fix(deps): update all dependencies by renovate[bot] · Pull Request #8 · aperturerobotics/cayley

renovate · 2026-07-05T05:46:20Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v7.0.0` → `v7.0.1`
actions/setup-go	action	major	`v6.5.0` → `v7.0.0`
github.com/aperturerobotics/bbolt	require	digest	`d1668b6` → `633a656`
github.com/aperturerobotics/common	require	minor	`v0.34.1` → `v0.35.2`
github.com/aperturerobotics/protobuf-go-lite	require	minor	`v0.15.0` → `v0.18.0`
github.com/dgraph-io/badger/v4	require	patch	`v4.9.2` → `v4.9.6`
github.com/dop251/goja	require	digest	`b07b744` → `8f1c069`
github.com/sirupsen/logrus	require	minor	`v1.9.5-0.20260508084601-d4a50659cfd6` → `v1.10.2`
github.com/stretchr/testify	require	minor	`v1.11.1` → `v1.12.1`
github/codeql-action	action	minor	`v4.36.3` → `v4.37.9`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

actions/setup-go (actions/setup-go)

`v7.0.0`

Compare Source

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in #763
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #771

New Contributors

@philip-gai made their first contribution in #771

Full Changelog: actions/setup-go@v6...v7.0.0

aperturerobotics/common (github.com/aperturerobotics/common)

`v0.35.2`

Compare Source

What's Changed

fix(protogen): map Python dependency imports by @paralin in #52
fix(ci): restore Common Go checks by @paralin in #53

Full Changelog: aperturerobotics/common@v0.35.1...v0.35.2

What's Changed

fix(tools): restore module hashes for the tool build by @paralin in #51

Full Changelog: aperturerobotics/common@v0.34.3...v0.34.4

`v0.34.3`

Compare Source

Full Changelog: aperturerobotics/common@v0.34.2...v0.34.3

`v0.34.2`

Compare Source

What's Changed

fix(deps): update all dependencies by @renovate[bot] in #49

Full Changelog: aperturerobotics/common@v0.34.1...v0.34.2

aperturerobotics/protobuf-go-lite (github.com/aperturerobotics/protobuf-go-lite)

`v0.18.0`

Compare Source

`v0.17.0`

Compare Source

`v0.16.0`

Compare Source

dgraph-io/badger (github.com/dgraph-io/badger/v4)

`v4.9.6`

Compare Source

What's Changed

fix(compaction): restore size-ratio base level selection, clamped to the first non-empty level by @shiva-istari in #2330

Full Changelog: dgraph-io/badger@v4.9.5...v4.9.6

`v4.9.5`

Compare Source

What's Changed

fix: prevent nil deref when reading in-memory tables by @ErfanMomeniii in #2316
ci: test PR's badger code against dgraph instead of main by @shiva-istari in #2320
chore(deps): bump go.opentelemetry.io/otel to v1.41.0 (CVE-2026-29181) by @matthewmcneely in #2323

New Contributors

@ErfanMomeniii made their first contribution in #2316

Full Changelog: dgraph-io/badger@v4.9.4...v4.9.5

`v4.9.4`

Compare Source

What's Changed

fix(db): don't drop acknowledged writes during DropPrefix/DropAll by @matthewmcneely in #2313
fix: fix an issue where the compactor causes previously deleted data to reappear by @yangchun0821 in #2278
docs(changelog): backfill 4.9.2, add 4.9.3, fix 4.9.0 compare link by @matthewmcneely in #2311

New Contributors

@yangchun0821 made their first contribution in #2278

Full Changelog: dgraph-io/badger@v4.9.3...v4.9.4

`v4.9.3`

Compare Source

What's Changed

perf(db): signal-based L0 write backpressure (replace busy-sleeps) by @shaunpatterson in #2308
fix(vlog): prevent deleted key from reappearing after value-log GC by @shiva-istari in #2310
docs: update CONTRIBUTING (TOC, code style, license header, master→main) by @matthewmcneely in #2300
chore(ci): add stale Action by @shiva-istari in #2302
ci: keep required checks green on docs-only PRs by @matthewmcneely in #2301

New Contributors

@shaunpatterson made their first contribution in #2308

Full Changelog: dgraph-io/badger@v4.9.2...v4.9.3

sirupsen/logrus (github.com/sirupsen/logrus)

`v1.10.2`

Compare Source

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

`v1.10.1`

Compare Source

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

Fix a regression introduced in v1.10.0 where TextFormatter could panic
when formatting nil or panicking error and fmt.Stringer values.
Allow function-backed values implementing error to be used with
WithError, WithField, and WithFields.

Dependency Changes

update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

stretchr/testify (github.com/stretchr/testify)

`v1.12.1`

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

`v1.12.0`

Compare Source

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in #1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
assert: truncate very long objects in test failure messages by @brackendawson in #1646
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in #1783
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in #1708
Promote ccoVeille to maintainer by @brackendawson in #1784
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1790
assert.YAMLEq: Document mutlidoc behavior by @brackendawson in #1791
_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in #1782
doc: remove ineffective inline code blocks by @brackendawson in #1714
Tag generated assertions as non-generated in new .gitattributes by @ubunatic in #1815
chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in #1827
require: fix godoc generation for assertions returning a bool by @Baxromumarov in #1850
docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in #1821
docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in #1842
EMERITUS.md: add @tylerb by @dolmen in #1812
CI: test also with Go 1.24 by @alexandear in #1856
deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in #1823
CI: upgrade GitHub Actions and pin hashes by @SuperQ in #1883
CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in #1889
CI: add check of GitHub Action pinned hashes against tag by @dolmen in #1885
_codegen: modernize by @dolmen in #1890
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1906
mock: Mock.Return does not exist anymore by @Kentzo in #1905

New Contributors

@mutaiib made their first contribution in #1775
@vyas-git made their first contribution in #1665
@olivergondza made their first contribution in #1400
@egawata made their first contribution in #1792
@ubunatic made their first contribution in #1815
@Baxromumarov made their first contribution in #1850
@a2not made their first contribution in #1821
@nghiack7 made their first contribution in #1888
@blackwell-systems made their first contribution in #1877
@Kentzo made their first contribution in #1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

What's Changed

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
CI: test also with Go 1.23 by @dolmen in #1783
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in #1708
Promote ccoVeille to maintainer by @brackendawson in #1784
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1790
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
assert.YAMLEq: Document mutlidoc behavior by @brackendawson in #1791
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in #1782
assert: truncate very long objects in test failure messages by @brackendawson in #1646
doc: remove ineffective inline code blocks by @brackendawson in #1714
Tag generated assertions as non-generated in new .gitattributes by @ubunatic in #1815
chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in #1827
require: fix godoc generation for assertions returning a bool by @Baxromumarov in #1850
docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in #1821
docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in #1842
EMERITUS.md: add @tylerb by @dolmen in #1812
CI: test also with Go 1.24 by @alexandear in #1856
deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in #1823
CI: upgrade GitHub Actions and pin hashes by @SuperQ in #1883
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877
CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in #1889
CI: add check of GitHub Action pinned hashes against tag by @dolmen in #1885
_codegen: modernize by @dolmen in #1890
assert: make *AssertionFunc types just aliases by @dolmen in #1563
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1906
mock: Mock.Return does not exist anymore by @Kentzo in #1905

New Contributors

@mutaiib made their first contribution in #1775
@vyas-git made their first contribution in #1665
@olivergondza made their first contribution in #1400
@egawata made their first contribution in #1792
@ubunatic made their first contribution in #1815
@Baxromumarov made their first contribution in #1850
@a2not made their first contribution in #1821
@nghiack7 made their first contribution in #1888
@blackwell-systems made their first contribution in #1877
@Kentzo made their first contribution in #1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

github/codeql-action (github/codeql-action)

`v4.37.9`

Compare Source

Update default CodeQL bundle version to 2.26.4. #4106

`v4.37.8`

Compare Source

No user facing changes.

`v4.37.7`

Compare Source

Update default CodeQL bundle version to 2.26.3. #4085

`v4.37.6`

Compare Source

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

`v4.37.5`

Compare Source

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

`v4.37.4`

Compare Source

`v4.37.3`

Compare Source

No user facing changes.

`v4.37.2`

Compare Source

The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023
The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007

`v4.37.1`

Compare Source

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956
Update default CodeQL bundle version to 2.26.1. #4019

`v4.37.0`

Compare Source

Update default CodeQL bundle version to 2.26.0. #3995
In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-07-05T05:46:35Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/github.com/aperturerobotics/bbolt@v0.0.0-20260704155049-d1668b64c0f6 ⏵ v0.0.0-20260803053248-633a6560e3d0	^-1
	golang/github.com/stretchr/testify@v1.11.1 ⏵ v1.12.1	^-6
	golang/github.com/dop251/goja@v0.0.0-20260701091749-b07b74453ea9 ⏵ v0.0.0-20260826204918-8f1c0696a37b	⁺¹
	golang/github.com/dgraph-io/badger/v4@v4.9.2 ⏵ v4.9.6
	golang/github.com/aperturerobotics/common@v0.34.1 ⏵ v0.35.2	⁺¹
	golang/github.com/sirupsen/logrus@v1.9.5-0.20260508084601-d4a50659cfd6 ⏵ v1.10.2
	golang/github.com/aperturerobotics/protobuf-go-lite@v0.15.0 ⏵ v0.18.0

View full report

renovate · 2026-07-19T22:02:22Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

7 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.25.5` -> `1.26.4`
`github.com/aperturerobotics/fsnotify`	`v1.9.1-0.20260329111252-827e5e9feeab` -> `v1.9.1-0.20260506231828-931cb4bf1761`
`github.com/dlclark/regexp2/v2`	`v2.2.1` -> `v2.5.2`
`go.opentelemetry.io/otel`	`v1.38.0` -> `v1.41.0`
`go.opentelemetry.io/otel/metric`	`v1.38.0` -> `v1.41.0`
`go.opentelemetry.io/otel/trace`	`v1.38.0` -> `v1.41.0`
`go.yaml.in/yaml/v3`	`v3.0.4` -> `v3.0.5`
`golang.org/x/sys`	`v0.44.0` -> `v0.47.0`

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 5423446 to b88e008 Compare July 8, 2026 19:39

renovate Bot force-pushed the renovate/all branch 3 times, most recently from f940d01 to ee759f6 Compare July 19, 2026 22:02

renovate Bot force-pushed the renovate/all branch 6 times, most recently from 8d3904b to b03c01b Compare July 23, 2026 22:59

renovate Bot force-pushed the renovate/all branch 10 times, most recently from db5ab49 to 71ab632 Compare August 3, 2026 11:39

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 2d91048 to 0d9add3 Compare August 9, 2026 10:01

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 28073a7 to 0bd2b16 Compare August 12, 2026 22:46

renovate Bot force-pushed the renovate/all branch 6 times, most recently from c9f07c9 to 6a4dfb5 Compare August 20, 2026 05:43

renovate Bot force-pushed the renovate/all branch 10 times, most recently from 6001acb to 0812ced Compare August 26, 2026 23:54

fix(deps): update all dependencies

e444677

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/all branch from 0812ced to e444677 Compare August 29, 2026 01:55

Navigation Menu

Uh oh!

fix(deps): update all dependencies - #8

fix(deps): update all dependencies#8
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all

renovate Bot commented Jul 5, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 5, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jul 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jul 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Logrus v1.10.2

Logrus v1.10.1

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

socket-security Bot commented Jul 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate Bot commented Jul 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 5, 2026 •

edited

Loading

socket-security Bot commented Jul 5, 2026 •

edited

Loading

renovate Bot commented Jul 19, 2026 •

edited

Loading