Release v1.18.6 by github-actions[bot] · Pull Request #851 · overmindtech/cli

github-actions · 2026-06-22T09:41:53Z

Copybara Sync - Release v1.18.6

This PR was automatically created by Copybara, syncing changes from the overmindtech/workspace monorepo.

Original author: renovate[bot] (29139614+renovate[bot]@users.noreply.github.com)

What happens when this PR is merged?

The tag-on-merge workflow will automatically create the v1.18.6 tag on main
This tag will trigger the release workflow, which will:
- Run tests
- Build and publish release binaries via GoReleaser
- Upload packages to Cloudsmith

Review Checklist

Changes look correct and match the expected monorepo sync
Tests pass (see CI checks below)

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/openrdap/rdap](https://redirect.github.com/openrdap/rdap) | require | digest | `eb57b3a` → `8fa7e50` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 7b54007595ac103aaebc13ac563968becc333ab2

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [1password/load-secrets-action](https://redirect.github.com/1password/load-secrets-action) | action | patch | `v4.0.0` → `v4.0.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>1password/load-secrets-action (1password/load-secrets-action)</summary> ### [`v4.0.1`](https://redirect.github.com/1Password/load-secrets-action/releases/tag/v4.0.1) [Compare Source](https://redirect.github.com/1password/load-secrets-action/compare/v4.0.0...v4.0.1) #### What's Changed ##### Fix - Fixed a Windows specific issue where 1Password CLI installation could fail because the downloaded archive lacked a .zip extension required by PowerShell’s archive extraction fallback. ([#154](https://redirect.github.com/1Password/load-secrets-action/pull/154)) - Bump actions/checkout from v5 to v6 in CI workflows. ([#156](https://redirect.github.com/1Password/load-secrets-action/pull/156)) ##### Security - Harden GitHub Actions workflows by pinning external actions to immutable commit SHAs. ([#157](https://redirect.github.com/1Password/load-secrets-action/pull/157)) ##### Docs - Add 1Password API Terms of Service notice to the README ([#166](https://redirect.github.com/1Password/load-secrets-action/pull/166)) ##### New Contributors - [@dagecko](https://redirect.github.com/dagecko) made their first contribution in [1Password#157](https://redirect.github.com/1Password/load-secrets-action/pull/157) - [@superteppo](https://redirect.github.com/superteppo) made their first contribution in [1Password#154](https://redirect.github.com/1Password/load-secrets-action/pull/154) - [@libutcher](https://redirect.github.com/libutcher) made their first contribution in [1Password#166](https://redirect.github.com/1Password/load-secrets-action/pull/166) **Full Changelog**: <1Password/load-secrets-action@v4.0.0...v4.0.1> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 2ed073c14e56e1ce4d16946fa38e2e19a189e9dc

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [1password/install-cli-action](https://redirect.github.com/1password/install-cli-action) | action | major | `v3.0.0` → `v4.0.0` | | [1password/install-cli-action](https://redirect.github.com/1password/install-cli-action) | action | major | `v2.0.2` → `v4.0.0` | | [1password/install-cli-action](https://redirect.github.com/1password/install-cli-action) | action | major | `v3` → `v4` | | [1password/load-secrets-action](https://redirect.github.com/1password/load-secrets-action) | action | major | `v3.2.1` → `v4.0.1` | | [actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance) | action | major | `v3` → `v4` | | [dawidd6/action-download-artifact](https://redirect.github.com/dawidd6/action-download-artifact) | action | major | `v20` → `v21` | | [hoverkraft-tech/compose-action](https://redirect.github.com/hoverkraft-tech/compose-action) | action | major | `v2.6.0` → `v3.0.0` | | [marocchino/sticky-pull-request-comment](https://redirect.github.com/marocchino/sticky-pull-request-comment) | action | major | `v2` → `v3.0.4` | | [pnpm/action-setup](https://redirect.github.com/pnpm/action-setup) | action | major | `v5.0.0` → `v6.0.8` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>1password/install-cli-action (1password/install-cli-action)</summary> ### [`v4.0.0`](https://redirect.github.com/1Password/install-cli-action/releases/tag/v4.0.0) [Compare Source](https://redirect.github.com/1password/install-cli-action/compare/v4.0.0...v4.0.0) #### What's Changed ##### Compatibility ⚠️ Linux self-hosted runners must have `gpg` available on PATH in order to verify CLI signature. ([#37](https://redirect.github.com/1Password/install-cli-action/pull/37)) ##### Security - Verify 1Password CLI signatures on install for Linux, macOS, and Windows before adding the binary to PATH. ([#37](https://redirect.github.com/1Password/install-cli-action/pull/37)) ##### Documentation - README now includes a notice that 1Password API usage is governed by the [1Password API Terms of Service](https://1password.com/legal/api-sdk-terms-of-service). ([#39](https://redirect.github.com/1Password/install-cli-action/pull/39)) ##### New Contributors - [@libutcher](https://redirect.github.com/libutcher) made their first contribution in [1Password#39](https://redirect.github.com/1Password/install-cli-action/pull/39) **Full Changelog**: <1Password/install-cli-action@v3...v4.0.0> ### [`v4`](https://redirect.github.com/1password/install-cli-action/compare/v3.0.0...v4.0.0) [Compare Source](https://redirect.github.com/1password/install-cli-action/compare/v3.0.0...v4.0.0) </details> <details> <summary>1password/load-secrets-action (1password/load-secrets-action)</summary> ### [`v4.0.1`](https://redirect.github.com/1Password/load-secrets-action/releases/tag/v4.0.1) [Compare Source](https://redirect.github.com/1password/load-secrets-action/compare/v4.0.0...v4.0.1) #### What's Changed ##### Fix - Fixed a Windows specific issue where 1Password CLI installation could fail because the downloaded archive lacked a .zip extension required by PowerShell’s archive extraction fallback. ([#154](https://redirect.github.com/1Password/load-secrets-action/pull/154)) - Bump actions/checkout from v5 to v6 in CI workflows. ([#156](https://redirect.github.com/1Password/load-secrets-action/pull/156)) ##### Security - Harden GitHub Actions workflows by pinning external actions to immutable commit SHAs. ([#157](https://redirect.github.com/1Password/load-secrets-action/pull/157)) ##### Docs - Add 1Password API Terms of Service notice to the README ([#166](https://redirect.github.com/1Password/load-secrets-action/pull/166)) ##### New Contributors - [@dagecko](https://redirect.github.com/dagecko) made their first contribution in [1Password#157](https://redirect.github.com/1Password/load-secrets-action/pull/157) - [@superteppo](https://redirect.github.com/superteppo) made their first contribution in [1Password#154](https://redirect.github.com/1Password/load-secrets-action/pull/154) - [@libutcher](https://redirect.github.com/libutcher) made their first contribution in [1Password#166](https://redirect.github.com/1Password/load-secrets-action/pull/166) **Full Changelog**: <1Password/load-secrets-action@v4.0.0...v4.0.1> ### [`v4.0.0`](https://redirect.github.com/1Password/load-secrets-action/releases/tag/v4.0.0) [Compare Source](https://redirect.github.com/1password/load-secrets-action/compare/v4.0.0...v4.0.0) #### What's Changed - Clear **npm audit** / **Dependabot** findings via **`npm audit fix`** where safe (e.g. **ajv**, **flatted**, **undici**, and other resolvable **minimatch** updates). [#151](https://redirect.github.com/1password/load-secrets-action/issues/151) - Action runtime updated from Node 20 to **Node 24** for GitHub Actions compatibility ([deprecation notice](https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/)). [#148](https://redirect.github.com/1password/load-secrets-action/issues/148). #### New Contributors - [@jjavieralv](https://redirect.github.com/jjavieralv) made their first contribution in [1Password#149](https://redirect.github.com/1Password/load-secrets-action/pull/149) **Full Changelog**: <1Password/load-secrets-action@v3...v4.0.0> ### [`v4`](https://redirect.github.com/1password/load-secrets-action/compare/v3.2.1...v4.0.0) [Compare Source](https://redirect.github.com/1password/load-secrets-action/compare/v3.2.1...v4.0.0) </details> <details> <summary>actions/attest-build-provenance (actions/attest-build-provenance)</summary> ### [`v4.1.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v4.1.0) [Compare Source](https://redirect.github.com/actions/attest-build-provenance/compare/v4...v4.1.0) > \[!NOTE] > As of version 4, `actions/attest-build-provenance` is simply a wrapper on top of [`actions/attest`](https://redirect.github.com/actions/attest). > > Existing applications may continue to use the `attest-build-provenance` action, but new implementations should use `actions/attest` instead. #### What's Changed - Update RELEASE.md docs by [@bdehamer](https://redirect.github.com/bdehamer) in [#836](https://redirect.github.com/actions/attest-build-provenance/pull/836) - Bump `actions/attest` from 4.0.0 to 4.1.0 by [@bdehamer](https://redirect.github.com/bdehamer) in [#838](https://redirect.github.com/actions/attest-build-provenance/pull/838) - Bump `@actions/attest` from 3.0.0 to 3.1.0 by [@bdehamer](https://redirect.github.com/bdehamer) in [actions/attest#362](https://redirect.github.com/actions/attest/pull/362) - Bump `@actions/attest` from 3.1.0 to 3.2.0 by [@bdehamer](https://redirect.github.com/bdehamer) in [actions/attest#365](https://redirect.github.com/actions/attest/pull/365) - Add new `subject-version` input for inclusion in storage record by [@bdehamer](https://redirect.github.com/bdehamer) in [actions/attest#364](https://redirect.github.com/actions/attest/pull/364) - Add storage record content to README by [@bdehamer](https://redirect.github.com/bdehamer) in [actions/attest#366](https://redirect.github.com/actions/attest/pull/366) **Full Changelog**: <actions/attest-build-provenance@v4.0.0...v4.1.0> ### [`v4.0.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v4.0.0) [Compare Source](https://redirect.github.com/actions/attest-build-provenance/compare/v4...v4) > \[!NOTE] > As of version 4, `actions/attest-build-provenance` is simply a wrapper on top of [`actions/attest`](https://redirect.github.com/actions/attest). > > Existing applications may continue to use the `attest-build-provenance` action, but new implementations should use `actions/attest` instead. #### What's Changed - Prepare v4 release by [@bdehamer](https://redirect.github.com/bdehamer) in [#835](https://redirect.github.com/actions/attest-build-provenance/pull/835) **Full Changelog**: <actions/attest-build-provenance@v3.2.0...v4.0.0> ### [`v4`](https://redirect.github.com/actions/attest-build-provenance/compare/v3...v4) [Compare Source](https://redirect.github.com/actions/attest-build-provenance/compare/v3.2.0...v4) </details> <details> <summary>dawidd6/action-download-artifact (dawidd6/action-download-artifact)</summary> ### [`v21`](https://redirect.github.com/dawidd6/action-download-artifact/releases/tag/v21) [Compare Source](https://redirect.github.com/dawidd6/action-download-artifact/compare/v20...v21) #### What's Changed - build(deps): bump [@actions/github](https://redirect.github.com/actions/github) from 9.0.0 to 9.1.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#396](https://redirect.github.com/dawidd6/action-download-artifact/pull/396) - build(deps): bump filesize from 11.0.15 to 11.0.16 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#399](https://redirect.github.com/dawidd6/action-download-artifact/pull/399) - build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#402](https://redirect.github.com/dawidd6/action-download-artifact/pull/402) - build(deps): bump [@actions/github](https://redirect.github.com/actions/github) from 9.1.0 to 9.1.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#400](https://redirect.github.com/dawidd6/action-download-artifact/pull/400) - build(deps): bump [@actions/core](https://redirect.github.com/actions/core) from 3.0.0 to 3.0.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#401](https://redirect.github.com/dawidd6/action-download-artifact/pull/401) - build(deps): bump filesize from 11.0.16 to 11.0.17 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#404](https://redirect.github.com/dawidd6/action-download-artifact/pull/404) - Download artifacts in creation order by [@matejdro](https://redirect.github.com/matejdro) in [#398](https://redirect.github.com/dawidd6/action-download-artifact/pull/398) - node\_modules: update by [@dawidd6](https://redirect.github.com/dawidd6) in [#405](https://redirect.github.com/dawidd6/action-download-artifact/pull/405) #### New Contributors - [@matejdro](https://redirect.github.com/matejdro) made their first contribution in [#398](https://redirect.github.com/dawidd6/action-download-artifact/pull/398) **Full Changelog**: <dawidd6/action-download-artifact@v20...v21> </details> <details> <summary>hoverkraft-tech/compose-action (hoverkraft-tech/compose-action)</summary> ### [`v3.0.0`](https://redirect.github.com/hoverkraft-tech/compose-action/releases/tag/v3.0.0) [Compare Source](https://redirect.github.com/hoverkraft-tech/compose-action/compare/v3.0.0...v3.0.0) ##### Release Summary The action now runs on Node 24, modernizing its execution runtime. No user-facing bug fixes are included in this release. Internal changes include refreshed Actions/workflows documentation and dependency maintenance for GitHub Actions, npm, devcontainer Node, Docker-in-Docker, and fast-uri. Migrate Dev tools: Biome and Vitest ##### Breaking changes This release is breaking because the action runtime now runs on Node 24. ##### What's Changed - docs: update actions and workflows documentation by [@hoverkraft-bot](https://redirect.github.com/hoverkraft-bot)\[bot] in [#264](https://redirect.github.com/hoverkraft-tech/compose-action/pull/264) - chore(deps): bump ghcr.io/devcontainers/features/node from 1.7.1 to 2.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#269](https://redirect.github.com/hoverkraft-tech/compose-action/pull/269) - chore(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#271](https://redirect.github.com/hoverkraft-tech/compose-action/pull/271) - chore(deps): bump ghcr.io/devcontainers/features/docker-in-docker from 2.17.0 to 3.0.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#272](https://redirect.github.com/hoverkraft-tech/compose-action/pull/272) - docs: update actions and workflows documentation by [@hoverkraft-bot](https://redirect.github.com/hoverkraft-bot)\[bot] in [#275](https://redirect.github.com/hoverkraft-tech/compose-action/pull/275) - chore(deps): bump the github-actions-dependencies group across 1 directory with 15 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#274](https://redirect.github.com/hoverkraft-tech/compose-action/pull/274) - chore(deps): bump the npm-actions-dependencies group across 1 directory with 2 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#266](https://redirect.github.com/hoverkraft-tech/compose-action/pull/266) - chore(deps): bump the github-actions-dependencies group with 6 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#277](https://redirect.github.com/hoverkraft-tech/compose-action/pull/277) - feat!: Update to Node 24 by [@neilime](https://redirect.github.com/neilime) in [#278](https://redirect.github.com/hoverkraft-tech/compose-action/pull/278) **Full Changelog**: <hoverkraft-tech/compose-action@v2...v3.0.0> ### [`v3`](https://redirect.github.com/hoverkraft-tech/compose-action/compare/v2.6.0...v3.0.0) [Compare Source](https://redirect.github.com/hoverkraft-tech/compose-action/compare/v2.6.0...v3.0.0) </details> <details> <summary>marocchino/sticky-pull-request-comment (marocchino/sticky-pull-request-comment)</summary> ### [`v3.0.4`](https://redirect.github.com/marocchino/sticky-pull-request-comment/releases/tag/v3.0.4) [Compare Source](https://redirect.github.com/marocchino/sticky-pull-request-comment/compare/v3.0.3...v3.0.4) ##### What's Changed - build(deps-dev): Bump vite from 8.0.3 to 8.0.5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1679](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1679) - build(deps-dev): Bump vitest from 4.1.2 to 4.1.3 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1680](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1680) - build(deps-dev): Bump [@types/node](https://redirect.github.com/types/node) from 25.5.2 to 25.6.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1684](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1684) - build(deps): Bump [@actions/github](https://redirect.github.com/actions/github) from 9.0.0 to 9.1.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1683](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1683) - build(deps-dev): Bump vitest from 4.1.3 to 4.1.4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1682](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1682) - build(deps-dev): Bump [@biomejs/biome](https://redirect.github.com/biomejs/biome) from 2.4.10 to 2.4.11 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1681](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1681) **Full Changelog**: <marocchino/sticky-pull-request-comment@v3.0.3...v3.0.4> ### [`v3.0.3`](https://redirect.github.com/marocchino/sticky-pull-request-comment/releases/tag/v3.0.3) [Compare Source](https://redirect.github.com/marocchino/sticky-pull-request-comment/compare/v3.0.2...v3.0.3) #### What's Changed - Move validateExclusiveModes before getBody for fail-fast validation by [@Copilot](https://redirect.github.com/Copilot) in [#1663](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1663) - Add `number_force` that overrides pull\_request number by [@rossjrw](https://redirect.github.com/rossjrw) in [#1652](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1652) - build(deps-dev): Bump [@biomejs/biome](https://redirect.github.com/biomejs/biome) from 2.4.6 to 2.4.7 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1666](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1666) - build(deps): Bump picomatch from 4.0.3 to 4.0.4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1673](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1673) - build(deps-dev): Bump vitest from 4.1.0 to 4.1.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1674](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1674) - build(deps-dev): Bump rollup from 4.59.0 to 4.60.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1676](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1676) - build(deps-dev): Bump [@types/node](https://redirect.github.com/types/node) from 25.5.0 to 25.5.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1677](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1677) - build(deps-dev): Bump [@biomejs/biome](https://redirect.github.com/biomejs/biome) from 2.4.7 to 2.4.10 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1675](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1675) - build(deps): Bump brace-expansion by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1678](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1678) - build(deps-dev): Bump typescript from 5.9.3 to 6.0.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#1670](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1670) #### New Contributors - [@rossjrw](https://redirect.github.com/rossjrw) made their first contribution in [#1652](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1652) **Full Changelog**: <marocchino/sticky-pull-request-comment@v3.0.2...v3.0.3> ### [`v3.0.2`](https://redirect.github.com/marocchino/sticky-pull-request-comment/releases/tag/v3.0.2) [Compare Source](https://redirect.github.com/marocchino/sticky-pull-request-comment/compare/v3.0.1...v3.0.2) #### What's Changed - Add comprehensive tests for main.ts covering all branches by [@Copilot](https://redirect.github.com/Copilot) in [#1660](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1660) - Don't create a comment with hide: true by [@marocchino](https://redirect.github.com/marocchino) in [#1661](https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1661) **Full Changelog**: <marocchino/sticky-pull-request-comment@v3.0.1...v3.0.2> ### [`v3.0.1`](https://redirect.github.com/marocchino/sticky-pull-request-comment/releases/tag/v3.0.1) [Compare Source](https://redirect.github.com/marocchino/sticky-pull-request-comment/compare/v3.0.0...v3.0.1) ##### What's Changed - Update deps - Change build system from ncc to rollup - Use pull\_request trigger in github action **Full Changelog**: <marocchino/sticky-pull-request-comment@v3.0.0...v3.0.1> ### [`v3.0.0`](https://redirect.github.com/marocchino/sticky-pull-request-comment/releases/tag/v3.0.0) [Compare Source](https://redirect.github.com/marocchino/sticky-pull-request-comment/compare/v2.9.4...v3.0.0) #### What's Changed - Update node to 24 - Update deps #### New Contributors **Full Changelog**: <marocchino/sticky-pull-request-comment@v2.9.4...v3.0.0> </details> <details> <summary>pnpm/action-setup (pnpm/action-setup)</summary> ### [`v6.0.8`](https://redirect.github.com/pnpm/action-setup/compare/v6.0.7...v6.0.8) [Compare Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.7...v6.0.8) ### [`v6.0.7`](https://redirect.github.com/pnpm/action-setup/compare/v6.0.6...v6.0.7) [Compare Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.6...v6.0.7) ### [`v6.0.6`](https://redirect.github.com/pnpm/action-setup/releases/tag/v6.0.6) [Compare Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.5...v6.0.6) ##### What's Changed - fix: bin\_dest output points to self-updated pnpm, not bootstrap by [@zkochan](https://redirect.github.com/zkochan) in [#249](https://redirect.github.com/pnpm/action-setup/pull/249) **Full Changelog**: <pnpm/action-setup@v6.0.5...v6.0.6> ### [`v6.0.5`](https://redirect.github.com/pnpm/action-setup/releases/tag/v6.0.5) [Compare Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.4...v6.0.5) ##### What's Changed - fix: append (not prepend) action node dir to PATH for npm bootstrap by [@zkochan](https://redirect.github.com/zkochan) in [#241](https://redirect.github.com/pnpm/action-setup/pull/241) **Full Changelog**: <pnpm/action-setup@v6.0.4...v6.0.5> ### [`v6.0.4`](https://redirect.github.com/pnpm/action-setup/releases/tag/v6.0.4) [Compare Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.3...v6.0.4) ##### What's Changed - fix: use npm co-located with the action node binary by [@benquarmby](https://redirect.github.com/benquarmby) in [#239](https://redirect.github.com/pnpm/action-setup/pull/239) ##### New Contributors - [@benquarmby](https://redirect.github.com/benquarmby) made their first contribution in [#239](https://redirect.github.com/pnpm/action-setup/pull/239) **Full Changelog**: <pnpm/action-setup@v6.0.3...v6.0.4> ### [`v6.0.3`](https://redirect.github.com/pnpm/action-setup/releases/tag/v6.0.3) [Compare Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.2...v6.0.3) Updated pnpm to v11.0.0-rc.5 **Full Changelog**: <pnpm/action-setup@v6.0.2...v6.0.3> ### [`v6.0.2`](https://redirect.github.com/pnpm/action-setup/releases/tag/v6.0.2) [Compare Source](https://redirect.github.com/pnpm/action-setup/compare/v6.0.1...v6.0.2) ##### What's Changed - fix: pnpm self-update binary shadowed by bootstrap on PATH by [@oniani1](https://redirect.github.com/oniani1) in [#230](https://redirect.github.com/pnpm/action-setup/pull/230) ##### New Contributors - [@oniani1](https://redirect.github.com/oniani1) made their first contribution in [#230](https://redirect.github.com/pnpm/action-setup/pull/230) **Full Changelog**: <pnpm/action-setup@v6.0.1...v6.0.2> ### [`v6.0.1`](https://redirect.github.com/pnpm/action-setup/releases/tag/v6.0.1) [Compare Source](https://redirect.github.com/pnpm/action-setup/compare/v6...v6.0.1) Update pnpm to v11.0.0-rc.2. `pnpm-lock.yaml` will not be saved with two documents unless the `packageManager` is set via `devEngines.packageManager`. Related issue: [#228](https://redirect.github.com/pnpm/action-setup/issues/228) ### [`v6.0.0`]() [Compare Source](https://redirect.github.com/pnpm/action-setup/compare/v6...v6) ### [`v6`](https://redirect.github.com/pnpm/action-setup/compare/v5...v6) [Compare Source](https://redirect.github.com/pnpm/action-setup/compare/v5.0.0...v6) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **Medium Risk** > Wide CI surface area including 1Password secret loading and Docker Compose-backed integration tests; failures would block merges but do not change runtime product code. > > **Overview** > Renovate-style **major bumps** across GitHub Actions workflows and one composite action, with no application code changes. > > **Secrets & tooling:** `1password/install-cli-action` moves to **v4.0.0** everywhere (including Copybara sync and devcontainer build, from older v2/v3 lines). Devcontainer build also bumps `1password/load-secrets-action` from v3 to **v4.0.1**. **pnpm/action-setup** goes from v5 to **v6.0.8** on all Node/pnpm jobs (still pinned to pnpm **11.6.0**). > > **CI integration tests:** `hoverkraft-tech/compose-action` upgrades **v2.6.0 → v3.0.0** for Docker Compose steps in `ci.yml` (api-server, gateway, discovery, sdp-go, revlink). > > **Artifacts & PR UX:** `dawidd6/action-download-artifact` **v20 → v21** (SHA-pinned) for bundle baselines and Terraform plan downloads. `marocchino/sticky-pull-request-comment` **v2 → v3.0.4** in `actions/submit-plan` for Overmind plan sticky comments. > > **Release:** CLI release workflow uses `actions/attest-build-provenance` **v3 → v4** for SLSA attestations. > > Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit d6e014a91ee0c60926699956955308d8038e39ed. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).  GitOrigin-RevId: f12f2e71f1780d126ba39b1e8b7e82fe1ce57a26

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [charm.land/lipgloss/v2](https://redirect.github.com/charmbracelet/lipgloss) | `v2.0.3` → `v2.0.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/charm.land%2flipgloss%2fv2/v2.0.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/charm.land%2flipgloss%2fv2/v2.0.3/v2.0.4?slim=true) | | [github.com/auth0/go-auth0/v2](https://redirect.github.com/auth0/go-auth0) | `v2.12.0` → `v2.13.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.13.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.12.0/v2.13.0?slim=true) | | [github.com/aws/smithy-go](https://redirect.github.com/aws/smithy-go) | `v1.27.1` → `v1.27.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2fsmithy-go/v1.27.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2fsmithy-go/v1.27.1/v1.27.2?slim=true) | | [github.com/bradleyfalzon/ghinstallation/v2](https://redirect.github.com/bradleyfalzon/ghinstallation) | `v2.18.0` → `v2.19.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fbradleyfalzon%2fghinstallation%2fv2/v2.19.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fbradleyfalzon%2fghinstallation%2fv2/v2.18.0/v2.19.0?slim=true) | | [github.com/derailed/k9s](https://redirect.github.com/derailed/k9s) | `v0.50.18` → `v0.51.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fderailed%2fk9s/v0.51.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fderailed%2fk9s/v0.50.18/v0.51.0?slim=true) | | [github.com/harness/harness-go-sdk](https://redirect.github.com/harness/harness-go-sdk) | `v0.8.1` → `v0.8.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fharness%2fharness-go-sdk/v0.8.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fharness%2fharness-go-sdk/v0.8.1/v0.8.2?slim=true) | | [github.com/jedib0t/go-pretty/v6](https://redirect.github.com/jedib0t/go-pretty) | `v6.8.0` → `v6.8.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fjedib0t%2fgo-pretty%2fv6/v6.8.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fjedib0t%2fgo-pretty%2fv6/v6.8.0/v6.8.1?slim=true) | | [github.com/posthog/posthog-go](https://redirect.github.com/posthog/posthog-go) | `v1.14.0` → `v1.15.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fposthog%2fposthog-go/v1.15.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fposthog%2fposthog-go/v1.14.0/v1.15.0?slim=true) | | [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.55.0` → `v0.56.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.55.0...refs/tags/v0.56.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.56.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.55.0/v0.56.0?slim=true) | | [golang.org/x/sync](https://pkg.go.dev/golang.org/x/sync) | [`v0.20.0` → `v0.21.0`](https://cs.opensource.google/go/x/sync/+/refs/tags/v0.20.0...refs/tags/v0.21.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fsync/v0.21.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fsync/v0.20.0/v0.21.0?slim=true) | | [golang.org/x/text](https://pkg.go.dev/golang.org/x/text) | [`v0.37.0` → `v0.38.0`](https://cs.opensource.google/go/x/text/+/refs/tags/v0.37.0...refs/tags/v0.38.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftext/v0.38.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftext/v0.37.0/v0.38.0?slim=true) | | [gopkg.in/ini.v1](https://redirect.github.com/go-ini/ini) | `v1.67.2` → `v1.67.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/gopkg.in%2fini.v1/v1.67.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/gopkg.in%2fini.v1/v1.67.2/v1.67.3?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>charmbracelet/lipgloss (charm.land/lipgloss/v2)</summary> ### [`v2.0.4`](https://redirect.github.com/charmbracelet/lipgloss/releases/tag/v2.0.4) [Compare Source](https://redirect.github.com/charmbracelet/lipgloss/compare/v2.0.3...v2.0.4) #### Changelog ##### Fixed - [`fefa41d`](https://redirect.github.com/charmbracelet/lipgloss/commit/fefa41d): fix: prevent crash when writing to a closed wrap writer ([#699](https://redirect.github.com/charmbracelet/lipgloss/issues/699)) ([@taciturnaxolotl](https://redirect.github.com/taciturnaxolotl)) ##### Docs - [`40ec0e6`](https://redirect.github.com/charmbracelet/lipgloss/commit/40ec0e6): docs: fix typo in table comment ([#641](https://redirect.github.com/charmbracelet/lipgloss/issues/641)) ([@aymanbagabas](https://redirect.github.com/aymanbagabas)) - [`a4d0b40`](https://redirect.github.com/charmbracelet/lipgloss/commit/a4d0b40): docs: restore missing diaereses ([#664](https://redirect.github.com/charmbracelet/lipgloss/issues/664)) ([@caarlos0](https://redirect.github.com/caarlos0)) ##### Chore - [`e3b78a2`](https://redirect.github.com/charmbracelet/lipgloss/commit/e3b78a2): chore(deps): bump golang.org/x/sys in the all group ([#691](https://redirect.github.com/charmbracelet/lipgloss/issues/691)) ([@dependabot](https://redirect.github.com/dependabot)) - [`758dd87`](https://redirect.github.com/charmbracelet/lipgloss/commit/758dd87): chore(deps): bump golang.org/x/sys in the all group ([#674](https://redirect.github.com/charmbracelet/lipgloss/issues/674)) ([@dependabot](https://redirect.github.com/dependabot)) - [`aa91b99`](https://redirect.github.com/charmbracelet/lipgloss/commit/aa91b99): chore: remove CODEOWNERS ([@aymanbagabas](https://redirect.github.com/aymanbagabas)) - [`9cbfe8b`](https://redirect.github.com/charmbracelet/lipgloss/commit/9cbfe8b): chore(lint): exclude revive naming linter ([@aymanbagabas](https://redirect.github.com/aymanbagabas)) *** <a href="https://charm.land/"><img alt="The Charm logo" src="https://stuff.charm.sh/charm-banner-next.jpg" width="400"></a> Thoughts? Questions? We love hearing from you. Feel free to reach out on [X](https://x.com/charmcli), [Discord](https://charm.land/discord), [Slack](https://charm.land/slack), [The Fediverse](https://mastodon.social/@charmcli), [Bluesky](https://bsky.app/profile/charm.land). </details> <details> <summary>auth0/go-auth0 (github.com/auth0/go-auth0/v2)</summary> ### [`v2.13.0`](https://redirect.github.com/auth0/go-auth0/blob/HEAD/CHANGELOG.md#v2130-2026-06-10) [Compare Source](https://redirect.github.com/auth0/go-auth0/compare/v2.12.0...v2.13.0) [Full Changelog](https://redirect.github.com/auth0/go-auth0/compare/v2.12.0...v2.13.0) **Breaking Changes** - Removed branding `identifiers` configuration: the `Identifiers` field on `GetBrandingResponseContent`, `UpdateBrandingResponseContent`, and `UpdateBrandingRequestContent`, along with the `BrandingIdentifiers`, `UpdateBrandingIdentifiers`, `BrandingPhoneDisplay`, `UpdateBrandingPhoneDisplay` types and the `BrandingLoginDisplayEnum`, `BrandingPhoneMaskingEnum`, `BrandingPhoneFormattingEnum` (and their `UpdateBranding` counterparts) enums [#788](https://redirect.github.com/auth0/go-auth0/pull/788) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) - Changed `SetID` signature on phone template types (`PhoneTemplate`, `CreatePhoneTemplateResponseContent`, `GetPhoneTemplateResponseContent`, `UpdatePhoneTemplateResponseContent`, `ResetPhoneTemplateResponseContent`) from `SetID(id string)` to `SetID(id *string)` [#788](https://redirect.github.com/auth0/go-auth0/pull/788) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) **Added** - feat: add tenant security headers configuration (`TenantSettings.SecurityHeaders`) with Content Security Policy (`ContentSecurityPolicyConfig`, `CspPolicy`, `CspDirectives`, `CspReportTo`, reporting endpoints) and XSS protection (`XSSProtectionConfig`) support [#788](https://redirect.github.com/auth0/go-auth0/pull/788) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) - feat: add minute-based session lifetime fields (`SessionLifetimeInMinutes`, `IdleSessionLifetimeInMinutes`, `EphemeralSessionLifetimeInMinutes`, `IdleEphemeralSessionLifetimeInMinutes`) to `UpdateTenantSettingsRequestContent` [#788](https://redirect.github.com/auth0/go-auth0/pull/788) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) - feat: add `id_token_session_expiry_supported` field to connection types [#788](https://redirect.github.com/auth0/go-auth0/pull/788) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) - feat: add `invitation_landing_client_id` field to client my-organization configuration types [#788](https://redirect.github.com/auth0/go-auth0/pull/788) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) </details> <details> <summary>aws/smithy-go (github.com/aws/smithy-go)</summary> ### [`v1.27.2`](https://redirect.github.com/aws/smithy-go/blob/HEAD/CHANGELOG.md#Release-2026-06-05) [Compare Source](https://redirect.github.com/aws/smithy-go/compare/v1.27.1...v1.27.2) #### General Highlights - **Dependency Update**: Updated to the latest SDK module versions #### Module Highlights - `github.com/aws/smithy-go`: v1.27.2 - **Bug Fix**: Fix incorrect serialization of unions in CBOR-based protocols. </details> <details> <summary>bradleyfalzon/ghinstallation (github.com/bradleyfalzon/ghinstallation/v2)</summary> ### [`v2.19.0`](https://redirect.github.com/bradleyfalzon/ghinstallation/releases/tag/v2.19.0) [Compare Source](https://redirect.github.com/bradleyfalzon/ghinstallation/compare/v2.18.0...v2.19.0) #### What's Changed - Update go-github to v85 by [@asvoboda](https://redirect.github.com/asvoboda) in [#188](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/188) - Update go-github to v88 by [@asvoboda](https://redirect.github.com/asvoboda) in [#192](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/192) - Bump the actions group across 1 directory with 2 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#190](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/190) **Full Changelog**: <bradleyfalzon/ghinstallation@v2.18.0...v2.19.0> </details> <details> <summary>derailed/k9s (github.com/derailed/k9s)</summary> ### [`v0.51.0`](https://redirect.github.com/derailed/k9s/releases/tag/v0.51.0) [Compare Source](https://redirect.github.com/derailed/k9s/compare/v0.50.18...v0.51.0) <img src="https://raw.githubusercontent.com/derailed/k9s/master/assets/k9s.png" align="center" width="800" height="auto"/> ### Release v0.51.0 #### Notes Thank you to all that contributed with flushing out issues and enhancements for K9s! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make K9s better are, as ever, very much noted and appreciated! Also big thanks to all that have allocated their own time to help others on both slack and on this repo!! As you may know, K9s is not pimped out by big corporations with deep pockets, thus if you feel K9s is helping in your Kubernetes journey, please consider joining our [sponsorship program](https://redirect.github.com/sponsors/derailed) and/or make some noise on social! [@kitesurfer](https://twitter.com/kitesurfer) On Slack? Please join us [K9slackers](https://join.slack.com/t/k9sers/shared_invite/zt-3360a389v-ElLHrb0Dp1kAXqYUItSAFA) *** #### ♫ Sounds Behind The Release ♭ - [Aprieta - Vincen Garcia](https://www.youtube.com/watch?v=ldQ6hpg9BD0\&list=RDldQ6hpg9BD0\&start_radio=1) - [Graham Chapman - John Cleese](https://www.youtube.com/watch?v=Bm2XPkqENaw) - [Kill the pain - SYZGYX](https://www.youtube.com/watch?v=5XuvMhHZorw\&list=RD5XuvMhHZorw\&start_radio=1) *** #### Maintenance Release! Please help me welcome [Ümüt Özalp](https://redirect.github.com/uozalp) as a core contributor to K9s! Ümüt has been instrumental in helping this project grow. I trust you will help Ümüt triage issues and prs reviews and show him the kindness and patience all k9sers are famous for! Sponsorships are dropping at an alarming rate which puts this project in the red. This is becoming a concern and sad not to mention unsustainable ;( If you dig `k9s` and want to help the project, please consider `paying it forward!` and don't become just another `satisfied, non paying customer!`. K9s does take a lot of my `free` time to maintain, enhance and keep the light on. Many cool ideas are making it straight to the `freezer` as I just can't budget them in. I know many of you work for big corporations, so please put in the word/work and have them help us out via sponsorships or other means. Thank you! *** #### Contributed PRs Please be sure to give `Big Thanks!` and `ATTA Girls/Boys!` to all the fine contributors for making K9s better for all of us!! - [#4026](https://redirect.github.com/derailed/k9s/pull/4026) fix(xray): disable edit/delete actions in XRay view when readonly mode is enabled - [#4024](https://redirect.github.com/derailed/k9s/pull/4024) Fix 'J'umping to owner of cluster scoped resources - [#4005](https://redirect.github.com/derailed/k9s/pull/4005) Fix pod status for sidecar init containers - [#4001](https://redirect.github.com/derailed/k9s/pull/4001) Adjust namespace handling for RBAC checks in CanForResource and CanForInstance - [#3997](https://redirect.github.com/derailed/k9s/pull/3997) chore: fix wrong function name in comment - [#3993](https://redirect.github.com/derailed/k9s/pull/3993) fix(browser): show syncing status instead of spurious no-resources warning - [#3989](https://redirect.github.com/derailed/k9s/pull/3989) perf: skip reconcile cycle when informer data is unchanged - [#3988](https://redirect.github.com/derailed/k9s/pull/3988) perf: raise default client QPS from 5 to 50 - [#3987](https://redirect.github.com/derailed/k9s/pull/3987) fix: paginate metrics API calls to prevent timeout on large clusters - [#3986](https://redirect.github.com/derailed/k9s/pull/3986) perf: batch Hydrate workers to eliminate per-item goroutine overhead - [#3917](https://redirect.github.com/derailed/k9s/pull/3917) Respect wide columns in default view - [#3911](https://redirect.github.com/derailed/k9s/pull/3911) fix: reset styles before loading skin on context switch - [#3908](https://redirect.github.com/derailed/k9s/pull/3908) fix: populate pod count in Node.Get() for single-node view - [#3902](https://redirect.github.com/derailed/k9s/pull/3902) Add OSC52 clipboard backend with native fallback - [#3888](https://redirect.github.com/derailed/k9s/pull/3888) feat: add One Light skin - [#3879](https://redirect.github.com/derailed/k9s/pull/3879) feat: allow users to cycle pulse grid selection forwards and backwards - [#3873](https://redirect.github.com/derailed/k9s/pull/3873) feat: enhance pvc-shell configuration with dynamic inputs and RWO support - [#3872](https://redirect.github.com/derailed/k9s/pull/3872) Add default confirm:true for plugins with inputs - [#3871](https://redirect.github.com/derailed/k9s/pull/3871) internal/render: prevent index out of range panic in initContainerStats - [#3865](https://redirect.github.com/derailed/k9s/pull/3865) Handle blank PVC capacities for the purpose of sorting - [#3854](https://redirect.github.com/derailed/k9s/pull/3854) feat: enhance debug container configuration with input fields - [#3851](https://redirect.github.com/derailed/k9s/pull/3851) Use \*grey instead of grey in black-and-wtf.yaml - [#3839](https://redirect.github.com/derailed/k9s/pull/3839) fix: optimize context switching to reduce redundant API calls - [#3823](https://redirect.github.com/derailed/k9s/pull/3823) feat: add resize PVC plugin for dynamic storage resizing - [#3821](https://redirect.github.com/derailed/k9s/pull/3821) feat: add support for plugin input fields - [#3817](https://redirect.github.com/derailed/k9s/pull/3817) Fix Readme: Ubuntu installation command not working - [#3798](https://redirect.github.com/derailed/k9s/pull/3798) Fix boom on Jumping Owner in rare cases - [#3797](https://redirect.github.com/derailed/k9s/pull/3797) feat: add extra hints for column navigation in table view - [#3792](https://redirect.github.com/derailed/k9s/pull/3792) fix: adjust resource access checks for namespace resources - [#3783](https://redirect.github.com/derailed/k9s/pull/3783) fix: avoid logging errors when no context is configured - [#3780](https://redirect.github.com/derailed/k9s/pull/3780) feat: add selected color to table header - [#3736](https://redirect.github.com/derailed/k9s/pull/3736) feat: add custom resource jump support - [#3634](https://redirect.github.com/derailed/k9s/pull/3634) Add shell detection for Windows NanoServer containers *** <img src="https://raw.githubusercontent.com/derailed/k9s/master/assets/imhotep_logo.png" width="32" height="auto"/> © 2026 Imhotep Software LLC. All materials licensed under [Apache v2.0](http://www.apache.org/licenses/LICENSE-2.0)# </details> <details> <summary>harness/harness-go-sdk (github.com/harness/harness-go-sdk)</summary> ### [`v0.8.2`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.1...v0.8.2) [Compare Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.1...v0.8.2) </details> <details> <summary>jedib0t/go-pretty (github.com/jedib0t/go-pretty/v6)</summary> ### [`v6.8.1`](https://redirect.github.com/jedib0t/go-pretty/releases/tag/v6.8.1) [Compare Source](https://redirect.github.com/jedib0t/go-pretty/compare/v6.8.0...v6.8.1) #### What's Changed A hardening pass across the `table`, `list`, `progress`, and `text` packages, fixing security issues, crash/race bugs, and performance problems in the render hot paths, with benchmarks added to back the optimizations. ##### Security - **table/list (HTML):** escape the title, caption, and CSS class names in `RenderHTML()` to prevent HTML/attribute injection. - **table (CSV):** make `RenderCSV()` output RFC 4180 compliant, and add an opt-in `Style().CSV.FieldProtection` option that neutralizes spreadsheet formula-injection fields (`=`, `+`, `-`, `@`, tab, CR). - **text:** sanitize hyperlink URLs and bound the escape-sequence parser buffer so adversarial input can't grow it without limit. ##### Correctness - **progress:** fix a render panic on tiny tracker lengths, data races on tracker/indicator state, and a leaked `time.Ticker` in the terminal-size watcher. - **table:** guard auto-index rendering against empty `maxColumnLengths`. - **text:** prevent a panic in `VAlign.Apply` on negative `maxLines`. ##### Performance - **table:** compile regex filters once per render; pre-size render builders. - **list:** hoist repeated width math out of the render loops. - **text:** speed up `Align.Apply` and `StringWidthWithoutEscSequences`. - **progress:** build `PacManChomp` frames with a `strings.Builder`. ##### Tooling - Moved root-level benchmarks into their packages and wired up `make bench`; added benchmarks for the table/text/list/progress render hot paths and tests covering the retained-done-tracker render paths. **Full Changelog**: <jedib0t/go-pretty@v6.8.0...v6.8.1> </details> <details> <summary>posthog/posthog-go (github.com/posthog/posthog-go)</summary> ### [`v1.15.0`](https://redirect.github.com/PostHog/posthog-go/releases/tag/v1.15.0): 1.15.0 [Compare Source](https://redirect.github.com/posthog/posthog-go/compare/v1.14.0...v1.15.0) #### Unreleased </details> <details> <summary>go-ini/ini (gopkg.in/ini.v1)</summary> ### [`v1.67.3`](https://redirect.github.com/go-ini/ini/releases/tag/v1.67.3): 1.67.3 [Compare Source](https://redirect.github.com/go-ini/ini/compare/v1.67.2...v1.67.3) #### What's Changed - Optimize `Key.Strings` by reducing memory re-allocations and simplifying control flow by [@gitKashish](https://redirect.github.com/gitKashish) in [#385](https://redirect.github.com/go-ini/ini/pull/385) #### New Contributors - [@gitKashish](https://redirect.github.com/gitKashish) made their first contribution in [#385](https://redirect.github.com/go-ini/ini/pull/385) **Full Changelog**: <go-ini/ini@v1.67.2...v1.67.3> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 7b5a1bc52fe17411e9efdbc54c1026c11083e581

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | alpine | final | minor | `3.23.4` → `3.24.0` | | alpine | stage | minor | `3.23.4` → `3.24.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 300b7235a10b10dfc46fba6ae3ae840d03a49fb6

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | Type | Update | |---|---|---|---|---|---| | [cloud.google.com/go/bigtable](https://redirect.github.com/googleapis/google-cloud-go) | `v1.48.0` → `v1.49.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fbigtable/v1.49.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fbigtable/v1.48.0/v1.49.0?slim=true) | require | minor | | [google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client) | `v0.283.0` → `v0.284.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.284.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.283.0/v0.284.0?slim=true) | require | minor | | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | `3dc84a4` → `7ab31c2` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgenproto%2fgoogleapis%2frpc/v0.0.0-20260610212136-7ab31c22f7ad?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgenproto%2fgoogleapis%2frpc/v0.0.0-20260526163538-3dc84a4a5aaa/v0.0.0-20260610212136-7ab31c22f7ad?slim=true) | require | digest | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>googleapis/google-api-go-client (google.golang.org/api)</summary> ### [`v0.284.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.284.0) [Compare Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.283.0...v0.284.0) ##### Features - **all:** Auto-regenerate discovery clients ([#3613](https://redirect.github.com/googleapis/google-api-go-client/issues/3613)) ([5f02153](https://redirect.github.com/googleapis/google-api-go-client/commit/5f021536107adde3063487a75aa9f46078490191)) - **all:** Auto-regenerate discovery clients ([#3616](https://redirect.github.com/googleapis/google-api-go-client/issues/3616)) ([25b429a](https://redirect.github.com/googleapis/google-api-go-client/commit/25b429a5431a77dd95eb00466661c1447eab6d16)) - **all:** Auto-regenerate discovery clients ([#3617](https://redirect.github.com/googleapis/google-api-go-client/issues/3617)) ([1ef3625](https://redirect.github.com/googleapis/google-api-go-client/commit/1ef362535b2f2f3afbc1408adbf6d3b69e58ad26)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: bb3c4b31d045e2d41abf60b2a355e0145d28c830

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [auth0](https://registry.terraform.io/providers/auth0/auth0) ([source](https://redirect.github.com/auth0/terraform-provider-auth0)) | required_provider | minor | `1.48.0` → `1.49.0` | | [aws](https://registry.terraform.io/providers/hashicorp/aws) ([source](https://redirect.github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.49.0` → `6.50.0` | | [google](https://registry.terraform.io/providers/hashicorp/google) ([source](https://redirect.github.com/hashicorp/terraform-provider-google)) | required_provider | minor | `7.35.0` → `7.36.0` | | [honeycombio](https://registry.terraform.io/providers/honeycombio/honeycombio) ([source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio)) | required_provider | minor | `~> 0.34` → `~> 0.51` | | [honeycombio/integrations/aws](https://registry.terraform.io/modules/honeycombio/integrations/aws) ([source](https://redirect.github.com/honeycombio/terraform-aws-integrations)) | module | minor | `~> 2.1.0` → `~> 2.2.0` | | [terraform-aws-modules/eks/aws](https://registry.terraform.io/modules/terraform-aws-modules/eks/aws) ([source](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks)) | module | minor | `~> 21.18.0` → `~> 21.23.0` | | [terraform-aws-modules/iam/aws](https://registry.terraform.io/modules/terraform-aws-modules/iam/aws) ([source](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam)) | module | minor | `6.4.0` → `6.6.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>auth0/terraform-provider-auth0 (auth0)</summary> ### [`v1.49.0`](https://redirect.github.com/auth0/terraform-provider-auth0/blob/HEAD/CHANGELOG.md#v1490) [Compare Source](https://redirect.github.com/auth0/terraform-provider-auth0/compare/v1.48.0...v1.49.0) ENHANCEMENTS: - `resource/auth0_event_stream` – Add support for `custom_header` webhook authorization method, with `header_key`, `header_value`, `header_value_wo`, and `header_value_wo_version` fields ([#1600](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1600)) - `resource/auth0_log_stream` – Add support for a write-only Datadog API key via `datadog_api_key_wo` and `datadog_api_key_wo_version` ([#1601](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1601)) BUG FIXES: - `resource/auth0_action` – Fix `409 Conflict` race condition between action deploy and trigger binding by adding a create timeout and deployment wait logic ([#1590](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1590)) - `resource/auth0_tenant` – Prevent state drift for fields with server-side defaults (`session_lifetime`, `idle_session_lifetime`, `ephemeral_session_lifetime`, `idle_ephemeral_session_lifetime`, `enable_pipeline2`, `enable_client_connections`, and `disable_management_api_sms_obfuscation`) ([#1587](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1587)) - `resource/auth0_connection` – Handle empty `id_token_signed_response_algs` as unset for OIDC and Okta connections ([#1598](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1598)) NOTES: - `resource/auth0_guardian` – Deprecate the `provider` attribute and `options` block within the `phone` block in favor of the `auth0_phone_provider` resource (Unified Phone Experience) ([#1596](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1596)) - `resource/auth0_trigger_action` / `resource/auth0_trigger_actions` – Document newly supported trigger types (`password-reset-post-challenge`, `custom-email-provider`, `custom-phone-provider`, `login-post-identifier`, and `signup-post-identifier`) ([#1605](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1605)) - `resource/auth0_attack_protection` – Update description for `bot_detection_level` ([#1595](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1595)) </details> <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.50.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6500-June-10-2026) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.49.0...v6.50.0) NOTES: - resource/aws\_bedrockagentcore\_gateway\_target: Because we cannot easily test the behavior of `private_endpoint`, it is best effort and we ask for community help in testing ([#47602](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47602)) FEATURES: - **New List Resource:** `aws_bedrockagentcore_policy` ([#47971](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47971)) - **New List Resource:** `aws_cloudwatch_log_s3_table_integration_source` ([#48190](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48190)) - **New List Resource:** `aws_ecs_daemon` ([#47562](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47562)) - **New List Resource:** `aws_ecs_daemon_task_definition` ([#47562](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47562)) - **New Resource:** `aws_bedrockagentcore_policy` ([#47971](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47971)) - **New Resource:** `aws_cloudwatch_log_s3_table_integration_source` ([#48190](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48190)) - **New Resource:** `aws_ecs_daemon` ([#47562](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47562)) - **New Resource:** `aws_ecs_daemon_task_definition` ([#47562](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47562)) - **New Resource:** `aws_observabilityadmin_s3_table_integration` ([#48190](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48190)) ENHANCEMENTS: - provider: Add Linux s390x support ([#48272](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48272)) - resource/aws\_bedrockagentcore\_agent\_runtime: Add `AGUI` as a valid value for `protocol_configuration.server_protocol` ([#47906](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47906)) - resource/aws\_bedrockagentcore\_gateway: Add `policy_engine_configuration` configuration block ([#47818](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47818)) - resource/aws\_bedrockagentcore\_gateway\_target: Add `listing_mode` argument to the `target_configuration.mcp.mcp_server` configuration block ([#48225](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48225)) - resource/aws\_bedrockagentcore\_gateway\_target: Add `private_endpoint` argument to support private connectivity to VPC-hosted MCP servers via Amazon VPC Lattice ([#47602](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47602)) - resource/aws\_bedrockagentcore\_memory: Add `indexed_key` and `stream_delivery_resources` arguments ([#48240](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48240)) BUG FIXES: - data-source/aws\_secretsmanager\_secret\_version: Fix eventual consistency issues that could result in `couldn't find resource` errors when reading a version immediately after creation ([#48318](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48318)) - resource/aws\_cloudwatch\_log\_subscription\_filter: Retry `ValidationException: Make sure you have given CloudWatch Logs permission to assume the provided role` IAM eventual consistency errors on Create and Update ([#48255](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48255)) - resource/aws\_datazone\_project: Fix import separator to match the expected format. ([#48271](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48271)) - resource/aws\_default\_route\_table: Fix perpetual drift on `route.gateway_id` when `route.odb_network_arn` is configured ([#48239](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48239)) - resource/aws\_ecs\_express\_gateway\_service: Fix "inconsistent result after apply" error for `network_configuration[0].security_groups` when using `network_configuration`. `ec2:DescribeSecurityGroups` IAM permission is newly required. ([#47944](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47944)) - resource/aws\_ecs\_express\_gateway\_service: Fix `Resource Already Exists` error when recreating a service after deletion ([#48098](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48098)) - resource/aws\_elasticsearch\_domain: Fix unexpected state error during engine version upgrade ([#47316](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47316)) - resource/aws\_kinesis\_firehose\_delivery\_stream: Fix `InvalidArgumentException` errors when creating or updating `extended_s3_configuration` in AWS partitions that do not support the `custom_time_zone` and `file_extension` attributes ([#48284](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48284)) - resource/aws\_route: Fix perpetual drift on `gateway_id` when `odb_network_arn` is configured ([#48239](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48239)) - resource/aws\_route\_table: Fix perpetual drift on `route.gateway_id` when `route.odb_network_arn` is configured ([#48239](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48239)) - resource/aws\_secretsmanager\_secret\_version: Fix `Provider produced inconsistent final plan` errors when `secret_string` or `secret_string_wo_version` references a resource being created or replaced in the same apply ([#48318](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48318)) - resource/aws\_secretsmanager\_secret\_version: Fix eventual consistency issues on resource creation that could result in `version_stages` being empty in state ([#48318](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48318)) - resource/aws\_secretsmanager\_secret\_version: Fix unnecessary resource replacement when switching between `secret_string` and `secret_string_wo` (or vice versa) without changing the secret value ([#48318](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/48318)) </details> <details> <summary>hashicorp/terraform-provider-google (google)</summary> ### [`v7.36.0`](https://redirect.github.com/hashicorp/terraform-provider-google/blob/HEAD/CHANGELOG.md#7360-Unreleased) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-google/compare/v7.35.0...v7.36.0) </details> <details> <summary>honeycombio/terraform-provider-honeycombio (honeycombio)</summary> ### [`v0.51.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0510-June-11-2026) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.50.0...v0.51.0) #### Enhancements - feat: Add configuration key support to the provider ([#868](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/868)) #### Bugfixes - fix: make it possible to delete a dataset ([#856](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/856)) - fix(slos): remove dataset restriction ([#870](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/870)) ### [`v0.50.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0500-June-4-2026) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.49.0...v0.50.0) #### Notes - **The minimum supported Terraform version is now 1.0.** This release upgrades the provider to Terraform Plugin Protocol V6. Existing configurations require no changes, but Terraform versions prior to 1.0 are no longer supported. ([#861](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/861)) #### Enhancements - feat: increase maximum retry attempts ([#866](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/866)) #### Bugfixes - fix: detect calculated\_fields changes when diffing trigger/query query\_json ([#864](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/864)) - fix: always treat query filter values as strings for string ops ([#854](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/854)) #### Housekeeping - maint: Update the provider proto version to V6 ([#861](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/861)) - docs: fix broken link to examples directory ([#855](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/855)) - maint(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 ([#858](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/858)) ### [`v0.49.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0490-May-1-2026) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.48.0...v0.49.0) #### Enhancements - feat(d/query\_specification): Expanded calculation support ([#846](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/846)) #### Housekeeping - maint(deps): bump the hashicorp group across 1 directory with 2 updates ([#848](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/848)) ### [`v0.48.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0480-Apr-23-2026) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.47.1...v0.48.0) #### Notes - Invalid v2 credentials (`HONEYCOMB_KEY_ID` / `HONEYCOMB_KEY_SECRET`) now surface on first use of a v2 resource or data source (`honeycombio_api_key`, `honeycombio_environment`, `honeycombio_environments`) rather than at provider-configure time. Error message is unchanged; only the timing differs. - Users of only v1 resources with broken v2 creds will see a strict improvement — those errors no longer block unrelated operations. #### Enhancements - feat: Add auto\_investigate support for burn alerts and triggers ([#835](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/835)) #### Bugfixes - fix(tests): update derived column test to use existing alias ([#834](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/834)) - fix(client): defer v2 auth validation until first use ([#841](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/841)) #### Housekeeping - maint(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 ([#839](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/839)) - maint(deps): bump github.com/hashicorp/terraform-plugin-docs from 0.24.0 to 0.25.0 in the hashicorp group ([#840](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/840)) - maint(deps): bump github.com/hashicorp/terraform-plugin-mux from 0.23.0 to 0.23.1 in the hashicorp group across 1 directory ([#838](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/838)) - maint(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 ([#837](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/837)) - maint(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 ([#830](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/830)) - maint(deps): bump slackapi/slack-github-action from 2.1.1 to 3.0.1 ([#829](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/829)) - maint(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 ([#828](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/828)) - maint(deps): bump the hashicorp group with 5 updates ([#827](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/827)) - maint: Add per-team CODEOWNERS for provider resources ([#832](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/832)) - maint: Bump go version to latest-1, current patch ([#842](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/842)) ### [`v0.47.1`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0471-Mar-9-2026) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.47.0...v0.47.1) #### Bugfixes - fix(d/query\_specification): fix crash when `dynamic "filter"` block uses an unknown `for_each` value ([#824](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/824)) ### [`v0.47.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0470-Mar-4-2026) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.46.1...v0.47.0) #### Enhancements - feat(d/query\_specification): Add formulas and calculation filters support ([#803](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/803)) - feat(r/triggers): Query Math Support ([#807](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/807)) #### Housekeeping - maint(deps): bump the hashicorp group with 3 updates ([#821](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/821)) - maint(deps): bump crazy-max/ghaction-import-gpg from 6 to 7 ([#822](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/822)) ### [`v0.46.1`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0461-Feb-26-2026) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.46.0...v0.46.1) #### Housekeeping - maint(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 ([#819](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/819)) - maint(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 ([#817](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/817)) - maint(deps): bump github.com/hashicorp/terraform-plugin-go from 0.29.0 to 0.30.0 in the hashicorp group ([#816](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/816)) - maint(deps): bump hashicorp/setup-terraform from 3 to 4 ([#815](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/815)) - maint(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 ([#813](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/813)) ### [`v0.46.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0460-Feb-12-2026) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.45.0...v0.46.0) #### Enhancements - feat(calculated-fields): Update Syntax Validator ([#810](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/810)) #### Housekeeping - maint(deps): bump golang.org/x/net from 0.48.0 to 0.50.0 ([#809](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/809)) - maint(deps): bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.38.1 to 2.38.2 in the hashicorp group ([#808](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/808)) - chore(docs): Add example usage for board views resource, and alias max length ([#802](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/802)) ### [`v0.45.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0450-Jan-06-2026) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.44.0...v0.45.0) #### Enhancements - feat(r/flexible\_board): Add support for board views ([#794](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/794)) #### Bugfixes - fix(r/flexible\_board): Add limits for preset filters, docs for views ([#796](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/796)) #### Housekeeping - maint(deps): bump github.com/google/go-querystring from 1.1.0 to 1.2.0 ([#795](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/795)) ### [`v0.44.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0440-Dec-15-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.43.0...v0.44.0) #### Enhancements - feat(r/flexibleboard): Add support for preset filters ([#792](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/792)) #### Housekeeping - maint(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 ([#791](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/791)) - maint(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 ([#787](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/787)) - maint(deps): bump the hashicorp group across 1 directory with 2 updates ([#790](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/790)) - docs: migrate docs generation to tfplugindocs with templates ([#789](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/789)) ### [`v0.43.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0430-Nov-25-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.42.0...v0.43.0) #### Notes - This release removes the long-deprecated classic boards from `r/boards`. #### Enhancements - feat(derived-columns): Infix notation support ([#779](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/779)) #### Housekeeping - maint(deps): bump actions/checkout from 5 to 6 ([#784](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/784)) - maint(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 ([#785](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/785)) - maint(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 ([#783](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/783)) - maint(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 ([#778](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/778)) - maint(deps): bump golang.org/x/net from 0.46.0 to 0.47.0 ([#782](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/782)) ### [`v0.42.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0420-Oct-10-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.41.0...v0.42.0) BUGFIXES: - fix(triggers): allow two trigger calculations if one is a having ([#772](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/772)) - fix(triggers): Trigger Duration/Frequency error message ([#770](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/770)) HOUSEKEEPING: - maint(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 ([#771](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/771)) - maint(deps): bump golang.org/x/net from 0.44.0 to 0.45.0 ([#769](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/769)) - maint(deps): bump github.com/hashicorp/terraform-plugin-framework-validators from 0.18.0 to 0.19.0 in the hashicorp group ([#768](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/768)) ### [`v0.41.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0410-Oct-01-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.40.1...v0.41.0) ENHANCEMENTS: - feat(r/query\_annotation): add import support ([#759](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/759)) BUGFIXES: - fix(d/query\_specification): Allow wider granularity range ([#762](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/762)) HOUSEKEEPING: - maint(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 ([#758](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/758)) - maint(deps): bump the hashicorp group with 4 updates ([#761](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/761)) - maint(deps): bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.38.0 to 2.38.1 in the hashicorp group ([#763](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/763)) - maint(deps): bump github.com/hashicorp/terraform-plugin-framework from 1.16.0 to 1.16.1 in the hashicorp group ([#766](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/766)) ### [`v0.40.1`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0401-Sep-05-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.40.0...v0.40.1) BUGFIXES: - fix(r/query\_specification): handle validation with dynamic blocks ([#754](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/754)) ### [`v0.40.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0400-Sep-05-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.39.1...v0.40.0) ENHANCEMENTS: - feat(r/flexible\_board): add panel type consistency validation ([#749](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/749)) - feat(d/query\_specification): add support for `compare_time_offset` seconds ([#751](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/751)) HOUSEKEEPING: - maint(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 ([#750](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/750)) - maint(deps): bump actions/setup-go from 5 to 6 ([#752](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/752)) ### [`v0.39.1`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0391-Aug-25-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.39.0...v0.39.1) BUGFIXES: - fix(r/query\_annotation): handle empty description ([#747](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/747)) HOUSEKEEPING: - maint(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 ([#746](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/746)) ### [`v0.39.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0390-Aug-22-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.38.1...v0.39.0) ENHANCEMENTS: - feat(r/flexible\_board): Add support for text panels ([#743](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/743)) - fix(client): add missing source field to query annotations ([#742](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/742)) HOUSEKEEPING: - maint(deps): bump github.com/hashicorp/terraform-plugin-testing from 1.13.2 to 1.13.3 ([#741](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/741)) - chore(build): upgrade golangci-lint and tidy ([#740](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/740)) - chore(r/query\_annotation): migrate to Plugin Framework ([#744](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/744)) ### [`v0.38.1`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0381-Aug-15-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.38.0...v0.38.1) BUGFIXES: - fix(docs): fix 'features block' formatting ([#738](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/738)) ### [`v0.38.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0380-Aug-15-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.37.1...v0.38.0) NOTES: - This release introduces provider-level Feature Toggles which were heavily influenced by the Azure Provider. The first two toggles allow users to opt-in to the previous "import on conflict" behavior of both `r/column` and `r/dataset`. - This release removes the long-deprecated `key_name` attribute from `r/column`. ENHANCEMENTS: - fix(client): add missing Dataset field to QueryPanel ([#724](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/724)) - feat(features): add features support with column import override ([#731](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/731)) - feat(r/dataset): add import\_on\_conflict feature ([#732](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/732)) HOUSEKEEPING: - chore(r/column): migrate to Plugin Framework ([#730](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/730)) - maint(deps): bump github.com/hashicorp/terraform-plugin-framework from 1.15.0 to 1.15.1 ([#727](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/727)) - maint(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 ([#728](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/728)) - maint(deps): bump actions/checkout from 4 to 5 ([#729](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/729)) - maint(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 ([#734](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/734)) - chore(build): bump Go to 1.24 ([#735](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/735)) - chore(docs,dataset): add note about feature toggle to r/dataset docs ([#736](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/736)) ### [`v0.37.1`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0371-July-23-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.37.0...v0.37.1) ENHANCEMENTS: - feat(client): Accommodate the "dataset\_slug" field in triggers ([#720](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/720)) BUGFIXES: - fix(r/flexible\_board): Remove height limit ([#721](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/721)) ### [`v0.37.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0370-July-21-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.36.2...v0.37.0) ENHANCEMENTS: - chore(tags): increase tag Value max length to 128 ([#717](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/717)) - feat(r/flexible\_board): allow panel positions to be autogenerated ([#716](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/716)) BUGFIXES: - chore(flexible-board): Fix typo in resource description ([#712](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/712)) HOUSEKEEPING: - maint(deps): bump slackapi/slack-github-action from 2.1.0 to 2.1.1 ([#713](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/713)) - maint(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 ([#715](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/715)) ### [`v0.36.2`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0362-July-2-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.36.1...v0.36.2) BUGFIXES: - fix(r/trigger): validate threshold when baseline\_details in use ([#708](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/708)) - fix(r/trigger): updating env-wide trigger causes apply error ([#709](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/709)) - fix(r/slo): SLO update causing resource replacement ([#710](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/710)) ### [`v0.36.1`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0361-June-24-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.36.0...v0.36.1) BUGFIXES: - fix(tags): handle empty tags map ([#705](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/705)) - fix(r/flexible\_board): avoid panic on read with index check ([#706](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/706)) HOUSEKEEPING: - maint(deps): bump github.com/hashicorp/terraform-plugin-testing from 1.13.1 to 1.13.2 ([#700](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/700)) - maint(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.7 to 0.7.8 ([#703](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/703)) ### [`v0.36.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0360-Jun-6-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.35.0...v0.36.0) NOTES: this release contains support for tagging Flexible Boards, however at the time of release the Honeycomb UI is still missing tagging support for Boards. This was done to allow users to begin tag all three of the initial resources supporting tags (SLOs, Triggers, Boards). ENHANCEMENTS: - feat(r/trigger): add support for tags on triggers ([#683](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/683)) - feat(r/trigger): add support for env-wide triggers ([#687](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/687)) - chore(client): add limit and disable series to query result request ([#695](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/695)) - feat(r/flexible\_board): add support for tags on Boards ([#694](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/694)) - chore(docs): clarify that dataset and datasets field of slos expect slugs ([#693](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/693)) - feat: Enhance `detail_filter` support for multi-value and multi-filter ([#689](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/689)) BUGFIXES: - fix(ci): cleanup burn alert and trigger recipient creation ([#688](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/688)) - fix(r/flexible\_board): incorrect "prefer\_overlaid\_charts" field name in docs ([#690](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/690)) - fix(client): use proper format for Retry-After fallback ([#686](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/686)) HOUSEKEEPING: - maint(deps): bump github.com/hashicorp/terraform-plugin-framework from 1.14.1 to 1.15.0 ([#680](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/680)) - maint(deps): bump github.com/hashicorp/terraform-plugin-go from 0.26.0 to 0.27.0 ([#680](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/680)) - maint(deps): bump github.com/hashicorp/terraform-plugin-mux from 0.18.0 to 0.19.0 ([#680](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/680)) - maint(deps): bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.36.1 to 2.37.0 ([#680](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/680)) - maint(deps): bump github.com/hashicorp/terraform-plugin-testing from 1.12.0 to 1.13.0 ([#680](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/680)) - chore(r/slo): migrate SLO resource to Plugin Framework ([#682](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/682)) - maint(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 ([#696](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/696)) - chore: remove existing .env file and create .env.example template ([#691](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/691)) - docs: Deprecate board resource in favour of flexible\_board ([#681](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/681)) ### [`v0.35.0`](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/blob/HEAD/CHANGELOG.md#0350-May-14-2025) [Compare Source](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/compare/v0.34.0...v0.35.0) ENHANCEMENTS: - feat: add flexible board resource ([#677](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/677), [#676](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/676), [#675](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/675)) HOUSEKEEPING: - maint(deps): bump slackapi/slack-github-action from 2.0.0 to 2.1.0 ([#674](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/674)) - maint(deps): bump github.com/hashicorp/terraform-plugin-framework-validators from 0.17.0 to 0.18.0 ([#678](https://redirect.github.com/honeycombio/terraform-provider-honeycombio/issues/678)) </details> <details> <summary>honeycombio/terraform-aws-integrations (honeycombio/integrations/aws)</summary> ### [`v2.2.0`](https://redirect.github.com/honeycombio/terraform-aws-integrations/blob/HEAD/CHANGELOG.md#v220----2026-05-12) [Compare Source](https://redirect.github.com/honeycombio/terraform-aws-integrations/compare/v2.1.0...v2.2.0)  #### What's Changed ##### 🛠 Maintenance - maint(rds-logs, s3-logfile): update Lambda runtime from al2 (EOL) to al2023 by [@robbkidd](https://redirect.github.com/robbkidd) in [#111](https://redirect.github.com/honeycombio/terraform-aws-integrations/pull/111) ##### 🤷 Other Changes - maint: oss-maintainers on point for this project by [@robbkidd](https://redirect.github.com/robbkidd) in [#110](https://redirect.github.com/honeycombio/terraform-aws-integrations/pull/110) - fix: bump terraform-aws-modules/lambda to 8.8.0 for AWS provider v6 compatibility by [@jasonyoung-pearl](https://redirect.github.com/jasonyoung-pearl) in [#108](https://redirect.github.com/honeycombio/terraform-aws-integrations/pull/108) - maint(deps): bump default honeycomb-otelcol image to v0.0.29 by [@lizthegrey](https://redirect.github.com/lizthegrey) in [#107](https://redirect.github.com/honeycombio/terraform-aws-integrations/pull/107) #### New Contributors - [@jasonyoung-pearl](https://redirect.github.com/jasonyoung-pearl) made their first contribution in [#108](https://redirect.github.com/honeycombio/terraform-aws-integrations/pull/108) **Full Changelog**: <honeycombio/terraform-aws-integrations@v2.1.0...v2.2.0> \[Changes]\[v2.2.0] <a id="v2.1.1"></a> </details> <details> <summary>terraform-aws-modules/terraform-aws-eks (terraform-aws-modules/eks/aws)</summary> ### [`v21.23.0`](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/blob/HEAD/CHANGELOG.md#21230-2026-05-29) [Compare Source](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/compare/v21.22.0...v21.23.0) ##### Features - Add nested\_virtualization cpu\_option ([#3686](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/issues/3686)) ([ddec8b9](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/commit/ddec8b98676927f7a40a50330e4b5a8ce1a96cf6)), closes [#3685](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/issues/3685) - Add support for launch template `network_performance_options` ([#3714](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/issues/3714)) ([9be4cbd](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/commit/9be4cbd7c66a45d3033f2a2e329a25fff3e4dff7)) ### [`v21.22.0`](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/blob/HEAD/CHANGELOG.md#21220-2026-05-25) [Compare Source](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/compare/v21.21.0...v21.22.0) ##### Features - Remove `is_enabled` deprecation warning from Karpenter `event_rules` output ([#3707](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/issues/3707)) ([4bd70c7](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/commit/4bd70c70a15ddb76a5b6bfde7fb0dabfaea706de)) ### [`v21.21.0`](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/blob/HEAD/CHANGELOG.md#21210-2026-05-25) [Compare Source](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/compare/v21.20.0...v21.21.0) ##### Features - Add support for EKS addon `namespace_config` ([#3716](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/issues/3716)) ([8828bd9](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/commit/8828bd9f045933923d6c0e65a98ce58e21c54042)) ### [`v21.20.0`](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/blob/HEAD/CHANGELOG.md#21200-2026-05-06) [Compare Source](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/compare/v21.19.1...v21.20.0) ##### Features - Add opt-in `aws:SourceAccount` condition to Karpenter node IAM role trust policy ([#3695](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/issues/3695)) ([0515ad6](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/commit/0515ad6d5188a80c9c8375710aebc97c1b6bad5f)), closes [#3688](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/issues/3688) ### [`v21.19.1`](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/blob/HEAD/CHANGELOG.md#21191-2026-05-06) [Compare Source](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/compare/v21.19.0...v21.19.1) ##### Bug Fixes - Update karpenter zonal-shift policy ([#3693](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/issues/3693)) ([5ba1ed3](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/commit/5ba1ed33d62cb7f8b634d9b849519d5730731cc8)) ### [`v21.19.0`](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/blob/HEAD/CHANGELOG.md#21190-2026-04-27) [Compare Source](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/compare/v21.18.0...v21.19.0) ##### Features - Update Karpenter sub-module to support Karpenter `v1.12` ([#3690](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/issues/3690)) ([3bc989b](https://redirect.github.com/terraform-aws-modules/terraform-aws-eks/commit/3bc989bd75261ff32ff65eadabbef4e1fb7c26ec)) </details> <details> <summary>terraform-aws-modules/terraform-aws-iam (terraform-aws-modules/iam/aws)</summary> ### [`v6.6.1`](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/blob/HEAD/CHANGELOG.md#661-2026-05-28) [Compare Source](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/compare/v6.6.0...v6.6.1) ##### Bug Fixes - Add missing `ec2:DescribeSecurityGroups` IPv4 VPC CNI IRSA permissions ([#646](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/issues/646)) ([10161bc](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/commit/10161bc239d60571c618bc8bd251a11576d4c3e0)) ### [`v6.6.0`](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/blob/HEAD/CHANGELOG.md#660-2026-04-29) [Compare Source](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/compare/v6.5.0...v6.6.0) ##### Features - Add support for merging trust policy documents ([#643](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/issues/643)) ([9eba5f2](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/commit/9eba5f23bc711495971f05d23f2fa575bfcc9fbd)) ### [`v6.5.0`](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/blob/HEAD/CHANGELOG.md#650-2026-04-24) [Compare Source](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/compare/v6.4.0...v6.5.0) ##### Features - Add `ec2:DescribeInstanceTypes` to EBS CSI driver policy ([#641](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/issues/641)) ([6d1fa27](https://redirect.github.com/terraform-aws-modules/terraform-aws-iam/commit/6d1fa277408157be2a335db43765d7567713bc9c)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **Medium Risk** > Touches EKS, Auth0, and a large Honeycomb provider jump (0.34→0.51); applies may change IRSA policies, observability Lambdas, or Auth0 resource behavior—plan review in non-prod is warranted. > > **Overview** > Bumps Terraform provider and module pins across **cli**, **deploy**, and **deploy/meta** lockfiles, plus version constraints in deploy modules. > > **Providers:** `hashicorp/aws` **6.49.0 → 6.50.0**, `auth0/auth0` **1.48.0 → 1.49.0**, `hashicorp/google` **7.35.0 → 7.36.0** (deploy stacks), and `honeycombio/honeycombio` **~> 0.34 → ~> 0.51** (root and `brent`, `ovm-infra`). > > **Modules:** `terraform-aws-modules/eks/aws` **~> 21.18.0 → ~> 21.23.0** in `ovm-infra/eks.tf`; `terraform-aws-modules/iam/aws` **iam-role-for-service-accounts** **6.4.0 → 6.6.1** for EBS CSI, api-server, EFS CSI, aws-source, and otel IRSA roles; Honeycomb AWS integration modules **cloudwatch-logs** and **cloudwatch-metrics** **~> 2.1.0 → ~> 2.2.0** in `ovm-infra/honeycomb.tf`. > > No application or HCL resource logic changes beyond these version strings and regenerated lock hashes. > > Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 9e72ea5ee14a2c9d00ebe0da68b29308ca6e6855. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).  GitOrigin-RevId: ef87d3f5afd7806d62c4fe32d63f68c0a2f1cd12

This PR contains the following updates: | Update | Change | |---|---| | lockFileMaintenance | All locks refreshed | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "before 4am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 65c601c4e1cda01a127a591b4dda7ec7e1b43d7d

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/google/go-github/v84](https://redirect.github.com/google/go-github) | `v84.0.0` → `v88.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogle%2fgo-github%2fv84/v88.0.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogle%2fgo-github%2fv84/v84.0.0/v88.0.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>google/go-github (github.com/google/go-github/v84)</summary> ### [`v88.0.0`](https://redirect.github.com/google/go-github/releases/tag/v88.0.0) [Compare Source](https://redirect.github.com/google/go-github/compare/v87.0.0...v88.0.0) This release contains the following breaking API changes: - refactor!: Change app installation `Find*` methods to `Get*` ([#4243](https://redirect.github.com/google/go-github/issues/4243)) BREAKING CHANGE: App installation methods are renamed from `Find*` to `Get*`. ...and the following additional changes: - chore: Bump version of go-github to v88.0.0 ([#4245](https://redirect.github.com/google/go-github/issues/4245)) - chore: Update `openapi_operations.yaml` ([#4242](https://redirect.github.com/google/go-github/issues/4242)) - feat: Add support for setting client URLs ([#4240](https://redirect.github.com/google/go-github/issues/4240)) - refactor: Add constants for API versions ([#4236](https://redirect.github.com/google/go-github/issues/4236)) - docs: Formatting and punctuation changes ([#4235](https://redirect.github.com/google/go-github/issues/4235)) - feat: Add `GetParentIssue` for sub-issues ([#4232](https://redirect.github.com/google/go-github/issues/4232)) - chore: Bump go-github from v86 to v87 in /scrape ([#4234](https://redirect.github.com/google/go-github/issues/4234)) ### [`v87.0.0`](https://redirect.github.com/google/go-github/releases/tag/v87.0.0) [Compare Source](https://redirect.github.com/google/go-github/compare/v86.0.0...v87.0.0) This release contains the following breaking API changes: - refactor!: Change `GetConsumedLicenses` to `ListConsumedLicenses` ([#4226](https://redirect.github.com/google/go-github/issues/4226)) BREAKING CHANGE: `EnterpriseService.GetConsumedLicenses` is now `EnterpriseService.ListConsumedLicenses`. - refactor!: Change `GetAllRepositoryRulesets` to `ListAllRepositoryRulesets` ([#4227](https://redirect.github.com/google/go-github/issues/4227)) BREAKING CHANGE: `OrganizationsService.GetAllRepositoryRulesets` is now `OrganizationsService.ListAllRepositoryRulesets`. - refactor!: Change `GetRulesForBranch` to `ListRulesForBranch` ([#4229](https://redirect.github.com/google/go-github/issues/4229)) BREAKING CHANGE: `RepositoriesService.GetRulesForBranch` is now `RepositoriesService.ListRulesForBranch`. - feat!: Refactor client constructor to use options pattern ([#4201](https://redirect.github.com/google/go-github/issues/4201)) BREAKING CHANGE: Clients are now constructed with a nicer builder pattern. See docs for details. - fix!: Align `IssueFieldValues` with schema ([#4207](https://redirect.github.com/google/go-github/issues/4207)) BREAKING CHANGE: `IssueRequest.IssueFieldValues` type is changed. ...and the following additional changes: - chore: Bump version of go-github to v87.0.0 ([#4233](https://redirect.github.com/google/go-github/issues/4233)) - feat: Add enterprise app installation lookup ([#4230](https://redirect.github.com/google/go-github/issues/4230)) - chore: Update openapi\_operations.yaml ([#4228](https://redirect.github.com/google/go-github/issues/4228)) - fix: Use value receiver for `MarshalJSON` ([#4211](https://redirect.github.com/google/go-github/issues/4211)) - chore: Update dependencies ([#4224](https://redirect.github.com/google/go-github/issues/4224)) - fix: Close `httptest` server to prevent test flakiness ([#4210](https://redirect.github.com/google/go-github/issues/4210)) - feat: Add two new fields to org `CodeSecurityConfiguration` ([#4205](https://redirect.github.com/google/go-github/issues/4205)) - chore: Bump golangci-lint to v2.12.2 ([#4206](https://redirect.github.com/google/go-github/issues/4206)) - build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 in /example ([#4203](https://redirect.github.com/google/go-github/issues/4203)) - fix: Limit HTTP error response body reads to prevent OOM ([#4191](https://redirect.github.com/google/go-github/issues/4191)) - feat: Add issue field values support for write and read ([#4200](https://redirect.github.com/google/go-github/issues/4200)) - chore: Bump `go-github` from `v85` to `v86` in /scrape ([#4199](https://redirect.github.com/google/go-github/issues/4199)) ### [`v86.0.0`](https://redirect.github.com/google/go-github/releases/tag/v86.0.0) [Compare Source](https://redirect.github.com/google/go-github/compare/v85.0.0...v86.0.0) This release contains the following breaking API changes: - feat!: Refactor request context ([#4151](https://redirect.github.com/google/go-github/issues/4151)) BREAKING CHANGE: All internal calls now provide `Context` via the `Request` itself. - feat!: Add OIDC authentication support to `PrivateRegistries` ([#4159](https://redirect.github.com/google/go-github/issues/4159)) BREAKING CHANGE: `PrivateRegistriesService` is updated to API version `2026-03-10` with struct and response changes. ...and the following additional changes: - chore: Bump version of `go-github` to `v86.0.0` ([#4198](https://redirect.github.com/google/go-github/issues/4198)) - test: Fix invalid JSON payloads in actions workflow runs tests ([#4197](https://redirect.github.com/google/go-github/issues/4197)) - feat: Add repo download contents sentinel errors ([#4192](https://redirect.github.com/google/go-github/issues/4192)) - chore: Fix `otel` module name ([#4187](https://redirect.github.com/google/go-github/issues/4187)) - feat: Add typed Copilot metrics download helpers ([#4177](https://redirect.github.com/google/go-github/issues/4177)) - feat: Add `deploy_keys_enabled_for_repositories` and secret scanning custom link fields to `Organization` struct ([#4188](https://redirect.github.com/google/go-github/issues/4188)) - refactor: Use `testJSONBody` helper for request body assertions in tests ([#4183](https://redirect.github.com/google/go-github/issues/4183)) - build(deps): Bump github.com/getkin/kin-openapi from 0.135.0 to 0.137.0 in /tools ([#4184](https://redirect.github.com/google/go-github/issues/4184)) - fix: Include `RetryAfter` in `AbuseRateLimitError.Error` output ([#4181](https://redirect.github.com/google/go-github/issues/4181)) - fix: Handle string-typed reviewer `ID` in Ruleset API responses ([#4178](https://redirect.github.com/google/go-github/issues/4178)) - feat: Add `ArchivedAt` field to `Organization` struct ([#4179](https://redirect.github.com/google/go-github/issues/4179)) - feat: Add Copilot coding agent and content exclusion org endpoints ([#4176](https://redirect.github.com/google/go-github/issues/4176)) - chore: Bump go-github from v84 to v85 in /scrape ([#4174](https://redirect.github.com/google/go-github/issues/4174)) ### [`v85.0.0`](https://redirect.github.com/google/go-github/releases/tag/v85.0.0) [Compare Source](https://redirect.github.com/google/go-github/compare/v84.0.0...v85.0.0) This release contains the following breaking API changes: - fix!: Resolve inconsistent options for `create` and `update` on custom org role ([#4075](https://redirect.github.com/google/go-github/issues/4075)) BREAKING CHANGE: `GetOrgRole`, `CreateCustomOrgRole`, and `UpdateCustomOrgRole` have new params and return values. - fix!: Change `id` from `int64` to `string` in `ActivityService.MarkThreadDone` ([#4056](https://redirect.github.com/google/go-github/issues/4056)) BREAKING CHANGE: `ActivityService.MarkThreadDone` accepts `string` `id` instead of `int64`. ...and the following additional changes: - chore: Bump version of go-github to v85.0.0 ([#4173](https://redirect.github.com/google/go-github/issues/4173)) - chore: Update `openapi_operations.yaml` ([#4172](https://redirect.github.com/google/go-github/issues/4172)) - security: Reject cross-host redirects to prevent Authorization leak ([#4171](https://redirect.github.com/google/go-github/issues/4171)) - chore: Improve GitHub Actions workflows lint and testing ([#4169](https://redirect.github.com/google/go-github/issues/4169)) - chore: Switch legacy redirect handling to new pattern ([#4161](https://redirect.github.com/google/go-github/issues/4161)) - feat: Add `CodeSecurity` to `SecurityAndAnalysis` ([#4155](https://redirect.github.com/google/go-github/issues/4155)) - fix: Reject URL path segments containing ".." in all request methods ([#4150](https://redirect.github.com/google/go-github/issues/4150)) - feat: Refactor repositories download contents ([#4153](https://redirect.github.com/google/go-github/issues/4153)) - chore: Bump google.org/x/tools to v0.44.0 in /tools ([#4168](https://redirect.github.com/google/go-github/issues/4168)) - docs: Fix broken blog post link ([#4160](https://redirect.github.com/google/go-github/issues/4160)) - build(deps): Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 in /example ([#4156](https://redirect.github.com/google/go-github/issues/4156)) - chore: Update openapi\_operations.yaml ([#4157](https://redirect.github.com/google/go-github/issues/4157)) - feat: Remove Google App Engine standard support ([#4152](https://redirect.github.com/google/go-github/issues/4152)) - feat: Add `DownloadCopilotMetrics` helper method ([#4149](https://redirect.github.com/google/go-github/issues/4149)) - docs: Add `apiVersion` to GitHub API link ([#4147](https://redirect.github.com/google/go-github/issues/4147)) - chore: Simplify `redundantptr` custom linter ([#4148](https://redirect.github.com/google/go-github/issues/4148)) - docs: Deprecate old Copilot metrics endpoints closed on April 2, 2026 ([#4137](https://redirect.github.com/google/go-github/issues/4137)) - refactor: Remove redundant `github.Ptr` calls ([#4145](https://redirect.github.com/google/go-github/issues/4145)) - fix: Add missing `User` fields ([#4146](https://redirect.github.com/google/go-github/issues/4146)) - fix: Preserve `Marketplace.Stubbed` during client copy ([#4144](https://redirect.github.com/google/go-github/issues/4144)) - refactor: Simplify array copying ([#4143](https://redirect.github.com/google/go-github/issues/4143)) - build(deps): Bump golang.org/x/crypto from 0.49.0 to 0.50.0 in /example ([#4141](https://redirect.github.com/google/go-github/issues/4141)) - build(deps): Bump github.com/getkin/kin-openapi from 0.134.0 to 0.135.0 in /tools ([#4142](https://redirect.github.com/google/go-github/issues/4142)) - build(deps): Bump golang.org/x/term from 0.41.0 to 0.42.0 in /example ([#4140](https://redirect.github.com/google/go-github/issues/4140)) - build(deps): Bump golang.org/x/net from 0.52.0 to 0.53.0 in /scrape ([#4139](https://redirect.github.com/google/go-github/issues/4139)) - build(deps): Bump go.opentelemetry.io/otel to v1.43.0 ([#4135](https://redirect.github.com/google/go-github/issues/4135)) - fix: Expand `sanitizeURL` secrets redactions ([#4126](https://redirect.github.com/google/go-github/issues/4126)) - build(deps): Bump github.com/alecthomas/kong from 1.14.0 to 1.15.0 in /tools ([#4132](https://redirect.github.com/google/go-github/issues/4132)) - build(deps): Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group ([#4131](https://redirect.github.com/google/go-github/issues/4131)) - feat: Add support for custom names and methods that return structs with multiple `[]*T` fields in `gen-iterators.go` ([#4128](https://redirect.github.com/google/go-github/issues/4128)) - fix: Limit webhook payload size in `ValidatePayloadFromBody` ([#4125](https://redirect.github.com/google/go-github/issues/4125)) - build(deps): Bump codecov/codecov-action from 5.5.3 to 6.0.0 ([#4123](https://redirect.github.com/google/go-github/issues/4123)) - fix: Synchronize `requestCount` in rate limit tests ([#4124](https://redirect.github.com/google/go-github/issues/4124)) - chore: Simplify `generate.sh` by removing `git worktree` and using generator-based check ([#4120](https://redirect.github.com/google/go-github/issues/4120)) - docs: Improve comments in /examples ([#4122](https://redirect.github.com/google/go-github/issues/4122)) - chore: Use `golangci-lint-action`; remove `newreposecretwithlibsodium` ([#4119](https://redirect.github.com/google/go-github/issues/4119)) - feat: Add custom image endpoints for GitHub-hosted runners ([#4101](https://redirect.github.com/google/go-github/issues/4101)) - chore: Cache custom golangci-lint binaries in GHA workflow ([#4116](https://redirect.github.com/google/go-github/issues/4116)) - build(deps): Bump github.com/ProtonMail/go-crypto from 1.4.0 to 1.4.1 in /example ([#4115](https://redirect.github.com/google/go-github/issues/4115)) - build(deps): Bump golang.org/x/tools from 0.29.0 to 0.43.0 in /tools/extraneous-new ([#4114](https://redirect.github.com/google/go-github/issues/4114)) - build(deps): Bump codecov/codecov-action from 5.5.2 to 5.5.3 ([#4112](https://redirect.github.com/google/go-github/issues/4112)) - build(deps): Bump github.com/golangci/plugin-module-register from 0.1.1 to 0.1.2 in /tools/extraneous-new ([#4113](https://redirect.github.com/google/go-github/issues/4113)) - build(deps): Bump github.com/getkin/kin-openapi from 0.133.0 to 0.134.0 in /tools ([#4111](https://redirect.github.com/google/go-github/issues/4111)) - build(deps): Bump github.com/PuerkitoBio/goquery from 1.11.0 to 1.12.0 in /scrape ([#4110](https://redirect.github.com/google/go-github/issues/4110)) - chore: Upgrade deps for linters using dependabot ([#4107](https://redirect.github.com/google/go-github/issues/4107)) - chore: Use `structfield.Settings` in `check-structfield-settings` ([#4108](https://redirect.github.com/google/go-github/issues/4108)) - build(deps): Bump google.golang.org/grpc from 1.78.0 to 1.79.3 in /example ([#4109](https://redirect.github.com/google/go-github/issues/4109)) - chore: Remove unnecessary use of `new` and `&SomeStruct{}` and add new `extraneousnew` custom linter ([#4106](https://redirect.github.com/google/go-github/issues/4106)) - feat: Add `NetworkConfigurationID` and `HostedRunnersURL` to enterprise runner group types ([#4099](https://redirect.github.com/google/go-github/issues/4099)) - feat: Generate accessors for all fields ([#4105](https://redirect.github.com/google/go-github/issues/4105)) - feat: Add `ListRunnerGroupHostedRunners` for org runner groups ([#4100](https://redirect.github.com/google/go-github/issues/4100)) - chore: Enable `default: none` linters; remove duplicated ([#4097](https://redirect.github.com/google/go-github/issues/4097)) - fix: Use `Cursor` pagination for `*.ListHookDeliveriesIter` ([#4096](https://redirect.github.com/google/go-github/issues/4096)) - chore: Remove duplicated formatters ([#4094](https://redirect.github.com/google/go-github/issues/4094)) - chore: Fix typos in comments and tests ([#4093](https://redirect.github.com/google/go-github/issues/4093)) - chore: Fix typo in CONTRIBUTING.md ([#4092](https://redirect.github.com/google/go-github/issues/4092)) - chore: Update openapi\_operations.yaml ([#4091](https://redirect.github.com/google/go-github/issues/4091)) - build(deps): Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 in /example ([#4084](https://redirect.github.com/google/go-github/issues/4084)) - chore: Bump go.opentelemetry.io/otel to v1.42.0 ([#4090](https://redirect.github.com/google/go-github/issues/4090)) - build(deps): Bump golang.org/x/crypto from 0.48.0 to 0.49.0 in /example ([#4081](https://redirect.github.com/google/go-github/issues/4081)) - build(deps): Bump golang.org/x/sync from 0.19.0 to 0.20.0 in /tools ([#4078](https://redirect.github.com/google/go-github/issues/4078)) - build(deps): Bump golang.org/x/net from 0.51.0 to 0.52.0 in /scrape ([#4079](https://redirect.github.com/google/go-github/issues/4079)) - test: Add fuzz test for `ParseWebHook` ([#4076](https://redirect.github.com/google/go-github/issues/4076)) - feat: Add enterprise budgets API ([#4069](https://redirect.github.com/google/go-github/issues/4069)) - feat: Add list organization fine-grained permissions ([#4072](https://redirect.github.com/google/go-github/issues/4072)) - feat: Make `script/lint.sh` output simpler to read ([#4073](https://redirect.github.com/google/go-github/issues/4073)) - chore: Speed up linting ([#4071](https://redirect.github.com/google/go-github/issues/4071)) - build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.41.0 in /otel ([#4065](https://redirect.github.com/google/go-github/issues/4065)) - build(deps): Bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /otel ([#4068](https://redirect.github.com/google/go-github/issues/4068)) - build(deps): Bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.40.0 to 1.41.0 in /example ([#4062](https://redirect.github.com/google/go-github/issues/4062)) - build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.41.0 in /example ([#4064](https://redirect.github.com/google/go-github/issues/4064)) - build(deps): Bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.0 in /example ([#4063](https://redirect.github.com/google/go-github/issues/4063)) - feat: Add `client_id` field to `App` ([#4060](https://redirect.github.com/google/go-github/issues/4060)) - test: Simplify `CopilotService` tests ([#4058](https://redirect.github.com/google/go-github/issues/4058)) - test: Fix flaky `TestDo_rateLimit_abuseRateLimitError_xRateLimitReset` ([#4057](https://redirect.github.com/google/go-github/issues/4057)) - feat: Add support for enterprise audit log streaming API ([#4035](https://redirect.github.com/google/go-github/issues/4035)) - feat: Add repository-level immutable releases settings ([#4039](https://redirect.github.com/google/go-github/issues/4039)) - chore: Add `SAS` as a common initialism to `structfield` ([#4054](https://redirect.github.com/google/go-github/issues/4054)) - fix: Fix data race on Windows ([#4051](https://redirect.github.com/google/go-github/issues/4051)) - docs: Fix grammar in `README.md` ([#4053](https://redirect.github.com/google/go-github/issues/4053)) - chore: Simplify form value assertions in tests ([#4048](https://redirect.github.com/google/go-github/issues/4048)) - chore: Bump go-github from v83 to v84 in /scrape ([#4050](https://redirect.github.com/google/go-github/issues/4050)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **Medium Risk** > Wide but mechanical changes on OAuth, installation validation, webhooks, and check-run paths; regression risk is mainly missed call-site updates rather than new business logic. > > **Overview** > Upgrades **`github.com/google/go-github`** from **v84** to **v88** across **api-server** and **brent-backend**, completing the Renovate bump with the code changes v87/v88 require. > > **Client construction** no longer uses `github.NewClient(httpClient)` or mutating `client.BaseURL`. Call sites now build clients with **`github.NewClient(opts...)`** — typically `WithHTTPClient`, `WithURLs` for httptest mocks, and **`WithEnterpriseURLs`** where GitHub Enterprise base URLs apply. Several helpers now **propagate `NewClient` errors** instead of ignoring them. > > **Apps installation lookups** follow v88’s rename: **`FindRepositoryInstallation` → `GetRepositoryInstallation`**, and org/user install resolution uses **`GetOrganizationInstallation` / `GetUserInstallation`**. **`createGitHubAppsClient` / `newGitHubAppsClient`** take a **`baseURL`** so enterprise URL configuration happens at client creation rather than via post-hoc `WithEnterpriseURLs` on an existing client. > > Imports and **`go.sum`** are updated repo-wide; test fakes and integration mocks are adjusted to the new client API. > > Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit e70b4296043c1379cc69f825fa7c754eb5fef5dc. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).  Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: David Schmitt <DavidS-ovm@users.noreply.github.com> GitOrigin-RevId: 0f244ed3b962d6a36832320e6c1a50ffc16d2500

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | alpine | final | patch | `3.24.0` → `3.24.1` | | alpine | stage | patch | `3.24.0` → `3.24.1` | | [docker/dockerfile](https://redirect.github.com/moby/buildkit) | syntax | minor | `1.24-labs` → `1.25-labs` | | nginx | | patch | `1.31.1-alpine` → `1.31.2-alpine` | | [node](https://redirect.github.com/nodejs/node) | final | minor | `24.16.0-trixie-slim` → `24.17.0-trixie-slim` | | [node](https://redirect.github.com/nodejs/node) | final | minor | `24.16.0-alpine3.23` → `24.17.0-alpine3.23` | | [node](https://redirect.github.com/nodejs/node) | stage | minor | `24.16.0-alpine3.23` → `24.17.0-alpine3.23` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v24.17.0`](https://redirect.github.com/nodejs/node/releases/tag/v24.17.0): 2026-06-18, Version 24.17.0 'Krypton' (LTS), @aduh95 [Compare Source](https://redirect.github.com/nodejs/node/compare/v24.16.0...v24.17.0) This is a security release. ##### Notable Changes - (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High - (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High - (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium - (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium - (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium - (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium - (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium - (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium - (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low - (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low - (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low ##### Commits - \[[`9e4dfc7bba`](https://redirect.github.com/nodejs/node/commit/9e4dfc7bba)] - **(CVE-2026-48933)** **crypto**: guard WebCrypto cipher output length (Filip Skokan) [nodejs-private/node-private#878](https://redirect.github.com/nodejs-private/node-private/pull/878) - \[[`cb2aed980c`](https://redirect.github.com/nodejs/node/commit/cb2aed980c)] - **deps**: update llhttp to 9.4.2 (Antoine du Hamel) [nodejs-private/node-private#890](https://redirect.github.com/nodejs-private/node-private/pull/890) - \[[`a8a0d12875`](https://redirect.github.com/nodejs/node/commit/a8a0d12875)] - **(CVE-2026-48937)** **deps**: fix integration issues with the latest nghttp2 (Tim Perry) [#62891](https://redirect.github.com/nodejs/node/pull/62891) - \[[`66e6203c1c`](https://redirect.github.com/nodejs/node/commit/66e6203c1c)] - **(SEMVER-MAJOR)** **deps**: update nghttp2 to 1.69.0 (Node.js GitHub Bot) [#62891](https://redirect.github.com/nodejs/node/pull/62891) - \[[`dd627ced27`](https://redirect.github.com/nodejs/node/commit/dd627ced27)] - **deps**: update archs files for openssl-3.5.7 (Node.js GitHub Bot) [#63820](https://redirect.github.com/nodejs/node/pull/63820) - \[[`684bae568f`](https://redirect.github.com/nodejs/node/commit/684bae568f)] - **deps**: upgrade openssl sources to openssl-3.5.7 (Node.js GitHub Bot) [#63820](https://redirect.github.com/nodejs/node/pull/63820) - \[[`3a631e7f83`](https://redirect.github.com/nodejs/node/commit/3a631e7f83)] - **deps**: fix aix implicit declaration in OpenSSL (Abdirahim Musse) [#62656](https://redirect.github.com/nodejs/node/pull/62656) - \[[`cf44df3996`](https://redirect.github.com/nodejs/node/commit/cf44df3996)] - **deps**: update undici to 7.28.0 (Node.js GitHub Bot) [#63703](https://redirect.github.com/nodejs/node/pull/63703) - \[[`138c70294b`](https://redirect.github.com/nodejs/node/commit/138c70294b)] - **(CVE-2026-48930)** **dns,net**: reject hostnames with embedded NUL bytes (Matteo Collina) [nodejs-private/node-private#868](https://redirect.github.com/nodejs-private/node-private/pull/868) - \[[`be7e719c3f`](https://redirect.github.com/nodejs/node/commit/be7e719c3f)] - **(CVE-2026-48931)** **http**: fix response queue poisoning in http.Agent (Matteo Collina) [nodejs-private/node-private#846](https://redirect.github.com/nodejs-private/node-private/pull/846) - \[[`cc7c11b4d1`](https://redirect.github.com/nodejs/node/commit/cc7c11b4d1)] - **(CVE-2026-48619)** **http2**: cap originSet size to prevent unbounded memory growth (Matteo Collina) [nodejs-private/node-private#855](https://redirect.github.com/nodejs-private/node-private/pull/855) - \[[`9224427b92`](https://redirect.github.com/nodejs/node/commit/9224427b92)] - **(CVE-2026-48615)** **lib,test**: redact proxy credentials in tunnel errors (Matteo Collina) [nodejs-private/node-private#867](https://redirect.github.com/nodejs-private/node-private/pull/867) - \[[`cf85d54839`](https://redirect.github.com/nodejs/node/commit/cf85d54839)] - **(CVE-2026-48935)** **permission**: disable FileHandle utimes with permission model (RafaelGSS) [nodejs-private/node-private#873](https://redirect.github.com/nodejs-private/node-private/pull/873) - \[[`a1bbc24f96`](https://redirect.github.com/nodejs/node/commit/a1bbc24f96)] - **(CVE-2026-48617)** **permission**: handle process.chdir on writereport (RafaelGSS) [nodejs-private/node-private#870](https://redirect.github.com/nodejs-private/node-private/pull/870) - \[[`e3723ff2d6`](https://redirect.github.com/nodejs/node/commit/e3723ff2d6)] - **test**: add session reuse host verification regressions (Matteo Collina) [nodejs-private/node-private#854](https://redirect.github.com/nodejs-private/node-private/pull/854) - \[[`a77af4867b`](https://redirect.github.com/nodejs/node/commit/a77af4867b)] - **(CVE-2026-48934)** **tls**: bind reusable sessions to authenticated host (Matteo Collina) [nodejs-private/node-private#854](https://redirect.github.com/nodejs-private/node-private/pull/854) - \[[`31beb4f707`](https://redirect.github.com/nodejs/node/commit/31beb4f707)] - **(CVE-2026-48928)** **tls**: fix case-sensitive SNI context matching (Matteo Collina) [nodejs-private/node-private#857](https://redirect.github.com/nodejs-private/node-private/pull/857) - \[[`8e75c73f91`](https://redirect.github.com/nodejs/node/commit/8e75c73f91)] - **(CVE-2026-48618)** **tls**: normalize hostname for server identity checks (Matteo Collina) [nodejs-private/node-private#869](https://redirect.github.com/nodejs-private/node-private/pull/869) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: b8f621d7139a5e28273b1ccd30bc105aa4c6e700

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [k8s.io/api](https://redirect.github.com/kubernetes/api) | `v0.36.1` → `v0.36.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fapi/v0.36.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fapi/v0.36.1/v0.36.2?slim=true) | | [k8s.io/apimachinery](https://redirect.github.com/kubernetes/apimachinery) | `v0.36.1` → `v0.36.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fapimachinery/v0.36.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fapimachinery/v0.36.1/v0.36.2?slim=true) | | [k8s.io/client-go](https://redirect.github.com/kubernetes/client-go) | `v0.36.1` → `v0.36.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fclient-go/v0.36.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fclient-go/v0.36.1/v0.36.2?slim=true) | | [k8s.io/component-base](https://redirect.github.com/kubernetes/component-base) | `v0.36.1` → `v0.36.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fcomponent-base/v0.36.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fcomponent-base/v0.36.1/v0.36.2?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>kubernetes/api (k8s.io/api)</summary> ### [`v0.36.2`](https://redirect.github.com/kubernetes/api/compare/v0.36.1...v0.36.2) [Compare Source](https://redirect.github.com/kubernetes/api/compare/v0.36.1...v0.36.2) </details> <details> <summary>kubernetes/apimachinery (k8s.io/apimachinery)</summary> ### [`v0.36.2`](https://redirect.github.com/kubernetes/apimachinery/compare/v0.36.1...v0.36.2) [Compare Source](https://redirect.github.com/kubernetes/apimachinery/compare/v0.36.1...v0.36.2) </details> <details> <summary>kubernetes/client-go (k8s.io/client-go)</summary> ### [`v0.36.2`](https://redirect.github.com/kubernetes/client-go/compare/v0.36.1...v0.36.2) [Compare Source](https://redirect.github.com/kubernetes/client-go/compare/v0.36.1...v0.36.2) </details> <details> <summary>kubernetes/component-base (k8s.io/component-base)</summary> ### [`v0.36.2`](https://redirect.github.com/kubernetes/component-base/compare/v0.36.1...v0.36.2) [Compare Source](https://redirect.github.com/kubernetes/component-base/compare/v0.36.1...v0.36.2) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 48f3e74d4033c2f37d4eb68d1e524812c2de6c0b

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://redirect.github.com/Azure/azure-sdk-for-go) | `v1.13.1` → `v1.14.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fazidentity/v1.14.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fazidentity/v1.13.1/v1.14.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 9c069f0d062eea6a11a8caabcd803e6e4a97b8e6

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/onsi/ginkgo/v2](https://redirect.github.com/onsi/ginkgo) | `v2.29.0` → `v2.31.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fonsi%2fginkgo%2fv2/v2.31.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fonsi%2fginkgo%2fv2/v2.29.0/v2.31.0?slim=true) | | [github.com/onsi/gomega](https://redirect.github.com/onsi/gomega) | `v1.41.0` → `v1.42.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fonsi%2fgomega/v1.42.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fonsi%2fgomega/v1.41.0/v1.42.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>onsi/ginkgo (github.com/onsi/ginkgo/v2)</summary> ### [`v2.31.0`](https://redirect.github.com/onsi/ginkgo/releases/tag/v2.31.0) [Compare Source](https://redirect.github.com/onsi/ginkgo/compare/v2.30.0...v2.31.0) #### 2.31.0 Add a bunch of Claude Skills via the marketplace: ``` /plugin marketplace add onsi/ginkgo /plugin install ginkgo@ginkgo ``` ### [`v2.30.0`](https://redirect.github.com/onsi/ginkgo/releases/tag/v2.30.0) [Compare Source](https://redirect.github.com/onsi/ginkgo/compare/v2.29.0...v2.30.0) #### 2.30.0 ##### Features Ginkgo now allows `extentions/global.Reset` to support running multiple suites from within a single process. This may take some massaging on your part (see [1672](https://redirect.github.com/onsi/ginkgo/issues/1672)) but can dramatically speed up codebases with O(hundreds) of test suites. Thanks [@lawrencejones](https://redirect.github.com/lawrencejones) ! ##### Fixes - Fix nested --github-output group for progress report nested inside timeline \[[`4f62d7a`](https://redirect.github.com/onsi/ginkgo/commit/4f62d7a)] </details> <details> <summary>onsi/gomega (github.com/onsi/gomega)</summary> ### [`v1.42.0`](https://redirect.github.com/onsi/gomega/releases/tag/v1.42.0) [Compare Source](https://redirect.github.com/onsi/gomega/compare/v1.41.0...v1.42.0) #### 1.42.0 Add a set of Claude skill as a marketplace plugin </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **Low Risk** > Test-only dependency versions; no runtime or security-sensitive code paths change in this PR. > > **Overview** > Bumps the Go test stack **Ginkgo** (`v2.29.0` → `v2.31.0`) and **Gomega** (`v1.41.0` → `v1.42.0`) in `go.mod` / `go.sum` only. No application or test source changes in this diff. > > The jump includes Ginkgo **v2.30.0** behavior (e.g. `extensions/global.Reset` for running multiple suites in one process, GitHub Actions progress-report grouping fix) plus minor release notes for marketplace/skills content in both libraries. > > Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit a295764d4bbe7618678ae64d4a99b86cb46868b1. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 3dd87390804e34f9067b53d45987bc47dd758cda

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/riverqueue/rivercontrib/otelriver](https://redirect.github.com/riverqueue/rivercontrib) | `v0.9.0` → `v0.10.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2frivercontrib%2fotelriver/v0.10.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2frivercontrib%2fotelriver/v0.9.0/v0.10.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ## ⚠️ Warning These modules contain database migrations that need to be added manually to our atlas migrations. Check the contents of https://github.com/riverqueue/river/tree/master/rivermigrate/migration before merging this update. --- ### Release Notes <details> <summary>riverqueue/rivercontrib (github.com/riverqueue/rivercontrib/otelriver)</summary> ### [`v0.10.0`](https://redirect.github.com/riverqueue/rivercontrib/releases/tag/v0.10.0) [Compare Source](https://redirect.github.com/riverqueue/rivercontrib/compare/v0.9.0...v0.10.0) ##### Added - Add `kinds` span attribute to `otelriver` `insert_many` spans listing the distinct job kinds in each batch. [PR #62](https://redirect.github.com/riverqueue/rivercontrib/pull/62). </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 3991fcd41a96a31d7291e083f57de99baa3e0b9b

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/getsentry/sentry-go](https://redirect.github.com/getsentry/sentry-go) | `v0.46.2` → `v0.47.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgetsentry%2fsentry-go/v0.47.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgetsentry%2fsentry-go/v0.46.2/v0.47.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>getsentry/sentry-go (github.com/getsentry/sentry-go)</summary> ### [`v0.47.0`](https://redirect.github.com/getsentry/sentry-go/releases/tag/v0.47.0): 0.47.0 [Compare Source](https://redirect.github.com/getsentry/sentry-go/compare/v0.46.2...v0.47.0) ##### Breaking Changes 🛠 - Fix `transaction_info` source getting set incorrectly across HTTP middleware integrations (http, fasthttp, fiber). Users should now expect traces to properly get grouped with their parameterized path. Transactions in affected integrations may regroup after upgrading. by [@giortzisg](https://redirect.github.com/giortzisg) in [#1325](https://redirect.github.com/getsentry/sentry-go/pull/1325) - remove deprecated`otel.NewSentrySpanProcessor`. Users should now use the `sentryotlp.NewTraceExporter` instead by [@giortzisg](https://redirect.github.com/giortzisg) in [#1307](https://redirect.github.com/getsentry/sentry-go/pull/1307) ```go // Before sentry.Init(sentry.ClientOptions{Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0}) tp := sdktrace.NewTracerProvider( sdktrace.WithSpanProcessor(sentryotel.NewSentrySpanProcessor()), ) otel.SetTextMapPropagator(sentryotel.NewSentryPropagator()) otel.SetTracerProvider(tp) // After: sentry.Init(sentry.ClientOptions{ Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0, Integrations: func(i []sentry.Integration) []sentry.Integration { return append(i, sentryotel.NewOtelIntegration()) }, }) exporter, _ := sentryotlp.NewTraceExporter(ctx, dsn) tp := sdktrace.NewTracerProvider(sdktrace.WithBatcher(exporter)) otel.SetTracerProvider(tp) ``` - Enable logs by default to skip double allow behavior. Enabling logs now happens once when setting up either `sentry.NewLogger` or any supported integration. Also the EnableLogs flag changes to DisableLogs for a global override switch by [@giortzisg](https://redirect.github.com/giortzisg) in [#1306](https://redirect.github.com/getsentry/sentry-go/pull/1306) - Remove the `ContextifyFrames` integration. The recommended way to add source context is [SCM](https://docs.sentry.io/integrations/source-code-mgmt/source-context/) by [@giortzisg](https://redirect.github.com/giortzisg) in [#1302](https://redirect.github.com/getsentry/sentry-go/pull/1302) ##### New Features ✨ - Add fiber v3 integration by [@giortzisg](https://redirect.github.com/giortzisg) in [#1324](https://redirect.github.com/getsentry/sentry-go/pull/1324) - Bump fasthttp from 1.51.0 to 1.71.0 by [@giortzisg](https://redirect.github.com/giortzisg) in [#1324](https://redirect.github.com/getsentry/sentry-go/pull/1324) - Add sentrysql SQL tracing integration by [@giortzisg](https://redirect.github.com/giortzisg) in [#1305](https://redirect.github.com/getsentry/sentry-go/pull/1305) - Supports multiple integration paths depending on how your app opens database connections: `sentrysql.Open(...)`, `sentrysql.OpenDB(...)`, and wrapped drivers/connectors for custom setups. - Database metadata is not inferred in every setup. If the database name is not discoverable automatically, pass `sentrysql.WithDatabaseName(...)` so spans are populated correctly. - Example: ```go // Simple driver-based setup db, err := sentrysql.Open("sqlite", ":memory:", sentrysql.WithDatabaseSystem(sentrysql.SystemSQLite), sentrysql.WithDatabaseName("main"), ) ``` ##### Internal Changes 🔧 ##### Deps - Sync go.work by [@giortzisg](https://redirect.github.com/giortzisg) in [#1326](https://redirect.github.com/getsentry/sentry-go/pull/1326) - Bump github.com/stretchr/testify from 1.8.4 to 1.11.1 by [@giortzisg](https://redirect.github.com/giortzisg) in [#1326](https://redirect.github.com/getsentry/sentry-go/pull/1326) - Bump github.com/google/go-cmp from 0.5.9 to 0.7.0 by [@giortzisg](https://redirect.github.com/giortzisg) in [#1326](https://redirect.github.com/getsentry/sentry-go/pull/1326) - Bump getsentry/github-workflows from [`71588dd`](https://redirect.github.com/getsentry/sentry-go/commit/71588ddf95134f804e82c5970a8098588e2eaecd) to [`c802283`](https://redirect.github.com/getsentry/sentry-go/commit/c802283cd9075b7a2b7a32655019c21c21676e34) by [@dependabot](https://redirect.github.com/dependabot) in [#1314](https://redirect.github.com/getsentry/sentry-go/pull/1314) - Bump actions/create-github-app-token from 3.0.0 to 3.2.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1316](https://redirect.github.com/getsentry/sentry-go/pull/1316) - Bump actions/checkout from 6.0.2 to 6.0.3 by [@dependabot](https://redirect.github.com/dependabot) in [#1313](https://redirect.github.com/getsentry/sentry-go/pull/1313) - Bump getsentry/craft/.github/workflows/changelog-preview\.yml from 2.26.2 to 2.26.6 by [@dependabot](https://redirect.github.com/dependabot) in [#1317](https://redirect.github.com/getsentry/sentry-go/pull/1317) - Bump getsentry/craft from 2.26.2 to 2.26.6 by [@dependabot](https://redirect.github.com/dependabot) in [#1318](https://redirect.github.com/getsentry/sentry-go/pull/1318) - Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by [@dependabot](https://redirect.github.com/dependabot) in [#1315](https://redirect.github.com/getsentry/sentry-go/pull/1315) - Bump github.com/gofiber/fiber/v2 from 2.52.12 to 2.52.13 in /fiber by [@dependabot](https://redirect.github.com/dependabot) in [#1300](https://redirect.github.com/getsentry/sentry-go/pull/1300) - Bump github.com/gofiber/fiber/v2 from 2.52.12 to 2.52.13 in /crosstest by [@dependabot](https://redirect.github.com/dependabot) in [#1301](https://redirect.github.com/getsentry/sentry-go/pull/1301) - Bump getsentry/craft from 2.25.2 to 2.26.2 by [@dependabot](https://redirect.github.com/dependabot) in [#1293](https://redirect.github.com/getsentry/sentry-go/pull/1293) - Bump getsentry/craft/.github/workflows/changelog-preview\.yml from 2.25.2 to 2.26.2 by [@dependabot](https://redirect.github.com/dependabot) in [#1294](https://redirect.github.com/getsentry/sentry-go/pull/1294) ##### Other - (otel) Remove unused semconv helpers by [@giortzisg](https://redirect.github.com/giortzisg) in [#1321](https://redirect.github.com/getsentry/sentry-go/pull/1321) - Update bump-version script to also bump crosstest by [@giortzisg](https://redirect.github.com/giortzisg) in [#1327](https://redirect.github.com/getsentry/sentry-go/pull/1327) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "after 6pm on thursday,before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 8b43add056acefcc26b2a2d58663b3dd68776cc4

renovate Bot and others added 19 commits June 22, 2026 09:40

Run go mod tidy

4922a74

tphoney approved these changes Jun 22, 2026

View reviewed changes

tphoney merged commit 7f592b8 into main Jun 22, 2026

tphoney deleted the copybara/v1.18.6 branch June 22, 2026 09:45

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Release v1.18.6#851

Release v1.18.6#851
tphoney merged 19 commits into
mainfrom
copybara/v1.18.6

github-actions Bot commented Jun 22, 2026 •

edited by tphoney

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

github-actions Bot commented Jun 22, 2026 • edited by tphoney Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Copybara Sync - Release v1.18.6

What happens when this PR is merged?

Review Checklist

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions Bot commented Jun 22, 2026 •

edited by tphoney

Loading