Skip to content

Merge main into dev/v0.33-windows - #2568

Draft
Laksh (lakshk98) wants to merge 569 commits into
microsoft:dev/v0.0.33-windowsfrom
lakshk98:laksh/merge-main
Draft

Merge main into dev/v0.33-windows#2568
Laksh (lakshk98) wants to merge 569 commits into
microsoft:dev/v0.0.33-windowsfrom
lakshk98:laksh/merge-main

Conversation

@lakshk98

@lakshk98 Laksh (lakshk98) commented Jul 22, 2026

Copy link
Copy Markdown

Description

This PR merges  upstream/main  into  dev/v0.0.33-windows , resolving conflicts across Dockerfiles, workflow files, Helm values, E2E tests, and auto-generated protobuf files.

Merge conflict resolutions

For most conflicts, upstream changes were taken as-is. Notable exceptions:

•  .github/workflows/e2e-test-event-writer.yml  — kept our version, which includes Windows-specific build steps (LLVM, MSBuild, eBPF store, Docker daemon) absent from upstream's skeleton.
•  deploy/.../values.yaml  — introduced  enablePodLevel_win: true  to decouple Windows pod-level metrics from the upstream Linux default ( enablePodLevel: false ), following the existing  enabledPlugin_linux / enabledPlugin_win  pattern. Also kept  enabledPlugin_win  with  ebpfwindows  and  enableAnnotations: true .
•  pkg/utils/metadata_*.pb.go  — regenerated from the auto-merged  .proto  (which combined our Cilium eBPF drop reasons with upstream's HNS/NDIS drop reasons and sampling fields).
•  test/e2e/retina_e2e_test.go  — kept Windows  UnLoadAndPinWinBPFJob  step; dropped stale  ValidateHubble  reference (renamed upstream); took upstream's  InstallAndTestHubbleMetrics  and  ValidateCapture .
•  controller/Dockerfile  /  cli/Dockerfile  — took upstream's  bpf-gen  stage refactor and Azure Linux 3.0 base image upgrade.

Post-merge fixes

After the merge,  Removed usage of the hubble parser options  addresses build failures introduced by the merge — upstream changes that conflicted with our usage of hubble parser options required removing that dependency.

Lint fixes

The final commit fixes lint errors surfaced by the linter running over all files touched by the merge.

Related Issue

If this pull request is related to any issue, please mention it here. Additionally, make sure that the issue is assigned to you before submitting this pull request.

Checklist

  • I have read the contributing documentation.
  • I signed and signed-off the commits (git commit -S -s ...). See this documentation on signing commits.
  • I have correctly attributed the author(s) of the code.
  • I have tested the changes locally.
  • I have followed the project's style guidelines.
  • I have updated the documentation, if necessary.
  • I have added tests, if applicable.

Screenshots (if applicable) or Testing Completed

Please add any relevant screenshots or GIFs to showcase the changes made.

Additional Notes

Add any additional notes or context about the pull request here.


Please refer to the CONTRIBUTING.md file for more information on how to contribute to this project.

@lakshk98 Laksh (lakshk98) changed the title Laksh/merge main Merge main into dev/v0.33-windows Jul 22, 2026
@lakshk98
Laksh (lakshk98) marked this pull request as ready for review July 22, 2026 23:31
@lakshk98
Laksh (lakshk98) requested a review from a team as a code owner July 22, 2026 23:31
@lakshk98
Laksh (lakshk98) force-pushed the laksh/merge-main branch 4 times, most recently from 509f5b3 to 6622e89 Compare July 23, 2026 05:53
dependabot Bot and others added 20 commits August 4, 2026 11:08
…t#2211)

Bumps
[goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action)
from 7.0.0 to 7.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/goreleaser-action/releases">goreleaser/goreleaser-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: verify release checksum and cosign signature by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/550">goreleaser/goreleaser-action#550</a></li>
<li>docs: document cosign verification in README by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/553">goreleaser/goreleaser-action#553</a></li>
<li>docs: Upgrade import GPG action version by <a
href="https://github.com/flecno"><code>@​flecno</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/547">goreleaser/goreleaser-action#547</a></li>
<li>ci: drop docker-bake in favor of plain npm by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/551">goreleaser/goreleaser-action#551</a></li>
<li>ci: add release-major-tag workflow by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/552">goreleaser/goreleaser-action#552</a></li>
<li>ci: drop pre-cosign-v3 goreleaser versions from tests by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/554">goreleaser/goreleaser-action#554</a></li>
<li>ci(deps): bump the actions group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/543">goreleaser/goreleaser-action#543</a></li>
<li>ci(deps): bump the actions group with 5 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/546">goreleaser/goreleaser-action#546</a></li>
<li>chore(deps): bump undici from 6.23.0 to 6.24.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/545">goreleaser/goreleaser-action#545</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/flecno"><code>@​flecno</code></a> made
their first contribution in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/547">goreleaser/goreleaser-action#547</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/goreleaser-action/compare/v7...v7.1.0">https://github.com/goreleaser/goreleaser-action/compare/v7...v7.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/e24998b8b67b290c2fa8b7c14fcfa7de2c5c9b8c"><code>e24998b</code></a>
ci: drop pre-cosign-v3 goreleaser versions from tests (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/554">#554</a>)</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/be2e8a39ba2f6daed623e98e8b6662f008cffc8d"><code>be2e8a3</code></a>
docs: document cosign verification in README (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/553">#553</a>)</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/5e53f8eea2783e9a9b5963dafae20a7e5320618c"><code>5e53f8e</code></a>
ci: add release-major-tag workflow (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/552">#552</a>)</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/4068afa2f0763491214b56d83686409cb4549b8c"><code>4068afa</code></a>
build: drop docker-bake in favor of plain npm (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/551">#551</a>)</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/213ec80f5629fd53743a07c81b86deb4c540955f"><code>213ec80</code></a>
docs: add CONTRIBUTING with pre-commit workflow</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/4b462d3d1d45d4d31bca90093b38fe2a060674ef"><code>4b462d3</code></a>
feat: verify release checksum and cosign signature (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/550">#550</a>)</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/01cbe076be10ba0af7b0b9319ac490a93d3d2fcd"><code>01cbe07</code></a>
docs: Upgrade import GPG action version (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/547">#547</a>)</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/2a473d70e30d651e68b912d1e1d86e01f3a558b4"><code>2a473d7</code></a>
ci(deps): bump the actions group with 5 updates (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/546">#546</a>)</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/fdcf0b9df926c8dd93d4e7f15c508dd346e09eb1"><code>fdcf0b9</code></a>
clean: leftover files from node 22(?)</li>
<li><a
href="https://github.com/goreleaser/goreleaser-action/commit/9881cc53763f713ec5df8d0f4ed575fa41085847"><code>9881cc5</code></a>
fix: use new static URL</li>
<li>Additional commits viewable in <a
href="https://github.com/goreleaser/goreleaser-action/compare/ec59f474b9834571250b370d4735c50f8e2d1e29...e24998b8b67b290c2fa8b7c14fcfa7de2c5c9b8c">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=goreleaser/goreleaser-action&package-manager=github_actions&previous-version=7.0.0&new-version=7.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…o_modules group across 1 directory (microsoft#2212)

Bumps the go_modules group with 1 update in the / directory:
[github.com/go-git/go-git/v5](https://github.com/go-git/go-git).

Updates `github.com/go-git/go-git/v5` from 5.17.1 to 5.18.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.18.0</h2>
<h2>What's Changed</h2>
<ul>
<li>plumbing: transport/http, Add support for followRedirects policy by
<a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/2004">go-git/go-git#2004</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0">https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0</a></p>
<h2>v5.17.2</h2>
<h2>What's Changed</h2>
<ul>
<li>build: Update module github.com/go-git/go-git/v5 to v5.17.1
[SECURITY] (releases/v5.x) by <a
href="https://github.com/go-git-renovate"><code>@​go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1941">go-git/go-git#1941</a></li>
<li>dotgit: skip writing pack files that already exist on disk by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1944">go-git/go-git#1944</a></li>
</ul>
<p>:warning: This release fixes a bug (<a
href="https://redirect.github.com/go-git/go-git/issues/1942">go-git/go-git#1942</a>)
that blocked some users from upgrading to <code>v5.17.1</code>. Thanks
<a href="https://github.com/pskrbasu"><code>@​pskrbasu</code></a> for
reporting it. 🙇</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2">https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/go-git/go-git/commit/ea3e7ec9dfc54f577a01afb4dd601c0284604264"><code>ea3e7ec</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/2004">#2004</a>
from go-git/v5-http-hardening</li>
<li><a
href="https://github.com/go-git/go-git/commit/bcd20a9c525826081262a06a9ed9c3167abfcd53"><code>bcd20a9</code></a>
plumbing: transport/http, Add support for followRedirects policy</li>
<li><a
href="https://github.com/go-git/go-git/commit/45ae193b3a60aa8ec8a3e373f7265a7819473d5f"><code>45ae193</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1944">#1944</a>
from go-git/fix-perms</li>
<li><a
href="https://github.com/go-git/go-git/commit/fda4f7464b597ff33d2dea1c026482a5e900037c"><code>fda4f74</code></a>
storage: filesystem/dotgit, Skip writing pack files that already exist
on disk</li>
<li><a
href="https://github.com/go-git/go-git/commit/2212dc7caeb2a389fe2129923811ef63f75a557a"><code>2212dc7</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1941">#1941</a>
from go-git/renovate/releases/v5.x-go-github.com-go-...</li>
<li><a
href="https://github.com/go-git/go-git/commit/ebb2d7da7f5d5aebeaa0b5e13276d72d602c1ae3"><code>ebb2d7d</code></a>
build: Update module github.com/go-git/go-git/v5 to v5.17.1
[SECURITY]</li>
<li>See full diff in <a
href="https://github.com/go-git/go-git/compare/v5.17.1...v5.18.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.17.1&new-version=5.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/retina/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…crosoft#2213)

Bumps the go_modules group with 4 updates in the / directory:
[github.com/moby/spdystream](https://github.com/moby/spdystream),
[github.com/buger/jsonparser](https://github.com/buger/jsonparser),
[github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority)
and
[github.com/theupdateframework/go-tuf/v2](https://github.com/theupdateframework/go-tuf).

Updates `github.com/moby/spdystream` from 0.5.0 to 0.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/moby/spdystream/releases">github.com/moby/spdystream's
releases</a>.</em></p>
<blockquote>
<h2>v0.5.1</h2>
<h2>What's Changed</h2>
<h3>Security</h3>
<p>Fix memory amplification in SPDY frame parsing leads to denial of
service (<a
href="https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2">CVE-2026-35469</a>
/ <a
href="https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2">GHSA-pc3f-x583-g7j2</a>)</p>
<h3>Changes</h3>
<ul>
<li>spdy: fix duplicate license headers, add LICENSE, PATENTS, and
update NOTICE <a
href="https://redirect.github.com/moby/spdystream/pull/106">moby/spdystream#106</a></li>
<li>ci: update actions and test against latest Go versions <a
href="https://redirect.github.com/moby/spdystream/pull/107">moby/spdystream#107</a></li>
<li>use ioutil.Discard for go1.13 compatibility <a
href="https://redirect.github.com/moby/spdystream/pull/109">moby/spdystream#109</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1">https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/moby/spdystream/commit/c59e5d73daa301bde452ea77545bdf51e32554a2"><code>c59e5d7</code></a>
Merge pull request <a
href="https://redirect.github.com/moby/spdystream/issues/109">#109</a>
from thaJeztah/use_ioutil</li>
<li><a
href="https://github.com/moby/spdystream/commit/2fd0155e904f1f9b834b8460e8fdb8522bb59f84"><code>2fd0155</code></a>
use ioutil.Discard for go1.13 compatibility</li>
<li><a
href="https://github.com/moby/spdystream/commit/ef6121f62c730110bf5ae604a865a8613bfb787f"><code>ef6121f</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/moby/spdystream/commit/241cec95b8f02919845dc4758f1f5310fc886739"><code>241cec9</code></a>
compare with signed Int for 32-bit Arm</li>
<li><a
href="https://github.com/moby/spdystream/commit/21c38640c8c8f43173b17e5bc6690a5fa25d6935"><code>21c3864</code></a>
Add options to customize limits</li>
<li><a
href="https://github.com/moby/spdystream/commit/acf9b456d06816c5cf23bf3892e13441f947d5fd"><code>acf9b45</code></a>
spdy: update godoc for MaxDataLength</li>
<li><a
href="https://github.com/moby/spdystream/commit/eb6360582bf1343f485ca87b76efc9e72b49d690"><code>eb63605</code></a>
spdy: limit header-size and header-count</li>
<li><a
href="https://github.com/moby/spdystream/commit/2f21da42eaab90f03a82fb03d0de8e91eb1d0fc6"><code>2f21da4</code></a>
spdy: fix header block byte accounting</li>
<li><a
href="https://github.com/moby/spdystream/commit/5976b6612f07a27f2e9a4de875485defb43b5d50"><code>5976b66</code></a>
spdy: enforce 24-bit frame length limits</li>
<li><a
href="https://github.com/moby/spdystream/commit/cf0ec5d0fe4dbb2f3525f733946e0d0ddbfd5b13"><code>cf0ec5d</code></a>
Guard against oversized SPDY frames</li>
<li>Additional commits viewable in <a
href="https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/buger/jsonparser/releases">github.com/buger/jsonparser's
releases</a>.</em></p>
<blockquote>
<h2>v1.1.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Updated travis to build for 1.13 to 1.15 by <a
href="https://github.com/janreggie"><code>@​janreggie</code></a> in <a
href="https://redirect.github.com/buger/jsonparser/pull/225">buger/jsonparser#225</a></li>
<li>
<ul>
<li>eliminate 2 allocations in EachKey() by <a
href="https://github.com/Villenny"><code>@​Villenny</code></a> in <a
href="https://redirect.github.com/buger/jsonparser/pull/223">buger/jsonparser#223</a></li>
</ul>
</li>
<li>fix issue <a
href="https://redirect.github.com/buger/jsonparser/issues/150">#150</a>
(in deleting case) by <a
href="https://github.com/daria-kay"><code>@​daria-kay</code></a> in <a
href="https://redirect.github.com/buger/jsonparser/pull/226">buger/jsonparser#226</a></li>
<li>fixing the oss-fuzz issue by <a
href="https://github.com/daria-kay"><code>@​daria-kay</code></a> in <a
href="https://redirect.github.com/buger/jsonparser/pull/227">buger/jsonparser#227</a></li>
<li>Fix parseInt overflow check false negative by <a
href="https://github.com/carsonip"><code>@​carsonip</code></a> in <a
href="https://redirect.github.com/buger/jsonparser/pull/231">buger/jsonparser#231</a></li>
<li>Added bespoke error for null cases by <a
href="https://github.com/jonomacd"><code>@​jonomacd</code></a> in <a
href="https://redirect.github.com/buger/jsonparser/pull/228">buger/jsonparser#228</a></li>
<li>Fuzzing: Add CIFuzz by <a
href="https://github.com/AdamKorcz"><code>@​AdamKorcz</code></a> in <a
href="https://redirect.github.com/buger/jsonparser/pull/239">buger/jsonparser#239</a></li>
<li>Added latest versions of go to tests by <a
href="https://github.com/moredure"><code>@​moredure</code></a> in <a
href="https://redirect.github.com/buger/jsonparser/pull/244">buger/jsonparser#244</a></li>
<li>fix EachKey pIdxFlags allocation by <a
href="https://github.com/unxcepted"><code>@​unxcepted</code></a> in <a
href="https://redirect.github.com/buger/jsonparser/pull/241">buger/jsonparser#241</a></li>
<li>fix: prevent panic on negative slice index in Delete with malformed
JSON (GO-2026-4514) by <a
href="https://github.com/dbarrosop"><code>@​dbarrosop</code></a> in <a
href="https://redirect.github.com/buger/jsonparser/pull/276">buger/jsonparser#276</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/janreggie"><code>@​janreggie</code></a>
made their first contribution in <a
href="https://redirect.github.com/buger/jsonparser/pull/225">buger/jsonparser#225</a></li>
<li><a href="https://github.com/Villenny"><code>@​Villenny</code></a>
made their first contribution in <a
href="https://redirect.github.com/buger/jsonparser/pull/223">buger/jsonparser#223</a></li>
<li><a href="https://github.com/daria-kay"><code>@​daria-kay</code></a>
made their first contribution in <a
href="https://redirect.github.com/buger/jsonparser/pull/226">buger/jsonparser#226</a></li>
<li><a href="https://github.com/carsonip"><code>@​carsonip</code></a>
made their first contribution in <a
href="https://redirect.github.com/buger/jsonparser/pull/231">buger/jsonparser#231</a></li>
<li><a href="https://github.com/jonomacd"><code>@​jonomacd</code></a>
made their first contribution in <a
href="https://redirect.github.com/buger/jsonparser/pull/228">buger/jsonparser#228</a></li>
<li><a href="https://github.com/moredure"><code>@​moredure</code></a>
made their first contribution in <a
href="https://redirect.github.com/buger/jsonparser/pull/244">buger/jsonparser#244</a></li>
<li><a href="https://github.com/unxcepted"><code>@​unxcepted</code></a>
made their first contribution in <a
href="https://redirect.github.com/buger/jsonparser/pull/241">buger/jsonparser#241</a></li>
<li><a href="https://github.com/dbarrosop"><code>@​dbarrosop</code></a>
made their first contribution in <a
href="https://redirect.github.com/buger/jsonparser/pull/276">buger/jsonparser#276</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2">https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0"><code>a69e7e0</code></a>
Merge pull request <a
href="https://redirect.github.com/buger/jsonparser/issues/276">#276</a>
from dbarrosop/master</li>
<li><a
href="https://github.com/buger/jsonparser/commit/d3eacc0bab779d6cf98221f5268828fff287876e"><code>d3eacc0</code></a>
fix: prevent panic on negative slice index in Delete with malformed JSON
(GO-...</li>
<li><a
href="https://github.com/buger/jsonparser/commit/61b32cfdfa0f5d368ef7c7daef28ce12d538740f"><code>61b32cf</code></a>
Merge pull request <a
href="https://redirect.github.com/buger/jsonparser/issues/241">#241</a>
from unxcepted/master</li>
<li><a
href="https://github.com/buger/jsonparser/commit/2181e8398f18397c9cacbaea9889314bb585e868"><code>2181e83</code></a>
Merge pull request <a
href="https://redirect.github.com/buger/jsonparser/issues/244">#244</a>
from ScaleChamp/patch-2</li>
<li><a
href="https://github.com/buger/jsonparser/commit/1510b5194182fc2fb898f28cdbceb42fd7258bfa"><code>1510b51</code></a>
Added latest versions of go to tests</li>
<li><a
href="https://github.com/buger/jsonparser/commit/6fc2e488ed3cc4f1f1debec3b0c70715bd7be6fd"><code>6fc2e48</code></a>
fix: eachkey allocation</li>
<li><a
href="https://github.com/buger/jsonparser/commit/a6f867eb7787e4ec54536b77b5d628ddf5c4f73d"><code>a6f867e</code></a>
Merge pull request <a
href="https://redirect.github.com/buger/jsonparser/issues/239">#239</a>
from AdamKorcz/cifuzz1</li>
<li><a
href="https://github.com/buger/jsonparser/commit/cbc01fdbbe131706e89eeaaf0cd917760d8d3949"><code>cbc01fd</code></a>
Fuzzing: Add CIFuzz</li>
<li><a
href="https://github.com/buger/jsonparser/commit/dc92d6932a1272b4d8f485f798a88c3a75106256"><code>dc92d69</code></a>
Merge pull request <a
href="https://redirect.github.com/buger/jsonparser/issues/228">#228</a>
from jonomacd/null-handling</li>
<li><a
href="https://github.com/buger/jsonparser/commit/2d9d6343e8621ddc18c70749663f74bc584c0de4"><code>2d9d634</code></a>
Merge pull request <a
href="https://redirect.github.com/buger/jsonparser/issues/231">#231</a>
from carsonip/fix-parseint-overflow-check</li>
<li>Additional commits viewable in <a
href="https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/sigstore/timestamp-authority/v2` from 2.0.3 to 2.0.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/timestamp-authority/releases">github.com/sigstore/timestamp-authority/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Ensure correct certificate is used for TSA auth checks
(GHSA-xm5m-wgh2-rrg3) by <a
href="https://github.com/jku"><code>@​jku</code></a> in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1333">sigstore/timestamp-authority#1333</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/timestamp-authority/compare/v2.0.5...v2.0.6">https://github.com/sigstore/timestamp-authority/compare/v2.0.5...v2.0.6</a></p>
<h2>v2.0.5</h2>
<h2>What's Changed</h2>
<p>This release updates the chi middleware to resolve a panic.</p>
<ul>
<li>Update the semantics of the NTP monitoring so its clear in the
README in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1276">sigstore/timestamp-authority#1276</a></li>
<li>docs: note that CRL/OCSP checks are not performed in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1277">sigstore/timestamp-authority#1277</a></li>
<li>Increase default HTTP idle timeout in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1287">sigstore/timestamp-authority#1287</a></li>
<li>Upgrade chi middleware v4 -&gt; v5 in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1307">sigstore/timestamp-authority#1307</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/timestamp-authority/compare/v2.0.4...v2.0.5">https://github.com/sigstore/timestamp-authority/compare/v2.0.4...v2.0.5</a></p>
<h2>v2.0.4</h2>
<h2>Changelog</h2>
<ul>
<li>5ddd4e6ad32117ae431eca6299ed9d29a6d33f5a update changelog for v2.0.4
(<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1258">#1258</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): bump go.step.sm/crypto from 0.74.0 to 0.75.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1239">sigstore/timestamp-authority#1239</a></li>
<li>chore(deps): bump github.com/tink-crypto/tink-go-hcvault/v2 from
2.3.0 to 2.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1238">sigstore/timestamp-authority#1238</a></li>
<li>chore(deps): bump github.com/go-openapi/errors from 0.22.4 to 0.22.5
in the gomod group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1240">sigstore/timestamp-authority#1240</a></li>
<li>chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 in the
actions group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1241">sigstore/timestamp-authority#1241</a></li>
<li>chore(deps): bump golang from <code>20b91ed</code> to
<code>0ece421</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1242">sigstore/timestamp-authority#1242</a></li>
<li>chore(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1244">sigstore/timestamp-authority#1244</a></li>
<li>chore(deps): bump github.com/go-openapi/spec from 0.22.1 to 0.22.2
in the gomod group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1243">sigstore/timestamp-authority#1243</a></li>
<li>chore(deps): bump golang from <code>0ece421</code> to
<code>a22b2e6</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1245">sigstore/timestamp-authority#1245</a></li>
<li>chore(deps): bump the gomod group with 5 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1246">sigstore/timestamp-authority#1246</a></li>
<li>chore(deps): bump github.com/tink-crypto/tink-go/v2 from 2.5.0 to
2.6.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1247">sigstore/timestamp-authority#1247</a></li>
<li>chore(deps): bump the actions group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1248">sigstore/timestamp-authority#1248</a></li>
<li>chore(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11
in the gomod group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1249">sigstore/timestamp-authority#1249</a></li>
<li>chore(deps): bump github/codeql-action from 4.31.7 to 4.31.8 in the
actions group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1250">sigstore/timestamp-authority#1250</a></li>
<li>chore(deps): bump actions/cache from 4.3.0 to 5.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1251">sigstore/timestamp-authority#1251</a></li>
<li>chore(deps): bump golang from <code>a22b2e6</code> to
<code>36b4f45</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1253">sigstore/timestamp-authority#1253</a></li>
<li>chore(deps): bump the gomod group with 5 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1254">sigstore/timestamp-authority#1254</a></li>
<li>chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1257">sigstore/timestamp-authority#1257</a></li>
<li>chore(deps): bump actions/cache from 5.0.0 to 5.0.1 in the actions
group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1256">sigstore/timestamp-authority#1256</a></li>
<li>chore(deps): bump github.com/go-playground/validator/v10 from
10.28.0 to 10.29.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1255">sigstore/timestamp-authority#1255</a></li>
<li>update changelog for v2.0.4 by <a
href="https://github.com/bobcallaway"><code>@​bobcallaway</code></a> in
<a
href="https://redirect.github.com/sigstore/timestamp-authority/pull/1258">sigstore/timestamp-authority#1258</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/timestamp-authority/compare/v2.0.3...v2.0.4">https://github.com/sigstore/timestamp-authority/compare/v2.0.3...v2.0.4</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md">github.com/sigstore/timestamp-authority/v2's
changelog</a>.</em></p>
<blockquote>
<h1>v2.0.5</h1>
<p>This release updates the chi middleware to resolve a panic.</p>
<h2>Bug Fixes</h2>
<ul>
<li>Upgrade chi middleware v4 -&gt; v5 (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1307">#1307</a>)</li>
</ul>
<h2>Docs</h2>
<ul>
<li>Update the semantics of the NTP monitoring so its clear in the
README (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1276">#1276</a>)</li>
<li>docs: note that CRL/OCSP checks are not performed (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1277">#1277</a>)</li>
</ul>
<h2>Misc</h2>
<ul>
<li>Increase default HTTP idle timeout (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1287">#1287</a>)</li>
</ul>
<h1>v2.0.4</h1>
<p>Only contains dependency updates, but fixes <a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1252">#1252</a>
due to breaking API change in sigstore/sigstore</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sigstore/timestamp-authority/commit/9583b6186084a309cb6ccaf4323a29781901e962"><code>9583b61</code></a>
Ensure correct certificate is used for TSA auth checks
(GHSA-xm5m-wgh2-rrg3) ...</li>
<li><a
href="https://github.com/sigstore/timestamp-authority/commit/7aab8b4373e4ffdc6c7a1efa28856adf9f2efd40"><code>7aab8b4</code></a>
chore(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1322">#1322</a>)</li>
<li><a
href="https://github.com/sigstore/timestamp-authority/commit/48c7b2c9ed18208534c857533b7753d04fefd370"><code>48c7b2c</code></a>
chore(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0 (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1327">#1327</a>)</li>
<li><a
href="https://github.com/sigstore/timestamp-authority/commit/49ca4e4f265d5a65bfc9d49615e1553359e1e181"><code>49ca4e4</code></a>
chore(deps): bump the gomod group with 2 updates (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1326">#1326</a>)</li>
<li><a
href="https://github.com/sigstore/timestamp-authority/commit/5812ba002dafc8b5d10b19bc4e1da54d21aa159c"><code>5812ba0</code></a>
chore(deps): bump go.step.sm/crypto from 0.76.2 to 0.77.2 (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1328">#1328</a>)</li>
<li><a
href="https://github.com/sigstore/timestamp-authority/commit/6a334a895dc81be7b8c889e85c329cf85870ff10"><code>6a334a8</code></a>
chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1329">#1329</a>)</li>
<li><a
href="https://github.com/sigstore/timestamp-authority/commit/d799204b84ac6ca1fcd98b35e6bf457a2944d55c"><code>d799204</code></a>
chore(deps): bump actions/upload-artifact in the actions group (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1332">#1332</a>)</li>
<li><a
href="https://github.com/sigstore/timestamp-authority/commit/b9ce1025213a9101052aeaa5c2310c6ff8351173"><code>b9ce102</code></a>
chore(deps): bump golang from 1.26.0 to 1.26.2 in the docker group (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1331">#1331</a>)</li>
<li><a
href="https://github.com/sigstore/timestamp-authority/commit/54bc0c1a0eaf516e088bf5fd90deee6fc88f3f60"><code>54bc0c1</code></a>
chore(deps): bump the gomod group across 1 directory with 6 updates (<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1324">#1324</a>)</li>
<li><a
href="https://github.com/sigstore/timestamp-authority/commit/ffb897a2e26b43963429537a019972db30d1f066"><code>ffb897a</code></a>
chore(deps): bump the actions group across 1 directory with 4 updates
(<a
href="https://redirect.github.com/sigstore/timestamp-authority/issues/1325">#1325</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sigstore/timestamp-authority/compare/v2.0.3...v2.0.6">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/theupdateframework/go-tuf/v2` from 2.3.0 to 2.4.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/theupdateframework/go-tuf/releases">github.com/theupdateframework/go-tuf/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/718">theupdateframework/go-tuf#718</a></li>
<li>Enforce a stricter validation on the repo name for TAP 4 by <a
href="https://github.com/rdimitrov"><code>@​rdimitrov</code></a> in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/720">theupdateframework/go-tuf#720</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/theupdateframework/go-tuf/compare/v2.4.0...v2.4.1">https://github.com/theupdateframework/go-tuf/compare/v2.4.0...v2.4.1</a></p>
<h2>v2.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add BitLength validation for SuccinctRoles by <a
href="https://github.com/rdimitrov"><code>@​rdimitrov</code></a> in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/716">theupdateframework/go-tuf#716</a></li>
<li>Add thread safety documentation for key types by <a
href="https://github.com/rdimitrov"><code>@​rdimitrov</code></a> in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/715">theupdateframework/go-tuf#715</a></li>
<li>Use restrictive permissions (0700) for cache directories by <a
href="https://github.com/rdimitrov"><code>@​rdimitrov</code></a> in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/714">theupdateframework/go-tuf#714</a></li>
<li>Breaking change: Replace panic with error return in Key.ID() by <a
href="https://github.com/rdimitrov"><code>@​rdimitrov</code></a> in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/713">theupdateframework/go-tuf#713</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/theupdateframework/go-tuf/compare/v2.3.1...v2.4.0">https://github.com/theupdateframework/go-tuf/compare/v2.3.1...v2.4.0</a></p>
<h2>v2.3.1</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.45.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/702">theupdateframework/go-tuf#702</a></li>
<li>Resolve govulncheck errors by bumping go to 1.24.11 by <a
href="https://github.com/rdimitrov"><code>@​rdimitrov</code></a> in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/707">theupdateframework/go-tuf#707</a></li>
<li>chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/704">theupdateframework/go-tuf#704</a></li>
<li>modern go (1.20+) improvements by <a
href="https://github.com/udf2457"><code>@​udf2457</code></a> in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/705">theupdateframework/go-tuf#705</a></li>
<li>chore(deps): bump github.com/sigstore/sigstore from 1.9.5 to 1.10.3
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/706">theupdateframework/go-tuf#706</a></li>
<li>chore(deps): bump github.com/secure-systems-lab/go-securesystemslib
from 0.9.1 to 0.10.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/708">theupdateframework/go-tuf#708</a></li>
<li>Perform type assertion by <a
href="https://github.com/kommendorkapten"><code>@​kommendorkapten</code></a>
in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/710">theupdateframework/go-tuf#710</a></li>
<li>Add tests for failing type assertions by <a
href="https://github.com/rdimitrov"><code>@​rdimitrov</code></a> in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/711">theupdateframework/go-tuf#711</a></li>
<li>Verify threshold is valid by <a
href="https://github.com/kommendorkapten"><code>@​kommendorkapten</code></a>
in <a
href="https://redirect.github.com/theupdateframework/go-tuf/pull/712">theupdateframework/go-tuf#712</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.3.1">https://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.3.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/theupdateframework/go-tuf/commit/d361e2ea24e427581343dee5c7a32b485d79fcc0"><code>d361e2e</code></a>
Enforce a stricter validation on the repo name for TAP 4 (<a
href="https://redirect.github.com/theupdateframework/go-tuf/issues/720">#720</a>)</li>
<li><a
href="https://github.com/theupdateframework/go-tuf/commit/29aae36c83127913c24e881bc1f95dbb0f0961e6"><code>29aae36</code></a>
chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 (<a
href="https://redirect.github.com/theupdateframework/go-tuf/issues/718">#718</a>)</li>
<li><a
href="https://github.com/theupdateframework/go-tuf/commit/bde5f18dc95dfac365fc452ee4e278e5fd66d4b4"><code>bde5f18</code></a>
Replace panic with error return in Key.ID() (<a
href="https://redirect.github.com/theupdateframework/go-tuf/issues/713">#713</a>)</li>
<li><a
href="https://github.com/theupdateframework/go-tuf/commit/f400bf4c20476804475d34239f01212e1041ec38"><code>f400bf4</code></a>
Use restrictive permissions (0700) for cache directories (<a
href="https://redirect.github.com/theupdateframework/go-tuf/issues/714">#714</a>)</li>
<li><a
href="https://github.com/theupdateframework/go-tuf/commit/d2dbc180e74f4fe371392bb0b02d5a8659bc2fa4"><code>d2dbc18</code></a>
Add thread safety documentation for key types (<a
href="https://redirect.github.com/theupdateframework/go-tuf/issues/715">#715</a>)</li>
<li><a
href="https://github.com/theupdateframework/go-tuf/commit/846cd4eccd92b1a333c89cb45cf4f179de74018f"><code>846cd4e</code></a>
Add BitLength validation for SuccinctRoles (<a
href="https://redirect.github.com/theupdateframework/go-tuf/issues/716">#716</a>)</li>
<li><a
href="https://github.com/theupdateframework/go-tuf/commit/b38d91fdbc69dfe31fe9230d97dafe527ea854a0"><code>b38d91f</code></a>
Verify threshold is valid (<a
href="https://redirect.github.com/theupdateframework/go-tuf/issues/712">#712</a>)</li>
<li><a
href="https://github.com/theupdateframework/go-tuf/commit/876cf2a82b320be6deb43f4ad629057b209a584e"><code>876cf2a</code></a>
Add tests for failing type assertions (<a
href="https://redirect.github.com/theupdateframework/go-tuf/issues/711">#711</a>)</li>
<li><a
href="https://github.com/theupdateframework/go-tuf/commit/73345ab6b0eb7e59d525dac17a428f043074cef6"><code>73345ab</code></a>
Perform type assertion (<a
href="https://redirect.github.com/theupdateframework/go-tuf/issues/710">#710</a>)</li>
<li><a
href="https://github.com/theupdateframework/go-tuf/commit/d3cdc4b2796d8c452ce17766f0cade2e80a3597d"><code>d3cdc4b</code></a>
chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from
0.9....</li>
<li>Additional commits viewable in <a
href="https://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.4.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/retina/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from
6.3.0 to 6.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v6.4.0</h2>
<h2>What's Changed</h2>
<h3>Dependency updates:</h3>
<ul>
<li>Upgrade <a
href="https://github.com/actions"><code>@​actions</code></a>
dependencies by <a
href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1525">actions/setup-node#1525</a></li>
<li>Update Node.js versions in versions.yml and bump package to v6.4.0
by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1533">actions/setup-node#1533</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Copilot"><code>@​Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1525">actions/setup-node#1525</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v6.4.0">https://github.com/actions/setup-node/compare/v6...v6.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e"><code>48b55a0</code></a>
Update Node.js versions in versions.yml and bump package to v6.4.0 (<a
href="https://redirect.github.com/actions/setup-node/issues/1533">#1533</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/ab72c7e7eba0eaa11f8cab0f5679243900c2cac9"><code>ab72c7e</code></a>
Upgrade <a href="https://github.com/actions"><code>@​actions</code></a>
dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1525">#1525</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…microsoft#2203)

Bumps
[github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2)
from 1.31.6 to 1.32.14.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d15107640a5073c5ce53dc395210858e316d5e82"><code>d151076</code></a>
Release 2026-04-02</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e33c9a9f67577e2dd5fcd3b15b9a8a2e83683f53"><code>e33c9a9</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e06655901c88ef90432f41a7b9c92b33b4537c75"><code>e066559</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/a635ee4303d8cac381be8788519a1a8bba5ccf12"><code>a635ee4</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9074b3ddace9c195f00993c8ae509bc8977a6c4c"><code>9074b3d</code></a>
Release 2026-04-01</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f6ad4c082d3a1995b9add26af4eb7553b13df252"><code>f6ad4c0</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/12a971a61d5226cd72102c66b188ae4968cb9b81"><code>12a971a</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8bd8eee331c2fa1553e57d18d5dbbf1dc83820fc"><code>8bd8eee</code></a>
chore: add additional text to CONTRIBUTING.md (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3372">#3372</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e4deb657ddb9c5d8ac36c335391aafb19034e9de"><code>e4deb65</code></a>
Release 2026-03-31</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/1f758f207351302f9f4e1a2aa4c255a75d81446b"><code>1f758f2</code></a>
Regenerated Clients</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.31.6...config/v1.32.14">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/aws/aws-sdk-go-v2/config&package-manager=go_modules&previous-version=1.31.6&new-version=1.32.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…oft#1885)

# Description

Replace the single `directory: "/"` Docker ecosystem entry in dependabot
config (which was a no-op since no Dockerfile exists at the repo root)
with 7 per-directory entries matching actual Dockerfile locations.
Critical components (controller, shell, cli, operator, test/image) are
checked daily; tools (kapinger, toolbox) weekly.

Also adds a brief section to the development guide documenting the
dependabot Docker tracking setup.

## Related Issue

Fixes microsoft#1884

## Checklist

- [x] I have read the [contributing
documentation](https://retina.sh/docs/Contributing/overview).
- [x] I signed and signed-off the commits (`git commit -S -s ...`). See
[this
documentation](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification)
on signing commits.
- [x] I have correctly attributed the author(s) of the code.
- [x] I have tested the changes locally.
- [x] I have followed the project's style guidelines.
- [x] I have updated the documentation, if necessary.
- [ ] I have added tests, if applicable.

## Screenshots (if applicable) or Testing Completed

Verified all 7 Dockerfile directories exist and match the dependabot
entries:
`/controller`, `/shell`, `/cli`, `/operator`, `/test/image`,
`/hack/tools/kapinger`, `/hack/tools/toolbox`

## Additional Notes

Original PR from Copilot SWE agent. Squashed and cleaned up:
- Removed `prefix-development` (not applicable to Docker ecosystem)
- Replaced non-existent labels (`area/security`, `area/testing`,
`area/tools`) with existing `area/infra`, `area/dependencies`
- Fixed duplicate broken `## Cleanup` section with unclosed code fence
- Removed unnecessary validation script

Signed-off-by: Quang Nguyen <nguyenquang@microsoft.com>
Co-authored-by: Quang Nguyen <nguyenquang@microsoft.com>
Co-authored-by: matmerr <6521405+matmerr@users.noreply.github.com>
…soft#2214)

# Description

The apiserver watcher currently reads the `kubernetes` service's backing
IPs via `corev1.Endpoints`, which emits a deprecation warning on v1.33+
clusters:

```
W... warnings.go:70] v1 Endpoints is deprecated in v1.33+; use discovery.k8s.io/v1 EndpointSlice
```

The warning is sent by the kube-apiserver as an HTTP `Warning:` response
header
([KEP-1693](https://github.com/kubernetes/enhancements/blob/master/keps/sig-api-machinery/1693-warnings/README.md))
and surfaced by the client-go warning handler; it was added in
[KEP-4974](https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/4974-deprecate-endpoints)
for every read/write on `Endpoints` objects in v1.33.

This PR switches `ipsFromEndpoint` to list `discoveryv1.EndpointSlice`
filtered by `kubernetes.io/service-name=kubernetes`, aggregating
addresses across all slices (large services get split past 100
endpoints). The agent RBAC in both Helm charts is updated to grant
`discovery.k8s.io/endpointslices` and drop the now-unused
`core/endpoints` rules.

### Why EndpointSlice

EndpointSlice is a strict superset of `Endpoints` — it supports
dual-stack, traffic distribution, and scales past the 100-endpoint cap.
It's been the default path for service discovery for nearly five years:

| Stage | K8s version | Reference |
|---|---|---|
| Alpha | v1.16 |
[KEP-0752](https://github.com/kubernetes/enhancements/blob/master/keps/sig-network/0752-endpointslices/README.md),
controller introduced in
[#81048](kubernetes/kubernetes#81048) |
| GA — kube-proxy + controller-manager default | v1.21 (Apr 2021) |
[CHANGELOG-1.21](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md);
kube-proxy
[#103306](kubernetes/kubernetes#103306);
controller-manager
[#99870](kubernetes/kubernetes#99870) |
| `v1.Endpoints` deprecated | v1.33 (Apr 2025) |
[KEP-4974](https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/4974-deprecate-endpoints),
[transition
blog](https://kubernetes.io/blog/2025/04/24/endpoints-deprecation/) |

Canonical docs:
[EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/).

## Related Issue

N/A — surfaced during local testing on a v1.33 cluster.

## Checklist

- [x] I have read the [contributing
documentation](https://retina.sh/docs/Contributing/overview).
- [x] I signed and signed-off the commits (`git commit -S -s ...`).
- [x] I have correctly attributed the author(s) of the code.
- [x] I have tested the changes locally.
- [x] I have followed the project's style guidelines.
- [ ] I have updated the documentation, if necessary — no doc changes
needed.
- [x] I have added tests, if applicable.

## Testing Completed

```bash
go test -tags=unit,dashboard ./pkg/watchers/apiserver/... -v -count=1
```

All tests pass. `TestRefresh` confirms the seeded EndpointSlice IPs flow
through into the created IP set.

Signed-off-by: Quang Nguyen <nguyenquang@microsoft.com>
…o 1.21.1 (microsoft#2223)

Bumps
[github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go)
from 1.21.0 to 1.21.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Azure/azure-sdk-for-go/releases">github.com/Azure/azure-sdk-for-go/sdk/azcore's
releases</a>.</em></p>
<blockquote>
<h2>sdk/azcore/v1.21.1</h2>
<h2>1.21.1 (2026-04-16)</h2>
<h3>Bugs Fixed</h3>
<ul>
<li>Fixed an issue in <code>ResponseError.Error()</code> where the
request URL path was being logged unescaped.</li>
<li>Redact query parameters when logging errors.</li>
<li>For <code>runtime.JoinPaths</code>, don't add a slash between root
and paths when <code>paths</code> starts with <code>?</code> (query
string).</li>
</ul>
<h3>Other Changes</h3>
<ul>
<li>Upgraded to Go 1.25.0.</li>
<li>Upgraded dependencies.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Azure/azure-sdk-for-go/commit/63e4ba18204b0df554e330df8f85662e653e67ab"><code>63e4ba1</code></a>
Bump release date for azcore (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26613">#26613</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-go/commit/fa0312174d17ff4cb7cb0118fa80de07409841c2"><code>fa03121</code></a>
remove bypass local dns (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26609">#26609</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-go/commit/c47f9a60dd1e9be6943ff0d6a5666a0ac09f6cfa"><code>c47f9a6</code></a>
Sync eng/common directory with azure-sdk-tools for PR 15153 (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26607">#26607</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-go/commit/88b8b5b38ecebb929a2e302df054fed1d68618b8"><code>88b8b5b</code></a>
Changelog for v2.2.0 (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26567">#26567</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-go/commit/72ca19ae2b8b4514c4f48a5ff33495b03c08afd0"><code>72ca19a</code></a>
Storage STG 101 (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26568">#26568</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-go/commit/b64baf56c6b168d258b2a0678290ac5f9ab97938"><code>b64baf5</code></a>
Sync .github directory with azure-sdk-tools repository (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26600">#26600</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-go/commit/ecd64dd6500a04da22107925c3ba9fbe8e636f2c"><code>ecd64dd</code></a>
Prep azcore@v1.21.1 for release (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26596">#26596</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-go/commit/1d02f204d0146ffd7d13d5585bf3766e53c32cc5"><code>1d02f20</code></a>
Update copilot code review instructions and migration breaking change
mitigat...</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-go/commit/f6e9ce3212cc9d654d349778f19065eb5d849197"><code>f6e9ce3</code></a>
Sync eng/common directory with azure-sdk-tools for PR 14973 (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26531">#26531</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-go/commit/d5a3baf11e0b743a4009efb8e84cbaee335fc0eb"><code>d5a3baf</code></a>
Update CODEOWNERS to remove one owner from Custom Providers (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26588">#26588</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.21.0...sdk/azcore/v1.21.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/Azure/azure-sdk-for-go/sdk/azcore&package-manager=go_modules&previous-version=1.21.0&new-version=1.21.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ft#2224)

Bumps [github.com/mdlayher/netlink](https://github.com/mdlayher/netlink)
from 1.11.0 to 1.11.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mdlayher/netlink/releases">github.com/mdlayher/netlink's
releases</a>.</em></p>
<blockquote>
<h2>v1.11.1</h2>
<p>See <a
href="https://github.com/mdlayher/netlink/blob/main/CHANGELOG.md#v1111">https://github.com/mdlayher/netlink/blob/main/CHANGELOG.md#v1111</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/mdlayher/netlink/blob/main/CHANGELOG.md">github.com/mdlayher/netlink's
changelog</a>.</em></p>
<blockquote>
<h2>v1.11.1</h2>
<ul>
<li>[Bug Fix]: <a
href="https://redirect.github.com/mdlayher/netlink/pull/283">#283</a>
fixed a bug
where <code>netlink.Conn.Receive</code> would reject valid netlink
messages whose header
length is not aligned. This is common with nfqueue, nflog and conntrack
events.</li>
<li>[Bug Fix]: <a
href="https://redirect.github.com/mdlayher/netlink/pull/284">#284</a>
fixed a bug
where <code>netlink.Message.Data</code> could be silently overwritten by
subsequent
<code>netlink.Conn.Receive</code> calls when
<code>netlink.Config.MessageBufferSize</code> is enabled,
due to pooled buffer reuse.</li>
<li>[Improvement]: <a
href="https://redirect.github.com/mdlayher/netlink/pull/282">#282</a>
improved
error handling by usage of <code>errors</code> package.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mdlayher/netlink/commit/45ff01502724315f830173461edd86b98a9a5a40"><code>45ff015</code></a>
CHANGELOG: release v1.11.1 (<a
href="https://redirect.github.com/mdlayher/netlink/issues/285">#285</a>)</li>
<li><a
href="https://github.com/mdlayher/netlink/commit/87883031ec9c1f94db54aee63f7483df7616113a"><code>8788303</code></a>
netlink: fix UnmarshalBinary rejecting valid unpadded netlink messages
(<a
href="https://redirect.github.com/mdlayher/netlink/issues/283">#283</a>)</li>
<li><a
href="https://github.com/mdlayher/netlink/commit/bf38b1689d9489a5df083ff3961ea79e9240f894"><code>bf38b16</code></a>
conn_linux: copy pooled receive buffers before parsing (<a
href="https://redirect.github.com/mdlayher/netlink/issues/284">#284</a>)</li>
<li><a
href="https://github.com/mdlayher/netlink/commit/c24d5163915b3e1ec47c3a34c84087bf2283d2a0"><code>c24d516</code></a>
Improve error handling (<a
href="https://redirect.github.com/mdlayher/netlink/issues/282">#282</a>)</li>
<li>See full diff in <a
href="https://github.com/mdlayher/netlink/compare/v1.11.0...v1.11.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/mdlayher/netlink&package-manager=go_modules&previous-version=1.11.0&new-version=1.11.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…9.1 (microsoft#2226)

Bumps
[github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2)
from 1.99.0 to 1.99.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9bc9c51d733fd437a60a8710531477ca0347dcc4"><code>9bc9c51</code></a>
Release 2026-04-17</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2b41455a8d88032b9b76b0bafbe23de0a61a6f29"><code>2b41455</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2327a1b15b5f16414e715325bc9579082fde0767"><code>2327a1b</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/9225797aa8ce8661d61f4628973aface4e01c922"><code>9225797</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/7b6f675adb365c7b069aaf2a8e81c4b8f8a5d08e"><code>7b6f675</code></a>
Bump smithy-go to 1.25 (again) (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3390">#3390</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c8b6a97220901cccfd8a06f6f25aef65a967384c"><code>c8b6a97</code></a>
Release 2026-04-16</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/4a05c2ba948715d305aff4519154abe2c4799246"><code>4a05c2b</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/6cd4cc9201382be2638c8b4951b5d92de73c1161"><code>6cd4cc9</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3153bed494fb9e426640b30c7b91be0510b20362"><code>3153bed</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/fe3cef6cc115a2915f5410c739dc73d51553d709"><code>fe3cef6</code></a>
Make AccountIDEndpointRouting aware of bdd endpoints (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3387">#3387</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.99.0...service/s3/v1.99.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/aws/aws-sdk-go-v2/service/s3&package-manager=go_modules&previous-version=1.99.0&new-version=1.99.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [k8s.io/metrics](https://github.com/kubernetes/metrics) from
0.35.3 to 0.35.4.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes/metrics/commit/2dd2b8ac263d641f26f62e97b0cc0d69487601f2"><code>2dd2b8a</code></a>
Update dependencies to v0.35.4 tag</li>
<li><a
href="https://github.com/kubernetes/metrics/commit/f34cd81b2e9fef1988712b2e7cda87abb1e70475"><code>f34cd81</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes/metrics/issues/138356">#138356</a>
from dims/update-moby-spdystream-v0.5.1-1.35</li>
<li><a
href="https://github.com/kubernetes/metrics/commit/d571fcbd22914a78778066a25f7576cb0582e22f"><code>d571fcb</code></a>
Update github.com/moby/spdystream from v0.5.0 to v0.5.1</li>
<li>See full diff in <a
href="https://github.com/kubernetes/metrics/compare/v0.35.3...v0.35.4">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
# Description

Follow-up to microsoft#1885. Every `FROM` line in the repo's Dockerfiles pins
only the digest (`image@sha256:...`) with the tag documented in an
adjacent `# skopeo inspect` comment. Dependabot doesn't read the
comments — with no tag on the `FROM`, it tracks the "latest" digest for
the repository name and bumps blindly, ignoring which variant the pinned
digest actually belongs to.

This is already producing broken PRs. In microsoft#2220, the Windows Server Core
`golang` digest in `controller/Dockerfile.windows-cgo` and
`controller/Dockerfile.windows-native` was replaced with the
`azurelinux3.0` digest used by the Linux images — those FROMs wouldn't
build.

## Fix

Per [Dependabot's
docs](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file),
when a `FROM` has both a tag and a digest, Dependabot only bumps the
digest within that tag. Switching every `FROM` to
`image:tag@sha256:digest` scopes each variant separately
(`1.26.2-azurelinux3.0`, plain `1.26.2`,
`1.26.2-windowsservercore-ltsc2022`, `windows/servercore:ltsc2022`,
etc.) and yields readable PR titles like `bump golang from
1.26.2-azurelinux3.0 to 1.27.0-azurelinux3.0` instead of `` bump golang
from `33d887d` to `8fe67ba` ``.

While here, each digest is refreshed to the current `skopeo inspect`
result for its tag.

- **Scope**: 25 `FROM` lines across 14 Dockerfiles (`controller/`,
`operator/`, `cli/`, `shell/`, `test/image/`,
`hack/tools/{kapinger,toolbox}/`).
- **Digest refresh**: 5 of 8 unique `image:tag` combinations had newer
digests upstream; 3 (`azurelinux/base/core:3.0`,
`azurelinux/distroless/minimal:3.0`,
`mirror/docker/library/ubuntu:24.04`) were unchanged.
- **Follow-up**: the 6 open Dependabot PRs microsoft#2216microsoft#2221 should be closed;
the next run will regenerate correctly-scoped PRs per tag.

## Related Issue

Follow-up to microsoft#1885. No issue to close.

## Checklist

- [x] I have read the [contributing
documentation](https://retina.sh/docs/Contributing/overview).
- [x] I signed and signed-off the commits (`git commit -S -s ...`).
- [x] I have correctly attributed the author(s) of the code.
- [x] I have tested the changes locally.
- [x] I have followed the project's style guidelines.
- [ ] I have updated the documentation, if necessary.
- [ ] I have added tests, if applicable.

## Screenshots (if applicable) or Testing Completed

N/A — config-only change.

## Additional Notes

N/A.

Signed-off-by: Quang Nguyen <nguyenquang@microsoft.com>
# Description

Add HTTPRoute support for hubble-ui for clusters using Gateway API

## Related Issue

If this pull request is related to any issue, please mention it here.
Additionally, make sure that the issue is assigned to you before
submitting this pull request.

## Checklist

- [x] I have read the [contributing
documentation](https://retina.sh/docs/Contributing/overview).
- [x] I signed and signed-off the commits (`git commit -S -s ...`). See
[this
documentation](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification)
on signing commits.
- [x] I have correctly attributed the author(s) of the code.
- [x] I have tested the changes locally.
- [ ] I have followed the project's style guidelines.
- [ ] I have updated the documentation, if necessary.
- [x] I have added tests, if applicable.

## Screenshots (if applicable) or Testing Completed

Please add any relevant screenshots or GIFs to showcase the changes
made.

## Additional Notes

Add any additional notes or context about the pull request here.

---

Please refer to the [CONTRIBUTING.md](../CONTRIBUTING.md) file for more
information on how to contribute to this project.
…f43dd9 to 0.21.0 (microsoft#2225)

Bumps [github.com/cilium/ebpf](https://github.com/cilium/ebpf) from
0.20.1-0.20260218191617-ee67e7f43dd9 to 0.21.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cilium/ebpf/releases">github.com/cilium/ebpf's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.0: Struct Ops, Weak Symbols and BTF deduplication</h2>
<p>Hi, everyone! The Cilium project is proud to announce v0.21.0 of
ebpf-go, our first major 2026 feature release. Please note that this
version comes with a few breaking changes for XDP users that may require
some intervention based on your use case, so please read the following
section carefully before upgrading! We've also removed some
long-deprecated APIs.</p>
<h2>Breaking changes</h2>
<h3>XDP Attach Type</h3>
<p>This release saw a change to the ELF parsing logic, specifically to
XDP programs. Previously, XDP programs had their <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#ProgramSpec.AttachType"><code>ProgramSpec.AttachType</code></a>
set to <code>AttachNone</code>. Prompted by upstream changes in Linux
6.18, XDP programs now come with an <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#AttachXDP"><code>AttachXDP</code></a>
attach type. This change ensures compatibility with kernels going
forward, as well as better interoperability with libbpf-based tools
using shared PROG_ARRAY maps.</p>
<p>tl;dr: Linux 6.18 and later disallows mixing attach types within the
same program array.</p>
<p>If your application uses a pinned program array, you may need to
manually change the attach type of your XDP programs to <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#AttachType"><code>AttachNone</code></a>
before they are loaded to ensure they can still be inserted into maps
containing pre-upgrade programs.</p>
<p>The same goes for BPF links. If you're updating an XDP link created
by an older version of ebpf-go, you need to ensure your XDP program is
loaded with the same attach type the link was initially created with, or
updating will fail with EINVAL.</p>
<p>For an example of how to deal with this change, <a
href="https://redirect.github.com/cilium/cilium/pull/44209">here's the
the Cilium PR</a> that implemented logic to try both attach types when
updating links.</p>
<h3>Windows helper function rename</h3>
<p>ebpf-for-windows was upgraded from <code>0.21.0</code> to
<code>v1.0.0-rc1</code>. efW made breaking changes to the names of
helper functions, our API has been updated to match:</p>
<ul>
<li><a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.20.0/asm#WindowsFnMemcmp"><code>asm.WindowsFnMemcmp</code></a>
-&gt; <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/asm#WindowsFnMemcmpS"><code>asm.WindowsFnMemcmpS</code></a></li>
<li><a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.20.0/asm#WindowsFnMemcpy"><code>asm.WindowsFnMemcpy</code></a>
-&gt; <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/asm#WindowsFnMemcpyS"><code>asm.WindowsFnMemcpyS</code></a></li>
<li><a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.20.0/asm#WindowsFnMemmove"><code>asm.WindowsFnMemmove</code></a>
-&gt; <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/asm#WindowsFnMemmoveS"><code>asm.WindowsFnMemmoveS</code></a></li>
</ul>
<h2>New Features</h2>
<ul>
<li>Struct ops — The ELF reader can now parse struct ops sections,
building <code>MapSpecs</code> and resolving function-pointer members.
<a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/link#AttachStructOps"><code>link.AttachStructOps</code></a>
has been added to allow attaching a <code>StructOpsMap</code> as a link.
A sched_ext example can be found <a
href="https://github.com/cilium/ebpf/tree/v0.21.0/examples/sched_ext">here</a>.</li>
<li>Weak symbol &amp; ELF linking — Programs and maps defined as weak
symbols are now fully supported. The ELF reader performs per-symbol
decoding for both <code>ProgramSpec</code> and <code>MapSpec</code>,
meaning linked objects (produced via <code>bpftool gen object</code>)
are now handled correctly.</li>
<li>BTF type deduplication — <code>btf.Builder</code> can now
deduplicate types while generating a BTF blob. Deduplication can be
enabled by passing <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/btf#BuilderOptions"><code>BuilderOptions</code></a>
to <code>NewBuilder</code> with the <code>Deduplication</code> field set
to true.</li>
<li><a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#ProgramSpec.Compatible"><code>ProgramSpec.Compatible</code></a>
was added — <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#ProgramSpec.Tag"><code>ProgramSpec.Tag</code></a>
is now deprecated. The new <code>ProgramSpec.Compatible</code> method
compares a loaded program's tag against both SHA-1 and SHA-256 hashes of
the spec, ensuring correct behaviour across kernels — including kernel
v6.18+, which switched to SHA-256 for program hashing.</li>
<li>ProgramInfo improvements — The program name as reported by <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#ProgramInfo.Name"><code>ProgramInfo.Name</code></a>
is now sourced from BTF func info when available to provide the full
program name if it's longer than 15 bytes.</li>
<li>LinkInfo improvements — Added a number of methods and types related
to reading back link info.</li>
<li>Reverse symbol lookup — Added <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/link#Executable.Symbol"><code>Executable.Symbol</code></a>
to resolve addresses to a symbol and relative offset.</li>
<li>Uprobe/kprobe link feature probing — <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/features#HaveBPFLinkKprobeMulti"><code>HaveBPFLinkKprobeMulti</code></a>,
<a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/features#HaveBPFLinkUprobeMulti"><code>HaveBPFLinkUprobeMulti</code></a>,
and <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/features#HaveBPFLinkKprobeSession"><code>HaveBPFLinkKprobeSession</code></a>
are now exported from the features package, making it easier to probe
for multi-attach support before loading programs.</li>
<li>Program run batching — A new <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#RunOptions"><code>RunOptions.BatchSize</code></a>
option has been added to support batching when running programs.</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Allow weak kfuncs loading without <code>CAP_SYS_ADMIN</code> —
Loading programs with weak kfuncs on kernels that don't have the kfunc
no longer fails with &quot;operation not permitted&quot; when the caller
lacks <code>CAP_SYS_ADMIN</code>. The permission error is now treated as
&quot;not found&quot; for weak kfuncs.</li>
<li>ELF reader nil panic — Fixed a panic that could occur when loading
an ELF without BTF due to a nil extInfo pointer. Along with the fix, a
suite of regression tests was added that exercises the core loader logic
with non-BTF ELFs as well.</li>
<li><a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/link#QueryResult.HaveLinkInfo"><code>QueryResult.HaveLinkInfo</code></a>
heuristic — The heuristic has been updated to check for at least one
attached program with a non-zero link ID, fixing a false positive
introduced by a kernel change that began populating the revision field
for cgroup queries.</li>
<li>Windows map/program count — Increased the default map and program
count on Windows to reduce failures when loading collections with more
maps than previously allocated.</li>
</ul>
<h2>More breaking changes</h2>
<h3>Deprecations</h3>
<p>In this release we have removed a number of features which had been
deprecated for a while.</p>
<ul>
<li><a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.20.0#CollectionSpec.RewriteMaps"><code>CollectionSpec.RewriteMaps</code></a>
- Pass <a
href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#CollectionOptions"><code>CollectionOptions.MapReplacements</code></a>
when loading the Collection
instead.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/cilium/ebpf/commits/v0.21.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…t#2227)

Bumps
[github.com/cilium/workerpool](https://github.com/cilium/workerpool)
from 1.3.0 to 1.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cilium/workerpool/releases">github.com/cilium/workerpool's
releases</a>.</em></p>
<blockquote>
<h2>v1.4.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements</h3>
<ul>
<li>Add WithResultCallback option to avoid unbounded result accumulation
by <a href="https://github.com/rolinh"><code>@​rolinh</code></a> in <a
href="https://redirect.github.com/cilium/workerpool/pull/114">cilium/workerpool#114</a></li>
<li>workerpool: reject Submit when parent context is done by <a
href="https://github.com/rolinh"><code>@​rolinh</code></a> in <a
href="https://redirect.github.com/cilium/workerpool/pull/111">cilium/workerpool#111</a></li>
</ul>
<h3>Documentation</h3>
<ul>
<li>doc: explicit that result callback cannot call Submit() nor Close()
by <a href="https://github.com/kaworu"><code>@​kaworu</code></a> in <a
href="https://redirect.github.com/cilium/workerpool/pull/117">cilium/workerpool#117</a></li>
<li>doc: improve doc and examples around task cancellation, drain and
callbacks by <a
href="https://github.com/rolinh"><code>@​rolinh</code></a> in <a
href="https://redirect.github.com/cilium/workerpool/pull/115">cilium/workerpool#115</a></li>
<li>doc: improve readme to more clearly state the lib purpose, pros and
cons by <a href="https://github.com/rolinh"><code>@​rolinh</code></a> in
<a
href="https://redirect.github.com/cilium/workerpool/pull/116">cilium/workerpool#116</a></li>
</ul>
<h3>CI</h3>
<ul>
<li>.github/workflows: adjust branch name to main by <a
href="https://github.com/tklauser"><code>@​tklauser</code></a> in <a
href="https://redirect.github.com/cilium/workerpool/pull/101">cilium/workerpool#101</a></li>
<li>chore(deps): update all github action dependencies by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/cilium/workerpool/pull/110">cilium/workerpool#110</a></li>
<li>chore: Configure Renovate by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/cilium/workerpool/pull/105">cilium/workerpool#105</a></li>
<li>ci: Bump actions/checkout from 4.2.2 to 5.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/99">cilium/workerpool#99</a></li>
<li>ci: Bump actions/checkout from 5.0.0 to 5.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/104">cilium/workerpool#104</a></li>
<li>ci: Bump actions/checkout from 5.0.1 to 6.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/106">cilium/workerpool#106</a></li>
<li>ci: Bump actions/setup-go from 5.3.0 to 5.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/94">cilium/workerpool#94</a></li>
<li>ci: Bump actions/setup-go from 5.4.0 to 5.5.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/98">cilium/workerpool#98</a></li>
<li>ci: Bump actions/setup-go from 5.5.0 to 6.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/100">cilium/workerpool#100</a></li>
<li>ci: Bump actions/setup-go from 6.0.0 to 6.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/107">cilium/workerpool#107</a></li>
<li>ci: Bump golangci/golangci-lint-action from 6.3.3 to 6.5.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/91">cilium/workerpool#91</a></li>
<li>ci: Bump golangci/golangci-lint-action from 6.5.0 to 6.5.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/93">cilium/workerpool#93</a></li>
<li>ci: Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/97">cilium/workerpool#97</a></li>
<li>ci: Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/103">cilium/workerpool#103</a></li>
<li>ci: Bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/cilium/workerpool/pull/108">cilium/workerpool#108</a></li>
<li>ci: update golangci-lint to v2 by <a
href="https://github.com/kaworu"><code>@​kaworu</code></a> in <a
href="https://redirect.github.com/cilium/workerpool/pull/96">cilium/workerpool#96</a></li>
<li>ci: update tested Go versions by <a
href="https://github.com/tklauser"><code>@​tklauser</code></a> in <a
href="https://redirect.github.com/cilium/workerpool/pull/102">cilium/workerpool#102</a></li>
<li>ci: update tested Go versions to currently supported 1.25 an 1.26 by
<a href="https://github.com/tklauser"><code>@​tklauser</code></a> in <a
href="https://redirect.github.com/cilium/workerpool/pull/112">cilium/workerpool#112</a></li>
<li>ci: use oldstable and stable alias versions by <a
href="https://github.com/tklauser"><code>@​tklauser</code></a> in <a
href="https://redirect.github.com/cilium/workerpool/pull/113">cilium/workerpool#113</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] made
their first contribution in <a
href="https://redirect.github.com/cilium/workerpool/pull/105">cilium/workerpool#105</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/cilium/workerpool/compare/v1.3.0...v1.4.0">https://github.com/cilium/workerpool/compare/v1.3.0...v1.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cilium/workerpool/commit/099834079466c6e44c6c6c41fff0f833349ffd4f"><code>0998340</code></a>
doc: explicit that result callback cannot call Submit() nor Close()</li>
<li><a
href="https://github.com/cilium/workerpool/commit/d7b7562feaaed7d8767ec0fa2090ac285eef0e88"><code>d7b7562</code></a>
doc: improve readme to more clearly state the lib purpose, pros and
cons</li>
<li><a
href="https://github.com/cilium/workerpool/commit/8427060dde1106cd62289af4d30dc6a2708276a4"><code>8427060</code></a>
doc: enable godoclint and address reported issues</li>
<li><a
href="https://github.com/cilium/workerpool/commit/6ecdd96ea373cf0610e8d2595abf839f330585c1"><code>6ecdd96</code></a>
doc: ensure example_test.go and the example in the readme are in
sync</li>
<li><a
href="https://github.com/cilium/workerpool/commit/bd12cf29f2c019bb51be48e18b8caab46af1ce80"><code>bd12cf2</code></a>
doc: improve doc and examples around task context cancellation</li>
<li><a
href="https://github.com/cilium/workerpool/commit/308f6da42dc2380259a9b915f9da6fa0602b601c"><code>308f6da</code></a>
doc: improve doc around using Drain when WithResultCallback is used</li>
<li><a
href="https://github.com/cilium/workerpool/commit/acd1f0de4df8ad37b3a90983975a87e9a865358f"><code>acd1f0d</code></a>
doc: improve doc around the usage and interraction of Close and
Drain</li>
<li><a
href="https://github.com/cilium/workerpool/commit/99bd3ba72fcca0aac514f545021400c30d7c7988"><code>99bd3ba</code></a>
improve comments that explain why no lock is needed around
wp.results</li>
<li><a
href="https://github.com/cilium/workerpool/commit/5570790e931fa17a202274b682084c7d7d57f9d0"><code>5570790</code></a>
doc: make the for loop condition in the examples more readable</li>
<li><a
href="https://github.com/cilium/workerpool/commit/e29e14a9317c461dace77e758654266eb082c085"><code>e29e14a</code></a>
add WithResultCallback option to avoid unbounded result
accumulation</li>
<li>Additional commits viewable in <a
href="https://github.com/cilium/workerpool/compare/v1.3.0...v1.4.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…to 0.18.0 (microsoft#2222)

Bumps
[sigs.k8s.io/cloud-provider-azure/pkg/azclient](https://github.com/kubernetes-sigs/cloud-provider-azure)
from 0.17.0 to 0.18.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/739c700edf12ad7bfda82475ba1cf0a6ba70921f"><code>739c700</code></a>
build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10197">#10197</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/237b5a337cf608f1ed9de2f5c74b0d5ff948c8a8"><code>237b5a3</code></a>
build(deps): bump the all group with 2 updates (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10200">#10200</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/bd28182daadf69fbbe112d988ec11aefd6013973"><code>bd28182</code></a>
build(deps): bump the all group in /kubetest2-aks with 2 updates (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10196">#10196</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/7d45437b5e583444f38bad4fae87a3dda5fa4df2"><code>7d45437</code></a>
build(deps): bump github.com/go-git/go-git/v5 in /kubetest2-aks (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10193">#10193</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/b30c9922cf2a3c14eb3d1ca94e0e1f6b36730251"><code>b30c992</code></a>
chore: pin labeler GitHub Action to full-length commit SHAs (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10192">#10192</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/e188952e7463d5539ef6fca0e0098acbb497638d"><code>e188952</code></a>
build(deps): bump oss/go/microsoft/golang in the all group (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10178">#10178</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/970bd8e5f635ff2811821e63967504afece40189"><code>970bd8e</code></a>
Merge pull request <a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10189">#10189</a>
from andyzhangx/fix/cross-rg-private-dns-zone</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/c6c8ff5c4a8f9a1467865a9e6f07dd45c7e68bc6"><code>c6c8ff5</code></a>
fix: capitalize DNS in error message, add PrivateDNSZoneID RG assertion
in test</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/bbc7a91fb16889e1a047e96de9cccd5cf61aea91"><code>bbc7a91</code></a>
fix: use single consistent 'resourceGroup' log key, remove
duplicates</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/bb06c6c25033eccab164362b9cd64130e2b91e1a"><code>bb06c6c</code></a>
fix: improve error messages and preserve log key backward
compatibility</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/compare/pkg/azclient/v0.17.0...pkg/azclient/v0.18.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#2230)

Bumps
[aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action)
from 0.35.0 to 0.36.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aquasecurity/trivy-action/releases">aquasecurity/trivy-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.36.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(ci): update bump-trivy workflow by <a
href="https://github.com/DmitriyLewen"><code>@​DmitriyLewen</code></a>
in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/546">aquasecurity/trivy-action#546</a></li>
<li>ci: use action.yaml as single source of truth for Trivy version by
<a href="https://github.com/nikpivkin"><code>@​nikpivkin</code></a> in
<a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/552">aquasecurity/trivy-action#552</a></li>
<li>ci: replace peter-evans/create-pull-request with gh CLI by <a
href="https://github.com/nikpivkin"><code>@​nikpivkin</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/550">aquasecurity/trivy-action#550</a></li>
<li>test: use pinned digests for trivy-db, trivy-java-db and
trivy-checks by <a
href="https://github.com/nikpivkin"><code>@​nikpivkin</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/555">aquasecurity/trivy-action#555</a></li>
<li>ci: add dependabot config by <a
href="https://github.com/nikpivkin"><code>@​nikpivkin</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/556">aquasecurity/trivy-action#556</a></li>
<li>chore: add zizmor config by <a
href="https://github.com/nikpivkin"><code>@​nikpivkin</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/557">aquasecurity/trivy-action#557</a></li>
<li>chore(deps): bump the actions group with 5 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/558">aquasecurity/trivy-action#558</a></li>
<li>fix: use portable shebang in entrypoint.sh by <a
href="https://github.com/Hayao0819"><code>@​Hayao0819</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/545">aquasecurity/trivy-action#545</a></li>
<li>Fix typo in GOOGLE_APPLICATION_CREDENTIALS env var name by <a
href="https://github.com/patrik-csak"><code>@​patrik-csak</code></a> in
<a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/547">aquasecurity/trivy-action#547</a></li>
<li>Upgrade Trivy action version from 0.33.1 to 0.35.0 fixes <a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/549">#549</a>
by <a
href="https://github.com/Aditya09-cse"><code>@​Aditya09-cse</code></a>
in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/548">aquasecurity/trivy-action#548</a></li>
<li>chore: use GitHub Actions as git commit author in bump-trivy
workflow by <a
href="https://github.com/nikpivkin"><code>@​nikpivkin</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/561">aquasecurity/trivy-action#561</a></li>
<li>chore(deps): Update trivy to v0.70.0 by <a
href="https://github.com/Argon-DevOps-Mgt"><code>@​Argon-DevOps-Mgt</code></a>
in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/559">aquasecurity/trivy-action#559</a></li>
<li>chore: update action version to v0.36.0 in examples by <a
href="https://github.com/nikpivkin"><code>@​nikpivkin</code></a> in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/563">aquasecurity/trivy-action#563</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
made their first contribution in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/558">aquasecurity/trivy-action#558</a></li>
<li><a href="https://github.com/Hayao0819"><code>@​Hayao0819</code></a>
made their first contribution in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/545">aquasecurity/trivy-action#545</a></li>
<li><a
href="https://github.com/patrik-csak"><code>@​patrik-csak</code></a>
made their first contribution in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/547">aquasecurity/trivy-action#547</a></li>
<li><a
href="https://github.com/Aditya09-cse"><code>@​Aditya09-cse</code></a>
made their first contribution in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/548">aquasecurity/trivy-action#548</a></li>
<li><a
href="https://github.com/Argon-DevOps-Mgt"><code>@​Argon-DevOps-Mgt</code></a>
made their first contribution in <a
href="https://redirect.github.com/aquasecurity/trivy-action/pull/559">aquasecurity/trivy-action#559</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/aquasecurity/trivy-action/compare/v0.35.0...v0.36.0">https://github.com/aquasecurity/trivy-action/compare/v0.35.0...v0.36.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/ed142fd0673e97e23eac54620cfb913e5ce36c25"><code>ed142fd</code></a>
chore: update action version to v0.36.0 in examples (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/563">#563</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/dea62cf79abc269fc35dfd161a4539f0d1f92293"><code>dea62cf</code></a>
chore(deps): Update trivy to v0.70.0 (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/559">#559</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/128d9a8815401077119ad09f6ca1892d422c387b"><code>128d9a8</code></a>
chore: use GitHub Actions as git commit author in bump-trivy workflow
(<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/561">#561</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/876cf04c63f65e9799bcf1043b584e72469c7143"><code>876cf04</code></a>
Upgrade Trivy action version from 0.33.1 to 0.35.0 fixes <a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/549">#549</a>
(<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/548">#548</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/dada78485d6b2b310d433af366da35a70cf01102"><code>dada784</code></a>
Fix typo in GOOGLE_APPLICATION_CREDENTIALS env var name (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/547">#547</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/4a2deec9100bbbee6320e9a33fc9216b5e444e0b"><code>4a2deec</code></a>
fix: use portable shebang in entrypoint.sh (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/545">#545</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/1994662b5555670344cd84d29ed3cad4bd26f31c"><code>1994662</code></a>
chore(deps): bump the actions group with 5 updates (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/558">#558</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/6b36659d99b5bc1a27d44e8be2e3b007f91b033c"><code>6b36659</code></a>
chore: add zizmor config (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/557">#557</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/316aa5aebe03b45a43ade3ec18d7b9c7f9ccb464"><code>316aa5a</code></a>
ci: add dependabot config (<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/556">#556</a>)</li>
<li><a
href="https://github.com/aquasecurity/trivy-action/commit/264c9c5e188ea085e7377fd77abd17bfbd4e5926"><code>264c9c5</code></a>
test: use pinned digests for trivy-db, trivy-java-db and trivy-checks
(<a
href="https://redirect.github.com/aquasecurity/trivy-action/issues/555">#555</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aquasecurity/trivy-action/compare/57a97c7e7821a5776cebc9bb87c984fa69cba8f1...ed142fd0673e97e23eac54620cfb913e5ce36c25">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aquasecurity/trivy-action&package-manager=github_actions&previous-version=0.35.0&new-version=0.36.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…st/image (microsoft#2231)

Bumps oss/go/microsoft/golang from `eb3ce81` to `d904c53`.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=oss/go/microsoft/golang&package-manager=docker&previous-version=1.26.2-azurelinux3.0&new-version=1.26.2-azurelinux3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ntroller (microsoft#2232)

Bumps oss/go/microsoft/golang from `eb3ce81` to `d904c53`.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=oss/go/microsoft/golang&package-manager=docker&previous-version=1.26.2-windowsservercore-ltsc2022&new-version=1.26.2-windowsservercore-ltsc2022)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…00.0 (microsoft#2238)

Bumps
[github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2)
from 1.99.1 to 1.100.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/18fee87f2c0615b0e5c3f28f1b95af810a9e77b5"><code>18fee87</code></a>
Release 2026-04-22</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0ce157cd6b5427066ddb682a4967a3047230de4b"><code>0ce157c</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/68cdb4a02d56b9d932fbfed22660cfa64e815ef6"><code>68cdb4a</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/f399972fb759f6ffd315963de511da785ef408e6"><code>f399972</code></a>
Bump Smithy from 1.67.0 to 1.69.0 (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3394">#3394</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3c19a9b3eb17f48f6b9fc1cad644859d062775ad"><code>3c19a9b</code></a>
Release 2026-04-21</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/1dfac3ec5a6c560e6fee389d0f1f364eb57ae616"><code>1dfac3e</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d842df6fcef5ecc94e2133cb1d96fac4926aadb4"><code>d842df6</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/ffeb52a25097274529920d8f91b4ca27f7b636a9"><code>ffeb52a</code></a>
bump to latest smithy-go codegen (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3393">#3393</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/e839880e8d30897bd8a7684d83626d81f82c565a"><code>e839880</code></a>
Release 2026-04-20</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/4c898c88577f4102793d3e15de05ad3b5b1e2ef5"><code>4c898c8</code></a>
Regenerated Clients</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.99.1...service/s3/v1.100.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/aws/aws-sdk-go-v2/service/s3&package-manager=go_modules&previous-version=1.99.1&new-version=1.100.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dependabot Bot and others added 26 commits August 4, 2026 11:10
…105.0 (microsoft#2535)

Bumps
[github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2)
from 1.104.2 to 1.105.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/fc087ca9c93f355ac25ad7d78cd1f60170424e0c"><code>fc087ca</code></a>
Release 2026-07-06</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/a0dc66ef2b9f031cb3edefc4c9b20635294537ea"><code>a0dc66e</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0e93979277a5678f5a47b407745d3b20b2300083"><code>0e93979</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/1e51eb5e75f504acee800c09b21f5b271d62c728"><code>1e51eb5</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/a4cd1c9dcbc1492cd27b72f2a21682d43dab7f40"><code>a4cd1c9</code></a>
add serialization snapshot tests (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3463">#3463</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8d5a855c81f3a632fcac37fbc67d65e114902efc"><code>8d5a855</code></a>
set rollout strategy 2 (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3467">#3467</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/bdb96810ded2e8f93c329e2b3380543254b984a1"><code>bdb9681</code></a>
Release 2026-07-02</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/dad37d5b8a86c70b41ba6eb26114db1b0566218a"><code>dad37d5</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/019a359cb7d5af2e9a8cffdaf5139797d4d382db"><code>019a359</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/c51ba98fbf1df116d7a9a3770a08788d11f6c480"><code>c51ba98</code></a>
Update API model</li>
<li>See full diff in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.104.2...service/s3/v1.105.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Allow configuring the conntrack reporting interval as another
performance tuning lever.

microsoft#1760

- [X] I have read the [contributing
documentation](https://retina.sh/docs/Contributing/overview).
- [X] I signed and signed-off the commits (`git commit -S -s ...`). See
[this
documentation](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification)
on signing commits.
- [X] I have correctly attributed the author(s) of the code.
- [X] I have tested the changes locally.
- [X] I have followed the project's style guidelines.
- [X] I have updated the documentation, if necessary.
- [X] I have added tests, if applicable.

Tested in a cluster with many connections where periodic reports
contribute the majority of events, increasing the interval reports the
same metrics with less dropped events and resource usage.

---

Please refer to the [CONTRIBUTING.md](../CONTRIBUTING.md) file for more
information on how to contribute to this project.

Signed-off-by: Matthew McKeen <matthew.mckeen@fastly.com>
Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.37.0 to
0.38.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/mod/commit/792ac169a90372d88fb14e712cb793061ba0c104"><code>792ac16</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/mod/commit/fe2ec04f7c3c3aa6fad97631aafcff6e49e2d1db"><code>fe2ec04</code></a>
all: fix some comments to improve readability</li>
<li>See full diff in <a
href="https://github.com/golang/mod/compare/v0.37.0...v0.38.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/mod&package-manager=go_modules&previous-version=0.37.0&new-version=0.38.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
# Description

This PR migrates all GH workflows using FIC to Azure Pipelines due to
internal policy changes regarding FIC in GH.
It adds 3 pipelines under `.azure-pipelines` that mirrors today's GH
workflows:

| ADO Pipeline | Mirrors |
| :--- | :--- |
| `ci.yml` | `images.yaml` (build + manifests + e2e + perf-basics +
perf-advanced on merge-queue) |
| `scale.yml` | `daily-scale-test.yaml` + `scale-test.yaml` (daily cron
+ manual) |
| `perf.yml` | `perf-schedule.yaml` + `perf-manual.yaml` +
`perf-template.yaml` (twice-daily cron + manual) |

Bash bodies inside each `AzureCLI@2` task are copied verbatim from the
existing GH workflows. Only the outer scaffolding is rewritten to ADO
YAML schema (different from GH Actions YAML)

Also added:
- `setup-go.yml`: parses the Go version from `go.mod` (ADO's `GoTool@0`
doesn't natively support `from go.mod` like GH's `setup-go@v6`).
- `free-disk-space.yml`: reclaims ~30GB of pre-installed toolchains on
agents (needed to avoid lack of space for large image builds).

> Nothing in `workflows` is deleted or disabled by this PR. Both
pipelines are available to run in parallel at this stage. A new PR will
be raised to remove old workflows.

### What this PR does NOT do (deferred to a follow-up PR)
- Branch protection changes. Required checks still point at the GH
workflows. Once ADO pipelines are validated, a subsequent admin action +
PR will:
  - Add workflows to required status checks.
  - Remove the corresponding GH Actions checks.
- Delete the FIC-using workflow files: `images.yaml`, `e2e.yaml`,
`perf-template.yaml`, `scale-test.yaml`, `daily-scale-test.yaml`,
`perf-manual.yaml`, `perf-schedule.yaml`.
- Secret / var cleanup.

### Behavior parity with today's GH workflows

The ADO pipelines match today's semantics exactly on all these axes:

- Triggers. `ci.yml` fires on merge-queue pushes
(`gh-readonly-queue/main/*`) and PRs targeting main. Scale/perf fire on
their existing crons.
- Merge-queue gating. ACR push, APP_INSIGHTS_ID embedding, and the
manifests/e2e/perf jobs only run when isMergeGroup=True (mirrors GH's
if: ${{ github.event_name == 'merge_group' }} gate). PR builds and
manual queues run as dry-run.
- Fork PRs. The three pipelines are configured with "Disable building
pull requests from forked GitHub repositories" — same fork-safety
posture as today's FIC-gated jobs (which never ran on fork PRs).
- Image tag. Both build and consumer use $(make version). The migration
proactively fixed a latent tag-mismatch bug (see below).

### Required side-effect changes to retina source

Because ADO doesn't have ARM64 agents, arm64 image builds have to
cross-compile from amd64 hosts. Retina's Dockerfiles have latent bugs /
assumptions that only surface on cross-compile (native ARM64 CI on GH
has always masked them since PR microsoft#2059 introduced systemcrypto/CGO). This
PR includes minimal fixes:

| Change | Reason |
| :--- | :--- | 
| `operator/Dockerfile`, `cli/Dockerfile`: dropped
`--platform=$BUILDPLATFORM` from final image stages | Otherwise
arm64-built binaries got copied into amd64 base images (wrong arch →
exec format error). |
| `operator/Dockerfile`, `cli/Dockerfile`, `controller/Dockerfile`:
added `ENV GOEXPERIMENT=ms_nocgo_opensslcrypto` in builder stages |
Microsoft Go's default `systemcrypto` requires `CGO_ENABLED=1`, but Go
auto-disables CGO when cross-compiling. This experiment (documented in
Microsoft Go MigrationGuide) enables the cgo-less OpenSSL backend so
systemcrypto works with `CGO_ENABLED=0`. Auto-selected in Go 1.27+; env
var can be removed then. |
| `operator/Dockerfile`: `RUN make manifests` wrapped in `env -u GOOS -u
GOARCH` | `make manifests` shells out to `controller-gen` — a build-time
host tool, not the target binary. Without unset, it cross-compiled to
arm64 and failed to `exec` on the amd64 builder. |
| `controller/Dockerfile`: split intermediate into two stages — new
`bpf-gen` at `$TARGETPLATFORM`, existing intermediate stays at
`$BUILDPLATFORM` | Retina's `//go:generate bpf2go -target ${GOARCH}`
directives require target-arch execution (bpf2go invokes clang; can't
cleanly cross-compile bpf2go itself). Split isolates that one
requirement to a small emulated stage while keeping the Go build fast at
$BUILDPLATFORM. Restores fast arm64 build without breaking bpf .o file
generation. |

> Impact on amd64 builds: zero — all these changes are inert when host
== target (CGO stays enabled, no cross-compile, bpf-gen runs natively).

### Tag consistency fix
The migration surfaced a pre-existing latent bug: `make retina-image` /
`make manifest` didn't have `TAG` set by CI, so the Makefile fell back
to `git describe --tags --always` (produces `v1.2.2-76-geade8685`),
while all consumers (`e2e`, `perf-*`, `scale`) used make version
(produces the 7-char SHA). Images were pushed under one tag, consumers
looked for another. GH masked it because actions/checkout defaults to
shallow (no tags, so git describe also falls back to short SHA); ADO
defaults to full-clone.

ADO pipelines now pass `TAG=$(make version)` explicitly to every `make`
invocation, ensuring builder and consumer speak the same tag string on
both platforms.

### Temporary items in this PR (will be reverted after cutover)

- `forceMergeGroup` pipeline parameter in `ci.yml`. Boolean checkbox in
the "Run pipeline" UI that treats a manual queue as if it were a
merge-queue event (push + telemetry + full test suite). Default `false`,
safe. Used during dark-launch to validate the full flow without needing
an actual merge-queue event. Revert once we've moved past validation.

### Verification
- manual run of pipelines completed successfully

## Checklist

- [ ] I have read the [contributing
documentation](https://retina.sh/docs/Contributing/overview).
- [ ] I signed and signed-off the commits (`git commit -S -s ...`). See
[this
documentation](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification)
on signing commits.
- [ ] I have correctly attributed the author(s) of the code.
- [ ] I have tested the changes locally.
- [ ] I have followed the project's style guidelines.
- [ ] I have updated the documentation, if necessary.
- [ ] I have added tests, if applicable.

## Screenshots (if applicable) or Testing Completed

Please add any relevant screenshots or GIFs to showcase the changes
made.

## Additional Notes

Add any additional notes or context about the pull request here.

---

Please refer to the [CONTRIBUTING.md](../CONTRIBUTING.md) file for more
information on how to contribute to this project.

---------

Signed-off-by: Alex Castilio dos Santos <alexsantos@microsoft.com>
…icrosoft#2540)

Bumps the golang-base group with 1 update in the /cli directory:
oss/go/microsoft/golang.
Bumps the golang-base group with 1 update in the /controller directory:
oss/go/microsoft/golang.
Bumps the golang-base group with 1 update in the /hack/tools/kapinger
directory: oss/go/microsoft/golang.
Bumps the golang-base group with 1 update in the /hack/tools/toolbox
directory: oss/go/microsoft/golang.
Bumps the golang-base group with 1 update in the /operator directory:
oss/go/microsoft/golang.
Bumps the golang-base group with 1 update in the /test/image directory:
oss/go/microsoft/golang.

Updates `oss/go/microsoft/golang` from 1.26.4-1-azurelinux3.0 to
1.26.5-1-azurelinux3.0

Updates `oss/go/microsoft/golang` from
1.26.4-1-windowsservercore-ltsc2022 to
1.26.5-1-windowsservercore-ltsc2022

Updates `oss/go/microsoft/golang` from 1.26.4-1 to 1.26.5-1

Updates `oss/go/microsoft/golang` from 1.26.4-1 to 1.26.5-1

Updates `oss/go/microsoft/golang` from 1.26.4-1-azurelinux3.0 to
1.26.5-1-azurelinux3.0

Updates `oss/go/microsoft/golang` from 1.26.4-1-azurelinux3.0 to
1.26.5-1-azurelinux3.0


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
)

Bumps [websocket-driver](https://github.com/faye/websocket-driver-node)
from 0.7.4 to 0.7.5.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md">websocket-driver's
changelog</a>.</em></p>
<blockquote>
<h3>0.7.5 / 2026-06-04</h3>
<ul>
<li>Close a draft-75/76 connection if a length header grows to exceed
the
configured max length</li>
<li>Fail the connection if a message is larger than the configured max
length
after extension processing</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/5d6a9aaf5f019007d917bd9ddc7eeb775c86cc1f"><code>5d6a9aa</code></a>
Bump version to 0.7.5</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/c55679a5b18251dd0a55d18a0cc6a4fd8822b92f"><code>c55679a</code></a>
Fail the connection if a message is larger than the configured max
length aft...</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/5b197ca874dab58e96cacad8a3c256797d804680"><code>5b197ca</code></a>
Close a draft-75/76 connection if a length header grows to exceed the
configu...</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/fc93a48f879d0fd4a77c687a4a19c4328613df65"><code>fc93a48</code></a>
Test on Node v22, v24, and v26</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/2e82d3464d294bdd11202657208636e667212335"><code>2e82d34</code></a>
Test on recent versions of Node</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/e4962db9940ad1a8cf6fe8328d3b81c3f8c37479"><code>e4962db</code></a>
Switch from Travis CI to GitHub Actions</li>
<li><a
href="https://github.com/faye/websocket-driver-node/commit/3f2f9b70a8ae999b4657d26316a5d45b7caea679"><code>3f2f9b7</code></a>
Travis update: cache npm modules, remove sudo, run on Node 15</li>
<li>See full diff in <a
href="https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=websocket-driver&package-manager=npm_and_yarn&previous-version=0.7.4&new-version=0.7.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/retina/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from
6.4.0 to 7.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Add cache-primary-key and cache-matched-key as outputs by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li>
</ul>
<h3>Bug fixes:</h3>
<ul>
<li>Remove dummy NODE_AUTH_TOKEN export by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li>
<li>Only use <code>mirrorToken</code> in <code>getManifest</code> if
it's provided by <a
href="https://github.com/deiga"><code>@​deiga</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
</ul>
<h3>Documentation updates:</h3>
<ul>
<li>Add documentation for publishing to npm with Trusted Publisher
(OIDC) by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li>docs: Update restore-only cache documentation by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li>
<li>docs: Update caching recommendations to mitigate cache poisoning
risks by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li>
</ul>
<h3>Dependency update:</h3>
<ul>
<li>Upgrade <code>@​actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li><a href="https://github.com/deiga"><code>@​deiga</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
<li><a href="https://github.com/jasongin"><code>@​jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p>
<h2>v6.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@​actions/cache</code> to 5.1.0 and add security
overrides for undici and fast-xml-parser by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020"><code>8207627</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4"><code>04be95c</code></a>
Add cache-primary-key and cache-matched-key as outputs (<a
href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140"><code>7c2c68d</code></a>
docs: Update caching recommendations to mitigate cache poisoning risks
(<a
href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d"><code>6a61c03</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a>
from jasongin/update-actions-cache-5.1.0</li>
<li><a
href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f"><code>30eb73b</code></a>
Resolve high-severity audit issues</li>
<li><a
href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f"><code>4e1a87a</code></a>
Update dist</li>
<li><a
href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574"><code>360237f</code></a>
Strict equality</li>
<li><a
href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3"><code>4f8aac5</code></a>
Bump <code>@​actions/cache</code> to 5.1.0, log cache write denied</li>
<li><a
href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980"><code>f4a67bb</code></a>
Only use <code>mirrorToken</code> in <code>getManifest</code> if it's
provided (<a
href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75"><code>0355742</code></a>
Remove dummy NODE_AUTH_TOKEN export (<a
href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-node&package-manager=github_actions&previous-version=6.4.0&new-version=7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the aws-sdk group with 2 updates:
[github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2)
and
[github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2).

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.28 to 1.32.29
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/ed75d3d097568d903f639876299d03241605fd7c"><code>ed75d3d</code></a>
Release 2026-07-08.2</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d67404a5e5ee30a469b0823fb493ca9961107d92"><code>d67404a</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8a21e0976a42f7c28934d0782ad49388fdd4c9d3"><code>8a21e09</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/cb69824f6c68e6fe0144def8e757be46ad4cfcbb"><code>cb69824</code></a>
Release 2026-07-08</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0f18a1fc3762f1f42337e32c37e4a30a51254f8b"><code>0f18a1f</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/982e0d00ad41cbd01ff073cb46c8358887c31e4b"><code>982e0d0</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2872baecbf12283d444219e48940142ee6f28c08"><code>2872bae</code></a>
Add missing options.RequestChecksumCalculation (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3470">#3470</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/ef1f0feba0ff99de62b7dd7916dcd4bd459c766c"><code>ef1f0fe</code></a>
fix(feature/s3/transfermanager): allow multiple symlinks to share the
same ta...</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0df1b91ba8f02e9de847523efed547b2427e4ba6"><code>0df1b91</code></a>
Release 2026-07-07</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/b4ef7306d81dee7c2a3e4016466f826037298767"><code>b4ef730</code></a>
Regenerated Clients</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.28...config/v1.32.29">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.27 to
1.19.28
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/ed75d3d097568d903f639876299d03241605fd7c"><code>ed75d3d</code></a>
Release 2026-07-08.2</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d67404a5e5ee30a469b0823fb493ca9961107d92"><code>d67404a</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/8a21e0976a42f7c28934d0782ad49388fdd4c9d3"><code>8a21e09</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/cb69824f6c68e6fe0144def8e757be46ad4cfcbb"><code>cb69824</code></a>
Release 2026-07-08</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0f18a1fc3762f1f42337e32c37e4a30a51254f8b"><code>0f18a1f</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/982e0d00ad41cbd01ff073cb46c8358887c31e4b"><code>982e0d0</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2872baecbf12283d444219e48940142ee6f28c08"><code>2872bae</code></a>
Add missing options.RequestChecksumCalculation (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3470">#3470</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/ef1f0feba0ff99de62b7dd7916dcd4bd459c766c"><code>ef1f0fe</code></a>
fix(feature/s3/transfermanager): allow multiple symlinks to share the
same ta...</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/0df1b91ba8f02e9de847523efed547b2427e4ba6"><code>0df1b91</code></a>
Release 2026-07-07</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/b4ef7306d81dee7c2a3e4016466f826037298767"><code>b4ef730</code></a>
Regenerated Clients</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.27...credentials/v1.19.28">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…icrosoft#2546)

Bumps the golang-base group with 1 update in the /cli directory:
oss/go/microsoft/golang.
Bumps the golang-base group with 1 update in the /controller directory:
oss/go/microsoft/golang.
Bumps the golang-base group with 1 update in the /hack/tools/kapinger
directory: oss/go/microsoft/golang.
Bumps the golang-base group with 1 update in the /hack/tools/toolbox
directory: oss/go/microsoft/golang.
Bumps the golang-base group with 1 update in the /operator directory:
oss/go/microsoft/golang.
Bumps the golang-base group with 1 update in the /test/image directory:
oss/go/microsoft/golang.

Updates `oss/go/microsoft/golang` from 1.26.5-1-azurelinux3.0 to
1.26.5-2-azurelinux3.0

Updates `oss/go/microsoft/golang` from
1.26.5-1-windowsservercore-ltsc2022 to
1.26.5-2-windowsservercore-ltsc2022

Updates `oss/go/microsoft/golang` from 1.26.5-1 to 1.26.5-2

Updates `oss/go/microsoft/golang` from 1.26.5-1 to 1.26.5-2

Updates `oss/go/microsoft/golang` from 1.26.5-1-azurelinux3.0 to
1.26.5-2-azurelinux3.0

Updates `oss/go/microsoft/golang` from 1.26.5-1-azurelinux3.0 to
1.26.5-2-azurelinux3.0


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…oft#2545)

Bumps
[github.com/prometheus/common](https://github.com/prometheus/common)
from 0.69.0 to 0.70.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/prometheus/common/releases">github.com/prometheus/common's
releases</a>.</em></p>
<blockquote>
<h2>v0.70.0</h2>
<h2>What's Changed</h2>
<ul>
<li>config: fix TLSVersion.String() printing pointer address by <a
href="https://github.com/s3onghyun"><code>@​s3onghyun</code></a> in <a
href="https://redirect.github.com/prometheus/common/pull/929">prometheus/common#929</a></li>
<li>build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/prometheus/common/pull/933">prometheus/common#933</a></li>
<li>Manually go mod tidy by <a
href="https://github.com/SuperQ"><code>@​SuperQ</code></a> in <a
href="https://redirect.github.com/prometheus/common/pull/934">prometheus/common#934</a></li>
<li>Synchronize common files from prometheus/prometheus by <a
href="https://github.com/prombot"><code>@​prombot</code></a> in <a
href="https://redirect.github.com/prometheus/common/pull/937">prometheus/common#937</a></li>
<li>route: add support for the QUERY HTTP method by <a
href="https://github.com/roidelapluie"><code>@​roidelapluie</code></a>
in <a
href="https://redirect.github.com/prometheus/common/pull/932">prometheus/common#932</a></li>
<li>Combine and extend Prometheus text and OpenMetrics 1.0 encoder
benchmarks by <a
href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a
href="https://redirect.github.com/prometheus/common/pull/943">prometheus/common#943</a></li>
<li>build(deps): bump the codeql group with 4 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/prometheus/common/pull/938">prometheus/common#938</a></li>
<li>build(deps): bump actions/setup-go from 6.2.0 to 6.5.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/prometheus/common/pull/940">prometheus/common#940</a></li>
<li>build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/prometheus/common/pull/942">prometheus/common#942</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.1.2 to 2.4.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/prometheus/common/pull/939">prometheus/common#939</a></li>
<li>build(deps): bump actions/checkout from 3.1.0 to 7.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/prometheus/common/pull/941">prometheus/common#941</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/s3onghyun"><code>@​s3onghyun</code></a>
made their first contribution in <a
href="https://redirect.github.com/prometheus/common/pull/929">prometheus/common#929</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/prometheus/common/compare/v0.69.0...v0.70.0">https://github.com/prometheus/common/compare/v0.69.0...v0.70.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/prometheus/common/blob/main/CHANGELOG.md">github.com/prometheus/common's
changelog</a>.</em></p>
<blockquote>
<h2>v0.70.0 / 2026-07-10</h2>
<h3>Enhancements</h3>
<ul>
<li>route: add support for the QUERY HTTP method. <a
href="https://redirect.github.com/prometheus/common/issues/932">#932</a></li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li>config: fix <code>TLSVersion.String()</code> printing a pointer
address instead of the numeric version for unknown TLS versions. <a
href="https://redirect.github.com/prometheus/common/issues/929">#929</a></li>
</ul>
<h3>Internal</h3>
<ul>
<li>expfmt: add <code>BenchmarkConvertMetricFamily</code> comparing the
Prometheus text and OpenMetrics 1.0 encoders. <a
href="https://redirect.github.com/prometheus/common/issues/943">#943</a></li>
<li>Update Go dependencies. <a
href="https://redirect.github.com/prometheus/common/issues/933">#933</a>
<a
href="https://redirect.github.com/prometheus/common/issues/934">#934</a></li>
<li>Synchronize common files from prometheus/prometheus. <a
href="https://redirect.github.com/prometheus/common/issues/923">#923</a>
<a
href="https://redirect.github.com/prometheus/common/issues/927">#927</a>
<a
href="https://redirect.github.com/prometheus/common/issues/930">#930</a>
<a
href="https://redirect.github.com/prometheus/common/issues/937">#937</a></li>
<li>Update GitHub Actions. <a
href="https://redirect.github.com/prometheus/common/issues/938">#938</a>
<a
href="https://redirect.github.com/prometheus/common/issues/939">#939</a>
<a
href="https://redirect.github.com/prometheus/common/issues/940">#940</a>
<a
href="https://redirect.github.com/prometheus/common/issues/941">#941</a>
<a
href="https://redirect.github.com/prometheus/common/issues/942">#942</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/prometheus/common/compare/v0.69.0...v0.70.0">https://github.com/prometheus/common/compare/v0.69.0...v0.70.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/prometheus/common/commit/5eff7a827920b6f175ea02b222f7c827a0fe80ad"><code>5eff7a8</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/common/issues/941">#941</a>
from prometheus/dependabot/github_actions/actions/che...</li>
<li><a
href="https://github.com/prometheus/common/commit/a23c5b344ad9200c0073133920fe60a9882c9d28"><code>a23c5b3</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/common/issues/939">#939</a>
from prometheus/dependabot/github_actions/ossf/scorec...</li>
<li><a
href="https://github.com/prometheus/common/commit/9e1eb871ced38b03648a38558ac3de66edeff2b5"><code>9e1eb87</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/common/issues/942">#942</a>
from prometheus/dependabot/github_actions/actions/upl...</li>
<li><a
href="https://github.com/prometheus/common/commit/ab2736d28a9fce77b0186e36b5d3318b74115298"><code>ab2736d</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/common/issues/940">#940</a>
from prometheus/dependabot/github_actions/actions/set...</li>
<li><a
href="https://github.com/prometheus/common/commit/e596873192a72855876b1c38cdb634bb73f5ba00"><code>e596873</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/common/issues/938">#938</a>
from prometheus/dependabot/github_actions/codeql-ac07...</li>
<li><a
href="https://github.com/prometheus/common/commit/97c066a87b2345f146b345141f0f14aaab7ad387"><code>97c066a</code></a>
Add BenchmarkConvertMetricFamily comparing Prometheus text and
OpenMetrics 1....</li>
<li><a
href="https://github.com/prometheus/common/commit/62e9d0f61d355b574225f66628a5f94be2bc1c29"><code>62e9d0f</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/common/issues/932">#932</a>
from roidelapluie/roidelapluie/route-query</li>
<li><a
href="https://github.com/prometheus/common/commit/6c312397a5da723c995ee9c16263f252c1d6b4a1"><code>6c31239</code></a>
build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1</li>
<li><a
href="https://github.com/prometheus/common/commit/755e9d686dec00400191cc8483872831aff1b9cd"><code>755e9d6</code></a>
build(deps): bump actions/checkout from 3.1.0 to 7.0.0</li>
<li><a
href="https://github.com/prometheus/common/commit/556d7402ea9a80cab60297e4dc98149b5410e24f"><code>556d740</code></a>
build(deps): bump actions/setup-go from 6.2.0 to 6.5.0</li>
<li>Additional commits viewable in <a
href="https://github.com/prometheus/common/compare/v0.69.0...v0.70.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/common&package-manager=go_modules&previous-version=0.69.0&new-version=0.70.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the docusaurus group in /site with 7 updates:

| Package | From | To |
| --- | --- | --- |
|
[@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus)
| `3.10.1` | `3.10.2` |
|
[@docusaurus/plugin-client-redirects](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects)
| `3.10.1` | `3.10.2` |
|
[@docusaurus/plugin-ideal-image](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image)
| `3.10.1` | `3.10.2` |
|
[@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic)
| `3.10.1` | `3.10.2` |
|
[@docusaurus/module-type-aliases](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases)
| `3.10.1` | `3.10.2` |
|
[@docusaurus/tsconfig](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig)
| `3.10.1` | `3.10.2` |
|
[@docusaurus/types](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-types)
| `3.10.1` | `3.10.2` |

Updates `@docusaurus/core` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/core's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/core's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li><a
href="https://github.com/facebook/docusaurus/commit/2f5389d1fa4c1801d7bfe6ec13e9317cec449935"><code>2f5389d</code></a>
chore: cherry-pick commits for v3.10.2 patch release (<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12265">#12265</a>)</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus">compare
view</a></li>
</ul>
</details>
<br />

Updates `@docusaurus/plugin-client-redirects` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/plugin-client-redirects's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/plugin-client-redirects's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-plugin-client-redirects">compare
view</a></li>
</ul>
</details>
<br />

Updates `@docusaurus/plugin-ideal-image` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/plugin-ideal-image's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/plugin-ideal-image's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-plugin-ideal-image">compare
view</a></li>
</ul>
</details>
<br />

Updates `@docusaurus/preset-classic` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/preset-classic's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/preset-classic's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-preset-classic">compare
view</a></li>
</ul>
</details>
<br />

Updates `@docusaurus/module-type-aliases` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/module-type-aliases's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/module-type-aliases's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-module-type-aliases">compare
view</a></li>
</ul>
</details>
<br />

Updates `@docusaurus/tsconfig` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/tsconfig's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@​docusaurus/tsconfig's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport and cherry-pick commits from main for v3.10.2 patch
release:</p>
<ul>
<li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz
playground <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12055">#12055</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li>
<li>[fix(core): use locale url in site config <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12054">#12054</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li>
<li>[fix(theme-classic): remove redundant sidebar label titles <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/11966">#11966</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li>
<li>[fix(mdx-loader): avoid transforming dotted directory links into
asset… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/11944">#11944</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li>
<li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12065">#12065</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li>
<li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12100">#12100</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li>
<li>[fix(gtag.js, faster): Fix StackBlitz, vendor
<code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12080">#12080</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li>
<li>[fix(create-docusaurus): init template README should use npm
commands by default <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12138">#12138</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li>
<li>[fix(cli): <code>docusaurus serve</code> should pass
<code>--host</code> to <code>server.listen()</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12127">#12127</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li>
<li>[fix(core): bump detect-port to v2.1, fix pnpm
<code>trustPolicy</code> downgrade issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12012">#12012</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li>
<li>[fix(i18n): complete Spanish translations for theme-common and
theme-l… <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12180">#12180</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li>
<li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12181">#12181</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li>
<li>[fix(core): fix BaseUrlIssueBanner little security issue <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12260">#12260</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li>
<li>[fix(core): accept boolean attributes in headTags config validation
<a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12238">#12238</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li>
<li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12212">#12212</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li>
<li>[fix(utils): preserve author names containing commas in git log
parsing <a
href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12069">#12069</a>](<a
href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a>
v3.10.2</li>
<li>See full diff in <a
href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-tsconfig">compare
view</a></li>
</ul>
</details>
<br />

Updates `@docusaurus/types` from 3.10.1 to 3.10.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/docusaurus/releases">@​docusaurus/types's
releases</a>.</em></p>
<blockquote>
<h2>3.10.2 (2026-07-10)</h2>
<p>Backport an…
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.5.0
to 7.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/763">actions/setup-go#763</a></li>
<li>chore(deps): bump <code>@​actions/cache</code> to 6.2.0 by <a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/771">actions/setup-go#771</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/771">actions/setup-go#771</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v6...v7.0.0">https://github.com/actions/setup-go/compare/v6...v7.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-go/commit/b7ad1dad31e06c5925ef5d2fc7ad053ef454303e"><code>b7ad1da</code></a>
chore(deps): bump <code>@​actions/cache</code> to 6.2.0 (<a
href="https://redirect.github.com/actions/setup-go/issues/771">#771</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/0778a10ce47b5d450cf60fb94fafad4330008a35"><code>0778a10</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-go/issues/763">#763</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-go/compare/924ae3a1cded613372ab5595356fb5720e22ba16...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-go&package-manager=github_actions&previous-version=6.5.0&new-version=7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…microsoft#2549)

Bumps the windows-base group with 2 updates in the /controller
directory: windows/servercore and windows/nanoserver.
Bumps the windows-base group with 1 update in the /hack/tools/kapinger
directory: windows/servercore.
Bumps the windows-base group with 1 update in the /operator directory:
windows/nanoserver.

Updates `windows/servercore` from `a23b350` to `b841bb0`

Updates `windows/nanoserver` from `7644d94` to `93efcae`

Updates `windows/servercore` from `a23b350` to `b841bb0`

Updates `windows/nanoserver` from `7644d94` to `93efcae`


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… the actions-patch group (microsoft#2550)

Bumps the actions-patch group with 1 update:
[github/codeql-action/upload-sarif](https://github.com/github/codeql-action).

Updates `github/codeql-action/upload-sarif` from 4.37.0 to 4.37.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/upload-sarif's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.1</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/upload-sarif's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.37.1 - 16 Jul 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
<h2>4.37.0 - 08 Jul 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
<h2>4.36.3 - 01 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.2 - 04 Jun 2026</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li>
</ul>
<h2>4.36.1 - 02 Jun 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.0 - 22 May 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li>
</ul>
<h2>4.35.5 - 15 May 2026</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li>
</ul>
<h2>4.35.4 - 07 May 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li>
</ul>
<h2>4.35.3 - 01 May 2026</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/7188fc363630916deb702c7fdcf4e481b751f97a"><code>7188fc3</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4020">#4020</a>
from github/update-v4.37.1-9e7c07009</li>
<li><a
href="https://github.com/github/codeql-action/commit/c8b5f69be686908c3dfd844428137d56fe80c936"><code>c8b5f69</code></a>
Update changelog for v4.37.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/9e7c070092090e89e8b3d62f977d4456e0732cd7"><code>9e7c070</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4014">#4014</a>
from github/mbg/explicit-remote-prefix</li>
<li><a
href="https://github.com/github/codeql-action/commit/3492b7e9ab96e28b1d8b971345d30e929c6f8fee"><code>3492b7e</code></a>
Change <code>REMOTE_PATH_PREFIX</code> to <code>remote=</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/3654baa924bc6456db54002581cb7c1c877548c4"><code>3654baa</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/explicit-remote-prefix</li>
<li><a
href="https://github.com/github/codeql-action/commit/2d682ac05f1b3588aaff3814826bede39b9ba6bb"><code>2d682ac</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4017">#4017</a>
from github/dependabot/github_actions/dot-github/wor...</li>
<li><a
href="https://github.com/github/codeql-action/commit/23f6a50753a88efd9b7ae8687b29f6bdb65f6250"><code>23f6a50</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4009">#4009</a>
from github/mbg/action-state/additions</li>
<li><a
href="https://github.com/github/codeql-action/commit/1ee3c75d1988ab8621f01ebb165115c38d56df91"><code>1ee3c75</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4018">#4018</a>
from github/dependabot/github_actions/dot-github/wor...</li>
<li><a
href="https://github.com/github/codeql-action/commit/e053684dc500899b0b5520edc8549ac0f1ed730b"><code>e053684</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4015">#4015</a>
from github/dependabot/npm_and_yarn/npm-minor-fd2e83...</li>
<li><a
href="https://github.com/github/codeql-action/commit/6803c5671d2f87a83ed96e151c441b1cb3bdc66a"><code>6803c56</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4019">#4019</a>
from github/update-bundle/codeql-bundle-v2.26.1</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action/upload-sarif&package-manager=github_actions&previous-version=4.37.0&new-version=4.37.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…te (microsoft#2555)

Bumps the azurelinux-base group with 1 update in the /cli directory:
azurelinux/base/core.
Bumps the azurelinux-base group with 1 update in the /controller
directory: azurelinux/base/core.
Bumps the azurelinux-base group with 1 update in the /shell directory:
azurelinux/base/core.

Updates `azurelinux/base/core` from 3.0.20260706 to 3.0.20260711

Updates `azurelinux/base/core` from 3.0.20260706 to 3.0.20260711

Updates `azurelinux/base/core` from 3.0.20260706 to 3.0.20260711


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the aws-sdk group with 3 updates:
[github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2),
[github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2)
and
[github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2).

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.29 to 1.32.30
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2704503be74c5f1c49b2fb5d1c9cb46b5fabcdb2"><code>2704503</code></a>
Release 2026-07-13</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2475fc6b28465173bdef88cff5e0bbbdb6f1b24d"><code>2475fc6</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/89ce46e6351004d830a5481d1e639fac3b6586c3"><code>89ce46e</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/97a7b5555b92bd932b977998bbeb205f2984a1c1"><code>97a7b55</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/472756aa53e9edf3369d69bb3cdd66b3908f984c"><code>472756a</code></a>
add response snapshot tests for new wave 1 (partial cbor) (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3471">#3471</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3133b1d537ced4144103b33460fe73c7082a62bf"><code>3133b1d</code></a>
Release 2026-07-10</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2d7d0f831cdfb369f7698de45c0d6f8f74f6ca7c"><code>2d7d0f8</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/cdc7fe361da37345462ad00d03273464fd0b7220"><code>cdc7fe3</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d41266e1451258cb008c87cd1a7d807e079f188a"><code>d41266e</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d7ac1fcd9fbf2c1a288b148c2292db01c8a3cd22"><code>d7ac1fc</code></a>
Release 2026-07-09</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.29...config/v1.32.30">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.28 to
1.19.29
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2704503be74c5f1c49b2fb5d1c9cb46b5fabcdb2"><code>2704503</code></a>
Release 2026-07-13</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2475fc6b28465173bdef88cff5e0bbbdb6f1b24d"><code>2475fc6</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/89ce46e6351004d830a5481d1e639fac3b6586c3"><code>89ce46e</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/97a7b5555b92bd932b977998bbeb205f2984a1c1"><code>97a7b55</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/472756aa53e9edf3369d69bb3cdd66b3908f984c"><code>472756a</code></a>
add response snapshot tests for new wave 1 (partial cbor) (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3471">#3471</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3133b1d537ced4144103b33460fe73c7082a62bf"><code>3133b1d</code></a>
Release 2026-07-10</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2d7d0f831cdfb369f7698de45c0d6f8f74f6ca7c"><code>2d7d0f8</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/cdc7fe361da37345462ad00d03273464fd0b7220"><code>cdc7fe3</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d41266e1451258cb008c87cd1a7d807e079f188a"><code>d41266e</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d7ac1fcd9fbf2c1a288b148c2292db01c8a3cd22"><code>d7ac1fc</code></a>
Release 2026-07-09</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.28...credentials/v1.19.29">compare
view</a></li>
</ul>
</details>
<br />

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.105.0 to
1.105.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2704503be74c5f1c49b2fb5d1c9cb46b5fabcdb2"><code>2704503</code></a>
Release 2026-07-13</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2475fc6b28465173bdef88cff5e0bbbdb6f1b24d"><code>2475fc6</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/89ce46e6351004d830a5481d1e639fac3b6586c3"><code>89ce46e</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/97a7b5555b92bd932b977998bbeb205f2984a1c1"><code>97a7b55</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/472756aa53e9edf3369d69bb3cdd66b3908f984c"><code>472756a</code></a>
add response snapshot tests for new wave 1 (partial cbor) (<a
href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3471">#3471</a>)</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/3133b1d537ced4144103b33460fe73c7082a62bf"><code>3133b1d</code></a>
Release 2026-07-10</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/2d7d0f831cdfb369f7698de45c0d6f8f74f6ca7c"><code>2d7d0f8</code></a>
Regenerated Clients</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/cdc7fe361da37345462ad00d03273464fd0b7220"><code>cdc7fe3</code></a>
Update endpoints model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d41266e1451258cb008c87cd1a7d807e079f188a"><code>d41266e</code></a>
Update API model</li>
<li><a
href="https://github.com/aws/aws-sdk-go-v2/commit/d7ac1fcd9fbf2c1a288b148c2292db01c8a3cd22"><code>d7ac1fc</code></a>
Release 2026-07-09</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.105.0...service/s3/v1.105.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…to 0.21.4 in the azure-sdk group (microsoft#2557)

Bumps the azure-sdk group with 1 update:
[sigs.k8s.io/cloud-provider-azure/pkg/azclient](https://github.com/kubernetes-sigs/cloud-provider-azure).

Updates `sigs.k8s.io/cloud-provider-azure/pkg/azclient` from 0.21.3 to
0.21.4
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/d511ccda14efa524956d33c53335fb9361673f9a"><code>d511ccd</code></a>
build(deps): bump the all group in /pkg/azclient with 3 updates (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10673">#10673</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/1a072ca8d4856253e328d7a56f7907ad30dd8539"><code>1a072ca</code></a>
docs: make dependabot unblocker failure list pluggable (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10649">#10649</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/da71e3b50f850da790556e1022d287fad567304b"><code>da71e3b</code></a>
build(deps): bump golang.org/x/crypto in /kubetest2-aks (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10669">#10669</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/98fbca797405dade91f7cc86e8e4d17f328c1e92"><code>98fbca7</code></a>
build(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 in the all
group (#...</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/dc94250cb3e8f5b25b2c955b8279f367c2b30fd3"><code>dc94250</code></a>
build(deps): bump the all group with 3 updates (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10657">#10657</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/b54f47813c93d4486954faee6e14d93c953da24b"><code>b54f478</code></a>
build(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10652">#10652</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/4381c486d17225c53c08a460bcc1ba2fabedd2f1"><code>4381c48</code></a>
build(deps): bump golang.org/x/net in /health-probe-proxy (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10634">#10634</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/21e8d3b9fb59f4e474d46c41fc3640846dfa3070"><code>21e8d3b</code></a>
Add servicegateway package skeleton with OWNERS (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10647">#10647</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/2eb70f842d01bd10b28d77f3c1d5cb685a4b4add"><code>2eb70f8</code></a>
build(deps): bump k8s.io/component-base (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10399">#10399</a>)</li>
<li><a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/e205c9062de80f9783572a25ba39d964b03a3605"><code>e205c90</code></a>
Add toleration on VM shown up delay in ARM/ARG for new nodes (<a
href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10605">#10605</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/kubernetes-sigs/cloud-provider-azure/compare/pkg/azclient/v0.21.3...pkg/azclient/v0.21.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigs.k8s.io/cloud-provider-azure/pkg/azclient&package-manager=go_modules&previous-version=0.21.3&new-version=0.21.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…group (microsoft#2558)

Bumps the actions-patch group with 1 update:
[actions/checkout](https://github.com/actions/checkout).

Updates `actions/checkout` from 7.0.0 to 7.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>skip running unsafe pr check if input is default by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li>
<li>trim only ascii whitespace for branch by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li>
<li>escape values passed to --unset by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li>
<li>Various dependency updates</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v7...v7.0.1">https://github.com/actions/checkout/compare/v7...v7.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v7.0.1</h2>
<ul>
<li>Skip running unsafe pr check if input is default by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li>
<li>Trim only ascii whitespace for branch by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li>
<li>Escape values passed to --unset by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li>
<li>Various dependency updates</li>
</ul>
<h2>v7.0.0</h2>
<ul>
<li>Block checking out fork PR for pull_request_target and workflow_run
by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li>
<li>Various dependency updates</li>
</ul>
<h2>v6.0.3</h2>
<ul>
<li>Fix checkout init for SHA-256 repositories by <a
href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li>
<li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a
href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li>
</ul>
<h2>v6.0.2</h2>
<ul>
<li>Fix tag handling: preserve annotations and explicit fetch-tags by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li>
</ul>
<h2>v6.0.1</h2>
<ul>
<li>Add worktree support for persist-credentials includeIf by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li>
</ul>
<h2>v6.0.0</h2>
<ul>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
</ul>
<h2>v5.0.1</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<h2>v5.0.0</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
</ul>
<h2>v4.3.1</h2>
<ul>
<li>Port v6 cleanup to v4 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li>
</ul>
<h2>v4.3.0</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1"><code>3d3c42e</code></a>
prep v7.0.1 release (<a
href="https://redirect.github.com/actions/checkout/issues/2531">#2531</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07"><code>2880268</code></a>
escape values passed to --unset (<a
href="https://redirect.github.com/actions/checkout/issues/2530">#2530</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1"><code>12cd223</code></a>
trim only ascii whitespace for branch (<a
href="https://redirect.github.com/actions/checkout/issues/2521">#2521</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541"><code>62661c4</code></a>
skip running unsafe pr check if input is default (<a
href="https://redirect.github.com/actions/checkout/issues/2518">#2518</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f"><code>e8d4307</code></a>
Bump the minor-actions-dependencies group with 2 updates (<a
href="https://redirect.github.com/actions/checkout/issues/2499">#2499</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87"><code>631c942</code></a>
eslint 9 (<a
href="https://redirect.github.com/actions/checkout/issues/2474">#2474</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e"><code>4f1f4ae</code></a>
Bump actions/upload-artifact from 4 to 7 (<a
href="https://redirect.github.com/actions/checkout/issues/2476">#2476</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92"><code>ba09753</code></a>
Bump actions/checkout from 6 to 7 (<a
href="https://redirect.github.com/actions/checkout/issues/2488">#2488</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22"><code>b9e0990</code></a>
Bump docker/login-action from 3.3.0 to 4.2.0 (<a
href="https://redirect.github.com/actions/checkout/issues/2479">#2479</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2"><code>e8cb398</code></a>
Bump docker/build-push-action from 6.5.0 to 7.2.0 (<a
href="https://redirect.github.com/actions/checkout/issues/2478">#2478</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=7.0.0&new-version=7.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.4 to
1.10.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md">shell-quote's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0">v1.10.0</a>
- 2026-07-10</h2>
<h3>Merged</h3>
<ul>
<li>[New] <code>parse</code>: add opt-in <code>splitUnquoted</code>
option for shell field-splitting of unquoted expansions <a
href="https://redirect.github.com/ljharb/shell-quote/pull/1"><code>[#1](https://github.com/ljharb/shell-quote/issues/1)</code></a></li>
</ul>
<h3>Commits</h3>
<ul>
<li>[Fix] <code>parse</code>: match nested <code>${...}</code> braces so
nested parameter expansion is consumed as one substitution <a
href="https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c"><code>c0842c8</code></a></li>
<li>[Tests] <code>parse</code>: pin single-quote literalness and
unmatched-quote handling <a
href="https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62"><code>a0d03e3</code></a></li>
<li>[readme] remove the space in js code fences so evalmd evaluates them
<a
href="https://github.com/ljharb/shell-quote/commit/2116fa36aeea77fe8d561b0db46b1f9b26b8cf1b"><code>2116fa3</code></a></li>
<li>[Tests] <code>quote</code>: pin conservative escaping of
<code>=</code>, <code>@</code>, <code>^</code>, <code>,</code>,
<code>:</code>, <code>!</code> (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e"><code>1c36f3f</code></a></li>
<li>[readme] document that <code>quote</code> outputs POSIX quoting, not
<code>cmd.exe</code>/PowerShell <a
href="https://github.com/ljharb/shell-quote/commit/100e96e0ffadcca97d63dda15651c70b9f83507c"><code>100e96e</code></a></li>
<li>[readme] document <code>parse</code>'s supported parameter-expansion
subset <a
href="https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb"><code>e1c75cd</code></a></li>
<li>[Fix] <code>parse</code>: a backslash inside single quotes must not
escape the closing quote <a
href="https://github.com/ljharb/shell-quote/commit/5d460a332b54b83153297fe7d1964330b28fa491"><code>5d460a3</code></a></li>
<li>[readme] fix stale example outputs <a
href="https://github.com/ljharb/shell-quote/commit/2de86f5d44f44d3ac9df36413d8a05f3534cdec6"><code>2de86f5</code></a></li>
<li>[Tests] <code>quote</code>: pin that a backslash with whitespace is
not doubled in single quotes (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/14">#14</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71"><code>190e236</code></a></li>
<li>[readme] <code>quote</code>: use output verbatim; do not re-quote it
(<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5"><code>1b36468</code></a></li>
<li>[Refactor] <code>parse</code>: fix swapped
<code>SINGLE_QUOTE</code>/<code>DOUBLE_QUOTE</code> variable names <a
href="https://github.com/ljharb/shell-quote/commit/801af5c935b27d6dcda63b3975d5e92a7b6f887f"><code>801af5c</code></a></li>
<li>[types] fix an error TS v6 ignores but v7 fails on <a
href="https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba"><code>59bbf8b</code></a></li>
<li>[Dev Deps] update <code>@arethetypeswrong/cli</code>,
<code>evalmd</code> <a
href="https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc"><code>a04d475</code></a></li>
<li>[Dev Deps] update <code>@arethetypeswrong/ci</code>,
<code>eslint</code> <a
href="https://github.com/ljharb/shell-quote/commit/d390f9a92b97a04b1f799298634e90dc581021e6"><code>d390f9a</code></a></li>
<li>[Tests] <code>quote</code>: the tilde test escapes every
<code>~</code>, not just a leading one (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/9">#9</a>)
<a
href="https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c"><code>617d119</code></a></li>
</ul>
<h2><a
href="https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.9.0">v1.9.0</a>
- 2026-06-24</h2>
<h3>Commits</h3>
<ul>
<li>[New] add types <a
href="https://github.com/ljharb/shell-quote/commit/dca6e21a02df4cc1a83ed1b5baa4d82df134170a"><code>dca6e21</code></a></li>
<li>[Dev Deps] update <code>eslint</code> <a
href="https://github.com/ljharb/shell-quote/commit/9aa9e8f60991f8c4053a29e476795d891ff851ad"><code>9aa9e8f</code></a></li>
<li>[Fix] <code>parse</code>: finalize tokens in linear time
(GHSA-395f-4hp3-45gv) <a
href="https://github.com/ljharb/shell-quote/commit/7ff5488599d01c323514f02f5efb74088dd134ec"><code>7ff5488</code></a></li>
<li>[actions] update workflows <a
href="https://github.com/ljharb/shell-quote/commit/75e849741ffaf2d3aa53ae0e18ef6bf9929ef478"><code>75e8497</code></a></li>
<li>[actions] Windows + node 4/6/7: pin eslint to 9 before install,
since npm 2/3 cannot stage eslint 10<code>@types/esrecurse</code> <a
href="https://github.com/ljharb/shell-quote/commit/3fb739de44b81c69431947d54fbfc18998dd6d72"><code>3fb739d</code></a></li>
<li>[actions] retry <code>npm install</code> on Windows to survive npm
2/3 staging-rename flake <a
href="https://github.com/ljharb/shell-quote/commit/abe0163293c82963fa8a16cfaa87181846d5aced"><code>abe0163</code></a></li>
<li>[actions] Windows + node 5/7: install deps with a modern node <a
href="https://github.com/ljharb/shell-quote/commit/b4bafa2e7e58d53d9839b1c24976f61e54b43326"><code>b4bafa2</code></a></li>
<li>[Fix] <code>quote</code>: escape leading <code>~</code> to prevent
shell tilde-expansion <a
href="https://github.com/ljharb/shell-quote/commit/7a76c1a12d8461c2234a1c655b943cee84cbff91"><code>7a76c1a</code></a></li>
<li>[Dev Deps] update <code>auto-changelog</code>, <code>tape</code> <a
href="https://github.com/ljharb/shell-quote/commit/7184b4458b65c17b931e126d8cb5f586c6717dc8"><code>7184b44</code></a></li>
<li>[Dev Deps] apparently <code>jackspeak</code> is no longer in the
graph <a
href="https://github.com/ljharb/shell-quote/commit/9ba368a4057b9f498b0fef23b5b15543ef81b98c"><code>9ba368a</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ljharb/shell-quote/commit/64988d9a0e73a2ae710488952e3614958ef289d4"><code>64988d9</code></a>
v1.10.0</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c"><code>617d119</code></a>
[Tests] <code>quote</code>: the tilde test escapes every <code>~</code>,
not just a leading one (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/9">#9</a>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba"><code>59bbf8b</code></a>
[types] fix an error TS v6 ignores but v7 fails on</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71"><code>190e236</code></a>
[Tests] <code>quote</code>: pin that a backslash with whitespace is not
doubled in singl...</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc"><code>a04d475</code></a>
[Dev Deps] update <code>@arethetypeswrong/cli</code>,
<code>evalmd</code></li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/b9545b39f4de17aa169410823c98acf58387e474"><code>b9545b3</code></a>
[New] <code>parse</code>: add opt-in <code>splitUnquoted</code> option
for shell field-splitting of...</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5"><code>1b36468</code></a>
[readme] <code>quote</code>: use output verbatim; do not re-quote it (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e"><code>1c36f3f</code></a>
[Tests] <code>quote</code>: pin conservative escaping of <code>=</code>,
<code>@</code>, <code>^</code>, <code>,</code>, <code>:</code>,
<code>!</code> (<a
href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb"><code>e1c75cd</code></a>
[readme] document <code>parse</code>'s supported parameter-expansion
subset</li>
<li><a
href="https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c"><code>c0842c8</code></a>
[Fix] <code>parse</code>: match nested <code>${...}</code> braces so
nested parameter expansion is ...</li>
<li>Additional commits viewable in <a
href="https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.10.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=shell-quote&package-manager=npm_and_yarn&previous-version=1.8.4&new-version=1.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/retina/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [body-parser](https://github.com/expressjs/body-parser) from
1.20.5 to 1.20.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/body-parser/releases">body-parser's
releases</a>.</em></p>
<blockquote>
<h2>1.20.6</h2>
<h2>Important: Security</h2>
<ul>
<li>Security fix for <a
href="https://www.cve.org/CVERecord?id=CVE-2025-13466">CVE-2026-12590</a>
(<a
href="https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6">GHSA-v422-hmwv-36x6</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix: improve limit option validation by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/741">expressjs/body-parser#741</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6">https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/body-parser/blob/master/HISTORY.md">body-parser's
changelog</a>.</em></p>
<blockquote>
<h1>1.20.6 / 2026-07-09</h1>
<ul>
<li>Security fix for <a
href="https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6">GHSA-v422-hmwv-36x6</a></li>
<li>fix: improve <code>limit</code> option validation (<a
href="https://redirect.github.com/expressjs/body-parser/issues/698">#698</a>)
<ul>
<li>Invalid <code>limit</code> values (e.g. unparseable strings or
<code>NaN</code>) now throw instead of being silently ignored, which
previously disabled size limit enforcement</li>
<li><code>null</code> and <code>undefined</code> fall back to the
default 100kb limit</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43"><code>5cc4fb8</code></a>
1.20.6 (<a
href="https://redirect.github.com/expressjs/body-parser/issues/746">#746</a>)</li>
<li><a
href="https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac"><code>3492672</code></a>
fix: improve limit option validation (<a
href="https://redirect.github.com/expressjs/body-parser/issues/741">#741</a>)</li>
<li>See full diff in <a
href="https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=body-parser&package-manager=npm_and_yarn&previous-version=1.20.5&new-version=1.20.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/retina/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from
1.82.0 to 1.82.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.82.1</h2>
<h1>Security</h1>
<ul>
<li>server: Stop reading from the connection when flooded by HTTP/2
frames. The default value for this limit is 100 frames, excluding DATA
and HEADERS, and may be changed by setting environment variable
<code>GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT</code>.</li>
<li>xds/rbac: Support <code>Metadata</code> and
<code>RequestedServerName</code> permissions matcher fields. If present
in a DENY rule, previously these would be ignored and fail-open.</li>
<li>xds/rbac: Fix panic when parsing unsupported fields in
<code>NotRule</code>/<code>NotId</code> permissions.</li>
<li>xds/rbac: Support the deprecated <code>source_ip</code> principal
identifier by treating it as equivalent to
<code>direct_remote_ip</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-go/commit/ebd8f06a09426fbece97157c95c3917abff28f4e"><code>ebd8f06</code></a>
Change version to 1.82.1 (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9238">#9238</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/4ea465d4ab98013f72a142fe0fc89c19770b2935"><code>4ea465d</code></a>
Cherry-pick commits (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9236">#9236</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/9494a2cf32a0ec9d35420af401445ef3c9f66f05"><code>9494a2c</code></a>
Change version to 1.82.1-dev (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9171">#9171</a>)</li>
<li>See full diff in <a
href="https://github.com/grpc/grpc-go/compare/v1.82.0...v1.82.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.82.0&new-version=1.82.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/retina/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [svgo](https://github.com/svg/svgo) from 3.3.3 to 3.3.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/svg/svgo/releases">svgo's
releases</a>.</em></p>
<blockquote>
<h2>v3.3.4</h2>
<h2>What's Changed</h2>
<h3>Security</h3>
<ul>
<li><a
href="https://svgo.dev/docs/plugins/removeScripts/">removeScriptElement</a>,
remove JavaScript URIs case-insensitively and make
<code>&lt;script&gt;</code> handling namespace aware. By <a
href="https://github.com/SethFalco"><code>@​SethFalco</code></a></li>
</ul>
<h2>Support</h2>
<p>SVGO v3 is not officially supported, please consider upgrading to
SVGO v4 instead. We've backported this fix as there are security
implications, but there is no commitment to do this for more complex
changes in future.</p>
<p>Consider reading our <a
href="https://svgo.dev/docs/migrations/migration-from-v3-to-v4/">Migration
Guide from v3 to v4</a> which should ease the process.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/svg/svgo/commit/72a23886b4698b27624b936f3a15a80afd36d75f"><code>72a2388</code></a>
Merge commit from fork</li>
<li>See full diff in <a
href="https://github.com/svg/svgo/compare/v3.3.3...v3.3.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=svgo&package-manager=npm_and_yarn&previous-version=3.3.3&new-version=3.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/retina/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to
3.1.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/fast-uri/releases">fast-uri's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.4</h2>
<h2>⚠️ Security Release</h2>
<p>Fix for <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx">https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx</a></p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4">https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4</a></p>
<h2>v3.1.3</h2>
<h2>⚠️ Security Release</h2>
<ul>
<li>Fixes: <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6">https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3">https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fastify/fast-uri/commit/6aeece669e4166b2446a89f17c07a3b15dfb7ed4"><code>6aeece6</code></a>
Bumped v3.1.4</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/2d50fbabc80e4d0884fe0f6a98fe118ce6faa353"><code>2d50fba</code></a>
fix: reject literal backslash in URI authority</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/0549fe35b0d482233f3be2816439f3ec803603fa"><code>0549fe3</code></a>
Bumped v3.1.3</li>
<li><a
href="https://github.com/fastify/fast-uri/commit/2a6d357a18a68e6d812824379fd3388a1ae50d05"><code>2a6d357</code></a>
Merge commit from fork</li>
<li>See full diff in <a
href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fast-uri&package-manager=npm_and_yarn&previous-version=3.1.2&new-version=3.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/retina/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@lakshk98
Laksh (lakshk98) marked this pull request as draft August 7, 2026 12:42
@microsoft-github-policy-service

Copy link
Copy Markdown

Laksh (@lakshk98) please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.

@microsoft-github-policy-service agree [company="{your company}"]

Options:

  • (default - no company specified) I have sole ownership of intellectual property rights to my Submissions and I am not making Submissions in the course of work for my employer.
@microsoft-github-policy-service agree
  • (when company given) I am making Submissions in the course of work for my employer (or my employer has intellectual property rights in my Submissions by contract or applicable law). I have permission from my employer to make Submissions and enter into this Agreement on behalf of my employer. By signing below, the defined term “You” includes me and my employer.
@microsoft-github-policy-service agree company="Microsoft"
Contributor License Agreement

Contribution License Agreement

This Contribution License Agreement (“Agreement”) is agreed to by the party signing below (“You”),
and conveys certain license rights to Microsoft Corporation and its affiliates (“Microsoft”) for Your
contributions to Microsoft open source projects. This Agreement is effective as of the latest signature
date below.

  1. Definitions.
    “Code” means the computer software code, whether in human-readable or machine-executable form,
    that is delivered by You to Microsoft under this Agreement.
    “Project” means any of the projects owned or managed by Microsoft and offered under a license
    approved by the Open Source Initiative (www.opensource.org).
    “Submit” is the act of uploading, submitting, transmitting, or distributing code or other content to any
    Project, including but not limited to communication on electronic mailing lists, source code control
    systems, and issue tracking systems that are managed by, or on behalf of, the Project for the purpose of
    discussing and improving that Project, but excluding communication that is conspicuously marked or
    otherwise designated in writing by You as “Not a Submission.”
    “Submission” means the Code and any other copyrightable material Submitted by You, including any
    associated comments and documentation.
  2. Your Submission. You must agree to the terms of this Agreement before making a Submission to any
    Project. This Agreement covers any and all Submissions that You, now or in the future (except as
    described in Section 4 below), Submit to any Project.
  3. Originality of Work. You represent that each of Your Submissions is entirely Your original work.
    Should You wish to Submit materials that are not Your original work, You may Submit them separately
    to the Project if You (a) retain all copyright and license information that was in the materials as You
    received them, (b) in the description accompanying Your Submission, include the phrase “Submission
    containing materials of a third party:” followed by the names of the third party and any licenses or other
    restrictions of which You are aware, and (c) follow any other instructions in the Project’s written
    guidelines concerning Submissions.
  4. Your Employer. References to “employer” in this Agreement include Your employer or anyone else
    for whom You are acting in making Your Submission, e.g. as a contractor, vendor, or agent. If Your
    Submission is made in the course of Your work for an employer or Your employer has intellectual
    property rights in Your Submission by contract or applicable law, You must secure permission from Your
    employer to make the Submission before signing this Agreement. In that case, the term “You” in this
    Agreement will refer to You and the employer collectively. If You change employers in the future and
    desire to Submit additional Submissions for the new employer, then You agree to sign a new Agreement
    and secure permission from the new employer before Submitting those Submissions.
  5. Licenses.
  • Copyright License. You grant Microsoft, and those who receive the Submission directly or
    indirectly from Microsoft, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license in the
    Submission to reproduce, prepare derivative works of, publicly display, publicly perform, and distribute
    the Submission and such derivative works, and to sublicense any or all of the foregoing rights to third
    parties.
  • Patent License. You grant Microsoft, and those who receive the Submission directly or
    indirectly from Microsoft, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license under
    Your patent claims that are necessarily infringed by the Submission or the combination of the
    Submission with the Project to which it was Submitted to make, have made, use, offer to sell, sell and
    import or otherwise dispose of the Submission alone or with the Project.
  • Other Rights Reserved. Each party reserves all rights not expressly granted in this Agreement.
    No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are
    granted by implication, exhaustion, estoppel or otherwise.
  1. Representations and Warranties. You represent that You are legally entitled to grant the above
    licenses. You represent that each of Your Submissions is entirely Your original work (except as You may
    have disclosed under Section 3). You represent that You have secured permission from Your employer to
    make the Submission in cases where Your Submission is made in the course of Your work for Your
    employer or Your employer has intellectual property rights in Your Submission by contract or applicable
    law. If You are signing this Agreement on behalf of Your employer, You represent and warrant that You
    have the necessary authority to bind the listed employer to the obligations contained in this Agreement.
    You are not expected to provide support for Your Submission, unless You choose to do so. UNLESS
    REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING, AND EXCEPT FOR THE WARRANTIES
    EXPRESSLY STATED IN SECTIONS 3, 4, AND 6, THE SUBMISSION PROVIDED UNDER THIS AGREEMENT IS
    PROVIDED WITHOUT WARRANTY OF ANY KIND, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY OF
    NONINFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.
  2. Notice to Microsoft. You agree to notify Microsoft in writing of any facts or circumstances of which
    You later become aware that would make Your representations in this Agreement inaccurate in any
    respect.
  3. Information about Submissions. You agree that contributions to Projects and information about
    contributions may be maintained indefinitely and disclosed publicly, including Your name and other
    information that You submit with Your Submission.
  4. Governing Law/Jurisdiction. This Agreement is governed by the laws of the State of Washington, and
    the parties consent to exclusive jurisdiction and venue in the federal courts sitting in King County,
    Washington, unless no federal subject matter jurisdiction exists, in which case the parties consent to
    exclusive jurisdiction and venue in the Superior Court of King County, Washington. The parties waive all
    defenses of lack of personal jurisdiction and forum non-conveniens.
  5. Entire Agreement/Assignment. This Agreement is the entire agreement between the parties, and
    supersedes any and all prior agreements, understandings or communications, written or oral, between
    the parties relating to the subject matter hereof. This Agreement may be assigned by Microsoft.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.