fix(deps): update all dependencies #31

renovate · 2025-07-21T12:52:32Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v4.2.2` -> `v5.0.0`
actions/dependency-review-action	action	minor	`v4.7.1` -> `v4.8.1`
actions/setup-go	action	major	`v5.5.0` -> `v6.0.0`
github.com/stretchr/testify	require	minor	`v1.10.0` -> `v1.11.1`
github/codeql-action	action	major	`v3.29.5` -> `v4.30.8`
google.golang.org/protobuf	require	patch	`v1.36.6` -> `v1.36.10`

Release Notes

actions/checkout (actions/checkout)

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in https://github.com/actions/checkout/pull/1971
Add internal repos for checking out multiple repositories by @mouismail in https://github.com/actions/checkout/pull/1977
Documentation update - add recommended permissions to Readme by @benwells in https://github.com/actions/checkout/pull/2043
Adjust positioning of user email note and permissions heading by @joshmgross in https://github.com/actions/checkout/pull/2044
Update README.md by @nebuk89 in https://github.com/actions/checkout/pull/2194
Update CODEOWNERS for actions by @TingluoHuang in https://github.com/actions/checkout/pull/2224
Update package dependencies by @salmanmkc in https://github.com/actions/checkout/pull/2236
Prepare release v4.3.0 by @salmanmkc in https://github.com/actions/checkout/pull/2237

New Contributors

@motss made their first contribution in https://github.com/actions/checkout/pull/1971
@mouismail made their first contribution in https://github.com/actions/checkout/pull/1977
@benwells made their first contribution in https://github.com/actions/checkout/pull/2043
@nebuk89 made their first contribution in https://github.com/actions/checkout/pull/2194
@salmanmkc made their first contribution in https://github.com/actions/checkout/pull/2236

Full Changelog: actions/checkout@v4...v4.3.0

actions/dependency-review-action (actions/dependency-review-action)

`v4.8.1`: Dependency Review Action v4.8.1

Compare Source

What's Changed

(bug) Fix spamming link test in deprecation warning (again) by @ahpook in #1000
Bump version for 4.8.1 release by @ahpook in #1001

Full Changelog: actions/dependency-review-action@v4...v4.8.1

`v4.8.0`

Compare Source

What's Changed

Make Ruby Code Scannable by @ljones140 in #978
Batch some contributions for release by @brrygrdn in #986
- Make license lists collapsable by @jasperkamerling
- feat: add large summary handling with artifact upload by @MattMencel

New Contributors

@ljones140 made their first contribution in #978
@jasperkamerling made their first contribution in #986
@MattMencel made their first contribution in #986

Full Changelog: actions/dependency-review-action@v4...v4.8.0

`v4.7.4`

Compare Source

`v4.7.3`: 4.7.3

Compare Source

What's Changed

Add explicit permissions to workflow files by @AshelyTC in #966
Claire153/fix spamming mentioned issue by @claire153 in #974

Full Changelog: actions/dependency-review-action@v4...v4.7.3

`v4.7.2`: 4.7.2

Compare Source

What's Changed

Add Missing Languages to CodeQL Advanced Configuration by @KyFaSt in #945
Deprecate deny lists by @claire153 in #958
Address discrepancy between docs and reality by @ahpook in #960

New Contributors

@KyFaSt made their first contribution in #945
@claire153 made their first contribution in #958
@ahpook made their first contribution in #960

Full Changelog: actions/dependency-review-action@v4...v4.7.2

actions/setup-go (actions/setup-go)

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in #460
Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in #624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in #589
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #591
Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] in #590
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #594
Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] in #538
Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] in #603
Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in #618
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #631

New Contributors

@matthewhughes934 made their first contribution in #618
@salmanmkc made their first contribution in #624

Full Changelog: actions/setup-go@v5...v6.0.0

stretchr/testify (github.com/stretchr/testify)

`v1.11.1`

Compare Source

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Backport #1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

`v1.11.0`

Compare Source

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in #1614
Lazily render mock diff output on successful match by @mikeauclair in #1615
assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in #1427
assert: add IsNotType by @bartventer in #1730
assert.JSONEq: shortcut if same strings by @dolmen in #1754
assert.YAMLEq: shortcut if same strings by @dolmen in #1755
assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in #1761
suite: faster methods filtering (internal refactor) by @dolmen in #1758

Fixes

assert.ErrorAs: log target type by @craig65535 in #1345
Fix failure message formatting for Positive and Negative asserts in #1062
Improve ErrorIs message when error is nil but an error was expected by @tsioftas in #1681
fix Subset/NotSubset when calling with mixed input types by @siliconbrain in #1729
Improve ErrorAs failure message when error is nil by @ccoVeille in #1734
mock.AssertNumberOfCalls: improve error msg by @3scalation in #1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in #1688
Replace deprecated io/ioutil with io and os by @alexandear in #1684
Document consequences of calling t.FailNow() by @greg0ire in #1710
chore: update docs for Unset #1621 by @techfg in #1709
README: apply gofmt to examples by @alexandear in #1687
refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in #1674
Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in #1716
Update documentation for the Error function in assert or require package by @architagr in #1675
assert: remove deprecated build constraints by @alexandear in #1671
assert: apply gofumpt to internal test suite by @ccoVeille in #1739
CI: fix shebang in .ci.*.sh scripts by @dolmen in #1746
assert,require: enable parallel testing on (almost) all top tests by @dolmen in #1747
suite.Passed: add one more status test report by @Ararsa-Derese in #1706
Add Helper() method in internal mocks and assert.CollectT by @dolmen in #1423
assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in #1742
mock: enable parallel testing on internal testsuite by @dolmen in #1756
suite: cleanup use of 'testing' internals at runtime by @dolmen in #1751
assert: check test failure message for Empty and NotEmpty by @ccoVeille in #1745
deps: fix dependency cycle with objx (again) by @dolmen in #1567
assert.Empty: comprehensive doc of "Empty"-ness rules by @dolmen in #1753
doc: improve godoc of top level 'testify' package by @dolmen in #1760
assert.ErrorAs: simplify retrieving the type name by @ccoVeille in #1740
assert.EqualValues: improve test coverage to 100% by @dolmen in #1763
suite.Run: simplify running of Setup/TeardownSuite by @renzoarreaza in #1769
assert.CallerInfo: micro optimization by using LastIndexByte by @dolmen in #1767
assert.CallerInfo: micro cleanup by @dolmen in #1768
assert: refactor TestFileExists and TestDirExists tests to enable parallel testing by @dolmen in #1766
suite.Run: refactor handling of stats for improved readability by @dolmen in #1764
tests: improve captureTestingT helper by @ccoVeille in #1741
build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #1778

New Contributors

@greg0ire made their first contribution in #1710
@techfg made their first contribution in #1709
@mikeauclair made their first contribution in #1614
@cszczepaniak made their first contribution in #1427
@architagr made their first contribution in #1675
@tsioftas made their first contribution in #1681
@siliconbrain made their first contribution in #1729
@bartventer made their first contribution in #1730
@Ararsa-Derese made their first contribution in #1706
@renzoarreaza made their first contribution in #1769
@3scalation made their first contribution in #1743

Full Changelog: stretchr/testify@v1.10.0...v1.11.0

github/codeql-action (github/codeql-action)

`v4.30.8`

Compare Source

`v4.30.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.7 - 06 Oct 2025

[v4+ only] The CodeQL Action now runs on Node.js v24. #3169

See the full CHANGELOG.md for more information.

`v3.30.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.30.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.7 - 06 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.30.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.6 - 02 Oct 2025

Update default CodeQL bundle version to 2.23.2. #3168

See the full CHANGELOG.md for more information.

`v3.30.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.5 - 26 Sep 2025

We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

See the full CHANGELOG.md for more information.

`v3.30.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.4 - 25 Sep 2025

We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107
You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130
Update default CodeQL bundle version to 2.23.1. #3118

See the full CHANGELOG.md for more information.

`v3.30.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.30.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

Fixed a bug which could cause language autodetection to fail. #3084
Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

See the full CHANGELOG.md for more information.

`v3.30.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.1 - 05 Sep 2025

Update default CodeQL bundle version to 2.23.0. #3077

See the full CHANGELOG.md for more information.

`v3.30.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

See the full CHANGELOG.md for more information.

`v3.29.11`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.11 - 21 Aug 2025

Update default CodeQL bundle version to 2.22.4. #3044

See the full CHANGELOG.md for more information.

`v3.29.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.29.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.9 - 12 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.29.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.8 - 08 Aug 2025

Fix an issue where the Action would autodetect unsupported languages such as HTML. #3015

See the full CHANGELOG.md for more information.

`v3.29.7`

Compare Source

This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6.

`v3.29.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.6 - 07 Aug 2025

The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #2999
Update default CodeQL bundle version to 2.22.3. #3000

See the full CHANGELOG.md for more information.

protocolbuffers/protobuf-go (google.golang.org/protobuf)

`v1.36.10`

Compare Source

`v1.36.9`

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.8...v1.36.9

User-visible changes:
CL/699715: cmd/protoc-gen-go: add test for "import option" directive
CL/699115: internal/editionssupport: declare support for edition 2024
CL/697595: editions: Fix spelling mistake in panic message

`v1.36.8`

Compare Source

Maintenance:

CL/696316: all: set Go language version to Go 1.23
CL/696315: types: regenerate using latest protobuf v32 release

`v1.36.7`

Compare Source

Maintenance / optimizations:

CL/683955: encoding/protowire: micro-optimize SizeVarint (-20% on Intel)
CL/674055: internal/impl: remove unnecessary atomic access for non-lazy lists
CL/674015: impl: remove unnecessary nil check from presence.Present
CL/673495: types/descriptorpb: regenerate using latest protobuf v31 release
CL/670516: cmd/protoc-gen-go: centralize presence and lazy logic into filedesc
CL/670515: internal: move usePresenceForField to internal/filedesc
CL/670275: internal/impl: clean up usePresenceForField() (no-op)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2025-08-08T00:40:37Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	google.golang.org/protobuf@v1.36.10
	github.com/stretchr/testify@v1.11.1

View full report

renovate bot force-pushed the renovate/all branch from e5e3ab3 to c3f709e Compare July 23, 2025 17:48

renovate bot changed the title ~~chore(deps): update github/codeql-action action to v3.29.3~~ chore(deps): update github/codeql-action action to v3.29.4 Jul 23, 2025

renovate bot changed the title ~~chore(deps): update github/codeql-action action to v3.29.4~~ chore(deps): update github/codeql-action action to v3.29.5 Jul 29, 2025

renovate bot force-pushed the renovate/all branch from c3f709e to 42e5f0a Compare July 29, 2025 22:57

renovate bot changed the title ~~chore(deps): update github/codeql-action action to v3.29.5~~ chore(deps): update github/codeql-action action to v3.29.5 - autoclosed Aug 2, 2025

renovate bot closed this Aug 2, 2025

renovate bot deleted the renovate/all branch August 2, 2025 16:55

renovate bot changed the title ~~chore(deps): update github/codeql-action action to v3.29.5 - autoclosed~~ chore(deps): update github/codeql-action action to v3.29.5 Aug 7, 2025

renovate bot reopened this Aug 7, 2025

renovate bot force-pushed the renovate/all branch from 89b8070 to 42e5f0a Compare August 7, 2025 13:09

renovate bot changed the title ~~chore(deps): update github/codeql-action action to v3.29.5~~ fix(deps): update module google.golang.org/protobuf to v1.36.7 Aug 7, 2025

renovate bot changed the title ~~fix(deps): update module google.golang.org/protobuf to v1.36.7~~ fix(deps): update all dependencies Aug 7, 2025

renovate bot force-pushed the renovate/all branch 2 times, most recently from cc14476 to dc6b17b Compare August 8, 2025 00:32

renovate bot force-pushed the renovate/all branch 3 times, most recently from cbc71e6 to 06ab34f Compare August 12, 2025 12:10

renovate bot force-pushed the renovate/all branch 5 times, most recently from 789fcc7 to 3e9463a Compare August 24, 2025 20:24

renovate bot force-pushed the renovate/all branch 2 times, most recently from ce6cd5a to 00dd2ed Compare August 27, 2025 11:46

renovate bot force-pushed the renovate/all branch 4 times, most recently from 8f77063 to e672b89 Compare September 10, 2025 18:32

renovate bot force-pushed the renovate/all branch from e672b89 to 6a35215 Compare September 16, 2025 22:49

renovate bot force-pushed the renovate/all branch from 6a35215 to be01317 Compare September 17, 2025 01:00

renovate bot force-pushed the renovate/all branch 5 times, most recently from 97ccc2b to 2776ece Compare October 2, 2025 09:38

renovate bot force-pushed the renovate/all branch 2 times, most recently from 2151348 to 0306559 Compare October 7, 2025 18:33

renovate bot force-pushed the renovate/all branch from 0306559 to 85fa4c4 Compare October 10, 2025 16:50

fix(deps): update all dependencies

f81cb5c

renovate bot force-pushed the renovate/all branch from 85fa4c4 to f81cb5c Compare October 11, 2025 01:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all dependencies #31

fix(deps): update all dependencies #31

Uh oh!

renovate bot commented Jul 21, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Aug 8, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

fix(deps): update all dependencies #31

Are you sure you want to change the base?

fix(deps): update all dependencies #31

Uh oh!

Conversation

renovate bot commented Jul 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

⚠️ Minimum Compatible Runner Version

What's Changed

New Contributors

v4.8.1: Dependency Review Action v4.8.1

What's Changed

What's Changed

New Contributors

v4.7.3: 4.7.3

What's Changed

v4.7.2: 4.7.2

What's Changed

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

What's Changed

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

CodeQL Action Changelog

4.30.7 - 06 Oct 2025

CodeQL Action Changelog

3.30.8 - 10 Oct 2025

CodeQL Action Changelog

3.30.7 - 06 Oct 2025

CodeQL Action Changelog

3.30.6 - 02 Oct 2025

CodeQL Action Changelog

3.30.5 - 26 Sep 2025

CodeQL Action Changelog

3.30.4 - 25 Sep 2025

CodeQL Action Changelog

3.30.3 - 10 Sep 2025

CodeQL Action Changelog

3.30.2 - 09 Sep 2025

CodeQL Action Changelog

3.30.1 - 05 Sep 2025

CodeQL Action Changelog

3.30.0 - 01 Sep 2025

CodeQL Action Changelog

3.29.11 - 21 Aug 2025

CodeQL Action Changelog

3.29.10 - 18 Aug 2025

CodeQL Action Changelog

3.29.9 - 12 Aug 2025

CodeQL Action Changelog

3.29.8 - 08 Aug 2025

CodeQL Action Changelog

3.29.6 - 07 Aug 2025

Configuration

Uh oh!

socket-security bot commented Aug 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

renovate bot commented Jul 21, 2025 •

edited

Loading

`v4.8.1`: Dependency Review Action v4.8.1

`v4.7.3`: 4.7.3

`v4.7.2`: 4.7.2

socket-security bot commented Aug 8, 2025 •

edited

Loading