Update all dependencies #2
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.8.0->v4.8.1v2.5.0->v2.6.1v4.30.7->v4.31.2v0.9.1->v0.9.2v2.13.1->v2.13.2Release Notes
actions/dependency-review-action (actions/dependency-review-action)
v4.8.1: Dependency Review Action v4.8.1Compare Source
What's Changed
Full Changelog: actions/dependency-review-action@v4...v4.8.1
golangci/golangci-lint (github.com/golangci/golangci-lint/v2)
v2.6.1Compare Source
v2.6.0Compare Source
modernizeanalyzer suitearangolint: from 0.2.0 to 0.3.1dupword: from 0.1.6 to 0.1.7 (new optioncomments-only)go-critic: from 0.13.0 to 0.14.0 (new rules/checkers:zeroByteRepeat,dupOption)gofumpt: from 0.9.1 to 0.9.2 ("clothe" naked returns is now controlled by theextra-rulesoption)perfsprint: from 0.9.1 to 0.10.0 (new options:concat-loop,loop-other-ops)wsl: from 5.2.0 to 5.3.0dupword: from 0.1.6 to 0.1.7durationcheck: from 0.0.10 to 0.0.11exptostd: from 0.4.4 to 0.4.5fatcontext: from 0.8.1 to 0.9.0forbidigo: from 2.1.0 to 2.3.0ginkgolinter: from 0.21.0 to 0.21.2godoc-lint: from 0.10.0 to 0.10.1gomoddirectives: from 0.7.0 to 0.7.1gosec: from 2.22.8 to 2.22.10makezero: from 2.0.1 to 2.1.0nilerr: from 0.1.1 to 0.1.2paralleltest: from 1.0.14 to 1.0.15protogetter: from 0.3.16 to 0.3.17unparam: from0df0534to5beb8c8github/codeql-action (github/codeql-action)
v4.31.2Compare Source
v4.31.1Compare Source
v4.31.0Compare Source
v4.30.9Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
4.30.9 - 17 Oct 2025
setup-codeqlaction has been added which is similar toinit, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204See the full CHANGELOG.md for more information.
v4.30.8Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
4.30.8 - 10 Oct 2025
No user facing changes.
See the full CHANGELOG.md for more information.
mvdan/gofumpt (mvdan.cc/gofumpt)
v0.9.2Compare Source
This release moves the "clothe naked returns" rule under
gofumpt -extra, following the discussion in #285.Binaries built on
go version go1.25.3 linux/amd64with:Consider becoming a sponsor if you benefit from the work that went into this release!
Note that this release no longer includes a
sha256sums.txtasset; GitHub now provide digests natively.step-security/harden-runner (step-security/harden-runner)
v2.13.2Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2.13.1...v2.13.2
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.