Skip to content

Update minor-patch dependencies grouped by manager - #1667

Open
gati-app[bot] wants to merge 1 commit into
mainfrom
github-actions-dependencies
Open

Update minor-patch dependencies grouped by manager#1667
gati-app[bot] wants to merge 1 commit into
mainfrom
github-actions-dependencies

Conversation

@gati-app

@gati-app gati-app Bot commented Sep 23, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v7.0.0 → v7.0.1
actions/checkout action minor v6.0.2 → v6.1.0
actions/download-artifact action minor v4.1.8 → v4.3.0
aws-actions/amazon-ecr-login action patch v2.1.2 → v2.1.7
aws-actions/configure-aws-credentials action minor v6.0.0 → v6.3.0
aws-actions/configure-aws-credentials action minor v6.1.0 → v6.3.0
aws-actions/configure-aws-credentials action minor v6.2.4 → v6.3.0
azure/setup-helm action patch v5.0.0 → v5.0.1
azure/setup-helm action minor v4.2.0 → v4.3.1
benchmark-action/github-action-benchmark action minor v1.20.3 → v1.22.2
buildx uses-with minor v0.35.0 → v0.37.1
buildx uses-with minor v0.33.0 → v0.37.1
cardinalby/export-env-action action patch 2.2.2 → 2.2.3
docker/build-push-action action minor v7.3.0 → v7.4.0
docker/login-action action minor v4.1.0 → v4.6.0
docker/setup-buildx-action action minor v3.6.1 → v3.12.0
docker/setup-buildx-action action minor v4.3.0 → v4.4.1
docker/setup-buildx-action action minor v4.0.0 → v4.4.1
docker/setup-qemu-action action minor v3.2.0 → v3.7.0
foundry-rs/foundry-toolchain action minor v1.2.0 → v1.9.1
go uses-with minor 1.21.3 → 1.27.1
go uses-with minor 1.24.0 → 1.27.1
golangci/golangci-lint-action action minor v9.2.0 → v9.3.0
google-github-actions/auth action patch v2.1.2 → v2.1.13
goreleaser/goreleaser-action action minor v6.2.1 → v6.4.0
goto-bus-stop/setup-zig action patch v2.2.0 → v2.2.1
helm uses-with minor v3.13.1 → v3.22.0
helm uses-with minor v3.12.0 → v3.22.0
helm/chart-testing-action action minor v2.6.1 → v2.8.0
hrishikesh-kadam/setup-lcov action minor v1.0.0 → v1.1.0
mikefarah/yq action minor v4.44.2 → v4.53.6
peter-evans/create-pull-request action patch v7.0.8 → v7.0.11
planetscale/ghcommit-action action patch v0.2.20 → v0.2.22
python uses-with minor 3.11 → 3.14
python uses-with minor 3.8 → 3.14
renovatebot/github-action action minor v40.2.4 → v40.3.6
reviewdog/action-actionlint action minor v1.73.0 → v1.76.3
richardsimko/update-tag action minor v1.0.11 → v1.1.6
runs-on/action action minor v2.1.0 → v2.3.1
sigstore/cosign uses-with minor v3.0.2 → v3.1.3
sigstore/cosign uses-with patch v2.6.1 → v2.6.5
sigstore/cosign-installer action minor v4.0.0 → v4.1.2
sigstore/cosign-installer action patch v4.1.1 → v4.1.2
slackapi/slack-github-action action minor v1.26.0 → v1.27.1
slackapi/slack-github-action action minor v1.25.0 → v1.27.1
slackapi/slack-github-action action patch v3.0.1 → v3.0.5
smartcontractkit/chainlink-github-actions action patch v2.3.25 → v2.3.32
smartcontractkit/chainlink-github-actions action patch v2.3.19 → v2.3.32
sonarsource/sonarqube-scan-action action minor v7.0.0 → v7.2.1
svenstaro/upload-release-action action minor 2.9.0 → 2.11.5
tailscale/github-action action minor v4.1.2 → v4.2.0
trunk-io/analytics-uploader action patch v2.1.2 → v2.1.3

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

actions/download-artifact (actions/download-artifact)

v4.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.2.1...v4.3.0

v4.2.1

Compare Source

What's Changed

Full Changelog: actions/download-artifact@v4.2.0...v4.2.1

v4.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.1.9...v4.2.0

v4.1.9

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4.1.8...v4.1.9

aws-actions/amazon-ecr-login (aws-actions/amazon-ecr-login)

v2.1.7

Compare Source

See the changelog for details about the changes included in this release.

v2.1.6

Compare Source

See the changelog for details about the changes included in this release.

v2.1.5

Compare Source

See the changelog for details about the changes included in this release.

v2.1.4

Compare Source

See the changelog for details about the changes included in this release.

v2.1.3

Compare Source

See the changelog for details about the changes included in this release.

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v6.3.0

Compare Source

Features

v6.2.4

Compare Source

Bug Fixes
  • account-ids handling, mask proxy as secret in logs (#​1943) (aa65264)
  • skip backoff sleep after the final retryAndBackoff attempt (#​1937) (3852440)

v6.2.3

Compare Source

Bug Fixes

v6.2.2

Compare Source

Miscellaneous Chores

v6.2.1

Compare Source

Bug Fixes

v6.2.0

Compare Source

Features
Bug Fixes

v6.1.3

Compare Source

Bug Fixes
  • fix: allow kubelet token symlink in #​1805

v6.1.2

Compare Source

Bug Fixes

v6.1.1

Compare Source

What's Changed

Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1

v6.1.0

Compare Source

Features
azure/setup-helm (azure/setup-helm)

v5.0.1

Compare Source

Fixed
Changed
benchmark-action/github-action-benchmark (benchmark-action/github-action-benchmark)

v1.22.2

Compare Source

  • perf shallow-clone the target branch only (#​364)

v1.22.1

Compare Source

  • fix scope tsconfig.build.json to src/ for reproducibility (#​352)
  • chore bump minimatch from 3.1.2 to 3.1.5 (#​347)
  • chore bump uuid and @​actions/core (#​350)
  • chore bump flatted from 3.2.4 to 3.4.2 (#​346)
  • chore bump js-yaml (#​344)
  • chore bump picomatch from 2.3.0 to 2.3.2 (#​342)

v1.22.0

Compare Source

v1.21.0

Compare Source

  • fix include package name for duplicate bench names (#​330)
  • fix avoid duplicate package suffix in Go benchmarks (#​337)

v1.20.7

Compare Source

  • fix improve parsing for custom benchmarks (#​323)

v1.20.5

Compare Source

  • feat allow to parse generic cargo bench/criterion units (#​280)
  • fix add summary even when failure threshold is surpassed (#​285)
  • fix time units are not normalized (#​318)

v1.20.4

Compare Source

  • feat add typings and validation workflow (#​257)
docker/buildx (buildx)

v0.37.1

Compare Source

Welcome to the v0.37.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors
  • CrazyMax
  • Tomas Perez Molina
  • Tõnis Tiigi
Notable Changes
  • Fix failed multi-node image pushes leaving the requested tag pointing to a partial image. #​4058
  • Fix newly started container builders not getting a full readiness timeout before first use. #​4050
  • Fix builder removal cleanup being tied to the status timeout. #​4072
  • Fix linked Bake targets using the Kubernetes driver losing shared clients before the build completes. #​4073
Dependency Changes

This release has no dependency changes

Previous release can be found at v0.37.0

v0.37.0

Compare Source

Welcome to the v0.37.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors
  • CrazyMax
  • Tõnis Tiigi
  • Sebastiaan van Stijn
  • Alberto Garcia Hierro
  • Brad Davidson
  • Guilhem Charles
  • Guillaume Lours
Notable Changes
  • Buildx now supports cloud driver builder instances to run builds with Docker Build Cloud service. No custom version of Buildx binary is needed anymore. #​4017
  • Newly started container builders now wait for BuildKit readiness before first use. #​4027
  • Policy evaluation now uses Docker CLI registry auth for image metadata. #​4046
  • Several consistency issues with handling Windows platform identifiers with OS version have been fixed. #​4035 #​4034 #​4008
  • Using the Kubernetes driver now skips terminating pods when choosing a pod. #​3997
  • Avoid creating temporary files on the host to send builder configuration to remote containers. #​3996
  • Fix issue where Bake builds could sometimes drop sending build secrets when using linked targets. #​4014
  • Fix cases where empty source policy sessions were created for some builds, possibly causing confusing progress output. #​4028
Dependency Changes
  • github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.8
  • github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.39
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.38
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.39
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.39
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.39
  • github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.40
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.18
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.39
  • github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.8
  • github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.8
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.8
  • github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.8
  • github.com/aws/smithy-go v1.27.4 -> v1.27.10
  • github.com/compose-spec/compose-go/v2 v2.13.0 -> v2.14.0
  • github.com/containerd/containerd/v2 v2.3.3 -> v2.3.4
  • github.com/containerd/platforms v1.0.0-rc.4 -> v1.0.0-rc.5
  • github.com/docker/cli v29.6.2 -> v29.7.2
  • github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
  • github.com/go-logr/logr v1.4.3 -> v1.4.4
  • github.com/klauspost/compress v1.19.1 -> v1.19.2
  • github.com/moby/buildkit v0.32.2 -> v0.33.0
  • github.com/moby/go-archive v0.2.1 -> v0.2.0
  • github.com/moby/policy-helpers 856be88 -> dd6c549
  • github.com/pelletier/go-toml/v2 v2.3.1 -> v2.4.3
  • github.com/sirupsen/logrus v1.9.4 -> v1.10.2
  • github.com/stretchr/testify v1.11.1 -> v1.12.1
  • github.com/tonistiigi/fsutil 6d9dc2e -> 83cac42
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0 -> v0.70.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
  • go.opentelemetry.io/otel v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
  • go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
  • go.opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0
  • go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
  • golang.org/x/crypto v0.54.0 -> v0.55.0
  • golang.org/x/mod v0.38.0 -> v0.40.0
  • golang.org/x/net v0.57.0 -> v0.58.0
  • golang.org/x/text v0.40.0 -> v0.41.0
  • golang.org/x/tools v0.47.0 -> v0.49.0
  • google.golang.org/genproto/googleapis/api 3dc84a4 -> 6ac0973
  • google.golang.org/genproto/googleapis/rpc 3dc84a4 -> 6ac0973
  • google.golang.org/grpc v1.82.1 -> v1.83.2
  • google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 -> v1.6.2
  • google.golang.org/protobuf f2248ac -> v1.36.12
  • k8s.io/api v0.36.0 -> v0.36.3
  • k8s.io/apimachinery v0.36.0 -> v0.36.3
  • k8s.io/client-go v0.36.0 -> v0.36.3
  • sigs.k8s.io/structured-merge-diff/v6 v6.3.2 -> v6.3.3

Previous release can be found at v0.36.1

v0.36.1

Compare Source

Welcome to the v0.36.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors
  • CrazyMax
Notable Changes
  • Add BUILDX_NO_DEFAULT_OCI_ARTIFACT as alternative to oci-artifact=false when users have not set it explicitly. #​3991
Dependency Changes
  • github.com/moby/buildkit v0.32.0 -> v0.32.2

Previous release can be found at v0.36.0

v0.36.0

Compare Source

Welcome to the v0.36.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors
  • CrazyMax
  • Tõnis Tiigi
  • Sebastiaan van Stijn
  • MohammadHasan Akbari
  • Matt Van Horn
  • amarkdotdev
  • Areeb Ahmed
  • Guillaume Lours
  • Paweł Gronowski
  • Pierre Gimalac
  • s3onghyun
Notables Changes
  • Default source policy can now validate the authenticity of BuildKit release images when creating docker-container builder with docker buildx create command. #​3961
  • Bake command now supports overriding declared secret sources. #​3962
  • Broken builder instances are now correctly handled on removal. #​3934
  • Bake now supports resolving files relative to the bake file location instead of the current working directory with BUILDX_BAKE_FILE_RELATIVE_PATHS=true. #​3935
  • Source policies now support new array.flatten builtin and OPA template strings. #​3913
  • Imagetools commands now do extra validation of the descriptor inputs from files. #​3933
  • Windows release binaries are now code-signed, matching the signing coverage already provided for macOS release artifacts. #​3978
  • Compose compatibility has been updated to v2.13.0. #​3929
  • Fix source policy support on Windows when loading local files inside policy. #​3944
  • Fix Kubernetes driver random load balancer support. #​3861
  • Fix Kubernetes driver builds hanging indefinitely when the remote exec stream ends. #​3966
  • Fix iidfile for containerd-backed Docker driver. #​3952
  • Fix authority pseudo-header when using remote driver. #​3928
  • Fix possible FD leak when using source policies. #​3943
Dependency Changes
  • github.com/Microsoft/go-winio v0.6.2 -> ad3df93
  • github.com/ProtonMail/go-crypto v1.3.0 -> v1.4.1
  • github.com/aws/aws-sdk-go-v2 v1.42.0 -> v1.43.0
  • github.com/aws/aws-sdk-go-v2/config v1.32.24 -> v1.32.31
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.23 -> v1.19.30
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.29 -> v1.18.31
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.29 -> v1.4.31
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29 -> v2.7.31
  • github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30 -> v1.4.32
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12 -> v1.13.13
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.29 -> v1.13.31
  • github.com/aws/aws-sdk-go-v2/service/signin v1.1.5 -> v1.5.0
  • github.com/aws/aws-sdk-go-v2/service/sso v1.31.3 -> v1.33.0
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.6 -> v1.38.0
  • github.com/aws/aws-sdk-go-v2/service/sts v1.43.3 -> v1.45.0
  • github.com/aws/smithy-go v1.27.2 -> v1.27.4
  • github.com/compose-spec/compose-go/v2 v2.10.2 -> v2.13.0
  • github.com/containerd/containerd/api v1.10.0 -> v1.11.1
  • github.com/containerd/containerd/v2 v2.2.4 -> v2.3.3
  • github.com/containerd/ttrpc v1.2.8 -> v1.2.9
  • github.com/docker/cli v29.5.3 -> v29.6.2
  • github.com/go-openapi/errors v0.22.7 -> v0.22.8
  • github.com/go-openapi/loads v0.23.3 -> v0.24.0
  • github.com/go-openapi/runtime v0.32.3 -> v0.32.4
  • github.com/go-openapi/spec v0.22.5 -> v0.22.6
  • github.com/go-openapi/strfmt v0.26.3 -> v0.26.4
  • github.com/go-openapi/swag v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/cmdutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/conv v0.26.0 -> v0.27.0
  • github.com/go-openapi/swag/fileutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/jsonname v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/jsonutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/loading v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/mangling v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/netutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/stringutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/swag/typeutils v0.26.0 -> v0.27.0
  • github.com/go-openapi/swag/yamlutils v0.26.0 -> v0.26.1
  • github.com/go-openapi/validate v0.25.3 -> v0.26.0
  • github.com/google/go-containerregistry v0.21.6 -> v0.21.7
  • github.com/klauspost/compress v1.18.6 -> v1.19.1
  • github.com/lestrrat-go/httprc/v3 v3.0.1 -> v3.0.2
  • github.com/lestrrat-go/jwx/v3 v3.0.11 -> v3.0.13
  • github.com/moby/buildkit v0.31.0 -> v0.32.0
  • github.com/moby/go-archive v0.2.0 -> v0.2.1
  • github.com/moby/moby/api v1.54.2 -> v1.55.0
  • github.com/moby/moby/client v0.4.1 -> v0.5.0
  • github.com/moby/policy-helpers d5411a9 -> 856be88
  • github.com/moby/sys/user v0.4.0 -> v0.4.1
  • github.com/open-policy-agent/opa v1.10.1 -> v1.14.1
  • github.com/segmentio/asm v1.2.0 -> v1.2.1
  • github.com/sigstore/rekor v1.5.2 -> v1.5.3
  • github.com/sigstore/rekor-tiles/v2 5d098a2 -> v2.3.0
  • github.com/sigstore/sigstore-go v1.2.1 -> v1.2.2
  • github.com/tonistiigi/fsutil 0257b33 -> 6d9dc2e
  • github.com/valyala/fastjson v1.6.4 -> v1.6.7
  • github.com/vektah/gqlparser/v2 v2.5.30 -> v2.5.32
  • golang.org/x/crypto v0.52.0 -> v0.54.0
  • golang.org/x/mod v0.36.0 -> v0.38.0
  • golang.org/x/net v0.55.0 -> v0.57.0
  • golang.org/x/sync v0.20.0 -> v0.22.0
  • golang.org/x/sys v0.45.0 -> v0.47.0
  • golang.org/x/term v0.43.0 -> v0.45.0
  • golang.org/x/text v0.37.0 -> v0.40.0
  • golang.org/x/tools v0.45.0 -> v0.47.0
  • google.golang.org/grpc v1.81.1 -> v1.82.1
  • google.golang.org/protobuf v1.36.11 -> f2248ac
  • k8s.io/api v0.35.4 -> v0.36.0
  • k8s.io/apimachinery v0.35.4 -> v0.36.0
  • k8s.io/client-go v0.35.4 -> v0.36.0
  • k8s.io/kube-openapi 589584f -> 5883c5e
  • k8s.io/streaming v0.36.0 new
  • k8s.io/utils bc988d5 -> 28399d8
  • sigs.k8s.io/structured-merge-diff/v6 v6.3.0 -> v6.3.2

Previous release can be found at v0.35.0

cardinalby/export-env-action (cardinalby/export-env-action)

v2.2.3

Compare Source

docker/build-push-action (docker/build-push-action)

v7.4.0

Compare Source

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@gati-app gati-app Bot added the renovate label Sep 23, 2026
@gati-app
gati-app Bot requested review from a team as code owners September 23, 2026 00:04
@github-actions

github-actions Bot commented Sep 23, 2026

Copy link
Copy Markdown
Contributor

💥 No Changeset

Latest commit: bc47a4a

Merging this PR will not cause any packages to be released. If these changes should not cause updates to packages in this repo, this is fine 🙂

If these changes should be included in a release's CHANGELOG, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

You can also use gocs to generate changeset files locally.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@pkcll pkcll Awaiting requested review from pkcll
@dangitsdavid dangitsdavid Awaiting requested review from dangitsdavid
@chainchad chainchad Awaiting requested review from chainchad

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants