Skip to content

fix(deps): update vulnfeeds#81

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/vulnfeeds
Open

fix(deps): update vulnfeeds#81
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/vulnfeeds

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate Bot commented Aug 5, 2025

This PR contains the following updates:

Package Change Age Confidence Type Update
cloud.google.com/go/logging v1.13.0v1.16.0 age confidence require minor
cloud.google.com/go/secretmanager v1.14.6v1.19.0 age confidence require minor
github.com/atombender/go-jsonschema v0.18.0v0.23.0 age confidence require minor
golang 1.24.1-alpine1.26.2-alpine age confidence stage minor
golang.org/x/exp 054e65f746e56f age confidence require digest
pandas ==2.2.3==2.3.3 age confidence project.dependencies minor
pylint (changelog) 3.3.53.3.9 age confidence dev patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

atombender/go-jsonschema (github.com/atombender/go-jsonschema)

v0.23.0

Compare Source

What's Changed

This release brings in a number of features and fixes, including:

Dependencies updates:

Full Changelog: omissis/go-jsonschema@v0.22.0...v0.23.0

v0.22.0

Compare Source

What's Changed

This release brings in a number of features and fixes, including:

  • ability to add extra field tags
  • support for const type validation
  • usage of utf8 counts instead of byte ones for strings
  • addition of arrays without item type
  • generation of nullable datetime
  • and more!

Full list of feature and fixes:

Dependencies updates:

New Contributors

Full Changelog: omissis/go-jsonschema@v0.21.0...v0.22.0

v0.21.0

Compare Source

What's Changed

This release introduces a set of important fixes and improvements to subschemas, including:

  • adding support for nested ref types
  • adding support for properties on allOf/anyOf types
  • adding support for subschemas using external refs
  • adding support for subschemas when types are across different go packages
  • improving required properties in anyOf

Full list of feature and fixes:

Dependencies updates:

New Contributors

Full Changelog: omissis/go-jsonschema@v0.20.0...v0.21.0

v0.20.0

Compare Source

What's Changed

A load of new features and fixes, among which: support for duration string format, better naming for generated go structs, and support for read only properties.

New Contributors

Full Changelog: omissis/go-jsonschema@v0.19.0...v0.20.0

v0.19.0

Compare Source

What's Changed

A bugfixes releases mostly, containing several improvements to faulty behaviors as well as some quality of life improvements:

As well as it includes a number of dependency updates:

New Contributors

Full Changelog: omissis/go-jsonschema@v0.18.0...v0.19.0

pandas-dev/pandas (pandas)

v2.3.3: Pandas 2.3.3

Compare Source

We are pleased to announce the release of pandas 2.3.3.
This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes.
Pandas 2.3.3 supports Python 3.9 and higher, and is the first release to support Python 3.14.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

v2.3.2: Pandas 2.3.2

Compare Source

We are pleased to announce the release of pandas 2.3.2.
This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes.
Pandas 2.3.2 supports Python 3.9 and higher.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

v2.3.1: Pandas 2.3.1

Compare Source

We are pleased to announce the release of pandas 2.3.1.
This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes.
Pandas 2.3.1 supports Python 3.9 and higher.

The release will be available on the conda-forge channel:

conda install pandas --channel conda-forge

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

v2.3.0: Pandas 2.3.0

Compare Source

We are pleased to announce the release of pandas 2.3.0.
This release includes some new features, bug fixes, and performance improvements. We recommend that all users upgrade to this version.

See the full whatsnew for a list of all the changes.
Pandas 2.3.0 supports Python 3.10 and higher.

The release will be available on the defaults and conda-forge channels:

conda install -c conda-forge pandas

Or via PyPI:

python3 -m pip install --upgrade pandas

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pylint-dev/pylint (pylint)

v3.3.9

Compare Source

What's new in Pylint 3.3.9?

Release date: 2025-10-05

False Positives Fixed

  • Fix used-before-assignment for PEP 695 type aliases and parameters.

    Closes #​9815

  • No longer flag undeprecated functions in importlib.resources as deprecated.

    Closes #​10593

  • Fix false positive inconsistent-return-statements when using quit() or exit() functions.

    Closes #​10508

  • Fix false positive undefined-variable (E0602) for for-loop variable shadowing patterns like for item in item: when the variable was previously defined.

    Closes #​10562

Other Bug Fixes

  • Fixed crash in 'unnecessary-list-index-lookup' when starting an enumeration using
    minus the length of an iterable inside a dict comprehension when the len call was only
    made in this dict comprehension, and not elsewhere. Also changed the approach,
    to use inference in all cases but the simple ones, so we don't have to fix crashes
    one by one for arbitrarily complex expressions in enumerate.

    Closes #​10510

v3.3.8

Compare Source

What's new in Pylint 3.3.8?

Release date: 2025-08-09

This patch release includes an exceptional fix for a false negative issue. For details, see: #​10482 (comment)

False Positives Fixed

  • Fix false positives for possibly-used-before-assignment when variables are exhaustively
    assigned within a match block.

    Closes #​9668

  • Fix false positive for missing-raises-doc and missing-yield-doc when the method length is less than docstring-min-length.

    Refs #​10104

  • Fix a false positive for unused-variable when multiple except handlers bind the same name under a try block.

    Closes #​10426

False Negatives Fixed

  • Fix false-negative for used-before-assignment with from __future__ import annotations in function definitions.

    Refs #​10482

Other Bug Fixes

  • Fix a bug in Pyreverse where aggregations and associations were included in diagrams regardless of the selected --filter-mode (such as PUB_ONLY, ALL, etc.).

    Closes #​10373

  • Fix double underscores erroneously rendering as bold in pyreverse's Mermaid output.

    Closes #​10402

v3.3.7

Compare Source

What's new in Pylint 3.3.7?

Release date: 2025-05-04

False Positives Fixed

  • Comparisons between two calls to type() won't raise an unidiomatic-typecheck warning anymore, consistent with the behavior applied only for == previously.

    Closes #​10161

Other Bug Fixes

  • Fixed a crash when importing a class decorator that did not exist with the same name as a class attribute after the class definition.

    Closes #​10105

  • Fix a crash caused by malformed format strings when using .format with keyword arguments.

    Closes #​10282

  • Using a slice as a class decorator now raises a not-callable message instead of crashing. A lot of checks that dealt with decorators (too many to list) are now shortcut if the decorator can't immediately be inferred to a function or class definition.

    Closes #​10334

Other Changes

  • The algorithm used for no-member suggestions is now more efficient and cuts the
    calculation when the distance score is already above the threshold.

    Refs #​10277

v3.3.6

Compare Source

What's new in Pylint 3.3.6?

Release date: 2025-03-20

False Positives Fixed

  • Fix a false positive for used-before-assignment when an inner function's return type
    annotation is a class defined at module scope.

    Closes #​9391


Configuration

📅 Schedule: (in timezone Australia/Sydney)

  • Branch creation
    • "before 6am on wednesday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Aug 5, 2025
@renovate
Copy link
Copy Markdown
Author

renovate Bot commented Aug 5, 2025

ℹ Artifact update notice

File name: vulnfeeds/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 29 additional dependencies were updated

Details:

Package Change
cloud.google.com/go v0.118.3 -> v0.120.0
cloud.google.com/go/auth v0.15.0 -> v0.16.2
cloud.google.com/go/auth/oauth2adapt v0.2.7 -> v0.2.8
cloud.google.com/go/compute/metadata v0.6.0 -> v0.7.0
cloud.google.com/go/iam v1.4.1 -> v1.5.2
cloud.google.com/go/longrunning v0.6.4 -> v0.6.7
dario.cat/mergo v1.0.1 -> v1.0.2
github.com/ProtonMail/go-crypto v1.1.5 -> v1.1.6
github.com/cloudflare/circl v1.6.0 -> v1.6.1
github.com/googleapis/enterprise-certificate-proxy v0.3.5 -> v0.3.6
github.com/googleapis/gax-go/v2 v2.14.1 -> v2.14.2
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 -> v0.61.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 -> v0.61.0
go.opentelemetry.io/otel v1.34.0 -> v1.36.0
go.opentelemetry.io/otel/metric v1.34.0 -> v1.36.0
go.opentelemetry.io/otel/trace v1.34.0 -> v1.36.0
golang.org/x/crypto v0.36.0 -> v0.39.0
golang.org/x/net v0.37.0 -> v0.41.0
golang.org/x/oauth2 v0.27.0 -> v0.30.0
golang.org/x/sync v0.12.0 -> v0.16.0
golang.org/x/sys v0.31.0 -> v0.33.0
golang.org/x/text v0.23.0 -> v0.26.0
golang.org/x/time v0.10.0 -> v0.12.0
google.golang.org/api v0.224.0 -> v0.237.0
google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb -> v0.0.0-20250505200425-f936aa4a68b2
google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb -> v0.0.0-20250603155806-513f23925822
google.golang.org/genproto/googleapis/rpc v0.0.0-20250227231956-55c901821b1e -> v0.0.0-20250603155806-513f23925822
google.golang.org/grpc v1.71.0 -> v1.73.0
google.golang.org/protobuf v1.36.5 -> v1.36.6

@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 3 times, most recently from 57b8526 to f7b0d20 Compare August 10, 2025 04:02
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 2 times, most recently from 16cda67 to 5b838fa Compare August 17, 2025 15:42
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch from 5b838fa to 0f82ffe Compare August 22, 2025 02:18
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 2 times, most recently from e5ba3d6 to 64a4b0c Compare September 6, 2025 03:39
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch from 64a4b0c to 4ef96f3 Compare September 14, 2025 23:22
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 3 times, most recently from 43c5e45 to 8096dc5 Compare October 6, 2025 07:03
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 4 times, most recently from c892014 to b46b1d5 Compare October 14, 2025 04:09
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 3 times, most recently from d8fb7d7 to 5feb1e4 Compare October 21, 2025 00:11
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 2 times, most recently from daccb73 to 22038e4 Compare November 1, 2025 12:10
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 2 times, most recently from 3982d85 to 81cb05f Compare November 16, 2025 07:46
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 3 times, most recently from 37f7eda to dfa0a6e Compare November 25, 2025 23:31
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 2 times, most recently from c563c4a to c2b9638 Compare December 10, 2025 07:38
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 3 times, most recently from ce36a3b to 0a56917 Compare December 20, 2025 15:15
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch from 0a56917 to 04caf52 Compare January 13, 2026 05:32
@renovate
Copy link
Copy Markdown
Author

renovate Bot commented Jan 13, 2026

ℹ️ Artifact update notice

File name: vulnfeeds/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 29 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.6 -> 1.25.0
cloud.google.com/go v0.118.3 -> v0.123.0
cloud.google.com/go/auth v0.15.0 -> v0.19.0
cloud.google.com/go/auth/oauth2adapt v0.2.7 -> v0.2.8
cloud.google.com/go/compute/metadata v0.6.0 -> v0.9.0
cloud.google.com/go/iam v1.4.1 -> v1.7.0
cloud.google.com/go/longrunning v0.6.4 -> v0.9.0
dario.cat/mergo v1.0.1 -> v1.0.2
github.com/go-logr/logr v1.4.2 -> v1.4.3
github.com/googleapis/enterprise-certificate-proxy v0.3.5 -> v0.3.14
github.com/googleapis/gax-go/v2 v2.14.1 -> v2.21.0
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.59.0 -> v0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 -> v0.61.0
go.opentelemetry.io/otel v1.34.0 -> v1.43.0
go.opentelemetry.io/otel/metric v1.34.0 -> v1.43.0
go.opentelemetry.io/otel/trace v1.34.0 -> v1.43.0
golang.org/x/crypto v0.36.0 -> v0.49.0
golang.org/x/net v0.37.0 -> v0.52.0
golang.org/x/oauth2 v0.27.0 -> v0.36.0
golang.org/x/sync v0.12.0 -> v0.20.0
golang.org/x/sys v0.31.0 -> v0.42.0
golang.org/x/text v0.23.0 -> v0.35.0
golang.org/x/time v0.10.0 -> v0.15.0
google.golang.org/api v0.224.0 -> v0.274.0
google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb -> v0.0.0-20260319201613-d00831a3d3e7
google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb -> v0.0.0-20260401024825-9d38bb4040a9
google.golang.org/genproto/googleapis/rpc v0.0.0-20250227231956-55c901821b1e -> v0.0.0-20260401024825-9d38bb4040a9
google.golang.org/grpc v1.71.0 -> v1.80.0
google.golang.org/protobuf v1.36.5 -> v1.36.11

@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 2 times, most recently from c355bdd to 9c8a795 Compare January 20, 2026 04:07
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 3 times, most recently from ed0bb37 to 4a33f30 Compare January 30, 2026 07:36
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 5 times, most recently from 31d5bb1 to 161599c Compare February 10, 2026 00:37
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 2 times, most recently from f6b8224 to 62de354 Compare February 13, 2026 00:14
@renovate renovate Bot changed the title fix(deps): lock file maintenance vulnfeeds fix(deps): update vulnfeeds Feb 13, 2026
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 3 times, most recently from 28d0e01 to cc14f0f Compare February 25, 2026 19:39
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 2 times, most recently from 2939180 to 827d9c6 Compare March 13, 2026 01:35
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch from 827d9c6 to f353326 Compare March 28, 2026 20:42
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch 2 times, most recently from e67e7e6 to babea3c Compare April 8, 2026 20:32
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch from babea3c to 1ffdb25 Compare April 15, 2026 12:10
@renovate renovate Bot force-pushed the renovate/vulnfeeds branch from 1ffdb25 to 58926fb Compare April 17, 2026 22:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants