fix(deps): update all dependencies by renovate[bot] · Pull Request #54 · aperturerobotics/common

renovate · 2026-08-13T16:52:08Z

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/setup-uv	action	patch	`v10.0.0` → `v10.0.1`
github.com/golangci/golangci-lint/v2	require	minor	`v2.12.2` → `v2.13.1`
github/codeql-action	action	patch	`v4.37.6` → `v4.37.8`
go	uses-with	minor	`1.26` → `1.27`
golang.org/x/mod	require	minor	`v0.39.0` → `v0.40.0`
golang.org/x/tools	require	minor	`v0.48.0` → `v0.49.0`
oxfmt (source)	devDependencies	minor	`0.63.0` → `0.64.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

astral-sh/setup-uv (astral-sh/setup-uv)

`v10.0.1`: 🌈 Tolerate transient manifest timeouts

Compare Source

Changes

Thank you @arguile- for making this action more resilient.

🐛 Bug fixes

Tolerate transient manifest timeouts @arguile- (#1016)

🧰 Maintenance

chore: update known checksums for 0.12.4 @github-actions[bot] (#1017)

📚 Documentation

docs: update version references to v10.0.0 @github-actions[bot] (#1014)

golangci/golangci-lint (github.com/golangci/golangci-lint/v2)

`v2.13.1`

Compare Source

Released on 2026-08-20

Linters bug fixes
- ginkgolinter: from 0.23.1 to 0.24.0
- gofmt: from d62b90e to e84e050
- staticcheck: from 0.8.0-rc.1 to 0.8.0
- wsl_v5: from 5.8.0 to 5.9.0

`v2.13.0`

Compare Source

Released on 2026-08-19

Enhancements
- 🎉 go1.27 support
Bug fixes
- fix: cache package facts
Linters new features or changes
- dupword: from 0.1.7 to 0.1.8 (new option skip-raw-strings)
- errcheck: from 1.10.0 to 1.20.0
- exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)
- exhaustruct: deprecated and replaced by exhaustruct_v5
- fatcontext: from 0.9.0 to 0.10.0 (new options: check-loops, check-function-literals)
- goconst: add option `exclude-
- goconst: from 1.10.0 to 1.11.0 (new option: ignore-map-keys)
- gofumpt: from 0.9.2 to 0.11.0 (new options: extra.group-params, extra.clothe-returns, extra.balance-calls)
- gomoddirectives: from 0.8.0 to 0.9.0 (new option: replace-allow-all)
- gosec: from 2.26.1 to 2.27.1
- govet-modernize: from 0.44.0 to 0.49.0 (fmtappendf is removed. New analyzers atomictypes, embedlit, errorsastype, importcomment, reflecttypeassert, slicesclip, and slicesbackward. waitgroup is renamed waitgroupgo)
- iface: from 1.4.3 to 1.5.0 (new analyzer: unusedmethod)
- noinlineerr: from 1.0.5 to 1.0.6
- nonamedreturns: from 1.0.6 to 1.0.8 (new option: allow-unused-named-returns)
- recvcheck: from 0.2.0 to 0.3.0 (new default exclusions) types`
- unparam: from 2dd26e2 to 2dd26e2
Linters bug fixes
- clickhouse-go-linter: from 1.2.0 to 1.2.1
- errname: from 1.1.1 to 1.1.2
- exhaustruct: from 5.0.2 to 5.0.3
- funcorder: add missing Function field
- ginkgolinter: from 0.23.0 to 0.23.1
- gocheckcompilerdirectives: from 1.3.0 to 1.4.0
- gocritic: from 0.14.3 to 0.14.4
- gomoddirectives: add missing IgnoreForbidden field
- iface: from 1.4.2 to 1.4.3
- mirror: from 1.3.0 to 1.3.3
- nilnil: from 1.1.1 to 1.1.2
- protogetter: from 0.3.20 to 0.3.21

github/codeql-action (github/codeql-action)

`v4.37.8`

Compare Source

`v4.37.7`

Compare Source

Update default CodeQL bundle version to 2.26.3. #4085

actions/go-versions (go)

`v1.27.0`: 1.27.0

Compare Source

Go 1.27.0

oxc-project/oxc (oxfmt)

`v0.64.0`

Compare Source

🚀 Features

c07fe7c oxfmt: Support experimentalOperatorPosition (#25643) (leaysgur)

📚 Documentation

fed6681 oxfmt: Skip expanding overrides options (#25572) (leaysgur)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-08-13T16:52:53Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
golang/github.com/golangci/golangci-lint/v2@v2.12.2 ⏵ v2.13.1	⁺¹
golang/golang.org/x/tools@v0.48.0 ⏵ v0.49.0	⁺¹
npm/oxfmt@0.63.0 ⏵ 0.64.0	⁺¹	⁺¹	⁺¹
golang/golang.org/x/mod@v0.39.0 ⏵ v0.40.0	⁺¹

View full report

renovate · 2026-08-19T02:32:10Z

ℹ️ Artifact update notice

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

53 additional dependencies were updated

Details:

Package	Change
`4d63.com/gocheckcompilerdirectives`	`v1.3.0` -> `v1.4.0`
`charm.land/lipgloss/v2`	`v2.0.5` -> `v2.0.6`
`cloud.google.com/go/auth`	`v0.20.0` -> `v0.21.0`
`dev.gaijin.team/go/golib`	`v0.6.0` -> `v0.8.1`
`github.com/Abirdcfly/dupword`	`v0.1.7` -> `v0.1.8`
`github.com/AlwxSin/noinlineerr`	`v1.0.5` -> `v1.0.6`
`github.com/Antonboom/errname`	`v1.1.1` -> `v1.1.2`
`github.com/Antonboom/nilnil`	`v1.1.1` -> `v1.1.2`
`github.com/ClickHouse/clickhouse-go-linter`	`v1.2.0` -> `v1.2.1`
`github.com/alecthomas/chroma/v2`	`v2.24.1` -> `v2.27.0`
`github.com/bombsimon/wsl/v5`	`v5.8.0` -> `v5.9.0`
`github.com/buger/jsonparser`	`v1.1.2` -> `v1.2.0`
`github.com/butuzov/mirror`	`v1.3.0` -> `v1.3.3`
`github.com/charmbracelet/ultraviolet`	`v0.0.0-20251205161215-1948445e3318` -> `v0.0.0-20260811164956-006e29f97886`
`github.com/charmbracelet/x/ansi`	`v0.11.7` -> `v0.11.8`
`github.com/felixge/httpsnoop`	`v1.0.4` -> `v1.1.0`
`github.com/firefart/nonamedreturns`	`v1.0.6` -> `v1.0.8`
`github.com/ghostiam/protogetter`	`v0.3.20` -> `v0.3.21`
`github.com/go-critic/go-critic`	`v0.14.3` -> `v0.14.4`
`github.com/golangci/gofmt`	`v0.0.0-20250106114630-d62b90e6713d` -> `v0.0.0-20260820135601-e84e05053792`
`github.com/google/pprof`	`v0.0.0-20260402051712-545e8a4df936` -> `v0.0.0-20260709232956-b9395ee17fa0`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.16` -> `v0.3.18`
`github.com/googleapis/gax-go/v2`	`v2.22.0` -> `v2.23.0`
`github.com/jgautheron/goconst`	`v1.10.0` -> `v1.11.0`
`github.com/kisielk/errcheck`	`v1.10.0` -> `v1.20.0`
`github.com/ldez/gomoddirectives`	`v0.8.0` -> `v0.9.0`
`github.com/lucasb-eyer/go-colorful`	`v1.4.0` -> `v1.4.1`
`github.com/mattn/go-colorable`	`v0.1.14` -> `v0.1.15`
`github.com/mattn/go-runewidth`	`v0.0.23` -> `v0.0.24`
`github.com/nunnatsa/ginkgolinter`	`v0.23.0` -> `v0.24.0`
`github.com/pelletier/go-toml/v2`	`v2.3.1` -> `v2.4.3`
`github.com/raeperd/recvcheck`	`v0.2.0` -> `v0.3.0`
`github.com/rogpeppe/go-internal`	`v1.15.0` -> `v1.16.0`
`github.com/santhosh-tekuri/jsonschema/v6`	`v6.0.2` -> `v6.0.3`
`github.com/securego/gosec/v2`	`v2.26.1` -> `v2.28.0`
`github.com/sirupsen/logrus`	`v1.9.5-0.20260629095817-a23d315dfebb` -> `v1.10.1`
`github.com/stretchr/objx`	`v0.5.2` -> `v0.5.3`
`github.com/stretchr/testify`	`v1.11.1` -> `v1.12.1`
`github.com/uudashr/iface`	`v1.4.2` -> `v1.5.0`
`go.augendre.info/fatcontext`	`v0.9.0` -> `v0.10.0`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.68.0` -> `v0.69.0`
`go.yaml.in/yaml/v3`	`v3.0.4` -> `v3.0.5`
`golang.org/x/crypto`	`v0.54.0` -> `v0.55.0`
`golang.org/x/exp/typeparams`	`v0.0.0-20260209203927-2842357ff358` -> `v0.0.0-20260811152304-ee035b5b010f`
`golang.org/x/mod`	`v0.38.0` -> `v0.40.0`
`golang.org/x/net`	`v0.57.0` -> `v0.58.0`
`golang.org/x/telemetry`	`v0.0.0-20260708182218-49f421fb7959` -> `v0.0.0-20260811182544-a038080d80e5`
`golang.org/x/text`	`v0.40.0` -> `v0.41.0`
`google.golang.org/api`	`v0.283.0` -> `v0.288.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260526163538-3dc84a4a5aaa` -> `v0.0.0-20260630182238-925bb5da69e7`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260523011958-0a33c5d7ca68` -> `v0.0.0-20260706201446-f0a921348800`
`honnef.co/go/tools`	`v0.7.0` -> `v0.8.0`
`mvdan.cc/unparam`	`v0.0.0-20251027182757-5beb8c8f8f15` -> `v0.0.0-20260818115549-3f964bcb5673`

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/all branch 5 times, most recently from dee0e75 to 925c761 Compare August 19, 2026 02:32

renovate Bot force-pushed the renovate/all branch 3 times, most recently from e8a149e to 3118cfe Compare August 20, 2026 16:08

fix(deps): update all dependencies

ae2a224

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/all branch from 3118cfe to ae2a224 Compare August 21, 2026 15:36

Navigation Menu

Uh oh!

fix(deps): update all dependencies - #54

fix(deps): update all dependencies#54
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all

renovate Bot commented Aug 13, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 13, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v10.0.1: 🌈 Tolerate transient manifest timeouts

Changes

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v2.13.1

v2.13.0

v4.37.8

v4.37.7

v1.27.0: 1.27.0

v0.64.0

🚀 Features

📚 Documentation

Configuration

Uh oh!

socket-security Bot commented Aug 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate Bot commented Aug 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: tools/go.mod

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 13, 2026 •

edited

Loading

`v10.0.1`: 🌈 Tolerate transient manifest timeouts

`v2.13.1`

`v2.13.0`

`v4.37.8`

`v4.37.7`

`v1.27.0`: 1.27.0

`v0.64.0`

socket-security Bot commented Aug 13, 2026 •

edited

Loading

renovate Bot commented Aug 19, 2026 •

edited

Loading