Skip to content

Release v1.18.8#853

Merged
tphoney merged 12 commits into
mainfrom
copybara/v1.18.8
Jul 20, 2026
Merged

Release v1.18.8#853
tphoney merged 12 commits into
mainfrom
copybara/v1.18.8

Conversation

@github-actions

@github-actions github-actions Bot commented Jul 20, 2026 •
edited by tphoney
Loading

Copy link
Copy Markdown

Copybara Sync - Release v1.18.8

This PR was automatically created by Copybara, syncing changes from the overmindtech/workspace monorepo.

Original author: renovate[bot] (29139614+renovate[bot]@users.noreply.github.com)

What happens when this PR is merged?

  1. The tag-on-merge workflow will automatically create the v1.18.8 tag on main
  2. This tag will trigger the release workflow, which will:
    • Run tests
    • Build and publish release binaries via GoReleaser
    • Upload packages to Cloudsmith

Review Checklist

  • Changes look correct and match the expected monorepo sync
  • Tests pass (see CI checks below)

renovate Bot and others added 12 commits July 20, 2026 09:27
@renovate @cursoragent
@tphoney @actions-user
Lock file maintenance (#5861)
aa42501 
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "before 4am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Lock-file hash updates and minor lint/parser changes; no application
logic or auth behavior changes beyond naming and stricter cell handling.
>
> **Overview**
> Renovate **lock file maintenance** bumps pinned Terraform provider
versions and checksums across `cli`, `deploy`, `deploy/meta`, and
`razorpay-deploy`. Notable version bumps include **hashicorp/aws**
`6.52.0` → `6.53.0`, **hashicorp/google** `7.38.0` → `7.39.0`,
**auth0/auth0** `1.50.0` → `1.51.0` (deploy),
**honeycombio/honeycombio** `0.51.0` → `0.51.1` (deploy), and
**hashicorp/kubernetes** `3.2.0` → `3.2.1` (razorpay-deploy).
>
> The **measurement** service changes are small lint/type cleanups:
Auth0 client renames (`cookieOptions`, `context`), an eslint exception
on `onCallback`, test assertion casts, and LinkedIn export parsing
tweaks (`cellText` for object cells, `toSorted`, `replaceAll`, removal
of unused `mergeKey`).
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
c47a4a626f39c14e0b415d58fbcca0167a2017df. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: TP Honey <thomas.honey@overmind.tech>
GitOrigin-RevId: a37eba78c35e6cb19d3975bb1e681c58621af6d7
@dylanratcliffe @cursoragent @actions-user
feat(changeanalysis): AI model currency upgrade behind FlagInternal +…
d81cecc 
… V6 benchmark scenarios (#5900)

## Summary

Implements the BRENT-554 "AI Model Currency Upgrade — Critical Roles"
plan, shipped **behind `FlagInternal`** so Overmind's internal accounts
dogfood the new models before a general rollout. Everyone else stays on
the current `main` pins. Also builds out the V6 benchmark so we can
actually measure the upgrade.

### Model gating (`config.go`)
Defaults stay on the current tier; the upgrade lives in parallel
`Internal*` pins served only when `FlagInternal` is on:

| Role | Default (all accounts) | Internal (`FlagInternal`) |
| --- | --- | --- |
| Primary | `gpt-5-4` | `gpt-5-5` |
| Secondary | `gpt-5-4-low` | `gpt-5-5-low` |
| Blast Radius | `gpt-5-mini` | `gpt-5-4-mini-low` |
| Aggregator | `gpt-5-1-low-verbosity` | `gpt-5-5-low-verbosity` |
| Whole-Change Hypothesis | `gpt-5-4-mini-high` | `gpt-5-5-low` |
| Change Validation | `gpt-5-4-low` | (unchanged) |

`resolveProvider` now layers **default → internal (if flag on) →
per-role override flag**, so existing per-role pins still win. Adds
`UseInternalProviders()` to promote the internal tier in tests.

### V6 benchmark framework
- Per-scenario **in-process snapshot source**: the harness stands up a
dedicated `discovery.Engine` from each scenario's embedded
`snapshot.json` (via new `InitializeAdaptersFromSnapshot`), so blast
radius runs against the scenario's own graph with no external
orchestration.
- **Per-scenario LLM expectations** (Tier 3d): natural-language
pass/fail assertions in `golden.json` instead of brittle keyword lists.
- **Debug artifacts**: each scenario now dumps `detail.json` (risks +
hypotheses + metrics) and `blastsnap.json` (blast-radius graph) for
post-hoc debugging.
- Benchmark evaluates the internal tier via `UseInternalProviders()`;
default evaluator bumped to `gpt-5-4`.
- 9 curated production-derived scenarios; dropped
`frontend-image-update` (no snapshot) and merged two overlapping
terraform slices into `terraform-monorepo-mixed-apply`.

### Observability
Whole-change hypothesis generator now surfaces its error and elevates
log level on failure/timeout, so a 0-hypothesis result is diagnosable
instead of silent.

## Test plan
- [x] `go build` + `golangci-lint run` clean on `config` and
`changeanalysis`
- [x] `go test ./services/api-server/service/config/ -run
TestLLMConfigProviderSelection` (default/internal/override precedence +
`UseInternalProviders`)
- [ ] Run V6 benchmark (`TestV6Benchmark`, needs `OPENAI_API_KEY` +
local gateway/NATS) to sanity-check the internal tier end to end
- [ ] Confirm `internal` flag is set for internal accounts in PostHog
before/after deploy
- [ ] Verify all role resolutions run with a context carrying the
PostHog client + account name (no background-job fallback to defaults)

## Notes
Follow-ups intentionally out of scope: parallelizing the benchmark
(blocked on shared-NATS scope collisions), an old-vs-new A/B baseline
for regression confidence, and cleaning up the two legacy snapshot-less
scenarios.

Made with [Cursor](https://cursor.com)

Co-authored-by: Cursor <cursoragent@cursor.com>
GitOrigin-RevId: 5f9d0e444ce359e7c79a6094e518a2b96642708f
@renovate @actions-user
Update github.com/hashicorp/terraform-config-inspect digest to 2fb54c…
6810af4 
…2 (#5917)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/hashicorp/terraform-config-inspect](https://redirect.github.com/hashicorp/terraform-config-inspect)
| require | digest | `813a975` → `2fb54c2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: f22dbdef5f205b6e28e48a7f78477e8cc70f9a1c
@renovate @actions-user
Update dependency goreleaser/goreleaser to v2.17.0 (#5928)
2d699d3 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[goreleaser/goreleaser](https://redirect.github.com/goreleaser/goreleaser)
| minor | `v2.16.0` → `v2.17.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>goreleaser/goreleaser (goreleaser/goreleaser)</summary>

###
[`v2.17.0`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.17.0)

[Compare
Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.16.0...v2.17.0)

#### Announcement

Read the official announcement: [Announcing GoReleaser
v2.17](https://goreleaser.com/blog/goreleaser-v2.17/).

#### Changelog

##### New Features

-
[`31d4279`](https://redirect.github.com/goreleaser/goreleaser/commit/31d427926bf91dede0f208d4b034c4b35dfb5507):
feat(brew,cask,krew,nix,scoop,winget): default pull request branch name
([#&#8203;6685](https://redirect.github.com/goreleaser/goreleaser/issues/6685))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`e5f075b`](https://redirect.github.com/goreleaser/goreleaser/commit/e5f075b7a372541a1db505f3dc4015d1495714c5):
feat(dockers/v2): retry build
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`cd5f16b`](https://redirect.github.com/goreleaser/goreleaser/commit/cd5f16b42e09c8b8994e7722e034fb79770d9273):
feat(nfpm): support msix packages
([#&#8203;6647](https://redirect.github.com/goreleaser/goreleaser/issues/6647))
([@&#8203;umaidshahid](https://redirect.github.com/umaidshahid) and
[@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`43be34a`](https://redirect.github.com/goreleaser/goreleaser/commit/43be34a1cd33dc36fad9a2626251f29fa81eed61):
feat(scm): allow a custom token on the release repository
([#&#8203;6689](https://redirect.github.com/goreleaser/goreleaser/issues/6689))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`5ed70f2`](https://redirect.github.com/goreleaser/goreleaser/commit/5ed70f2d19c85eb9589f0316073ef42930a78c3b):
feat(winget): allow configuring the manifest locale
([#&#8203;6680](https://redirect.github.com/goreleaser/goreleaser/issues/6680))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`6f7175a`](https://redirect.github.com/goreleaser/goreleaser/commit/6f7175a0ec98ecae6b00548922648da27c330716):
feat: Allow GOARM softfloat and hardfloat
([#&#8203;6198](https://redirect.github.com/goreleaser/goreleaser/issues/6198))
([@&#8203;MDr164](https://redirect.github.com/MDr164) and
[@&#8203;caarlos0](https://redirect.github.com/caarlos0))

##### Security updates

-
[`b985ca8`](https://redirect.github.com/goreleaser/goreleaser/commit/b985ca8dc6b231440d98ff5e018c7c40678f0baa):
sec(deps): bump go-pkcs12 to v0.7.2 (GO-2026-5052)
([#&#8203;6683](https://redirect.github.com/goreleaser/goreleaser/issues/6683))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`7c73b82`](https://redirect.github.com/goreleaser/goreleaser/commit/7c73b82e0822ebaded3b193e045ffb173befa58a):
sec(deps): update golang.org/x/net
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

##### Bug fixes

-
[`7d602ff`](https://redirect.github.com/goreleaser/goreleaser/commit/7d602ff39b52b7edbdf3340dd548f1238ccd656b):
fix(builders): reject empty target string
([#&#8203;6679](https://redirect.github.com/goreleaser/goreleaser/issues/6679))
([@&#8203;sueun-dev](https://redirect.github.com/sueun-dev))
-
[`355d706`](https://redirect.github.com/goreleaser/goreleaser/commit/355d706ba6ee76a8dcabbc55902840376548d774):
fix(client): skip merge-upstream when target repo is not a fork
([#&#8203;6646](https://redirect.github.com/goreleaser/goreleaser/issues/6646))
([@&#8203;jamessawle](https://redirect.github.com/jamessawle) and
[@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`944bbb2`](https://redirect.github.com/goreleaser/goreleaser/commit/944bbb2de2c80e04e03f3509a781c82a2bb312d1):
fix(deps): drop dep on docker/docker
([#&#8203;6682](https://redirect.github.com/goreleaser/goreleaser/issues/6682))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`a85ce26`](https://redirect.github.com/goreleaser/goreleaser/commit/a85ce26032280f8cb4ba2f32cd5223176ecd86fb):
fix(mcp): clean subfolder path
([#&#8203;6649](https://redirect.github.com/goreleaser/goreleaser/issues/6649))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`99a7173`](https://redirect.github.com/goreleaser/goreleaser/commit/99a71731d269c1f036b0caea92032ac0a1fdce8a):
fix(nfpm): produce valid arch for Termux packages
([#&#8203;6668](https://redirect.github.com/goreleaser/goreleaser/issues/6668))
([@&#8203;bltavares](https://redirect.github.com/bltavares) and
[@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`7200ec7`](https://redirect.github.com/goreleaser/goreleaser/commit/7200ec73ecf09b4266d4e7ae21464e51dade7ec0):
fix(winget): default head branch to a versioned template
([#&#8203;6684](https://redirect.github.com/goreleaser/goreleaser/issues/6684))
([@&#8203;Sanjays2402](https://redirect.github.com/Sanjays2402))
-
[`6645820`](https://redirect.github.com/goreleaser/goreleaser/commit/6645820ffb384318c8486802cd7770f4f1646b4b):
fix: return error when go.mod is unreadable in CheckGoModPipe
([#&#8203;6644](https://redirect.github.com/goreleaser/goreleaser/issues/6644))
([@&#8203;SebTardif](https://redirect.github.com/SebTardif))

##### Documentation updates

-
[`da7ce30`](https://redirect.github.com/goreleaser/goreleaser/commit/da7ce304ee4e0dd4b7b7f42231727becd4d99278):
docs(casks): fix private-repo example broken by Homebrew 5.1.14
([#&#8203;6639](https://redirect.github.com/goreleaser/goreleaser/issues/6639))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`09ebd03`](https://redirect.github.com/goreleaser/goreleaser/commit/09ebd035a7737f67816369cbdd6aff93656d93a7):
docs(nfpm): note tilde ConventionalFileName
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`ab7481e`](https://redirect.github.com/goreleaser/goreleaser/commit/ab7481ed082cbad81805823b9ffd911776e8bbc7):
docs: doc authoring skill
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`b945ca3`](https://redirect.github.com/goreleaser/goreleaser/commit/b945ca35c5515cfbb99f3162a738897334ac0c7c):
docs: fix ([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`7e87fd3`](https://redirect.github.com/goreleaser/goreleaser/commit/7e87fd39b283119906598461860dcec6e51f99f4):
docs: fix "lets" -> "let's" in quick-start guide
([#&#8203;6661](https://redirect.github.com/goreleaser/goreleaser/issues/6661))
([@&#8203;s3onghyun](https://redirect.github.com/s3onghyun))
-
[`698dae5`](https://redirect.github.com/goreleaser/goreleaser/commit/698dae55da5585136be0417502f2467edb213719):
docs: fix typo in notarize.md
([#&#8203;6655](https://redirect.github.com/goreleaser/goreleaser/issues/6655))
([@&#8203;albertchae](https://redirect.github.com/albertchae))
-
[`f09c887`](https://redirect.github.com/goreleaser/goreleaser/commit/f09c88738c004e4a1df8858064f368e1f1878b98):
docs: good bye discord
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`2642319`](https://redirect.github.com/goreleaser/goreleaser/commit/2642319f753cde16df470c9da5c5f6124a50a681):
docs: improve home
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`6b7710e`](https://redirect.github.com/goreleaser/goreleaser/commit/6b7710eb4a6b4fc181c21994e694130bc57a1a9b):
docs: updates ([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

##### Other work

-
[`2e6f200`](https://redirect.github.com/goreleaser/goreleaser/commit/2e6f200efaaf702d1008f37bc75fc28cdf3cdd0d):
chore: auto-update generated files
([#&#8203;6662](https://redirect.github.com/goreleaser/goreleaser/issues/6662))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`4bd4e38`](https://redirect.github.com/goreleaser/goreleaser/commit/4bd4e386d2d260e5efb9cb962a727a3f28c718c7):
chore: auto-update generated files
([#&#8203;6671](https://redirect.github.com/goreleaser/goreleaser/issues/6671))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`dcf5a6b`](https://redirect.github.com/goreleaser/goreleaser/commit/dcf5a6b3b48314ea07b14098bf55372b2d1fa984):
chore: auto-update generated files
([#&#8203;6675](https://redirect.github.com/goreleaser/goreleaser/issues/6675))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`baf110d`](https://redirect.github.com/goreleaser/goreleaser/commit/baf110d41e81f273070e2a092ae1bbac1c22bc6a):
chore: auto-update generated files
([#&#8203;6688](https://redirect.github.com/goreleaser/goreleaser/issues/6688))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`3fa8a94`](https://redirect.github.com/goreleaser/goreleaser/commit/3fa8a94c5b57e0ae3bc7ea0b7f0a89d63afa666a):
chore: godoc ([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

**Full Changelog**:
<goreleaser/goreleaser@v2.16.0...v2.17.0>

#### Helping out

This release is only possible thanks to **all** the support of some
**awesome people**!

Want to be one of them?
You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro
License](https://goreleaser.com/pro) or [contribute with
code](https://goreleaser.com/contributing).

#### Where to go next?

- Find examples and commented usage of all options in our
[website](https://goreleaser.com/intro/).
- Reach out on [Discord](https://discord.gg/RGEBtg8vQ6),
[Twitter](https://twitter.com/goreleaser), and
[Telegram](https://t.me/goreleasernews)!

<a href="https://goreleaser.com"><img
src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png"
with="100%" alt="GoReleaser logo"></a>

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 565074a0144b8c7070f32c46764342422ab84708
@renovate @actions-user
Update Docker Images (#5923)
9c7e041 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| golang | stage | patch | `1.26.4-alpine3.23` → `1.26.5-alpine3.23` |
| [node](https://redirect.github.com/nodejs/node) | final | minor |
`24.17.0-trixie-slim` → `24.18.0-trixie-slim` |
| [node](https://redirect.github.com/nodejs/node) | final | minor |
`24.17.0-alpine3.23` → `24.18.0-alpine3.23` |
| [node](https://redirect.github.com/nodejs/node) | stage | minor |
`24.17.0-alpine3.23` → `24.18.0-alpine3.23` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>nodejs/node (node)</summary>

###
[`v24.18.0`](https://redirect.github.com/nodejs/node/releases/tag/v24.18.0):
2026-06-23, Version 24.18.0 'Krypton' (LTS), @&#8203;richardlau prepared
by @&#8203;sxa

[Compare
Source](https://redirect.github.com/nodejs/node/compare/v24.17.0...v24.18.0)

##### Notable Changes

-
\[[`e07e7a31e1`](https://redirect.github.com/nodejs/node/commit/e07e7a31e1)]
- **crypto**: update root certificates to NSS 3.123.1 (Node.js GitHub
Bot) [#&#8203;63527](https://redirect.github.com/nodejs/node/pull/63527)
-
\[[`44c8ebcbd6`](https://redirect.github.com/nodejs/node/commit/44c8ebcbd6)]
- **http**: avoid stream listeners on idle agent sockets (Matteo
Collina)
[#&#8203;64004](https://redirect.github.com/nodejs/node/pull/64004)
-
\[[`d3ef4122ee`](https://redirect.github.com/nodejs/node/commit/d3ef4122ee)]
- **(SEMVER-MINOR)** **buffer**: increase Buffer.poolSize default to 64
KiB (Matteo Collina)
[#&#8203;63597](https://redirect.github.com/nodejs/node/pull/63597)
-
\[[`bb2857b85a`](https://redirect.github.com/nodejs/node/commit/bb2857b85a)]
- **(SEMVER-MINOR)** **crypto**: align key argument names in docs and
error messages (Filip Skokan)
[#&#8203;62527](https://redirect.github.com/nodejs/node/pull/62527)
-
\[[`b9d5e87880`](https://redirect.github.com/nodejs/node/commit/b9d5e87880)]
- **(SEMVER-MINOR)** **crypto**: accept key data in
crypto.diffieHellman() and cleanup DH jobs (Filip Skokan)
[#&#8203;62527](https://redirect.github.com/nodejs/node/pull/62527)
-
\[[`ccd756d61e`](https://redirect.github.com/nodejs/node/commit/ccd756d61e)]
- **(SEMVER-MINOR)** **crypto**: add TurboSHAKE and KangarooTwelve Web
Cryptography algorithms (Filip Skokan)
[#&#8203;62183](https://redirect.github.com/nodejs/node/pull/62183)
-
\[[`4c9251fc09`](https://redirect.github.com/nodejs/node/commit/4c9251fc09)]
- **(SEMVER-MINOR)** **http**: add writeInformation to send arbitrary
1xx status codes (Tim Perry)
[#&#8203;63155](https://redirect.github.com/nodejs/node/pull/63155)
-
\[[`8c989ec4a3`](https://redirect.github.com/nodejs/node/commit/8c989ec4a3)]
- **(SEMVER-MINOR)** **inspector**: expose precise coverage start to JS
runtime (sangwook)
[#&#8203;63079](https://redirect.github.com/nodejs/node/pull/63079)
-
\[[`3f54c8ba32`](https://redirect.github.com/nodejs/node/commit/3f54c8ba32)]
- ***Revert*** "**stream**: noop pause/resume on destroyed streams"
(Stewart X Addison)
[#&#8203;63834](https://redirect.github.com/nodejs/node/pull/63834)

##### Commits

-
\[[`d3ef4122ee`](https://redirect.github.com/nodejs/node/commit/d3ef4122ee)]
- **(SEMVER-MINOR)** **buffer**: increase Buffer.poolSize default to 64
KiB (Matteo Collina)
[#&#8203;63597](https://redirect.github.com/nodejs/node/pull/63597)
-
\[[`9ff36e40f0`](https://redirect.github.com/nodejs/node/commit/9ff36e40f0)]
- **build**: add --enable-all-experimentals build flag (Paolo Insogna)
[#&#8203;62755](https://redirect.github.com/nodejs/node/pull/62755)
-
\[[`7c22ee23aa`](https://redirect.github.com/nodejs/node/commit/7c22ee23aa)]
- **build**: def `NODE_USE_NODE_CODE_CACHE` only used in
node\_mksnapshot (Chengzhong Wu)
[#&#8203;63588](https://redirect.github.com/nodejs/node/pull/63588)
-
\[[`2551abdb4a`](https://redirect.github.com/nodejs/node/commit/2551abdb4a)]
- **build,win**: enable x64 PGO (Stefan Stojanovic)
[#&#8203;62761](https://redirect.github.com/nodejs/node/pull/62761)
-
\[[`e8a55ce9b1`](https://redirect.github.com/nodejs/node/commit/e8a55ce9b1)]
- **crypto**: strengthen argument CHECKs in TurboSHAKE (Tobias Nießen)
[#&#8203;62763](https://redirect.github.com/nodejs/node/pull/62763)
-
\[[`ae61cd68f3`](https://redirect.github.com/nodejs/node/commit/ae61cd68f3)]
- **crypto**: harden WebCrypto against prototype pollution (Filip
Skokan)
[#&#8203;63363](https://redirect.github.com/nodejs/node/pull/63363)
-
\[[`3d05a1d396`](https://redirect.github.com/nodejs/node/commit/3d05a1d396)]
- **crypto**: pass CryptoKey handles to KDF jobs (Filip Skokan)
[#&#8203;63363](https://redirect.github.com/nodejs/node/pull/63363)
-
\[[`f9d10a3f6b`](https://redirect.github.com/nodejs/node/commit/f9d10a3f6b)]
- **crypto**: remove async from WebCrypto methods (Filip Skokan)
[#&#8203;63363](https://redirect.github.com/nodejs/node/pull/63363)
-
\[[`e431d93e9e`](https://redirect.github.com/nodejs/node/commit/e431d93e9e)]
- **crypto**: add WebCrypto CryptoJob mode (Filip Skokan)
[#&#8203;63363](https://redirect.github.com/nodejs/node/pull/63363)
-
\[[`56e2505e48`](https://redirect.github.com/nodejs/node/commit/56e2505e48)]
- **crypto**: wire ML-DSA and ML-KEM for use when using BoringSSL (Filip
Skokan)
[#&#8203;63255](https://redirect.github.com/nodejs/node/pull/63255)
-
\[[`3bac77f2a8`](https://redirect.github.com/nodejs/node/commit/3bac77f2a8)]
- **crypto**: wire ChaCha20-Poly1305 in Web Cryptography when using
BoringSSL (Filip Skokan)
[#&#8203;63255](https://redirect.github.com/nodejs/node/pull/63255)
-
\[[`1bff901b09`](https://redirect.github.com/nodejs/node/commit/1bff901b09)]
- **crypto**: wire AES-KW in Web Cryptography when using BoringSSL
(Filip Skokan)
[#&#8203;63255](https://redirect.github.com/nodejs/node/pull/63255)
-
\[[`4433fca3df`](https://redirect.github.com/nodejs/node/commit/4433fca3df)]
- **crypto**: harden CryptoKey algorithm slots (Filip Skokan)
[#&#8203;63111](https://redirect.github.com/nodejs/node/pull/63111)
-
\[[`b5cf01217a`](https://redirect.github.com/nodejs/node/commit/b5cf01217a)]
- **crypto**: harden KeyObject internal slots (Filip Skokan)
[#&#8203;63111](https://redirect.github.com/nodejs/node/pull/63111)
-
\[[`ce84aef37d`](https://redirect.github.com/nodejs/node/commit/ce84aef37d)]
- **crypto**: add guards and adjust tests for BoringSSL (Filip Skokan)
[#&#8203;62883](https://redirect.github.com/nodejs/node/pull/62883)
-
\[[`26781689b0`](https://redirect.github.com/nodejs/node/commit/26781689b0)]
- **crypto**: reject duplicate ML-KEM JWK key\_ops (Filip Skokan)
[#&#8203;62905](https://redirect.github.com/nodejs/node/pull/62905)
-
\[[`aeea8f4970`](https://redirect.github.com/nodejs/node/commit/aeea8f4970)]
- **crypto**: add JWK support for ML-KEM and SLH-DSA key types (Filip
Skokan)
[#&#8203;62706](https://redirect.github.com/nodejs/node/pull/62706)
-
\[[`407cf91656`](https://redirect.github.com/nodejs/node/commit/407cf91656)]
- **crypto**: guard against size\_t overflow on experimental 32-bit arch
(Filip Skokan)
[#&#8203;62626](https://redirect.github.com/nodejs/node/pull/62626)
-
\[[`bb2857b85a`](https://redirect.github.com/nodejs/node/commit/bb2857b85a)]
- **(SEMVER-MINOR)** **crypto**: align key argument names in docs and
error messages (Filip Skokan)
[#&#8203;62527](https://redirect.github.com/nodejs/node/pull/62527)
-
\[[`b9d5e87880`](https://redirect.github.com/nodejs/node/commit/b9d5e87880)]
- **(SEMVER-MINOR)** **crypto**: accept key data in
crypto.diffieHellman() and cleanup DH jobs (Filip Skokan)
[#&#8203;62527](https://redirect.github.com/nodejs/node/pull/62527)
-
\[[`b46d52b283`](https://redirect.github.com/nodejs/node/commit/b46d52b283)]
- **crypto**: unify asymmetric key import through KeyObjectHandle::Init
(Filip Skokan)
[#&#8203;62499](https://redirect.github.com/nodejs/node/pull/62499)
-
\[[`ccd756d61e`](https://redirect.github.com/nodejs/node/commit/ccd756d61e)]
- **(SEMVER-MINOR)** **crypto**: add TurboSHAKE and KangarooTwelve Web
Cryptography algorithms (Filip Skokan)
[#&#8203;62183](https://redirect.github.com/nodejs/node/pull/62183)
-
\[[`e07e7a31e1`](https://redirect.github.com/nodejs/node/commit/e07e7a31e1)]
- **crypto**: update root certificates to NSS 3.123.1 (Node.js GitHub
Bot) [#&#8203;63527](https://redirect.github.com/nodejs/node/pull/63527)
-
\[[`61826df455`](https://redirect.github.com/nodejs/node/commit/61826df455)]
- **crypto**: coerce -0 keylen to +0 in pbkdf2 and scrypt (Jordan
Harband)
[#&#8203;63531](https://redirect.github.com/nodejs/node/pull/63531)
-
\[[`16d2fd3c07`](https://redirect.github.com/nodejs/node/commit/16d2fd3c07)]
- **crypto**: align verifyOneShot accepted types (Anshika Jain)
[#&#8203;63280](https://redirect.github.com/nodejs/node/pull/63280)
-
\[[`3b8330deda`](https://redirect.github.com/nodejs/node/commit/3b8330deda)]
- **crypto**: improve system certificate enumeration logic on macOS
(Robo)
[#&#8203;62576](https://redirect.github.com/nodejs/node/pull/62576)
-
\[[`141de35399`](https://redirect.github.com/nodejs/node/commit/141de35399)]
- **debugger**: add --help to `node inspect` and improve docs (Joyee
Cheung)
[#&#8203;63201](https://redirect.github.com/nodejs/node/pull/63201)
-
\[[`b76bfcd4fa`](https://redirect.github.com/nodejs/node/commit/b76bfcd4fa)]
- **deps**: upgrade npm to 11.16.0 (npm team)
[#&#8203;63602](https://redirect.github.com/nodejs/node/pull/63602)
-
\[[`4ec142314c`](https://redirect.github.com/nodejs/node/commit/4ec142314c)]
- **deps**: SQLite: cherry-pick
[`b869ed6`](https://redirect.github.com/nodejs/node/commit/b869ed6b067d623cb1383549f2a18aa35508385d)
(Junsu Han)
[#&#8203;63525](https://redirect.github.com/nodejs/node/pull/63525)
-
\[[`19e8ce1c36`](https://redirect.github.com/nodejs/node/commit/19e8ce1c36)]
- **deps**: upgrade npm to 11.15.0 (npm team)
[#&#8203;63463](https://redirect.github.com/nodejs/node/pull/63463)
-
\[[`8a264260e2`](https://redirect.github.com/nodejs/node/commit/8a264260e2)]
- **deps**: update sqlite to 3.53.1 (Node.js GitHub Bot)
[#&#8203;63217](https://redirect.github.com/nodejs/node/pull/63217)
-
\[[`50c8ff3f94`](https://redirect.github.com/nodejs/node/commit/50c8ff3f94)]
- **deps**: update simdjson to 4.6.4 (Node.js GitHub Bot)
[#&#8203;62811](https://redirect.github.com/nodejs/node/pull/62811)
-
\[[`6e56f01c4b`](https://redirect.github.com/nodejs/node/commit/6e56f01c4b)]
- **deps**: V8: cherry-pick
[`435a2cd`](https://redirect.github.com/nodejs/node/commit/435a2cdf664c)
(Matthias Liedtke)
[#&#8203;63136](https://redirect.github.com/nodejs/node/pull/63136)
-
\[[`3ba813b242`](https://redirect.github.com/nodejs/node/commit/3ba813b242)]
- **deps**: cherry-pick
[libuv/libuv@`a43e543`](https://redirect.github.com/libuv/libuv/commit/a43e543)
(Ali Hassan)
[#&#8203;63222](https://redirect.github.com/nodejs/node/pull/63222)
-
\[[`2390e3a5ac`](https://redirect.github.com/nodejs/node/commit/2390e3a5ac)]
- **doc**: remove duplicated sentences in large-pull-requests.md (Joyee
Cheung)
[#&#8203;63650](https://redirect.github.com/nodejs/node/pull/63650)
-
\[[`52a1c18374`](https://redirect.github.com/nodejs/node/commit/52a1c18374)]
- **doc**: update `git node land` instructions for security releases
(Antoine du Hamel)
[#&#8203;63586](https://redirect.github.com/nodejs/node/pull/63586)
-
\[[`3e6b4da037`](https://redirect.github.com/nodejs/node/commit/3e6b4da037)]
- **doc**: drop --experimental from --permission (Rafael Gonzaga)
[#&#8203;63583](https://redirect.github.com/nodejs/node/pull/63583)
-
\[[`84d05163b9`](https://redirect.github.com/nodejs/node/commit/84d05163b9)]
- **doc**: explicitly ask for reproducible in JS (Rafael Gonzaga)
[#&#8203;63479](https://redirect.github.com/nodejs/node/pull/63479)
-
\[[`7da2a4450e`](https://redirect.github.com/nodejs/node/commit/7da2a4450e)]
- **doc**: fix URL postMessage example in worker\_threads (Kit Dallege)
[#&#8203;62203](https://redirect.github.com/nodejs/node/pull/62203)
-
\[[`3d79bd8b29`](https://redirect.github.com/nodejs/node/commit/3d79bd8b29)]
- **doc**: clarify `filter` option of `sqlite.database.applyChangeset`
(Antoine du Hamel)
[#&#8203;63515](https://redirect.github.com/nodejs/node/pull/63515)
-
\[[`4f4174aace`](https://redirect.github.com/nodejs/node/commit/4f4174aace)]
- **doc**: fix double spaces in ERR\_TLS\_INVALID\_PROTOCOL\_METHOD
(Daijiro Wachi)
[#&#8203;63511](https://redirect.github.com/nodejs/node/pull/63511)
-
\[[`388323ca4b`](https://redirect.github.com/nodejs/node/commit/388323ca4b)]
- **doc**: fix double space in modules.md (Daijiro Wachi)
[#&#8203;63512](https://redirect.github.com/nodejs/node/pull/63512)
-
\[[`5258ccc058`](https://redirect.github.com/nodejs/node/commit/5258ccc058)]
- **doc**: fix "options" to "option" in tls.createServer (Daijiro Wachi)
[#&#8203;63453](https://redirect.github.com/nodejs/node/pull/63453)
-
\[[`43e83e6507`](https://redirect.github.com/nodejs/node/commit/43e83e6507)]
- **doc**: fix typo in deprecations (Daijiro Wachi)
[#&#8203;63434](https://redirect.github.com/nodejs/node/pull/63434)
-
\[[`f05a61d54c`](https://redirect.github.com/nodejs/node/commit/f05a61d54c)]
- **doc**: remove unsupported template type from v8.md (René)
[#&#8203;63410](https://redirect.github.com/nodejs/node/pull/63410)
-
\[[`c39d5fc820`](https://redirect.github.com/nodejs/node/commit/c39d5fc820)]
- **doc**: fix article usage before vowel-sound acronyms
(joao-oliveira-softtor)
[#&#8203;62696](https://redirect.github.com/nodejs/node/pull/62696)
-
\[[`398261f911`](https://redirect.github.com/nodejs/node/commit/398261f911)]
- **doc**: remove the bi-monthly contributor spotlight section (Claudio
Wunder)
[#&#8203;62734](https://redirect.github.com/nodejs/node/pull/62734)
-
\[[`fd9e14c405`](https://redirect.github.com/nodejs/node/commit/fd9e14c405)]
- **doc**: update http2's `push` and `trailers` events with `rawHeaders`
param (YuSheng Chen)
[#&#8203;63259](https://redirect.github.com/nodejs/node/pull/63259)
-
\[[`b943ce6933`](https://redirect.github.com/nodejs/node/commit/b943ce6933)]
- **doc**: remove inactive members from Triagers list (Antoine du Hamel)
[#&#8203;63329](https://redirect.github.com/nodejs/node/pull/63329)
-
\[[`4b9cdfc022`](https://redirect.github.com/nodejs/node/commit/4b9cdfc022)]
- **doc**: reference correct function in Module docs (Robin Malfait)
[#&#8203;63247](https://redirect.github.com/nodejs/node/pull/63247)
-
\[[`bed84b6df2`](https://redirect.github.com/nodejs/node/commit/bed84b6df2)]
- **doc**: replace Visual Studio 2022 Evergreen version reference with
17.14 (Mike McCready)
[#&#8203;63211](https://redirect.github.com/nodejs/node/pull/63211)
-
\[[`32ea70569b`](https://redirect.github.com/nodejs/node/commit/32ea70569b)]
- **doc**: recommend explicitly Tier 1 or 2 for production applications
(Mike McCready)
[#&#8203;63187](https://redirect.github.com/nodejs/node/pull/63187)
-
\[[`4627bcfd82`](https://redirect.github.com/nodejs/node/commit/4627bcfd82)]
- **doc**: run license-builder (github-actions\[bot])
[#&#8203;63232](https://redirect.github.com/nodejs/node/pull/63232)
-
\[[`28eba71845`](https://redirect.github.com/nodejs/node/commit/28eba71845)]
- **doc**: add large pull requests contributing guide (Matteo Collina)
[#&#8203;62829](https://redirect.github.com/nodejs/node/pull/62829)
-
\[[`2648efd438`](https://redirect.github.com/nodejs/node/commit/2648efd438)]
- **doc**: remove unnecessary `<!-- eslint-` magic comments (Antoine du
Hamel)
[#&#8203;63200](https://redirect.github.com/nodejs/node/pull/63200)
-
\[[`a95fc1f8fc`](https://redirect.github.com/nodejs/node/commit/a95fc1f8fc)]
- **doc**: clarify SEA platform support excludes darwin-x64 (MJSHANG)
[#&#8203;63181](https://redirect.github.com/nodejs/node/pull/63181)
-
\[[`aaef29e2e1`](https://redirect.github.com/nodejs/node/commit/aaef29e2e1)]
- **doc**: update release steps when post-release fails (Rafael Gonzaga)
[#&#8203;63131](https://redirect.github.com/nodejs/node/pull/63131)
-
\[[`7d81419cf2`](https://redirect.github.com/nodejs/node/commit/7d81419cf2)]
- **doc**: add Hmac.digest() documentation-only deprecation (DEP0206)
(Anshika Jain)
[#&#8203;63121](https://redirect.github.com/nodejs/node/pull/63121)
-
\[[`ececd80d81`](https://redirect.github.com/nodejs/node/commit/ececd80d81)]
- **doc**: document the latest-vX.x schema (Marco Ippolito)
[#&#8203;63033](https://redirect.github.com/nodejs/node/pull/63033)
-
\[[`27c1c1d842`](https://redirect.github.com/nodejs/node/commit/27c1c1d842)]
- **doc**: remove list of versions in `BUILDING.md` (Antoine du Hamel)
[#&#8203;63113](https://redirect.github.com/nodejs/node/pull/63113)
-
\[[`e369886a65`](https://redirect.github.com/nodejs/node/commit/e369886a65)]
- **doc,sqlite**: document entryPoint argument for loadExtension (Edy
Silva)
[#&#8203;63152](https://redirect.github.com/nodejs/node/pull/63152)
-
\[[`e4e5137cbd`](https://redirect.github.com/nodejs/node/commit/e4e5137cbd)]
- **errors**: handle V8 warnings in DisallowJavascriptExecutionScope
(Divyanshu Sharma)
[#&#8203;63491](https://redirect.github.com/nodejs/node/pull/63491)
-
\[[`6d1f6048d2`](https://redirect.github.com/nodejs/node/commit/6d1f6048d2)]
- **fs**: make `Date` properties on `Stats` enumerable (LiviaMedeiros)
[#&#8203;63328](https://redirect.github.com/nodejs/node/pull/63328)
-
\[[`44c8ebcbd6`](https://redirect.github.com/nodejs/node/commit/44c8ebcbd6)]
- **http**: avoid stream listeners on idle agent sockets (Matteo
Collina)
[#&#8203;64004](https://redirect.github.com/nodejs/node/pull/64004)
-
\[[`4c9251fc09`](https://redirect.github.com/nodejs/node/commit/4c9251fc09)]
- **(SEMVER-MINOR)** **http**: add writeInformation to send arbitrary
1xx status codes (Tim Perry)
[#&#8203;63155](https://redirect.github.com/nodejs/node/pull/63155)
-
\[[`39f61fb06c`](https://redirect.github.com/nodejs/node/commit/39f61fb06c)]
- **http2**: emit session close before stream close (Matteo Collina)
[#&#8203;63414](https://redirect.github.com/nodejs/node/pull/63414)
-
\[[`8a8f2127d1`](https://redirect.github.com/nodejs/node/commit/8a8f2127d1)]
- **http2**: validate non-link headers in writeEarlyHints (Matteo
Collina)
[#&#8203;62017](https://redirect.github.com/nodejs/node/pull/62017)
-
\[[`8c989ec4a3`](https://redirect.github.com/nodejs/node/commit/8c989ec4a3)]
- **(SEMVER-MINOR)** **inspector**: expose precise coverage start to JS
runtime (sangwook)
[#&#8203;63079](https://redirect.github.com/nodejs/node/pull/63079)
-
\[[`c05f38229b`](https://redirect.github.com/nodejs/node/commit/c05f38229b)]
- **lib**: cleanup stateless diffiehellman key handling (Filip Skokan)
[#&#8203;62645](https://redirect.github.com/nodejs/node/pull/62645)
-
\[[`1c16b45d35`](https://redirect.github.com/nodejs/node/commit/1c16b45d35)]
- **lib**: refactor internal webidl converters (Filip Skokan)
[#&#8203;62979](https://redirect.github.com/nodejs/node/pull/62979)
-
\[[`02f35d6dce`](https://redirect.github.com/nodejs/node/commit/02f35d6dce)]
- **lib**: define `kEnumerableProperty` atomically (Antoine du Hamel)
[#&#8203;63609](https://redirect.github.com/nodejs/node/pull/63609)
-
\[[`12c51547ba`](https://redirect.github.com/nodejs/node/commit/12c51547ba)]
- **lib**: fix typos in esm loader comments (RonGamzu)
[#&#8203;63465](https://redirect.github.com/nodejs/node/pull/63465)
-
\[[`9b03b84262`](https://redirect.github.com/nodejs/node/commit/9b03b84262)]
- **lib**: fix typo idenity => identity (Daijiro Wachi)
[#&#8203;63112](https://redirect.github.com/nodejs/node/pull/63112)
-
\[[`a84e6b0567`](https://redirect.github.com/nodejs/node/commit/a84e6b0567)]
- **lib**: fixes validator message (Daijiro Wachi)
[#&#8203;62823](https://redirect.github.com/nodejs/node/pull/62823)
-
\[[`11734166a8`](https://redirect.github.com/nodejs/node/commit/11734166a8)]
- **lib**: narrow ReadableStreamBYOBRequest.view return type to
Uint8Array (RoomWithOutRoof)
[#&#8203;63017](https://redirect.github.com/nodejs/node/pull/63017)
-
\[[`7cead61d21`](https://redirect.github.com/nodejs/node/commit/7cead61d21)]
- **meta**: flip mcollina emails in .mailmap (Matteo Collina)
[#&#8203;63621](https://redirect.github.com/nodejs/node/pull/63621)
-
\[[`a08cfcfd35`](https://redirect.github.com/nodejs/node/commit/a08cfcfd35)]
- **meta**: label "source maps" PRs (Chengzhong Wu)
[#&#8203;63591](https://redirect.github.com/nodejs/node/pull/63591)
-
\[[`d56e8d2512`](https://redirect.github.com/nodejs/node/commit/d56e8d2512)]
- **meta**: add `vfs` subsystem label (René)
[#&#8203;62331](https://redirect.github.com/nodejs/node/pull/62331)
-
\[[`6201cfe488`](https://redirect.github.com/nodejs/node/commit/6201cfe488)]
- **meta**: skip scheduled workflows on forks (Jamie Magee)
[#&#8203;63565](https://redirect.github.com/nodejs/node/pull/63565)
-
\[[`f095e2bd31`](https://redirect.github.com/nodejs/node/commit/f095e2bd31)]
- **meta**: add additional gitignore entries (James M Snell)
[#&#8203;63267](https://redirect.github.com/nodejs/node/pull/63267)
-
\[[`1ea52c444c`](https://redirect.github.com/nodejs/node/commit/1ea52c444c)]
- **meta**: move one or more collaborators to emeritus (Node.js GitHub
Bot) [#&#8203;63402](https://redirect.github.com/nodejs/node/pull/63402)
-
\[[`b1b2327611`](https://redirect.github.com/nodejs/node/commit/b1b2327611)]
- **meta**: move one or more collaborators to emeritus (Node.js GitHub
Bot) [#&#8203;63235](https://redirect.github.com/nodejs/node/pull/63235)
-
\[[`7d88e130a9`](https://redirect.github.com/nodejs/node/commit/7d88e130a9)]
- **meta**: ignore AI assistants files (Matteo Collina)
[#&#8203;62612](https://redirect.github.com/nodejs/node/pull/62612)
-
\[[`a53b51df38`](https://redirect.github.com/nodejs/node/commit/a53b51df38)]
- **module**: load ESM helpers eagerly in the snapshot (Joyee Cheung)
[#&#8203;63550](https://redirect.github.com/nodejs/node/pull/63550)
-
\[[`69df688fff`](https://redirect.github.com/nodejs/node/commit/69df688fff)]
- **module**: fix sync hook short-circuit in require() in imported CJS
(Joyee Cheung)
[#&#8203;62920](https://redirect.github.com/nodejs/node/pull/62920)
-
\[[`75d9a4ed47`](https://redirect.github.com/nodejs/node/commit/75d9a4ed47)]
- **node-api**: support SharedArrayBuffer in napi\_create\_typedarray
(Yilong Li)
[#&#8203;62710](https://redirect.github.com/nodejs/node/pull/62710)
-
\[[`c20aa4c47b`](https://redirect.github.com/nodejs/node/commit/c20aa4c47b)]
- **quic**: add reusePort option to QuicEndpoint (James M Snell)
[#&#8203;63267](https://redirect.github.com/nodejs/node/pull/63267)
-
\[[`26a30d8a7f`](https://redirect.github.com/nodejs/node/commit/26a30d8a7f)]
- **quic**: implement rate limiting for version nego and immediate close
(James M Snell)
[#&#8203;63267](https://redirect.github.com/nodejs/node/pull/63267)
-
\[[`0b534b5770`](https://redirect.github.com/nodejs/node/commit/0b534b5770)]
- **quic**: fixup linting issue after other changes (James M Snell)
[#&#8203;63267](https://redirect.github.com/nodejs/node/pull/63267)
-
\[[`4b367cbe09`](https://redirect.github.com/nodejs/node/commit/4b367cbe09)]
- **quic**: remove unused binding variable in session.cc (James M Snell)
[#&#8203;63177](https://redirect.github.com/nodejs/node/pull/63177)
-
\[[`2574bef5a6`](https://redirect.github.com/nodejs/node/commit/2574bef5a6)]
- **repl**: fix dedup comparing normalized line against raw history
(Daijiro Wachi)
[#&#8203;62886](https://redirect.github.com/nodejs/node/pull/62886)
-
\[[`30e71c7e49`](https://redirect.github.com/nodejs/node/commit/30e71c7e49)]
- **sqlite**: keep source database alive during backup (Matteo Collina)
[#&#8203;62673](https://redirect.github.com/nodejs/node/pull/62673)
-
\[[`677ca7e76c`](https://redirect.github.com/nodejs/node/commit/677ca7e76c)]
- **src**: simplify OpenSSL feature gates (Filip Skokan)
[#&#8203;63255](https://redirect.github.com/nodejs/node/pull/63255)
-
\[[`c863c75c39`](https://redirect.github.com/nodejs/node/commit/c863c75c39)]
- **src**: add BoringSSL EVP enumeration fallback (Filip Skokan)
[#&#8203;63206](https://redirect.github.com/nodejs/node/pull/63206)
-
\[[`f6b2466921`](https://redirect.github.com/nodejs/node/commit/f6b2466921)]
- **src**: decouple KeyObject and CryptoKey and move CryptoKey to src
(Filip Skokan)
[#&#8203;62924](https://redirect.github.com/nodejs/node/pull/62924)
-
\[[`92d4f07dd2`](https://redirect.github.com/nodejs/node/commit/92d4f07dd2)]
- **src**: remove license headers for new node\_profiling files
(Chengzhong Wu)
[#&#8203;63066](https://redirect.github.com/nodejs/node/pull/63066)
-
\[[`8ac5d771c8`](https://redirect.github.com/nodejs/node/commit/8ac5d771c8)]
- **src**: split profiling helpers from util (Ilyas Shabi)
[#&#8203;63008](https://redirect.github.com/nodejs/node/pull/63008)
-
\[[`85d1639495`](https://redirect.github.com/nodejs/node/commit/85d1639495)]
- **src**: remove TOCTOU race condition when encoding SAB-backed
`Buffer`s (Antoine du Hamel)
[#&#8203;63517](https://redirect.github.com/nodejs/node/pull/63517)
-
\[[`9473c5f05c`](https://redirect.github.com/nodejs/node/commit/9473c5f05c)]
- **src**: skip duplicate UTF-8 validation in TextDecoder fatal path
(Mert Can Altin)
[#&#8203;63231](https://redirect.github.com/nodejs/node/pull/63231)
-
\[[`f35c91ee68`](https://redirect.github.com/nodejs/node/commit/f35c91ee68)]
- **src**: improve token return value check (James M Snell)
[#&#8203;63483](https://redirect.github.com/nodejs/node/pull/63483)
-
\[[`26f677c1c5`](https://redirect.github.com/nodejs/node/commit/26f677c1c5)]
- **src**: expose `node::RegisterContext` to make a node managed context
(Chengzhong Wu)
[#&#8203;62322](https://redirect.github.com/nodejs/node/pull/62322)
-
\[[`275cf909b6`](https://redirect.github.com/nodejs/node/commit/275cf909b6)]
- **src,sqlite**: only pass `xFilter` when user provided a callback
(Antoine du Hamel)
[#&#8203;63516](https://redirect.github.com/nodejs/node/pull/63516)
-
\[[`287e02303f`](https://redirect.github.com/nodejs/node/commit/287e02303f)]
- **src,sqlite**: remove dead code (Edy Silva)
[#&#8203;63204](https://redirect.github.com/nodejs/node/pull/63204)
-
\[[`58fa2ee189`](https://redirect.github.com/nodejs/node/commit/58fa2ee189)]
- **stream**: switch to internal `sleep` binding (Antoine du Hamel)
[#&#8203;63611](https://redirect.github.com/nodejs/node/pull/63611)
-
\[[`f954ab3f1a`](https://redirect.github.com/nodejs/node/commit/f954ab3f1a)]
- **stream**: use data listener for compose forwarding (Trivikram Kamat)
[#&#8203;63593](https://redirect.github.com/nodejs/node/pull/63593)
-
\[[`dc57173003`](https://redirect.github.com/nodejs/node/commit/dc57173003)]
- **stream**: fix Writable.toWeb() hang on synchronous drain (sangwook)
[#&#8203;61197](https://redirect.github.com/nodejs/node/pull/61197)
-
\[[`3f54c8ba32`](https://redirect.github.com/nodejs/node/commit/3f54c8ba32)]
- ***Revert*** "**stream**: noop pause/resume on destroyed streams"
(Stewart X Addison)
[#&#8203;63834](https://redirect.github.com/nodejs/node/pull/63834)
-
\[[`cee279c5d6`](https://redirect.github.com/nodejs/node/commit/cee279c5d6)]
- **stream**: remove unnecessary check (Antoine du Hamel)
[#&#8203;63030](https://redirect.github.com/nodejs/node/pull/63030)
-
\[[`61b20f60a3`](https://redirect.github.com/nodejs/node/commit/61b20f60a3)]
- **test**: update tls/crypto behaviour expectations when using
BoringSSL (Filip Skokan)
[#&#8203;63161](https://redirect.github.com/nodejs/node/pull/63161)
-
\[[`a835363808`](https://redirect.github.com/nodejs/node/commit/a835363808)]
- **test**: update WPT for WebCryptoAPI to
[`97bbc72`](https://redirect.github.com/nodejs/node/commit/97bbc7247a)
(Node.js GitHub Bot)
[#&#8203;63417](https://redirect.github.com/nodejs/node/pull/63417)
-
\[[`a00297480b`](https://redirect.github.com/nodejs/node/commit/a00297480b)]
- **test**: update WPT resources, interfaces and WebCryptoAPI (Node.js
GitHub Bot)
[#&#8203;62389](https://redirect.github.com/nodejs/node/pull/62389)
-
\[[`5a95a2b055`](https://redirect.github.com/nodejs/node/commit/5a95a2b055)]
- **test**: shorten path in net pipe connect errors (Matteo Collina)
[#&#8203;63405](https://redirect.github.com/nodejs/node/pull/63405)
-
\[[`5e8ff22d8f`](https://redirect.github.com/nodejs/node/commit/5e8ff22d8f)]
- **test**: remove test-node-output-v8-warning (Joyee Cheung)
[#&#8203;63469](https://redirect.github.com/nodejs/node/pull/63469)
-
\[[`ee15380950`](https://redirect.github.com/nodejs/node/commit/ee15380950)]
- **test**: update test426-fixtures to
[`9b9e225`](https://redirect.github.com/nodejs/node/commit/9b9e225b5a63139e9a95cdd1bf874a8f0b9d131)
(Node.js GitHub Bot)
[#&#8203;63373](https://redirect.github.com/nodejs/node/pull/63373)
-
\[[`9e063d9bea`](https://redirect.github.com/nodejs/node/commit/9e063d9bea)]
- **test**: update WPT for url to
[`e4a4672`](https://redirect.github.com/nodejs/node/commit/e4a4672e9e)
(Node.js GitHub Bot)
[#&#8203;63372](https://redirect.github.com/nodejs/node/pull/63372)
-
\[[`503bee4b43`](https://redirect.github.com/nodejs/node/commit/503bee4b43)]
- **test**: deflake async-hooks statwatcher test (Trivikram Kamat)
[#&#8203;63396](https://redirect.github.com/nodejs/node/pull/63396)
-
\[[`cccc7c32d8`](https://redirect.github.com/nodejs/node/commit/cccc7c32d8)]
- **test**: avoid test\_runner watch restart in spec snapshot (Trivikram
Kamat)
[#&#8203;63392](https://redirect.github.com/nodejs/node/pull/63392)
-
\[[`c89489258c`](https://redirect.github.com/nodejs/node/commit/c89489258c)]
- **test**: reduce watch mode restart flakiness (Trivikram Kamat)
[#&#8203;63390](https://redirect.github.com/nodejs/node/pull/63390)
-
\[[`e4d5e2578e`](https://redirect.github.com/nodejs/node/commit/e4d5e2578e)]
- **test**: isolate rerun-failures state file under tmpdir (Chemi Atlow)
[#&#8203;63449](https://redirect.github.com/nodejs/node/pull/63449)
-
\[[`362644a9ba`](https://redirect.github.com/nodejs/node/commit/362644a9ba)]
- **test**: wait for ok before initial break after restart (Yuya Inoue)
[#&#8203;62807](https://redirect.github.com/nodejs/node/pull/62807)
-
\[[`c4058d0e05`](https://redirect.github.com/nodejs/node/commit/c4058d0e05)]
- **test**: disable Maglev in near-heap-limit worker test (Trivikram
Kamat)
[#&#8203;63398](https://redirect.github.com/nodejs/node/pull/63398)
-
\[[`214da630a7`](https://redirect.github.com/nodejs/node/commit/214da630a7)]
- **test**: deflake connection refused proxy tests (Trivikram Kamat)
[#&#8203;63395](https://redirect.github.com/nodejs/node/pull/63395)
-
\[[`1d61a29876`](https://redirect.github.com/nodejs/node/commit/1d61a29876)]
- **test**: avoid repeated writes in watch helper (Trivikram Kamat)
[#&#8203;63386](https://redirect.github.com/nodejs/node/pull/63386)
-
\[[`2004e25387`](https://redirect.github.com/nodejs/node/commit/2004e25387)]
- **test**: deflake watch mode worker test (Trivikram Kamat)
[#&#8203;63384](https://redirect.github.com/nodejs/node/pull/63384)
-
\[[`d691cccfc1`](https://redirect.github.com/nodejs/node/commit/d691cccfc1)]
- **test**: relax test-memory-usage arrayBuffers check (inoway46)
[#&#8203;63244](https://redirect.github.com/nodejs/node/pull/63244)
-
\[[`0ff6bf853c`](https://redirect.github.com/nodejs/node/commit/0ff6bf853c)]
- **test**: reduce flakiness of `different-registry-per-thread` (Antoine
du Hamel)
[#&#8203;63244](https://redirect.github.com/nodejs/node/pull/63244)
-
\[[`d9f4e8e503`](https://redirect.github.com/nodejs/node/commit/d9f4e8e503)]
- **test**: fix flaky test-watch-mode-inspect timeout (Matteo Collina)
[#&#8203;63361](https://redirect.github.com/nodejs/node/pull/63361)
-
\[[`6d7cd50328`](https://redirect.github.com/nodejs/node/commit/6d7cd50328)]
- **test**: relax min assertion in test-performance-eventloopdelay
(Marco)
[#&#8203;63100](https://redirect.github.com/nodejs/node/pull/63100)
-
\[[`9dafe1d2d8`](https://redirect.github.com/nodejs/node/commit/9dafe1d2d8)]
- **test**: avoid flaky restart sync in debugger exceptions test (Yuya
Inoue)
[#&#8203;62055](https://redirect.github.com/nodejs/node/pull/62055)
-
\[[`989b2de973`](https://redirect.github.com/nodejs/node/commit/989b2de973)]
- **test**: avoid initial-break wait in restart-message (inoway46)
[#&#8203;62060](https://redirect.github.com/nodejs/node/pull/62060)
-
\[[`a072a25ee7`](https://redirect.github.com/nodejs/node/commit/a072a25ee7)]
- **test**: move FFI tests to `NATIVE_SUITES` (Antoine du Hamel)
[#&#8203;63165](https://redirect.github.com/nodejs/node/pull/63165)
-
\[[`64efbfd878`](https://redirect.github.com/nodejs/node/commit/64efbfd878)]
- **test**: use ERM to destroy sqlite database handles after tests
(René)
[#&#8203;63076](https://redirect.github.com/nodejs/node/pull/63076)
-
\[[`7dee66cd94`](https://redirect.github.com/nodejs/node/commit/7dee66cd94)]
- **test\_runner**: dont buffer unordered events in process isolation
mode (Moshe Atlow)
[#&#8203;63432](https://redirect.github.com/nodejs/node/pull/63432)
-
\[[`d257eec1e3`](https://redirect.github.com/nodejs/node/commit/d257eec1e3)]
- **test\_runner**: fix --test-rerun-failures swallowing failures on
retry (Chemi Atlow)
[#&#8203;63431](https://redirect.github.com/nodejs/node/pull/63431)
-
\[[`288c320e2f`](https://redirect.github.com/nodejs/node/commit/288c320e2f)]
- **test\_runner**: show replayed-from-attempt hint in spec reporter
(Moshe Atlow)
[#&#8203;63429](https://redirect.github.com/nodejs/node/pull/63429)
-
\[[`904bdf5bb4`](https://redirect.github.com/nodejs/node/commit/904bdf5bb4)]
- **test\_runner**: preserve run duration when using test-rerun (Moshe
Atlow)
[#&#8203;63429](https://redirect.github.com/nodejs/node/pull/63429)
-
\[[`df183d7bfa`](https://redirect.github.com/nodejs/node/commit/df183d7bfa)]
- **test\_runner**: avoid hanging on incomplete v8 frames (Ali Hassan)
[#&#8203;62704](https://redirect.github.com/nodejs/node/pull/62704)
-
\[[`ec86c69726`](https://redirect.github.com/nodejs/node/commit/ec86c69726)]
- **test\_runner**: fix diagnostics channel context tracking (Moshe
Atlow)
[#&#8203;63283](https://redirect.github.com/nodejs/node/pull/63283)
-
\[[`94e5f63b83`](https://redirect.github.com/nodejs/node/commit/94e5f63b83)]
- **tls**: add unsupported renegotiation error (Filip Skokan)
[#&#8203;63161](https://redirect.github.com/nodejs/node/pull/63161)
-
\[[`06d308fb61`](https://redirect.github.com/nodejs/node/commit/06d308fb61)]
- **tools**: prevent lib code from reading KeyObject and CryptoKey
accessors (Filip Skokan)
[#&#8203;63111](https://redirect.github.com/nodejs/node/pull/63111)
-
\[[`2e4a0d0c91`](https://redirect.github.com/nodejs/node/commit/2e4a0d0c91)]
- **tools**: bump brace-expansion from 5.0.5 to 5.0.6 in /tools/eslint
(dependabot\[bot])
[#&#8203;63415](https://redirect.github.com/nodejs/node/pull/63415)
-
\[[`4c9666b366`](https://redirect.github.com/nodejs/node/commit/4c9666b366)]
- **tools**: skip commit-lint on backport pull requests (Marco)
[#&#8203;63378](https://redirect.github.com/nodejs/node/pull/63378)
-
\[[`67d0c490a8`](https://redirect.github.com/nodejs/node/commit/67d0c490a8)]
- **tools**: fix skip of `test-internet` on forks (Antoine du Hamel)
[#&#8203;63492](https://redirect.github.com/nodejs/node/pull/63492)
-
\[[`02f73c7cac`](https://redirect.github.com/nodejs/node/commit/02f73c7cac)]
- **tools**: bump the eslint group in /tools/eslint with 4 updates
(dependabot\[bot])
[#&#8203;63075](https://redirect.github.com/nodejs/node/pull/63075)
-
\[[`5d016d3241`](https://redirect.github.com/nodejs/node/commit/5d016d3241)]
- **tools**: update gyp-next to 0.22.2 (Node.js GitHub Bot)
[#&#8203;63374](https://redirect.github.com/nodejs/node/pull/63374)
-
\[[`55af0f0edb`](https://redirect.github.com/nodejs/node/commit/55af0f0edb)]
- **tools**: fix test426 updater (Antoine du Hamel)
[#&#8203;63271](https://redirect.github.com/nodejs/node/pull/63271)
-
\[[`d8475e167a`](https://redirect.github.com/nodejs/node/commit/d8475e167a)]
- **tools**: use different branch for tool updates on staging branches
(Antoine du Hamel)
[#&#8203;63110](https://redirect.github.com/nodejs/node/pull/63110)
-
\[[`c605df9e50`](https://redirect.github.com/nodejs/node/commit/c605df9e50)]
- **util**: remove unused functions (Antoine du Hamel)
[#&#8203;63612](https://redirect.github.com/nodejs/node/pull/63612)
-
\[[`fe4540ebdb`](https://redirect.github.com/nodejs/node/commit/fe4540ebdb)]
- **util**: create hex style cache and fast path (Guilherme Araújo)
[#&#8203;62999](https://redirect.github.com/nodejs/node/pull/62999)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJkb2NrZXIiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 6c5a1fb0637f18f4458e28ab1cd07c2419dce513
@renovate @actions-user
Update AWS SDK (#5918)
b459595 
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/aws/aws-sdk-go-v2/config](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.32.27` → `v1.32.29` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.29?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.27/v1.32.29?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/credentials](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.19.26` → `v1.19.28` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.28?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.26/v1.19.28?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/apigateway](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.40.8` → `v1.41.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.41.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.40.8/v1.41.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/autoscaling](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.68.1` → `v1.69.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.69.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.68.1/v1.69.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/cloudfront](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.65.4` → `v1.66.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.66.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.65.4/v1.66.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/cloudwatch](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.61.1` → `v1.62.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.62.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.61.1/v1.62.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/directconnect](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.41.2` → `v1.42.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.41.2/v1.42.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/dynamodb](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.59.2` → `v1.60.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.60.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.59.2/v1.60.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ec2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.311.0` → `v1.315.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.315.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.311.0/v1.315.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ecs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.86.2` → `v1.88.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.88.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.86.2/v1.88.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/efs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.42.3` → `v1.43.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.43.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.42.3/v1.43.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/eks](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.88.1` → `v1.89.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.89.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.88.1/v1.89.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.34.8` → `v1.35.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.35.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.34.8/v1.35.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.55.6` → `v1.56.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.56.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.55.6/v1.56.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/iam](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.54.7` → `v1.55.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.55.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.54.7/v1.55.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/kms](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.53.6` → `v1.54.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.54.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.53.6/v1.54.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/lambda](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.94.1` → `v1.96.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.96.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.94.1/v1.96.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/networkfirewall](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.62.1` → `v1.63.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.63.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.62.1/v1.63.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/networkmanager](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.42.8` → `v1.43.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.43.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.42.8/v1.43.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/rds](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.119.5` → `v1.120.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.120.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.119.5/v1.120.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/route53](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.63.5` → `v1.64.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.64.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.63.5/v1.64.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.104.2` → `v1.105.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.105.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.104.2/v1.105.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sesv2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.62.6` → `v1.63.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.63.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.62.6/v1.63.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sns](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.40.3` → `v1.41.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.41.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.40.3/v1.41.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sqs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.44.2` → `v1.45.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.45.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.44.2/v1.45.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ssm](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.69.5` → `v1.71.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.71.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.69.5/v1.71.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sts](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.43.5` → `v1.44.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.44.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.43.5/v1.44.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>aws/aws-sdk-go-v2
(github.com/aws/aws-sdk-go-v2/service/apigateway)</summary>

###
[`v1.41.0`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2025-06-12)

#### Module Highlights

- `github.com/aws/aws-sdk-go-v2/service/apigateway`:
[v1.31.3](service/apigateway/CHANGELOG.md#v1313-2025-06-12)
  - **Documentation**: Documentation updates for Amazon API Gateway
- `github.com/aws/aws-sdk-go-v2/service/apigatewayv2`:
[v1.28.3](service/apigatewayv2/CHANGELOG.md#v1283-2025-06-12)
  - **Documentation**: Documentation updates for Amazon API Gateway
- `github.com/aws/aws-sdk-go-v2/service/connectcampaignsv2`:
[v1.3.0](service/connectcampaignsv2/CHANGELOG.md#v130-2025-06-12)
- **Feature**: Added PutInstanceCommunicationLimits and
GetInstanceCommunicationLimits APIs
- `github.com/aws/aws-sdk-go-v2/service/ecs`:
[v1.57.5](service/ecs/CHANGELOG.md#v1575-2025-06-12)
- **Documentation**: This Amazon ECS release supports updating the
capacityProviderStrategy parameter in update-service.
- `github.com/aws/aws-sdk-go-v2/service/emrserverless`:
[v1.31.0](service/emrserverless/CHANGELOG.md#v1310-2025-06-12)
- **Feature**: This release adds support for retrieval of the optional
executionIamPolicy field in the GetJobRun API response.
- `github.com/aws/aws-sdk-go-v2/service/iotfleetwise`:
[v1.27.0](service/iotfleetwise/CHANGELOG.md#v1270-2025-06-12)
- **Feature**: Add new status READY\_FOR\_CHECKIN used for vehicle
synchronisation
- `github.com/aws/aws-sdk-go-v2/service/kms`:
[v1.41.0](service/kms/CHANGELOG.md#v1410-2025-06-12)
- **Feature**: AWS KMS announces the support of ML-DSA key pairs that
creates post-quantum safe digital signatures.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: ed2d19ec9b3707362c5c7c1667ca76c09741411e
@renovate @cursoragent
@tphoney @actions-user
Update Go (#5924)
0cfcedf 
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go |
`v1.36.11-20260415201107-50325440f8f2.1` →
`v1.36.11-20260709200747-435963d16310.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/buf.build%2fgen%2fgo%2fbufbuild%2fprotovalidate%2fprotocolbuffers%2fgo/v1.36.11-20260709200747-435963d16310.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/buf.build%2fgen%2fgo%2fbufbuild%2fprotovalidate%2fprotocolbuffers%2fgo/v1.36.11-20260415201107-50325440f8f2.1/v1.36.11-20260709200747-435963d16310.1?slim=true)
|
| buf.build/gen/go/depot/api/connectrpc/go |
`v1.20.0-20260620134603-18444ddb9580.1` →
`v1.20.0-20260706220319-a3bcb894aab3.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/buf.build%2fgen%2fgo%2fdepot%2fapi%2fconnectrpc%2fgo/v1.20.0-20260706220319-a3bcb894aab3.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/buf.build%2fgen%2fgo%2fdepot%2fapi%2fconnectrpc%2fgo/v1.20.0-20260620134603-18444ddb9580.1/v1.20.0-20260706220319-a3bcb894aab3.1?slim=true)
|
| buf.build/gen/go/depot/api/protocolbuffers/go |
`v1.36.11-20260620134603-18444ddb9580.1` →
`v1.36.11-20260706220319-a3bcb894aab3.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/buf.build%2fgen%2fgo%2fdepot%2fapi%2fprotocolbuffers%2fgo/v1.36.11-20260706220319-a3bcb894aab3.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/buf.build%2fgen%2fgo%2fdepot%2fapi%2fprotocolbuffers%2fgo/v1.36.11-20260620134603-18444ddb9580.1/v1.36.11-20260706220319-a3bcb894aab3.1?slim=true)
|
|
[github.com/coreos/go-oidc/v3](https://redirect.github.com/coreos/go-oidc)
| `v3.19.0` → `v3.20.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcoreos%2fgo-oidc%2fv3/v3.20.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcoreos%2fgo-oidc%2fv3/v3.19.0/v3.20.0?slim=true)
|
| [github.com/google/cel-go](https://redirect.github.com/google/cel-go)
| `v0.28.1` → `v0.29.2` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogle%2fcel-go/v0.29.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogle%2fcel-go/v0.28.1/v0.29.2?slim=true)
|
|
[github.com/googleapis/gax-go/v2](https://redirect.github.com/googleapis/gax-go)
| `v2.22.0` → `v2.23.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogleapis%2fgax-go%2fv2/v2.23.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogleapis%2fgax-go%2fv2/v2.22.0/v2.23.0?slim=true)
|
|
[github.com/goreleaser/goreleaser/v2](https://redirect.github.com/goreleaser/goreleaser)
| `v2.16.0` → `v2.17.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.17.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.16.0/v2.17.0?slim=true)
|
|
[github.com/harness/harness-go-sdk](https://redirect.github.com/harness/harness-go-sdk)
| `v0.8.7` → `v0.8.11` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fharness%2fharness-go-sdk/v0.8.11?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fharness%2fharness-go-sdk/v0.8.7/v0.8.11?slim=true)
|
|
[github.com/neo4j/neo4j-go-driver/v6](https://redirect.github.com/neo4j/neo4j-go-driver)
| `v6.1.0` → `v6.2.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fneo4j%2fneo4j-go-driver%2fv6/v6.2.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fneo4j%2fneo4j-go-driver%2fv6/v6.1.0/v6.2.0?slim=true)
|
|
[github.com/openai/openai-go/v3](https://redirect.github.com/openai/openai-go)
| `v3.41.0` → `v3.41.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopenai%2fopenai-go%2fv3/v3.41.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopenai%2fopenai-go%2fv3/v3.41.0/v3.41.1?slim=true)
|
| [github.com/pborman/ansi](https://redirect.github.com/pborman/ansi) |
`v1.1.0` → `v1.2.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fpborman%2fansi/v1.2.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fpborman%2fansi/v1.1.0/v1.2.0?slim=true)
|
|
[github.com/posthog/posthog-go](https://redirect.github.com/posthog/posthog-go)
| `v1.17.4` → `v1.17.5` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fposthog%2fposthog-go/v1.17.5?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fposthog%2fposthog-go/v1.17.4/v1.17.5?slim=true)
|
|
[github.com/resend/resend-go/v3](https://redirect.github.com/resend/resend-go)
| `v3.9.2` → `v3.10.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fresend%2fresend-go%2fv3/v3.10.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fresend%2fresend-go%2fv3/v3.9.2/v3.10.1?slim=true)
|
|
[github.com/zclconf/go-cty](https://redirect.github.com/zclconf/go-cty)
| `v1.18.1` → `v1.19.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fzclconf%2fgo-cty/v1.19.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fzclconf%2fgo-cty/v1.18.1/v1.19.0?slim=true)
|
|
[gitlab.com/gitlab-org/api/client-go/v2](https://gitlab.com/gitlab-org/api/client-go)
| `v2.44.0` → `v2.46.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/gitlab.com%2fgitlab-org%2fapi%2fclient-go%2fv2/v2.46.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/gitlab.com%2fgitlab-org%2fapi%2fclient-go%2fv2/v2.44.0/v2.46.0?slim=true)
|
| [golang.org/x/image](https://pkg.go.dev/golang.org/x/image) |
[`v0.43.0` →
`v0.44.0`](https://cs.opensource.google/go/x/image/+/refs/tags/v0.43.0...refs/tags/v0.44.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fimage/v0.44.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fimage/v0.43.0/v0.44.0?slim=true)
|
| [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.56.0` →
`v0.57.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.56.0...refs/tags/v0.57.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.57.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.56.0/v0.57.0?slim=true)
|
| [golang.org/x/sync](https://pkg.go.dev/golang.org/x/sync) | [`v0.21.0`
→
`v0.22.0`](https://cs.opensource.google/go/x/sync/+/refs/tags/v0.21.0...refs/tags/v0.22.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fsync/v0.22.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fsync/v0.21.0/v0.22.0?slim=true)
|
| [golang.org/x/text](https://pkg.go.dev/golang.org/x/text) | [`v0.38.0`
→
`v0.40.0`](https://cs.opensource.google/go/x/text/+/refs/tags/v0.38.0...refs/tags/v0.40.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftext/v0.40.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftext/v0.38.0/v0.40.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>coreos/go-oidc (github.com/coreos/go-oidc/v3)</summary>

###
[`v3.20.0`](https://redirect.github.com/coreos/go-oidc/releases/tag/v3.20.0)

[Compare
Source](https://redirect.github.com/coreos/go-oidc/compare/v3.19.0...v3.20.0)

#### What's Changed

- oidc: modernize with new Go APIs by
[@&#8203;ericchiang](https://redirect.github.com/ericchiang) in
[#&#8203;487](https://redirect.github.com/coreos/go-oidc/pull/487)
- oidc: improve documentation for APIs by
[@&#8203;ericchiang](https://redirect.github.com/ericchiang) in
[#&#8203;488](https://redirect.github.com/coreos/go-oidc/pull/488)
- SECURITY.md: add a security policy and point to project-level
reporting by
[@&#8203;ericchiang](https://redirect.github.com/ericchiang) in
[#&#8203;489](https://redirect.github.com/coreos/go-oidc/pull/489)
- oidc: ignore JWKs with unknown signing algorithms rather than failing
by [@&#8203;ericchiang](https://redirect.github.com/ericchiang) in
[#&#8203;491](https://redirect.github.com/coreos/go-oidc/pull/491)
- readme: update README and docs by
[@&#8203;ericchiang](https://redirect.github.com/ericchiang) in
[#&#8203;492](https://redirect.github.com/coreos/go-oidc/pull/492)
- oidc: add API for determining when issuer URLs mismatch by
[@&#8203;ericchiang](https://redirect.github.com/ericchiang) in
[#&#8203;493](https://redirect.github.com/coreos/go-oidc/pull/493)
- oidc: add constants for "email" and "profile" scopes by
[@&#8203;ericchiang](https://redirect.github.com/ericchiang) in
[#&#8203;494](https://redirect.github.com/coreos/go-oidc/pull/494)

**Full Changelog**:
<coreos/go-oidc@v3.19.0...v3.20.0>

</details>

<details>
<summary>google/cel-go (github.com/google/cel-go)</summary>

###
[`v0.29.2`](https://redirect.github.com/cel-expr/cel-go/releases/tag/v0.29.2)

[Compare
Source](https://redirect.github.com/google/cel-go/compare/v0.29.1...v0.29.2)

##### What's Changed

- Normalize cel/prompt\_test.go to LF, add missing newline in prompt.go
by [@&#8203;dims](https://redirect.github.com/dims) in
[cel-expr#1361](https://redirect.github.com/cel-expr/cel-go/pull/1361)
- Update lists.go runtime cost calculator by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1360](https://redirect.github.com/cel-expr/cel-go/pull/1360)

**Full Changelog**:
<cel-expr/cel-go@v0.29.1...v0.29.2>

###
[`v0.29.1`](https://redirect.github.com/cel-expr/cel-go/releases/tag/v0.29.1)

[Compare
Source](https://redirect.github.com/google/cel-go/compare/v0.29.0...v0.29.1)

#### What's Changed

- cel/prompt.go: convert CRLF to LF line ending by
[@&#8203;pohly](https://redirect.github.com/pohly) in
[cel-expr#1359](https://redirect.github.com/cel-expr/cel-go/pull/1359)

**Full Changelog**:
<cel-expr/cel-go@v0.29.0...v0.29.1>

###
[`v0.29.0`](https://redirect.github.com/cel-expr/cel-go/releases/tag/v0.29.0)

[Compare
Source](https://redirect.github.com/google/cel-go/compare/v0.28.1...v0.29.0)

#### What's Changed

##### New Features

- **Add JSON encoder extension** — a new `ext` library for JSON encoding
by [@&#8203;rohan-patnaik](https://redirect.github.com/rohan-patnaik) in
[cel-expr#1340](https://redirect.github.com/cel-expr/cel-go/pull/1340)
- **Upstream `network.IP`/`CIDR` support** from Kubernetes by
[@&#8203;tdesrosi](https://redirect.github.com/tdesrosi) in
[cel-expr#1238](https://redirect.github.com/cel-expr/cel-go/pull/1238)
- **Managed execution frame with async call foundations** by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1316](https://redirect.github.com/cel-expr/cel-go/pull/1316)
- **Execution frame integration with updated `InterpretableV2`** by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1344](https://redirect.github.com/cel-expr/cel-go/pull/1344)
- **Add conformance test runner for CEL Policies** by
[@&#8203;l46kok](https://redirect.github.com/l46kok) in
[cel-expr#1319](https://redirect.github.com/cel-expr/cel-go/pull/1319)

##### Bug Fixes

- **Fix unintentional unwrapping of optionals** at any level of depth by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1315](https://redirect.github.com/cel-expr/cel-go/pull/1315)
- **Fix `has()` unknown propagation** during partial evaluation by
[@&#8203;0xASTRA](https://redirect.github.com/0xASTRA) in
[cel-expr#1324](https://redirect.github.com/cel-expr/cel-go/pull/1324)
- **Enforce expression size limit before source construction** by
[@&#8203;thesmartshadow](https://redirect.github.com/thesmartshadow) in
[cel-expr#1302](https://redirect.github.com/cel-expr/cel-go/pull/1302)
- **Policy variable scoping fixes** by
[@&#8203;jnthntatum](https://redirect.github.com/jnthntatum) in
[cel-expr#1321](https://redirect.github.com/cel-expr/cel-go/pull/1321)
- **Emit valid CEL for doubles in scientific notation** in the
parser/unparser by
[@&#8203;moraneus](https://redirect.github.com/moraneus) in
[cel-expr#1326](https://redirect.github.com/cel-expr/cel-go/pull/1326)
- **Allow aliases for simple names** in containers by
[@&#8203;rohan-patnaik](https://redirect.github.com/rohan-patnaik) in
[cel-expr#1327](https://redirect.github.com/cel-expr/cel-go/pull/1327)
- **Reject out-of-range minutes** in timezone offset parsing by
[@&#8203;alhudz](https://redirect.github.com/alhudz) in
[cel-expr#1336](https://redirect.github.com/cel-expr/cel-go/pull/1336)
- **Validate offset on empty-string path** in `indexOf` and
`lastIndexOf` by [@&#8203;alhudz](https://redirect.github.com/alhudz) in
[cel-expr#1335](https://redirect.github.com/cel-expr/cel-go/pull/1335)
- **Guard `int32`/`uint32` map key narrowing** in `qualifyInternal` by
[@&#8203;alhudz](https://redirect.github.com/alhudz) in
[cel-expr#1337](https://redirect.github.com/cel-expr/cel-go/pull/1337)
- **Add max size check to `genRange()`** in `ext/lists` to prevent OOM
by [@&#8203;marwan9696](https://redirect.github.com/marwan9696) in
[cel-expr#1310](https://redirect.github.com/cel-expr/cel-go/pull/1310)

##### Cost Tracking

- **Ensure receiver and global matches cost estimates agree** by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1350](https://redirect.github.com/cel-expr/cel-go/pull/1350)
- **`startsWith`/`endsWith` runtime cost agreement** with checked cost
by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1351](https://redirect.github.com/cel-expr/cel-go/pull/1351)
- **Avoid repeated construction of cost tracker** by
[@&#8203;pohly](https://redirect.github.com/pohly) in
[cel-expr#1357](https://redirect.github.com/cel-expr/cel-go/pull/1357)

##### Testing & Tooling

- **Test Runner usability improvements** by
[@&#8203;jnthntatum](https://redirect.github.com/jnthntatum) in
[cel-expr#1320](https://redirect.github.com/cel-expr/cel-go/pull/1320)
- **Minor updates to test coverage and code quality** by
[@&#8203;TristonianJones](https://redirect.github.com/TristonianJones)
in
[cel-expr#1318](https://redirect.github.com/cel-expr/cel-go/pull/1318)
- **Remove duplicate policy tests** now covered by policy conformance
tests by [@&#8203;l46kok](https://redirect.github.com/l46kok) in
[cel-expr#1332](https://redirect.github.com/cel-expr/cel-go/pull/1332)
- **Minor Google3 import fixes** by
[@&#8203;l46kok](https://redirect.github.com/l46kok) in
[cel-expr#1331](https://redirect.github.com/cel-expr/cel-go/pull/1331)

##### Documentation

- **Update documentation for nested first-match rules** by
[@&#8203;jnthntatum](https://redirect.github.com/jnthntatum) in
[cel-expr#1323](https://redirect.github.com/cel-expr/cel-go/pull/1323)
- **Add migration warning to README** by
[@&#8203;dmitriplotnikov](https://redirect.github.com/dmitriplotnikov)
in
[cel-expr#1330](https://redirect.github.com/cel-expr/cel-go/pull/1330)

</details>

<details>
<summary>googleapis/gax-go (github.com/googleapis/gax-go/v2)</summary>

###
[`v2.23.0`](https://redirect.github.com/googleapis/gax-go/releases/tag/v2.23.0)

[Compare
Source](https://redirect.github.com/googleapis/gax-go/compare/v2.22.0...v2.23.0)

##### Features

- **v2:** add http.response.status\_code to TransportTelemetryData
([#&#8203;513](https://redirect.github.com/googleapis/gax-go/issues/513))
([7d5554f](https://redirect.github.com/googleapis/gax-go/commit/7d5554f433f669fba3db5c5b64ed67a30813c568))

##### Bug Fixes

- correct min go version
([#&#8203;517](https://redirect.github.com/googleapis/gax-go/issues/517))
([fc62896](https://redirect.github.com/googleapis/gax-go/commit/fc62896b04d04db85c48585b9311ec4bbee1d9bc))

</details>

<details>
<summary>goreleaser/goreleaser
(github.com/goreleaser/goreleaser/v2)</summary>

###
[`v2.17.0`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.17.0)

[Compare
Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.16.0...v2.17.0)

#### Announcement

Read the official announcement: [Announcing GoReleaser
v2.17](https://goreleaser.com/blog/goreleaser-v2.17/).

#### Changelog

##### New Features

-
[`31d4279`](https://redirect.github.com/goreleaser/goreleaser/commit/31d427926bf91dede0f208d4b034c4b35dfb5507):
feat(brew,cask,krew,nix,scoop,winget): default pull request branch name
([#&#8203;6685](https://redirect.github.com/goreleaser/goreleaser/issues/6685))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`e5f075b`](https://redirect.github.com/goreleaser/goreleaser/commit/e5f075b7a372541a1db505f3dc4015d1495714c5):
feat(dockers/v2): retry build
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`cd5f16b`](https://redirect.github.com/goreleaser/goreleaser/commit/cd5f16b42e09c8b8994e7722e034fb79770d9273):
feat(nfpm): support msix packages
([#&#8203;6647](https://redirect.github.com/goreleaser/goreleaser/issues/6647))
([@&#8203;umaidshahid](https://redirect.github.com/umaidshahid) and
[@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`43be34a`](https://redirect.github.com/goreleaser/goreleaser/commit/43be34a1cd33dc36fad9a2626251f29fa81eed61):
feat(scm): allow a custom token on the release repository
([#&#8203;6689](https://redirect.github.com/goreleaser/goreleaser/issues/6689))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`5ed70f2`](https://redirect.github.com/goreleaser/goreleaser/commit/5ed70f2d19c85eb9589f0316073ef42930a78c3b):
feat(winget): allow configuring the manifest locale
([#&#8203;6680](https://redirect.github.com/goreleaser/goreleaser/issues/6680))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`6f7175a`](https://redirect.github.com/goreleaser/goreleaser/commit/6f7175a0ec98ecae6b00548922648da27c330716):
feat: Allow GOARM softfloat and hardfloat
([#&#8203;6198](https://redirect.github.com/goreleaser/goreleaser/issues/6198))
([@&#8203;MDr164](https://redirect.github.com/MDr164) and
[@&#8203;caarlos0](https://redirect.github.com/caarlos0))

##### Security updates

-
[`b985ca8`](https://redirect.github.com/goreleaser/goreleaser/commit/b985ca8dc6b231440d98ff5e018c7c40678f0baa):
sec(deps): bump go-pkcs12 to v0.7.2 (GO-2026-5052)
([#&#8203;6683](https://redirect.github.com/goreleaser/goreleaser/issues/6683))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`7c73b82`](https://redirect.github.com/goreleaser/goreleaser/commit/7c73b82e0822ebaded3b193e045ffb173befa58a):
sec(deps): update golang.org/x/net
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

##### Bug fixes

-
[`7d602ff`](https://redirect.github.com/goreleaser/goreleaser/commit/7d602ff39b52b7edbdf3340dd548f1238ccd656b):
fix(builders): reject empty target string
([#&#8203;6679](https://redirect.github.com/goreleaser/goreleaser/issues/6679))
([@&#8203;sueun-dev](https://redirect.github.com/sueun-dev))
-
[`355d706`](https://redirect.github.com/goreleaser/goreleaser/commit/355d706ba6ee76a8dcabbc55902840376548d774):
fix(client): skip merge-upstream when target repo is not a fork
([#&#8203;6646](https://redirect.github.com/goreleaser/goreleaser/issues/6646))
([@&#8203;jamessawle](https://redirect.github.com/jamessawle) and
[@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`944bbb2`](https://redirect.github.com/goreleaser/goreleaser/commit/944bbb2de2c80e04e03f3509a781c82a2bb312d1):
fix(deps): drop dep on docker/docker
([#&#8203;6682](https://redirect.github.com/goreleaser/goreleaser/issues/6682))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`a85ce26`](https://redirect.github.com/goreleaser/goreleaser/commit/a85ce26032280f8cb4ba2f32cd5223176ecd86fb):
fix(mcp): clean subfolder path
([#&#8203;6649](https://redirect.github.com/goreleaser/goreleaser/issues/6649))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`99a7173`](https://redirect.github.com/goreleaser/goreleaser/commit/99a71731d269c1f036b0caea92032ac0a1fdce8a):
fix(nfpm): produce valid arch for Termux packages
([#&#8203;6668](https://redirect.github.com/goreleaser/goreleaser/issues/6668))
([@&#8203;bltavares](https://redirect.github.com/bltavares) and
[@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`7200ec7`](https://redirect.github.com/goreleaser/goreleaser/commit/7200ec73ecf09b4266d4e7ae21464e51dade7ec0):
fix(winget): default head branch to a versioned template
([#&#8203;6684](https://redirect.github.com/goreleaser/goreleaser/issues/6684))
([@&#8203;Sanjays2402](https://redirect.github.com/Sanjays2402))
-
[`6645820`](https://redirect.github.com/goreleaser/goreleaser/commit/6645820ffb384318c8486802cd7770f4f1646b4b):
fix: return error when go.mod is unreadable in CheckGoModPipe
([#&#8203;6644](https://redirect.github.com/goreleaser/goreleaser/issues/6644))
([@&#8203;SebTardif](https://redirect.github.com/SebTardif))

##### Documentation updates

-
[`da7ce30`](https://redirect.github.com/goreleaser/goreleaser/commit/da7ce304ee4e0dd4b7b7f42231727becd4d99278):
docs(casks): fix private-repo example broken by Homebrew 5.1.14
([#&#8203;6639](https://redirect.github.com/goreleaser/goreleaser/issues/6639))
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`09ebd03`](https://redirect.github.com/goreleaser/goreleaser/commit/09ebd035a7737f67816369cbdd6aff93656d93a7):
docs(nfpm): note tilde ConventionalFileName
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`ab7481e`](https://redirect.github.com/goreleaser/goreleaser/commit/ab7481ed082cbad81805823b9ffd911776e8bbc7):
docs: doc authoring skill
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`b945ca3`](https://redirect.github.com/goreleaser/goreleaser/commit/b945ca35c5515cfbb99f3162a738897334ac0c7c):
docs: fix ([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`7e87fd3`](https://redirect.github.com/goreleaser/goreleaser/commit/7e87fd39b283119906598461860dcec6e51f99f4):
docs: fix "lets" -> "let's" in quick-start guide
([#&#8203;6661](https://redirect.github.com/goreleaser/goreleaser/issues/6661))
([@&#8203;s3onghyun](https://redirect.github.com/s3onghyun))
-
[`698dae5`](https://redirect.github.com/goreleaser/goreleaser/commit/698dae55da5585136be0417502f2467edb213719):
docs: fix typo in notarize.md
([#&#8203;6655](https://redirect.github.com/goreleaser/goreleaser/issues/6655))
([@&#8203;albertchae](https://redirect.github.com/albertchae))
-
[`f09c887`](https://redirect.github.com/goreleaser/goreleaser/commit/f09c88738c004e4a1df8858064f368e1f1878b98):
docs: good bye discord
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`2642319`](https://redirect.github.com/goreleaser/goreleaser/commit/2642319f753cde16df470c9da5c5f6124a50a681):
docs: improve home
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`6b7710e`](https://redirect.github.com/goreleaser/goreleaser/commit/6b7710eb4a6b4fc181c21994e694130bc57a1a9b):
docs: updates ([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

##### Other work

-
[`2e6f200`](https://redirect.github.com/goreleaser/goreleaser/commit/2e6f200efaaf702d1008f37bc75fc28cdf3cdd0d):
chore: auto-update generated files
([#&#8203;6662](https://redirect.github.com/goreleaser/goreleaser/issues/6662))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`4bd4e38`](https://redirect.github.com/goreleaser/goreleaser/commit/4bd4e386d2d260e5efb9cb962a727a3f28c718c7):
chore: auto-update generated files
([#&#8203;6671](https://redirect.github.com/goreleaser/goreleaser/issues/6671))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`dcf5a6b`](https://redirect.github.com/goreleaser/goreleaser/commit/dcf5a6b3b48314ea07b14098bf55372b2d1fa984):
chore: auto-update generated files
([#&#8203;6675](https://redirect.github.com/goreleaser/goreleaser/issues/6675))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`baf110d`](https://redirect.github.com/goreleaser/goreleaser/commit/baf110d41e81f273070e2a092ae1bbac1c22bc6a):
chore: auto-update generated files
([#&#8203;6688](https://redirect.github.com/goreleaser/goreleaser/issues/6688))
([@&#8203;goreleaserbot](https://redirect.github.com/goreleaserbot))
-
[`3fa8a94`](https://redirect.github.com/goreleaser/goreleaser/commit/3fa8a94c5b57e0ae3bc7ea0b7f0a89d63afa666a):
chore: godoc ([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

**Full Changelog**:
<goreleaser/goreleaser@v2.16.0...v2.17.0>

#### Helping out

This release is only possible thanks to **all** the support of some
**awesome people**!

Want to be one of them?
You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro
License](https://goreleaser.com/pro) or [contribute with
code](https://goreleaser.com/contributing).

#### Where to go next?

- Find examples and commented usage of all options in our
[website](https://goreleaser.com/intro/).
- Reach out on [Discord](https://discord.gg/RGEBtg8vQ6),
[Twitter](https://twitter.com/goreleaser), and
[Telegram](https://t.me/goreleasernews)!

<a href="https://goreleaser.com"><img
src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png"
with="100%" alt="GoReleaser logo"></a>

</details>

<details>
<summary>harness/harness-go-sdk
(github.com/harness/harness-go-sdk)</summary>

###
[`v0.8.11`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.10...v0.8.11)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.10...v0.8.11)

###
[`v0.8.10`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.9...v0.8.10)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.9...v0.8.10)

###
[`v0.8.9`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.8...v0.8.9)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.8...v0.8.9)

###
[`v0.8.8`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.7...v0.8.8)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.7...v0.8.8)

</details>

<details>
<summary>neo4j/neo4j-go-driver
(github.com/neo4j/neo4j-go-driver/v6)</summary>

###
[`v6.2.0`](https://redirect.github.com/neo4j/neo4j-go-driver/releases/tag/v6.2.0)

[Compare
Source](https://redirect.github.com/neo4j/neo4j-go-driver/compare/v6.1.0...v6.2.0)

See <https://github.com/neo4j/neo4j-go-driver/wiki/6.x-changelog> for
more information.

</details>

<details>
<summary>openai/openai-go (github.com/openai/openai-go/v3)</summary>

###
[`v3.41.1`](https://redirect.github.com/openai/openai-go/releases/tag/v3.41.1)

[Compare
Source](https://redirect.github.com/openai/openai-go/compare/v3.41.0...v3.41.1)

#### 3.41.1 (2026-07-06)

Full Changelog:
[v3.41.0...v3.41.1](https://redirect.github.com/openai/openai-go/compare/v3.41.0...v3.41.1)

##### Documentation

- fix Azure API versioning link
([#&#8203;649](https://redirect.github.com/openai/openai-go/issues/649))
([a8bd01a](https://redirect.github.com/openai/openai-go/commit/a8bd01aa80ba28bb3b5944cdac24a1aadc18fdbe))

</details>

<details>
<summary>pborman/ansi (github.com/pborman/ansi)</summary>

###
[`v1.2.0`](https://redirect.github.com/pborman/ansi/releases/tag/v1.2.0)

[Compare
Source](https://redirect.github.com/pborman/ansi/compare/v1.1.0...v1.2.0)

#### What's Changed

- Move S.Format to decode.go and add tests by
[@&#8203;goexvi-ctrl](https://redirect.github.com/goexvi-ctrl) in
[#&#8203;3](https://redirect.github.com/pborman/ansi/pull/3)
- Writer returns number of input bytes consumed, not output bytes
written. by [@&#8203;sam-mccall](https://redirect.github.com/sam-mccall)
in [#&#8203;2](https://redirect.github.com/pborman/ansi/pull/2)
- Add go.mod by
[@&#8203;goexvi-ctrl](https://redirect.github.com/goexvi-ctrl) in
[#&#8203;4](https://redirect.github.com/pborman/ansi/pull/4)
- Add Decoder with optional C0 character splitting by
[@&#8203;goexvi-ctrl](https://redirect.github.com/goexvi-ctrl) in
[#&#8203;5](https://redirect.github.com/pborman/ansi/pull/5)
- Apply gofmt to ansi.go and writer.go by
[@&#8203;goexvi-ctrl](https://redirect.github.com/goexvi-ctrl) in
[#&#8203;6](https://redirect.github.com/pborman/ansi/pull/6)
- Add UTF-8 passthrough to Decoder by
[@&#8203;goexvi-ctrl](https://redirect.github.com/goexvi-ctrl) in
[#&#8203;7](https://redirect.github.com/pborman/ansi/pull/7)

#### New Contributors

- [@&#8203;goexvi-ctrl](https://redirect.github.com/goexvi-ctrl) made
their first contribution in
[#&#8203;3](https://redirect.github.com/pborman/ansi/pull/3)
- [@&#8203;sam-mccall](https://redirect.github.com/sam-mccall) made
their first contribution in
[#&#8203;2](https://redirect.github.com/pborman/ansi/pull/2)

**Full Changelog**:
<pborman/ansi@v1.1.0...v1.2.0>

</details>

<details>
<summary>posthog/posthog-go (github.com/posthog/posthog-go)</summary>

###
[`v1.17.5`](https://redirect.github.com/PostHog/posthog-go/releases/tag/v1.17.5):
1.17.5

[Compare
Source](https://redirect.github.com/posthog/posthog-go/compare/v1.17.4...v1.17.5)

#### Unreleased

</details>

<details>
<summary>resend/resend-go (github.com/resend/resend-go/v3)</summary>

###
[`v3.10.1`](https://redirect.github.com/resend/resend-go/releases/tag/v3.10.1)

[Compare
Source](https://redirect.github.com/resend/resend-go/compare/v3.10.0...v3.10.1)

#### What's Changed

- chore: revert SendEmailRequest's ReplyTo can be a list by
[@&#8203;gabrielmfern](https://redirect.github.com/gabrielmfern) in
[#&#8203;136](https://redirect.github.com/resend/resend-go/pull/136)

**Full Changelog**:
<resend/resend-go@v3.10.0...v3.10.1>

###
[`v3.10.0`](https://redirect.github.com/resend/resend-go/releases/tag/v3.10.0)

[Compare
Source](https://redirect.github.com/resend/resend-go/compare/v3.9.2...v3.10.0)

#### What's Changed

- feat!: SendEmailRequest's ReplyTo can be a list by
[@&#8203;tisonkun](https://redirect.github.com/tisonkun) in
[#&#8203;133](https://redirect.github.com/resend/resend-go/pull/133)
- Add message\_id to Email response by
[@&#8203;cpenned](https://redirect.github.com/cpenned) in
[#&#8203;134](https://redirect.github.com/resend/resend-go/pull/134)
- feat: add OAuth grants endpoints by
[@&#8203;dielduarte](https://redirect.github.com/dielduarte) in
[#&#8203;135](https://redirect.github.com/resend/resend-go/pull/135)

#### New Contributors

- [@&#8203;tisonkun](https://redirect.github.com/tisonkun) made their
first contribution in
[#&#8203;133](https://redirect.github.com/resend/resend-go/pull/133)
- [@&#8203;cpenned](https://redirect.github.com/cpenned) made their
first contribution in
[#&#8203;134](https://redirect.github.com/resend/resend-go/pull/134)
- [@&#8203;dielduarte](https://redirect.github.com/dielduarte) made
their first contribution in
[#&#8203;135](https://redirect.github.com/resend/resend-go/pull/135)

**Full Changelog**:
<resend/resend-go@v3.9.2...v3.10.0>

</details>

<details>
<summary>zclconf/go-cty (github.com/zclconf/go-cty)</summary>

###
[`v1.19.0`](https://redirect.github.com/zclconf/go-cty/compare/v1.18.1...v1.19.0)

[Compare
Source](https://redirect.github.com/zclconf/go-cty/compare/v1.18.1...v1.19.0)

</details>

<details>
<summary>gitlab-org/api/client-go
(gitlab.com/gitlab-org/api/client-go/v2)</summary>

###
[`v2.46.0`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.46.0)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.45.0...v2.46.0)

##### 2.46.0

##### 🚀 Features

- Add projects reviewer_assignment_strategy
([!2940](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2940))
by [Giannis Kepas](https://gitlab.com/gkepas)

#####
[2.46.0](https://gitlab.com/gitlab-org/api/client-go/compare/v2.45.0...v2.46.0)
(2026-07-07)

###
[`v2.45.0`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.45.0)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.44.0...v2.45.0)

##### 2.45.0

##### 🚀 Features

- feat: add security scan profile GraphQL service
([!2932](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2932))
by [Oscar Tovar](https://gitlab.com/hacks4oats)

##### 🔄 Other Changes

- chore(deps): update docker docker tag to v29.6.1
([!2941](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2941))
by [GitLab Dependency
Bot](https://gitlab.com/gitlab-dependency-update-bot)
- chore(deps): update module golang.org/x/text to v0.38.0
([!2938](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2938))
by [GitLab Dependency
Bot](https://gitlab.com/gitlab-dependency-update-bot)
- Add Auditor field in ModifyUserOptions
([!2935](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2935))
by [Giannis Kepas](https://gitlab.com/gkepas)

#####
[2.45.0](https://gitlab.com/gitlab-org/api/client-go/compare/v2.44.0...v2.45.0)
(2026-07-04)
##### Features

* add security scan profile GraphQL service
([fbd1bcd](https://gitlab.com/gitlab-org/api/client-go/commit/fbd1bcd0a82bea085ef42f58719f024de902cdd2))

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=-->

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Wide dependency surface including OIDC and networking/crypto libs, but
changes are version bumps and test timing fixes with no production logic
edits.
>
> **Overview**
> Renovate-style **dependency refresh** across `go.mod` / `go.sum`: buf
protovalidate and Depot generated stubs, `golang.org/x/*` (including the
**`golang.org/x/image` CVE replace** to v0.44.0), Google client
libraries, and several direct deps (`coreos/go-oidc` **v3.20**,
`google/cel-go`, Harness, Neo4j driver, OpenAI SDK, GitLab API client
**v2.46**, `zclconf/go-cty`, etc.). **`github.com/tidwall/gjson`** is
promoted to a direct require; **`go mod` layout** is cleaned up so
GitLab client-go stays direct and stray third `require` blocks are
removed.
>
> The **devcontainer Dockerfile** pins **GoReleaser v2.17.0** (was
v2.16.0).
>
> **Test-only** changes reduce CI flakiness: sharded cache purge test
gets a longer wait and a slightly future purge cutoff; `ReadSources`
caching tests use the server test context and clear managed stdlib again
before the post-invalidate assertion so keepalive does not add extra
sources.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
1a8ecec2dd1d638a2be8fcc010b5d672fbfd153a. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: TP Honey <thomas.honey@overmind.tech>
GitOrigin-RevId: 714fa1e89bca33be38adf37b6ef0a11c502fcdff
@renovate @cursoragent
@tphoney @actions-user
Update module sigs.k8s.io/structured-merge-diff/v6 to v6.4.2 (#5926)
eb5c8a2 
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[sigs.k8s.io/structured-merge-diff/v6](https://redirect.github.com/kubernetes-sigs/structured-merge-diff)
| `v6.4.0` → `v6.4.2` |
![age](https://developer.mend.io/api/mc/badges/age/go/sigs.k8s.io%2fstructured-merge-diff%2fv6/v6.4.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/sigs.k8s.io%2fstructured-merge-diff%2fv6/v6.4.0/v6.4.2?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>kubernetes-sigs/structured-merge-diff
(sigs.k8s.io/structured-merge-diff/v6)</summary>

###
[`v6.4.2`](https://redirect.github.com/kubernetes-sigs/structured-merge-diff/compare/v6.4.1...v6.4.2)

[Compare
Source](https://redirect.github.com/kubernetes-sigs/structured-merge-diff/compare/v6.4.1...v6.4.2)

###
[`v6.4.1`](https://redirect.github.com/kubernetes-sigs/structured-merge-diff/compare/v6.4.0...v6.4.1)

[Compare
Source](https://redirect.github.com/kubernetes-sigs/structured-merge-diff/compare/v6.4.0...v6.4.1)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=-->

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Patch-level indirect Kubernetes library bump plus a test timing tweak;
no production logic changes.
>
> **Overview**
> Renovate bumps **`sigs.k8s.io/structured-merge-diff/v6`** from
**v6.4.0** to **v6.4.2** in `go.mod` and `go.sum` (pulled in via the
existing Kubernetes / controller-runtime stack).
>
> **`TestRunAgent_UnboundedToolRoundsDoesNotHitLimit`** increases the
agent run **`Timeout`** from **250ms** to **1000ms** so the uncapped
tool-round loop can reliably hit the run timeout instead of failing
flaky on slower CI.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
29b57bb7100518f5f35ca8781d7ec1a8dc760b93. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: TP Honey <thomas.honey@overmind.tech>
GitOrigin-RevId: f2c5b3e17f8146c22510be917224aa58765cc524
@renovate @actions-user
Lock file maintenance (#5939)
154da90 
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "before 4am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Lock-only, but newer AWS/Auth0/PostgreSQL/GitHub provider binaries
will run on the next apply in production deploy paths, where provider
patch behavior can still affect plans.
>
> **Overview**
> Renovate **lock file maintenance** updates pinned Terraform provider
versions (and checksums) across `cli`, `deploy`, `deploy/meta`, and
`razorpay-deploy`. There are **no changes to `.tf` modules or
resources**—only `.terraform.lock.hcl`.
>
> **Provider bumps** (where each lock appears): **hashicorp/aws** 6.53.0
→ 6.55.0, **hashicorp/google** 7.39.0 → 7.40.0, **auth0/auth0** 1.51.0 →
1.52.0 and **cyrilgdn/postgresql** 1.26.0 → 1.27.0 on main deploy
stacks, and **integrations/github** 6.12.1 → 6.13.0 on `deploy` and
`razorpay-deploy`.
>
> The next `terraform init` / apply in those directories will download
these provider builds; CI Terraform caches keyed on these lock files
will invalidate accordingly.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
fb7b12540d2e3f64278159a99f73addb01be3ce0. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 9c6bbb0bf1d1a2ecd2023a020201076f20ddf4d9
@renovate @actions-user
Update AWS SDK (#5970)
66fce21 
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/aws/aws-sdk-go-v2/config](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.32.29` → `v1.32.30` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.30?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.29/v1.32.30?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/credentials](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.19.28` → `v1.19.29` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.29?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.28/v1.19.29?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/apigateway](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.41.0` → `v1.41.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.41.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.41.0/v1.41.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/autoscaling](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.69.0` → `v1.69.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.69.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.69.0/v1.69.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/cloudfront](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.66.0` → `v1.66.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.66.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.66.0/v1.66.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/cloudwatch](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.62.0` → `v1.63.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.63.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.62.0/v1.63.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/directconnect](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.42.0` → `v1.42.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.42.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.42.0/v1.42.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/dynamodb](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.60.0` → `v1.60.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.60.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.60.0/v1.60.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ec2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.315.0` → `v1.316.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.316.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.315.0/v1.316.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ecs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.88.0` → `v1.88.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.88.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.88.0/v1.88.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/efs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.43.0` → `v1.43.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.43.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.43.0/v1.43.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/eks](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.89.0` → `v1.89.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.89.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.89.0/v1.89.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.35.0` → `v1.35.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.35.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.35.0/v1.35.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.56.0` → `v1.57.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.57.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.56.0/v1.57.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/iam](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.55.0` → `v1.55.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.55.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.55.0/v1.55.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/kms](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.54.0` → `v1.54.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.54.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.54.0/v1.54.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/lambda](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.96.0` → `v1.99.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.99.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.96.0/v1.99.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/networkfirewall](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.63.0` → `v1.63.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.63.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.63.0/v1.63.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/networkmanager](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.43.0` → `v1.43.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.43.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.43.0/v1.43.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/rds](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.120.0` → `v1.121.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.121.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.120.0/v1.121.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/route53](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.64.0` → `v1.64.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.64.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.64.0/v1.64.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.105.0` → `v1.105.2` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.105.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.105.0/v1.105.2?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sesv2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.63.0` → `v1.63.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.63.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.63.0/v1.63.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sns](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.41.0` → `v1.41.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.41.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.41.0/v1.41.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sqs](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.45.0` → `v1.45.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.45.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.45.0/v1.45.1?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/ssm](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.71.0` → `v1.72.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.72.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.71.0/v1.72.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sts](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.44.0` → `v1.44.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.44.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.44.0/v1.44.1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>aws/aws-sdk-go-v2
(github.com/aws/aws-sdk-go-v2/service/apigateway)</summary>

###
[`v1.41.1`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2025-10-30)

[Compare
Source](https://redirect.github.com/aws/aws-sdk-go-v2/compare/v1.41.0...v1.41.1)

#### General Highlights

- **Dependency Update**: Updated to the latest SDK module versions

#### Module Highlights

- `github.com/aws/aws-sdk-go-v2`: v1.39.5
  - **Bug Fix**: Deprecate http.AddResponseReadTimeoutMiddleware.
- `github.com/aws/aws-sdk-go-v2/service/amp`:
[v1.41.0](service/amp/CHANGELOG.md#v1410-2025-10-30)
- **Feature**: Add Anomaly Detection APIs for Amazon Managed Prometheus
- `github.com/aws/aws-sdk-go-v2/service/apigateway`:
[v1.36.0](service/apigateway/CHANGELOG.md#v1360-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/appconfig`:
[v1.43.0](service/appconfig/CHANGELOG.md#v1430-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/appflow`:
[v1.51.0](service/appflow/CHANGELOG.md#v1510-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler`:
[v1.27.0](service/applicationcostprofiler/CHANGELOG.md#v1270-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/appmesh`:
[v1.35.0](service/appmesh/CHANGELOG.md#v1350-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/appsync`:
[v1.52.0](service/appsync/CHANGELOG.md#v1520-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/artifact`:
[v1.14.0](service/artifact/CHANGELOG.md#v1140-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/auditmanager`:
[v1.46.0](service/auditmanager/CHANGELOG.md#v1460-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/bedrockagent`:
[v1.51.0](service/bedrockagent/CHANGELOG.md#v1510-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol`:
[v1.12.0](service/bedrockagentcorecontrol/CHANGELOG.md#v1120-2025-10-30)
- **Feature**: Web-Bot-Auth support for AgentCore Browser tool to help
reduce captcha challenges.
- `github.com/aws/aws-sdk-go-v2/service/chime`:
[v1.41.0](service/chime/CHANGELOG.md#v1410-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/cleanrooms`:
[v1.37.0](service/cleanrooms/CHANGELOG.md#v1370-2025-10-30)
- **Feature**: Added support for advanced Spark configurations to
optimize SQL performance
- `github.com/aws/aws-sdk-go-v2/service/cloudcontrol`:
[v1.29.0](service/cloudcontrol/CHANGELOG.md#v1290-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/clouddirectory`:
[v1.30.0](service/clouddirectory/CHANGELOG.md#v1300-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/cloudsearch`:
[v1.32.0](service/cloudsearch/CHANGELOG.md#v1320-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/cloudwatch`:
[v1.52.0](service/cloudwatch/CHANGELOG.md#v1520-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/codecatalyst`:
[v1.21.0](service/codecatalyst/CHANGELOG.md#v1210-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/codecommit`:
[v1.33.0](service/codecommit/CHANGELOG.md#v1330-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/codedeploy`:
[v1.35.0](service/codedeploy/CHANGELOG.md#v1350-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/cognitosync`:
[v1.29.0](service/cognitosync/CHANGELOG.md#v1290-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/computeoptimizer`:
[v1.48.0](service/computeoptimizer/CHANGELOG.md#v1480-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/connectcases`:
[v1.33.0](service/connectcases/CHANGELOG.md#v1330-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/deadline`:
[v1.22.0](service/deadline/CHANGELOG.md#v1220-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/devopsguru`:
[v1.40.0](service/devopsguru/CHANGELOG.md#v1400-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/docdb`:
[v1.48.0](service/docdb/CHANGELOG.md#v1480-2025-10-30)
- **Feature**: Adding FailoverState and TagList to GlobalCluster and
SynchronizationStatus to GlobalClusterMember.
- `github.com/aws/aws-sdk-go-v2/service/ecs`:
[v1.67.0](service/ecs/CHANGELOG.md#v1670-2025-10-30)
- **Feature**: Amazon ECS Service Connect now supports Envoy access
logs, providing deeper observability into request-level traffic patterns
and service interactions.
- `github.com/aws/aws-sdk-go-v2/service/eksauth`:
[v1.12.0](service/eksauth/CHANGELOG.md#v1120-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/elasticache`:
[v1.51.0](service/elasticache/CHANGELOG.md#v1510-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/emrserverless`:
[v1.37.0](service/emrserverless/CHANGELOG.md#v1370-2025-10-30)
- **Feature**: This release adds the capability to enable User
Background Sessions for customers running Trusted Identity Propagation
enabled Interactive Sessions on EMR Serverless Applications.
- `github.com/aws/aws-sdk-go-v2/service/firehose`:
[v1.42.0](service/firehose/CHANGELOG.md#v1420-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/frauddetector`:
[v1.41.0](service/frauddetector/CHANGELOG.md#v1410-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/geoplaces`:
[v1.7.0](service/geoplaces/CHANGELOG.md#v170-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/glue`:
[v1.132.0](service/glue/CHANGELOG.md#v11320-2025-10-30)
- **Feature**: This release adds the capability to enable User
Background Sessions for customers running Trusted Identity Propagation
enabled Interactive Sessions on AWS Glue.
- `github.com/aws/aws-sdk-go-v2/service/greengrassv2`:
[v1.42.0](service/greengrassv2/CHANGELOG.md#v1420-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/ioteventsdata`:
[v1.30.0](service/ioteventsdata/CHANGELOG.md#v1300-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/iotmanagedintegrations`:
[v1.6.0](service/iotmanagedintegrations/CHANGELOG.md#v160-2025-10-30)
- **Feature**: Add a new GetManagedThingCertificate API to expose Iot
ManagedIntegrations (MI) device certificate, and add "-" support for
name, properties, actions and events in the CapabilityReportCapability
object.
- `github.com/aws/aws-sdk-go-v2/service/keyspacesstreams`:
[v1.5.0](service/keyspacesstreams/CHANGELOG.md#v150-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/kinesis`:
[v1.41.1](service/kinesis/CHANGELOG.md#v1411-2025-10-30)
- **Bug Fix**: Remove arbitrary read timeout on GetRecords which was
causing response read panic. See
[#&#8203;2752](https://redirect.github.com/aws/aws-sdk-go-v2/issues/2752).
- `github.com/aws/aws-sdk-go-v2/service/kms`:
[v1.47.0](service/kms/CHANGELOG.md#v1470-2025-10-30)
- **Feature**: Add cross account VPC endpoint service connectivity
support to CustomKeyStore.
-
`github.com/aws/aws-sdk-go-v2/service/licensemanagerlinuxsubscriptions`:
[v1.20.0](service/licensemanagerlinuxsubscriptions/CHANGELOG.md#v1200-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/marketplacereporting`:
[v1.7.0](service/marketplacereporting/CHANGELOG.md#v170-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/neptune`:
[v1.43.0](service/neptune/CHANGELOG.md#v1430-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/rtbfabric`:
[v1.1.1](service/rtbfabric/CHANGELOG.md#v111-2025-10-30)
  - **Documentation**: RTB Fabric documentation update.
- `github.com/aws/aws-sdk-go-v2/service/s3outposts`:
[v1.34.0](service/s3outposts/CHANGELOG.md#v1340-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/sagemakerruntime`:
[v1.38.0](service/sagemakerruntime/CHANGELOG.md#v1380-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/schemas`:
[v1.34.0](service/schemas/CHANGELOG.md#v1340-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
-
`github.com/aws/aws-sdk-go-v2/service/serverlessapplicationrepository`:
[v1.30.0](service/serverlessapplicationrepository/CHANGELOG.md#v1300-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/servicecatalog`:
[v1.39.0](service/servicecatalog/CHANGELOG.md#v1390-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/sso`:
[v1.30.0](service/sso/CHANGELOG.md#v1300-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing
- `github.com/aws/aws-sdk-go-v2/service/sts`:
[v1.39.0](service/sts/CHANGELOG.md#v1390-2025-10-30)
  - **Feature**: Update endpoint ruleset parameters casing

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI2NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 9aabc18e457f7d4877d80320aa4bb34874cee1e6
@renovate @cursoragent
@tphoney @actions-user
Update Go (#5976)
b925c35 
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/aws/smithy-go](https://redirect.github.com/aws/smithy-go)
| `v1.27.3` → `v1.27.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2fsmithy-go/v1.27.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2fsmithy-go/v1.27.3/v1.27.4?slim=true)
|
|
[github.com/harness/harness-go-sdk](https://redirect.github.com/harness/harness-go-sdk)
| `v0.8.11` → `v0.8.14` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fharness%2fharness-go-sdk/v0.8.14?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fharness%2fharness-go-sdk/v0.8.11/v0.8.14?slim=true)
|
|
[github.com/openai/openai-go/v3](https://redirect.github.com/openai/openai-go)
| `v3.41.1` → `v3.43.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopenai%2fopenai-go%2fv3/v3.43.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopenai%2fopenai-go%2fv3/v3.41.1/v3.43.0?slim=true)
|
| [github.com/openrdap/rdap](https://redirect.github.com/openrdap/rdap)
| `v0.9.2-0.20260623140101-a095c49529fc` → `v0.10.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopenrdap%2frdap/v0.10.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopenrdap%2frdap/v0.9.2-0.20260623140101-a095c49529fc/v0.10.1?slim=true)
|
| [github.com/pborman/ansi](https://redirect.github.com/pborman/ansi) |
`v1.2.0` → `v1.3.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fpborman%2fansi/v1.3.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fpborman%2fansi/v1.2.0/v1.3.0?slim=true)
|
|
[github.com/posthog/posthog-go](https://redirect.github.com/posthog/posthog-go)
| `v1.17.5` → `v1.19.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fposthog%2fposthog-go/v1.19.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fposthog%2fposthog-go/v1.17.5/v1.19.0?slim=true)
|
|
[gitlab.com/gitlab-org/api/client-go/v2](https://gitlab.com/gitlab-org/api/client-go)
| `v2.46.0` → `v2.50.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/gitlab.com%2fgitlab-org%2fapi%2fclient-go%2fv2/v2.50.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/gitlab.com%2fgitlab-org%2fapi%2fclient-go%2fv2/v2.46.0/v2.50.0?slim=true)
|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.82.0` → `v1.82.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.82.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.82.0/v1.82.1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>aws/smithy-go (github.com/aws/smithy-go)</summary>

###
[`v1.27.4`](https://redirect.github.com/aws/smithy-go/compare/v1.27.3...v1.27.4)

[Compare
Source](https://redirect.github.com/aws/smithy-go/compare/v1.27.3...v1.27.4)

</details>

<details>
<summary>harness/harness-go-sdk
(github.com/harness/harness-go-sdk)</summary>

###
[`v0.8.14`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.13...v0.8.14)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.13...v0.8.14)

###
[`v0.8.13`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.12...v0.8.13)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.12...v0.8.13)

###
[`v0.8.12`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.11...v0.8.12)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.8.11...v0.8.12)

</details>

<details>
<summary>openai/openai-go (github.com/openai/openai-go/v3)</summary>

###
[`v3.43.0`](https://redirect.github.com/openai/openai-go/releases/tag/v3.43.0)

[Compare
Source](https://redirect.github.com/openai/openai-go/compare/v3.42.0...v3.43.0)

#### 3.43.0 (2026-07-14)

Full Changelog:
[v3.42.0...v3.43.0](https://redirect.github.com/openai/openai-go/compare/v3.42.0...v3.43.0)

##### Features

- **api:** add owner\_project\_access to APIKeyListParams
([df2e35d](https://redirect.github.com/openai/openai-go/commit/df2e35dc39e43e8da55f1006084d27a1041005fc))

##### Bug Fixes

- **example:** set the 'include usage' field to true under stream
options to get accurate usage information
([#&#8203;125](https://redirect.github.com/openai/openai-go/issues/125))
([c38b6c3](https://redirect.github.com/openai/openai-go/commit/c38b6c36c911d47b369518b7222363befa9c1e25))
- **ssestream:** skip SSE blocks without data
([#&#8203;621](https://redirect.github.com/openai/openai-go/issues/621))
([114224d](https://redirect.github.com/openai/openai-go/commit/114224dd71cf6695a01de8353352145832662e84))

##### Documentation

- fix Azure API version link typo
([#&#8203;630](https://redirect.github.com/openai/openai-go/issues/630))
([4d7f649](https://redirect.github.com/openai/openai-go/commit/4d7f6493d248af66e42bfbb2bfb6c3bd4ca04b9c))
- fix function call comment wording in example
([#&#8203;639](https://redirect.github.com/openai/openai-go/issues/639))
([050ab8a](https://redirect.github.com/openai/openai-go/commit/050ab8af70b562ff4c81a16476bf393534849d92))
- links in README.md
([#&#8203;308](https://redirect.github.com/openai/openai-go/issues/308))
([35501ce](https://redirect.github.com/openai/openai-go/commit/35501ce5ec0449128bd84d57b24841ef541c3122))

###
[`v3.42.0`](https://redirect.github.com/openai/openai-go/releases/tag/v3.42.0)

[Compare
Source](https://redirect.github.com/openai/openai-go/compare/v3.41.1...v3.42.0)

#### 3.42.0 (2026-07-09)

Full Changelog:
[v3.41.1...v3.42.0](https://redirect.github.com/openai/openai-go/compare/v3.41.1...v3.42.0)

##### Features

- **api:** gpt-5.6-sol updates
([8c062a6](https://redirect.github.com/openai/openai-go/commit/8c062a6e8fa8ae91daf96f97e301447d04ecd371))

##### Bug Fixes

- **api:** restore programmatic response types
([2384620](https://redirect.github.com/openai/openai-go/commit/2384620bab9bede6a6b57cc2689bf86084d1e8f3))
- **api:** restore response union metadata
([7b2e975](https://redirect.github.com/openai/openai-go/commit/7b2e9755e6532a33d14085411a9f57d7709ada59))

</details>

<details>
<summary>openrdap/rdap (github.com/openrdap/rdap)</summary>

###
[`v0.10.1`](https://redirect.github.com/openrdap/rdap/releases/tag/v0.10.1)

[Compare
Source](https://redirect.github.com/openrdap/rdap/compare/v0.10.0...v0.10.1)

#### What's Changed

- Derive CLI version from build info + binary release workflow by
[@&#8203;wolveix](https://redirect.github.com/wolveix) in
[#&#8203;52](https://redirect.github.com/openrdap/rdap/pull/52)

**Full Changelog**:
<openrdap/rdap@v0.10.0...v0.10.1>

</details>

<details>
<summary>pborman/ansi (github.com/pborman/ansi)</summary>

###
[`v1.3.0`](https://redirect.github.com/pborman/ansi/releases/tag/v1.3.0)

[Compare
Source](https://redirect.github.com/pborman/ansi/compare/v1.2.0...v1.3.0)

#### What's Changed

- Add a streaming Reader, plus Import and a Decoder.Strip method by
[@&#8203;goexvi-ctrl](https://redirect.github.com/goexvi-ctrl) in
[#&#8203;8](https://redirect.github.com/pborman/ansi/pull/8)

**Full Changelog**:
<pborman/ansi@v1.2.0...v1.3.0>

</details>

<details>
<summary>posthog/posthog-go (github.com/posthog/posthog-go)</summary>

###
[`v1.19.0`](https://redirect.github.com/PostHog/posthog-go/releases/tag/v1.19.0):
1.19.0

[Compare
Source](https://redirect.github.com/posthog/posthog-go/compare/v1.18.0...v1.19.0)

#### Unreleased

###
[`v1.18.0`](https://redirect.github.com/PostHog/posthog-go/releases/tag/v1.18.0):
1.18.0

[Compare
Source](https://redirect.github.com/posthog/posthog-go/compare/v1.17.5...v1.18.0)

#### Unreleased

</details>

<details>
<summary>gitlab-org/api/client-go
(gitlab.com/gitlab-org/api/client-go/v2)</summary>

###
[`v2.50.0`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.50.0)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.49.0...v2.50.0)

#### 2.50.0

##### 🚀 Features

- Add mr_default_title_template to projects
([!2958](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2958))
by [Giannis Kepas](https://gitlab.com/gkepas)

##### 🔄 Other Changes

- chore(deps): update module github.com/google/cel-go to v0.29.2
([!2957](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2957))
by [GitLab Dependency
Bot](https://gitlab.com/gitlab-dependency-update-bot)

###
[2.50.0](https://gitlab.com/gitlab-org/api/client-go/compare/v2.49.0...v2.50.0)
(2026-07-16)

###
[`v2.49.0`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.49.0)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.48.1...v2.49.0)

#### 2.49.0

##### 🚀 Features

- Update `ListWorkItems` to return only CE fields by default.
ListWorkItemOptions now includes ReturnedFields which allows users to
opt in to EE fields
([!2936](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2936))
by [Kai Armstrong](https://gitlab.com/phikai)

##### 🔄 Other Changes

- chore(deps): update module github.com/google/cel-go to v0.29.2
([!2956](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2956))
by [GitLab Dependency
Bot](https://gitlab.com/gitlab-dependency-update-bot)
- Pin Duo agent image to 0.0.10 for Duo executions during library
development
([!2952](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2952))
by [Patrick Rice](https://gitlab.com/PatrickRice)

###
[2.49.0](https://gitlab.com/gitlab-org/api/client-go/compare/v2.48.1...v2.49.0)
(2026-07-15)

###
[`v2.48.1`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.48.1)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.48.0...v2.48.1)

##### 2.48.1

##### 🐛 Bug Fixes

- fix(audit_events): Add support for object-valued details.change
(stored in `details.ChangeObject`) and the details.changes array
([!2949](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2949))
by [Cesar Hinojosa](https://gitlab.com/cesarihinojosa)

#####
[2.48.1](https://gitlab.com/gitlab-org/api/client-go/compare/v2.48.0...v2.48.1)
(2026-07-14)
##### Bug Fixes

* **audit_events:** Add support for object-valued details.change (stored
in `details.ChangeObject`) and the details.changes array
([7f7f38f](https://gitlab.com/gitlab-org/api/client-go/commit/7f7f38f1a476f97ff7633972afbaee380424e019))

###
[`v2.48.0`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.48.0)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.47.0...v2.48.0)

##### 2.48.0

##### 🚀 Features

- TCC-14338 Add NonArchived field to ListMergeRequestsOptions
([!2944](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2944))
by [Federico Mannucci](https://gitlab.com/federico.mannucci)

##### 🔄 Other Changes

- Add new skill for providing additional instructions to the quick win
agent
([!2951](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2951))
by [Patrick Rice](https://gitlab.com/PatrickRice)

#####
[2.48.0](https://gitlab.com/gitlab-org/api/client-go/compare/v2.47.0...v2.48.0)
(2026-07-13)

###
[`v2.47.0`](https://gitlab.com/gitlab-org/api/client-go/tags/v2.47.0)

[Compare
Source](https://gitlab.com/gitlab-org/api/client-go/compare/v2.46.0...v2.47.0)

##### 2.47.0

##### 🚀 Features

- Expose crm enabled on groups
([!2933](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2933))
by [Jimmy Spagnola](https://gitlab.com/jspagnola)

##### 🔄 Other Changes

- chore(deps): update module github.com/google/cel-go to v0.29.1
([!2948](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2948))
by [GitLab Dependency
Bot](https://gitlab.com/gitlab-dependency-update-bot)
- chore(deps): update module github.com/google/cel-go to v0.29.0
([!2943](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2943))
by [GitLab Dependency
Bot](https://gitlab.com/gitlab-dependency-update-bot)
- chore(deps): update module
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go to
v1.36.11-20260709200747-435963d16310.1
([!2946](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2946))
by [GitLab Dependency
Bot](https://gitlab.com/gitlab-dependency-update-bot)
- test(security-scan-profiles): Validate GraphQL request structure
([!2942](https://gitlab.com/gitlab-org/api/client-go/-/merge_requests/2942))
by [Oscar Tovar](https://gitlab.com/hacks4oats)

#####
[2.47.0](https://gitlab.com/gitlab-org/api/client-go/compare/v2.46.0...v2.47.0)
(2026-07-12)

</details>

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.82.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.82.1):
Release 1.82.1

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.82.0...v1.82.1)

### Security

- server: Stop reading from the connection when flooded by HTTP/2
frames. The default value for this limit is 100 frames, excluding DATA
and HEADERS, and may be changed by setting environment variable
`GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT`.
- xds/rbac: Support `Metadata` and `RequestedServerName` permissions
matcher fields. If present in a DENY rule, previously these would be
ignored and fail-open.
- xds/rbac: Fix panic when parsing unsupported fields in
`NotRule`/`NotId` permissions.
- xds/rbac: Support the deprecated `source_ip` principal identifier by
treating it as equivalent to `direct_remote_ip`.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/London)

- Branch creation
  - "after 6pm on thursday,before 10am on friday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI2NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnb2xhbmciXX0=-->

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Mostly routine dependency updates, but grpc 1.82.1 changes server/xDS
RBAC behavior and posthog-go plus GitLab/OpenAI client bumps touch
integration surfaces used in production paths.
>
> **Overview**
> Bumps direct and indirect Go dependencies in **`go.mod`** /
**`go.sum`**, including **posthog-go** `v1.17.5` → `v1.19.0`, **grpc**
`v1.82.0` → `v1.82.1` (security release), **openai-go** `v3.41.1` →
`v3.43.0`, **gitlab client-go** `v2.46.0` → `v2.50.0`, plus smaller
patches (smithy-go, harness SDK, openrdap, pborman/ansi).
>
> **posthog-go** config field rename is wired through **api-server** and
**gateway** startup: `posthog.Config` now uses **`SecretKey`** instead
of **`PersonalApiKey`** (same viper `posthog-private-key`), including
log redaction checks.
>
> **`TestReadSourcesCaching`** no longer assumes exactly one source
after managed-cache invalidation; it compares source counts before and
after invalidate+read so flaky stdlib reprovisioning between subtests
does not fail the test.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
6ea3e60a8f82c9343d0727cdb07e9236d0a891b4. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: TP Honey <thomas.honey@overmind.tech>
GitOrigin-RevId: 141d88131015ec5164ec0be8bf07edf3978f1da3
@actions-user
Run go mod tidy
e6f1ecb
@tphoney
tphoney merged commit 32b1669 into main Jul 20, 2026
@tphoney
tphoney deleted the copybara/v1.18.8 branch July 20, 2026 09:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tphoney tphoney tphoney approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@tphoney @dylanratcliffe @actions-user