Skip to content

fix(deps): update all non-major dependencies - #73

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#73
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented May 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
ariga.io/atlas v1.2.0 → v1.2.3 age confidence require patch
github.com/99designs/gqlgen v0.17.90 → v0.17.94 age confidence require patch
github.com/evanw/esbuild v0.28.0 → v0.28.1 age confidence require patch
github.com/oschwald/geoip2-golang/v2 v2.1.0 → v2.2.0 age confidence require minor
github.com/oschwald/maxminddb-golang/v2 v2.2.0 → v2.4.1 age confidence require minor
github.com/urfave/cli/v3 v3.8.0 → v3.10.1 age confidence require minor
github.com/vektah/gqlparser/v2 v2.5.33 → v2.5.36 age confidence require patch
modernc.org/sqlite v1.50.0 → v1.55.0 age confidence require minor
postgres (source) 18.3-alpine → 18.4-alpine age confidence minor
recharts 3.8.1 → 3.10.1 age confidence dependencies minor

Release Notes

ariga/atlas (ariga.io/atlas)

v1.2.3

Compare Source

v1.2.2

Compare Source

v1.2.1

Compare Source

99designs/gqlgen (github.com/99designs/gqlgen)

v0.17.94

Compare Source

v0.17.93

Compare Source

What's Changed

Full Changelog: 99designs/gqlgen@v0.17.92...v0.17.93

v0.17.92

Compare Source

What's Changed

New Contributors

Full Changelog: 99designs/gqlgen@v0.17.91...v0.17.92

v0.17.91

Compare Source

What's Changed

New Contributors

Full Changelog: 99designs/gqlgen@v0.17.90...v0.17.91

evanw/esbuild (github.com/evanw/esbuild)

v0.28.1

Compare Source

  • Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

    This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

    Thanks to @​dellalibera for reporting this issue.

  • Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

    The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

    Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

    Thanks to @​sondt99 for reporting this issue.

  • Avoid inlining using and await using declarations (#​4482)

    Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

    // Original code
{
  using x = new Resource()
  x.activate()
}

// Old output (with --minify)
new Resource().activate();

// New output (with --minify)
{using e=new Resource;e.activate()}

  • Fix module evaluation when an error is thrown (#​4461, #​4467)

    If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

  • Fix some edge cases around the new operator (#​4477)

    Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

    // Original code
new (foo()`bar`)()
new (foo()?.bar)()

// Old output
new foo()`bar`();
new (foo())?.bar();

// New output
new (foo())`bar`();
new (foo()?.bar)();

  • Fix renaming of nested var declarations (#​4471)

    This release fixes a bug where var declarations in nested scopes that are hoisted up to module scope were not correctly being renamed during bundling. That could previously lead to name collisions when minification was disabled, which could potentially cause a behavior change. The bug has been fixed so that these hoisted declarations are now considered to be module-level symbols during the name collision avoidance pass.

  • Emit var instead of const for certain TypeScript-only constructs for ES5 (#​4448)

    While esbuild doesn't generally support converting const to var for ES5 due to nested scoping rules (which is currently a build-time error), esbuild previously incorrectly converted TypeScript-only import assignment constructs into a const declaration even when targeting ES5. With this release, esbuild will now use var for this case instead:

    // Original code
import x = require('y')

// Old output (with --target=es5)
const x = require("y");

// New output (with --target=es5)
var x = require("y");
oschwald/geoip2-golang (github.com/oschwald/geoip2-golang/v2)

v2.2.0: 2.2.0

Compare Source

  • This module now targets Go 1.25+.
  • Updated dependencies to latest version. In particular
    github.com/oschwald/maxminddb-golang/v2 was updated to v2.3.0, which
    includes several performance improvements.
oschwald/maxminddb-golang (github.com/oschwald/maxminddb-golang/v2)

v2.4.1: 2.4.1

Compare Source

2.4.1

  • Fixed Result.Decode and Result.DecodePath after Reader.Close so stale
    results return closed-database errors instead of reading invalidated data.
  • Fixed Networks and NetworksWithin with SkipEmptyValues so malformed
    pointer cycles return an error instead of looping indefinitely.
  • Fixed top-level Decode validation so nil and non-pointer values are rejected
    consistently before custom Unmarshaler dispatch.
  • Fixed ReadMap and ReadSlice iterator cleanup so callers that stop
    iteration early can continue decoding from the correct next value.
  • Fixed an oversized data-pointer bounds check so malformed databases return an
    offset error instead of risking a panic on 32-bit builds.
  • Fixed migration and README examples to reference the public mmdbdata.Decoder
    type for custom unmarshaling.

v2.4.0: 2.4.0

Compare Source

  • Reduced reflection decoding time and memory allocations. A city-lookup benchmark
    decoding a geoip2-style result allocates 20% fewer bytes (saving 48 B/op) and
    2 fewer heap allocations per lookup when utilizing pointer-heavy destination
    structures.
  • Optimized map key decoding by adding a fast path for pointer keys, improving
    general lookup throughput by 2.7% to 6.4%.
  • Optimized tree traversal for IPv6 lookups, resulting in an ~8.8% speedup.
  • Fixed pointer-to-pointer chains in malformed database data so decoder entry
    points reject them consistently instead of following invalid chains.
  • Reduced memory mapping overhead and system allocations when invoking OpenBytes
    and NetworksWithin.
  • Cleaned up, simplified, and deduplicated internal decoder and reader structures,
    removing deprecated type assertion workarounds and unused helper functions.

v2.3.0: 2.3.0

Compare Source

  • This module now targets Go 1.25+.
  • Reduced reflection decoding time and heap allocations on the hot path. A
    city-lookup benchmark decoding a geoip2-style result runs about 15% faster
    and allocates about 39% fewer bytes per lookup compared to 2.2.0.
  • Specialized the IPv4 search-tree walk for 24-, 28-, and 32-bit record
    sizes to skip the IPv6 prefix when looking up IPv4 addresses.
  • Decoding into a non-nil slice with sufficient capacity now reuses the
    caller's backing array instead of allocating a fresh slice, matching
    encoding/json semantics. Callers that share slice headers across
    Decode calls should be aware that the backing memory is now mutated.
  • Reduced contention under concurrent lookups by switching the internal string
    cache to a lock-free design.
urfave/cli (github.com/urfave/cli/v3)

v3.10.1

Compare Source

What's Changed
New Contributors

Full Changelog: urfave/cli@v3.10.0...v3.10.1

v3.10.0

Compare Source

What's Changed

Full Changelog: urfave/cli@v3.9.1...v3.10.0

v3.9.1

Compare Source

What's Changed

Full Changelog: urfave/cli@v3.9.0...v3.9.1

v3.9.0

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.8.0...v3.9.0

vektah/gqlparser (github.com/vektah/gqlparser/v2)

v2.5.36

Compare Source

What's Changed

New Contributors

Full Changelog: vektah/gqlparser@v2.5.35...v2.5.36

v2.5.35

Compare Source

What's Changed

Full Changelog: vektah/gqlparser@v2.5.34...v2.5.35

v2.5.34

Compare Source

What's Changed

New Contributors

Full Changelog: vektah/gqlparser@v2.5.33...v2.5.34

cznic/sqlite (modernc.org/sqlite)

v1.55.0

Compare Source

v1.54.0

Compare Source

v1.53.0

Compare Source

v1.52.0

Compare Source

v1.51.0

Compare Source

v1.50.1

Compare Source

recharts/recharts (recharts)

v3.10.1

Compare Source

v3.10.0

Compare Source

What's Changed

Legend position

Legend now supports position and offset props, same as Label and LabeList. This replaces the previous align and verticalAlign for a more convenient positioning, and fixes couple visual bugs too. See https://recharts.github.io/en-US/examples/LegendPosition/

XAxis auto height

XAxis now supports height="auto" prop, similar to YAxis width="auto".

  • feat(XAxis): support height="auto" to size the axis to its tick labels by @​kimlj in #​7570
Other features
Bugfixes

New Contributors

Full Changelog: recharts/recharts@v3.9.2...v3.10.0

v3.9.2

Compare Source

What's Changed

New Contributors

Full Changelog: recharts/recharts@v3.9.1...v3.9.2

v3.9.1

Compare Source

What's Changed

New Contributors

Full Changelog: recharts/recharts@v3.9.0...v3.9.1

v3.9.0

Compare Source

What's Changed

Animations

3.9 comes with new animations! There are several bug fixes and what's best, all animations are now fully customizable.

See the animations guide on https://recharts.github.io/en-US/guide/animations/

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented May 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: server/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 6 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.26.0 -> 1.26.4
golang.org/x/mod v0.34.0 -> v0.38.0
golang.org/x/sync v0.20.0 -> v0.22.0
golang.org/x/sys v0.43.0 -> v0.47.0
golang.org/x/text v0.36.0 -> v0.40.0
golang.org/x/tools v0.43.0 -> v0.48.0
modernc.org/libc v1.72.0 -> v1.74.1

@renovate renovate Bot changed the title fix(deps): update module golang.org/x/crypto to v0.51.0 fix(deps): update all non-major dependencies May 11, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from bfb5aa4 to 160b406 Compare May 18, 2026 01:23
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 8a751b4 to ee20b3e Compare May 22, 2026 01:02
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 3d6824c to 8934768 Compare June 4, 2026 16:07
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 5e07b12 to 287b4d7 Compare June 10, 2026 21:10
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 269de35 to e47ffef Compare June 14, 2026 17:09
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 0256747 to b3f3a13 Compare June 26, 2026 01:56
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 46347c2 to dfb6637 Compare June 28, 2026 13:07
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 392598f to f68867a Compare July 4, 2026 05:58
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 34d7c47 to d904654 Compare July 15, 2026 10:57
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from d82c3e1 to dd55d1c Compare July 20, 2026 21:36
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 381e17f to 2604249 Compare July 28, 2026 07:14
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 2604249 to b49e393 Compare July 29, 2026 15:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants