fix(deps): update all non-major dependencies - #300
Open
renovate-coveooss[bot] wants to merge 1 commit into
Open
Conversation
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
renovate-coveooss
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
July 1, 2026 08:04
e79e191 to
d1f0551
Compare
renovate-coveooss
Bot
force-pushed
the
renovate/all-minor-patch
branch
3 times, most recently
from
July 14, 2026 10:01
9f63600 to
e0a34d1
Compare
renovate-coveooss
Bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
July 27, 2026 16:01
5e09750 to
92b1cd5
Compare
renovate-coveooss
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
August 5, 2026 13:01
cc87ce8 to
e61a5b5
Compare
renovate-coveooss
Bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
August 17, 2026 09:01
9a19bbe to
b542593
Compare
renovate-coveooss
Bot
force-pushed
the
renovate/all-minor-patch
branch
4 times, most recently
from
August 26, 2026 09:02
e6be11e to
18e7494
Compare
renovate-coveooss
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
August 27, 2026 08:04
18e7494 to
a1a1fd0
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Jira: DT-4929
This PR contains the following updates:
v6.0.2→v6.1.0v6.4.0→v6.5.0v4.2.0→v4.6.0v0.46.2→v0.48.0v0.49.0v1.9.4→v1.10.1v1.10.2v1.11.1→v1.12.11.26→1.27v2.19.4→v2.21.0v2.21.1[skip release]
Release Notes
actions/checkout (actions/checkout)
v6.1.0Compare Source
What's Changed
allow-unsafe-pr-checkoutto v6 by @aiqiaoy in #2500https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change
Full Changelog: actions/checkout@v6.0.3...v6.1.0
v6.0.3Compare Source
actions/setup-go (actions/setup-go)
v6.5.0Compare Source
What's Changed
Dependency update
New Contributors
Full Changelog: actions/setup-go@v6...v6.5.0
docker/login-action (docker/login-action)
v4.6.0Compare Source
Full Changelog: docker/login-action@v4.5.2...v4.6.0
v4.5.2Compare Source
Full Changelog: docker/login-action@v4.5.1...v4.5.2
v4.5.1Compare Source
dhi.ioas Docker Hub OIDC registry by @crazy-max in #1054Full Changelog: docker/login-action@v4.5.0...v4.5.1
v4.5.0Compare Source
Full Changelog: docker/login-action@v4.4.0...v4.5.0
v4.4.0Compare Source
registry-authsecret mask by @crazy-max in #1035Full Changelog: docker/login-action@v4.3.0...v4.4.0
v4.3.0Compare Source
Full Changelog: docker/login-action@v4.2.0...v4.3.0
getsentry/sentry-go (github.com/getsentry/sentry-go)
v0.48.0: 0.48.0Compare Source
Breaking Changes 🛠
New Features ✨
ClientOptions.DataCollectionfor granular control over data collected by automatic instrumentation, replacing the broadSendDefaultPIIswitch.DataCollectioncan independently configure automaticuser.*population, cookies, request/response headers, HTTP bodies, and query parameters. When configured, it is the source of truth andSendDefaultPIIis ignored. by @giortzisg in #1339DataCollectionkeep a best-effort mapping of the previousSendDefaultPIIbehavior. To opt in to the new defaults, pass an emptyDataCollectionand then restrict individual categories as needed.Bug Fixes 🐛
Internal Changes 🔧
Deps
c802283to4013fc6by @dependabot in #1344Other
v0.47.0: 0.47.0Compare Source
Breaking Changes 🛠
transaction_infosource getting set incorrectly across HTTP middleware integrations (http, fasthttp, fiber). Users should now expect traces to properly get grouped with their parameterized path. Transactions in affected integrations may regroup after upgrading. by @giortzisg in #1325otel.NewSentrySpanProcessor. Users should now use thesentryotlp.NewTraceExporterinstead by @giortzisg in #1307sentry.NewLoggeror any supported integration. Also the EnableLogs flag changes to DisableLogs for a global override switch by @giortzisg in #1306ContextifyFramesintegration. The recommended way to add source context is SCM by @giortzisg in #1302New Features ✨
sentrysql.Open(...),sentrysql.OpenDB(...), and wrapped drivers/connectors for custom setups.sentrysql.WithDatabaseName(...)so spans are populated correctly.Internal Changes 🔧
Deps
71588ddtoc802283by @dependabot in #1314Other
sirupsen/logrus (github.com/sirupsen/logrus)
v1.10.1Compare Source
Logrus v1.10.1
This patch release fixes two issues in field formatting and handling:
TextFormattercould panicwhen formatting nil or panicking
errorandfmt.Stringervalues.errorto be used withWithError,WithField, andWithFields.Dependency Changes
Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1
v1.10.0Compare Source
Logrus v1.10.0
This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.
🚀 Performance
Major improvements across
TextFormatter, entry handling, and common logger paths:WithErroris ~40% fasterTextFormatterpaths are up to ~40% fasterTextFormattercases, with the largest reductions in colored outputThe improvements also show up in complete logger paths:
TextFormatteris ~31% faster, with ~24% fewer allocationsJSONFormatteris ~21% faster, with ~10% fewer allocationsJSONFormatteritself remains largely unchanged in runtime performance, with small allocation reductions.🔄
log/sloginteroperabilityv1.10 adds bidirectional interoperability between Logrus and Go's
log/slog:sloghook can forward existing Logrus entries to ansloglogger.hooks/slog.NewHandlerimplementsslog.Handler, allowinglog/slogrecords to use an existing Logrus logger and its hooks, formatter, and output.ReportCalleroption.sloglevels can be mapped to Logrus levels.log/slogwithout requiring an all-at-once transition.This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites can start using an
slogbackend, while newslogcode can continue using an established Logrus setup.🔒 Concurrency & Correctness
MarshalJSONor formatter code.Log,Logf,Logln, andLogFnmethods unexpectedly panicking when called withPanicLevel, contrary to their documented behavior.➕ Added
TextFormatternow automatically enables colors on Windows terminals with ANSI support, matching behavior on other platforms.Entry.Callercan now be set explicitly and is preserved across derived entries. When caller reporting is enabled, Logrus only detects and populates caller information when none was provided, allowing custom caller detection and wrapper-aware logging without adding additional caller configuration APIs.TextFormatternow renders[]byteas raw/quoted strings instead of numeric slices.If you relied on the previous slice-of-ints output, convert explicitly before logging.
TextFormatternow uses dim cyan for debug output and dim white for trace output in colorized TTY output.Entry.HasCalleris now deprecated in favor of checkingEntry.Callerdirectly. A//go:fix inlinedirective was added so existing uses can be updated automatically.MutexWrap, which was unintentionally exposed as public API, is deprecated. It remains available as an alias for compatibility but should not be used directly.v1.10 is primarily a performance, correctness, and interoperability release with no intentional breaking public API changes.
Benchmarks (sampled at 457e372460c7a80ca7c800b51ebeee5362aaa180)
Full Changelog: sirupsen/logrus@v1.9.4...v1.10.0
stretchr/testify (github.com/stretchr/testify)
v1.12.1Compare Source
This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.
What's Changed
go.yaml.in/yaml/v3by @harryzcy in #1935New Contributors
Full Changelog: stretchr/testify@v1.12.0...v1.12.1
What's Changed
go.yaml.in/yaml/v3by @harryzcy in #1935New Contributors
Full Changelog: stretchr/testify@v1.12.0...v1.12.1
v1.12.0Compare Source
What's Changed
Functional Changes
Fixes
Documentation, Build & CI
New Contributors
Full Changelog: stretchr/testify@v1.11.0...v1.12.0
What's Changed
Configuration
📅 Schedule: (in timezone America/Toronto)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.