Commit e99b881
authored
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?v=4&size=40){kind=avatar}
chore(deps): update all non-major dependencies (#1263)
This PR contains the following updates:
| Package | Type | Update | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [biome](https://redirect.github.com/biomejs/biome) | | patch |
`2.4.14` → `2.4.15` |
|
|
| [caddy](https://redirect.github.com/caddyserver/caddy) | | patch |
`2.11.2` → `2.11.3` |
|
|
|
[github.com/dlclark/regexp2/v2](https://redirect.github.com/dlclark/regexp2)
| require | patch | `v2.0.2` → `v2.0.3` |
|
|
| [just](https://redirect.github.com/casey/just) | | minor | `1.50.0` →
`1.51.0` |
|
|
| [uv](https://redirect.github.com/astral-sh/uv) | | patch | `0.11.12` →
`0.11.14` |
|
|
---
### Release Notes
<details>
<summary>biomejs/biome (biome)</summary>
###
[`v2.4.15`](https://redirect.github.com/biomejs/biome/compare/46393e0240944064eb2a33c1810fc4204ced0cf7...9dd3271eef16090416b6e77615a01e3bfbcf7993)
</details>
<details>
<summary>caddyserver/caddy (caddy)</summary>
###
[`v2.11.3`](https://redirect.github.com/caddyserver/caddy/releases/tag/v2.11.3)
This release improves several aspects of Caddy with minor features, bug
fixes, and security patches. Thank you to everyone and their bots who
contributed to help make this release the best one yet!
**Security patches:**
- fastcgi: Carrying over a patch from FrankenPHP for a bug that could
allow non-PHP files to be executed; collaborated on by
[@​dunglas](https://redirect.github.com/dunglas),
[@​KC1zs4](https://redirect.github.com/KC1zs4), and
[@​chenjj](https://redirect.github.com/chenjj).
- vars: A more thorough fix for
<GHSA-m2w3-8f23-hxxf>, collaborated by
[@​everping](https://redirect.github.com/everping) and
[@​vnxme](https://redirect.github.com/vnxme).
- admin: Array index normalization to prevent remote admin socket auth
bypass, by [@​Amemoyoi](https://redirect.github.com/Amemoyoi) and
bot.
- admin: More rigorous path prefix matching to prevent remote admin
socket auth bypass, by
[@​Amemoyoi](https://redirect.github.com/Amemoyoi) and bot.
We've also merged a couple PRs that fix upstream security bugs in other
projects like quic-go and CertMagic. Thank you to
[@​marten-seemann](https://redirect.github.com/marten-seemann) for
maintaining quic-go so diligently!
#### What's Changed
- caddyhttp: Sync placeholder expansion in `vars` and `vars_regexp` by
[@​vnxme](https://redirect.github.com/vnxme) in
[#​7573](https://redirect.github.com/caddyserver/caddy/pull/7573)
- caddytls: Avoid ACME fallback for implicit Tailscale \*.ts.net
policies by [@​steadytao](https://redirect.github.com/steadytao)
in
[#​7577](https://redirect.github.com/caddyserver/caddy/pull/7577)
- chore: Resolve recent CI failures by
[@​mholt](https://redirect.github.com/mholt) in
[#​7593](https://redirect.github.com/caddyserver/caddy/pull/7593)
- caddytls: Consolidate empty APs more smartly by
[@​mholt](https://redirect.github.com/mholt) in
[#​7567](https://redirect.github.com/caddyserver/caddy/pull/7567)
- rewrite: skip query rename when source key is absent by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7599](https://redirect.github.com/caddyserver/caddy/pull/7599)
- root: introduce down-propagating Helper.BlockState for other
directives/plugins to use by
[@​henderkes](https://redirect.github.com/henderkes) in
[#​7594](https://redirect.github.com/caddyserver/caddy/pull/7594)
- http: make zstd checksum configurable by
[@​ottenhoff](https://redirect.github.com/ottenhoff) in
[#​7586](https://redirect.github.com/caddyserver/caddy/pull/7586)
- notify: Always send "READY=1" even after an error by
[@​francislavoie](https://redirect.github.com/francislavoie) in
[#​7597](https://redirect.github.com/caddyserver/caddy/pull/7597)
- reverseproxy: Fix check for `header_up Host {upstream_hostport}`
redundancy by [@​yubiuser](https://redirect.github.com/yubiuser)
in
[#​7564](https://redirect.github.com/caddyserver/caddy/pull/7564)
- caddytls: Expand placeholders in dns\_challenge override\_domain tls
parameter by [@​pberkel](https://redirect.github.com/pberkel) in
[#​7609](https://redirect.github.com/caddyserver/caddy/pull/7609)
- tls: add system and combined CA pool modules by
[@​HarshPatel5940](https://redirect.github.com/HarshPatel5940) in
[#​7406](https://redirect.github.com/caddyserver/caddy/pull/7406)
- vars: Don't expand placeholders in values by
[@​vnxme](https://redirect.github.com/vnxme) in
[#​7629](https://redirect.github.com/caddyserver/caddy/pull/7629)
- build(deps): bump
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from
1.42.0 to 1.43.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​7637](https://redirect.github.com/caddyserver/caddy/pull/7637)
- build(deps): bump the all-updates group across 1 directory with 11
updates by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​7641](https://redirect.github.com/caddyserver/caddy/pull/7641)
- reverseproxy: make stream copy buffer size configurable by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7627](https://redirect.github.com/caddyserver/caddy/pull/7627)
- vars: Add matcher placeholder handling tests by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7640](https://redirect.github.com/caddyserver/caddy/pull/7640)
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​7621](https://redirect.github.com/caddyserver/caddy/pull/7621)
- logging: Add journald encoder wrapper by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7623](https://redirect.github.com/caddyserver/caddy/pull/7623)
- caddyfile: Improve import/global options UX for imports before global
options by [@​steadytao](https://redirect.github.com/steadytao) in
[#​7642](https://redirect.github.com/caddyserver/caddy/pull/7642)
- chore: replace `interface{}` with `any` for modernization by
[@​tsinglua](https://redirect.github.com/tsinglua) in
[#​7571](https://redirect.github.com/caddyserver/caddy/pull/7571)
- chore: bump timberjack to v1.4.1 by
[@​DeRuina](https://redirect.github.com/DeRuina) in
[#​7618](https://redirect.github.com/caddyserver/caddy/pull/7618)
- logging: Preserve ts for journald-wrapped JSON logs by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7644](https://redirect.github.com/caddyserver/caddy/pull/7644)
- fileserver: show symlink targets verbatim
([#​7476](https://redirect.github.com/caddyserver/caddy/issues/7476))
by [@​maxtruxa](https://redirect.github.com/maxtruxa) in
[#​7579](https://redirect.github.com/caddyserver/caddy/pull/7579)
- fix(caddyfile): {block} in snippet by
[@​prettysunflower](https://redirect.github.com/prettysunflower)
in
[#​7558](https://redirect.github.com/caddyserver/caddy/pull/7558)
- caddyhttp: Document missing placeholders for escaped URI and prefixed
query by
[@​steffenbusch](https://redirect.github.com/steffenbusch) in
[#​7659](https://redirect.github.com/caddyserver/caddy/pull/7659)
- chore: add `AGENTS.md` by
[@​mohammed90](https://redirect.github.com/mohammed90) in
[#​7652](https://redirect.github.com/caddyserver/caddy/pull/7652)
- build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​7655](https://redirect.github.com/caddyserver/caddy/pull/7655)
- admin: Redact sensitive request headers in API logs by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7578](https://redirect.github.com/caddyserver/caddy/pull/7578)
- reverseproxy: add `lb_retry_match` condition on response status by
[@​seroperson](https://redirect.github.com/seroperson) in
[#​7569](https://redirect.github.com/caddyserver/caddy/pull/7569)
- caddyhttp: prefer port 443 in auto-HTTPS and add tests by
[@​mholt](https://redirect.github.com/mholt) in
[#​7666](https://redirect.github.com/caddyserver/caddy/pull/7666)
- fix: Propagate ECH keys to the QUIC listener by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7670](https://redirect.github.com/caddyserver/caddy/pull/7670)
- chore: Use atomics where appropriate by
[@​francislavoie](https://redirect.github.com/francislavoie) in
[#​7648](https://redirect.github.com/caddyserver/caddy/pull/7648)
- metrics: Implement pushing via OLTP by
[@​dunglas](https://redirect.github.com/dunglas) in
[#​7664](https://redirect.github.com/caddyserver/caddy/pull/7664)
- logging: Add regression coverage for rotated file mode by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7620](https://redirect.github.com/caddyserver/caddy/pull/7620)
- httpcaddyfile: Inherit global ACME issuer settings in tls shortcuts by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7617](https://redirect.github.com/caddyserver/caddy/pull/7617)
- build(deps): bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​7668](https://redirect.github.com/caddyserver/caddy/pull/7668)
- admin: require path segment boundary in remote access control by
[@​Amemoyoi](https://redirect.github.com/Amemoyoi) in
[#​7673](https://redirect.github.com/caddyserver/caddy/pull/7673)
- reverseproxy: Add ability to clear dynamic upstreams cache during
retries by [@​mholt](https://redirect.github.com/mholt) in
[#​7662](https://redirect.github.com/caddyserver/caddy/pull/7662)
- listeners: clean up stale Unix socket files on Windows by
[@​mfrischknecht](https://redirect.github.com/mfrischknecht) in
[#​7676](https://redirect.github.com/caddyserver/caddy/pull/7676)
- admin: reject non-canonical config array indices by
[@​Amemoyoi](https://redirect.github.com/Amemoyoi) in
[#​7592](https://redirect.github.com/caddyserver/caddy/pull/7592)
- caddytls: Expand ACME credentials by
[@​tribut](https://redirect.github.com/tribut) in
[#​7554](https://redirect.github.com/caddyserver/caddy/pull/7554)
- caddyauth: set user placeholders before auth rejection by
[@​cyphercodes](https://redirect.github.com/cyphercodes) in
[#​7685](https://redirect.github.com/caddyserver/caddy/pull/7685)
- caddyauth: revert user placeholders on auth rejection by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7688](https://redirect.github.com/caddyserver/caddy/pull/7688)
- chore: Fix golangci-lint 2.12.1 findings by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7690](https://redirect.github.com/caddyserver/caddy/pull/7690)
- httpcaddyfile: accept duration strings for log sampling interval by
[@​tomholford](https://redirect.github.com/tomholford) in
[#​7694](https://redirect.github.com/caddyserver/caddy/pull/7694)
- tls: Add alpn to managed HTTPS records by
[@​steadytao](https://redirect.github.com/steadytao) in
[#​7653](https://redirect.github.com/caddyserver/caddy/pull/7653)
- caddytls: avoid duplicate automation for wildcard-covered hosts by
[@​Rijul-A](https://redirect.github.com/Rijul-A) in
[#​7697](https://redirect.github.com/caddyserver/caddy/pull/7697)
- docs: add documentation for fileExists and fileStat template functions
by [@​steffenbusch](https://redirect.github.com/steffenbusch) in
[#​7700](https://redirect.github.com/caddyserver/caddy/pull/7700)
- rewrite: escape file matcher paths before rewriting by
[@​cyphercodes](https://redirect.github.com/cyphercodes) in
[#​7683](https://redirect.github.com/caddyserver/caddy/pull/7683)
- metrics: Add nil check for metricsHandler in AdminMetrics.serveHTTP by
[@​Br1an67](https://redirect.github.com/Br1an67) in
[#​7553](https://redirect.github.com/caddyserver/caddy/pull/7553)
#### New Contributors
- [@​steadytao](https://redirect.github.com/steadytao) made their
first contribution in
[#​7577](https://redirect.github.com/caddyserver/caddy/pull/7577)
- [@​henderkes](https://redirect.github.com/henderkes) made their
first contribution in
[#​7594](https://redirect.github.com/caddyserver/caddy/pull/7594)
- [@​yubiuser](https://redirect.github.com/yubiuser) made their
first contribution in
[#​7564](https://redirect.github.com/caddyserver/caddy/pull/7564)
- [@​pberkel](https://redirect.github.com/pberkel) made their
first contribution in
[#​7609](https://redirect.github.com/caddyserver/caddy/pull/7609)
- [@​HarshPatel5940](https://redirect.github.com/HarshPatel5940)
made their first contribution in
[#​7406](https://redirect.github.com/caddyserver/caddy/pull/7406)
- [@​tsinglua](https://redirect.github.com/tsinglua) made their
first contribution in
[#​7571](https://redirect.github.com/caddyserver/caddy/pull/7571)
- [@​maxtruxa](https://redirect.github.com/maxtruxa) made their
first contribution in
[#​7579](https://redirect.github.com/caddyserver/caddy/pull/7579)
- [@​seroperson](https://redirect.github.com/seroperson) made
their first contribution in
[#​7569](https://redirect.github.com/caddyserver/caddy/pull/7569)
- [@​Amemoyoi](https://redirect.github.com/Amemoyoi) made their
first contribution in
[#​7673](https://redirect.github.com/caddyserver/caddy/pull/7673)
- [@​mfrischknecht](https://redirect.github.com/mfrischknecht)
made their first contribution in
[#​7676](https://redirect.github.com/caddyserver/caddy/pull/7676)
- [@​tribut](https://redirect.github.com/tribut) made their first
contribution in
[#​7554](https://redirect.github.com/caddyserver/caddy/pull/7554)
- [@​cyphercodes](https://redirect.github.com/cyphercodes) made
their first contribution in
[#​7685](https://redirect.github.com/caddyserver/caddy/pull/7685)
- [@​tomholford](https://redirect.github.com/tomholford) made
their first contribution in
[#​7694](https://redirect.github.com/caddyserver/caddy/pull/7694)
- [@​Rijul-A](https://redirect.github.com/Rijul-A) made their
first contribution in
[#​7697](https://redirect.github.com/caddyserver/caddy/pull/7697)
- [@​Br1an67](https://redirect.github.com/Br1an67) made their
first contribution in
[#​7553](https://redirect.github.com/caddyserver/caddy/pull/7553)
**Full Changelog**:
<caddyserver/caddy@v2.11.2...v2.11.3>
</details>
<details>
<summary>dlclark/regexp2 (github.com/dlclark/regexp2/v2)</summary>
###
[`v2.0.3`](https://redirect.github.com/dlclark/regexp2/compare/v2.0.2...v2.0.3)
[Compare
Source](https://redirect.github.com/dlclark/regexp2/compare/v2.0.2...v2.0.3)
</details>
<details>
<summary>casey/just (just)</summary>
###
[`v1.51.0`](https://redirect.github.com/casey/just/blob/HEAD/CHANGELOG.md#1510---2026-05-09)
[Compare
Source](https://redirect.github.com/casey/just/compare/1.50.0...1.51.0)
##### Added
- Add `no-cd` setting
([#​2981](https://redirect.github.com/casey/just/pull/2981) by
[hans-d](https://redirect.github.com/hans-d))
##### Changed
- Allow `[env]` attribute to take expressions
([#​3329](https://redirect.github.com/casey/just/pull/3329) by
[casey](https://redirect.github.com/casey))
- Allow using expressions with `[working-directory]`
([#​3326](https://redirect.github.com/casey/just/pull/3326) by
[casey](https://redirect.github.com/casey))
- Read justfile from standard input with `--justfile -`
([#​3325](https://redirect.github.com/casey/just/pull/3325) by
[casey](https://redirect.github.com/casey))
- Make `parent_directory()` of bare filename return `.`
([#​3313](https://redirect.github.com/casey/just/pull/3313) by
[casey](https://redirect.github.com/casey))
- Make `[env]` override module-level exports
([#​3312](https://redirect.github.com/casey/just/pull/3312) by
[casey](https://redirect.github.com/casey))
##### Fixed
- Fail on deep recursion instead of overflowing stack
([#​3319](https://redirect.github.com/casey/just/pull/3319) by
[casey](https://redirect.github.com/casey))
- Invoke chooser selections separately
([#​3311](https://redirect.github.com/casey/just/pull/3311) by
[casey](https://redirect.github.com/casey))
- Don't evaluate unused assertions
([#​3310](https://redirect.github.com/casey/just/pull/3310) by
[casey](https://redirect.github.com/casey))
- Respect lazy setting in submodules
([#​3308](https://redirect.github.com/casey/just/pull/3308) by
[casey](https://redirect.github.com/casey))
- Fix overrides not being visible in user-defined functions
([#​3307](https://redirect.github.com/casey/just/pull/3307) by
[casey](https://redirect.github.com/casey))
- Don't panic on invalid datetime format string
([#​3304](https://redirect.github.com/casey/just/pull/3304) by
[casey](https://redirect.github.com/casey))
##### Misc
- Use `cargo-limit` commands in justfile
([#​3331](https://redirect.github.com/casey/just/pull/3331) by
[casey](https://redirect.github.com/casey))
- Simplify code more
([#​3330](https://redirect.github.com/casey/just/pull/3330) by
[casey](https://redirect.github.com/casey))
- Update install-dev-deps recipe with compatible mdbook
([#​3328](https://redirect.github.com/casey/just/pull/3328) by
[casey](https://redirect.github.com/casey))
- Simplify code
([#​3327](https://redirect.github.com/casey/just/pull/3327) by
[casey](https://redirect.github.com/casey))
- Link to duplicate recipe issue in readme
([#​3321](https://redirect.github.com/casey/just/pull/3321) by
[casey](https://redirect.github.com/casey))
- Remove periods from error messages
([#​3316](https://redirect.github.com/casey/just/pull/3316) by
[casey](https://redirect.github.com/casey))
- Avoid multi-sentence error messagess
([#​3315](https://redirect.github.com/casey/just/pull/3315) by
[casey](https://redirect.github.com/casey))
- Make error messages lowercase
([#​3314](https://redirect.github.com/casey/just/pull/3314) by
[casey](https://redirect.github.com/casey))
- Actually bump version to 1.50.0
([#​3303](https://redirect.github.com/casey/just/pull/3303) by
[casey](https://redirect.github.com/casey))
</details>
<details>
<summary>astral-sh/uv (uv)</summary>
###
[`v0.11.14`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01114)
[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.11.13...0.11.14)
Released on 2026-05-12.
##### Enhancements
- Add Astral mirror URL override
([#​19206](https://redirect.github.com/astral-sh/uv/pull/19206))
- Ignore `top_level.txt` entries in uninstall that are not valid Python
identifiers
([#​19340](https://redirect.github.com/astral-sh/uv/pull/19340))
##### Bug fixes
- Avoid applying `.env` files in parent process
([#​19343](https://redirect.github.com/astral-sh/uv/pull/19343))
- Filter ANSI codes in logging output
([#​19311](https://redirect.github.com/astral-sh/uv/pull/19311))
- Fix `uv tree` showing extra-conditional deps for packages required
without extras
([#​19332](https://redirect.github.com/astral-sh/uv/pull/19332))
- Respect build options (e.g., `--no-build`) during lock validation
([#​19366](https://redirect.github.com/astral-sh/uv/pull/19366))
###
[`v0.11.13`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01113)
[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.11.12...0.11.13)
Released on 2026-05-10.
##### Bug fixes
- Include data files in editable builds
([#​19312](https://redirect.github.com/astral-sh/uv/pull/19312))
- Respect `--require-hashes` when installing from `pylock.toml` files
([#​19334](https://redirect.github.com/astral-sh/uv/pull/19334))
##### Python
- Add CPython 3.14.5
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/alecthomas/chroma).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent e67dd2f commit e99b881
11 files changed
Lines changed: 8 additions & 6 deletions
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
| 8 | + | |
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
0 commit comments