f99d975b629a27ea086b0f9f83987df8e5e15baa
10
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
  renovate-bot BotandKarl-Einar Bergstrøm
|
548f19b292 |
chore(deps): update actions/checkout action to v7 (#38)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](https://github.com/actions/checkout/compare/v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2518](https://github.com/actions/checkout/pull/2518) - Trim only ascii whitespace for branch by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2521](https://github.com/actions/checkout/pull/2521) - Escape values passed to --unset by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2530](https://github.com/actions/checkout/pull/2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://github.com/actions/checkout/compare/v6.1.0...v7.0.0) - Block checking out fork PR for pull_request_target and workflow_run by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2454](https://github.com/actions/checkout/pull/2454) - Various dependency updates ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](https://github.com/actions/checkout/compare/v6.0.3...v6.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2500](https://github.com/actions/checkout/pull/2500) - backport fixes to releases-v6 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2527](https://github.com/actions/checkout/pull/2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <https://github.com/actions/checkout/compare/v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@​yaananth](https://github.com/yaananth) in [#​2439](https://github.com/actions/checkout/pull/2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@​yaananth](https://github.com/yaananth) in [#​2414](https://github.com/actions/checkout/pull/2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@​ericsciple](https://github.com/ericsciple) in [#​2356](https://github.com/actions/checkout/pull/2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](https://github.com/actions/checkout/compare/v6.0.0...v6.0.1) - Add worktree support for persist-credentials includeIf by [@​ericsciple](https://github.com/ericsciple) in [#​2327](https://github.com/actions/checkout/pull/2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](https://github.com/actions/checkout/compare/v5.1.0...v6.0.0) - Persist creds to a separate file by [@​ericsciple](https://github.com/ericsciple) in [#​2286](https://github.com/actions/checkout/pull/2286) - Update README to include Node.js 24 support details and requirements by [@​salmanmkc](https://github.com/salmanmkc) in [#​2248](https://github.com/actions/checkout/pull/2248) ### [`v5.1.0`](https://github.com/actions/checkout/releases/tag/v5.1.0) [Compare Source](https://github.com/actions/checkout/compare/v5.0.1...v5.1.0) ##### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2501](https://github.com/actions/checkout/pull/2501) - backport fixes to releases-v5 by [@​aiqiaoy](https://github.com/aiqiaoy) in [#​2523](https://github.com/actions/checkout/pull/2523) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <https://github.com/actions/checkout/compare/v5.0.1...v5.1.0> ### [`v5.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v501) [Compare Source](https://github.com/actions/checkout/compare/v5.0.0...v5.0.1) - Port v6 cleanup to v5 by [@​ericsciple](https://github.com/ericsciple) in [#​2301](https://github.com/actions/checkout/pull/2301) ### [`v5.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v500) [Compare Source](https://github.com/actions/checkout/compare/v4.4.0...v5.0.0) - Update actions checkout to use node 24 by [@​salmanmkc](https://github.com/salmanmkc) in [#​2226](https://github.com/actions/checkout/pull/2226) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --------- Co-authored-by: Karl-Einar Bergstrøm <1+keb@noreply.localhost> Reviewed-on: #38 Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
renovate-bot BotandKarl-Einar Bergstrøm
|
51beea9d78 |
chore(deps): update goreleaser/goreleaser-action action to v7 (#41)
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | major | `v6` → `v7` | `v7.3.0` | --- ### Release Notes <details> <summary>goreleaser/goreleaser-action</summary> ### [`v7.2.3`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.3) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.2...v7.2.3) #### What's Changed - ci(deps): bump the actions group with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​563](https://github.com/goreleaser/goreleaser-action/pull/563) - chore(deps): bump undici from 6.24.1 to 6.27.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​565](https://github.com/goreleaser/goreleaser-action/pull/565) - build: regenerate dist after undici 6.27.0 bump by [@​caarlos0](https://github.com/caarlos0) in [#​567](https://github.com/goreleaser/goreleaser-action/pull/567) - ci: auto-rebuild dist on dependabot PRs by [@​caarlos0](https://github.com/caarlos0) in [#​568](https://github.com/goreleaser/goreleaser-action/pull/568) - ci: use a GitHub App token to rebuild dist on dependabot PRs by [@​caarlos0](https://github.com/caarlos0) in [#​569](https://github.com/goreleaser/goreleaser-action/pull/569) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7.2.2...v7.2.3> ### [`v7.2.2`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.2) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.1...v7.2.2) #### What's Changed - ci(deps): bump the actions group with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​560](https://github.com/goreleaser/goreleaser-action/pull/560) - fix: nightly resolution to select newest published release by [@​Copilot](https://github.com/Copilot) in [#​562](https://github.com/goreleaser/goreleaser-action/pull/562) #### New Contributors - [@​Copilot](https://github.com/Copilot) made their first contribution in [#​562](https://github.com/goreleaser/goreleaser-action/pull/562) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7...v7.2.2> ### [`v7.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.1) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1) This fully removes the usage of the old `nightly` moving tag. **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1> ### [`v7.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.1.0...v7.2.0) #### What's Changed - test: cover install across release eras by [@​caarlos0](https://github.com/caarlos0) in [#​555](https://github.com/goreleaser/goreleaser-action/pull/555) - feat: add `version-file` input by [@​caarlos0](https://github.com/caarlos0) in [#​556](https://github.com/goreleaser/goreleaser-action/pull/556) - feat: resolve nightly to latest vX.Y.Z-<sha>-nightly release by [@​caarlos0](https://github.com/caarlos0) in [#​558](https://github.com/goreleaser/goreleaser-action/pull/558) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7...v7.2.0> ### [`v7.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.1.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.0.0...v7.1.0) #### What's Changed - feat: verify release checksum and cosign signature by [@​caarlos0](https://github.com/caarlos0) in [#​550](https://github.com/goreleaser/goreleaser-action/pull/550) - docs: document cosign verification in README by [@​caarlos0](https://github.com/caarlos0) in [#​553](https://github.com/goreleaser/goreleaser-action/pull/553) - docs: Upgrade import GPG action version by [@​flecno](https://github.com/flecno) in [#​547](https://github.com/goreleaser/goreleaser-action/pull/547) - ci: drop docker-bake in favor of plain npm by [@​caarlos0](https://github.com/caarlos0) in [#​551](https://github.com/goreleaser/goreleaser-action/pull/551) - ci: add release-major-tag workflow by [@​caarlos0](https://github.com/caarlos0) in [#​552](https://github.com/goreleaser/goreleaser-action/pull/552) - ci: drop pre-cosign-v3 goreleaser versions from tests by [@​caarlos0](https://github.com/caarlos0) in [#​554](https://github.com/goreleaser/goreleaser-action/pull/554) - ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​543](https://github.com/goreleaser/goreleaser-action/pull/543) - ci(deps): bump the actions group with 5 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​546](https://github.com/goreleaser/goreleaser-action/pull/546) - chore(deps): bump undici from 6.23.0 to 6.24.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​545](https://github.com/goreleaser/goreleaser-action/pull/545) #### New Contributors - [@​flecno](https://github.com/flecno) made their first contribution in [#​547](https://github.com/goreleaser/goreleaser-action/pull/547) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7...v7.1.0> ### [`v7.0.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.0.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v6.4.0...v7.0.0) #### What's Changed - feat!: node 24, update deps, rm yarn, ESM by [@​caarlos0](https://github.com/caarlos0) in [#​533](https://github.com/goreleaser/goreleaser-action/pull/533) - sec: pin github action versions by [@​caarlos0](https://github.com/caarlos0) in [#​514](https://github.com/goreleaser/goreleaser-action/pull/514) - docs: Upgrade checkout GitHub Action in README.md by [@​dunglas](https://github.com/dunglas) in [#​507](https://github.com/goreleaser/goreleaser-action/pull/507) - chore(deps): bump actions/checkout from 4 to 5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​504](https://github.com/goreleaser/goreleaser-action/pull/504) - ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​517](https://github.com/goreleaser/goreleaser-action/pull/517) - ci(deps): bump the actions group with 2 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​523](https://github.com/goreleaser/goreleaser-action/pull/523) - ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​526](https://github.com/goreleaser/goreleaser-action/pull/526) - ci(deps): bump the actions group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​532](https://github.com/goreleaser/goreleaser-action/pull/532) - ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​534](https://github.com/goreleaser/goreleaser-action/pull/534) - chore(deps): bump the npm group across 1 directory with 4 updates by [@​dependabot](https://github.com/dependabot)\[bot] in [#​536](https://github.com/goreleaser/goreleaser-action/pull/536) - chore(deps): bump [@​actions/http-client](https://github.com/actions/http-client) from 3.0.2 to 4.0.0 in the npm group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​537](https://github.com/goreleaser/goreleaser-action/pull/537) - ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​538](https://github.com/goreleaser/goreleaser-action/pull/538) - chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by [@​dependabot](https://github.com/dependabot)\[bot] in [#​539](https://github.com/goreleaser/goreleaser-action/pull/539) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> --------- Co-authored-by: Karl-Einar Bergstrøm <1+keb@noreply.localhost> Reviewed-on: #41 Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
renovate-bot Bot
|
00924a4a1e |
chore(deps): update module google.golang.org/grpc to v1.83.2 [security] (#48)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
renovate-bot Bot
|
3013d622e4 |
chore(deps): update security fixes [security] (#47)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
renovate-bot Bot
|
f19ac7845a |
chore(deps): update module go.opentelemetry.io/otel to v1.42.0 [security] (#46)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
renovate-bot Bot
|
915d8bf3bd |
chore(deps): update module go.opentelemetry.io/otel to v1.41.0 [security] (#42)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
renovate-bot Bot
|
f36909e9d9 | chore(deps): update actions/setup-go action to v7 | ||
|
renovate-bot Bot
|
392ea41865 |
chore(deps): update non-major (#37)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
renovate-bot Bot
|
da890a92cb |
chore(deps): update non-major (#36)
Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |
||
|
renovate-bot Bot
|
595bdaad43 |
chore: Configure Renovate (#32)
Welcome to [Renovate](https://github.com/renovatebot/renovate)! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin. 🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged. 📚 See our [Reading List](https://docs.renovatebot.com/reading-list/) for relevant documentation you may be interested in reading. 🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to `renovate.json` in this branch. Renovate will update the Pull Request description the next time it runs. --- ### Detected Package Files * `.gitea/workflows/ci.yml` (github-actions) * `.gitea/workflows/pr-title.yml` (github-actions) * `.gitea/workflows/release.yml` (github-actions) * `go.mod` (gomod) * `renovate.json` (renovate-config) * `.gitea/workflows/release.yml` (regex) * `.gitea/workflows/ci.yml` (regex) ### Configuration Summary Based on the default config's presets, Renovate will: - Start dependency updates only once this onboarding PR is merged - Enable Renovate Dependency Dashboard creation. - Use semantic commit type `fix` for dependencies and `chore` for all others if semantic commits are in use. - Ignore `node_modules`, `bower_components`, `vendor` and various test/tests (except for nuget) directories. - Group known monorepo packages together. - Use curated list of recommended non-monorepo package groupings. - Show only the Age and Confidence Merge Confidence badges for pull requests. - Apply crowd-sourced package replacement rules. - Apply crowd-sourced workarounds for known problems with packages. - Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff - Correctly link to the source code for golang.org/x packages - Link to pkg.go.dev/... for golang.org/x packages' title - Provide a link to octochangelog's improved breakdown for Renovate's changelogs - Use semantic prefixes for commit messages and PR titles. - If Renovate detects semantic commits, it will use semantic commit type `chore` for all commits. - The shared Renovate policy: repos extend it with local>keb/renovate. - Run Renovate on following schedule: before 6am on monday --- ### What to Expect With your current configuration, Renovate will create 3 Pull Requests: <details> <summary>chore(deps): update 0.x minor</summary> - Schedule: ["before 6am on monday"] - Branch name: `renovate/0.x-minor` - Merge into: `main` - Upgrade [golang.org/x/mod](https://go.googlesource.com/mod) to `v0.41.0` - Upgrade [golang.org/x/term](https://go.googlesource.com/term) to `v0.47.0` </details> <details> <summary>chore(deps): update non-major</summary> - Schedule: ["before 6am on monday"] - Branch name: `renovate/non-major` - Merge into: `main` - Upgrade [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) to `v2.1.0` - Upgrade [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) to `v1.23.3` - Upgrade [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) to `v0.11.9` - Upgrade [gopkg.in/ini.v1](https://gopkg.in/ini.v1) to `v1.67.3` </details> <details> <summary>chore(deps): update azure-sdk-for-go monorepo to v2</summary> - Schedule: ["before 6am on monday"] - Branch name: `renovate/major-azure-sdk-for-go-monorepo` - Merge into: `main` - Upgrade [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault](https://github.com/Azure/azure-sdk-for-go) to `v2.1.0` - Upgrade [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions](https://github.com/Azure/azure-sdk-for-go) to `v2.0.0` </details> 🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for `prHourlyLimit`](https://docs.renovatebot.com/configuration-options/#prhourlylimit) for details. --- > > ⚠️ **Warning** > > Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR. > > - `Could not determine new digest for update (go package github.com/charmbracelet/x/exp/golden)` > > Files affected: `go.mod` --- ❓ Got questions? Check out Renovate's [Docs](https://docs.renovatebot.com/), particularly the Getting Started section. If you need any further assistance then you can also [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-config-hash:42b8771e0e792cb00b73533dcfa07b6c34d2c882632e57c0db725713586c855e--> Reviewed-on: #32 Co-authored-by: Renovate Bot <renovate-bot@noreply.git.kebcloud.no> |