#​4133
  • The Azure key provider will now accept the tenant_id, subscription_id, environment, and metadata_host variables; a bug previously only allowed these to be set through environment variables. (#​4091)

Full Changelog: https://github.com/opentofu/opentofu/blob/v1.12/CHANGELOG.md

always-further/nono (github:always-further/nono)

v0.59.0

Compare Source

What's Changed

New Contributors

Full Changelog: always-further/nono@v0.58.0...v0.59.0

v0.58.0

Compare Source

What's Changed

New Contributors

Full Changelog: always-further/nono@v0.57.0...v0.58.0

fsouza/prettierd (npm:@​fsouza/prettierd)

v0.28.0

Compare Source

Updated dependencies
  • prettier upgraded to ^3.8.3
  • @babel/parser upgraded to ^7.29.7
  • @typescript-eslint/typescript-estree upgraded to ^8.60.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants