Merge main into dev/v0.33-windows - #2568
Draft
Laksh (lakshk98) wants to merge 569 commits into
Draft
Conversation
Laksh (lakshk98)
marked this pull request as ready for review
July 22, 2026 23:31
Laksh (lakshk98)
requested review from
Jacques I Massa (jimassa) and
Mathew Merrick (matmerr)
July 22, 2026 23:31
Laksh (lakshk98)
force-pushed
the
laksh/merge-main
branch
4 times, most recently
from
July 23, 2026 05:53
509f5b3 to
6622e89
Compare
Laksh (lakshk98)
force-pushed
the
laksh/merge-main
branch
from
August 4, 2026 16:47
6622e89 to
ed0dea3
Compare
…t#2211) Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 7.0.0 to 7.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/goreleaser/goreleaser-action/releases">goreleaser/goreleaser-action's releases</a>.</em></p> <blockquote> <h2>v7.1.0</h2> <h2>What's Changed</h2> <ul> <li>feat: verify release checksum and cosign signature by <a href="https://github.com/caarlos0"><code>@caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/550">goreleaser/goreleaser-action#550</a></li> <li>docs: document cosign verification in README by <a href="https://github.com/caarlos0"><code>@caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/553">goreleaser/goreleaser-action#553</a></li> <li>docs: Upgrade import GPG action version by <a href="https://github.com/flecno"><code>@flecno</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/547">goreleaser/goreleaser-action#547</a></li> <li>ci: drop docker-bake in favor of plain npm by <a href="https://github.com/caarlos0"><code>@caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/551">goreleaser/goreleaser-action#551</a></li> <li>ci: add release-major-tag workflow by <a href="https://github.com/caarlos0"><code>@caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/552">goreleaser/goreleaser-action#552</a></li> <li>ci: drop pre-cosign-v3 goreleaser versions from tests by <a href="https://github.com/caarlos0"><code>@caarlos0</code></a> in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/554">goreleaser/goreleaser-action#554</a></li> <li>ci(deps): bump the actions group with 2 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/543">goreleaser/goreleaser-action#543</a></li> <li>ci(deps): bump the actions group with 5 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/546">goreleaser/goreleaser-action#546</a></li> <li>chore(deps): bump undici from 6.23.0 to 6.24.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/545">goreleaser/goreleaser-action#545</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/flecno"><code>@flecno</code></a> made their first contribution in <a href="https://redirect.github.com/goreleaser/goreleaser-action/pull/547">goreleaser/goreleaser-action#547</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/goreleaser/goreleaser-action/compare/v7...v7.1.0">https://github.com/goreleaser/goreleaser-action/compare/v7...v7.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/e24998b8b67b290c2fa8b7c14fcfa7de2c5c9b8c"><code>e24998b</code></a> ci: drop pre-cosign-v3 goreleaser versions from tests (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/554">#554</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/be2e8a39ba2f6daed623e98e8b6662f008cffc8d"><code>be2e8a3</code></a> docs: document cosign verification in README (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/553">#553</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/5e53f8eea2783e9a9b5963dafae20a7e5320618c"><code>5e53f8e</code></a> ci: add release-major-tag workflow (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/552">#552</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/4068afa2f0763491214b56d83686409cb4549b8c"><code>4068afa</code></a> build: drop docker-bake in favor of plain npm (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/551">#551</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/213ec80f5629fd53743a07c81b86deb4c540955f"><code>213ec80</code></a> docs: add CONTRIBUTING with pre-commit workflow</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/4b462d3d1d45d4d31bca90093b38fe2a060674ef"><code>4b462d3</code></a> feat: verify release checksum and cosign signature (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/550">#550</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/01cbe076be10ba0af7b0b9319ac490a93d3d2fcd"><code>01cbe07</code></a> docs: Upgrade import GPG action version (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/547">#547</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/2a473d70e30d651e68b912d1e1d86e01f3a558b4"><code>2a473d7</code></a> ci(deps): bump the actions group with 5 updates (<a href="https://redirect.github.com/goreleaser/goreleaser-action/issues/546">#546</a>)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/fdcf0b9df926c8dd93d4e7f15c508dd346e09eb1"><code>fdcf0b9</code></a> clean: leftover files from node 22(?)</li> <li><a href="https://github.com/goreleaser/goreleaser-action/commit/9881cc53763f713ec5df8d0f4ed575fa41085847"><code>9881cc5</code></a> fix: use new static URL</li> <li>Additional commits viewable in <a href="https://github.com/goreleaser/goreleaser-action/compare/ec59f474b9834571250b370d4735c50f8e2d1e29...e24998b8b67b290c2fa8b7c14fcfa7de2c5c9b8c">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…o_modules group across 1 directory (microsoft#2212) Bumps the go_modules group with 1 update in the / directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git). Updates `github.com/go-git/go-git/v5` from 5.17.1 to 5.18.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.18.0</h2> <h2>What's Changed</h2> <ul> <li>plumbing: transport/http, Add support for followRedirects policy by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/2004">go-git/go-git#2004</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0">https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0</a></p> <h2>v5.17.2</h2> <h2>What's Changed</h2> <ul> <li>build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by <a href="https://github.com/go-git-renovate"><code>@go-git-renovate</code></a>[bot] in <a href="https://redirect.github.com/go-git/go-git/pull/1941">go-git/go-git#1941</a></li> <li>dotgit: skip writing pack files that already exist on disk by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://redirect.github.com/go-git/go-git/pull/1944">go-git/go-git#1944</a></li> </ul> <p>:warning: This release fixes a bug (<a href="https://redirect.github.com/go-git/go-git/issues/1942">go-git/go-git#1942</a>) that blocked some users from upgrading to <code>v5.17.1</code>. Thanks <a href="https://github.com/pskrbasu"><code>@pskrbasu</code></a> for reporting it. 🙇</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2">https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/ea3e7ec9dfc54f577a01afb4dd601c0284604264"><code>ea3e7ec</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/2004">#2004</a> from go-git/v5-http-hardening</li> <li><a href="https://github.com/go-git/go-git/commit/bcd20a9c525826081262a06a9ed9c3167abfcd53"><code>bcd20a9</code></a> plumbing: transport/http, Add support for followRedirects policy</li> <li><a href="https://github.com/go-git/go-git/commit/45ae193b3a60aa8ec8a3e373f7265a7819473d5f"><code>45ae193</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1944">#1944</a> from go-git/fix-perms</li> <li><a href="https://github.com/go-git/go-git/commit/fda4f7464b597ff33d2dea1c026482a5e900037c"><code>fda4f74</code></a> storage: filesystem/dotgit, Skip writing pack files that already exist on disk</li> <li><a href="https://github.com/go-git/go-git/commit/2212dc7caeb2a389fe2129923811ef63f75a557a"><code>2212dc7</code></a> Merge pull request <a href="https://redirect.github.com/go-git/go-git/issues/1941">#1941</a> from go-git/renovate/releases/v5.x-go-github.com-go-...</li> <li><a href="https://github.com/go-git/go-git/commit/ebb2d7da7f5d5aebeaa0b5e13276d72d602c1ae3"><code>ebb2d7d</code></a> build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY]</li> <li>See full diff in <a href="https://github.com/go-git/go-git/compare/v5.17.1...v5.18.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/retina/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…crosoft#2213) Bumps the go_modules group with 4 updates in the / directory: [github.com/moby/spdystream](https://github.com/moby/spdystream), [github.com/buger/jsonparser](https://github.com/buger/jsonparser), [github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority) and [github.com/theupdateframework/go-tuf/v2](https://github.com/theupdateframework/go-tuf). Updates `github.com/moby/spdystream` from 0.5.0 to 0.5.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/moby/spdystream/releases">github.com/moby/spdystream's releases</a>.</em></p> <blockquote> <h2>v0.5.1</h2> <h2>What's Changed</h2> <h3>Security</h3> <p>Fix memory amplification in SPDY frame parsing leads to denial of service (<a href="https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2">CVE-2026-35469</a> / <a href="https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2">GHSA-pc3f-x583-g7j2</a>)</p> <h3>Changes</h3> <ul> <li>spdy: fix duplicate license headers, add LICENSE, PATENTS, and update NOTICE <a href="https://redirect.github.com/moby/spdystream/pull/106">moby/spdystream#106</a></li> <li>ci: update actions and test against latest Go versions <a href="https://redirect.github.com/moby/spdystream/pull/107">moby/spdystream#107</a></li> <li>use ioutil.Discard for go1.13 compatibility <a href="https://redirect.github.com/moby/spdystream/pull/109">moby/spdystream#109</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1">https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moby/spdystream/commit/c59e5d73daa301bde452ea77545bdf51e32554a2"><code>c59e5d7</code></a> Merge pull request <a href="https://redirect.github.com/moby/spdystream/issues/109">#109</a> from thaJeztah/use_ioutil</li> <li><a href="https://github.com/moby/spdystream/commit/2fd0155e904f1f9b834b8460e8fdb8522bb59f84"><code>2fd0155</code></a> use ioutil.Discard for go1.13 compatibility</li> <li><a href="https://github.com/moby/spdystream/commit/ef6121f62c730110bf5ae604a865a8613bfb787f"><code>ef6121f</code></a> Merge commit from fork</li> <li><a href="https://github.com/moby/spdystream/commit/241cec95b8f02919845dc4758f1f5310fc886739"><code>241cec9</code></a> compare with signed Int for 32-bit Arm</li> <li><a href="https://github.com/moby/spdystream/commit/21c38640c8c8f43173b17e5bc6690a5fa25d6935"><code>21c3864</code></a> Add options to customize limits</li> <li><a href="https://github.com/moby/spdystream/commit/acf9b456d06816c5cf23bf3892e13441f947d5fd"><code>acf9b45</code></a> spdy: update godoc for MaxDataLength</li> <li><a href="https://github.com/moby/spdystream/commit/eb6360582bf1343f485ca87b76efc9e72b49d690"><code>eb63605</code></a> spdy: limit header-size and header-count</li> <li><a href="https://github.com/moby/spdystream/commit/2f21da42eaab90f03a82fb03d0de8e91eb1d0fc6"><code>2f21da4</code></a> spdy: fix header block byte accounting</li> <li><a href="https://github.com/moby/spdystream/commit/5976b6612f07a27f2e9a4de875485defb43b5d50"><code>5976b66</code></a> spdy: enforce 24-bit frame length limits</li> <li><a href="https://github.com/moby/spdystream/commit/cf0ec5d0fe4dbb2f3525f733946e0d0ddbfd5b13"><code>cf0ec5d</code></a> Guard against oversized SPDY frames</li> <li>Additional commits viewable in <a href="https://github.com/moby/spdystream/compare/v0.5.0...v0.5.1">compare view</a></li> </ul> </details> <br /> Updates `github.com/buger/jsonparser` from 1.1.1 to 1.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/buger/jsonparser/releases">github.com/buger/jsonparser's releases</a>.</em></p> <blockquote> <h2>v1.1.2</h2> <h2>What's Changed</h2> <ul> <li>Updated travis to build for 1.13 to 1.15 by <a href="https://github.com/janreggie"><code>@janreggie</code></a> in <a href="https://redirect.github.com/buger/jsonparser/pull/225">buger/jsonparser#225</a></li> <li> <ul> <li>eliminate 2 allocations in EachKey() by <a href="https://github.com/Villenny"><code>@Villenny</code></a> in <a href="https://redirect.github.com/buger/jsonparser/pull/223">buger/jsonparser#223</a></li> </ul> </li> <li>fix issue <a href="https://redirect.github.com/buger/jsonparser/issues/150">#150</a> (in deleting case) by <a href="https://github.com/daria-kay"><code>@daria-kay</code></a> in <a href="https://redirect.github.com/buger/jsonparser/pull/226">buger/jsonparser#226</a></li> <li>fixing the oss-fuzz issue by <a href="https://github.com/daria-kay"><code>@daria-kay</code></a> in <a href="https://redirect.github.com/buger/jsonparser/pull/227">buger/jsonparser#227</a></li> <li>Fix parseInt overflow check false negative by <a href="https://github.com/carsonip"><code>@carsonip</code></a> in <a href="https://redirect.github.com/buger/jsonparser/pull/231">buger/jsonparser#231</a></li> <li>Added bespoke error for null cases by <a href="https://github.com/jonomacd"><code>@jonomacd</code></a> in <a href="https://redirect.github.com/buger/jsonparser/pull/228">buger/jsonparser#228</a></li> <li>Fuzzing: Add CIFuzz by <a href="https://github.com/AdamKorcz"><code>@AdamKorcz</code></a> in <a href="https://redirect.github.com/buger/jsonparser/pull/239">buger/jsonparser#239</a></li> <li>Added latest versions of go to tests by <a href="https://github.com/moredure"><code>@moredure</code></a> in <a href="https://redirect.github.com/buger/jsonparser/pull/244">buger/jsonparser#244</a></li> <li>fix EachKey pIdxFlags allocation by <a href="https://github.com/unxcepted"><code>@unxcepted</code></a> in <a href="https://redirect.github.com/buger/jsonparser/pull/241">buger/jsonparser#241</a></li> <li>fix: prevent panic on negative slice index in Delete with malformed JSON (GO-2026-4514) by <a href="https://github.com/dbarrosop"><code>@dbarrosop</code></a> in <a href="https://redirect.github.com/buger/jsonparser/pull/276">buger/jsonparser#276</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/janreggie"><code>@janreggie</code></a> made their first contribution in <a href="https://redirect.github.com/buger/jsonparser/pull/225">buger/jsonparser#225</a></li> <li><a href="https://github.com/Villenny"><code>@Villenny</code></a> made their first contribution in <a href="https://redirect.github.com/buger/jsonparser/pull/223">buger/jsonparser#223</a></li> <li><a href="https://github.com/daria-kay"><code>@daria-kay</code></a> made their first contribution in <a href="https://redirect.github.com/buger/jsonparser/pull/226">buger/jsonparser#226</a></li> <li><a href="https://github.com/carsonip"><code>@carsonip</code></a> made their first contribution in <a href="https://redirect.github.com/buger/jsonparser/pull/231">buger/jsonparser#231</a></li> <li><a href="https://github.com/jonomacd"><code>@jonomacd</code></a> made their first contribution in <a href="https://redirect.github.com/buger/jsonparser/pull/228">buger/jsonparser#228</a></li> <li><a href="https://github.com/moredure"><code>@moredure</code></a> made their first contribution in <a href="https://redirect.github.com/buger/jsonparser/pull/244">buger/jsonparser#244</a></li> <li><a href="https://github.com/unxcepted"><code>@unxcepted</code></a> made their first contribution in <a href="https://redirect.github.com/buger/jsonparser/pull/241">buger/jsonparser#241</a></li> <li><a href="https://github.com/dbarrosop"><code>@dbarrosop</code></a> made their first contribution in <a href="https://redirect.github.com/buger/jsonparser/pull/276">buger/jsonparser#276</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2">https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0"><code>a69e7e0</code></a> Merge pull request <a href="https://redirect.github.com/buger/jsonparser/issues/276">#276</a> from dbarrosop/master</li> <li><a href="https://github.com/buger/jsonparser/commit/d3eacc0bab779d6cf98221f5268828fff287876e"><code>d3eacc0</code></a> fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...</li> <li><a href="https://github.com/buger/jsonparser/commit/61b32cfdfa0f5d368ef7c7daef28ce12d538740f"><code>61b32cf</code></a> Merge pull request <a href="https://redirect.github.com/buger/jsonparser/issues/241">#241</a> from unxcepted/master</li> <li><a href="https://github.com/buger/jsonparser/commit/2181e8398f18397c9cacbaea9889314bb585e868"><code>2181e83</code></a> Merge pull request <a href="https://redirect.github.com/buger/jsonparser/issues/244">#244</a> from ScaleChamp/patch-2</li> <li><a href="https://github.com/buger/jsonparser/commit/1510b5194182fc2fb898f28cdbceb42fd7258bfa"><code>1510b51</code></a> Added latest versions of go to tests</li> <li><a href="https://github.com/buger/jsonparser/commit/6fc2e488ed3cc4f1f1debec3b0c70715bd7be6fd"><code>6fc2e48</code></a> fix: eachkey allocation</li> <li><a href="https://github.com/buger/jsonparser/commit/a6f867eb7787e4ec54536b77b5d628ddf5c4f73d"><code>a6f867e</code></a> Merge pull request <a href="https://redirect.github.com/buger/jsonparser/issues/239">#239</a> from AdamKorcz/cifuzz1</li> <li><a href="https://github.com/buger/jsonparser/commit/cbc01fdbbe131706e89eeaaf0cd917760d8d3949"><code>cbc01fd</code></a> Fuzzing: Add CIFuzz</li> <li><a href="https://github.com/buger/jsonparser/commit/dc92d6932a1272b4d8f485f798a88c3a75106256"><code>dc92d69</code></a> Merge pull request <a href="https://redirect.github.com/buger/jsonparser/issues/228">#228</a> from jonomacd/null-handling</li> <li><a href="https://github.com/buger/jsonparser/commit/2d9d6343e8621ddc18c70749663f74bc584c0de4"><code>2d9d634</code></a> Merge pull request <a href="https://redirect.github.com/buger/jsonparser/issues/231">#231</a> from carsonip/fix-parseint-overflow-check</li> <li>Additional commits viewable in <a href="https://github.com/buger/jsonparser/compare/v1.1.1...v1.1.2">compare view</a></li> </ul> </details> <br /> Updates `github.com/sigstore/timestamp-authority/v2` from 2.0.3 to 2.0.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/timestamp-authority/releases">github.com/sigstore/timestamp-authority/v2's releases</a>.</em></p> <blockquote> <h2>v2.0.6</h2> <h2>What's Changed</h2> <ul> <li>Ensure correct certificate is used for TSA auth checks (GHSA-xm5m-wgh2-rrg3) by <a href="https://github.com/jku"><code>@jku</code></a> in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1333">sigstore/timestamp-authority#1333</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/timestamp-authority/compare/v2.0.5...v2.0.6">https://github.com/sigstore/timestamp-authority/compare/v2.0.5...v2.0.6</a></p> <h2>v2.0.5</h2> <h2>What's Changed</h2> <p>This release updates the chi middleware to resolve a panic.</p> <ul> <li>Update the semantics of the NTP monitoring so its clear in the README in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1276">sigstore/timestamp-authority#1276</a></li> <li>docs: note that CRL/OCSP checks are not performed in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1277">sigstore/timestamp-authority#1277</a></li> <li>Increase default HTTP idle timeout in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1287">sigstore/timestamp-authority#1287</a></li> <li>Upgrade chi middleware v4 -> v5 in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1307">sigstore/timestamp-authority#1307</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/timestamp-authority/compare/v2.0.4...v2.0.5">https://github.com/sigstore/timestamp-authority/compare/v2.0.4...v2.0.5</a></p> <h2>v2.0.4</h2> <h2>Changelog</h2> <ul> <li>5ddd4e6ad32117ae431eca6299ed9d29a6d33f5a update changelog for v2.0.4 (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1258">#1258</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>chore(deps): bump go.step.sm/crypto from 0.74.0 to 0.75.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1239">sigstore/timestamp-authority#1239</a></li> <li>chore(deps): bump github.com/tink-crypto/tink-go-hcvault/v2 from 2.3.0 to 2.4.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1238">sigstore/timestamp-authority#1238</a></li> <li>chore(deps): bump github.com/go-openapi/errors from 0.22.4 to 0.22.5 in the gomod group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1240">sigstore/timestamp-authority#1240</a></li> <li>chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 in the actions group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1241">sigstore/timestamp-authority#1241</a></li> <li>chore(deps): bump golang from <code>20b91ed</code> to <code>0ece421</code> by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1242">sigstore/timestamp-authority#1242</a></li> <li>chore(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1244">sigstore/timestamp-authority#1244</a></li> <li>chore(deps): bump github.com/go-openapi/spec from 0.22.1 to 0.22.2 in the gomod group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1243">sigstore/timestamp-authority#1243</a></li> <li>chore(deps): bump golang from <code>0ece421</code> to <code>a22b2e6</code> by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1245">sigstore/timestamp-authority#1245</a></li> <li>chore(deps): bump the gomod group with 5 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1246">sigstore/timestamp-authority#1246</a></li> <li>chore(deps): bump github.com/tink-crypto/tink-go/v2 from 2.5.0 to 2.6.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1247">sigstore/timestamp-authority#1247</a></li> <li>chore(deps): bump the actions group with 2 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1248">sigstore/timestamp-authority#1248</a></li> <li>chore(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 in the gomod group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1249">sigstore/timestamp-authority#1249</a></li> <li>chore(deps): bump github/codeql-action from 4.31.7 to 4.31.8 in the actions group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1250">sigstore/timestamp-authority#1250</a></li> <li>chore(deps): bump actions/cache from 4.3.0 to 5.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1251">sigstore/timestamp-authority#1251</a></li> <li>chore(deps): bump golang from <code>a22b2e6</code> to <code>36b4f45</code> by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1253">sigstore/timestamp-authority#1253</a></li> <li>chore(deps): bump the gomod group with 5 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1254">sigstore/timestamp-authority#1254</a></li> <li>chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1257">sigstore/timestamp-authority#1257</a></li> <li>chore(deps): bump actions/cache from 5.0.0 to 5.0.1 in the actions group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1256">sigstore/timestamp-authority#1256</a></li> <li>chore(deps): bump github.com/go-playground/validator/v10 from 10.28.0 to 10.29.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1255">sigstore/timestamp-authority#1255</a></li> <li>update changelog for v2.0.4 by <a href="https://github.com/bobcallaway"><code>@bobcallaway</code></a> in <a href="https://redirect.github.com/sigstore/timestamp-authority/pull/1258">sigstore/timestamp-authority#1258</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/timestamp-authority/compare/v2.0.3...v2.0.4">https://github.com/sigstore/timestamp-authority/compare/v2.0.3...v2.0.4</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md">github.com/sigstore/timestamp-authority/v2's changelog</a>.</em></p> <blockquote> <h1>v2.0.5</h1> <p>This release updates the chi middleware to resolve a panic.</p> <h2>Bug Fixes</h2> <ul> <li>Upgrade chi middleware v4 -> v5 (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1307">#1307</a>)</li> </ul> <h2>Docs</h2> <ul> <li>Update the semantics of the NTP monitoring so its clear in the README (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1276">#1276</a>)</li> <li>docs: note that CRL/OCSP checks are not performed (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1277">#1277</a>)</li> </ul> <h2>Misc</h2> <ul> <li>Increase default HTTP idle timeout (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1287">#1287</a>)</li> </ul> <h1>v2.0.4</h1> <p>Only contains dependency updates, but fixes <a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1252">#1252</a> due to breaking API change in sigstore/sigstore</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/timestamp-authority/commit/9583b6186084a309cb6ccaf4323a29781901e962"><code>9583b61</code></a> Ensure correct certificate is used for TSA auth checks (GHSA-xm5m-wgh2-rrg3) ...</li> <li><a href="https://github.com/sigstore/timestamp-authority/commit/7aab8b4373e4ffdc6c7a1efa28856adf9f2efd40"><code>7aab8b4</code></a> chore(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1322">#1322</a>)</li> <li><a href="https://github.com/sigstore/timestamp-authority/commit/48c7b2c9ed18208534c857533b7753d04fefd370"><code>48c7b2c</code></a> chore(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0 (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1327">#1327</a>)</li> <li><a href="https://github.com/sigstore/timestamp-authority/commit/49ca4e4f265d5a65bfc9d49615e1553359e1e181"><code>49ca4e4</code></a> chore(deps): bump the gomod group with 2 updates (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1326">#1326</a>)</li> <li><a href="https://github.com/sigstore/timestamp-authority/commit/5812ba002dafc8b5d10b19bc4e1da54d21aa159c"><code>5812ba0</code></a> chore(deps): bump go.step.sm/crypto from 0.76.2 to 0.77.2 (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1328">#1328</a>)</li> <li><a href="https://github.com/sigstore/timestamp-authority/commit/6a334a895dc81be7b8c889e85c329cf85870ff10"><code>6a334a8</code></a> chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1329">#1329</a>)</li> <li><a href="https://github.com/sigstore/timestamp-authority/commit/d799204b84ac6ca1fcd98b35e6bf457a2944d55c"><code>d799204</code></a> chore(deps): bump actions/upload-artifact in the actions group (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1332">#1332</a>)</li> <li><a href="https://github.com/sigstore/timestamp-authority/commit/b9ce1025213a9101052aeaa5c2310c6ff8351173"><code>b9ce102</code></a> chore(deps): bump golang from 1.26.0 to 1.26.2 in the docker group (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1331">#1331</a>)</li> <li><a href="https://github.com/sigstore/timestamp-authority/commit/54bc0c1a0eaf516e088bf5fd90deee6fc88f3f60"><code>54bc0c1</code></a> chore(deps): bump the gomod group across 1 directory with 6 updates (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1324">#1324</a>)</li> <li><a href="https://github.com/sigstore/timestamp-authority/commit/ffb897a2e26b43963429537a019972db30d1f066"><code>ffb897a</code></a> chore(deps): bump the actions group across 1 directory with 4 updates (<a href="https://redirect.github.com/sigstore/timestamp-authority/issues/1325">#1325</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/timestamp-authority/compare/v2.0.3...v2.0.6">compare view</a></li> </ul> </details> <br /> Updates `github.com/theupdateframework/go-tuf/v2` from 2.3.0 to 2.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/theupdateframework/go-tuf/releases">github.com/theupdateframework/go-tuf/v2's releases</a>.</em></p> <blockquote> <h2>v2.4.1</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/718">theupdateframework/go-tuf#718</a></li> <li>Enforce a stricter validation on the repo name for TAP 4 by <a href="https://github.com/rdimitrov"><code>@rdimitrov</code></a> in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/720">theupdateframework/go-tuf#720</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/theupdateframework/go-tuf/compare/v2.4.0...v2.4.1">https://github.com/theupdateframework/go-tuf/compare/v2.4.0...v2.4.1</a></p> <h2>v2.4.0</h2> <h2>What's Changed</h2> <ul> <li>Add BitLength validation for SuccinctRoles by <a href="https://github.com/rdimitrov"><code>@rdimitrov</code></a> in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/716">theupdateframework/go-tuf#716</a></li> <li>Add thread safety documentation for key types by <a href="https://github.com/rdimitrov"><code>@rdimitrov</code></a> in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/715">theupdateframework/go-tuf#715</a></li> <li>Use restrictive permissions (0700) for cache directories by <a href="https://github.com/rdimitrov"><code>@rdimitrov</code></a> in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/714">theupdateframework/go-tuf#714</a></li> <li>Breaking change: Replace panic with error return in Key.ID() by <a href="https://github.com/rdimitrov"><code>@rdimitrov</code></a> in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/713">theupdateframework/go-tuf#713</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/theupdateframework/go-tuf/compare/v2.3.1...v2.4.0">https://github.com/theupdateframework/go-tuf/compare/v2.3.1...v2.4.0</a></p> <h2>v2.3.1</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.45.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/702">theupdateframework/go-tuf#702</a></li> <li>Resolve govulncheck errors by bumping go to 1.24.11 by <a href="https://github.com/rdimitrov"><code>@rdimitrov</code></a> in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/707">theupdateframework/go-tuf#707</a></li> <li>chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/704">theupdateframework/go-tuf#704</a></li> <li>modern go (1.20+) improvements by <a href="https://github.com/udf2457"><code>@udf2457</code></a> in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/705">theupdateframework/go-tuf#705</a></li> <li>chore(deps): bump github.com/sigstore/sigstore from 1.9.5 to 1.10.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/706">theupdateframework/go-tuf#706</a></li> <li>chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9.1 to 0.10.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/708">theupdateframework/go-tuf#708</a></li> <li>Perform type assertion by <a href="https://github.com/kommendorkapten"><code>@kommendorkapten</code></a> in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/710">theupdateframework/go-tuf#710</a></li> <li>Add tests for failing type assertions by <a href="https://github.com/rdimitrov"><code>@rdimitrov</code></a> in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/711">theupdateframework/go-tuf#711</a></li> <li>Verify threshold is valid by <a href="https://github.com/kommendorkapten"><code>@kommendorkapten</code></a> in <a href="https://redirect.github.com/theupdateframework/go-tuf/pull/712">theupdateframework/go-tuf#712</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.3.1">https://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.3.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/theupdateframework/go-tuf/commit/d361e2ea24e427581343dee5c7a32b485d79fcc0"><code>d361e2e</code></a> Enforce a stricter validation on the repo name for TAP 4 (<a href="https://redirect.github.com/theupdateframework/go-tuf/issues/720">#720</a>)</li> <li><a href="https://github.com/theupdateframework/go-tuf/commit/29aae36c83127913c24e881bc1f95dbb0f0961e6"><code>29aae36</code></a> chore(deps): bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 (<a href="https://redirect.github.com/theupdateframework/go-tuf/issues/718">#718</a>)</li> <li><a href="https://github.com/theupdateframework/go-tuf/commit/bde5f18dc95dfac365fc452ee4e278e5fd66d4b4"><code>bde5f18</code></a> Replace panic with error return in Key.ID() (<a href="https://redirect.github.com/theupdateframework/go-tuf/issues/713">#713</a>)</li> <li><a href="https://github.com/theupdateframework/go-tuf/commit/f400bf4c20476804475d34239f01212e1041ec38"><code>f400bf4</code></a> Use restrictive permissions (0700) for cache directories (<a href="https://redirect.github.com/theupdateframework/go-tuf/issues/714">#714</a>)</li> <li><a href="https://github.com/theupdateframework/go-tuf/commit/d2dbc180e74f4fe371392bb0b02d5a8659bc2fa4"><code>d2dbc18</code></a> Add thread safety documentation for key types (<a href="https://redirect.github.com/theupdateframework/go-tuf/issues/715">#715</a>)</li> <li><a href="https://github.com/theupdateframework/go-tuf/commit/846cd4eccd92b1a333c89cb45cf4f179de74018f"><code>846cd4e</code></a> Add BitLength validation for SuccinctRoles (<a href="https://redirect.github.com/theupdateframework/go-tuf/issues/716">#716</a>)</li> <li><a href="https://github.com/theupdateframework/go-tuf/commit/b38d91fdbc69dfe31fe9230d97dafe527ea854a0"><code>b38d91f</code></a> Verify threshold is valid (<a href="https://redirect.github.com/theupdateframework/go-tuf/issues/712">#712</a>)</li> <li><a href="https://github.com/theupdateframework/go-tuf/commit/876cf2a82b320be6deb43f4ad629057b209a584e"><code>876cf2a</code></a> Add tests for failing type assertions (<a href="https://redirect.github.com/theupdateframework/go-tuf/issues/711">#711</a>)</li> <li><a href="https://github.com/theupdateframework/go-tuf/commit/73345ab6b0eb7e59d525dac17a428f043074cef6"><code>73345ab</code></a> Perform type assertion (<a href="https://redirect.github.com/theupdateframework/go-tuf/issues/710">#710</a>)</li> <li><a href="https://github.com/theupdateframework/go-tuf/commit/d3cdc4b2796d8c452ce17766f0cade2e80a3597d"><code>d3cdc4b</code></a> chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9....</li> <li>Additional commits viewable in <a href="https://github.com/theupdateframework/go-tuf/compare/v2.3.0...v2.4.1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/retina/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v6.4.0</h2> <h2>What's Changed</h2> <h3>Dependency updates:</h3> <ul> <li>Upgrade <a href="https://github.com/actions"><code>@actions</code></a> dependencies by <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1525">actions/setup-node#1525</a></li> <li>Update Node.js versions in versions.yml and bump package to v6.4.0 by <a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1533">actions/setup-node#1533</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Copilot"><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1525">actions/setup-node#1525</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6...v6.4.0">https://github.com/actions/setup-node/compare/v6...v6.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-node/commit/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e"><code>48b55a0</code></a> Update Node.js versions in versions.yml and bump package to v6.4.0 (<a href="https://redirect.github.com/actions/setup-node/issues/1533">#1533</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/ab72c7e7eba0eaa11f8cab0f5679243900c2cac9"><code>ab72c7e</code></a> Upgrade <a href="https://github.com/actions"><code>@actions</code></a> dependencies (<a href="https://redirect.github.com/actions/setup-node/issues/1525">#1525</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…microsoft#2203) Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) from 1.31.6 to 1.32.14. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d15107640a5073c5ce53dc395210858e316d5e82"><code>d151076</code></a> Release 2026-04-02</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/e33c9a9f67577e2dd5fcd3b15b9a8a2e83683f53"><code>e33c9a9</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/e06655901c88ef90432f41a7b9c92b33b4537c75"><code>e066559</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/a635ee4303d8cac381be8788519a1a8bba5ccf12"><code>a635ee4</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/9074b3ddace9c195f00993c8ae509bc8977a6c4c"><code>9074b3d</code></a> Release 2026-04-01</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/f6ad4c082d3a1995b9add26af4eb7553b13df252"><code>f6ad4c0</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/12a971a61d5226cd72102c66b188ae4968cb9b81"><code>12a971a</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/8bd8eee331c2fa1553e57d18d5dbbf1dc83820fc"><code>8bd8eee</code></a> chore: add additional text to CONTRIBUTING.md (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3372">#3372</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/e4deb657ddb9c5d8ac36c335391aafb19034e9de"><code>e4deb65</code></a> Release 2026-03-31</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/1f758f207351302f9f4e1a2aa4c255a75d81446b"><code>1f758f2</code></a> Regenerated Clients</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.31.6...config/v1.32.14">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…oft#1885) # Description Replace the single `directory: "/"` Docker ecosystem entry in dependabot config (which was a no-op since no Dockerfile exists at the repo root) with 7 per-directory entries matching actual Dockerfile locations. Critical components (controller, shell, cli, operator, test/image) are checked daily; tools (kapinger, toolbox) weekly. Also adds a brief section to the development guide documenting the dependabot Docker tracking setup. ## Related Issue Fixes microsoft#1884 ## Checklist - [x] I have read the [contributing documentation](https://retina.sh/docs/Contributing/overview). - [x] I signed and signed-off the commits (`git commit -S -s ...`). See [this documentation](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification) on signing commits. - [x] I have correctly attributed the author(s) of the code. - [x] I have tested the changes locally. - [x] I have followed the project's style guidelines. - [x] I have updated the documentation, if necessary. - [ ] I have added tests, if applicable. ## Screenshots (if applicable) or Testing Completed Verified all 7 Dockerfile directories exist and match the dependabot entries: `/controller`, `/shell`, `/cli`, `/operator`, `/test/image`, `/hack/tools/kapinger`, `/hack/tools/toolbox` ## Additional Notes Original PR from Copilot SWE agent. Squashed and cleaned up: - Removed `prefix-development` (not applicable to Docker ecosystem) - Replaced non-existent labels (`area/security`, `area/testing`, `area/tools`) with existing `area/infra`, `area/dependencies` - Fixed duplicate broken `## Cleanup` section with unclosed code fence - Removed unnecessary validation script Signed-off-by: Quang Nguyen <nguyenquang@microsoft.com> Co-authored-by: Quang Nguyen <nguyenquang@microsoft.com> Co-authored-by: matmerr <6521405+matmerr@users.noreply.github.com>
…soft#2214) # Description The apiserver watcher currently reads the `kubernetes` service's backing IPs via `corev1.Endpoints`, which emits a deprecation warning on v1.33+ clusters: ``` W... warnings.go:70] v1 Endpoints is deprecated in v1.33+; use discovery.k8s.io/v1 EndpointSlice ``` The warning is sent by the kube-apiserver as an HTTP `Warning:` response header ([KEP-1693](https://github.com/kubernetes/enhancements/blob/master/keps/sig-api-machinery/1693-warnings/README.md)) and surfaced by the client-go warning handler; it was added in [KEP-4974](https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/4974-deprecate-endpoints) for every read/write on `Endpoints` objects in v1.33. This PR switches `ipsFromEndpoint` to list `discoveryv1.EndpointSlice` filtered by `kubernetes.io/service-name=kubernetes`, aggregating addresses across all slices (large services get split past 100 endpoints). The agent RBAC in both Helm charts is updated to grant `discovery.k8s.io/endpointslices` and drop the now-unused `core/endpoints` rules. ### Why EndpointSlice EndpointSlice is a strict superset of `Endpoints` — it supports dual-stack, traffic distribution, and scales past the 100-endpoint cap. It's been the default path for service discovery for nearly five years: | Stage | K8s version | Reference | |---|---|---| | Alpha | v1.16 | [KEP-0752](https://github.com/kubernetes/enhancements/blob/master/keps/sig-network/0752-endpointslices/README.md), controller introduced in [#81048](kubernetes/kubernetes#81048) | | GA — kube-proxy + controller-manager default | v1.21 (Apr 2021) | [CHANGELOG-1.21](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md); kube-proxy [#103306](kubernetes/kubernetes#103306); controller-manager [#99870](kubernetes/kubernetes#99870) | | `v1.Endpoints` deprecated | v1.33 (Apr 2025) | [KEP-4974](https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/4974-deprecate-endpoints), [transition blog](https://kubernetes.io/blog/2025/04/24/endpoints-deprecation/) | Canonical docs: [EndpointSlices](https://kubernetes.io/docs/concepts/services-networking/endpoint-slices/). ## Related Issue N/A — surfaced during local testing on a v1.33 cluster. ## Checklist - [x] I have read the [contributing documentation](https://retina.sh/docs/Contributing/overview). - [x] I signed and signed-off the commits (`git commit -S -s ...`). - [x] I have correctly attributed the author(s) of the code. - [x] I have tested the changes locally. - [x] I have followed the project's style guidelines. - [ ] I have updated the documentation, if necessary — no doc changes needed. - [x] I have added tests, if applicable. ## Testing Completed ```bash go test -tags=unit,dashboard ./pkg/watchers/apiserver/... -v -count=1 ``` All tests pass. `TestRefresh` confirms the seeded EndpointSlice IPs flow through into the created IP set. Signed-off-by: Quang Nguyen <nguyenquang@microsoft.com>
…o 1.21.1 (microsoft#2223) Bumps [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) from 1.21.0 to 1.21.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Azure/azure-sdk-for-go/releases">github.com/Azure/azure-sdk-for-go/sdk/azcore's releases</a>.</em></p> <blockquote> <h2>sdk/azcore/v1.21.1</h2> <h2>1.21.1 (2026-04-16)</h2> <h3>Bugs Fixed</h3> <ul> <li>Fixed an issue in <code>ResponseError.Error()</code> where the request URL path was being logged unescaped.</li> <li>Redact query parameters when logging errors.</li> <li>For <code>runtime.JoinPaths</code>, don't add a slash between root and paths when <code>paths</code> starts with <code>?</code> (query string).</li> </ul> <h3>Other Changes</h3> <ul> <li>Upgraded to Go 1.25.0.</li> <li>Upgraded dependencies.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/63e4ba18204b0df554e330df8f85662e653e67ab"><code>63e4ba1</code></a> Bump release date for azcore (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26613">#26613</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/fa0312174d17ff4cb7cb0118fa80de07409841c2"><code>fa03121</code></a> remove bypass local dns (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26609">#26609</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/c47f9a60dd1e9be6943ff0d6a5666a0ac09f6cfa"><code>c47f9a6</code></a> Sync eng/common directory with azure-sdk-tools for PR 15153 (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26607">#26607</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/88b8b5b38ecebb929a2e302df054fed1d68618b8"><code>88b8b5b</code></a> Changelog for v2.2.0 (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26567">#26567</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/72ca19ae2b8b4514c4f48a5ff33495b03c08afd0"><code>72ca19a</code></a> Storage STG 101 (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26568">#26568</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/b64baf56c6b168d258b2a0678290ac5f9ab97938"><code>b64baf5</code></a> Sync .github directory with azure-sdk-tools repository (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26600">#26600</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/ecd64dd6500a04da22107925c3ba9fbe8e636f2c"><code>ecd64dd</code></a> Prep azcore@v1.21.1 for release (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26596">#26596</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/1d02f204d0146ffd7d13d5585bf3766e53c32cc5"><code>1d02f20</code></a> Update copilot code review instructions and migration breaking change mitigat...</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/f6e9ce3212cc9d654d349778f19065eb5d849197"><code>f6e9ce3</code></a> Sync eng/common directory with azure-sdk-tools for PR 14973 (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26531">#26531</a>)</li> <li><a href="https://github.com/Azure/azure-sdk-for-go/commit/d5a3baf11e0b743a4009efb8e84cbaee335fc0eb"><code>d5a3baf</code></a> Update CODEOWNERS to remove one owner from Custom Providers (<a href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/26588">#26588</a>)</li> <li>Additional commits viewable in <a href="https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.21.0...sdk/azcore/v1.21.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ft#2224) Bumps [github.com/mdlayher/netlink](https://github.com/mdlayher/netlink) from 1.11.0 to 1.11.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mdlayher/netlink/releases">github.com/mdlayher/netlink's releases</a>.</em></p> <blockquote> <h2>v1.11.1</h2> <p>See <a href="https://github.com/mdlayher/netlink/blob/main/CHANGELOG.md#v1111">https://github.com/mdlayher/netlink/blob/main/CHANGELOG.md#v1111</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mdlayher/netlink/blob/main/CHANGELOG.md">github.com/mdlayher/netlink's changelog</a>.</em></p> <blockquote> <h2>v1.11.1</h2> <ul> <li>[Bug Fix]: <a href="https://redirect.github.com/mdlayher/netlink/pull/283">#283</a> fixed a bug where <code>netlink.Conn.Receive</code> would reject valid netlink messages whose header length is not aligned. This is common with nfqueue, nflog and conntrack events.</li> <li>[Bug Fix]: <a href="https://redirect.github.com/mdlayher/netlink/pull/284">#284</a> fixed a bug where <code>netlink.Message.Data</code> could be silently overwritten by subsequent <code>netlink.Conn.Receive</code> calls when <code>netlink.Config.MessageBufferSize</code> is enabled, due to pooled buffer reuse.</li> <li>[Improvement]: <a href="https://redirect.github.com/mdlayher/netlink/pull/282">#282</a> improved error handling by usage of <code>errors</code> package.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mdlayher/netlink/commit/45ff01502724315f830173461edd86b98a9a5a40"><code>45ff015</code></a> CHANGELOG: release v1.11.1 (<a href="https://redirect.github.com/mdlayher/netlink/issues/285">#285</a>)</li> <li><a href="https://github.com/mdlayher/netlink/commit/87883031ec9c1f94db54aee63f7483df7616113a"><code>8788303</code></a> netlink: fix UnmarshalBinary rejecting valid unpadded netlink messages (<a href="https://redirect.github.com/mdlayher/netlink/issues/283">#283</a>)</li> <li><a href="https://github.com/mdlayher/netlink/commit/bf38b1689d9489a5df083ff3961ea79e9240f894"><code>bf38b16</code></a> conn_linux: copy pooled receive buffers before parsing (<a href="https://redirect.github.com/mdlayher/netlink/issues/284">#284</a>)</li> <li><a href="https://github.com/mdlayher/netlink/commit/c24d5163915b3e1ec47c3a34c84087bf2283d2a0"><code>c24d516</code></a> Improve error handling (<a href="https://redirect.github.com/mdlayher/netlink/issues/282">#282</a>)</li> <li>See full diff in <a href="https://github.com/mdlayher/netlink/compare/v1.11.0...v1.11.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…9.1 (microsoft#2226) Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) from 1.99.0 to 1.99.1. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/9bc9c51d733fd437a60a8710531477ca0347dcc4"><code>9bc9c51</code></a> Release 2026-04-17</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2b41455a8d88032b9b76b0bafbe23de0a61a6f29"><code>2b41455</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2327a1b15b5f16414e715325bc9579082fde0767"><code>2327a1b</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/9225797aa8ce8661d61f4628973aface4e01c922"><code>9225797</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/7b6f675adb365c7b069aaf2a8e81c4b8f8a5d08e"><code>7b6f675</code></a> Bump smithy-go to 1.25 (again) (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3390">#3390</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/c8b6a97220901cccfd8a06f6f25aef65a967384c"><code>c8b6a97</code></a> Release 2026-04-16</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/4a05c2ba948715d305aff4519154abe2c4799246"><code>4a05c2b</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/6cd4cc9201382be2638c8b4951b5d92de73c1161"><code>6cd4cc9</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/3153bed494fb9e426640b30c7b91be0510b20362"><code>3153bed</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/fe3cef6cc115a2915f5410c739dc73d51553d709"><code>fe3cef6</code></a> Make AccountIDEndpointRouting aware of bdd endpoints (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3387">#3387</a>)</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.99.0...service/s3/v1.99.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [k8s.io/metrics](https://github.com/kubernetes/metrics) from 0.35.3 to 0.35.4. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kubernetes/metrics/commit/2dd2b8ac263d641f26f62e97b0cc0d69487601f2"><code>2dd2b8a</code></a> Update dependencies to v0.35.4 tag</li> <li><a href="https://github.com/kubernetes/metrics/commit/f34cd81b2e9fef1988712b2e7cda87abb1e70475"><code>f34cd81</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes/metrics/issues/138356">#138356</a> from dims/update-moby-spdystream-v0.5.1-1.35</li> <li><a href="https://github.com/kubernetes/metrics/commit/d571fcbd22914a78778066a25f7576cb0582e22f"><code>d571fcb</code></a> Update github.com/moby/spdystream from v0.5.0 to v0.5.1</li> <li>See full diff in <a href="https://github.com/kubernetes/metrics/compare/v0.35.3...v0.35.4">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
# Description Follow-up to microsoft#1885. Every `FROM` line in the repo's Dockerfiles pins only the digest (`image@sha256:...`) with the tag documented in an adjacent `# skopeo inspect` comment. Dependabot doesn't read the comments — with no tag on the `FROM`, it tracks the "latest" digest for the repository name and bumps blindly, ignoring which variant the pinned digest actually belongs to. This is already producing broken PRs. In microsoft#2220, the Windows Server Core `golang` digest in `controller/Dockerfile.windows-cgo` and `controller/Dockerfile.windows-native` was replaced with the `azurelinux3.0` digest used by the Linux images — those FROMs wouldn't build. ## Fix Per [Dependabot's docs](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file), when a `FROM` has both a tag and a digest, Dependabot only bumps the digest within that tag. Switching every `FROM` to `image:tag@sha256:digest` scopes each variant separately (`1.26.2-azurelinux3.0`, plain `1.26.2`, `1.26.2-windowsservercore-ltsc2022`, `windows/servercore:ltsc2022`, etc.) and yields readable PR titles like `bump golang from 1.26.2-azurelinux3.0 to 1.27.0-azurelinux3.0` instead of `` bump golang from `33d887d` to `8fe67ba` ``. While here, each digest is refreshed to the current `skopeo inspect` result for its tag. - **Scope**: 25 `FROM` lines across 14 Dockerfiles (`controller/`, `operator/`, `cli/`, `shell/`, `test/image/`, `hack/tools/{kapinger,toolbox}/`). - **Digest refresh**: 5 of 8 unique `image:tag` combinations had newer digests upstream; 3 (`azurelinux/base/core:3.0`, `azurelinux/distroless/minimal:3.0`, `mirror/docker/library/ubuntu:24.04`) were unchanged. - **Follow-up**: the 6 open Dependabot PRs microsoft#2216–microsoft#2221 should be closed; the next run will regenerate correctly-scoped PRs per tag. ## Related Issue Follow-up to microsoft#1885. No issue to close. ## Checklist - [x] I have read the [contributing documentation](https://retina.sh/docs/Contributing/overview). - [x] I signed and signed-off the commits (`git commit -S -s ...`). - [x] I have correctly attributed the author(s) of the code. - [x] I have tested the changes locally. - [x] I have followed the project's style guidelines. - [ ] I have updated the documentation, if necessary. - [ ] I have added tests, if applicable. ## Screenshots (if applicable) or Testing Completed N/A — config-only change. ## Additional Notes N/A. Signed-off-by: Quang Nguyen <nguyenquang@microsoft.com>
# Description Add HTTPRoute support for hubble-ui for clusters using Gateway API ## Related Issue If this pull request is related to any issue, please mention it here. Additionally, make sure that the issue is assigned to you before submitting this pull request. ## Checklist - [x] I have read the [contributing documentation](https://retina.sh/docs/Contributing/overview). - [x] I signed and signed-off the commits (`git commit -S -s ...`). See [this documentation](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification) on signing commits. - [x] I have correctly attributed the author(s) of the code. - [x] I have tested the changes locally. - [ ] I have followed the project's style guidelines. - [ ] I have updated the documentation, if necessary. - [x] I have added tests, if applicable. ## Screenshots (if applicable) or Testing Completed Please add any relevant screenshots or GIFs to showcase the changes made. ## Additional Notes Add any additional notes or context about the pull request here. --- Please refer to the [CONTRIBUTING.md](../CONTRIBUTING.md) file for more information on how to contribute to this project.
…f43dd9 to 0.21.0 (microsoft#2225) Bumps [github.com/cilium/ebpf](https://github.com/cilium/ebpf) from 0.20.1-0.20260218191617-ee67e7f43dd9 to 0.21.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cilium/ebpf/releases">github.com/cilium/ebpf's releases</a>.</em></p> <blockquote> <h2>v0.21.0: Struct Ops, Weak Symbols and BTF deduplication</h2> <p>Hi, everyone! The Cilium project is proud to announce v0.21.0 of ebpf-go, our first major 2026 feature release. Please note that this version comes with a few breaking changes for XDP users that may require some intervention based on your use case, so please read the following section carefully before upgrading! We've also removed some long-deprecated APIs.</p> <h2>Breaking changes</h2> <h3>XDP Attach Type</h3> <p>This release saw a change to the ELF parsing logic, specifically to XDP programs. Previously, XDP programs had their <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#ProgramSpec.AttachType"><code>ProgramSpec.AttachType</code></a> set to <code>AttachNone</code>. Prompted by upstream changes in Linux 6.18, XDP programs now come with an <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#AttachXDP"><code>AttachXDP</code></a> attach type. This change ensures compatibility with kernels going forward, as well as better interoperability with libbpf-based tools using shared PROG_ARRAY maps.</p> <p>tl;dr: Linux 6.18 and later disallows mixing attach types within the same program array.</p> <p>If your application uses a pinned program array, you may need to manually change the attach type of your XDP programs to <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#AttachType"><code>AttachNone</code></a> before they are loaded to ensure they can still be inserted into maps containing pre-upgrade programs.</p> <p>The same goes for BPF links. If you're updating an XDP link created by an older version of ebpf-go, you need to ensure your XDP program is loaded with the same attach type the link was initially created with, or updating will fail with EINVAL.</p> <p>For an example of how to deal with this change, <a href="https://redirect.github.com/cilium/cilium/pull/44209">here's the the Cilium PR</a> that implemented logic to try both attach types when updating links.</p> <h3>Windows helper function rename</h3> <p>ebpf-for-windows was upgraded from <code>0.21.0</code> to <code>v1.0.0-rc1</code>. efW made breaking changes to the names of helper functions, our API has been updated to match:</p> <ul> <li><a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.20.0/asm#WindowsFnMemcmp"><code>asm.WindowsFnMemcmp</code></a> -> <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/asm#WindowsFnMemcmpS"><code>asm.WindowsFnMemcmpS</code></a></li> <li><a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.20.0/asm#WindowsFnMemcpy"><code>asm.WindowsFnMemcpy</code></a> -> <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/asm#WindowsFnMemcpyS"><code>asm.WindowsFnMemcpyS</code></a></li> <li><a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.20.0/asm#WindowsFnMemmove"><code>asm.WindowsFnMemmove</code></a> -> <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/asm#WindowsFnMemmoveS"><code>asm.WindowsFnMemmoveS</code></a></li> </ul> <h2>New Features</h2> <ul> <li>Struct ops — The ELF reader can now parse struct ops sections, building <code>MapSpecs</code> and resolving function-pointer members. <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/link#AttachStructOps"><code>link.AttachStructOps</code></a> has been added to allow attaching a <code>StructOpsMap</code> as a link. A sched_ext example can be found <a href="https://github.com/cilium/ebpf/tree/v0.21.0/examples/sched_ext">here</a>.</li> <li>Weak symbol & ELF linking — Programs and maps defined as weak symbols are now fully supported. The ELF reader performs per-symbol decoding for both <code>ProgramSpec</code> and <code>MapSpec</code>, meaning linked objects (produced via <code>bpftool gen object</code>) are now handled correctly.</li> <li>BTF type deduplication — <code>btf.Builder</code> can now deduplicate types while generating a BTF blob. Deduplication can be enabled by passing <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/btf#BuilderOptions"><code>BuilderOptions</code></a> to <code>NewBuilder</code> with the <code>Deduplication</code> field set to true.</li> <li><a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#ProgramSpec.Compatible"><code>ProgramSpec.Compatible</code></a> was added — <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#ProgramSpec.Tag"><code>ProgramSpec.Tag</code></a> is now deprecated. The new <code>ProgramSpec.Compatible</code> method compares a loaded program's tag against both SHA-1 and SHA-256 hashes of the spec, ensuring correct behaviour across kernels — including kernel v6.18+, which switched to SHA-256 for program hashing.</li> <li>ProgramInfo improvements — The program name as reported by <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#ProgramInfo.Name"><code>ProgramInfo.Name</code></a> is now sourced from BTF func info when available to provide the full program name if it's longer than 15 bytes.</li> <li>LinkInfo improvements — Added a number of methods and types related to reading back link info.</li> <li>Reverse symbol lookup — Added <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/link#Executable.Symbol"><code>Executable.Symbol</code></a> to resolve addresses to a symbol and relative offset.</li> <li>Uprobe/kprobe link feature probing — <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/features#HaveBPFLinkKprobeMulti"><code>HaveBPFLinkKprobeMulti</code></a>, <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/features#HaveBPFLinkUprobeMulti"><code>HaveBPFLinkUprobeMulti</code></a>, and <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/features#HaveBPFLinkKprobeSession"><code>HaveBPFLinkKprobeSession</code></a> are now exported from the features package, making it easier to probe for multi-attach support before loading programs.</li> <li>Program run batching — A new <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#RunOptions"><code>RunOptions.BatchSize</code></a> option has been added to support batching when running programs.</li> </ul> <h2>Bug Fixes</h2> <ul> <li>Allow weak kfuncs loading without <code>CAP_SYS_ADMIN</code> — Loading programs with weak kfuncs on kernels that don't have the kfunc no longer fails with "operation not permitted" when the caller lacks <code>CAP_SYS_ADMIN</code>. The permission error is now treated as "not found" for weak kfuncs.</li> <li>ELF reader nil panic — Fixed a panic that could occur when loading an ELF without BTF due to a nil extInfo pointer. Along with the fix, a suite of regression tests was added that exercises the core loader logic with non-BTF ELFs as well.</li> <li><a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0/link#QueryResult.HaveLinkInfo"><code>QueryResult.HaveLinkInfo</code></a> heuristic — The heuristic has been updated to check for at least one attached program with a non-zero link ID, fixing a false positive introduced by a kernel change that began populating the revision field for cgroup queries.</li> <li>Windows map/program count — Increased the default map and program count on Windows to reduce failures when loading collections with more maps than previously allocated.</li> </ul> <h2>More breaking changes</h2> <h3>Deprecations</h3> <p>In this release we have removed a number of features which had been deprecated for a while.</p> <ul> <li><a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.20.0#CollectionSpec.RewriteMaps"><code>CollectionSpec.RewriteMaps</code></a> - Pass <a href="https://pkg.go.dev/github.com/cilium/ebpf@v0.21.0#CollectionOptions"><code>CollectionOptions.MapReplacements</code></a> when loading the Collection instead.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/cilium/ebpf/commits/v0.21.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…t#2227) Bumps [github.com/cilium/workerpool](https://github.com/cilium/workerpool) from 1.3.0 to 1.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cilium/workerpool/releases">github.com/cilium/workerpool's releases</a>.</em></p> <blockquote> <h2>v1.4.0</h2> <h2>What's Changed</h2> <h3>Enhancements</h3> <ul> <li>Add WithResultCallback option to avoid unbounded result accumulation by <a href="https://github.com/rolinh"><code>@rolinh</code></a> in <a href="https://redirect.github.com/cilium/workerpool/pull/114">cilium/workerpool#114</a></li> <li>workerpool: reject Submit when parent context is done by <a href="https://github.com/rolinh"><code>@rolinh</code></a> in <a href="https://redirect.github.com/cilium/workerpool/pull/111">cilium/workerpool#111</a></li> </ul> <h3>Documentation</h3> <ul> <li>doc: explicit that result callback cannot call Submit() nor Close() by <a href="https://github.com/kaworu"><code>@kaworu</code></a> in <a href="https://redirect.github.com/cilium/workerpool/pull/117">cilium/workerpool#117</a></li> <li>doc: improve doc and examples around task cancellation, drain and callbacks by <a href="https://github.com/rolinh"><code>@rolinh</code></a> in <a href="https://redirect.github.com/cilium/workerpool/pull/115">cilium/workerpool#115</a></li> <li>doc: improve readme to more clearly state the lib purpose, pros and cons by <a href="https://github.com/rolinh"><code>@rolinh</code></a> in <a href="https://redirect.github.com/cilium/workerpool/pull/116">cilium/workerpool#116</a></li> </ul> <h3>CI</h3> <ul> <li>.github/workflows: adjust branch name to main by <a href="https://github.com/tklauser"><code>@tklauser</code></a> in <a href="https://redirect.github.com/cilium/workerpool/pull/101">cilium/workerpool#101</a></li> <li>chore(deps): update all github action dependencies by <a href="https://github.com/renovate"><code>@renovate</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/110">cilium/workerpool#110</a></li> <li>chore: Configure Renovate by <a href="https://github.com/renovate"><code>@renovate</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/105">cilium/workerpool#105</a></li> <li>ci: Bump actions/checkout from 4.2.2 to 5.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/99">cilium/workerpool#99</a></li> <li>ci: Bump actions/checkout from 5.0.0 to 5.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/104">cilium/workerpool#104</a></li> <li>ci: Bump actions/checkout from 5.0.1 to 6.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/106">cilium/workerpool#106</a></li> <li>ci: Bump actions/setup-go from 5.3.0 to 5.4.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/94">cilium/workerpool#94</a></li> <li>ci: Bump actions/setup-go from 5.4.0 to 5.5.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/98">cilium/workerpool#98</a></li> <li>ci: Bump actions/setup-go from 5.5.0 to 6.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/100">cilium/workerpool#100</a></li> <li>ci: Bump actions/setup-go from 6.0.0 to 6.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/107">cilium/workerpool#107</a></li> <li>ci: Bump golangci/golangci-lint-action from 6.3.3 to 6.5.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/91">cilium/workerpool#91</a></li> <li>ci: Bump golangci/golangci-lint-action from 6.5.0 to 6.5.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/93">cilium/workerpool#93</a></li> <li>ci: Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/97">cilium/workerpool#97</a></li> <li>ci: Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/103">cilium/workerpool#103</a></li> <li>ci: Bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/cilium/workerpool/pull/108">cilium/workerpool#108</a></li> <li>ci: update golangci-lint to v2 by <a href="https://github.com/kaworu"><code>@kaworu</code></a> in <a href="https://redirect.github.com/cilium/workerpool/pull/96">cilium/workerpool#96</a></li> <li>ci: update tested Go versions by <a href="https://github.com/tklauser"><code>@tklauser</code></a> in <a href="https://redirect.github.com/cilium/workerpool/pull/102">cilium/workerpool#102</a></li> <li>ci: update tested Go versions to currently supported 1.25 an 1.26 by <a href="https://github.com/tklauser"><code>@tklauser</code></a> in <a href="https://redirect.github.com/cilium/workerpool/pull/112">cilium/workerpool#112</a></li> <li>ci: use oldstable and stable alias versions by <a href="https://github.com/tklauser"><code>@tklauser</code></a> in <a href="https://redirect.github.com/cilium/workerpool/pull/113">cilium/workerpool#113</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/renovate"><code>@renovate</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/cilium/workerpool/pull/105">cilium/workerpool#105</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/cilium/workerpool/compare/v1.3.0...v1.4.0">https://github.com/cilium/workerpool/compare/v1.3.0...v1.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cilium/workerpool/commit/099834079466c6e44c6c6c41fff0f833349ffd4f"><code>0998340</code></a> doc: explicit that result callback cannot call Submit() nor Close()</li> <li><a href="https://github.com/cilium/workerpool/commit/d7b7562feaaed7d8767ec0fa2090ac285eef0e88"><code>d7b7562</code></a> doc: improve readme to more clearly state the lib purpose, pros and cons</li> <li><a href="https://github.com/cilium/workerpool/commit/8427060dde1106cd62289af4d30dc6a2708276a4"><code>8427060</code></a> doc: enable godoclint and address reported issues</li> <li><a href="https://github.com/cilium/workerpool/commit/6ecdd96ea373cf0610e8d2595abf839f330585c1"><code>6ecdd96</code></a> doc: ensure example_test.go and the example in the readme are in sync</li> <li><a href="https://github.com/cilium/workerpool/commit/bd12cf29f2c019bb51be48e18b8caab46af1ce80"><code>bd12cf2</code></a> doc: improve doc and examples around task context cancellation</li> <li><a href="https://github.com/cilium/workerpool/commit/308f6da42dc2380259a9b915f9da6fa0602b601c"><code>308f6da</code></a> doc: improve doc around using Drain when WithResultCallback is used</li> <li><a href="https://github.com/cilium/workerpool/commit/acd1f0de4df8ad37b3a90983975a87e9a865358f"><code>acd1f0d</code></a> doc: improve doc around the usage and interraction of Close and Drain</li> <li><a href="https://github.com/cilium/workerpool/commit/99bd3ba72fcca0aac514f545021400c30d7c7988"><code>99bd3ba</code></a> improve comments that explain why no lock is needed around wp.results</li> <li><a href="https://github.com/cilium/workerpool/commit/5570790e931fa17a202274b682084c7d7d57f9d0"><code>5570790</code></a> doc: make the for loop condition in the examples more readable</li> <li><a href="https://github.com/cilium/workerpool/commit/e29e14a9317c461dace77e758654266eb082c085"><code>e29e14a</code></a> add WithResultCallback option to avoid unbounded result accumulation</li> <li>Additional commits viewable in <a href="https://github.com/cilium/workerpool/compare/v1.3.0...v1.4.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…to 0.18.0 (microsoft#2222) Bumps [sigs.k8s.io/cloud-provider-azure/pkg/azclient](https://github.com/kubernetes-sigs/cloud-provider-azure) from 0.17.0 to 0.18.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/739c700edf12ad7bfda82475ba1cf0a6ba70921f"><code>739c700</code></a> build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10197">#10197</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/237b5a337cf608f1ed9de2f5c74b0d5ff948c8a8"><code>237b5a3</code></a> build(deps): bump the all group with 2 updates (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10200">#10200</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/bd28182daadf69fbbe112d988ec11aefd6013973"><code>bd28182</code></a> build(deps): bump the all group in /kubetest2-aks with 2 updates (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10196">#10196</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/7d45437b5e583444f38bad4fae87a3dda5fa4df2"><code>7d45437</code></a> build(deps): bump github.com/go-git/go-git/v5 in /kubetest2-aks (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10193">#10193</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/b30c9922cf2a3c14eb3d1ca94e0e1f6b36730251"><code>b30c992</code></a> chore: pin labeler GitHub Action to full-length commit SHAs (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10192">#10192</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/e188952e7463d5539ef6fca0e0098acbb497638d"><code>e188952</code></a> build(deps): bump oss/go/microsoft/golang in the all group (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10178">#10178</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/970bd8e5f635ff2811821e63967504afece40189"><code>970bd8e</code></a> Merge pull request <a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10189">#10189</a> from andyzhangx/fix/cross-rg-private-dns-zone</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/c6c8ff5c4a8f9a1467865a9e6f07dd45c7e68bc6"><code>c6c8ff5</code></a> fix: capitalize DNS in error message, add PrivateDNSZoneID RG assertion in test</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/bbc7a91fb16889e1a047e96de9cccd5cf61aea91"><code>bbc7a91</code></a> fix: use single consistent 'resourceGroup' log key, remove duplicates</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/bb06c6c25033eccab164362b9cd64130e2b91e1a"><code>bb06c6c</code></a> fix: improve error messages and preserve log key backward compatibility</li> <li>Additional commits viewable in <a href="https://github.com/kubernetes-sigs/cloud-provider-azure/compare/pkg/azclient/v0.17.0...pkg/azclient/v0.18.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#2230) Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.35.0 to 0.36.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aquasecurity/trivy-action/releases">aquasecurity/trivy-action's releases</a>.</em></p> <blockquote> <h2>v0.36.0</h2> <h2>What's Changed</h2> <ul> <li>chore(ci): update bump-trivy workflow by <a href="https://github.com/DmitriyLewen"><code>@DmitriyLewen</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/546">aquasecurity/trivy-action#546</a></li> <li>ci: use action.yaml as single source of truth for Trivy version by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/552">aquasecurity/trivy-action#552</a></li> <li>ci: replace peter-evans/create-pull-request with gh CLI by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/550">aquasecurity/trivy-action#550</a></li> <li>test: use pinned digests for trivy-db, trivy-java-db and trivy-checks by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/555">aquasecurity/trivy-action#555</a></li> <li>ci: add dependabot config by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/556">aquasecurity/trivy-action#556</a></li> <li>chore: add zizmor config by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/557">aquasecurity/trivy-action#557</a></li> <li>chore(deps): bump the actions group with 5 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/558">aquasecurity/trivy-action#558</a></li> <li>fix: use portable shebang in entrypoint.sh by <a href="https://github.com/Hayao0819"><code>@Hayao0819</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/545">aquasecurity/trivy-action#545</a></li> <li>Fix typo in GOOGLE_APPLICATION_CREDENTIALS env var name by <a href="https://github.com/patrik-csak"><code>@patrik-csak</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/547">aquasecurity/trivy-action#547</a></li> <li>Upgrade Trivy action version from 0.33.1 to 0.35.0 fixes <a href="https://redirect.github.com/aquasecurity/trivy-action/issues/549">#549</a> by <a href="https://github.com/Aditya09-cse"><code>@Aditya09-cse</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/548">aquasecurity/trivy-action#548</a></li> <li>chore: use GitHub Actions as git commit author in bump-trivy workflow by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/561">aquasecurity/trivy-action#561</a></li> <li>chore(deps): Update trivy to v0.70.0 by <a href="https://github.com/Argon-DevOps-Mgt"><code>@Argon-DevOps-Mgt</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/559">aquasecurity/trivy-action#559</a></li> <li>chore: update action version to v0.36.0 in examples by <a href="https://github.com/nikpivkin"><code>@nikpivkin</code></a> in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/563">aquasecurity/trivy-action#563</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/558">aquasecurity/trivy-action#558</a></li> <li><a href="https://github.com/Hayao0819"><code>@Hayao0819</code></a> made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/545">aquasecurity/trivy-action#545</a></li> <li><a href="https://github.com/patrik-csak"><code>@patrik-csak</code></a> made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/547">aquasecurity/trivy-action#547</a></li> <li><a href="https://github.com/Aditya09-cse"><code>@Aditya09-cse</code></a> made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/548">aquasecurity/trivy-action#548</a></li> <li><a href="https://github.com/Argon-DevOps-Mgt"><code>@Argon-DevOps-Mgt</code></a> made their first contribution in <a href="https://redirect.github.com/aquasecurity/trivy-action/pull/559">aquasecurity/trivy-action#559</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/aquasecurity/trivy-action/compare/v0.35.0...v0.36.0">https://github.com/aquasecurity/trivy-action/compare/v0.35.0...v0.36.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aquasecurity/trivy-action/commit/ed142fd0673e97e23eac54620cfb913e5ce36c25"><code>ed142fd</code></a> chore: update action version to v0.36.0 in examples (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/563">#563</a>)</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/dea62cf79abc269fc35dfd161a4539f0d1f92293"><code>dea62cf</code></a> chore(deps): Update trivy to v0.70.0 (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/559">#559</a>)</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/128d9a8815401077119ad09f6ca1892d422c387b"><code>128d9a8</code></a> chore: use GitHub Actions as git commit author in bump-trivy workflow (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/561">#561</a>)</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/876cf04c63f65e9799bcf1043b584e72469c7143"><code>876cf04</code></a> Upgrade Trivy action version from 0.33.1 to 0.35.0 fixes <a href="https://redirect.github.com/aquasecurity/trivy-action/issues/549">#549</a> (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/548">#548</a>)</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/dada78485d6b2b310d433af366da35a70cf01102"><code>dada784</code></a> Fix typo in GOOGLE_APPLICATION_CREDENTIALS env var name (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/547">#547</a>)</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/4a2deec9100bbbee6320e9a33fc9216b5e444e0b"><code>4a2deec</code></a> fix: use portable shebang in entrypoint.sh (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/545">#545</a>)</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/1994662b5555670344cd84d29ed3cad4bd26f31c"><code>1994662</code></a> chore(deps): bump the actions group with 5 updates (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/558">#558</a>)</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/6b36659d99b5bc1a27d44e8be2e3b007f91b033c"><code>6b36659</code></a> chore: add zizmor config (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/557">#557</a>)</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/316aa5aebe03b45a43ade3ec18d7b9c7f9ccb464"><code>316aa5a</code></a> ci: add dependabot config (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/556">#556</a>)</li> <li><a href="https://github.com/aquasecurity/trivy-action/commit/264c9c5e188ea085e7377fd77abd17bfbd4e5926"><code>264c9c5</code></a> test: use pinned digests for trivy-db, trivy-java-db and trivy-checks (<a href="https://redirect.github.com/aquasecurity/trivy-action/issues/555">#555</a>)</li> <li>Additional commits viewable in <a href="https://github.com/aquasecurity/trivy-action/compare/57a97c7e7821a5776cebc9bb87c984fa69cba8f1...ed142fd0673e97e23eac54620cfb913e5ce36c25">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…st/image (microsoft#2231) Bumps oss/go/microsoft/golang from `eb3ce81` to `d904c53`. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ntroller (microsoft#2232) Bumps oss/go/microsoft/golang from `eb3ce81` to `d904c53`. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…00.0 (microsoft#2238) Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) from 1.99.1 to 1.100.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/18fee87f2c0615b0e5c3f28f1b95af810a9e77b5"><code>18fee87</code></a> Release 2026-04-22</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/0ce157cd6b5427066ddb682a4967a3047230de4b"><code>0ce157c</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/68cdb4a02d56b9d932fbfed22660cfa64e815ef6"><code>68cdb4a</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/f399972fb759f6ffd315963de511da785ef408e6"><code>f399972</code></a> Bump Smithy from 1.67.0 to 1.69.0 (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3394">#3394</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/3c19a9b3eb17f48f6b9fc1cad644859d062775ad"><code>3c19a9b</code></a> Release 2026-04-21</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/1dfac3ec5a6c560e6fee389d0f1f364eb57ae616"><code>1dfac3e</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d842df6fcef5ecc94e2133cb1d96fac4926aadb4"><code>d842df6</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/ffeb52a25097274529920d8f91b4ca27f7b636a9"><code>ffeb52a</code></a> bump to latest smithy-go codegen (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3393">#3393</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/e839880e8d30897bd8a7684d83626d81f82c565a"><code>e839880</code></a> Release 2026-04-20</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/4c898c88577f4102793d3e15de05ad3b5b1e2ef5"><code>4c898c8</code></a> Regenerated Clients</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.99.1...service/s3/v1.100.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…105.0 (microsoft#2535) Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) from 1.104.2 to 1.105.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/fc087ca9c93f355ac25ad7d78cd1f60170424e0c"><code>fc087ca</code></a> Release 2026-07-06</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/a0dc66ef2b9f031cb3edefc4c9b20635294537ea"><code>a0dc66e</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/0e93979277a5678f5a47b407745d3b20b2300083"><code>0e93979</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/1e51eb5e75f504acee800c09b21f5b271d62c728"><code>1e51eb5</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/a4cd1c9dcbc1492cd27b72f2a21682d43dab7f40"><code>a4cd1c9</code></a> add serialization snapshot tests (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3463">#3463</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/8d5a855c81f3a632fcac37fbc67d65e114902efc"><code>8d5a855</code></a> set rollout strategy 2 (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3467">#3467</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/bdb96810ded2e8f93c329e2b3380543254b984a1"><code>bdb9681</code></a> Release 2026-07-02</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/dad37d5b8a86c70b41ba6eb26114db1b0566218a"><code>dad37d5</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/019a359cb7d5af2e9a8cffdaf5139797d4d382db"><code>019a359</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/c51ba98fbf1df116d7a9a3770a08788d11f6c480"><code>c51ba98</code></a> Update API model</li> <li>See full diff in <a href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.104.2...service/s3/v1.105.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Allow configuring the conntrack reporting interval as another performance tuning lever. microsoft#1760 - [X] I have read the [contributing documentation](https://retina.sh/docs/Contributing/overview). - [X] I signed and signed-off the commits (`git commit -S -s ...`). See [this documentation](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification) on signing commits. - [X] I have correctly attributed the author(s) of the code. - [X] I have tested the changes locally. - [X] I have followed the project's style guidelines. - [X] I have updated the documentation, if necessary. - [X] I have added tests, if applicable. Tested in a cluster with many connections where periodic reports contribute the majority of events, increasing the interval reports the same metrics with less dropped events and resource usage. --- Please refer to the [CONTRIBUTING.md](../CONTRIBUTING.md) file for more information on how to contribute to this project. Signed-off-by: Matthew McKeen <matthew.mckeen@fastly.com>
Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.37.0 to 0.38.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/mod/commit/792ac169a90372d88fb14e712cb793061ba0c104"><code>792ac16</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/mod/commit/fe2ec04f7c3c3aa6fad97631aafcff6e49e2d1db"><code>fe2ec04</code></a> all: fix some comments to improve readability</li> <li>See full diff in <a href="https://github.com/golang/mod/compare/v0.37.0...v0.38.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
# Description
This PR migrates all GH workflows using FIC to Azure Pipelines due to
internal policy changes regarding FIC in GH.
It adds 3 pipelines under `.azure-pipelines` that mirrors today's GH
workflows:
| ADO Pipeline | Mirrors |
| :--- | :--- |
| `ci.yml` | `images.yaml` (build + manifests + e2e + perf-basics +
perf-advanced on merge-queue) |
| `scale.yml` | `daily-scale-test.yaml` + `scale-test.yaml` (daily cron
+ manual) |
| `perf.yml` | `perf-schedule.yaml` + `perf-manual.yaml` +
`perf-template.yaml` (twice-daily cron + manual) |
Bash bodies inside each `AzureCLI@2` task are copied verbatim from the
existing GH workflows. Only the outer scaffolding is rewritten to ADO
YAML schema (different from GH Actions YAML)
Also added:
- `setup-go.yml`: parses the Go version from `go.mod` (ADO's `GoTool@0`
doesn't natively support `from go.mod` like GH's `setup-go@v6`).
- `free-disk-space.yml`: reclaims ~30GB of pre-installed toolchains on
agents (needed to avoid lack of space for large image builds).
> Nothing in `workflows` is deleted or disabled by this PR. Both
pipelines are available to run in parallel at this stage. A new PR will
be raised to remove old workflows.
### What this PR does NOT do (deferred to a follow-up PR)
- Branch protection changes. Required checks still point at the GH
workflows. Once ADO pipelines are validated, a subsequent admin action +
PR will:
- Add workflows to required status checks.
- Remove the corresponding GH Actions checks.
- Delete the FIC-using workflow files: `images.yaml`, `e2e.yaml`,
`perf-template.yaml`, `scale-test.yaml`, `daily-scale-test.yaml`,
`perf-manual.yaml`, `perf-schedule.yaml`.
- Secret / var cleanup.
### Behavior parity with today's GH workflows
The ADO pipelines match today's semantics exactly on all these axes:
- Triggers. `ci.yml` fires on merge-queue pushes
(`gh-readonly-queue/main/*`) and PRs targeting main. Scale/perf fire on
their existing crons.
- Merge-queue gating. ACR push, APP_INSIGHTS_ID embedding, and the
manifests/e2e/perf jobs only run when isMergeGroup=True (mirrors GH's
if: ${{ github.event_name == 'merge_group' }} gate). PR builds and
manual queues run as dry-run.
- Fork PRs. The three pipelines are configured with "Disable building
pull requests from forked GitHub repositories" — same fork-safety
posture as today's FIC-gated jobs (which never ran on fork PRs).
- Image tag. Both build and consumer use $(make version). The migration
proactively fixed a latent tag-mismatch bug (see below).
### Required side-effect changes to retina source
Because ADO doesn't have ARM64 agents, arm64 image builds have to
cross-compile from amd64 hosts. Retina's Dockerfiles have latent bugs /
assumptions that only surface on cross-compile (native ARM64 CI on GH
has always masked them since PR microsoft#2059 introduced systemcrypto/CGO). This
PR includes minimal fixes:
| Change | Reason |
| :--- | :--- |
| `operator/Dockerfile`, `cli/Dockerfile`: dropped
`--platform=$BUILDPLATFORM` from final image stages | Otherwise
arm64-built binaries got copied into amd64 base images (wrong arch →
exec format error). |
| `operator/Dockerfile`, `cli/Dockerfile`, `controller/Dockerfile`:
added `ENV GOEXPERIMENT=ms_nocgo_opensslcrypto` in builder stages |
Microsoft Go's default `systemcrypto` requires `CGO_ENABLED=1`, but Go
auto-disables CGO when cross-compiling. This experiment (documented in
Microsoft Go MigrationGuide) enables the cgo-less OpenSSL backend so
systemcrypto works with `CGO_ENABLED=0`. Auto-selected in Go 1.27+; env
var can be removed then. |
| `operator/Dockerfile`: `RUN make manifests` wrapped in `env -u GOOS -u
GOARCH` | `make manifests` shells out to `controller-gen` — a build-time
host tool, not the target binary. Without unset, it cross-compiled to
arm64 and failed to `exec` on the amd64 builder. |
| `controller/Dockerfile`: split intermediate into two stages — new
`bpf-gen` at `$TARGETPLATFORM`, existing intermediate stays at
`$BUILDPLATFORM` | Retina's `//go:generate bpf2go -target ${GOARCH}`
directives require target-arch execution (bpf2go invokes clang; can't
cleanly cross-compile bpf2go itself). Split isolates that one
requirement to a small emulated stage while keeping the Go build fast at
$BUILDPLATFORM. Restores fast arm64 build without breaking bpf .o file
generation. |
> Impact on amd64 builds: zero — all these changes are inert when host
== target (CGO stays enabled, no cross-compile, bpf-gen runs natively).
### Tag consistency fix
The migration surfaced a pre-existing latent bug: `make retina-image` /
`make manifest` didn't have `TAG` set by CI, so the Makefile fell back
to `git describe --tags --always` (produces `v1.2.2-76-geade8685`),
while all consumers (`e2e`, `perf-*`, `scale`) used make version
(produces the 7-char SHA). Images were pushed under one tag, consumers
looked for another. GH masked it because actions/checkout defaults to
shallow (no tags, so git describe also falls back to short SHA); ADO
defaults to full-clone.
ADO pipelines now pass `TAG=$(make version)` explicitly to every `make`
invocation, ensuring builder and consumer speak the same tag string on
both platforms.
### Temporary items in this PR (will be reverted after cutover)
- `forceMergeGroup` pipeline parameter in `ci.yml`. Boolean checkbox in
the "Run pipeline" UI that treats a manual queue as if it were a
merge-queue event (push + telemetry + full test suite). Default `false`,
safe. Used during dark-launch to validate the full flow without needing
an actual merge-queue event. Revert once we've moved past validation.
### Verification
- manual run of pipelines completed successfully
## Checklist
- [ ] I have read the [contributing
documentation](https://retina.sh/docs/Contributing/overview).
- [ ] I signed and signed-off the commits (`git commit -S -s ...`). See
[this
documentation](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification)
on signing commits.
- [ ] I have correctly attributed the author(s) of the code.
- [ ] I have tested the changes locally.
- [ ] I have followed the project's style guidelines.
- [ ] I have updated the documentation, if necessary.
- [ ] I have added tests, if applicable.
## Screenshots (if applicable) or Testing Completed
Please add any relevant screenshots or GIFs to showcase the changes
made.
## Additional Notes
Add any additional notes or context about the pull request here.
---
Please refer to the [CONTRIBUTING.md](../CONTRIBUTING.md) file for more
information on how to contribute to this project.
---------
Signed-off-by: Alex Castilio dos Santos <alexsantos@microsoft.com>
…icrosoft#2540) Bumps the golang-base group with 1 update in the /cli directory: oss/go/microsoft/golang. Bumps the golang-base group with 1 update in the /controller directory: oss/go/microsoft/golang. Bumps the golang-base group with 1 update in the /hack/tools/kapinger directory: oss/go/microsoft/golang. Bumps the golang-base group with 1 update in the /hack/tools/toolbox directory: oss/go/microsoft/golang. Bumps the golang-base group with 1 update in the /operator directory: oss/go/microsoft/golang. Bumps the golang-base group with 1 update in the /test/image directory: oss/go/microsoft/golang. Updates `oss/go/microsoft/golang` from 1.26.4-1-azurelinux3.0 to 1.26.5-1-azurelinux3.0 Updates `oss/go/microsoft/golang` from 1.26.4-1-windowsservercore-ltsc2022 to 1.26.5-1-windowsservercore-ltsc2022 Updates `oss/go/microsoft/golang` from 1.26.4-1 to 1.26.5-1 Updates `oss/go/microsoft/golang` from 1.26.4-1 to 1.26.5-1 Updates `oss/go/microsoft/golang` from 1.26.4-1-azurelinux3.0 to 1.26.5-1-azurelinux3.0 Updates `oss/go/microsoft/golang` from 1.26.4-1-azurelinux3.0 to 1.26.5-1-azurelinux3.0 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
) Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.4 to 0.7.5. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md">websocket-driver's changelog</a>.</em></p> <blockquote> <h3>0.7.5 / 2026-06-04</h3> <ul> <li>Close a draft-75/76 connection if a length header grows to exceed the configured max length</li> <li>Fail the connection if a message is larger than the configured max length after extension processing</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/faye/websocket-driver-node/commit/5d6a9aaf5f019007d917bd9ddc7eeb775c86cc1f"><code>5d6a9aa</code></a> Bump version to 0.7.5</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/c55679a5b18251dd0a55d18a0cc6a4fd8822b92f"><code>c55679a</code></a> Fail the connection if a message is larger than the configured max length aft...</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/5b197ca874dab58e96cacad8a3c256797d804680"><code>5b197ca</code></a> Close a draft-75/76 connection if a length header grows to exceed the configu...</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/fc93a48f879d0fd4a77c687a4a19c4328613df65"><code>fc93a48</code></a> Test on Node v22, v24, and v26</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/2e82d3464d294bdd11202657208636e667212335"><code>2e82d34</code></a> Test on recent versions of Node</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/e4962db9940ad1a8cf6fe8328d3b81c3f8c37479"><code>e4962db</code></a> Switch from Travis CI to GitHub Actions</li> <li><a href="https://github.com/faye/websocket-driver-node/commit/3f2f9b70a8ae999b4657d26316a5d45b7caea679"><code>3f2f9b7</code></a> Travis update: cache npm modules, remove sudo, run on Node 15</li> <li>See full diff in <a href="https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/retina/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <h3>Enhancements:</h3> <ul> <li>Add cache-primary-key and cache-matched-key as outputs by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>Remove dummy NODE_AUTH_TOKEN export by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li> <li>Only use <code>mirrorToken</code> in <code>getManifest</code> if it's provided by <a href="https://github.com/deiga"><code>@deiga</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li> </ul> <h3>Documentation updates:</h3> <ul> <li>Add documentation for publishing to npm with Trusted Publisher (OIDC) by <a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li> <li>docs: Update restore-only cache documentation by <a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li> <li>docs: Update caching recommendations to mitigate cache poisoning risks by <a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li> </ul> <h3>Dependency update:</h3> <ul> <li>Upgrade <code>@actions/cache</code> to 5.1.0, log cache write denied by <a href="https://github.com/jasongin"><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li> <li><a href="https://github.com/deiga"><code>@deiga</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li> <li><a href="https://github.com/jasongin"><code>@jasongin</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p> <h2>v6.5.0</h2> <h2>What's Changed</h2> <ul> <li>Update <code>@actions/cache</code> to 5.1.0 and add security overrides for undici and fast-xml-parser by <a href="https://github.com/HarithaVattikuti"><code>@HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020"><code>8207627</code></a> Migrate to ESM and upgrade dependencies (<a href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4"><code>04be95c</code></a> Add cache-primary-key and cache-matched-key as outputs (<a href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140"><code>7c2c68d</code></a> docs: Update caching recommendations to mitigate cache poisoning risks (<a href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d"><code>6a61c03</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a> from jasongin/update-actions-cache-5.1.0</li> <li><a href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f"><code>30eb73b</code></a> Resolve high-severity audit issues</li> <li><a href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f"><code>4e1a87a</code></a> Update dist</li> <li><a href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574"><code>360237f</code></a> Strict equality</li> <li><a href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3"><code>4f8aac5</code></a> Bump <code>@actions/cache</code> to 5.1.0, log cache write denied</li> <li><a href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980"><code>f4a67bb</code></a> Only use <code>mirrorToken</code> in <code>getManifest</code> if it's provided (<a href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75"><code>0355742</code></a> Remove dummy NODE_AUTH_TOKEN export (<a href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the aws-sdk group with 2 updates: [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) and [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2). Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.28 to 1.32.29 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/ed75d3d097568d903f639876299d03241605fd7c"><code>ed75d3d</code></a> Release 2026-07-08.2</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d67404a5e5ee30a469b0823fb493ca9961107d92"><code>d67404a</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/8a21e0976a42f7c28934d0782ad49388fdd4c9d3"><code>8a21e09</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/cb69824f6c68e6fe0144def8e757be46ad4cfcbb"><code>cb69824</code></a> Release 2026-07-08</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/0f18a1fc3762f1f42337e32c37e4a30a51254f8b"><code>0f18a1f</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/982e0d00ad41cbd01ff073cb46c8358887c31e4b"><code>982e0d0</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2872baecbf12283d444219e48940142ee6f28c08"><code>2872bae</code></a> Add missing options.RequestChecksumCalculation (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3470">#3470</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/ef1f0feba0ff99de62b7dd7916dcd4bd459c766c"><code>ef1f0fe</code></a> fix(feature/s3/transfermanager): allow multiple symlinks to share the same ta...</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/0df1b91ba8f02e9de847523efed547b2427e4ba6"><code>0df1b91</code></a> Release 2026-07-07</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/b4ef7306d81dee7c2a3e4016466f826037298767"><code>b4ef730</code></a> Regenerated Clients</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.28...config/v1.32.29">compare view</a></li> </ul> </details> <br /> Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.27 to 1.19.28 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/ed75d3d097568d903f639876299d03241605fd7c"><code>ed75d3d</code></a> Release 2026-07-08.2</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d67404a5e5ee30a469b0823fb493ca9961107d92"><code>d67404a</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/8a21e0976a42f7c28934d0782ad49388fdd4c9d3"><code>8a21e09</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/cb69824f6c68e6fe0144def8e757be46ad4cfcbb"><code>cb69824</code></a> Release 2026-07-08</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/0f18a1fc3762f1f42337e32c37e4a30a51254f8b"><code>0f18a1f</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/982e0d00ad41cbd01ff073cb46c8358887c31e4b"><code>982e0d0</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2872baecbf12283d444219e48940142ee6f28c08"><code>2872bae</code></a> Add missing options.RequestChecksumCalculation (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3470">#3470</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/ef1f0feba0ff99de62b7dd7916dcd4bd459c766c"><code>ef1f0fe</code></a> fix(feature/s3/transfermanager): allow multiple symlinks to share the same ta...</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/0df1b91ba8f02e9de847523efed547b2427e4ba6"><code>0df1b91</code></a> Release 2026-07-07</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/b4ef7306d81dee7c2a3e4016466f826037298767"><code>b4ef730</code></a> Regenerated Clients</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.27...credentials/v1.19.28">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…icrosoft#2546) Bumps the golang-base group with 1 update in the /cli directory: oss/go/microsoft/golang. Bumps the golang-base group with 1 update in the /controller directory: oss/go/microsoft/golang. Bumps the golang-base group with 1 update in the /hack/tools/kapinger directory: oss/go/microsoft/golang. Bumps the golang-base group with 1 update in the /hack/tools/toolbox directory: oss/go/microsoft/golang. Bumps the golang-base group with 1 update in the /operator directory: oss/go/microsoft/golang. Bumps the golang-base group with 1 update in the /test/image directory: oss/go/microsoft/golang. Updates `oss/go/microsoft/golang` from 1.26.5-1-azurelinux3.0 to 1.26.5-2-azurelinux3.0 Updates `oss/go/microsoft/golang` from 1.26.5-1-windowsservercore-ltsc2022 to 1.26.5-2-windowsservercore-ltsc2022 Updates `oss/go/microsoft/golang` from 1.26.5-1 to 1.26.5-2 Updates `oss/go/microsoft/golang` from 1.26.5-1 to 1.26.5-2 Updates `oss/go/microsoft/golang` from 1.26.5-1-azurelinux3.0 to 1.26.5-2-azurelinux3.0 Updates `oss/go/microsoft/golang` from 1.26.5-1-azurelinux3.0 to 1.26.5-2-azurelinux3.0 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…oft#2545) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.69.0 to 0.70.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/releases">github.com/prometheus/common's releases</a>.</em></p> <blockquote> <h2>v0.70.0</h2> <h2>What's Changed</h2> <ul> <li>config: fix TLSVersion.String() printing pointer address by <a href="https://github.com/s3onghyun"><code>@s3onghyun</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/929">prometheus/common#929</a></li> <li>build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/933">prometheus/common#933</a></li> <li>Manually go mod tidy by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/934">prometheus/common#934</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/937">prometheus/common#937</a></li> <li>route: add support for the QUERY HTTP method by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/932">prometheus/common#932</a></li> <li>Combine and extend Prometheus text and OpenMetrics 1.0 encoder benchmarks by <a href="https://github.com/dashpole"><code>@dashpole</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/943">prometheus/common#943</a></li> <li>build(deps): bump the codeql group with 4 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/938">prometheus/common#938</a></li> <li>build(deps): bump actions/setup-go from 6.2.0 to 6.5.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/940">prometheus/common#940</a></li> <li>build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/942">prometheus/common#942</a></li> <li>build(deps): bump ossf/scorecard-action from 2.1.2 to 2.4.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/939">prometheus/common#939</a></li> <li>build(deps): bump actions/checkout from 3.1.0 to 7.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/941">prometheus/common#941</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/s3onghyun"><code>@s3onghyun</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/929">prometheus/common#929</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.69.0...v0.70.0">https://github.com/prometheus/common/compare/v0.69.0...v0.70.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/blob/main/CHANGELOG.md">github.com/prometheus/common's changelog</a>.</em></p> <blockquote> <h2>v0.70.0 / 2026-07-10</h2> <h3>Enhancements</h3> <ul> <li>route: add support for the QUERY HTTP method. <a href="https://redirect.github.com/prometheus/common/issues/932">#932</a></li> </ul> <h3>Bugfixes</h3> <ul> <li>config: fix <code>TLSVersion.String()</code> printing a pointer address instead of the numeric version for unknown TLS versions. <a href="https://redirect.github.com/prometheus/common/issues/929">#929</a></li> </ul> <h3>Internal</h3> <ul> <li>expfmt: add <code>BenchmarkConvertMetricFamily</code> comparing the Prometheus text and OpenMetrics 1.0 encoders. <a href="https://redirect.github.com/prometheus/common/issues/943">#943</a></li> <li>Update Go dependencies. <a href="https://redirect.github.com/prometheus/common/issues/933">#933</a> <a href="https://redirect.github.com/prometheus/common/issues/934">#934</a></li> <li>Synchronize common files from prometheus/prometheus. <a href="https://redirect.github.com/prometheus/common/issues/923">#923</a> <a href="https://redirect.github.com/prometheus/common/issues/927">#927</a> <a href="https://redirect.github.com/prometheus/common/issues/930">#930</a> <a href="https://redirect.github.com/prometheus/common/issues/937">#937</a></li> <li>Update GitHub Actions. <a href="https://redirect.github.com/prometheus/common/issues/938">#938</a> <a href="https://redirect.github.com/prometheus/common/issues/939">#939</a> <a href="https://redirect.github.com/prometheus/common/issues/940">#940</a> <a href="https://redirect.github.com/prometheus/common/issues/941">#941</a> <a href="https://redirect.github.com/prometheus/common/issues/942">#942</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.69.0...v0.70.0">https://github.com/prometheus/common/compare/v0.69.0...v0.70.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/common/commit/5eff7a827920b6f175ea02b222f7c827a0fe80ad"><code>5eff7a8</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/941">#941</a> from prometheus/dependabot/github_actions/actions/che...</li> <li><a href="https://github.com/prometheus/common/commit/a23c5b344ad9200c0073133920fe60a9882c9d28"><code>a23c5b3</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/939">#939</a> from prometheus/dependabot/github_actions/ossf/scorec...</li> <li><a href="https://github.com/prometheus/common/commit/9e1eb871ced38b03648a38558ac3de66edeff2b5"><code>9e1eb87</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/942">#942</a> from prometheus/dependabot/github_actions/actions/upl...</li> <li><a href="https://github.com/prometheus/common/commit/ab2736d28a9fce77b0186e36b5d3318b74115298"><code>ab2736d</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/940">#940</a> from prometheus/dependabot/github_actions/actions/set...</li> <li><a href="https://github.com/prometheus/common/commit/e596873192a72855876b1c38cdb634bb73f5ba00"><code>e596873</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/938">#938</a> from prometheus/dependabot/github_actions/codeql-ac07...</li> <li><a href="https://github.com/prometheus/common/commit/97c066a87b2345f146b345141f0f14aaab7ad387"><code>97c066a</code></a> Add BenchmarkConvertMetricFamily comparing Prometheus text and OpenMetrics 1....</li> <li><a href="https://github.com/prometheus/common/commit/62e9d0f61d355b574225f66628a5f94be2bc1c29"><code>62e9d0f</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/common/issues/932">#932</a> from roidelapluie/roidelapluie/route-query</li> <li><a href="https://github.com/prometheus/common/commit/6c312397a5da723c995ee9c16263f252c1d6b4a1"><code>6c31239</code></a> build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1</li> <li><a href="https://github.com/prometheus/common/commit/755e9d686dec00400191cc8483872831aff1b9cd"><code>755e9d6</code></a> build(deps): bump actions/checkout from 3.1.0 to 7.0.0</li> <li><a href="https://github.com/prometheus/common/commit/556d7402ea9a80cab60297e4dc98149b5410e24f"><code>556d740</code></a> build(deps): bump actions/setup-go from 6.2.0 to 6.5.0</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/common/compare/v0.69.0...v0.70.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the docusaurus group in /site with 7 updates: | Package | From | To | | --- | --- | --- | | [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus) | `3.10.1` | `3.10.2` | | [@docusaurus/plugin-client-redirects](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects) | `3.10.1` | `3.10.2` | | [@docusaurus/plugin-ideal-image](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image) | `3.10.1` | `3.10.2` | | [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic) | `3.10.1` | `3.10.2` | | [@docusaurus/module-type-aliases](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases) | `3.10.1` | `3.10.2` | | [@docusaurus/tsconfig](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig) | `3.10.1` | `3.10.2` | | [@docusaurus/types](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-types) | `3.10.1` | `3.10.2` | Updates `@docusaurus/core` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/core's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/core's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li><a href="https://github.com/facebook/docusaurus/commit/2f5389d1fa4c1801d7bfe6ec13e9317cec449935"><code>2f5389d</code></a> chore: cherry-pick commits for v3.10.2 patch release (<a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus/issues/12265">#12265</a>)</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus">compare view</a></li> </ul> </details> <br /> Updates `@docusaurus/plugin-client-redirects` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/plugin-client-redirects's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/plugin-client-redirects's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-client-redirects/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-plugin-client-redirects">compare view</a></li> </ul> </details> <br /> Updates `@docusaurus/plugin-ideal-image` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/plugin-ideal-image's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/plugin-ideal-image's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-plugin-ideal-image">compare view</a></li> </ul> </details> <br /> Updates `@docusaurus/preset-classic` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/preset-classic's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/preset-classic's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-preset-classic">compare view</a></li> </ul> </details> <br /> Updates `@docusaurus/module-type-aliases` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/module-type-aliases's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/module-type-aliases's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-module-type-aliases">compare view</a></li> </ul> </details> <br /> Updates `@docusaurus/tsconfig` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/tsconfig's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md">@docusaurus/tsconfig's changelog</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport and cherry-pick commits from main for v3.10.2 patch release:</p> <ul> <li>[fix(bundler): do not import <code>@swc/html</code>, fix StackBlitz playground <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12055">#12055</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12055">facebook/docusaurus#12055</a>)</li> <li>[fix(core): use locale url in site config <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12054">#12054</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12054">facebook/docusaurus#12054</a>)</li> <li>[fix(theme-classic): remove redundant sidebar label titles <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/11966">#11966</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11966">facebook/docusaurus#11966</a>)</li> <li>[fix(mdx-loader): avoid transforming dotted directory links into asset… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/11944">#11944</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/11944">facebook/docusaurus#11944</a>)</li> <li>[fix(dev-server): for HTTPS, support non-RSA TLS certs <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12065">#12065</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12065">facebook/docusaurus#12065</a>)</li> <li>[fix(utils): fix <code>extractLeadingEmoji()</code> edge cases <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12100">#12100</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12100">facebook/docusaurus#12100</a>)</li> <li>[fix(gtag.js, faster): Fix StackBlitz, vendor <code>@types/gtag.js</code>, upgrade <code>@swc/html</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12080">#12080</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12080">facebook/docusaurus#12080</a>)</li> <li>[fix(create-docusaurus): init template README should use npm commands by default <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12138">#12138</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12138">facebook/docusaurus#12138</a>)</li> <li>[fix(cli): <code>docusaurus serve</code> should pass <code>--host</code> to <code>server.listen()</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12127">#12127</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12127">facebook/docusaurus#12127</a>)</li> <li>[fix(core): bump detect-port to v2.1, fix pnpm <code>trustPolicy</code> downgrade issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12012">#12012</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12012">facebook/docusaurus#12012</a>)</li> <li>[fix(i18n): complete Spanish translations for theme-common and theme-l… <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12180">#12180</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12180">facebook/docusaurus#12180</a>)</li> <li>[chore(deps): migrate to <code>@11ty/gray-matter</code> <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12181">#12181</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12181">facebook/docusaurus#12181</a>)</li> <li>[fix(core): fix BaseUrlIssueBanner little security issue <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12260">#12260</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12260">facebook/docusaurus#12260</a>)</li> <li>[fix(core): accept boolean attributes in headTags config validation <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12238">#12238</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12238">facebook/docusaurus#12238</a>)</li> <li>[fix(sitemap): don't drop lastmod for an epoch (0) timestamp <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12212">#12212</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12212">facebook/docusaurus#12212</a>)</li> <li>[fix(utils): preserve author names containing commas in git log parsing <a href="https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-tsconfig/issues/12069">#12069</a>](<a href="https://redirect.github.com/facebook/docusaurus/pull/12069">facebook/docusaurus#12069</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/docusaurus/commit/f37f9035584917a97a260b91fc2842cba4f8b94f"><code>f37f903</code></a> v3.10.2</li> <li>See full diff in <a href="https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-tsconfig">compare view</a></li> </ul> </details> <br /> Updates `@docusaurus/types` from 3.10.1 to 3.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/docusaurus/releases">@docusaurus/types's releases</a>.</em></p> <blockquote> <h2>3.10.2 (2026-07-10)</h2> <p>Backport an…
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.5.0 to 7.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-go/releases">actions/setup-go's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/priyagupta108"><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/763">actions/setup-go#763</a></li> <li>chore(deps): bump <code>@actions/cache</code> to 6.2.0 by <a href="https://github.com/philip-gai"><code>@philip-gai</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/771">actions/setup-go#771</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/philip-gai"><code>@philip-gai</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/771">actions/setup-go#771</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-go/compare/v6...v7.0.0">https://github.com/actions/setup-go/compare/v6...v7.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-go/commit/b7ad1dad31e06c5925ef5d2fc7ad053ef454303e"><code>b7ad1da</code></a> chore(deps): bump <code>@actions/cache</code> to 6.2.0 (<a href="https://redirect.github.com/actions/setup-go/issues/771">#771</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/0778a10ce47b5d450cf60fb94fafad4330008a35"><code>0778a10</code></a> Migrate to ESM and upgrade dependencies (<a href="https://redirect.github.com/actions/setup-go/issues/763">#763</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-go/compare/924ae3a1cded613372ab5595356fb5720e22ba16...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…microsoft#2549) Bumps the windows-base group with 2 updates in the /controller directory: windows/servercore and windows/nanoserver. Bumps the windows-base group with 1 update in the /hack/tools/kapinger directory: windows/servercore. Bumps the windows-base group with 1 update in the /operator directory: windows/nanoserver. Updates `windows/servercore` from `a23b350` to `b841bb0` Updates `windows/nanoserver` from `7644d94` to `93efcae` Updates `windows/servercore` from `a23b350` to `b841bb0` Updates `windows/nanoserver` from `7644d94` to `93efcae` Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… the actions-patch group (microsoft#2550) Bumps the actions-patch group with 1 update: [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/upload-sarif` from 4.37.0 to 4.37.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/upload-sarif's releases</a>.</em></p> <blockquote> <h2>v4.37.1</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/upload-sarif's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.37.1 - 16 Jul 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li> </ul> <h2>4.37.0 - 08 Jul 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/7188fc363630916deb702c7fdcf4e481b751f97a"><code>7188fc3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4020">#4020</a> from github/update-v4.37.1-9e7c07009</li> <li><a href="https://github.com/github/codeql-action/commit/c8b5f69be686908c3dfd844428137d56fe80c936"><code>c8b5f69</code></a> Update changelog for v4.37.1</li> <li><a href="https://github.com/github/codeql-action/commit/9e7c070092090e89e8b3d62f977d4456e0732cd7"><code>9e7c070</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4014">#4014</a> from github/mbg/explicit-remote-prefix</li> <li><a href="https://github.com/github/codeql-action/commit/3492b7e9ab96e28b1d8b971345d30e929c6f8fee"><code>3492b7e</code></a> Change <code>REMOTE_PATH_PREFIX</code> to <code>remote=</code></li> <li><a href="https://github.com/github/codeql-action/commit/3654baa924bc6456db54002581cb7c1c877548c4"><code>3654baa</code></a> Merge remote-tracking branch 'origin/main' into mbg/explicit-remote-prefix</li> <li><a href="https://github.com/github/codeql-action/commit/2d682ac05f1b3588aaff3814826bede39b9ba6bb"><code>2d682ac</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4017">#4017</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/23f6a50753a88efd9b7ae8687b29f6bdb65f6250"><code>23f6a50</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4009">#4009</a> from github/mbg/action-state/additions</li> <li><a href="https://github.com/github/codeql-action/commit/1ee3c75d1988ab8621f01ebb165115c38d56df91"><code>1ee3c75</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4018">#4018</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/e053684dc500899b0b5520edc8549ac0f1ed730b"><code>e053684</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4015">#4015</a> from github/dependabot/npm_and_yarn/npm-minor-fd2e83...</li> <li><a href="https://github.com/github/codeql-action/commit/6803c5671d2f87a83ed96e151c441b1cb3bdc66a"><code>6803c56</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4019">#4019</a> from github/update-bundle/codeql-bundle-v2.26.1</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…te (microsoft#2555) Bumps the azurelinux-base group with 1 update in the /cli directory: azurelinux/base/core. Bumps the azurelinux-base group with 1 update in the /controller directory: azurelinux/base/core. Bumps the azurelinux-base group with 1 update in the /shell directory: azurelinux/base/core. Updates `azurelinux/base/core` from 3.0.20260706 to 3.0.20260711 Updates `azurelinux/base/core` from 3.0.20260706 to 3.0.20260711 Updates `azurelinux/base/core` from 3.0.20260706 to 3.0.20260711 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the aws-sdk group with 3 updates: [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2), [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) and [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2). Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.29 to 1.32.30 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2704503be74c5f1c49b2fb5d1c9cb46b5fabcdb2"><code>2704503</code></a> Release 2026-07-13</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2475fc6b28465173bdef88cff5e0bbbdb6f1b24d"><code>2475fc6</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/89ce46e6351004d830a5481d1e639fac3b6586c3"><code>89ce46e</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/97a7b5555b92bd932b977998bbeb205f2984a1c1"><code>97a7b55</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/472756aa53e9edf3369d69bb3cdd66b3908f984c"><code>472756a</code></a> add response snapshot tests for new wave 1 (partial cbor) (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3471">#3471</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/3133b1d537ced4144103b33460fe73c7082a62bf"><code>3133b1d</code></a> Release 2026-07-10</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2d7d0f831cdfb369f7698de45c0d6f8f74f6ca7c"><code>2d7d0f8</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/cdc7fe361da37345462ad00d03273464fd0b7220"><code>cdc7fe3</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d41266e1451258cb008c87cd1a7d807e079f188a"><code>d41266e</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d7ac1fcd9fbf2c1a288b148c2292db01c8a3cd22"><code>d7ac1fc</code></a> Release 2026-07-09</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.29...config/v1.32.30">compare view</a></li> </ul> </details> <br /> Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.28 to 1.19.29 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2704503be74c5f1c49b2fb5d1c9cb46b5fabcdb2"><code>2704503</code></a> Release 2026-07-13</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2475fc6b28465173bdef88cff5e0bbbdb6f1b24d"><code>2475fc6</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/89ce46e6351004d830a5481d1e639fac3b6586c3"><code>89ce46e</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/97a7b5555b92bd932b977998bbeb205f2984a1c1"><code>97a7b55</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/472756aa53e9edf3369d69bb3cdd66b3908f984c"><code>472756a</code></a> add response snapshot tests for new wave 1 (partial cbor) (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3471">#3471</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/3133b1d537ced4144103b33460fe73c7082a62bf"><code>3133b1d</code></a> Release 2026-07-10</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2d7d0f831cdfb369f7698de45c0d6f8f74f6ca7c"><code>2d7d0f8</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/cdc7fe361da37345462ad00d03273464fd0b7220"><code>cdc7fe3</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d41266e1451258cb008c87cd1a7d807e079f188a"><code>d41266e</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d7ac1fcd9fbf2c1a288b148c2292db01c8a3cd22"><code>d7ac1fc</code></a> Release 2026-07-09</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.28...credentials/v1.19.29">compare view</a></li> </ul> </details> <br /> Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.105.0 to 1.105.1 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2704503be74c5f1c49b2fb5d1c9cb46b5fabcdb2"><code>2704503</code></a> Release 2026-07-13</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2475fc6b28465173bdef88cff5e0bbbdb6f1b24d"><code>2475fc6</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/89ce46e6351004d830a5481d1e639fac3b6586c3"><code>89ce46e</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/97a7b5555b92bd932b977998bbeb205f2984a1c1"><code>97a7b55</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/472756aa53e9edf3369d69bb3cdd66b3908f984c"><code>472756a</code></a> add response snapshot tests for new wave 1 (partial cbor) (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3471">#3471</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/3133b1d537ced4144103b33460fe73c7082a62bf"><code>3133b1d</code></a> Release 2026-07-10</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2d7d0f831cdfb369f7698de45c0d6f8f74f6ca7c"><code>2d7d0f8</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/cdc7fe361da37345462ad00d03273464fd0b7220"><code>cdc7fe3</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d41266e1451258cb008c87cd1a7d807e079f188a"><code>d41266e</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/d7ac1fcd9fbf2c1a288b148c2292db01c8a3cd22"><code>d7ac1fc</code></a> Release 2026-07-09</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.105.0...service/s3/v1.105.1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…to 0.21.4 in the azure-sdk group (microsoft#2557) Bumps the azure-sdk group with 1 update: [sigs.k8s.io/cloud-provider-azure/pkg/azclient](https://github.com/kubernetes-sigs/cloud-provider-azure). Updates `sigs.k8s.io/cloud-provider-azure/pkg/azclient` from 0.21.3 to 0.21.4 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/d511ccda14efa524956d33c53335fb9361673f9a"><code>d511ccd</code></a> build(deps): bump the all group in /pkg/azclient with 3 updates (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10673">#10673</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/1a072ca8d4856253e328d7a56f7907ad30dd8539"><code>1a072ca</code></a> docs: make dependabot unblocker failure list pluggable (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10649">#10649</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/da71e3b50f850da790556e1022d287fad567304b"><code>da71e3b</code></a> build(deps): bump golang.org/x/crypto in /kubetest2-aks (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10669">#10669</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/98fbca797405dade91f7cc86e8e4d17f328c1e92"><code>98fbca7</code></a> build(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 in the all group (#...</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/dc94250cb3e8f5b25b2c955b8279f367c2b30fd3"><code>dc94250</code></a> build(deps): bump the all group with 3 updates (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10657">#10657</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/b54f47813c93d4486954faee6e14d93c953da24b"><code>b54f478</code></a> build(deps): bump sigs.k8s.io/cloud-provider-azure/pkg/azclient (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10652">#10652</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/4381c486d17225c53c08a460bcc1ba2fabedd2f1"><code>4381c48</code></a> build(deps): bump golang.org/x/net in /health-probe-proxy (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10634">#10634</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/21e8d3b9fb59f4e474d46c41fc3640846dfa3070"><code>21e8d3b</code></a> Add servicegateway package skeleton with OWNERS (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10647">#10647</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/2eb70f842d01bd10b28d77f3c1d5cb685a4b4add"><code>2eb70f8</code></a> build(deps): bump k8s.io/component-base (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10399">#10399</a>)</li> <li><a href="https://github.com/kubernetes-sigs/cloud-provider-azure/commit/e205c9062de80f9783572a25ba39d964b03a3605"><code>e205c90</code></a> Add toleration on VM shown up delay in ARM/ARG for new nodes (<a href="https://redirect.github.com/kubernetes-sigs/cloud-provider-azure/issues/10605">#10605</a>)</li> <li>Additional commits viewable in <a href="https://github.com/kubernetes-sigs/cloud-provider-azure/compare/pkg/azclient/v0.21.3...pkg/azclient/v0.21.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…group (microsoft#2558) Bumps the actions-patch group with 1 update: [actions/checkout](https://github.com/actions/checkout). Updates `actions/checkout` from 7.0.0 to 7.0.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.1</h2> <h2>What's Changed</h2> <ul> <li>skip running unsafe pr check if input is default by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li> <li>trim only ascii whitespace for branch by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li> <li>escape values passed to --unset by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li> <li>Various dependency updates</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v7...v7.0.1">https://github.com/actions/checkout/compare/v7...v7.0.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v7.0.1</h2> <ul> <li>Skip running unsafe pr check if input is default by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li> <li>Trim only ascii whitespace for branch by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li> <li>Escape values passed to --unset by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li> <li>Various dependency updates</li> </ul> <h2>v7.0.0</h2> <ul> <li>Block checking out fork PR for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Various dependency updates</li> </ul> <h2>v6.0.3</h2> <ul> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1"><code>3d3c42e</code></a> prep v7.0.1 release (<a href="https://redirect.github.com/actions/checkout/issues/2531">#2531</a>)</li> <li><a href="https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07"><code>2880268</code></a> escape values passed to --unset (<a href="https://redirect.github.com/actions/checkout/issues/2530">#2530</a>)</li> <li><a href="https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1"><code>12cd223</code></a> trim only ascii whitespace for branch (<a href="https://redirect.github.com/actions/checkout/issues/2521">#2521</a>)</li> <li><a href="https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541"><code>62661c4</code></a> skip running unsafe pr check if input is default (<a href="https://redirect.github.com/actions/checkout/issues/2518">#2518</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f"><code>e8d4307</code></a> Bump the minor-actions-dependencies group with 2 updates (<a href="https://redirect.github.com/actions/checkout/issues/2499">#2499</a>)</li> <li><a href="https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87"><code>631c942</code></a> eslint 9 (<a href="https://redirect.github.com/actions/checkout/issues/2474">#2474</a>)</li> <li><a href="https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e"><code>4f1f4ae</code></a> Bump actions/upload-artifact from 4 to 7 (<a href="https://redirect.github.com/actions/checkout/issues/2476">#2476</a>)</li> <li><a href="https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92"><code>ba09753</code></a> Bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/actions/checkout/issues/2488">#2488</a>)</li> <li><a href="https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22"><code>b9e0990</code></a> Bump docker/login-action from 3.3.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2479">#2479</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2"><code>e8cb398</code></a> Bump docker/build-push-action from 6.5.0 to 7.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2478">#2478</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.4 to 1.10.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md">shell-quote's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/ljharb/shell-quote/compare/v1.9.0...v1.10.0">v1.10.0</a> - 2026-07-10</h2> <h3>Merged</h3> <ul> <li>[New] <code>parse</code>: add opt-in <code>splitUnquoted</code> option for shell field-splitting of unquoted expansions <a href="https://redirect.github.com/ljharb/shell-quote/pull/1"><code>[#1](https://github.com/ljharb/shell-quote/issues/1)</code></a></li> </ul> <h3>Commits</h3> <ul> <li>[Fix] <code>parse</code>: match nested <code>${...}</code> braces so nested parameter expansion is consumed as one substitution <a href="https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c"><code>c0842c8</code></a></li> <li>[Tests] <code>parse</code>: pin single-quote literalness and unmatched-quote handling <a href="https://github.com/ljharb/shell-quote/commit/a0d03e35c8ede24016502c4433b8f5d6b3100a62"><code>a0d03e3</code></a></li> <li>[readme] remove the space in js code fences so evalmd evaluates them <a href="https://github.com/ljharb/shell-quote/commit/2116fa36aeea77fe8d561b0db46b1f9b26b8cf1b"><code>2116fa3</code></a></li> <li>[Tests] <code>quote</code>: pin conservative escaping of <code>=</code>, <code>@</code>, <code>^</code>, <code>,</code>, <code>:</code>, <code>!</code> (<a href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>) <a href="https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e"><code>1c36f3f</code></a></li> <li>[readme] document that <code>quote</code> outputs POSIX quoting, not <code>cmd.exe</code>/PowerShell <a href="https://github.com/ljharb/shell-quote/commit/100e96e0ffadcca97d63dda15651c70b9f83507c"><code>100e96e</code></a></li> <li>[readme] document <code>parse</code>'s supported parameter-expansion subset <a href="https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb"><code>e1c75cd</code></a></li> <li>[Fix] <code>parse</code>: a backslash inside single quotes must not escape the closing quote <a href="https://github.com/ljharb/shell-quote/commit/5d460a332b54b83153297fe7d1964330b28fa491"><code>5d460a3</code></a></li> <li>[readme] fix stale example outputs <a href="https://github.com/ljharb/shell-quote/commit/2de86f5d44f44d3ac9df36413d8a05f3534cdec6"><code>2de86f5</code></a></li> <li>[Tests] <code>quote</code>: pin that a backslash with whitespace is not doubled in single quotes (<a href="https://redirect.github.com/ljharb/shell-quote/issues/14">#14</a>) <a href="https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71"><code>190e236</code></a></li> <li>[readme] <code>quote</code>: use output verbatim; do not re-quote it (<a href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>) <a href="https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5"><code>1b36468</code></a></li> <li>[Refactor] <code>parse</code>: fix swapped <code>SINGLE_QUOTE</code>/<code>DOUBLE_QUOTE</code> variable names <a href="https://github.com/ljharb/shell-quote/commit/801af5c935b27d6dcda63b3975d5e92a7b6f887f"><code>801af5c</code></a></li> <li>[types] fix an error TS v6 ignores but v7 fails on <a href="https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba"><code>59bbf8b</code></a></li> <li>[Dev Deps] update <code>@arethetypeswrong/cli</code>, <code>evalmd</code> <a href="https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc"><code>a04d475</code></a></li> <li>[Dev Deps] update <code>@arethetypeswrong/ci</code>, <code>eslint</code> <a href="https://github.com/ljharb/shell-quote/commit/d390f9a92b97a04b1f799298634e90dc581021e6"><code>d390f9a</code></a></li> <li>[Tests] <code>quote</code>: the tilde test escapes every <code>~</code>, not just a leading one (<a href="https://redirect.github.com/ljharb/shell-quote/issues/9">#9</a>) <a href="https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c"><code>617d119</code></a></li> </ul> <h2><a href="https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.9.0">v1.9.0</a> - 2026-06-24</h2> <h3>Commits</h3> <ul> <li>[New] add types <a href="https://github.com/ljharb/shell-quote/commit/dca6e21a02df4cc1a83ed1b5baa4d82df134170a"><code>dca6e21</code></a></li> <li>[Dev Deps] update <code>eslint</code> <a href="https://github.com/ljharb/shell-quote/commit/9aa9e8f60991f8c4053a29e476795d891ff851ad"><code>9aa9e8f</code></a></li> <li>[Fix] <code>parse</code>: finalize tokens in linear time (GHSA-395f-4hp3-45gv) <a href="https://github.com/ljharb/shell-quote/commit/7ff5488599d01c323514f02f5efb74088dd134ec"><code>7ff5488</code></a></li> <li>[actions] update workflows <a href="https://github.com/ljharb/shell-quote/commit/75e849741ffaf2d3aa53ae0e18ef6bf9929ef478"><code>75e8497</code></a></li> <li>[actions] Windows + node 4/6/7: pin eslint to 9 before install, since npm 2/3 cannot stage eslint 10<code>@types/esrecurse</code> <a href="https://github.com/ljharb/shell-quote/commit/3fb739de44b81c69431947d54fbfc18998dd6d72"><code>3fb739d</code></a></li> <li>[actions] retry <code>npm install</code> on Windows to survive npm 2/3 staging-rename flake <a href="https://github.com/ljharb/shell-quote/commit/abe0163293c82963fa8a16cfaa87181846d5aced"><code>abe0163</code></a></li> <li>[actions] Windows + node 5/7: install deps with a modern node <a href="https://github.com/ljharb/shell-quote/commit/b4bafa2e7e58d53d9839b1c24976f61e54b43326"><code>b4bafa2</code></a></li> <li>[Fix] <code>quote</code>: escape leading <code>~</code> to prevent shell tilde-expansion <a href="https://github.com/ljharb/shell-quote/commit/7a76c1a12d8461c2234a1c655b943cee84cbff91"><code>7a76c1a</code></a></li> <li>[Dev Deps] update <code>auto-changelog</code>, <code>tape</code> <a href="https://github.com/ljharb/shell-quote/commit/7184b4458b65c17b931e126d8cb5f586c6717dc8"><code>7184b44</code></a></li> <li>[Dev Deps] apparently <code>jackspeak</code> is no longer in the graph <a href="https://github.com/ljharb/shell-quote/commit/9ba368a4057b9f498b0fef23b5b15543ef81b98c"><code>9ba368a</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ljharb/shell-quote/commit/64988d9a0e73a2ae710488952e3614958ef289d4"><code>64988d9</code></a> v1.10.0</li> <li><a href="https://github.com/ljharb/shell-quote/commit/617d119795c7b44d6e49a4d41f80195c4aa5735c"><code>617d119</code></a> [Tests] <code>quote</code>: the tilde test escapes every <code>~</code>, not just a leading one (<a href="https://redirect.github.com/ljharb/shell-quote/issues/9">#9</a>)</li> <li><a href="https://github.com/ljharb/shell-quote/commit/59bbf8b81bf3236842deb72805744d489f650eba"><code>59bbf8b</code></a> [types] fix an error TS v6 ignores but v7 fails on</li> <li><a href="https://github.com/ljharb/shell-quote/commit/190e236bcf1d81caa8e40e8ea3bb11998575be71"><code>190e236</code></a> [Tests] <code>quote</code>: pin that a backslash with whitespace is not doubled in singl...</li> <li><a href="https://github.com/ljharb/shell-quote/commit/a04d47516e1cd5b1b4d3f720ddf97561ed0082fc"><code>a04d475</code></a> [Dev Deps] update <code>@arethetypeswrong/cli</code>, <code>evalmd</code></li> <li><a href="https://github.com/ljharb/shell-quote/commit/b9545b39f4de17aa169410823c98acf58387e474"><code>b9545b3</code></a> [New] <code>parse</code>: add opt-in <code>splitUnquoted</code> option for shell field-splitting of...</li> <li><a href="https://github.com/ljharb/shell-quote/commit/1b364683b1e9e8d078fd3017cde82cf10c9c04a5"><code>1b36468</code></a> [readme] <code>quote</code>: use output verbatim; do not re-quote it (<a href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)</li> <li><a href="https://github.com/ljharb/shell-quote/commit/1c36f3ff77d26d200620c1027e5c271050120b8e"><code>1c36f3f</code></a> [Tests] <code>quote</code>: pin conservative escaping of <code>=</code>, <code>@</code>, <code>^</code>, <code>,</code>, <code>:</code>, <code>!</code> (<a href="https://redirect.github.com/ljharb/shell-quote/issues/11">#11</a>)</li> <li><a href="https://github.com/ljharb/shell-quote/commit/e1c75cd6e4a3c60003792c7f2802587d328622cb"><code>e1c75cd</code></a> [readme] document <code>parse</code>'s supported parameter-expansion subset</li> <li><a href="https://github.com/ljharb/shell-quote/commit/c0842c8a7a034066da2496a75e91cbe500ff736c"><code>c0842c8</code></a> [Fix] <code>parse</code>: match nested <code>${...}</code> braces so nested parameter expansion is ...</li> <li>Additional commits viewable in <a href="https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.10.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/retina/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.5 to 1.20.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/body-parser/releases">body-parser's releases</a>.</em></p> <blockquote> <h2>1.20.6</h2> <h2>Important: Security</h2> <ul> <li>Security fix for <a href="https://www.cve.org/CVERecord?id=CVE-2025-13466">CVE-2026-12590</a> (<a href="https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6">GHSA-v422-hmwv-36x6</a>)</li> </ul> <h2>What's Changed</h2> <ul> <li>fix: improve limit option validation by <a href="https://github.com/Phillip9587"><code>@Phillip9587</code></a> in <a href="https://redirect.github.com/expressjs/body-parser/pull/741">expressjs/body-parser#741</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6">https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/body-parser/blob/master/HISTORY.md">body-parser's changelog</a>.</em></p> <blockquote> <h1>1.20.6 / 2026-07-09</h1> <ul> <li>Security fix for <a href="https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6">GHSA-v422-hmwv-36x6</a></li> <li>fix: improve <code>limit</code> option validation (<a href="https://redirect.github.com/expressjs/body-parser/issues/698">#698</a>) <ul> <li>Invalid <code>limit</code> values (e.g. unparseable strings or <code>NaN</code>) now throw instead of being silently ignored, which previously disabled size limit enforcement</li> <li><code>null</code> and <code>undefined</code> fall back to the default 100kb limit</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/body-parser/commit/5cc4fb8867c93a3aa4455927e38858c9ab89ff43"><code>5cc4fb8</code></a> 1.20.6 (<a href="https://redirect.github.com/expressjs/body-parser/issues/746">#746</a>)</li> <li><a href="https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac"><code>3492672</code></a> fix: improve limit option validation (<a href="https://redirect.github.com/expressjs/body-parser/issues/741">#741</a>)</li> <li>See full diff in <a href="https://github.com/expressjs/body-parser/compare/1.20.5...1.20.6">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/retina/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.0 to 1.82.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.82.1</h2> <h1>Security</h1> <ul> <li>server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable <code>GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT</code>.</li> <li>xds/rbac: Support <code>Metadata</code> and <code>RequestedServerName</code> permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.</li> <li>xds/rbac: Fix panic when parsing unsupported fields in <code>NotRule</code>/<code>NotId</code> permissions.</li> <li>xds/rbac: Support the deprecated <code>source_ip</code> principal identifier by treating it as equivalent to <code>direct_remote_ip</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/ebd8f06a09426fbece97157c95c3917abff28f4e"><code>ebd8f06</code></a> Change version to 1.82.1 (<a href="https://redirect.github.com/grpc/grpc-go/issues/9238">#9238</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/4ea465d4ab98013f72a142fe0fc89c19770b2935"><code>4ea465d</code></a> Cherry-pick commits (<a href="https://redirect.github.com/grpc/grpc-go/issues/9236">#9236</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/9494a2cf32a0ec9d35420af401445ef3c9f66f05"><code>9494a2c</code></a> Change version to 1.82.1-dev (<a href="https://redirect.github.com/grpc/grpc-go/issues/9171">#9171</a>)</li> <li>See full diff in <a href="https://github.com/grpc/grpc-go/compare/v1.82.0...v1.82.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/retina/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [svgo](https://github.com/svg/svgo) from 3.3.3 to 3.3.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/svg/svgo/releases">svgo's releases</a>.</em></p> <blockquote> <h2>v3.3.4</h2> <h2>What's Changed</h2> <h3>Security</h3> <ul> <li><a href="https://svgo.dev/docs/plugins/removeScripts/">removeScriptElement</a>, remove JavaScript URIs case-insensitively and make <code><script></code> handling namespace aware. By <a href="https://github.com/SethFalco"><code>@SethFalco</code></a></li> </ul> <h2>Support</h2> <p>SVGO v3 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.</p> <p>Consider reading our <a href="https://svgo.dev/docs/migrations/migration-from-v3-to-v4/">Migration Guide from v3 to v4</a> which should ease the process.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/svg/svgo/commit/72a23886b4698b27624b936f3a15a80afd36d75f"><code>72a2388</code></a> Merge commit from fork</li> <li>See full diff in <a href="https://github.com/svg/svgo/compare/v3.3.3...v3.3.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/retina/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fastify/fast-uri/releases">fast-uri's releases</a>.</em></p> <blockquote> <h2>v3.1.4</h2> <h2>⚠️ Security Release</h2> <p>Fix for <a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx">https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx</a></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4">https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4</a></p> <h2>v3.1.3</h2> <h2>⚠️ Security Release</h2> <ul> <li>Fixes: <a href="https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6">https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3">https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fastify/fast-uri/commit/6aeece669e4166b2446a89f17c07a3b15dfb7ed4"><code>6aeece6</code></a> Bumped v3.1.4</li> <li><a href="https://github.com/fastify/fast-uri/commit/2d50fbabc80e4d0884fe0f6a98fe118ce6faa353"><code>2d50fba</code></a> fix: reject literal backslash in URI authority</li> <li><a href="https://github.com/fastify/fast-uri/commit/0549fe35b0d482233f3be2816439f3ec803603fa"><code>0549fe3</code></a> Bumped v3.1.3</li> <li><a href="https://github.com/fastify/fast-uri/commit/2a6d357a18a68e6d812824379fd3388a1ae50d05"><code>2a6d357</code></a> Merge commit from fork</li> <li>See full diff in <a href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/retina/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Laksh (lakshk98)
force-pushed
the
laksh/merge-main
branch
from
August 4, 2026 18:12
ed0dea3 to
2d803ba
Compare
Alex Castilio (alexcastilio)
approved these changes
Aug 6, 2026
Laksh (lakshk98)
marked this pull request as draft
August 7, 2026 12:42
|
Laksh (@lakshk98) please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.
Contributor License AgreementContribution License AgreementThis Contribution License Agreement (“Agreement”) is agreed to by the party signing below (“You”),
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
This PR merges upstream/main into dev/v0.0.33-windows , resolving conflicts across Dockerfiles, workflow files, Helm values, E2E tests, and auto-generated protobuf files.
Merge conflict resolutions
For most conflicts, upstream changes were taken as-is. Notable exceptions:
• .github/workflows/e2e-test-event-writer.yml — kept our version, which includes Windows-specific build steps (LLVM, MSBuild, eBPF store, Docker daemon) absent from upstream's skeleton.
• deploy/.../values.yaml — introduced enablePodLevel_win: true to decouple Windows pod-level metrics from the upstream Linux default ( enablePodLevel: false ), following the existing enabledPlugin_linux / enabledPlugin_win pattern. Also kept enabledPlugin_win with ebpfwindows and enableAnnotations: true .
• pkg/utils/metadata_*.pb.go — regenerated from the auto-merged .proto (which combined our Cilium eBPF drop reasons with upstream's HNS/NDIS drop reasons and sampling fields).
• test/e2e/retina_e2e_test.go — kept Windows UnLoadAndPinWinBPFJob step; dropped stale ValidateHubble reference (renamed upstream); took upstream's InstallAndTestHubbleMetrics and ValidateCapture .
• controller/Dockerfile / cli/Dockerfile — took upstream's bpf-gen stage refactor and Azure Linux 3.0 base image upgrade.
Post-merge fixes
After the merge, Removed usage of the hubble parser options addresses build failures introduced by the merge — upstream changes that conflicted with our usage of hubble parser options required removing that dependency.
Lint fixes
The final commit fixes lint errors surfaced by the linter running over all files touched by the merge.
Related Issue
If this pull request is related to any issue, please mention it here. Additionally, make sure that the issue is assigned to you before submitting this pull request.
Checklist
git commit -S -s ...). See this documentation on signing commits.Screenshots (if applicable) or Testing Completed
Please add any relevant screenshots or GIFs to showcase the changes made.
Additional Notes
Add any additional notes or context about the pull request here.
Please refer to the CONTRIBUTING.md file for more information on how to contribute to this project.