mirror of
https://github.com/coder/coder.git
synced 2026-09-21 20:51:01 +08:00
655a36c3921d12d197b1b7eb9ba767d0516b0005
10951
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 Spike Curtis
|
655a36c392 |
test: fix TestAgentConnectionMonitor_PingTimeout race with mock assertions (#19836)
Fixes https://github.com/coder/internal/issues/970 The test doesn't wait for `monitor()` to complete, and the mock database call that we assert takes place in a `defer` within `monitor()`. This allows the mock assertions to race with the defer and flake the test. Solution is to explicitly wait for `monitor()` to complete before the end of the test, so that mock assertions (which happen in a `t.Cleanup()`) don't race. |
||
|
Spike Curtis
|
4fc0093388 |
fix: fix TestCloserStack_Timeout to wait for all asyncClosers (#19837)
fixes https://github.com/coder/internal/issues/966 TestCloserStack_Timeout creates `asyncCloser`s which allow control over the exact timing and order of their close method returning. They also, as a final backstop will throw an error if the test context ends before they are unblocked. TestCloserStack_Timeout unblocks all `asyncCloser`s in a defer and then ends the test. This defer _unblocks_ the running close goroutines, but does not wait for them to finish. Since the test context is canceled as soon as the test completes, this creates a race condition where the close goroutines can trigger the context cancelled arm of the `select` statement. The fix is to both unblock and wait for all close goroutines to complete before ending the test and cancelling the context. |
||
|
Brett Kolodny
|
e6b04d1918 |
feat: add shared filter to workspaces query (#19807)
Adds a `shared:<boolean>` search query to the `/workspaces [get]` endpoint https://github.com/user-attachments/assets/ccf84bd9-c1fd-4085-825b-2e3176a2d488 Closes [coder/internal#972](https://github.com/coder/internal/issues/972) |
||
|
Danny Kopping
|
8487216548 | chore: add aibridge configs & experiment (#19793) | ||
|
Ethan
|
2695bb418a |
ci: reduce size of ci failure slack notification (#19835)
The slack message will now look something like: > ❌ CI Failure in main > > View failure: Click here > > @.Blink Investigate this CI failure. Before starting, use your workspace to read https://gist.githubusercontent.com/ethanndickson/8dea9f1db3957ac1baf30ae8ce6f1a42/raw/da95920805456580499462a14b9a906d377414c5/blink-flake-instructions.md (The prompt section is stored in a GHA variable so it can be modified without committing.) |
||
|
Stephen KirbyandAtif Ali
|
2f35deeb39 |
chore(docs): update release calendar for 2.26 mainline release (#19680)
Co-authored-by: Atif Ali <atif@coder.com> |
||
|
Ethan
|
995b330250 |
test: avoid sharing deployment values between subtests (#19833)
Blink didn't figure out a CI failure on main was caused by a data race; fixing it. I've also updated the [blink prompt](https://gist.githubusercontent.com/ethanndickson/8dea9f1db3957ac1baf30ae8ce6f1a42/raw/060aea7fabb82bef0029a17dad9a5daee7940760/blink-flake-instructions.md). https://github.com/coder/coder/actions/runs/17737809615 |
||
|
david-fraley
|
cda859363e | docs: fix formatting issues (#19831) | ||
|
Rowan Smithanddavid-fraley
|
f40ae708d6 |
chore: fix grammar issue (#19810)
fix a grammar issue. Added an extra whitespace to the end / expanded the width of the table to maintain space as adding the one char would have pushed `helps` hard up against the table edge. > If you have used AI to produce some or all of this PR, please ensure you have read our [AI Contribution guidelines](https://coder.com/docs/about/contributing/AI_CONTRIBUTING) before submitting. no AI Co-authored-by: david-fraley <67079030+david-fraley@users.noreply.github.com> |
||
|
Asher
|
c31768dfe7 |
fix: use filepath to construct mcp test write path (#19808)
Hopefully fixes https://github.com/coder/internal/issues/993 ``` file path must be absolute: "/test/some/path" ``` Not sure if this is the right fix though, since I am not sure how this only flakes rather than always failing. It looks like starting with `/` should not be considered absolute in Windows, but then how did it ever pass at all? |
||
|
Danny Kopping
|
18b0acab4d |
fix: correct MCP tools' input schemas (#19825)
The input schemas of `coder_workspace_edit_file` and `coder_workspace_edit_files` were violating the JSON Schemas of both Anthropic and OpenAI. Follow-up: we should add a test to ensure future compatibility with these specs. Signed-off-by: Danny Kopping <danny@coder.com> |
||
|
ケイラ
|
8ff4ba0c70 |
fix: scroll item list into view when opening MultiSelectCombobox (#19806)
|
||
|
|
c9a877a386 |
docs: remove beta references from dynamic parameters (#19714)
Dynamic parameters are now GA as of v2.25.0, so this PR updates the troubleshooting section to remove outdated beta references and clarify current support. **Changes:** - Updated "Template variables not showing up" section to remove beta references - Clarified that template variables are fully supported in GA version - Simplified troubleshooting guidance Fixes the outdated documentation mentioned in the Slack thread. --------- Co-authored-by: blink-so[bot] <211532188+blink-so[bot]@users.noreply.github.com> Co-authored-by: bpmct <22407953+bpmct@users.noreply.github.com> Co-authored-by: david-fraley <67079030+david-fraley@users.noreply.github.com> |
||
|
dependabot[bot]
|
4dc5d5c733 |
chore: bump github.com/gohugoio/hugo from 0.149.1 to 0.150.0 (#19826)
Bumps [github.com/gohugoio/hugo](https://github.com/gohugoio/hugo) from 0.149.1 to 0.150.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gohugoio/hugo/releases">github.com/gohugoio/hugo's releases</a>.</em></p> <blockquote> <h2>v0.150.0</h2> <p>The big new feature in this relase is the new <code>version</code> config option on <a href="https://gohugo.io/configuration/module/#version">Module imports</a>, which allows you to set the requested module <a href="https://go.dev/ref/mod#version-queries">version query</a> directly in your Hugo configuration (e.g. <code>hugo.toml</code>). This is a feature that have been requested by many, and I (<a href="https://github.com/bep"><code>@bep</code></a>) was reminded about it by <a href="https://discourse.gohugo.io/t/mounting-different-branches-tags-from-the-same-repository/55849/5">this recent thread</a>, which also outlines a common use case for this: Mounting multiple old versions/branches of API documentation into the project.</p> <h2>What's Changed</h2> <ul> <li>build(deps): bump golang.org/x/mod from 0.27.0 to 0.28.0 d1f6a1dc5 <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot]</li> <li>modules: Add support for direct version module imports in hugo.toml 747cf4ad6 <a href="https://github.com/bep"><code>@bep</code></a> <a href="https://redirect.github.com/gohugoio/hugo/issues/13964">#13964</a></li> <li>resources/page: Fix truncated summary logic d8774d7fc <a href="https://github.com/jmooring"><code>@jmooring</code></a> <a href="https://redirect.github.com/gohugoio/hugo/issues/13967">#13967</a> <a href="https://redirect.github.com/gohugoio/hugo/issues/13968">#13968</a></li> <li>config/security: Add PROGRAMDATA to the osenv allowlist 3b8947d82 <a href="https://github.com/jmooring"><code>@jmooring</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gohugoio/hugo/commit/3f5473b7d4e7377e807290c3acc89feeef1aaa71"><code>3f5473b</code></a> releaser: Bump versions for release of 0.150.0</li> <li><a href="https://github.com/gohugoio/hugo/commit/d1f6a1dc595b3f456044d803c506fbbf36c5d45f"><code>d1f6a1d</code></a> build(deps): bump golang.org/x/mod from 0.27.0 to 0.28.0</li> <li><a href="https://github.com/gohugoio/hugo/commit/747cf4ad657b6eaeffcd0c7b0a10a38980c7b54c"><code>747cf4a</code></a> modules: Add support for direct version module imports in hugo.toml</li> <li><a href="https://github.com/gohugoio/hugo/commit/d8774d7fc34b12eb39dc85d0f7df797b13ab8fcc"><code>d8774d7</code></a> resources/page: Fix truncated summary logic</li> <li><a href="https://github.com/gohugoio/hugo/commit/3b8947d8217621dbe42198263a27e04a2490ab81"><code>3b8947d</code></a> config/security: Add PROGRAMDATA to the osenv allowlist</li> <li><a href="https://github.com/gohugoio/hugo/commit/321a66ef19ac25411bbbec926b7892be5ae55416"><code>321a66e</code></a> releaser: Prepare repository for 0.150.0-DEV</li> <li>See full diff in <a href="https://github.com/gohugoio/hugo/compare/v0.149.1...v0.150.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
32b72bf571 |
ci: bump the github-actions group with 3 updates (#19824)
Bumps the github-actions group with 3 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner), [tj-actions/changed-files](https://github.com/tj-actions/changed-files) and [github/codeql-action](https://github.com/github/codeql-action). Updates `step-security/harden-runner` from 2.13.0 to 2.13.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/step-security/harden-runner/releases">step-security/harden-runner's releases</a>.</em></p> <blockquote> <h2>v2.13.1</h2> <h2>What's Changed</h2> <ul> <li> <p>Graceful handling of HTTP errors: Improved error handling when fetching Harden Runner policies from the StepSecurity Policy Store API, ensuring more reliable execution even in case of temporary network/API issues.</p> </li> <li> <p>Security updates for npm dependencies: Updated vulnerable npm package dependencies to the latest secure versions.</p> </li> <li> <p>Faster enterprise agent downloads: The enterprise agent is now downloaded from GitHub Releases instead of packages.stepsecurity.io, improving download speed and reliability.</p> </li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/step-security/harden-runner/compare/v2.13.0...v2.13.1">https://github.com/step-security/harden-runner/compare/v2.13.0...v2.13.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/step-security/harden-runner/commit/f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a"><code>f4a75cf</code></a> Merge pull request <a href="https://redirect.github.com/step-security/harden-runner/issues/588">#588</a> from step-security/rc-26</li> <li><a href="https://github.com/step-security/harden-runner/commit/95503d076c107b91d03775aee93f4cb86a134dda"><code>95503d0</code></a> ci: remove code-review workflow</li> <li><a href="https://github.com/step-security/harden-runner/commit/4b250a07397b4cabc038948e3d832967764db6b4"><code>4b250a0</code></a> ci: add job to confirm dist is as expected</li> <li><a href="https://github.com/step-security/harden-runner/commit/5b0ab6abcf4c643b4ddf49d19fdb13c5821d124b"><code>5b0ab6a</code></a> update dependencies</li> <li><a href="https://github.com/step-security/harden-runner/commit/d11f2c1d65a99d8b0f20925c425d4d932e6d3366"><code>d11f2c1</code></a> fix bug where status code was not being preserved</li> <li><a href="https://github.com/step-security/harden-runner/commit/b3fc98e4dfca39273624a95b9c5fd70d759997e5"><code>b3fc98e</code></a> improve error handling for policy store sceanrio</li> <li><a href="https://github.com/step-security/harden-runner/commit/92fc5d4bf78f09f5494523f3d8f2f85786fe757f"><code>92fc5d4</code></a> update error message</li> <li><a href="https://github.com/step-security/harden-runner/commit/b61b0a4938ef1a80f368fbb9a0abcf78846e15a4"><code>b61b0a4</code></a> policy store improvements</li> <li><a href="https://github.com/step-security/harden-runner/commit/e3d3f2baeacadcbf3b2ad500171dd444855d4577"><code>e3d3f2b</code></a> use GitHub release instead of packages</li> <li><a href="https://github.com/step-security/harden-runner/commit/646ac01e72c16075733090f55857fc2f2d9a7e7a"><code>646ac01</code></a> update agent</li> <li>Additional commits viewable in <a href="https://github.com/step-security/harden-runner/compare/ec9f2d5744a09debf3a187a3f4f675c53b671911...f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a">compare view</a></li> </ul> </details> <br /> Updates `tj-actions/changed-files` from 8c14441336bb3d84fd6b7fa83b6d7201c740baf5 to 1ac60965030588f3b867cdd4a3900f37ec99970c <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tj-actions/changed-files/blob/main/HISTORY.md">tj-actions/changed-files's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h1><a href="https://github.com/tj-actions/changed-files/compare/v46.0.5...v47.0.0">47.0.0</a> - (2025-09-13)</h1> <h2><!-- raw HTML omitted -->🚀 Features</h2> <ul> <li>Add any_added to outputs (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2567">#2567</a>) (<a href="https://github.com/tj-actions/changed-files/commit/c260d49a827b5eb266673bed7871c5d3ee9b5aef">c260d49</a>) - (Jellyfrog)</li> </ul> <h2><!-- raw HTML omitted -->➖ Remove</h2> <ul> <li>Commit and push step from build job (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2538">#2538</a>) (<a href="https://github.com/tj-actions/changed-files/commit/be393a90381e27c9fec2c8c2e02b00f005710145">be393a9</a>) - (Tonye Jack)</li> </ul> <h2><!-- raw HTML omitted -->🔄 Update</h2> <ul> <li>Updated README.md (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2592">#2592</a>)</li> </ul> <p>Co-authored-by: github-actions[bot] <41898282+github-actions[bot]<a href="https://github.com/users"><code>@users</code></a>.noreply.github.com> (<a href="https://github.com/tj-actions/changed-files/commit/3dbc1e181273d808ccff822a6e00cf18b6628ef0">3dbc1e1</a>) - (github-actions[bot])</p> <ul> <li>Updated README.md (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2591">#2591</a>)</li> </ul> <p>Co-authored-by: github-actions[bot] <41898282+github-actions[bot]<a href="https://github.com/users"><code>@users</code></a>.noreply.github.com> (<a href="https://github.com/tj-actions/changed-files/commit/b1ccff8c0892ad141d7d2de6f31e526a9dad931f">b1ccff8</a>) - (github-actions[bot])</p> <ul> <li>Updated README.md (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2574">#2574</a>)</li> </ul> <p>Co-authored-by: github-actions[bot] <41898282+github-actions[bot]<a href="https://github.com/users"><code>@users</code></a>.noreply.github.com> (<a href="https://github.com/tj-actions/changed-files/commit/050a3d3360d29711ee9d8210fc639d902d23ad07">050a3d3</a>) - (github-actions[bot])</p> <h2><!-- raw HTML omitted -->📚 Documentation</h2> <ul> <li>Update link to glob patterns (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2590">#2590</a>) (<a href="https://github.com/tj-actions/changed-files/commit/a892f50f7a7187bc288633c09230b09ce7ad8fd0">a892f50</a>) - (Tonye Jack)</li> <li>Add Jellyfrog as a contributor for code, and doc (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2573">#2573</a>) (<a href="https://github.com/tj-actions/changed-files/commit/f000a9b97f254f9590ff26f651cccde827ad36da">f000a9b</a>) - (allcontributors[bot])</li> </ul> <h2><!-- raw HTML omitted -->🧪 Testing</h2> <ul> <li>Manual triggered workflows (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2637">#2637</a>) (<a href="https://github.com/tj-actions/changed-files/commit/c2ca2493190021783138cb8aac49bcee14b4bb89">c2ca249</a>) - (Tonye Jack)</li> </ul> <h2><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h2> <ul> <li><strong>deps-dev:</strong> Bump jest from 30.0.5 to 30.1.3 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2655">#2655</a>) (<a href="https://github.com/tj-actions/changed-files/commit/9a6755550a331fdcc8ec45443738933f8fa22eea">9a67555</a>) - (dependabot[bot])</li> <li><strong>deps:</strong> Bump tj-actions/git-cliff from 2.1.0 to 2.2.0 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2660">#2660</a>) (<a href="https://github.com/tj-actions/changed-files/commit/b67e30df88f43e244f4e83775e5ad8335114fb95">b67e30d</a>) - (dependabot[bot])</li> <li><strong>deps:</strong> Bump github/codeql-action from 3.30.2 to 3.30.3 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2661">#2661</a>) (<a href="https://github.com/tj-actions/changed-files/commit/62aef422ffa195474d80d73387535cf4622b2824">62aef42</a>) - (dependabot[bot])</li> <li><strong>deps:</strong> Bump github/codeql-action from 3.29.11 to 3.30.2 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2659">#2659</a>) (<a href="https://github.com/tj-actions/changed-files/commit/e874f3cddd0f54ae776e6995ae6dae4cf40fd3d3">e874f3c</a>) - (dependabot[bot])</li> <li><strong>deps:</strong> Bump actions/setup-node from 4.4.0 to 5.0.0 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2656">#2656</a>) (<a href="https://github.com/tj-actions/changed-files/commit/8c14441336bb3d84fd6b7fa83b6d7201c740baf5">8c14441</a>) - (dependabot[bot])</li> <li><strong>deps-dev:</strong> Bump <code>@types/node</code> from 24.3.0 to 24.3.1 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2657">#2657</a>) (<a href="https://github.com/tj-actions/changed-files/commit/e995ac4be5be2bcb6e29556edc51fb63aca6b49b">e995ac4</a>) - (dependabot[bot])</li> <li><strong>deps-dev:</strong> Bump <code>@types/node</code> from 24.2.1 to 24.3.0 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2649">#2649</a>) (<a href="https://github.com/tj-actions/changed-files/commit/3b04099b21072562f07469c10deb182b24236ca9">3b04099</a>) - (dependabot[bot])</li> <li><strong>deps:</strong> Bump github/codeql-action from 3.29.9 to 3.29.11 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2651">#2651</a>) (<a href="https://github.com/tj-actions/changed-files/commit/e7b6c977e51984988e3cc1d6b18abe2a3ba8daaa">e7b6c97</a>) - (dependabot[bot])</li> <li><strong>deps:</strong> Bump tj-actions/git-cliff from 2.0.2 to 2.1.0 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2648">#2648</a>) (<a href="https://github.com/tj-actions/changed-files/commit/765d62bc041415a5b494ef13d02d566128b25973">765d62b</a>) - (dependabot[bot])</li> <li><strong>deps:</strong> Bump github/codeql-action from 3.29.8 to 3.29.9 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2647">#2647</a>) (<a href="https://github.com/tj-actions/changed-files/commit/2036da178f85576f1940fedb74bb93a36cd89ab7">2036da1</a>) - (dependabot[bot])</li> <li><strong>deps:</strong> Bump github/codeql-action from 3.29.7 to 3.29.8 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2644">#2644</a>) (<a href="https://github.com/tj-actions/changed-files/commit/239aef84a5502c79a1cea96e495d17588c66c659">239aef8</a>) - (dependabot[bot])</li> <li><strong>deps-dev:</strong> Bump <code>@types/node</code> from 24.2.0 to 24.2.1 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2645">#2645</a>) (<a href="https://github.com/tj-actions/changed-files/commit/a7d5f5f4919b6dbc6d3a3689887964361e8dd88f">a7d5f5f</a>) - (dependabot[bot])</li> <li><strong>deps:</strong> Bump actions/checkout from 4.2.2 to 5.0.0 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2646">#2646</a>) (<a href="https://github.com/tj-actions/changed-files/commit/5107f3abcc0c3737db51e2949f181e2c197d4d5b">5107f3a</a>) - (dependabot[bot])</li> <li><strong>deps-dev:</strong> Bump <code>@types/node</code> from 24.1.0 to 24.2.0 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2640">#2640</a>) (<a href="https://github.com/tj-actions/changed-files/commit/f963b3f3562b00b6d2dd25efc390eb04e51ef6c6">f963b3f</a>) - (dependabot[bot])</li> <li><strong>deps:</strong> Bump actions/download-artifact from 4.3.0 to 5.0.0 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2641">#2641</a>) (<a href="https://github.com/tj-actions/changed-files/commit/f956744105e18d78bba3844a1199ce43d6503017">f956744</a>) - (dependabot[bot])</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tj-actions/changed-files/commit/1ac60965030588f3b867cdd4a3900f37ec99970c"><code>1ac6096</code></a> Upgraded to v47 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2663">#2663</a>)</li> <li><a href="https://github.com/tj-actions/changed-files/commit/24d32ffd492484c1d75e0c0b894501ddb9d30d62"><code>24d32ff</code></a> upgrade: to node24 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2662">#2662</a>)</li> <li><a href="https://github.com/tj-actions/changed-files/commit/9a6755550a331fdcc8ec45443738933f8fa22eea"><code>9a67555</code></a> chore(deps-dev): bump jest from 30.0.5 to 30.1.3 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2655">#2655</a>)</li> <li><a href="https://github.com/tj-actions/changed-files/commit/b67e30df88f43e244f4e83775e5ad8335114fb95"><code>b67e30d</code></a> chore(deps): bump tj-actions/git-cliff from 2.1.0 to 2.2.0 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2660">#2660</a>)</li> <li><a href="https://github.com/tj-actions/changed-files/commit/62aef422ffa195474d80d73387535cf4622b2824"><code>62aef42</code></a> chore(deps): bump github/codeql-action from 3.30.2 to 3.30.3 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2661">#2661</a>)</li> <li><a href="https://github.com/tj-actions/changed-files/commit/e874f3cddd0f54ae776e6995ae6dae4cf40fd3d3"><code>e874f3c</code></a> chore(deps): bump github/codeql-action from 3.29.11 to 3.30.2 (<a href="https://redirect.github.com/tj-actions/changed-files/issues/2659">#2659</a>)</li> <li>See full diff in <a href="https://github.com/tj-actions/changed-files/compare/8c14441336bb3d84fd6b7fa83b6d7201c740baf5...1ac60965030588f3b867cdd4a3900f37ec99970c">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action` from 3.30.1 to 3.30.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v3.30.3</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.30.3 - 10 Sep 2025</h2> <p>No user facing changes.</p> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.30.3/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> <h2>v3.30.2</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.30.2 - 09 Sep 2025</h2> <ul> <li>Fixed a bug which could cause language autodetection to fail. <a href="https://redirect.github.com/github/codeql-action/pull/3084">#3084</a></li> <li>Experimental: The <code>quality-queries</code> input that was added in <code>3.29.2</code> as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new <code>analysis-kinds</code> input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3064">#3064</a></li> </ul> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.30.2/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <ul> <li>We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the <code>codeql-action/init</code> step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the <code>codeql-action/init</code> step. <a href="https://redirect.github.com/github/codeql-action/pull/3099">#3099</a> and <a href="https://redirect.github.com/github/codeql-action/pull/3100">#3100</a></li> <li>We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. <a href="https://redirect.github.com/github/codeql-action/pull/3107">#3107</a></li> </ul> <h2>3.30.3 - 10 Sep 2025</h2> <p>No user facing changes.</p> <h2>3.30.2 - 09 Sep 2025</h2> <ul> <li>Fixed a bug which could cause language autodetection to fail. <a href="https://redirect.github.com/github/codeql-action/pull/3084">#3084</a></li> <li>Experimental: The <code>quality-queries</code> input that was added in <code>3.29.2</code> as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new <code>analysis-kinds</code> input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3064">#3064</a></li> </ul> <h2>3.30.1 - 05 Sep 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.23.0. <a href="https://redirect.github.com/github/codeql-action/pull/3077">#3077</a></li> </ul> <h2>3.30.0 - 01 Sep 2025</h2> <ul> <li>Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. <a href="https://redirect.github.com/github/codeql-action/pull/3054">#3054</a></li> </ul> <h2>3.29.11 - 21 Aug 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.22.4. <a href="https://redirect.github.com/github/codeql-action/pull/3044">#3044</a></li> </ul> <h2>3.29.10 - 18 Aug 2025</h2> <p>No user facing changes.</p> <h2>3.29.9 - 12 Aug 2025</h2> <p>No user facing changes.</p> <h2>3.29.8 - 08 Aug 2025</h2> <ul> <li>Fix an issue where the Action would autodetect unsupported languages such as HTML. <a href="https://redirect.github.com/github/codeql-action/pull/3015">#3015</a></li> </ul> <h2>3.29.7 - 07 Aug 2025</h2> <p>This release rolls back 3.29.6 to address issues with language autodetection. It is identical to 3.29.5.</p> <h2>3.29.6 - 07 Aug 2025</h2> <ul> <li>The <code>cleanup-level</code> input to the <code>analyze</code> Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. <a href="https://redirect.github.com/github/codeql-action/pull/2999">#2999</a></li> <li>Update default CodeQL bundle version to 2.22.3. <a href="https://redirect.github.com/github/codeql-action/pull/3000">#3000</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/192325c86100d080feab897ff886c34abd4c83a3"><code>192325c</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3104">#3104</a> from github/update-v3.30.3-b660efdcf</li> <li><a href="https://github.com/github/codeql-action/commit/e68956d90b7fe2260904652cd8de5d73563e4944"><code>e68956d</code></a> Update changelog for v3.30.3</li> <li><a href="https://github.com/github/codeql-action/commit/b660efdcfdfa893d74568cd884067ed18e8d6f88"><code>b660efd</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3103">#3103</a> from github/mbg/fix/category-check</li> <li><a href="https://github.com/github/codeql-action/commit/e49458befe579c5a1088aacda9f2ae384da104ff"><code>e49458b</code></a> Fix <code>runInterpretResultsFor</code> using the wrong <code>AnalysisConfig</code> for <code>category</code> fix</li> <li><a href="https://github.com/github/codeql-action/commit/f374a62c8bedef779582aeb425a68f7798f2078c"><code>f374a62</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3098">#3098</a> from github/kaspersv/increase-overlay-base-size-limit</li> <li><a href="https://github.com/github/codeql-action/commit/5efa438e92992578d794ae4ceed960bf81011677"><code>5efa438</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3101">#3101</a> from github/mbg/public-repo-notice-in-pr-template</li> <li><a href="https://github.com/github/codeql-action/commit/8a84a62542ea24fd569eb5afdfb2507c25328ab9"><code>8a84a62</code></a> Overlay: Increase size limit for cached overlay base database</li> <li><a href="https://github.com/github/codeql-action/commit/eb50a881d87eb8488328fefe024ae2f6add8384f"><code>eb50a88</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3097">#3097</a> from github/redsun82/only-dump-sarif</li> <li><a href="https://github.com/github/codeql-action/commit/4c534612bf77788909753a5602e96710156f5758"><code>4c53461</code></a> Tweak sarif dump log</li> <li><a href="https://github.com/github/codeql-action/commit/dae3742b0a3b9e08acc580e15ef74bdc454d650a"><code>dae3742</code></a> Dump soon to be uploaded SARIF on request</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/f1f6e5f6af878fb37288ce1c627459e94dbf7d01...192325c86100d080feab897ff886c34abd4c83a3">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
4fde5f8588 |
chore: bump github.com/aws/aws-sdk-go-v2 from 1.38.1 to 1.39.0 (#19821)
Bumps [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) from 1.38.1 to 1.39.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/648027edb8aeba036195538174a63cbccaca8c16"><code>648027e</code></a> Release 2025-09-08</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/a3b9b7b1303ebf9fc1837f70253fe086d0ee72a2"><code>a3b9b7b</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/67dad834dcc6ab1c14a2b9935bd92bc1ff91ddd9"><code>67dad83</code></a> Update endpoints model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/2bfe86a2ca763380b5fb498feab0886d41b96dcc"><code>2bfe86a</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/59e7410f279040b4c186e149402eebf13c5e06d9"><code>59e7410</code></a> add businessmetrics feature ID for env-based bearer token (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3182">#3182</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/1cdc15880e2f5087470b6f813eb0a5cd1451c95f"><code>1cdc158</code></a> Patching override s3expire shape (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3180">#3180</a>)</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/1745ede8f69372b0e08c4a8bcc83d43e76caeb26"><code>1745ede</code></a> Release 2025-09-05</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/f84de5375a6e97e530819caba27fa0c7bc773cd6"><code>f84de53</code></a> Regenerated Clients</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/7cdaa318493e10d7ef9dd87eb1130b9806c48c98"><code>7cdaa31</code></a> Update API model</li> <li><a href="https://github.com/aws/aws-sdk-go-v2/commit/498b5c42d5b3fc143fc3449665faa3635f468d09"><code>498b5c4</code></a> remove service/sms (<a href="https://redirect.github.com/aws/aws-sdk-go-v2/issues/3177">#3177</a>)</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go-v2/compare/v1.38.1...v1.39.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
05f8ffd943 |
chore: bump github.com/valyala/fasthttp from 1.65.0 to 1.66.0 (#19822)
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) from 1.65.0 to 1.66.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/valyala/fasthttp/releases">github.com/valyala/fasthttp's releases</a>.</em></p> <blockquote> <h2>v1.66.0</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): bump securego/gosec from 2.22.7 to 2.22.8 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/valyala/fasthttp/pull/2056">valyala/fasthttp#2056</a></li> <li>docs: add fasthttp-auth to related projects section by <a href="https://github.com/FAUST-BENCHOU"><code>@FAUST-BENCHOU</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2057">valyala/fasthttp#2057</a></li> <li>server: refactor to use atomic type by <a href="https://github.com/cuiweixie"><code>@cuiweixie</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2058">valyala/fasthttp#2058</a></li> <li>chore(deps): bump actions/setup-go from 5 to 6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/valyala/fasthttp/pull/2060">valyala/fasthttp#2060</a></li> <li>Fix extra whitespace parsing in HTTP request lines to prevent cache poisoning by <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2061">valyala/fasthttp#2061</a></li> <li>Drop Go 1.23 support by <a href="https://github.com/erikdubbelboer"><code>@erikdubbelboer</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2065">valyala/fasthttp#2065</a></li> <li>Add flushing support to fasthttpadaptor by <a href="https://github.com/grivera64"><code>@grivera64</code></a> in <a href="https://redirect.github.com/valyala/fasthttp/pull/2054">valyala/fasthttp#2054</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/FAUST-BENCHOU"><code>@FAUST-BENCHOU</code></a> made their first contribution in <a href="https://redirect.github.com/valyala/fasthttp/pull/2057">valyala/fasthttp#2057</a></li> <li><a href="https://github.com/cuiweixie"><code>@cuiweixie</code></a> made their first contribution in <a href="https://redirect.github.com/valyala/fasthttp/pull/2058">valyala/fasthttp#2058</a></li> <li><a href="https://github.com/Copilot"><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/valyala/fasthttp/pull/2061">valyala/fasthttp#2061</a> 😄</li> <li><a href="https://github.com/grivera64"><code>@grivera64</code></a> made their first contribution in <a href="https://redirect.github.com/valyala/fasthttp/pull/2054">valyala/fasthttp#2054</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/valyala/fasthttp/compare/v1.65.0...v1.66.0">https://github.com/valyala/fasthttp/compare/v1.65.0...v1.66.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/valyala/fasthttp/commit/e04490f830dd9671b53e2359cddc79a23d7877f3"><code>e04490f</code></a> Add flushing support to fasthttpadaptor (<a href="https://redirect.github.com/valyala/fasthttp/issues/2054">#2054</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/e9640b4d39215ac87fa85c171b26d745a40a8e99"><code>e9640b4</code></a> Update benchmarks in readme</li> <li><a href="https://github.com/valyala/fasthttp/commit/4d25421ae55c9f5d28dc3731d9a51106a71b7254"><code>4d25421</code></a> Drop Go 1.23 support (<a href="https://redirect.github.com/valyala/fasthttp/issues/2065">#2065</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/72dccd04fb1b6ec82f33b95fd8e069861a9872e7"><code>72dccd0</code></a> Fix extra whitespace parsing in HTTP request lines to prevent cache poisoning...</li> <li><a href="https://github.com/valyala/fasthttp/commit/8c7d2bc051dfc5d5d3d0c847a293622aad42641b"><code>8c7d2bc</code></a> chore(deps): bump actions/setup-go from 5 to 6 (<a href="https://redirect.github.com/valyala/fasthttp/issues/2060">#2060</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/28b7880b32812a37f8272b2153d07b2df16e821e"><code>28b7880</code></a> server: refactor to use atomic type (<a href="https://redirect.github.com/valyala/fasthttp/issues/2058">#2058</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/68d21ed0086a8a7794274a58c5284ab9cac45cdd"><code>68d21ed</code></a> docs: add fasthttp-auth to related projects section (<a href="https://redirect.github.com/valyala/fasthttp/issues/2057">#2057</a>)</li> <li><a href="https://github.com/valyala/fasthttp/commit/7ad0219d24bb082dca5e70e2bd221fe3dc5e4fb5"><code>7ad0219</code></a> chore(deps): bump securego/gosec from 2.22.7 to 2.22.8 (<a href="https://redirect.github.com/valyala/fasthttp/issues/2056">#2056</a>)</li> <li>See full diff in <a href="https://github.com/valyala/fasthttp/compare/v1.65.0...v1.66.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
3c059c7220 |
chore: bump the x group with 3 updates (#19820)
Bumps the x group with 3 updates: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/net](https://github.com/golang/net) and [golang.org/x/tools](https://github.com/golang/tools). Updates `golang.org/x/crypto` from 0.41.0 to 0.42.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/crypto/commit/5307a0ce6db8057c8d7c4378dc4bd715b4985ba1"><code>5307a0c</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/crypto/commit/9d779377cff7ff1f58520cc044fb90b10ddfc561"><code>9d77937</code></a> acme: include order problem in OrderError</li> <li><a href="https://github.com/golang/crypto/commit/8f580defa01dec23898d3cd27f6369cdcc62f71f"><code>8f580de</code></a> ssh: remove Go 1.24 build tag for ML-KEM kex</li> <li><a href="https://github.com/golang/crypto/commit/a4d1237429d6056ef197b0b911b8b9d7dca8ecf6"><code>a4d1237</code></a> ssh/knownhosts: improve IPv6 support in Normalize</li> <li><a href="https://github.com/golang/crypto/commit/b8d8dae13d7dda8706ca2ab98934ad404aacae22"><code>b8d8dae</code></a> curve25519: include potential fips140=only error in panic message</li> <li><a href="https://github.com/golang/crypto/commit/f5a2eabcab987dc84f30d5479ed5c5605b5de634"><code>f5a2eab</code></a> ssh: use curve25519.X25519 instead of curve25519.ScalarMult</li> <li><a href="https://github.com/golang/crypto/commit/44ecf3af9978b32529ce689a6964bd557c79aa1c"><code>44ecf3a</code></a> all: upgrade go directive to at least 1.24.0 [generated]</li> <li>See full diff in <a href="https://github.com/golang/crypto/compare/v0.41.0...v0.42.0">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/net` from 0.43.0 to 0.44.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/net/commit/3b23d576ea72235a3fef8f157eb5ab76e65854a8"><code>3b23d57</code></a> http2: fix race condition when disabling goroutine debugging for one test</li> <li><a href="https://github.com/golang/net/commit/87410502ff26318c9bd1be1c9a09e0a681774dcf"><code>8741050</code></a> http2: simplify TestServer_Push_RejectAfterGoAway</li> <li><a href="https://github.com/golang/net/commit/96e405cac15ef9a113f2b30d3f3f8a216234f09c"><code>96e405c</code></a> http2: modernize TestTransportRoundtripCloseOnWriteError</li> <li><a href="https://github.com/golang/net/commit/6dc6880bcd7edc82184626a363d26d65bc55c195"><code>6dc6880</code></a> http2: simplify ClientConn Close and Shutdown tests</li> <li><a href="https://github.com/golang/net/commit/4e2915b652483bfc9831c080e40c679e42616f03"><code>4e2915b</code></a> http2: modernize TestTransportAllocationsAfterResponseBodyClose</li> <li><a href="https://github.com/golang/net/commit/30b0e78859f03d66b2e275870d5d37455d2f0fb0"><code>30b0e78</code></a> http2: modernize TestRoundTripDoesntConsumeRequestBodyEarly</li> <li><a href="https://github.com/golang/net/commit/b9acd777f1852925992bdeaa623de8cc86efa4eb"><code>b9acd77</code></a> http2: speed up TestTransportFlowControl</li> <li><a href="https://github.com/golang/net/commit/5153f4db3143a3be6ce383b512ba7a4c0f935211"><code>5153f4d</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/net/commit/9338bdd9eeddfeab331342288acfef2293474490"><code>9338bdd</code></a> http2: speed up TestTransportHandlerBodyClose</li> <li><a href="https://github.com/golang/net/commit/6b200364a6614a5cf8d360d854e998c1dc739f24"><code>6b20036</code></a> http2: add synchronous handler support to serverTester</li> <li>Additional commits viewable in <a href="https://github.com/golang/net/compare/v0.43.0...v0.44.0">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/tools` from 0.36.0 to 0.37.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/tools/commit/d49da96b802368c7325ac3b662a238c09a0615b9"><code>d49da96</code></a> go/analysis/internal/checker: fix panic due to nil Pass</li> <li><a href="https://github.com/golang/tools/commit/9da4f7b44800964cb753824472b25a0487f06b15"><code>9da4f7b</code></a> gopls/internal/test/integration/completion: make test go1.26-robust</li> <li><a href="https://github.com/golang/tools/commit/4409ea71cc4b4233548ec108ff8b9b4b59644511"><code>4409ea7</code></a> gopls/internal/server: add telemetry for Zed, Helix clientInfo</li> <li><a href="https://github.com/golang/tools/commit/75023ae58653333dcc3fc240af01833d83a72b7f"><code>75023ae</code></a> go/ast/inspector: update outdated documentation</li> <li><a href="https://github.com/golang/tools/commit/785cd66cb76e91f9c504768594c5f4e422dd8e7b"><code>785cd66</code></a> gopls/internal/test/integration/completion: skip TestFuzzFunc pre-go1.25</li> <li><a href="https://github.com/golang/tools/commit/ac2e4a594c7ddc3eeddeddddd3cbef3c22e2b6b2"><code>ac2e4a5</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/tools/commit/bc9374dde117ebc9276c545225c3cc1a116a8418"><code>bc9374d</code></a> go/callgraph/vta: remove unnecessary use of unsafe</li> <li><a href="https://github.com/golang/tools/commit/12d7e152453c767e46faa9b7ab3283600b627bf4"><code>12d7e15</code></a> gopls/internal/analysis/modernize: add test of no gopls imports</li> <li><a href="https://github.com/golang/tools/commit/263a7694059cc37e3789d5ce4a4379adc588f46c"><code>263a769</code></a> gopls/internal/mcp: use official go mcp sdk</li> <li><a href="https://github.com/golang/tools/commit/e548c709d4e162c0c771250e46eb9ea13473c1ef"><code>e548c70</code></a> gopls/internal/analysis/modernize: fix bad edit in var ( ... ) decl</li> <li>Additional commits viewable in <a href="https://github.com/golang/tools/compare/v0.36.0...v0.37.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
0cf1fed600 |
chore: bump google.golang.org/api from 0.248.0 to 0.249.0 (#19818)
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.248.0 to 0.249.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/googleapis/google-api-go-client/releases">google.golang.org/api's releases</a>.</em></p> <blockquote> <h2>v0.249.0</h2> <h2><a href="https://github.com/googleapis/google-api-go-client/compare/v0.248.0...v0.249.0">0.249.0</a> (2025-09-08)</h2> <h3>Features</h3> <ul> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3281">#3281</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/c03d56bd807f14ef4612df738ba9d3f1f6d31d1d">c03d56b</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3283">#3283</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/4d1d33689712d397ab582ee046fc51c94c080e04">4d1d336</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3284">#3284</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/d2b41b6ebb0b352d79d2ea64f89579ebbc9f96c7">d2b41b6</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3285">#3285</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/bcde9430e3e68f4ec7bebbbf54742774b9f7cfa7">bcde943</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3286">#3286</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/27530ddc5176ffbbd8a418f532878b495cb4fdf5">27530dd</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3288">#3288</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/240e54a47415519f419f9c35a7699205fac62dd1">240e54a</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3289">#3289</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/2bd4a72fae45cc4cb10b77ad1b1c2d5d8d99a650">2bd4a72</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3291">#3291</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/d09c7d319a1191f231043622df5be2f4dba1f629">d09c7d3</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3292">#3292</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/7b2235b3826bd01cc4c0f47ab9828692875029c6">7b2235b</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3293">#3293</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/2e60cd5bcc4bafa45fa699a7753db273568af68a">2e60cd5</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3294">#3294</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/162aba409d969077157d3ecec3f7578af15a62b4">162aba4</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3295">#3295</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/e297a428606910b17750a7d09aaec92c2513b415">e297a42</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3296">#3296</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/f98f8357e2480c0e96acfa004f30c731988e4cbe">f98f835</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3297">#3297</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/ababe603c1ec78c9becb3daf8cde2b4fbd108fde">ababe60</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3299">#3299</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/ad70b6eee9be539868c5b8004a7be4501fdd7404">ad70b6e</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3300">#3300</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/4fcd5bbd71a8e09cc05c17775fffc365d00dbcb5">4fcd5bb</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3301">#3301</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/6db056121da007d4c80b1eacdff5cf23e60fa6a2">6db0561</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3302">#3302</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/79b251ae0fcbe4f34730ace80b89f43b529c192b">79b251a</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3303">#3303</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/e93c8a870b9a43ac439c438d52df964da732df02">e93c8a8</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3305">#3305</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/1ca0330e52f234f3f9e9d65c431e0f9e7a2e93a0">1ca0330</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md">google.golang.org/api's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/googleapis/google-api-go-client/compare/v0.248.0...v0.249.0">0.249.0</a> (2025-09-08)</h2> <h3>Features</h3> <ul> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3281">#3281</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/c03d56bd807f14ef4612df738ba9d3f1f6d31d1d">c03d56b</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3283">#3283</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/4d1d33689712d397ab582ee046fc51c94c080e04">4d1d336</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3284">#3284</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/d2b41b6ebb0b352d79d2ea64f89579ebbc9f96c7">d2b41b6</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3285">#3285</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/bcde9430e3e68f4ec7bebbbf54742774b9f7cfa7">bcde943</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3286">#3286</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/27530ddc5176ffbbd8a418f532878b495cb4fdf5">27530dd</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3288">#3288</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/240e54a47415519f419f9c35a7699205fac62dd1">240e54a</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3289">#3289</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/2bd4a72fae45cc4cb10b77ad1b1c2d5d8d99a650">2bd4a72</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3291">#3291</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/d09c7d319a1191f231043622df5be2f4dba1f629">d09c7d3</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3292">#3292</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/7b2235b3826bd01cc4c0f47ab9828692875029c6">7b2235b</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3293">#3293</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/2e60cd5bcc4bafa45fa699a7753db273568af68a">2e60cd5</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3294">#3294</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/162aba409d969077157d3ecec3f7578af15a62b4">162aba4</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3295">#3295</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/e297a428606910b17750a7d09aaec92c2513b415">e297a42</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3296">#3296</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/f98f8357e2480c0e96acfa004f30c731988e4cbe">f98f835</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3297">#3297</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/ababe603c1ec78c9becb3daf8cde2b4fbd108fde">ababe60</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3299">#3299</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/ad70b6eee9be539868c5b8004a7be4501fdd7404">ad70b6e</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3300">#3300</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/4fcd5bbd71a8e09cc05c17775fffc365d00dbcb5">4fcd5bb</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3301">#3301</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/6db056121da007d4c80b1eacdff5cf23e60fa6a2">6db0561</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3302">#3302</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/79b251ae0fcbe4f34730ace80b89f43b529c192b">79b251a</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3303">#3303</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/e93c8a870b9a43ac439c438d52df964da732df02">e93c8a8</a>)</li> <li><strong>all:</strong> Auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3305">#3305</a>) (<a href="https://github.com/googleapis/google-api-go-client/commit/1ca0330e52f234f3f9e9d65c431e0f9e7a2e93a0">1ca0330</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/googleapis/google-api-go-client/commit/d63ede448babcddf0d4b854b3beeef47d2246144"><code>d63ede4</code></a> chore(main): release 0.249.0 (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3282">#3282</a>)</li> <li><a href="https://github.com/googleapis/google-api-go-client/commit/1ca0330e52f234f3f9e9d65c431e0f9e7a2e93a0"><code>1ca0330</code></a> feat(all): auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3305">#3305</a>)</li> <li><a href="https://github.com/googleapis/google-api-go-client/commit/e93c8a870b9a43ac439c438d52df964da732df02"><code>e93c8a8</code></a> feat(all): auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3303">#3303</a>)</li> <li><a href="https://github.com/googleapis/google-api-go-client/commit/79b251ae0fcbe4f34730ace80b89f43b529c192b"><code>79b251a</code></a> feat(all): auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3302">#3302</a>)</li> <li><a href="https://github.com/googleapis/google-api-go-client/commit/6db056121da007d4c80b1eacdff5cf23e60fa6a2"><code>6db0561</code></a> feat(all): auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3301">#3301</a>)</li> <li><a href="https://github.com/googleapis/google-api-go-client/commit/4fcd5bbd71a8e09cc05c17775fffc365d00dbcb5"><code>4fcd5bb</code></a> feat(all): auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3300">#3300</a>)</li> <li><a href="https://github.com/googleapis/google-api-go-client/commit/ad70b6eee9be539868c5b8004a7be4501fdd7404"><code>ad70b6e</code></a> feat(all): auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3299">#3299</a>)</li> <li><a href="https://github.com/googleapis/google-api-go-client/commit/ababe603c1ec78c9becb3daf8cde2b4fbd108fde"><code>ababe60</code></a> feat(all): auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3297">#3297</a>)</li> <li><a href="https://github.com/googleapis/google-api-go-client/commit/f98f8357e2480c0e96acfa004f30c731988e4cbe"><code>f98f835</code></a> feat(all): auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3296">#3296</a>)</li> <li><a href="https://github.com/googleapis/google-api-go-client/commit/e297a428606910b17750a7d09aaec92c2513b415"><code>e297a42</code></a> feat(all): auto-regenerate discovery clients (<a href="https://redirect.github.com/googleapis/google-api-go-client/issues/3295">#3295</a>)</li> <li>Additional commits viewable in <a href="https://github.com/googleapis/google-api-go-client/compare/v0.248.0...v0.249.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
38787ba9aa |
chore: bump github.com/brianvoe/gofakeit/v7 from 7.5.1 to 7.6.0 (#19819)
Bumps [github.com/brianvoe/gofakeit/v7](https://github.com/brianvoe/gofakeit) from 7.5.1 to 7.6.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/brianvoe/gofakeit/commit/2122822d4d9aeab87b73b6eb01d4e0ade92372ae"><code>2122822</code></a> datetime - added time and time range</li> <li><a href="https://github.com/brianvoe/gofakeit/commit/f98f33cefbed28045ab9752c6a96effc11809de0"><code>f98f33c</code></a> category - change time to datetime</li> <li><a href="https://github.com/brianvoe/gofakeit/commit/7e975bcbce25b0d1b5a62543fba823d8e68ae91e"><code>7e975bc</code></a> misc - len and nil check cleanup</li> <li><a href="https://github.com/brianvoe/gofakeit/commit/73dfff01158d417a79e94419af885e349aa629f6"><code>73dfff0</code></a> datetime - file rename</li> <li><a href="https://github.com/brianvoe/gofakeit/commit/3ee1f294eb627dda54a30824049de484034331a7"><code>3ee1f29</code></a> string - fix randomstring lookup output</li> <li><a href="https://github.com/brianvoe/gofakeit/commit/fdde0cc092b9a004ba08beb763f0c541d7a71c85"><code>fdde0cc</code></a> payment - cvv alias/keyword fix</li> <li>See full diff in <a href="https://github.com/brianvoe/gofakeit/compare/v7.5.1...v7.6.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
36f2d10bdc |
chore: bump github.com/coder/terraform-provider-coder/v2 from 2.10.0 to 2.11.0 (#19817)
Bumps [github.com/coder/terraform-provider-coder/v2](https://github.com/coder/terraform-provider-coder) from 2.10.0 to 2.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/coder/terraform-provider-coder/releases">github.com/coder/terraform-provider-coder/v2's releases</a>.</em></p> <blockquote> <h2>v2.11.0</h2> <h2>What's Changed</h2> <ul> <li>ci: fix go version to that defined in go.mod by <a href="https://github.com/johnstcn"><code>@johnstcn</code></a> in <a href="https://redirect.github.com/coder/terraform-provider-coder/pull/438">coder/terraform-provider-coder#438</a></li> <li>build(deps): Bump actions/setup-go from 5 to 6 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coder/terraform-provider-coder/pull/437">coder/terraform-provider-coder#437</a></li> <li>build(deps): Bump golang.org/x/mod from 0.27.0 to 0.28.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/coder/terraform-provider-coder/pull/440">coder/terraform-provider-coder#440</a></li> <li>feat: add tooltip field to workspace app by <a href="https://github.com/rafrdz"><code>@rafrdz</code></a> in <a href="https://redirect.github.com/coder/terraform-provider-coder/pull/435">coder/terraform-provider-coder#435</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/rafrdz"><code>@rafrdz</code></a> made their first contribution in <a href="https://redirect.github.com/coder/terraform-provider-coder/pull/435">coder/terraform-provider-coder#435</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/coder/terraform-provider-coder/compare/v2.10.1...v2.11.0">https://github.com/coder/terraform-provider-coder/compare/v2.10.1...v2.11.0</a></p> <h2>v2.10.1</h2> <h2>What's Changed</h2> <ul> <li>docs: add Premium license warning for external_agent resource by <a href="https://github.com/blink-so"><code>@blink-so</code></a> in <a href="https://redirect.github.com/coder/terraform-provider-coder/pull/434">coder/terraform-provider-coder#434</a></li> </ul> <p>This patch release adds a warning to the external_agent resource documentation to inform users that external agents require a Premium Coder license.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/coder/terraform-provider-coder/compare/v2.10.0...v2.10.1">https://github.com/coder/terraform-provider-coder/compare/v2.10.0...v2.10.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/coder/terraform-provider-coder/commit/bb2167ecc44506469c77380367ad1c3bc08f475e"><code>bb2167e</code></a> feat: add tooltip field to workspace app (<a href="https://redirect.github.com/coder/terraform-provider-coder/issues/435">#435</a>)</li> <li><a href="https://github.com/coder/terraform-provider-coder/commit/c8bc37a5caa446d80c8d3ea966a702d90771d71e"><code>c8bc37a</code></a> build(deps): Bump golang.org/x/mod from 0.27.0 to 0.28.0 (<a href="https://redirect.github.com/coder/terraform-provider-coder/issues/440">#440</a>)</li> <li><a href="https://github.com/coder/terraform-provider-coder/commit/e26aeb89f14bf748ddc5cc78620c63521a8d14ef"><code>e26aeb8</code></a> build(deps): Bump actions/setup-go from 5 to 6 (<a href="https://redirect.github.com/coder/terraform-provider-coder/issues/437">#437</a>)</li> <li><a href="https://github.com/coder/terraform-provider-coder/commit/ac2b839013500e4b3329a8bb8eab0413a182c3d5"><code>ac2b839</code></a> ci: fix go version to that defined in go.mod (<a href="https://redirect.github.com/coder/terraform-provider-coder/issues/438">#438</a>)</li> <li><a href="https://github.com/coder/terraform-provider-coder/commit/8c9d011c4c695401b0f6e7edccb3d1bc66859d38"><code>8c9d011</code></a> docs: add Premium license warning for external_agent resource (<a href="https://redirect.github.com/coder/terraform-provider-coder/issues/434">#434</a>)</li> <li><a href="https://github.com/coder/terraform-provider-coder/commit/42c19bc17d1298e7749fd9a429eb5ed013f53bf3"><code>42c19bc</code></a> build(deps): Bump golang.org/x/mod from 0.25.0 to 0.27.0 (<a href="https://redirect.github.com/coder/terraform-provider-coder/issues/425">#425</a>)</li> <li><a href="https://github.com/coder/terraform-provider-coder/commit/06cddcefa93d4644a79136c3ad2d1065d55a0850"><code>06cddce</code></a> build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (<a href="https://redirect.github.com/coder/terraform-provider-coder/issues/429">#429</a>)</li> <li><a href="https://github.com/coder/terraform-provider-coder/commit/b358b645ad48f3a2f51f93ed9aad3e660942caa8"><code>b358b64</code></a> build(deps): Bump actions/checkout from 4 to 5 (<a href="https://redirect.github.com/coder/terraform-provider-coder/issues/426">#426</a>)</li> <li>See full diff in <a href="https://github.com/coder/terraform-provider-coder/compare/v2.10.0...v2.11.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Kacper Sawicki
|
7c8f8f449b |
feat(site): display warning messages when wildcard is not configured (#19660)
Closes https://github.com/coder/coder/issues/19606 This PR adds warnings to alert uses when workspace applications with subdomain access won't work due to missing wildcard access url configuration. ### Workspace Page warning This warning is shown when wildcard hostname is not configured and agent has subdomain applications. User: <img width="1230" height="488" alt="image" src="https://github.com/user-attachments/assets/66ead7b1-690c-4195-a560-2c5e9ecdf521" /> Administrator: <img width="1231" height="492" alt="image" src="https://github.com/user-attachments/assets/96f7d6fc-a993-4bbb-bd97-80a750caf3fa" /> ### Template Editor Warning: This warning is shown in the output panel (after the user clicks build) when wildcard hostname is not configured and template contains coder_app resource and subdomain is set to true. <img width="1446" height="186" alt="image" src="https://github.com/user-attachments/assets/ba8e0c8e-1b7f-4722-8cee-24be21b8fc69" /> |
||
|
Thomas Kosiewski
|
d238480c7a | fix: trim whitespace from API tokens (#19814) | ||
|
Ethan
|
6a9b896f5b |
fix!: use client ip when creating connection logs for workspace proxied app accesses (#19788)
Breaking API Change:
> The presence of the `ip` field on `codersdk.ConnectionLog` cannot be
guaranteed, and so the field has been made optional. It may be omitted
on API responses.
When running a scaletest, I noticed logs of the form:
```
2025-09-12 06:34:10.924 [erro] coderd.workspaceapps: upsert connection log failed trace=0xa17580 span=0xa17620 workspace_id=81b937d7-5777-4df5-b5cb-80241f30326f agent_id=78b2ff6d-b4a6-4a4e-88a7-283e05455a88 app_id=00000000-0000-0000-0000-000000000000 user_id=00000000-0000-0000-0000-000000000000 user_agent="" app_slug_or_port=terminal status_code=404 request_id=67f03cf8-9523-444a-97bc-90de080a54c8 ...
error= 1 error occurred:
* pq: null value in column "ip" of relation "connection_logs" violates not-null constraint
```
to ensure logs are never omitted from the connection log due to a
missing IP again (i.e. I'm not sure if we can always rely on a valid,
parseable, IP from `(http.Request).RemoteAddr`), I've removed the `NOT
NULL` constraint on `ip` on `connection_logs`, and made `ip` on the API
response optional.
The specific cause for these null IPs was the
`/workspaceproxies/me/issue-signed-app-token [post]` endpoint
constructing it's own `http.Request` without a `RemoteAddr` set, and
then passing that to the token issuer.
To solve this, we'll have workspace proxies send the real IP of the
client when calling `/workspaceproxies/me/issue-signed-app-token [post]`
via the header `Coder-Workspace-Proxy-Real-IP`.
|
||
|
Thomas Kosiewski
|
088d14933c | feat: ensure OAuth2 refresh tokens outlive access tokens (#19769) | ||
|
Asher
|
be7aa58075 | feat: add coder_workspace_ls MCP tool (#19652) | ||
|
Asher
|
30330abaea | feat: add coder_workspace_edit_file MCP tool (#19629) | ||
|
david-fraley
|
1e2b66fb20 | docs: update Get Started Page to Include Tasks (#19752) | ||
|
|
f9f0ebb472 |
feat(docs): add wildcard access url documentation page (#19713)
Closes #19607 This pull request adds a new guide about wildcard access URLs. --------- Co-authored-by: Dean Sheather <dean@deansheather.com> Co-authored-by: Atif Ali <atif@coder.com> Co-authored-by: david-fraley <67079030+david-fraley@users.noreply.github.com> |
||
|
Brett Kolodny
|
854f3c0187 |
feat: add workspaces/acl [delete] endpoint (#19772)
Closes [coder/internal#971](https://github.com/coder/internal/issues/971) |
||
|
ケイラ
|
8e79dbb16f | fix: prevent unruly stacking contexts from breaking scrolling (#19785) | ||
|
Michael Suchacz
|
336e62bc37 | fix: deflake BackedWriter tests (#19802) | ||
|
Asher
|
6d39077087 | chore: log error when checking if codersdk.Err (#19784) | ||
|
Brett Kolodny
|
8d5c566a98 |
feat: add sharing remove command to the CLI (#19767)
Closes [coder/internal#861](https://github.com/coder/internal/issues/861) |
||
|
Asher
|
d5a02d570f | feat: add coder_workspace_write_file MCP tool (#19591) | ||
|
Susana Ferreira
|
eec6c8c120 |
feat: support custom notifications (#19751)
## Description Adds support for sending an ad‑hoc custom notification to the authenticated user via API and CLI. This is useful for surfacing the result of scripts or long‑running tasks. Notifications are delivered through the configured method and the dashboard Inbox, respecting existing preferences and delivery settings. ## Changes * New notification template: “Custom Notification” with a label for a custom title and a custom message. * New API endpoint: `POST /api/v2/notifications/custom` to send a custom notification to the requesting user. * New API endpoint: `GET /notifications/templates/custom` to get custom notification template. * New CLI subcommand: `coder notifications custom <title> <message>` to send a custom notification to the requesting user. * Documentation updates: Add a “Custom notifications” section under Administration > Monitoring > Notifications, including instructions on sending custom notifications and examples of when to use them. Closes: https://github.com/coder/coder/issues/19611 |
||
|
Michael Suchacz
|
4c98decfb7 |
chore: add backed reader, writer and pipe implementation (#19147)
Relates to: https://github.com/coder/coder/issues/18101 This PR introduces a new `backedpipe` package that provides reliable bidirectional byte streams over unreliable network connections. The implementation includes: - `BackedPipe`: Orchestrates a reader and writer to provide transparent reconnection and data replay - `BackedReader`: Handles reading with automatic reconnection, blocking reads when disconnected - `BackedWriter`: Maintains a ring buffer of recent writes for replay during reconnection - `RingBuffer`: Efficient circular buffer implementation for storing data The package enables resilient connections by tracking sequence numbers and replaying missed data after reconnection. It handles connection failures gracefully, automatically reconnecting and resuming data transfer from the appropriate point. |
||
|
Rafael Rodriguez
|
e53bc247e9 |
feat: add tooltip field to workspace app that renders as markdown (#19651)
In this pull request we're adding an optional `tooltip` field. The `tooltip` field is a string field (with markdown support) that will be used to display tooltips on hover over app buttons in a workspace dashboard. Tooltip screenshot <img width="816" height="275" alt="Screenshot 2025-08-29 at 4 11 56 PM" src="https://github.com/user-attachments/assets/52c736a1-f632-465b-89a0-35ca99bd367b" /> Tooltip video https://github.com/user-attachments/assets/21806337-accc-4acf-b8c6-450c031d98f1 Issue: https://github.com/coder/coder/issues/18431 Related provider PR: https://github.com/coder/terraform-provider-coder/pull/435 ### Changes - Added migration to add `tooltip` column to `workspace_apps` table - Updated queries to get/set the new `tooltip` column - Updated frontend to render tooltip as markdown (primary tool tip takes precedence over template tooltip) ### Testing - Added storybook test for `Applink` markdown rendering |
||
|
Danielle Maywood
|
4cd0ada0bb |
chore(coderd/database): add tasks data model (#19749)
Part of https://github.com/coder/internal/issues/948 Adds the initial part of the tasks data model as per the RFC. |
||
|
Asher
|
4bf63b4068 |
feat: add coder_workspace_read_file MCP tool (#19562)
Follows similarly to the bash tool (and some code to connect to an agent was extracted from it). There are two main parts: a new agent endpoint, and then a new MCP tool that consumes that endpoint. |
||
|
|
f402ec99eb |
docs: fix typo in Coder Desktop Guide (#19742)
If you have used AI to produce some or all of this PR, please ensure you have read our [AI Contribution guidelines](https://coder.com/docs/about/contributing/AI_CONTRIBUTING) before submitting. Fix a quick typo that was introduced in https://github.com/coder/coder/commit/8f72538ab7cbcdf23680f4916121ceca0f325e97 --------- Co-authored-by: Prebuilds Owner <prebuilds@system> Co-authored-by: Atif Ali <atif@coder.com> Co-authored-by: Ethan <39577870+ethanndickson@users.noreply.github.com> |
||
|
Kacper Sawicki
|
3074547322 |
perf(enterprise): remove expensive GetWorkspaces query from entitlements (#19747)
Closes: https://github.com/coder/internal/issues/964 This PR addresses the significant database load issue where the `GetWorkspaces` query was causing performance problems in the license entitlements code. |
||
|
Steven Masley
|
d527f91f47 |
chore: update rego policy to respect user and organisation scopes (#19741)
Prior to this change, user and org scopes were always rejected |
||
|
Danielle Maywood
|
f3b152bb06 |
feat(coderd): allow specifying a name for a task (#19745)
Relates to https://github.com/coder/internal/issues/955 Add the ability to the tasks endpoint to give a task a custom name. |
||
|
Kacper Sawicki
|
b4e4173347 |
test: improve workspace build job completion logging (#19740)
Closes https://github.com/coder/internal/issues/935 This PR enhances the AwaitWorkspaceBuildJobCompleted func in coderdtest pkg to provide better visibility into test failures and debugging information. |
||
|
Rafael Rodriguez
|
1677a30a1d |
fix: add support for spaces in search & enable searching by display name in templates (#19552)
## Summary In this pull request we're updating search to support queries with spaces in addition to the `field:value` pattern that is currently supported. Additionally templates search now defaults to `display_name` (since `display_name` is optional the search will fallback to `name`) when searching without the `field:value` pattern Closes: https://github.com/coder/coder/issues/14384 ### Downsides with searching on `name` and `display_name` Because the `name` field cannot include spaces, we end up in a situation where including a space in the query will result in no results since the query searches on both `name` AND `display_name`. In the following example, we can see the results of searching by both `name` and `display_name` on these templates: | Name | Display Name | | ------ | ------------- | | docker | Docker Template | | faketemplate | A Fake Template | | azure | Fake Azure Template | | anotherfake | Another Fake Template | | azurefake | Another Fake Fake Azure Template | https://github.com/user-attachments/assets/b0e0793e-e77d-46bc-9a42-d7cf4f8bd910 ### Proposal: Search on `display_name` by default and allow for `name` using the `field:value` pattern If we remove `name` from the default template search, we're now able to search with spaces on template `display_names`. Since `display_names` are what users see in the templates list they might expect the search to work this way. Below is an example of `name` being removed from the default template search. https://github.com/user-attachments/assets/9aba5911-4960-4384-befb-08ea1acaa3ab With this approach users would still be able to search on template names by specifying `exact_name:foo`. ### Testing Added additional test cases to ensure spaces were handled as expected in combination with `field:value` patterns. |
||
|
Andrew Aquino
|
ff18499cb0 |
refactor: replace Popover with Tooltip in HelpTooltip (#19635)
for #19397 Currently there are 24 files that import bindings from the deprecated `Popover` component. One of those is `HelpTooltip`, which is instantiated in 24 other files. After this PR, the remaining files that import the deprecated `Popover` should be able to be migrated in just 1-2 more PRs. 🤞🏽 I opted for `Tooltip` as a replacement because it's triggered on hover, unlike our new `Popover` which is triggered on click. |
||
|
blink-so[bot]
|
d7d69d1ce9 |
fix: add xmlns attribute to amazon-q.svg for proper rendering (#19738)
Co-authored-by: blink-so[bot] <211532188+blink-so[bot]@users.noreply.github.com> |
||
|
Kacper Sawicki
|
776231d025 |
fix(coderd): add blocking GetProvisionerJobByIDWithLock for workspace build cancellation (#19737)
Closes https://github.com/coder/internal/issues/885 Adds a new database method GetProvisionerJobByIDWithLock that uses FOR UPDATE without SKIP LOCKED to fix workspace build cancellation returning 500 errors when jobs are locked. |
||
|
Brett Kolodny
|
065c7c3d5d |
feat: add sharing show command to the CLI (#19707)
Closes https://github.com/coder/internal/issues/860 |