Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
anothrNick/github-tag-action	action	minor	1.67.0 → 1.75.0
flyway/flyway		patch	9.22.2 → 9.22.3
gitea/gitea		minor	1.20 → 1.27
offen/docker-volume-backup (source)		minor	v2.28.0 → v2.48.2
com.google.cloud.tools:jib-maven-plugin	build	minor	3.3.2 → 3.5.2
com.diffplug.spotless:spotless-maven-plugin	build	minor	2.38.0 → 2.46.1
io.micrometer:context-propagation	compile	minor	1.0.4 → 1.2.1
com.discord4j:discord4j-core	compile	minor	3.2.5 → 3.3.2
com.google.guava:guava	compile	patch	32.1.2-jre → 32.1.3-jre
org.eclipse.jgit:org.eclipse.jgit	compile	minor	6.6.0.202305301015-r → 6.10.1.202505221210-r
org.passay:passay (source)	compile	patch	1.6.3 → 1.6.6
org.apache.httpcomponents.client5:httpclient5 (source)	compile	minor	5.2.1 → 5.6.3
io.cucumber:cucumber-bom (source)	import	minor	7.13.0 → 7.34.6
org.springframework.boot:spring-boot-starter-parent (source)	parent	minor	3.1.2 → 3.5.16
me.qoomon:maven-git-versioning-extension	build	minor	9.6.5 → 9.12.1

---

Release Notes

anothrNick/github-tag-action (anothrNick/github-tag-action)

v1.75.0

Compare Source

What's Changed

• Support Escapable Characters in Prefix With BATs Testing by @​TheYorkshireDev in #​347

New Contributors

• @​TheYorkshireDev made their first contribution in #​347

Full Changelog: anothrNick/github-tag-action@1...1.75.0

v1.74.0

Compare Source

What's Changed

• Bugfix for duplicate prefix on first prerelease tag by @​rorybartie in #​338

New Contributors

• @​rorybartie made their first contribution in #​338

Full Changelog: anothrNick/github-tag-action@1...1.74.0

v1.73.0

Compare Source

What's Changed

• Add git-lfs to installed packages in Dockerfile by @​mikaellindemann in #​329

New Contributors

• @​mikaellindemann made their first contribution in #​329

Full Changelog: anothrNick/github-tag-action@1...1.73.0

v1.72.0

Compare Source

What's Changed

• Added TAG_PREFIX so more descriptive tags can be used by @​timothyclarke in #​326

New Contributors

• @​timothyclarke made their first contribution in #​326

Full Changelog: anothrNick/github-tag-action@1...1.72.0

v1.71.0

Compare Source

What's Changed

• Add tag message override by @​omerap12 in #​323

New Contributors

• @​omerap12 made their first contribution in #​323

Full Changelog: anothrNick/github-tag-action@1...1.71.0

v1.70.0

Compare Source

What's Changed

• Add old_tag Output to the README by @​gabriel-stackhouse in #​314
• Fix Auto Releases by @​gabriel-stackhouse in #​317

New Contributors

• @​gabriel-stackhouse made their first contribution in #​314

Full Changelog: anothrNick/github-tag-action@1...1.70.0

v1.69.0

Compare Source

v1.68.0

Compare Source

go-gitea/gitea (gitea/gitea)

v1.27

• SECURITY

  • fix(oauth2): enforce mandatory 2FA policy on OAuth2 authorize/grant endpoints (#​38591) (#​38606)

• API

  • fix(api): align Swagger schemas for UserSettings and TopicListResponse (#​38590) (#​38592)

• ENHANCEMENTS

  • enhance: improve diff contrast in light and dark themes (#​37477) (#​38574)

• BUGFIXES

  • fix: skip OIDC end-session after password login for OAuth2 users (#​38439) (#​38666)
  • fix: make Actions log parser support multiple line message encoding (#​38659) (#​38664)
  • fix(actions): use base branch ref for pull_request_target context (#​38636) (#​38657)
  • fix(actions): skip already-approved runs in ApproveRuns (#​38653) (#​38654)
  • fix: orgmode render include path (#​38642) (#​38645)
  • fix(actions): cancel tasks immediately when the runner stopped reporting (#​38616) (#​38644)
  • fix(issues): fix label bulk-load key and reduce log noise in LoadLabel (#​38632) (#​38643)
  • fix(actions): improve runner list status sorting, labels and task job links (#​38586) (#​38633)
  • fix(actions): correctness and hardening fixes (#​38518) (#​38631)
  • fix(repo): prevent double-write redirect collisions on dependency errors, fix ui (#​38627) (#​38628)
  • fix: delete repo-scoped rows of seven more tables when deleting a repository (#​38534) (#​38618)
  • fix(webhook): remove slack channel name check (#​38608) (#​38612)
  • fix: download dropdown menu clipped on the branches page (#​38604) (#​38609)
  • fix(project): prevent database mutations on invalid MoveIssues payload (#​38600) (#​38602)
  • fix(actions): make SingleWorkflow.Marshal round-trip multi-line run blocks (stop silent job stranding) (#​38520) (#​38599)
  • fix(file-tree): handle submodule links and missing view container (#​38033) (#​38589)
  • fix(actions): fail unexpandable reusable workflow callers and decouple the job emitter's cross-run processing (#​38565) (#​38587)
  • fix: keep serving valid ACME cert when renewal fails at startup (#​38554) (#​38583)
  • fix: branch protection user list (#​38570) (#​38584)
  • fix(pulls): respect diff.orderFile in diff file tree (#​38566) (#​38578)
  • fix(issue): make issue action (issue list batch operation) elements have correct attributes (#​38575) (#​38580)
  • fix(actions): support matrix when evaluating workflow if expression (#​38474) (#​38557)
  • fix(actions): align status icon span for Safari rendering (#​38558) (#​38562)
  • fix: revert git clone http redirection forbidden (#​38530) (#​38545)
  • fix: clean up orphaned user-keyed tables in deleteUser (#​38511) (#​38514)
  • fix(actions): coerce workflow_dispatch boolean inputs to native types (#​38472) (#​38521)
  • fix: make the merge box button red if some checks fail (#​38508) (#​38516)
  • fix(pull): sign the commit when updating a branch by merge (#​38441) (#​38499)
  • fix: make commit message merge correctly (#​38490) (#​38502)
  • fix(actions): explain why a blocked or waiting job has not started (#​38476) (#​38498)
  • fix(actions): make cancelled() work in job if evaluation (#​38495) (#​38497)
  • fix(actions): show retention info on hover for expired artifacts (#​38477) (#​38493)
  • fix(actions): group reusable-workflow matrix legs in the workflow graph (#​38475) (#​38492)
  • fix: full file highlighting for git diff with CR char (#​38484) (#​38491)
  • fix(packages): serve noarch Alpine index for any requested architecture (#​38479) (#​38486)
  • fix: 500 error when updating user visibility (#​38480) (#​38483)
  • fix(actions): make job list item fully clickable (#​38462) (#​38471)
  • fix: mail template for push event (#​38467) (#​38468)
  • fix: make "test push webhook" always work (#​38425) (#​38455)
  • fix(actions): prevent bulk actions from affecting all runners (#​38453) (#​38457)
  • fix(org): align follow button and wrap description (#​38448) (#​38454)
  • fix(actions): populate github.event for scheduled runs (#​38446) (#​38452)

• MISC

  • refactor: git patch apply (#​38637) (#​38638)

v1.26

• SECURITY

  • fix(auth): do not auto-reactivate disabled users on OAuth2 callback (#​38009) (#​38183)

• BUGFIXES

  • fix: walk git log context error handling (#​38182) (#​38185)

v1.25

• SECURITY
  • Toolchain Update to Go 1.25.6 (#​36480) (#​36487)
  • Adjust the toolchain version (#​36537) (#​36542)
  • Update toolchain to 1.25.8 for v1.25 (#​36888)
  • Prevent redirect bypasses via backslash-encoded paths (#​36660) (#​36716)
  • Fix get release draft permission check (#​36659) (#​36715)
  • Fix a bug user could change another user's primary email (#​36586) (#​36607)
  • Fix OAuth2 authorization code expiry and reuse handling (#​36797) (#​36851)
  • Add validation constraints for repository creation fields (#​36671) (#​36757)
  • Fix bug to check whether user can update pull request branch or rebase branch (#​36465) (#​36838)
  • Add migration http transport for push/sync mirror lfs (#​36665) (#​36691)
  • Fix track time list permission check (#​36662) (#​36744)
  • Fix track time issue id (#​36664) (#​36689)
  • Fix path resolving (#​36734) (#​36746)
  • Fix dump release asset bug (#​36799) (#​36839)
  • Fix org permission API visibility checks for hidden members and private orgs (#​36798) (#​36841)
  • Fix forwarded proto handling for public URL detection (#​36810) (#​36836)
  • Add a git grep search timeout (#​36809) (#​36835)
  • Fix oauth2 s256 (#​36462) (#​36477)
• ENHANCEMENTS
  • Make security-check informational only (#​36681) (#​36852)
  • Upgrade to github.com/cloudflare/circl 1.6.3, svgo 4.0.1, markdownlint-cli 0.48.0 (#​36840)
  • Add some validation on values provided to USER_DISABLED_FEATURES and EXTERNAL_USER_DISABLED_FEATURES (#​36688) (#​36692)
  • Upgrade gogit to 5.16.5 (#​36687)
  • Add wrap to runner label list (#​36565) (#​36574)
  • Add dnf5 command for Fedora in RPM package instructions (#​36527) (#​36572)
  • Allow scroll propagation outside code editor (#​36502) (#​36510)
• BUGFIXES
  • Fix non-admins unable to automerge PRs from forks (#​36833) (#​36843)
  • Fix bug when pushing mirror with wiki (#​36795) (#​36807)
  • Fix artifacts v4 backend upload problems (#​36805) (#​36834)
  • Fix CRAN package version validation to allow more than 4 version components (#​36813) (#​36821)
  • Fix force push time-line commit comments of pull request (#​36653) (#​36717)
  • Fix SVG height calculation in diff viewer (#​36748) (#​36750)
  • Fix push time bug (#​36693) (#​36713)
  • Fix bug the protected branch rule name is conflicted with renamed branch name (#​36650) (#​36661)
  • Fix bug when do LFS GC (#​36500) (#​36608)
  • Fix focus lost bugs in the Monaco editor (#​36609)
  • Reprocess htmx content after loading more files (#​36568) (#​36577)
  • Fix assignee sidebar links and empty placeholder (#​36559) (#​36563)
  • Fix issues filter dropdown showing empty label scope section (#​36535) (#​36544)
  • Fix various mermaid bugs (#​36547) (#​36552)
  • Fix data race when uploading container blobs concurrently (#​36524) (#​36526)
  • Correct spacing between username and bot label (#​36473) (#​36484)

v1.24

• SECURITY
  • Refactor legacy code (#​35708) (#​35713)
  • Fixing issue #​35530: Password Leak in Log Messages (#​35584) (#​35665)
  • Fix a bug missed return (#​35655) (#​35671)
• BUGFIXES
  • Fix inputing review comment will remove reviewer (#​35591) (#​35664)
• TESTING
  • Mock external service in hcaptcha TestCaptcha (#​35604) (#​35663)
  • Fix build (#​35669)

v1.23

• SECURITY
  • Fix a bug when uploading file via lfs ssh command (#​34408) (#​34411)
  • Update net package (#​34228) (#​34232)
• BUGFIXES
  • Fix releases sidebar navigation link (#​34436) #​34439
  • Fix bug webhook milestone is not right. (#​34419) #​34429
  • Fix two missed null value checks on the wiki page. (#​34205) (#​34215)
  • Swift files can be passed either as file or as form value (#​34068) (#​34236)
  • Fix bug when API get pull changed files for deleted head repository (#​34333) (#​34368)
  • Upgrade github v61 -> v71 to fix migrating bug (#​34389)
  • Fix bug when visiting comparation page (#​34334) (#​34364)
  • Fix wrong review requests when updating the pull request (#​34286) (#​34304)
  • Fix github migration error when using multiple tokens (#​34144) (#​34302)
  • Explicitly not update indexes when sync database schemas (#​34281) (#​34295)
  • Fix panic when comment is nil (#​34257) (#​34277)
  • Fix project board links to related Pull Requests (#​34213) (#​34222)
  • Don't assume the default wiki branch is master in the wiki API (#​34244) (#​34245)
• DOCUMENTATION
  • Update token creation API swagger documentation (#​34288) (#​34296)
• MISC
  • Fix CI Build (#​34315)
  • Add riscv64 support (#​34199) (#​34204)
  • Bump go version in go.mod (#​34160)
  • remove hardcoded 'code' string in clone_panel.tmpl (#​34153) (#​34158)

v1.22

• SECURITY
  • Fix misuse of PublicKeyCallback(#​32810)
• BUGFIXES
  • Fix lfs migration (#​32812) (#​32818)
  • Add missing two sync feed for refs/pull (#​32815)
• TESTING
  • Avoid MacOS keychain dialog in integration tests (#​32813) (#​32816)

v1.21

• SECURITY
  • Use go1.21.9 to include Golang security fix
  • Fix possible renderer security problem (#​30136) (#​30315)
  • Performance optimization for git push and check permissions for push options (#​30104) (#​30354)
• BUGFIXES
  • Fix close file in the Upload func (#​30262) (#​30269)
  • Fix inline math blocks can't be preceded/followed by alphanumerical characters (#​30175) (#​30250)
  • Fix missing 0 prefix of GPG key id (#​30245) (#​30247)
  • Include encoding in signature payload (#​30174) (#​30181)
  • Move from max( id ) to max( index ) for latest commit statuses (#​30076) (#​30155)
  • Load attachments for code comments (#​30124) (#​30126)
  • Fix gitea doctor will remove repo-avatar files when executing command storage-archives (#​30094) (#​30120)
  • Fix possible data race on tests (#​30093) (#​30108)
  • Fix duplicate migrated milestones (#​30102) (#​30105)
  • Fix panic for fixBrokenRepoUnits16961 (#​30068) (#​30100)
  • Fix incorrect SVGs (#​30086) (#​30087)
  • Fix create commit status (#​30225) (#​30340)
  • Fix misuse of unsupported global variables (#​30402)
  • Fix to delete the cookie when AppSubURL is non-empty (#​30375) (#​30468)
  • Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#​30357) (#​30408)
  • Change the default maxPerPage for gitbucket (#​30392) (#​30471)
  • Check the token's owner and repository when registering a runner (#​30406) (#​30412)
  • Avoid losing token when updating mirror settings (#​30429) (#​30466)
  • Fix commit status cache which missed target_url (#​30426) (#​30445)
  • Fix rename branch 500 when the target branch is deleted but exist in database (#​30430) (#​30437)
  • Fix mirror error when mirror repo is empty (#​30432) (#​30467)
  • Use db.ListOptions directly instead of Paginator interface to make it easier to use and fix performance of /pulls and /issues (#​29990) (#​30447)
  • Fix code owners will not be mentioned when a pull request comes from a forked repository (#​30476) (#​30497)
• DOCS
  • Update actions variables documents (#​30394) (#​30405)
• MISC
  • Update katex to 0.16.10 (#​30089)
  • Upgrade go-sqlite to v1.14.22 (#​30462)

offen/docker-volume-backup (offen/docker-volume-backup)

v2.48.2

Compare Source

Fixes

• Google Drive ID needs to be set for shared drives #​784

Chores

• Decrease memory usage in SSH backends by using io.Copy for uploads #​805 (thanks @​J4kubS)
• Dependency hygiene #​806 #​807 #​809 #​810

v2.48.1

Compare Source

Fixes

• Storage backends swallow some errors (#​798)

Chores

• Dependency hygiene #​775 #​774 #​772 #​776 #​778 #​779 #​780 #​783 #​782 #​781 #​786 #​787 #​788 #​780 #​791 #​793 #​792 #​794 #​795 #​803 #​802 #​800
• Update alpine base image to 3.24 #​799

v2.48.0

Compare Source

Features

• Support reading timezone info from env #​748 (thanks @​mmichalak-swe)

Chores

• Dependency hygiene #​737 #​738 #​742 #​745 #​743 #​751 #​752 #​754 #​753 #​755 #​758 #​757 #​762 #​761 #​760 #​676 #​766 #​763 #​764 #​765 #​768 #​769 #​770 #​771
• increase rebuild speed by avoiding retrigger of mod download #​759 (thanks @​mmittelb)

Docs

• Update docs on setting timezone #​750 (thanks @​mmichalak-swe)
• Fix typos in documentation #​739 (thanks @​SmallFriendlyKiwi)

---

Refer to the documentation at https://offen.github.io/docker-volume-backup/how-tos/set-container-timezone.html for more information on how to update your timezone configuration following this release

v2.47.2

Compare Source

Fixes

• Google Drive upload fails silently when configuration is wrong #​733
• Service count in Swarm mode is always 0 #​736 (thanks @​SmallFriendlyKiwi)

Chores

• Dependency hygiene #​731 #​734 #​735

v2.47.1

Compare Source

Fixes

• Send Content-MD5 header on S3 uploads #​728 (thanks @​tianshanghong)

Chores

• Build using Go 1.26 #​730 #​726
• Dependeny hygiene #​709 #​710 #​712 #​713 #​714 #​715 #​716 #​717 #​718 #​719 #​720 #​721 #​722 #​723 #​724 #​725

v2.47.0

Compare Source

Features

• Add print-config subcommand for debugging #​698 (thanks @​le-lenn)

Fixes

• send failure notifications for config init errors too #​697 (thanks @​le-lenn)

Chores

• Update alpine version to 3.23 #​693
• Migrate from package docker/docker to moby packages #​676 #​682
• Dependency hygiene #​670 #​672 #​669 #​673 #​671 #​675 #​677 #​678 #​679 #​68 #​684 #​683 #​681 #​685 #​688 #​689 #​690 #​691 #​692 #​695 #​701 #​706 #​707
• Desired go version can be read from go.mod #​647
• optimize test suite for local use #​702 #​700 (thanks @​le-lenn)

v2.46.1

Compare Source

Fixes

• Close dangling SSH connections after use #​668

Chores

• Dependency Hygiene #​665 #​666

v2.46.0

Compare Source

Features

• Add option to skip restart of stopped containers/services after backup #​659 (thanks @​ChainsLunatic)

Chores

• Dependency hygiene #​656 #​657 #​658 #​660 #​661 #​662

v2.45.0

Compare Source

Features

• Add optional jittering before any backup actions #​654 (thanks @​estebanthi)

Fixes

• Update shoutrrr to set default SMTP timeout of 10s #​655 (thanks @​PythonGermany @​nicholas-fedor)

Chores

• Dependeny hygiene #​649 #​650 #​651 #​652

v2.44.1

Compare Source

Fixes

• Ensure destination exists when using SSH storage #​646 (Thanks @​estebanthi)

Chores

• Replace containrrr/shoutrrr with nicholas-fedor/shoutrrr #​643 (Thanks @​nicholas-fedor for updating the documentation f

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.