Repository navigation
fix(deps): update go dependencies (main) - #468
Open
crossplane-renovate[bot] wants to merge 1 commit into
Open
crossplane-renovate[bot] wants to merge 1 commit into
crossplane-renovate[bot] wants to merge 1 commit into
Conversation
Contributor
Author
|
crossplane-renovate
Bot
requested review from
a team and
tampakrap
as code owners
October 29, 2026 08:08
crossplane-renovate
Bot
requested review from
phisco
and removed request for
a team
October 29, 2026 08:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
v2.0.9→v2.1.1v0.11.8→v0.11.9v2.4.0→v2.4.3v2.4.1→v2.4.3v2.5.1-0.20261005082904-c3b7d449d0d4→v2.5.1v29.8.1+incompatible→v29.9.2+incompatiblev0.149.0→v0.152.0v5.9.1→v5.9.2v5.19.2→v5.19.3v0.18.1→v0.19.1v0.9.2→v0.9.4v1.56.0→v1.56.1v0.5.1→v0.6.2v2.8.0→v2.8.1v0.41.0→v0.42.0v0.51.0→v0.52.0v1.83.2→v1.85.0v3.20.2→v3.22.1Release Notes
charmbracelet/bubbletea (charm.land/bubbletea/v2)
v2.1.1Compare Source
Terminal size query vulnerability
This patch version fixes a vulnerability reported by @Reload3d. You can find the details of the exploit here.
Best regards,
Charm XX 💫
Changelog
Fixed
9c6c325: fix: ingnore implausible terminal resize reports (#1887) (@andrinoff)Other stuff
67b4c7a: v2.1.1 (@andrinoff)Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.
v2.1.0Compare Source
Hello OSC 7501
The exciting news in this release is support for the brand new Program Status Protocol, otherwise known as
OSC 7501, released just a few days ago. The protocol is designed to allow terminal applications to report what they're doing (e.g. idle, working, waiting on the user, finished, or failed) and why.The obvious case for the design is AI agents, but are lots of other use cases for this, and we’re excited to see what you build with it.
It’s subtle, but here’s Crush in Superlogical’s Rex with the feature integrated (notice the dot in the first tab).
Bugfixes
Also, this release brings some very important fixes done by @AdamMagued, @simpleqt and @GreedyC.
Cheers!
Charm 🌞
Changelog
New!
41bc626: feat: OSC 7501 (#1841) (@andrinoff)Fixed
96d69d2: fix(tty): fall back to default dimensions when terminal size is 0x0 (#1836) (@AdamMagued)ff51ba4: fix: prevent signal goroutine deadlock on shutdown (#1806) (@simpleqt)Docs
33f6a40: docs: fix command and environment godoc examples (#1833) (@GreedyC)Other stuff
f9df43c: v2.1.0 (@andrinoff)Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.
v2.0.10Compare Source
Change to no input programs
This is a small change to programs with no
WithInput. Removed capability queries, which resulted in leaking of raw ANSI escape sequences.Changelog
Fixed
8b10e22: fix: skip capability queries when input is disabled (#1801) (@drawmeanelephant)Other stuff
d5bfd5c: v2.0.10 (@andrinoff)Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.
crossplane/crossplane-runtime (github.com/crossplane/crossplane-runtime/v2)
v2.4.3Compare Source
What's Changed
xpkgby @github-actions[bot] in #1200Full Changelog: crossplane/crossplane-runtime@v2.4.2...v2.4.3
v2.4.2Compare Source
What's Changed
Full Changelog: crossplane/crossplane-runtime@v2.4.0...v2.4.2
crossplane/crossplane (github.com/crossplane/crossplane/apis/v2)
v2.4.3Compare Source
v2.4.3is a patch release scoped to fixing issues reported by users of Crossplanev2.4and fixing security related issues in Crossplane and its dependencies.🎉 Highlights
1.26.10, whosecrypto/x509rejects the compromised eMudhra intermediate certificates (CVE-2026-111943), and removes theAAA Certificate ServicesandemSign ECC Root CA - G3roots they chain to from the image's CA bundle (#7957).package.yaml. The package revision then recorded only some of its objects, reportedHealthy=True, and the provider's RBAC was rendered from the short list, so the provider could crash-loop. Truncated downloads are now discarded. Fixed viacrossplane-runtimev2.4.3(#7961), originally crossplane/crossplane-runtime#1189.Usageno longer rewrites the in-use label on every reconcile: A leftover ownership check meant the used resource was updated on every reconcile of everyUsage/ClusterUsage, causing needless API writes. Backported in #7877, originally fixed in #7860.crossplane-editorcrossplane-adminaccess can nowkubectl scaleXRs and claims whose XRD serves the scale subresource; previously they gotForbidden. Backported in #7934, originally fixed in #7922.What's Changed
Full Changelog: crossplane/crossplane@v2.4.2...v2.4.3
v2.4.2Compare Source
v2.4.2is a patch release scoped to fixing issues reported by users of Crossplanev2.4and fixing security related issues in Crossplane and its dependencies.🎉 Highlights
ServiceAccounts was not correctly transferred to newly active package revisions (#7838). Fixed in #7839 and backported in #7852.What's Changed
Full Changelog: crossplane/crossplane@v2.4.1...v2.4.2
crossplane/upjet (github.com/crossplane/upjet/v2)
v2.5.1Compare Source
What's Changed
Full Changelog: crossplane/upjet@v2.5.0...v2.5.1
docker/cli (github.com/docker/cli)
v29.9.2+incompatibleCompare Source
v29.9.1+incompatibleCompare Source
v29.9.0+incompatibleCompare Source
v29.8.2+incompatibleCompare Source
getkin/kin-openapi (github.com/getkin/kin-openapi)
v0.152.0Compare Source
What's Changed
New Contributors
Full Changelog: getkin/kin-openapi@v0.151.0...v0.152.0
v0.151.0Compare Source
What's Changed
Full Changelog: getkin/kin-openapi@v0.150.0...v0.151.0
v0.150.0Compare Source
What's Changed
New Contributors
Full Changelog: getkin/kin-openapi@v0.149.0...v0.150.0
go-git/go-billy (github.com/go-git/go-billy/v5)
v5.9.2Compare Source
What's Changed
Full Changelog: go-git/go-billy@v5.9.0...v5.9.2
go-git/go-git (github.com/go-git/go-git/v5)
v5.19.3Compare Source
What's Changed
New Contributors
Full Changelog: go-git/go-git@v5.19.2...v5.19.3
google/ko (github.com/google/ko)
v0.19.1Compare Source
What's Changed
Deps
New Contributors
Full Changelog: ko-build/ko@v0.19.0...v0.19.1
v0.19.0Compare Source
What's Changed
New Contributors
Full Changelog: ko-build/ko@v0.18.1...v0.19.0
kubernetes-sigs/kro (github.com/kubernetes-sigs/kro)
v0.9.4Compare Source
What's Changed
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.