Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
anothrNick/github-tag-action	action	minor	1.67.0 → 1.75.0
flyway/flyway		patch	9.22.2 → 9.22.3
gitea/gitea		minor	1.20 → 1.25
offen/docker-volume-backup (source)		minor	v2.28.0 → v2.47.2
com.google.cloud.tools:jib-maven-plugin	build	minor	3.3.2 → 3.5.1
com.diffplug.spotless:spotless-maven-plugin	build	minor	2.38.0 → 2.46.1
io.micrometer:context-propagation	compile	minor	1.0.4 → 1.2.1
com.discord4j:discord4j-core	compile	minor	3.2.5 → 3.3.1
com.google.guava:guava	compile	patch	32.1.2-jre → 32.1.3-jre
org.eclipse.jgit:org.eclipse.jgit	compile	minor	6.6.0.202305301015-r → 6.10.1.202505221210-r
org.passay:passay (source)	compile	patch	1.6.3 → 1.6.6
org.apache.httpcomponents.client5:httpclient5 (source)	compile	minor	5.2.1 → 5.6
io.cucumber:cucumber-bom (source)	import	minor	7.13.0 → 7.34.3
org.springframework.boot:spring-boot-starter-parent (source)	parent	minor	3.1.2 → 3.5.13
me.qoomon:maven-git-versioning-extension	build	minor	9.6.5 → 9.11.0

---

Release Notes

anothrNick/github-tag-action (anothrNick/github-tag-action)

v1.75.0

Compare Source

What's Changed

• Support Escapable Characters in Prefix With BATs Testing by @​TheYorkshireDev in #​347

New Contributors

• @​TheYorkshireDev made their first contribution in #​347

Full Changelog: anothrNick/github-tag-action@1...1.75.0

v1.74.0

Compare Source

What's Changed

• Bugfix for duplicate prefix on first prerelease tag by @​rorybartie in #​338

New Contributors

• @​rorybartie made their first contribution in #​338

Full Changelog: anothrNick/github-tag-action@1...1.74.0

v1.73.0

Compare Source

What's Changed

• Add git-lfs to installed packages in Dockerfile by @​mikaellindemann in #​329

New Contributors

• @​mikaellindemann made their first contribution in #​329

Full Changelog: anothrNick/github-tag-action@1...1.73.0

v1.72.0

Compare Source

What's Changed

• Added TAG_PREFIX so more descriptive tags can be used by @​timothyclarke in #​326

New Contributors

• @​timothyclarke made their first contribution in #​326

Full Changelog: anothrNick/github-tag-action@1...1.72.0

v1.71.0

Compare Source

What's Changed

• Add tag message override by @​omerap12 in #​323

New Contributors

• @​omerap12 made their first contribution in #​323

Full Changelog: anothrNick/github-tag-action@1...1.71.0

v1.70.0

Compare Source

What's Changed

• Add old_tag Output to the README by @​gabriel-stackhouse in #​314
• Fix Auto Releases by @​gabriel-stackhouse in #​317

New Contributors

• @​gabriel-stackhouse made their first contribution in #​314

Full Changelog: anothrNick/github-tag-action@1...1.70.0

v1.69.0

Compare Source

v1.68.0

Compare Source

go-gitea/gitea (gitea/gitea)

v1.25

• SECURITY
  • Toolchain Update to Go 1.25.6 (#​36480) (#​36487)
  • Adjust the toolchain version (#​36537) (#​36542)
  • Update toolchain to 1.25.8 for v1.25 (#​36888)
  • Prevent redirect bypasses via backslash-encoded paths (#​36660) (#​36716)
  • Fix get release draft permission check (#​36659) (#​36715)
  • Fix a bug user could change another user's primary email (#​36586) (#​36607)
  • Fix OAuth2 authorization code expiry and reuse handling (#​36797) (#​36851)
  • Add validation constraints for repository creation fields (#​36671) (#​36757)
  • Fix bug to check whether user can update pull request branch or rebase branch (#​36465) (#​36838)
  • Add migration http transport for push/sync mirror lfs (#​36665) (#​36691)
  • Fix track time list permission check (#​36662) (#​36744)
  • Fix track time issue id (#​36664) (#​36689)
  • Fix path resolving (#​36734) (#​36746)
  • Fix dump release asset bug (#​36799) (#​36839)
  • Fix org permission API visibility checks for hidden members and private orgs (#​36798) (#​36841)
  • Fix forwarded proto handling for public URL detection (#​36810) (#​36836)
  • Add a git grep search timeout (#​36809) (#​36835)
  • Fix oauth2 s256 (#​36462) (#​36477)
• ENHANCEMENTS
  • Make security-check informational only (#​36681) (#​36852)
  • Upgrade to github.com/cloudflare/circl 1.6.3, svgo 4.0.1, markdownlint-cli 0.48.0 (#​36840)
  • Add some validation on values provided to USER_DISABLED_FEATURES and EXTERNAL_USER_DISABLED_FEATURES (#​36688) (#​36692)
  • Upgrade gogit to 5.16.5 (#​36687)
  • Add wrap to runner label list (#​36565) (#​36574)
  • Add dnf5 command for Fedora in RPM package instructions (#​36527) (#​36572)
  • Allow scroll propagation outside code editor (#​36502) (#​36510)
• BUGFIXES
  • Fix non-admins unable to automerge PRs from forks (#​36833) (#​36843)
  • Fix bug when pushing mirror with wiki (#​36795) (#​36807)
  • Fix artifacts v4 backend upload problems (#​36805) (#​36834)
  • Fix CRAN package version validation to allow more than 4 version components (#​36813) (#​36821)
  • Fix force push time-line commit comments of pull request (#​36653) (#​36717)
  • Fix SVG height calculation in diff viewer (#​36748) (#​36750)
  • Fix push time bug (#​36693) (#​36713)
  • Fix bug the protected branch rule name is conflicted with renamed branch name (#​36650) (#​36661)
  • Fix bug when do LFS GC (#​36500) (#​36608)
  • Fix focus lost bugs in the Monaco editor (#​36609)
  • Reprocess htmx content after loading more files (#​36568) (#​36577)
  • Fix assignee sidebar links and empty placeholder (#​36559) (#​36563)
  • Fix issues filter dropdown showing empty label scope section (#​36535) (#​36544)
  • Fix various mermaid bugs (#​36547) (#​36552)
  • Fix data race when uploading container blobs concurrently (#​36524) (#​36526)
  • Correct spacing between username and bot label (#​36473) (#​36484)

v1.24

• SECURITY
  • Refactor legacy code (#​35708) (#​35713)
  • Fixing issue #​35530: Password Leak in Log Messages (#​35584) (#​35665)
  • Fix a bug missed return (#​35655) (#​35671)
• BUGFIXES
  • Fix inputing review comment will remove reviewer (#​35591) (#​35664)
• TESTING
  • Mock external service in hcaptcha TestCaptcha (#​35604) (#​35663)
  • Fix build (#​35669)

v1.23

• SECURITY
  • Fix a bug when uploading file via lfs ssh command (#​34408) (#​34411)
  • Update net package (#​34228) (#​34232)
• BUGFIXES
  • Fix releases sidebar navigation link (#​34436) #​34439
  • Fix bug webhook milestone is not right. (#​34419) #​34429
  • Fix two missed null value checks on the wiki page. (#​34205) (#​34215)
  • Swift files can be passed either as file or as form value (#​34068) (#​34236)
  • Fix bug when API get pull changed files for deleted head repository (#​34333) (#​34368)
  • Upgrade github v61 -> v71 to fix migrating bug (#​34389)
  • Fix bug when visiting comparation page (#​34334) (#​34364)
  • Fix wrong review requests when updating the pull request (#​34286) (#​34304)
  • Fix github migration error when using multiple tokens (#​34144) (#​34302)
  • Explicitly not update indexes when sync database schemas (#​34281) (#​34295)
  • Fix panic when comment is nil (#​34257) (#​34277)
  • Fix project board links to related Pull Requests (#​34213) (#​34222)
  • Don't assume the default wiki branch is master in the wiki API (#​34244) (#​34245)
• DOCUMENTATION
  • Update token creation API swagger documentation (#​34288) (#​34296)
• MISC
  • Fix CI Build (#​34315)
  • Add riscv64 support (#​34199) (#​34204)
  • Bump go version in go.mod (#​34160)
  • remove hardcoded 'code' string in clone_panel.tmpl (#​34153) (#​34158)

v1.22

• SECURITY
  • Fix misuse of PublicKeyCallback(#​32810)
• BUGFIXES
  • Fix lfs migration (#​32812) (#​32818)
  • Add missing two sync feed for refs/pull (#​32815)
• TESTING
  • Avoid MacOS keychain dialog in integration tests (#​32813) (#​32816)

v1.21

• SECURITY
  • Use go1.21.9 to include Golang security fix
  • Fix possible renderer security problem (#​30136) (#​30315)
  • Performance optimization for git push and check permissions for push options (#​30104) (#​30354)
• BUGFIXES
  • Fix close file in the Upload func (#​30262) (#​30269)
  • Fix inline math blocks can't be preceeded/followed by alphanumerical characters (#​30175) (#​30250)
  • Fix missing 0 prefix of GPG key id (#​30245) (#​30247)
  • Include encoding in signature payload (#​30174) (#​30181)
  • Move from max( id ) to max( index ) for latest commit statuses (#​30076) (#​30155)
  • Load attachments for code comments (#​30124) (#​30126)
  • Fix gitea doctor will remove repo-avatar files when executing command storage-archives (#​30094) (#​30120)
  • Fix possible data race on tests (#​30093) (#​30108)
  • Fix duplicate migrated milestones (#​30102) (#​30105)
  • Fix panic for fixBrokenRepoUnits16961 (#​30068) (#​30100)
  • Fix incorrect SVGs (#​30086) (#​30087)
  • Fix create commit status (#​30225) (#​30340)
  • Fix misuse of unsupported global variables (#​30402)
  • Fix to delete the cookie when AppSubURL is non-empty (#​30375) (#​30468)
  • Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#​30357) (#​30408)
  • Change the default maxPerPage for gitbucket (#​30392) (#​30471)
  • Check the token's owner and repository when registering a runner (#​30406) (#​30412)
  • Avoid losing token when updating mirror settings (#​30429) (#​30466)
  • Fix commit status cache which missed target_url (#​30426) (#​30445)
  • Fix rename branch 500 when the target branch is deleted but exist in database (#​30430) (#​30437)
  • Fix mirror error when mirror repo is empty (#​30432) (#​30467)
  • Use db.ListOptions directly instead of Paginator interface to make it easier to use and fix performance of /pulls and /issues (#​29990) (#​30447)
  • Fix code owners will not be mentioned when a pull request comes from a forked repository (#​30476) (#​30497)
• DOCS
  • Update actions variables documents (#​30394) (#​30405)
• MISC
  • Update katex to 0.16.10 (#​30089)
  • Upgrade go-sqlite to v1.14.22 (#​30462)

offen/docker-volume-backup (offen/docker-volume-backup)

v2.47.2

Compare Source

Fixes

• Google Drive upload fails silently when configuration is wrong #​733
• Service count in Swarm mode is always 0 #​736 (thanks @​SmallFriendlyKiwi)

Chores

• Dependency hygiene #​731 #​734 #​735

v2.47.1

Compare Source

Fixes

• Send Content-MD5 header on S3 uploads #​728 (thanks @​tianshanghong)

Chores

• Build using Go 1.26 #​730 #​726
• Dependeny hygiene #​709 #​710 #​712 #​713 #​714 #​715 #​716 #​717 #​718 #​719 #​720 #​721 #​722 #​723 #​724 #​725

v2.47.0

Compare Source

Features

• Add print-config subcommand for debugging #​698 (thanks @​le-lenn)

Fixes

• send failure notifications for config init errors too #​697 (thanks @​le-lenn)

Chores

• Update alpine version to 3.23 #​693
• Migrate from package docker/docker to moby packages #​676 #​682
• Dependency hygiene #​670 #​672 #​669 #​673 #​671 #​675 #​677 #​678 #​679 #​68 #​684 #​683 #​681 #​685 #​688 #​689 #​690 #​691 #​692 #​695 #​701 #​706 #​707
• Desired go version can be read from go.mod #​647
• optimize test suite for local use #​702 #​700 (thanks @​le-lenn)

v2.46.1

Compare Source

Fixes

• Close dangling SSH connections after use #​668

Chores

• Dependency Hygiene #​665 #​666

v2.46.0

Compare Source

Features

• Add option to skip restart of stopped containers/services after backup #​659 (thanks @​ChainsLunatic)

Chores

• Dependency hygiene #​656 #​657 #​658 #​660 #​661 #​662

v2.45.0

Compare Source

Features

• Add optional jittering before any backup actions #​654 (thanks @​estebanthi)

Fixes

• Update shoutrrr to set default SMTP timeout of 10s #​655 (thanks @​PythonGermany @​nicholas-fedor)

Chores

• Dependeny hygiene #​649 #​650 #​651 #​652

v2.44.1

Compare Source

Fixes

• Ensure destination exists when using SSH storage #​646 (Thanks @​estebanthi)

Chores

• Replace containrrr/shoutrrr with nicholas-fedor/shoutrrr #​643 (Thanks @​nicholas-fedor for updating the documentation for my usecase)
• Dependency hygiene #​616 #​617 #​618 #​619 #​625 #​626 #​630 #​632 #​633 #​634 #​636 #​635 #​639 #​640 #​641 #​644 #​645
• Update golanglint-ci integration #​637

Docs

• Fix mistake in notification template documentation #​623 (Thanks @​igox)

v2.44.0

Compare Source

Features

• Add Google Drive support #​613 (thanks @​luizguilhermesj)

Chores

• Dependency hygiene #​594 #​596 #​599 #​600 #​601 #​602 #​604 #​606 #​605 #​610 #​609 #​615
• Test setup improvements #​597 #​598

v2.43.4

Compare Source

Fixes

• Fall back to default behavior when deployed to a Swarm worker node #​593

Docs

• Link to Dropbox from config reference is outdated #​562
• Update encrypt-backups.md #​550 (Thanks @​danial23)

Chores

• Dependency hygiene #​551 #​553 #​554 #​555 #​556 #​557 #​558 #​559 #​560 #​568 #​569 #​570 #​572 #​573 #​577 #​579 #​580 #​583 #​584 #​585 #​586 #​587
• Update base image #​589

v2.43.3

Compare Source

Fixes

• Directories aren't excluded from pruning logic #​548

Chores

• Dependency hygiene #​532 #​533 #​534 #​535 #​536 #​542 #​543 #​544 #​545
• Build using Go 1.24 #​537
• Always use read only socket mount in tests #​546

Docs

• Config reference should always use default values #​549

v2.43.2

Compare Source

Fixes

• Support passing standard ssh keys to age encryption #​530

Chores

• Dependency Hygiene #​522 #​523 #​524 #​526 #​527
• Docker build now warns about casing mismatch 2652e05

v2.43.1

Compare Source

Fixes

• Error cases when parsing labeled commands into argv are not handled sufficiently #​506

Chores

• Dependency hygiene #​460 #​461 #​463 #​464 #​467 #​469 #​470 #​475 #​476 #​477 #​479 #​482 #​483 #​485 #​487 #​489 #​488 #​491 #​493 #​494 #​495 #​499 #​501 #​500 #​508 #​510 #​511 #​512 #​516 #​518 #​517
• Compile using Go 1.23 #​462
• Base image off alpine:3.21 #​502

Docs

• Documentation update for DROPBOX_REMOTE_PATH environment variable #​473 (thanks @​shalafi99)

v2.43.0

Compare Source

Features

• Support archive encryption using age #​432 (thanks @​nkcmr)

Chores

• Dependency hygiene #​458

v2.42.0

Compare Source

Features

• Add "none" compression type #​457 (thanks @​jzebedee)
• Support PGP Asymmetric Encryption #​456 (thanks @​lbsekr)

v2.41.0

Compare Source

Features

• Add support for Azure storage access tiers #​452

Chores

• Dependency hygiene #​453 #​454

v2.40.0

Compare Source

Features

• Bump shoutrrr to version 0.8 #​450

Fixes

• Close file handler after encryption #​419 (thanks @​testwill)
• Fix minor complaints raised by golangci-lint e613f60

Chores

• Dependency hygiene #​449 #​448 #​442 #​444 #​443 #​441 #​439 #​440 #​438 #​435 #​434 #​431 #​430 #​428 #​427 #​426 #​421 #​418 #​416 #​415 #​414 #​408 #​409 #​410
• Update Alpine to 3.20 #​424
• Dev setup maintenance

v2.39.1

Compare Source

Fixes

• Result of query for services is used before handling possible error, non-replicated services that are labeled should raise an error #​405

Chores

• Update test suite image to use Docker 26 #​404
• Print stack trace when encountering unexpected panic #​406
• Dependency hygiene #​389 #​390 [#​392](https://redirect

---

Configuration

📅 Schedule: Branch creation - "before 4am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.