Skip to content

fix(deps): update all non-major dependencies#77

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pin
Open

fix(deps): update all non-major dependencies#77
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pin

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jul 29, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/setup-go action minor v6.3.0 → v6.4.0 age confidence
alpine final patch 3.23.3 → 3.23.4 age confidence
alpine stage patch 3.23.3 → 3.23.4 age confidence
cli/cli minor 2.87.3 → 2.91.0 age confidence
codecov/codecov-action action patch v5.5.2 → v5.5.4 age confidence
elgohr/Publish-Docker-Github-Action action pinDigest → 8217e91
github.com/go-vela/server require minor v0.27.5 → v0.28.3 age confidence
github.com/urfave/cli/v3 require minor v3.7.0 → v3.8.0 age confidence
github/codeql-action action minor v4.32.5 → v4.35.2 age confidence
reviewdog/action-golangci-lint action minor v2.8.0 → v2.10 age confidence

Release Notes

actions/setup-go (actions/setup-go)

v6.4.0

Compare Source

What's Changed
Enhancement
  • Add go-download-base-url input for custom Go distributions by @​gdams in #​721
Dependency update
Documentation update
New Contributors

Full Changelog: actions/setup-go@v6...v6.4.0

cli/cli (cli/cli)

v2.91.0: GitHub CLI 2.91.0

Compare Source

What's Changed

New Contributors

Full Changelog: cli/cli@v2.90.0...v2.91.0

v2.90.0: GitHub CLI 2.90.0

Compare Source

Manage agent skills with gh skill (Public Preview)

Agent skills are portable sets of instructions, scripts, and resources that teach AI coding agents how to perform specific tasks. The new gh skill command makes it easy to discover, install, manage, and publish agent skills from GitHub repositories - right from the CLI.


# Discover skills
gh skill search copilot

# Preview a skill without installing
gh skill preview github/awesome-copilot documentation-writer

# Install a skill
gh skill install github/awesome-copilot documentation-writer

# Pin to a specific version
gh skill install github/awesome-copilot documentation-writer --pin v1.2.0

# Check installed skills for updates
gh skill update --all

# Validate and publish your own skills
gh skill publish --dry-run

Skills are automatically installed to the correct directory for your agent host. gh skill supports GitHub Copilot, Claude Code, Cursor, Codex, Gemini CLI, and Antigravity. Target a specific agent and scope with --agent and --scope flags.

gh skill publish validates skills against the Agent Skills specification and checks remote settings like tag protection and immutable releases to improve supply chain security.

Read the full announcement on the GitHub Blog.

gh skill is launching in public preview and is subject to change without notice.

Official extension suggestions

When you run a command that matches a known official extension that isn't installed (e.g. gh stack), the CLI now offers to install it instead of showing a generic "unknown command" error.

This feature is available for github/gh-aw and github/gh-stack.

When possible, you'll be prompted to install immediately. When prompting isn't possible, the CLI prints the gh extension install command to run.

gh extension install no longer requires authentication

gh extension install previously required a valid auth token even though it only needs to download a public release asset. The auth check has been removed, so you can install extensions without being logged in.

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: cli/cli@v2.89.0...v2.90.0

v2.89.0: GitHub CLI 2.89.0

Compare Source

:copilot: gh agent-task now works on ghe.com tenancies

gh agent-task commands previously failed with 401 Unauthorized for users on ghe.com tenancy hosts because the Copilot API URL was hardcoded. The URL is now resolved dynamically per host, so gh agent-task works correctly regardless of your GitHub hosting environment.

Experimental new prompter

A new TUI-based prompter powered by charmbracelet/huh is available behind the GH_EXPERIMENTAL_PROMPTER environment variable. This is an early preview — try it out and share feedback!

export GH_EXPERIMENTAL_PROMPTER=1

gh issue create and gh issue transfer no longer require extra token scopes

gh issue create and gh issue transfer previously fetched repository fields they didn't need, which could require additional token scopes. These commands now fetch only the minimal fields necessary for issue operations.

What's Changed

✨ Features
  • gh pr create, gh issue create, gh issue edit: search-based assignee selection and login-based mutation on github.com by @​BagToad in #​13009
  • Add experimental huh-only prompter gated by GH_EXPERIMENTAL_PROMPTER by @​BagToad in #​12859
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: v2.88.1...v2.89.0

v2.88.1: GitHub CLI 2.88.1

Compare Source

Fix pr commands failing with read:project scope error

v2.88.0 introduced a regression where pr commands would fail with the error:

error: your authentication token is missing required scopes [read:project]
To request it, run:  gh auth refresh -s read:project

Previously, missing read:project scope was gracefully handled, and project data was silently skipped. A change inadvertently broke the error matching that enabled this graceful degradation. v2.88.1 reverts these changes so that pr commands work correctly without requiring the read:project scope.

What's Changed

Full Changelog: cli/cli@v2.88.0...v2.88.1

v2.88.0: GitHub CLI 2.88.0

Compare Source

:copilot: Request Copilot Code Review from gh

image

gh pr create and gh pr edit now support Copilot Code Review as a reviewer. Request a review with --add-reviewer @​copilot, or select Copilot interactively from the searchable reviewer prompt.

Create a pull request and request review from Copilot:

gh pr create --reviewer @​copilot

Edit a pull request and request review from Copilot:

gh pr edit --add-reviewer @​copilot

Close issues as duplicates with gh issue close --duplicate-of

You can now close issues as duplicates and link to a duplicate issue directly from the CLI. The new --duplicate-of flag accepts an issue number or URL and marks the closed issue as a duplicate of the referenced one. You can also use --reason duplicate to set the close reason without linking a specific issue.


# Close as duplicate, linking to the original issue
gh issue close 123 --duplicate-of 456

# Close with duplicate reason only
gh issue close 123 --reason duplicate

JSON support for gh agent-task

gh agent-task list and gh agent-task view now support --json, --jq, and --template flags, consistent with other gh commands.

gh agent-task list --json id,name,state
gh agent-task view <id> --json state --jq '.state'

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: cli/cli@v2.87.3...v2.88.0

codecov/codecov-action (codecov/codecov-action)

v5.5.4

Compare Source

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

v5.5.3

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

go-vela/server (github.com/go-vela/server)

v0.28.3

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.28.2...v0.28.3

v0.28.2

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.28.1...v0.28.2

v0.28.1

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.28.0...v0.28.1

v0.28.0

Compare Source

What's Changed

Full Changelog: go-vela/server@v0.27.5...v0.28.0

urfave/cli (github.com/urfave/cli/v3)

v3.8.0

Compare Source

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.7.0...v3.8.0

github/codeql-action (github/codeql-action)

v4.35.2

Compare Source

  • The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. [#​3795](https://redirect.github.com/github/codeql-action

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner July 29, 2025 23:59
@renovate renovate Bot added the dependencies Indicates a change to dependencies label Jul 29, 2025
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch from ac4a695 to 2e31ac2 Compare July 30, 2025 19:54
@renovate renovate Bot changed the title chore(deps): update github/codeql-action action to v3.29.5 fix(deps): update all non-major dependencies Jul 30, 2025
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Jul 30, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
golang.org/x/sys v0.31.0 -> v0.35.0
golang.org/x/text v0.27.0 -> v0.28.0

@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 2 times, most recently from 059a60d to 502d485 Compare August 4, 2025 15:53
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 8 times, most recently from 24680d9 to 058fbd7 Compare August 12, 2025 13:52
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 131dd01 to ad9f685 Compare August 21, 2025 23:36
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from b7a1abb to ca28efc Compare September 5, 2025 13:11
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 02b0890 to 7e458d1 Compare September 10, 2025 21:13
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 80696d2 to e50cbd3 Compare September 25, 2025 16:07
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from fb30c0e to d64463d Compare November 14, 2025 05:07
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 90fc0e2 to 0f86d2b Compare November 19, 2025 12:37
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch from 0f86d2b to b384fdc Compare November 24, 2025 12:44
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from 93ad063 to 21e1c18 Compare December 3, 2025 20:53
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 6 times, most recently from b5d118d to 4dd255e Compare December 16, 2025 03:36
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 3 times, most recently from cd85d9a to f24a835 Compare December 18, 2025 09:30
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch from f24a835 to a1551ca Compare December 31, 2025 15:56
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from 47c4b0a to 6a6db8a Compare January 18, 2026 05:49
@renovate renovate Bot force-pushed the renovate/all-minor-patch-digest-pin branch 4 times, most recently from da8df9a to 1cf43f4 Compare January 28, 2026 04:27
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Mar 31, 2026 •
edited
Loading

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.7 -> 1.26.1
github.com/klauspost/compress v1.17.11 -> v1.18.2
golang.org/x/sys v0.39.0 -> v0.43.0
golang.org/x/text v0.32.0 -> v0.36.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Indicates a change to dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants