chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #218 · stackitcloud/stackit-cert-manager-webhook

renovate · 2026-08-05T11:11:28Z

This PR contains the following updates:

Package	Type	Update	Change
docker/setup-buildx-action	action	minor	`v4.2.0` → `v4.3.0`
github.com/stackitcloud/stackit-sdk-go/services/dns	require	minor	`v0.21.0` → `v0.22.1`
github.com/stretchr/testify	require	minor	`v1.11.1` → `v1.12.1`
github/codeql-action	action	patch	`v4.37.6` → `v4.37.7`
semgrep/semgrep	container	minor	`1.172.0` → `1.173.0`
step-security/harden-runner	action	minor	`v2.20.0` → `v2.21.0`

Release Notes

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.92.0 to 0.95.0 in #595
Bump brace-expansion from 1.1.13 to 1.1.18 in #600
Bump js-yaml from 5.2.0 to 5.3.0 in #585
Bump postcss from 8.5.10 to 8.5.25 in #598
Bump undici from 6.27.0 to 6.28.0 in #601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

stretchr/testify (github.com/stretchr/testify)

`v1.12.1`

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

`v1.12.0`

Compare Source

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in #1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
assert: truncate very long objects in test failure messages by @brackendawson in #1646
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in #1783
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in #1708
Promote ccoVeille to maintainer by @brackendawson in #1784
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1790
assert.YAMLEq: Document mutlidoc behavior by @brackendawson in #1791
_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in #1782
doc: remove ineffective inline code blocks by @brackendawson in #1714
Tag generated assertions as non-generated in new .gitattributes by @ubunatic in #1815
chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in #1827
require: fix godoc generation for assertions returning a bool by @Baxromumarov in #1850
docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in #1821
docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in #1842
EMERITUS.md: add @tylerb by @dolmen in #1812
CI: test also with Go 1.24 by @alexandear in #1856
deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in #1823
CI: upgrade GitHub Actions and pin hashes by @SuperQ in #1883
CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in #1889
CI: add check of GitHub Action pinned hashes against tag by @dolmen in #1885
_codegen: modernize by @dolmen in #1890
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1906
mock: Mock.Return does not exist anymore by @Kentzo in #1905

New Contributors

@mutaiib made their first contribution in #1775
@vyas-git made their first contribution in #1665
@olivergondza made their first contribution in #1400
@egawata made their first contribution in #1792
@ubunatic made their first contribution in #1815
@Baxromumarov made their first contribution in #1850
@a2not made their first contribution in #1821
@nghiack7 made their first contribution in #1888
@blackwell-systems made their first contribution in #1877
@Kentzo made their first contribution in #1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

What's Changed

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
CI: test also with Go 1.23 by @dolmen in #1783
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in #1708
Promote ccoVeille to maintainer by @brackendawson in #1784
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1790
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
assert.YAMLEq: Document mutlidoc behavior by @brackendawson in #1791
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in #1782
assert: truncate very long objects in test failure messages by @brackendawson in #1646
doc: remove ineffective inline code blocks by @brackendawson in #1714
Tag generated assertions as non-generated in new .gitattributes by @ubunatic in #1815
chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in #1827
require: fix godoc generation for assertions returning a bool by @Baxromumarov in #1850
docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in #1821
docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in #1842
EMERITUS.md: add @tylerb by @dolmen in #1812
CI: test also with Go 1.24 by @alexandear in #1856
deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in #1823
CI: upgrade GitHub Actions and pin hashes by @SuperQ in #1883
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877
CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in #1889
CI: add check of GitHub Action pinned hashes against tag by @dolmen in #1885
_codegen: modernize by @dolmen in #1890
assert: make *AssertionFunc types just aliases by @dolmen in #1563
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1906
mock: Mock.Return does not exist anymore by @Kentzo in #1905

New Contributors

@mutaiib made their first contribution in #1775
@vyas-git made their first contribution in #1665
@olivergondza made their first contribution in #1400
@egawata made their first contribution in #1792
@ubunatic made their first contribution in #1815
@Baxromumarov made their first contribution in #1850
@a2not made their first contribution in #1821
@nghiack7 made their first contribution in #1888
@blackwell-systems made their first contribution in #1877
@Kentzo made their first contribution in #1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

github/codeql-action (github/codeql-action)

`v4.37.7`

Compare Source

Update default CodeQL bundle version to 2.26.3. #4085

step-security/harden-runner (step-security/harden-runner)

`v2.21.0`

Compare Source

What's Changed

Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
Improved Support for AWS CodeBuild GitHub Actions Runners.
Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

`v2.20.1`

Compare Source

What's Changed

AWS CodeBuild-hosted runner support
Implicitly allow single-labeled (internal) domains in block-mode

Full Changelog: step-security/harden-runner@v2.20.0...v2.20.1

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot requested a review from a team August 5, 2026 11:11

renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 92ec1d3 to 7172b36 Compare August 14, 2026 11:47

renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 28d1d64 to 0e3d15c Compare August 19, 2026 10:56

chore(deps): update all non-major dependencies

73b1f06

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/all-minor-patch branch from 0e3d15c to 73b1f06 Compare August 19, 2026 20:02

Navigation Menu

Uh oh!

chore(deps): update all non-major dependencies - #218

chore(deps): update all non-major dependencies#218
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.3.0

v1.12.1

What's Changed

New Contributors

What's Changed

New Contributors

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

What's Changed

New Contributors

v4.37.7

v2.21.0

What's Changed

v2.20.1

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 5, 2026 •

edited

Loading

`v4.3.0`

`v1.12.1`

`v1.12.0`

`v4.37.7`

`v2.21.0`

`v2.20.1`