Skip to content

fix(deps): update uds package kit support dependencies - #122

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/uds-package-kit-support-dependencies
Open

fix(deps): update uds package kit support dependencies#122
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/uds-package-kit-support-dependencies

Conversation

@renovate

@renovate renovate Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
anchore/sbom-action action patch v0.24.0v0.24.2 age confidence
defenseunicorns/uds-common patch v1.28.0v1.28.1 age confidence
github.com/google/go-github/v90 require major v90.0.0v91.0.0 age confidence
github.com/zarf-dev/zarf require minor v0.84.0v0.85.0 age confidence
github/codeql-action action patch v4.37.8v4.37.9 age confidence
gitlab.com/gitlab-org/api/client-go/v2 require minor v2.58.2v2.62.0 v2.64.0 (+1) age confidence

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.24.2

Compare Source

Added Features
Additional Changes

(Full Changelog)

v0.24.1

Compare Source

defenseunicorns/uds-common (defenseunicorns/uds-common)

v1.28.1

Compare Source

Miscellaneous
google/go-github (github.com/google/go-github/v90)

v91.0.0

Compare Source

This release contains the following breaking API changes:

  • refactor!: Rename EditComment to UpdateComment on PullRequestsService, split review comment request bodies, and pass by value (#​4493)
    BREAKING CHANGE: PullRequestsService.CreateComment now takes CreatePullRequestCommentRequest by value; PullRequestsService.EditComment is now UpdateComment and takes UpdatePullRequestCommentRequest by value.
  • refactor!: Split Key request bodies into CreateDeployKeyRequest, CreateUserKeyRequest and CreateSSHSigningKeyRequest and pass by value (#​4477)
    BREAKING CHANGE: RepositoriesService.CreateKey, UsersService.CreateKey and UsersService.CreateSSHSigningKey now take CreateDeployKeyRequest, CreateUserKeyRequest and CreateSSHSigningKeyRequest by value.
  • refactor!: Pass PendingDeploymentsRequest and ReviewCustomDeploymentProtectionRuleRequest by value (#​4475)
    BREAKING CHANGE: ActionsService.PendingDeployments and ActionsService.ReviewCustomDeploymentProtectionRule now take PendingDeploymentsRequest and ReviewCustomDeploymentProtectionRuleRequest by value.
  • refactor!: Rename EditComment to UpdateComment on IssuesService, pass a new IssueCommentRequest by value, and add missing IssueComment fields (#​4444)
    BREAKING CHANGE: IssuesService.CreateComment now takes IssueCommentRequest by value; IssuesService.EditComment is now UpdateComment and takes IssueCommentRequest by value.
  • refactor!: Rename ImpersonateUserOptions to CreateUserImpersonationRequest and pass by value (#​4462)
    BREAKING CHANGE: AdminService.CreateUserImpersonation now takes CreateUserImpersonationRequest by value instead of *ImpersonateUserOptions.
  • refactor!: Update teams create & update patterns (#​4446)
    BREAKING CHANGE: CreateTeam and UpdateTeamBy* now take new body params by value.
  • refactor!: Rename EditMilestone to UpdateMilestone, split Milestone request bodies into CreateMilestoneRequest and UpdateMilestoneRequest, and pass by value (#​4438)
    BREAKING CHANGE: IssuesService.CreateMilestone now takes a new CreateMilestoneRequest by value; IssuesService.EditMilestone is now UpdateMilestone and takes a new UpdateMilestoneRequest by value.
  • refactor!: Pass UpdatePreReceiveHook request body by value via new UpdatePreReceiveHookRequest (#​4434)
    BREAKING CHANGE: RepositoriesService.UpdatePreReceiveHook now takes a new UpdatePreReceiveHookRequest by value instead of *PreReceiveHook.
  • refactor!: Rename UsersService.Edit to Update, introduce UserUpdateRequest, and pass request by value (#​4433)
    BREAKING CHANGE: UsersService.Edit is now Update and uses a new UserUpdateRequest body value.
  • refactor!: Pass LDAP mapping request bodies by value via new UpdateUserLDAPMappingRequest and UpdateTeamLDAPMappingRequest (#​4432)
    BREAKING CHANGE: AdminService.UpdateUserLDAPMapping and UpdateTeamLDAPMapping now take UpdateUserLDAPMappingRequest and UpdateTeamLDAPMappingRequest (with non-pointer LDAPDN) by value.

...and the following additional changes:

  • chore: Bump version of go-github to v91.0.0 (#​4505)
  • build: Bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /example in the go_modules group across 1 directory (#​4502)
  • feat: Add Copilot code review active user counts to metrics structs (#​4490)
  • feat: Add MergeAsync and GetMergeAsyncResult support (#​4491)
  • feat: Add Copilot app metrics to usage metrics structs (#​4488)
  • fix: Close the original response body on non-2xx responses (#​4486)
  • perf: Reduce allocations in Client.Do response decoding with a buffer pool (#​4494)
  • feat: Require Go 1.26 and use new(expr) for pointer literals (#​4481)
  • build: Bump github.com/getkin/kin-openapi from 0.146.0 to 0.147.0 in /tools (#​4495)
  • feat: Add enterprise Visual Studio subscription licensing APIs (#​4483)
  • feat: Add Copilot AI credits and adoption phase metrics (#​4480)
  • feat: Add Copilot 3rd-party agent metrics (#​4460)
  • chore: Remove stale paramcheck allowlist entries (#​4476)
  • feat: Add tools/list-return-structs (#​4478)
  • feat: Add agent tasks API support (#​4225)
  • chore: Consolidate Dependabot PRs (#​4474)
  • fix: Keep the public toggle on repository visibility rules (#​4455)
  • chore: Bump golang-ci-lint version to v2.13.1 (#​4463)
  • chore: Consolidate Dependabot PRs (#​4454)
  • fix: Adjust argument index for Fprintf in fmtpercentv linter check (#​4443)
  • chore: Consolidate Dependabot PRs (#​4442)
  • chore: Remove stale User entry from the paramcheck allowlist (#​4437)
  • feat: Add enterprise level secret scanning custom patterns support (#​4431)
  • chore: Update openapi_operations.yaml (#​4430)
  • chore: Bump go-github from v89 to v90 in /scrape (#​4429)
zarf-dev/zarf (github.com/zarf-dev/zarf)

v0.85.0

Compare Source

⚠ BREAKING CHANGES
  • publish v1beta1 component configs (#​5219)
Features
Bug Fixes
Refactoring

What's Changed

🚀 Updates

Full Changelog: zarf-dev/zarf@v0.85.0-rc1...v0.85.0

Verifying Init Packages

The init packages in this release are signed with keyless Sigstore signing. Verify with:

amd64:

zarf package verify zarf-init-amd64-v0.85.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.85.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

arm64:

zarf package verify zarf-init-arm64-v0.85.0.tar.zst \
  --certificate-identity "https://github.com/zarf-dev/zarf/.github/workflows/release.yml@refs/tags/v0.85.0" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

See RELEASES.md for details.

github/codeql-action (github/codeql-action)

v4.37.9

Compare Source

gitlab-org/api/client-go (gitlab.com/gitlab-org/api/client-go/v2)

v2.62.0

Compare Source

2.62.0

🚀 Features
🔄 Other Changes

2.62.0 (2026-09-02)

v2.61.0

Compare Source

2.61.0
🚀 Features
  • feat: add Dependency Firewall ecosystems (composer, conan, golang, nuget, cargo, swift, pub) (!3016) by Michael Eddington
🔄 Other Changes
2.61.0 (2026-08-31)
Bug Fixes
  • satisfy golangci-lint 2.13.1 (6ed574d)
Features
  • add Dependency Firewall ecosystems (composer, conan, golang, nuget, cargo, swift, pub) (7cd7b90)

v2.60.0

Compare Source

2.60.0
🚀 Features
2.60.0 (2026-08-26)
Features
  • add Dependency Firewall package evaluation endpoint (b76c955)

v2.59.1

Compare Source

2.59.1
🐛 Bug Fixes
🔄 Other Changes
2.59.1 (2026-08-25)
Bug Fixes
  • issues: avoid panic unmarshalling an Issue with no id (8a1370b)

v2.59.0

Compare Source

Features
  • add Dependency Firewall package evaluation endpoint (b76c955)

2.59.1

🐛 Bug Fixes
🔄 Other Changes

2.59.1 (2026-08-25)

Bug Fixes
  • issues: avoid panic unmarshalling an Issue with no id (8a1370b)

2.59.0

🚀 Features
🔄 Other Changes

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "after 7am and before 9am every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner August 31, 2026 12:38
@renovate
renovate Bot force-pushed the renovate/uds-package-kit-support-dependencies branch 2 times, most recently from 4701dc4 to 27c88dd Compare September 3, 2026 23:30
@renovate

renovate Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package Change
github.com/klauspost/compress v1.19.1 -> v1.19.2

@renovate
renovate Bot force-pushed the renovate/uds-package-kit-support-dependencies branch from 27c88dd to 635d7d8 Compare September 5, 2026 19:03
| datasource  | package                                | from    | to      |
| ----------- | -------------------------------------- | ------- | ------- |
| github-tags | anchore/sbom-action                    | v0.24.0 | v0.24.2 |
| github-tags | defenseunicorns/uds-common             | v1.28.0 | v1.28.1 |
| go          | github.com/google/go-github/v90        | v90.0.0 | v91.0.0 |
| go          | github.com/zarf-dev/zarf               | v0.84.0 | v0.85.0 |
| github-tags | github/codeql-action                   | v4.37.8 | v4.37.9 |
| go          | gitlab.com/gitlab-org/api/client-go/v2 | v2.58.2 | v2.62.0 |
@renovate
renovate Bot force-pushed the renovate/uds-package-kit-support-dependencies branch from 635d7d8 to f55ab66 Compare September 6, 2026 02:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants