Skip to content

chore(deps): update dependencies (patch & digest) - #771

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/all-patch-and-digest-updates
Aug 24, 2026
Merged

chore(deps): update dependencies (patch & digest)#771
renovate[bot] merged 1 commit into
mainfrom
renovate/all-patch-and-digest-updates

Conversation

@renovate

@renovate renovate Bot commented Aug 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@tanstack/react-router (source) 1.170.27 → 1.170.31 age confidence dependencies patch 1.170.32
actions/checkout (changelog) 9c091bb → 3d3c42e action digest
concurrently 10.0.4 → 10.0.5 age confidence devDependencies patch
docker/setup-buildx-action (changelog) bb05f3f → 37fe631 action digest
gcr.io/distroless/static f7f8f72 → 1c2c046 final digest
gcr.io/distroless/static f7f8f72 → 1c2c046 stage digest
google/osv-scanner-action v2.5.0 → v2.5.1 age confidence action patch
opendefensecloud/dev-kit v1.0.13 → v1.0.15 age confidence patch
opendefensecloud/dev-kit v1.0.14 → v1.0.15 age confidence action patch
opendefensecloud/dev-kit v1.0.13 → v1.0.15 age confidence action patch
osv-scanner v2.5.0 → v2.5.1 age confidence patch
vite (source) 8.2.1 → 8.2.2 age confidence devDependencies patch
vitest (source) 4.1.10 → 4.1.11 age confidence devDependencies patch

Release Notes

TanStack/router (@​tanstack/react-router)

v1.170.31

Compare Source

Patch Changes

v1.170.30

Compare Source

Patch Changes

v1.170.29

Compare Source

Patch Changes

v1.170.28

Compare Source

Patch Changes

  • #​8055 0c25a7b - Avoid wrapping root components that may render the HTML document in a Suspense boundary during SSR and hydration.

  • #​8054 31882c7 - Reuse resolved lazy route components when revisiting code-split routes, preventing unnecessary pending UI.

  • Updated dependencies [31882c7]:

open-cli-tools/concurrently (concurrently)

v10.0.5

Compare Source

What's Changed

New Contributors

Full Changelog: open-cli-tools/concurrently@v10.0.4...v10.0.5

google/osv-scanner-action (google/osv-scanner-action)

v2.5.1

Compare Source

This updates OSV-Scanner to v2.3.8.

What's Changed
Fixes:
  • Preserve package namespaces when querying osv.dev API (fixes #​2978).
  • Re-add support for the OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY environment variable (fixes #​2983).
  • Fix local vulnerability matching (--offline-vulnerabilities) not working when network capability is NetworkOnline.

Full Changelog: google/osv-scanner-action@v2.5.0...v2.5.1

opendefensecloud/dev-kit (opendefensecloud/dev-kit)

v1.0.15

Compare Source

Changes

v1.0.14

Compare Source

Changes
google/osv-scanner (osv-scanner)

v2.5.1

Compare Source

Fixes:
  • Preserve package namespaces when querying osv.dev API (fixes #​2978).
  • Re-add support for the OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY environment variable (fixes #​2983).
  • Fix local vulnerability matching (--offline-vulnerabilities) not working when network capability is NetworkOnline.
vitejs/vite (vite)

v8.2.2

Compare Source

Features
Bug Fixes
Documentation
Miscellaneous Chores
Code Refactoring
Tests
Build System
  • use JSON import attributes instead of readFIleSync in rolldown configs (#​23251) (d615bcd)
vitest-dev/vitest (vitest)

v4.1.11

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 5am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added automerge Renovate PR eligible for auto-merge ok-to-helm PR is allowed to build an publish helm chart ok-to-image PR is allowed to run container build labels Aug 24, 2026
@renovate
renovate Bot enabled auto-merge August 24, 2026 03:49
github-actions[bot]
github-actions Bot approved these changes Aug 24, 2026
View reviewed changes

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved: Renovate automerge update. Merge remains gated on required status checks.

@coveralls

coveralls commented Aug 24, 2026 •
edited
Loading

Copy link
Copy Markdown

Coverage Report for CI Build 32696783504

Coverage decreased (-0.1%) to 80.259%

Details

  • Coverage decreased (-0.1%) from the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • 10 coverage regressions across 3 files.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

10 previously-covered lines in 3 files lost coverage.

File Lines Losing Coverage Coverage
pkg/controller/target_controller.go 6 77.9%
pkg/controller/registrybinding_controller.go 2 73.13%
pkg/controller/rendertask_controller.go 2 88.19%

Coverage Stats

Coverage Status
Relevant Lines: 6864
Covered Lines: 5509
Line Coverage: 80.26%
Coverage Strength: 44.05 hits per line
💛 - Coveralls

@renovate
renovate Bot force-pushed the renovate/all-patch-and-digest-updates branch from 97903ab to cd82152 Compare August 24, 2026 06:18
@renovate
renovate Bot merged commit 9afef5e into main Aug 24, 2026
26 checks passed
@renovate
renovate Bot deleted the renovate/all-patch-and-digest-updates branch August 24, 2026 06:35
@odc-release-please odc-release-please Bot mentioned this pull request Aug 24, 2026
Merged
rebEllieous added a commit that referenced this pull request Aug 24, 2026
@rebEllieous
chore(main): release 0.3.0 (#722)
41a7c38 
🤖 I have created a release *beep* *boop*
---


##
[0.3.0](v0.3.0-rc2...v0.3.0)
(2026-08-24)


* gate release-please app token on both app id and private key
([2c5d19e](2c5d19e))


### Features

- add cron workflow for solar catalog chaining
([6c61cff](6c61cff))
- add solar catalog chaining
([#744](#744))
([7001a5e](7001a5e))
- added status visualisation for the deployment workflow in the FE
([#664](#664))
([88dc1ee](88dc1ee))
- **api:** add ObjectReference type for cross-namespace resource
references
([30cecba](30cecba))
- **ci:** replace release-drafter with release-please
([#632](#632))
([#676](#676))
([64a05d9](64a05d9))
- **controller:** own Component lifecycle in a per-Component reconciler
([#745](#745))
([9ac867e](9ac867e))
- crud for k8s ressources in web ui
([#708](#708))
([83ba01b](83ba01b))
- deploy solar-ui as part of the solar chart
([#743](#743))
([3d1ac1e](3d1ac1e))
- **dev:** add make demo / demo-app / demo-clean for a one-command demo
([1524092](1524092))
- **dev:** make demo / demo-app / demo-clean for a one-command demo
([#734](#734))
([386ae19](386ae19))
- **discovery:** added resource watcher
([6d588b2](6d588b2))
- impl fe list views
([#645](#645))
([78c7fd7](78c7fd7))
- production-ready catalog transfer workflow, e2e tests
([#762](#762))
([4454e47](4454e47))
- pull secrets provision added for deployments to solar via ocm-kit
([#739](#739))
([8e3f8cb](8e3f8cb))
- **ui:** add resource detail pages with shared primitives
([#718](#718))
([e53d22a](e53d22a))
- **ui:** pkce implemented, local setup for remote zitadel in both auth
modes
([#764](#764))
([b531958](b531958))

### Bug Fixes

- apply suggestions from code review
([38d109b](38d109b))
- **ci:** address review findings on release-please migration
([a6dec29](a6dec29))
- **controller:** drop post-delete re-check that could strand a
terminating Component
([0366a34](0366a34))
- **controller:** guard the finalizer add with an optimistic lock
([4dbf867](4dbf867))
- **controller:** read the Component uncached before stripping the
finalizer
([f56ccc9](f56ccc9))
- **deps:** bump go-git to v5.19.2, fix OSV-Scanner findings
([7482013](7482013))
- **deps:** bump go-git to v5.19.2, fix OSV-Scanner on main
([#760](#760))
([b2783df](b2783df))
- **deps:** correct the openpgp importer list in the OSV ignore
([0759c3b](0759c3b))
- **deps:** keep crypto11 replace at v1.6.2 and tidy go.sum
([786d860](786d860))
- **deps:** migrate cenkalti/backoff imports from v5 to v7
([7b9ecdc](7b9ecdc))
- **deps:** point crypto11 replace at renamed eclipse-keypont module
([149f778](149f778))
- **deps:** resolve new CVEs flagged by osv-scanner
([#675](#675))
([c7334a5](c7334a5))
- **deps:** update dependencies (minor)
([26698c0](26698c0))
- **deps:** update dependencies (patch & digest)
([#663](#663))
([f4339d7](f4339d7))
- **deps:** update dependencies (patch & digest)
([#698](#698))
([29fc135](29fc135))
- **deps:** update go version in remaining places
([748b48f](748b48f))
- **deps:** update go-overlay to provide go 1.26.5
([e10b8af](e10b8af))
- **deps:** update go-overlay to provide go 1.26.6
([2c33ecc](2c33ecc))
- **deps:** update golang builder image to 1.26.6
([66a0e2a](66a0e2a))
- **deps:** update kubernetes dependencies
([#682](#682))
([aefbd19](aefbd19))
- **deps:** update kubernetes dependencies
([#728](#728))
([c16821b](c16821b))
- **deps:** update kubernetes dependencies to v0.36.4
([#772](#772))
([19448a6](19448a6))
- **deps:** update module github.com/cenkalti/backoff/v5 to v7
([#671](#671))
([6518ca3](6518ca3))
- **deps:** update module github.com/cenkalti/backoff/v5 to v7
([#674](#674))
([09777c6](09777c6))
- **deps:** update module github.com/cenkalti/backoff/v5 to v7
([#716](#716))
([6d464e2](6d464e2))
- **deps:** update module helm.sh/helm/v4 to v4.2.4
([#750](#750))
([2f5476a](2f5476a))
- **deps:** update module oras.land/oras-go/v2 to v2.6.2 [security]
([#696](#696))
([6b52133](6b52133))
- **dev:** deploy solar-discovery in scan mode so dev-cluster populates
the catalog
([eae09f2](eae09f2))
- **dev:** fail setup-discovery when the port-forward never becomes
ready
([626e436](626e436))
- **dev:** make dev-cluster reliably populate the catalog
([#731](#731))
([0af9386](0af9386))
- **dev:** use the ca-trusting ocmconfig and trap-clean the port-forward
in setup-discovery
([9ff18b6](9ff18b6))
- **discovery:** use errors.Is for http.ErrServerClosed check
([#693](#693))
([be17b8f](be17b8f))
- **discovery:** use strings.Cut to strip digest algorithm prefix
([#694](#694))
([1bf1856](1bf1856))
- document reference
([629555a](629555a))
- dont create renderbinding if renderartifact is terminating
([7168331](7168331))
- e2e test regression introduced with discovery api watch
([#727](#727))
([fa95810](fa95810))
- handle insecure deploy registry for bootstrap chart
([#660](#660))
([fb8de30](fb8de30))
- ignore terminating renderartifacts
([0cfc2fe](0cfc2fe)),
closes
[#619](#619)
- improve handling of terminating renderartifacts
([#730](#730))
([0570216](0570216))
- only run e2e test with the ok-to-e2e label
([391a2c2](391a2c2))
- registry resources
([#700](#700))
([756528e](756528e))
- remove orphaned devenv.nix file
([#705](#705))
([7dc25ca](7dc25ca))
- restructured renderartifact and -binding to solve a known problem
([#724](#724))
([c68104f](c68104f))
- retain deleting renderartifacts when they are still referenced by a
binding
([3603545](3603545))
- rstructured renderartifact and -binding to solve the bug
([c41158a](c41158a))
- tightened security around reference grants for RenderArtifacts, minor
fixes
([bc8c5d7](bc8c5d7))
- **ui:** derive ui-e2e backend URLs from UI_DEV_PORT and tighten auth
tests
([0982234](0982234))
- use local dir for dex certs
([#638](#638))
([8f875c8](8f875c8))

### Miscellaneous Chores

- add missing entries to the path filter of GitHub actions
([#670](#670))
([101e4c0](101e4c0))
- **deps:** update actions/cache action to v6
([#692](#692))
([23dd707](23dd707))
- **deps:** update actions/setup-go action to v7
([#721](#721))
([51c1fd5](51c1fd5))
- **deps:** update actions/setup-python action to v7
([#719](#719))
([76bc61e](76bc61e))
- **deps:** update dependencies (patch & digest)
([#683](#683))
([17728f1](17728f1))
- **deps:** update dependencies (patch & digest)
([#749](#749))
([62e20bf](62e20bf))
- **deps:** update dependencies (patch & digest)
([#771](#771))
([9afef5e](9afef5e))
- **deps:** update dependency @testing-library/jest-dom to v7
([#725](#725))
([b411a26](b411a26))
- **deps:** update dependency go to v1.26.5
([2bf738b](2bf738b))
- **deps:** update dependency go to v1.26.6
([63397b8](63397b8))
- **deps:** update dependency jsdom to v30
([#735](#735))
([2be1ea1](2be1ea1))
- **deps:** update dependency pillow to v12.3.0 [security]
([#699](#699))
([d658e68](d658e68))
- **deps:** update dependency typescript to v7
([#691](#691))
([349cd5f](349cd5f))
- **deps:** update golang version sync to v1.26.5
([#697](#697))
([422b1d4](422b1d4))
- **deps:** update golang:1.26.4 docker digest to 32c0e6e
([#662](#662))
([2833f64](2833f64))
- **deps:** update golang:1.26.4 docker digest to f96cc55
([e1ced04](e1ced04))
- **deps:** update golang:1.26.5 docker digest to 2005724
([#740](#740))
([a087073](a087073))
- **deps:** update golang:1.26.5 docker digest to 3aff665
([#712](#712))
([afe9193](afe9193))
- **dev:** drop the unused OCM vars from dev-cluster.sh
([#737](#737))
([875449e](875449e))
- fix issues surfaced by PR review
([4120973](4120973))
- fix target release view
([e347937](e347937))
- fixes and improvements after pr review
([43e0f6a](43e0f6a))
- improve CI docker caching
([#633](#633))
([213f23c](213f23c))
- improved accessability
([2dacb25](2dacb25))
- make codegen
([355611d](355611d))
- minor updates after PR review
([f2c8463](f2c8463))
- renamed make targets
([a6a901d](a6a901d))
- split up unit and integration tests, added tests
([#684](#684))
([1aca0e4](1aca0e4))
- trust-scope docker layer cache, tidy Dockerfile mounts
([17dac28](17dac28))
- **ui:** tidy up after the Zitadel integration
([2ac8011](2ac8011))
- update dev-kit and configure improved branch-protection
([#738](#738))
([132ab55](132ab55))
- update flake and remove kind version workaround
([#732](#732))
([ec91fc2](ec91fc2))


---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

automerge Renovate PR eligible for auto-merge ok-to-helm PR is allowed to build an publish helm chart ok-to-image PR is allowed to run container build

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@coveralls @trevex