Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 19, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action major v5.0.0v6.0.2 age confidence
actions/setup-go action minor v6.0.0v6.2.0 age confidence
anchore/sbom-action action minor v0.20.6v0.22.0 age confidence
curlimages/curl minor 8.16.08.18.0 age confidence
defenseunicorns/uds-cli patch v0.27.13v0.27.21 age confidence
defenseunicorns/uds-cli patch 0.27.130.27.21 age confidence
defenseunicorns/uds-common minor v1.20.3v1.23.0 age confidence
github.com/CycloneDX/cyclonedx-go require patch v0.9.2v0.9.3 age confidence
github.com/defenseunicorns/uds-cli require patch v0.27.13v0.27.21 age confidence
github.com/go-git/go-git/v5 require patch v5.16.2v5.16.4 age confidence
github.com/goccy/go-yaml require minor v1.18.0v1.19.2 age confidence
github.com/google/go-github/v69 require major v69.2.0v81.0.0 age confidence
github.com/google/go-github/v73 require major v73.0.0v81.0.0 age confidence
github.com/mikefarah/yq/v4 require minor v4.47.2v4.50.1 age confidence
github.com/olekukonko/tablewriter require minor v1.0.9v1.1.3 age confidence
github.com/spf13/cobra require patch v1.10.1v1.10.2 age confidence
github.com/zarf-dev/zarf require minor v0.61.2v0.70.1 age confidence
github/codeql-action action major v3.30.3v4.31.11 age confidence
gitlab.com/gitlab-org/api/client-go require major v0.146.0v1.17.0 age confidence
go.yaml.in/yaml/v4 require patch v4.0.0-rc.2v4.0.0-rc.4 age confidence
golang.org/x/oauth2 require minor v0.30.0v0.34.0 age confidence
golangci/golangci-lint-action action major v8.0.0v9.2.0 age confidence
mattermost-enterprise-edition (source) patch 2.6.812.6.87 age confidence
mattermost/mattermost-enterprise-edition major 10.12.011.3.0 age confidence
registry1.dso.mil/ironbank/opensource/mattermost/mattermost (source) major 10.12.011.3.0 age confidence
registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal (source) minor 9.69.7 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/checkout (actions/checkout)

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.0.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

actions/setup-go (actions/setup-go)

v6.2.0

Compare Source

What's Changed
Enhancements
Dependency updates
New Contributors

Full Changelog: actions/setup-go@v6...v6.2.0

v6.1.0

Compare Source

What's Changed

Enhancements
Dependency updates

New Contributors

Full Changelog: actions/setup-go@v6...v6.1.0

anchore/sbom-action (anchore/sbom-action)

v0.22.0

Compare Source

Changes in v0.22.0

⬆️ Dependencies

v0.21.1

Compare Source

Changes in v0.21.1

v0.21.0

Compare Source

v0.20.11

Compare Source

Changes in v0.20.11

v0.20.10

Compare Source

Changes in v0.20.10

v0.20.9

Compare Source

Changes in v0.20.9

v0.20.8

Compare Source

Changes in v0.20.8

v0.20.7

Compare Source

Changes in v0.20.7

  • chore(deps): update Syft to v1.34.1 (#​544)
curl/curl-container (curlimages/curl)

v8.18.0

Compare Source

Changed
  • bump to curl 8.18.0
  • bump to alpine 3.23.0

v8.17.0

Changed
  • bump to curl 8.17.0
  • bump to alpine 3.22.2
defenseunicorns/uds-cli (defenseunicorns/uds-cli)

v0.27.21

Compare Source

What's Changed

Full Changelog: defenseunicorns/uds-cli@v0.27.20...v0.27.21

v0.27.20

Compare Source

What's Changed

Full Changelog: defenseunicorns/uds-cli@v0.27.19...v0.27.20

v0.27.19

Compare Source

What's Changed

Full Changelog: defenseunicorns/uds-cli@v0.27.18...v0.27.19

v0.27.18

Compare Source

What's Changed

Full Changelog: defenseunicorns/uds-cli@v0.27.17...v0.27.18

v0.27.17

Compare Source

What's Changed

Full Changelog: defenseunicorns/uds-cli@v0.27.16...v0.27.17

v0.27.16

Compare Source

What's Changed

Full Changelog: defenseunicorns/uds-cli@v0.27.15...v0.27.16

v0.27.15

Compare Source

What's Changed

Full Changelog: defenseunicorns/uds-cli@v0.27.14...v0.27.15

v0.27.14

Compare Source

What's Changed

New Contributors

Full Changelog: defenseunicorns/uds-cli@v0.27.13...v0.27.14

defenseunicorns/uds-common (defenseunicorns/uds-common)

v1.23.0

Compare Source

Features
Miscellaneous
  • deps: update uds common foundation dependencies to v0.59.0 (#​606) (d372815)
  • deps: update uds common support dependencies to v0.27.21 (#​600) (b8c4e14)
  • update codeowners, split core/cli renovates (#​605) (0745909)

v1.22.1

Compare Source

Miscellaneous

v1.22.0

Compare Source

Features
  • add publish of repo's release assets to oci when publishing from uds-packages github org (#​597) (30ed95f)
Miscellaneous
  • deps: update uds common package dependencies to v1.29.4 (#​593) (ec76571)

v1.21.5

Compare Source

Bug Fixes
  • always run verify test and fail if not successful (#​592) (205b0d1)
Miscellaneous

v1.21.4

Compare Source

Miscellaneous

v1.21.3

Compare Source

Miscellaneous
  • deps: update uds common package dependencies to v1.29.3 (#​575) (2684379)
  • deps: update uds common support dependencies to v0.27.17 (#​578) (d74b124)

v1.21.2

Compare Source

Bug Fixes
Miscellaneous

v1.21.1

Compare Source

Miscellaneous

v1.21.0

Compare Source

Features

v1.20.5

Compare Source

Miscellaneous

v1.20.4

Compare Source

Bug Fixes
  • update the keycloak user tasks to fail on curl non 200 response (#​559) (f9481b0)
Miscellaneous
  • added renovate rule for go variables (#​561) (e7a16d5)
  • codeowners: remove deprecated teams, add uds-foundry (#​556) (4c388dc)
  • deps: update package-deps to v1.29.2 (#​564) (97242d2)
  • deps: update uds common support dependencies (core 0.53.1, zarf 0.63.0, uds-cli 0.27.15) (#​557) (e2cd439)
  • expand UDS Package annotation guidance (#​560) (81d8993)
  • update renovate config to pick up npm install in dockerfiles (#​562) (b82dd48)
CycloneDX/cyclonedx-go (github.com/CycloneDX/cyclonedx-go)

v0.9.3

Compare Source

Changelog

Fixes
Building and Packaging
go-git/go-git (github.com/go-git/go-git/v5)

v5.16.4

Compare Source

What's Changed

Full Changelog: go-git/go-git@v5.16.3...v5.16.4

v5.16.3

Compare Source

What's Changed

  • internal: Expand regex to fix build [5.x] by @​baloo in #​1644
  • build: raise timeouts for windows CI tests and disable CIFuzz [5.x] by @​baloo in #​1646
  • plumbing: support commits extra headers, support jujutsu signed commit [5.x] by @​baloo in #​1633

Full Changelog: go-git/go-git@v5.16.2...v5.16.3

goccy/go-yaml (github.com/goccy/go-yaml)

v1.19.2: 1.19.2

Compare Source

What's Changed

New Contributors

Full Changelog: goccy/go-yaml@v1.19.1...v1.19.2

v1.19.1: 1.19.1

Compare Source

What's Changed

Full Changelog: goccy/go-yaml@v1.19.0...v1.19.1

v1.19.0: 1.19.0

Compare Source

What's Changed

New Contributors

Full Changelog: goccy/go-yaml@v1.18.0...v1.19.0

google/go-github (github.com/google/go-github/v69)

v81.0.0

Compare Source

This release contains the following breaking API changes:

  • fix!: Change Org usage report Quantity to float64 (#​3862)
    BREAKING CHANGE: UsageItem.Quantity is now type float64.
  • chore!: Remove PullRequestRuleParameters.AutomaticCopilotCodeReviewEnabled field (#​3866)
    BREAKING CHANGE: PullRequestRuleParameters.AutomaticCopilotCodeReviewEnabled is now removed.
  • feat!: Implement Enterprise SCIM - Provision Groups & Users (#​3852)
    BREAKING CHANGE: SCIMEnterpriseDisplayReference.Ref is now of type *string.
  • fix!: Change copilot_code_review field names to match GitHub API (#​3874)
    BREAKING CHANGE: CopilotCodeReviewRuleParameters.ReviewNewPushes is now ReviewOnPush.
  • fix!: Add support for missing attributes in ProjectsV2 API (#​3888)
    BREAKING CHANGE: AddProjectItemOptions fields have changed types.
  • feat!: Use omitzero for BypassActors to support handling empty arrays (#​3891)
    BREAKING CHANGE: UpdateRepositoryRulesetClearBypassActor, UpdateRepositoryRulesetClearBypassActor, UpdateRulesetClearBypassActor, and UpdateRulesetNoBypassActor have been removed as they are no longer needed.

...and the following additional changes:

  • Bump go-github from v79 to v80 in /scrape (#​3855)
  • feat: Add support for Enterprise Team APIs (#​3861)
  • feat: Implement Enterprise SCIM - Set Groups or Users (#​3858)
  • build(deps): Bump golang.org/x/term from 0.37.0 to 0.38.0 in /example (#​3865)
  • build(deps): Bump golang.org/x/sync from 0.18.0 to 0.19.0 in /tools (#​3864)
  • build(deps): Bump actions/checkout from 6.0.0 to 6.0.1 in the actions group (#​3863)
  • feat: Add advanced_search parameter to SearchOptions (#​3868)
  • feat: Implement Enterprise SCIM - Delete Groups or Users (#​3856)
  • feat: Add support for copilot_code_review rule type (#​3857)
  • feat: Add support for Enterprise Team Members APIs (#​3873)
  • chore: Simplify JSON marshaling for RepositoryRulesetRules (#​3875)
  • feat: Add support for Enterprise Team Organizations APIs (#​3876)
  • docs: Clarify CreateTree semantics and TreeEntry usage (#​3877)
  • docs: Reformulate deprecation notice for Commits field in PushEvent (#​3880)
  • build(deps): Bump actions/cache from 4.3.0 to 5.0.1 in the actions group (#​3883)
  • build(deps): Bump golang.org/x/net from 0.47.0 to 0.48.0 in /scrape (#​3882)
  • build(deps): Bump codecov/codecov-action from 5.5.1 to 5.5.2 (#​3884)
  • build(deps): Bump golang.org/x/crypto from 0.45.0 to 0.46.0 in /example (#​3885)
  • chore: Rename 'opt' to 'opts' in multiple methods (#​3887)
  • feat: Add support for remaining Codespaces APIs (#​3886)
  • feat: Handle omitzero in structfield linter (#​3881)
  • feat: Implement Enterprise SCIM - Get a Group or User (#​3889)
  • feat: Add support for Codespace Machines APIs (#​3890)
  • feat: Add support for URL custom property value type (#​3879)
  • feat: Add UploadReleaseAssetFromRelease convenience helper (#​3851)
  • Update openapi_operations.yaml (#​3895)
  • feat: Add support for Codespaces organizations APIs (#​3892)
  • feat: Add support for Copilot usage metrics reports API (#​3893)
  • feat: GetSignaturesProtectedBranch returns ErrBranchNotProtected when branch is not protected (#​3896)
  • Bump version of go-github to v81.0.0 (#​3899)

v80.0.0

Compare Source

This release contains the following breaking API changes:

  • feat!: Implement Enterprise SCIM - EnterpriseService.ListProvisionedSCIMUsers (#​3839)
    BREAKING CHANGE: ListProvisionedSCIMGroupsEnterpriseOptions optional fields are now pointers.

...and the following additional changes:

  • Bump go-github from v78 to v79 in /scrape (#​3828)
  • build(deps): Bump github.com/PuerkitoBio/goquery from 1.10.3 to 1.11.0 in /scrape (#​3833)
  • build(deps): Bump actions/checkout from 5.0.0 to 5.0.1 in the actions group (#​3834)
  • build(deps): Bump golang.org/x/crypto from 0.43.0 to 0.44.0 in /example ([#​3

Configuration

📅 Schedule: Branch creation - "after 7am and before 9am every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner September 19, 2025 12:05
@renovate renovate bot force-pushed the renovate/uds-package-kit-support-dependencies branch 9 times, most recently from c55dc5f to 5395368 Compare September 26, 2025 19:05
@renovate renovate bot force-pushed the renovate/uds-package-kit-support-dependencies branch 14 times, most recently from ef608b9 to 9f5bc2f Compare October 8, 2025 16:54
@renovate renovate bot force-pushed the renovate/uds-package-kit-support-dependencies branch 5 times, most recently from dc1f5b3 to 8205317 Compare October 13, 2025 10:57
@renovate renovate bot force-pushed the renovate/uds-package-kit-support-dependencies branch 4 times, most recently from 45b8101 to 68cfb49 Compare December 23, 2025 14:36
@renovate
Copy link
Contributor Author

renovate bot commented Dec 23, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 22 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.6 -> 1.25.5
github.com/minio/minlz v1.0.0 -> v1.0.1
github.com/olekukonko/ll v0.0.9 -> v0.1.4-0.20260115111900-9e59c2286df0
golang.org/x/exp v0.0.0-20250808145144-a408d31f581a -> v0.0.0-20251219203646-944ab1f22d93
github.com/ProtonMail/go-crypto v1.2.0 -> v1.3.0
github.com/STARRY-S/zip v0.2.1 -> v0.2.3
github.com/andybalholm/brotli v1.1.2-0.20250424173009-453214e765f3 -> v1.2.0
github.com/bodgit/sevenzip v1.6.0 -> v1.6.1
github.com/cyphar/filepath-securejoin v0.4.1 -> v0.6.1
github.com/go-git/go-billy/v5 v5.6.2 -> v5.7.0
github.com/google/go-querystring v1.1.0 -> v1.2.0
github.com/klauspost/compress v1.18.0 -> v1.18.2
github.com/mattn/go-runewidth v0.0.16 -> v0.0.19
github.com/mholt/archives v0.1.3 -> v0.1.5
github.com/nwaples/rardecode/v2 v2.1.0 -> v2.2.0
github.com/pjbgf/sha1cd v0.3.2 -> v0.4.0
github.com/sorairolake/lzip-go v0.3.5 -> v0.3.8
github.com/ulikunitz/xz v0.5.14 -> v0.5.15
golang.org/x/crypto v0.41.0 -> v0.47.0
golang.org/x/net v0.43.0 -> v0.48.0
golang.org/x/sys v0.35.0 -> v0.40.0
golang.org/x/text v0.28.0 -> v0.33.0
golang.org/x/time v0.12.0 -> v0.14.0

@renovate renovate bot force-pushed the renovate/uds-package-kit-support-dependencies branch 9 times, most recently from 0aa24c9 to 3ad5e4a Compare January 12, 2026 02:27
@renovate renovate bot force-pushed the renovate/uds-package-kit-support-dependencies branch 7 times, most recently from 9de6e34 to 5564e74 Compare January 16, 2026 22:34
@renovate renovate bot force-pushed the renovate/uds-package-kit-support-dependencies branch 7 times, most recently from d65b731 to e6f5f5f Compare January 23, 2026 15:08
| datasource  | package                                                     | from        | to          |
| ----------- | ----------------------------------------------------------- | ----------- | ----------- |
| github-tags | actions/checkout                                            | v5.0.0      | v6.0.2      |
| github-tags | actions/setup-go                                            | v6.0.0      | v6.2.0      |
| github-tags | anchore/sbom-action                                         | v0.20.6     | v0.22.0     |
| docker      | curlimages/curl                                             | 8.16.0      | 8.18.0      |
| github-tags | defenseunicorns/uds-cli                                     | v0.27.13    | v0.27.21    |
| github-tags | defenseunicorns/uds-common                                  | v1.20.3     | v1.23.0     |
| go          | github.com/CycloneDX/cyclonedx-go                           | v0.9.2      | v0.9.3      |
| go          | github.com/defenseunicorns/uds-cli                          | v0.27.13    | v0.27.21    |
| go          | github.com/go-git/go-git/v5                                 | v5.16.2     | v5.16.4     |
| go          | github.com/goccy/go-yaml                                    | v1.18.0     | v1.19.2     |
| go          | github.com/google/go-github/v69                             | v69.2.0     | v81.0.0     |
| go          | github.com/google/go-github/v73                             | v73.0.0     | v81.0.0     |
| go          | github.com/mikefarah/yq/v4                                  | v4.47.2     | v4.50.1     |
| go          | github.com/olekukonko/tablewriter                           | v1.0.9      | v1.1.3      |
| go          | github.com/spf13/cobra                                      | v1.10.1     | v1.10.2     |
| go          | github.com/zarf-dev/zarf                                    | v0.61.2     | v0.70.1     |
| github-tags | github/codeql-action                                        | v3.30.3     | v4.31.11    |
| go          | gitlab.com/gitlab-org/api/client-go                         | v0.146.0    | v1.17.0     |
| go          | go.yaml.in/yaml/v4                                          | v4.0.0-rc.2 | v4.0.0-rc.4 |
| go          | golang.org/x/oauth2                                         | v0.30.0     | v0.34.0     |
| github-tags | golangci/golangci-lint-action                               | v8.0.0      | v9.2.0      |
| helm        | mattermost-enterprise-edition                               | 2.6.81      | 2.6.87      |
| docker      | mattermost/mattermost-enterprise-edition                    | 10.12.0     | 11.3.0      |
| docker      | registry1.dso.mil/ironbank/opensource/mattermost/mattermost | 10.12.0     | 11.3.0      |
| docker      | registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal          | 9.6         | 9.7         |
@renovate renovate bot force-pushed the renovate/uds-package-kit-support-dependencies branch from e6f5f5f to 7b252f8 Compare January 23, 2026 23:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant