Repository navigation
chore(deps): update docker-images - #1038
Closed
renovate[bot] wants to merge 1 commit into
Closed
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/docker-images
branch
3 times, most recently
from
August 16, 2026 17:56
1675296 to
29ef386
Compare
renovate
Bot
force-pushed
the
renovate/docker-images
branch
5 times, most recently
from
August 25, 2026 20:05
a5af891 to
85a202f
Compare
renovate
Bot
force-pushed
the
renovate/docker-images
branch
5 times, most recently
from
September 2, 2026 20:52
997b3a3 to
ce500a5
Compare
renovate
Bot
force-pushed
the
renovate/docker-images
branch
from
September 10, 2026 03:44
ce500a5 to
3be370e
Compare
renovate
Bot
force-pushed
the
renovate/docker-images
branch
7 times, most recently
from
September 24, 2026 18:59
81d164a to
87bba4d
Compare
renovate
Bot
force-pushed
the
renovate/docker-images
branch
7 times, most recently
from
October 7, 2026 02:00
621778d to
0f55bdb
Compare
renovate
Bot
force-pushed
the
renovate/docker-images
branch
8 times, most recently
from
October 14, 2026 06:50
89ece21 to
6f4d0c7
Compare
renovate
Bot
force-pushed
the
renovate/docker-images
branch
7 times, most recently
from
October 22, 2026 21:34
fac2b69 to
8e08732
Compare
cpcloud
added a commit
that referenced
this pull request
Oct 23, 2026
…iates (#1047) ## Summary - Go 1.27.3 makes certificate checks reject chains that contain any of 8 distrusted intermediates, including the eMudhra/emSign set (GO-2026-6809, CVE-2026-111943). micasa and the relay both make outbound HTTPS calls, and the Security workflow fails on every branch until we move off 1.27.2. - Go 1.27.3 now comes from `go.mod`, the nixpkgs flake input (Nix builds and CI's govulncheck use its Go), and the relay's `golang:1.27-alpine` build image. The distroless, Caddy, and Postgres digests also move to their current tags, which carry newer CA bundles. This replaces #1038. - Drops four govulncheck excludes that Go 1.26.1 already fixed. - golangci-lint v2.15.0 (CI's `latest`, and the new nixpkgs) rejects text after `//exhaustive:ignore`, which failed Lint on every branch. The 11 ignore reasons now sit on the comment line above each directive. - The newest `caddy:2-alpine` image is still built with Go 1.26.8, which lacks the denylist. Caddy has to ship that fix. ## Reproduce on main 1. `nix run '.#govulncheck'` 2. It reports `GO-2026-6809` and exits 1. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
renovate
Bot
force-pushed
the
renovate/docker-images
branch
from
October 23, 2026 10:24
8e08732 to
00e41d7
Compare
Collaborator
|
Superseded by #1049, which updates all dependencies at once. |
cpcloud
added a commit
that referenced
this pull request
Oct 23, 2026
## Summary - Brings every pinned dependency to its latest release in one PR and supersedes the nine open Renovate PRs (#1046, #1045, #1041, #1038, #1036, #1030, #1029, #1028, #1027). Merging those one at a time would mean nine rounds of `vendorHash` and lockfile conflicts. - **Go:** every module in `go.mod`, direct and indirect, is at its latest version. `mcp-go` stays on v1.3.0. v2.0.0 is on the Go proxy, but upstream tagged it by mistake, deleted the tag, and reverted the path change before releasing v1.3.0. - **Nix:** nixpkgs moves to the Oct 23 `nixos-unstable-small`. - **CI:** action SHAs match the tags in #1041. The inline osv-scanner, trufflehog, and goreleaser pins, which Renovate doesn't track, also move. - **Release tooling:** semantic-release 25.0.9, `@semantic-release/git` 11, and the `conventionalcommits` preset 9.3.1. Preset 10 is out, but it needs conventional-changelog-writer 9, and the stable release-notes-generator bundled with semantic-release still uses writer 8. With preset 10, every release fails at the notes step, so the preset stays on 9.x for now. - **Docs site:** Mermaid 12.2.0, set to the dagre layout and classic look. The two pages with diagrams render the same as on 11 (a pixel diff found under 0.01% changed). - Docker image digests were already current after #1047. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
eb4d35b→504a44db8c9b82→f20d83aeee6c6e→edb0c08Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.