Commit 261a29a
authored
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?v=4&size=40){kind=avatar}
fix(deps): update all non-major dependencies (#346)
This PR contains the following updates:
| Package | Type | Update | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [actions/setup-java](https://redirect.github.com/actions/setup-java) |
action | minor | `v5.6.0` → `v5.7.0` |
|
|
| [convex](https://convex.dev)
([source](https://redirect.github.com/get-convex/convex-backend/tree/HEAD/npm-packages/convex))
| devDependencies | minor | [`1.42.3` →
`1.43.0`](https://renovatebot.com/diffs/npm/convex/1.42.3/1.43.0) |
|
|
|
[github.com/testcontainers/testcontainers-go](https://redirect.github.com/testcontainers/testcontainers-go)
| require | minor | `v0.43.0` → `v0.44.0` |
|
|
|
[github.com/testcontainers/testcontainers-go/modules/mysql](https://redirect.github.com/testcontainers/testcontainers-go)
| require | minor | `v0.43.0` → `v0.44.0` |
|
|
|
[github.com/testcontainers/testcontainers-go/modules/postgres](https://redirect.github.com/testcontainers/testcontainers-go)
| require | minor | `v0.43.0` → `v0.44.0` |
|
|
| [gradle/actions](https://redirect.github.com/gradle/actions) | action
| minor | `v6.2.0` → `v6.3.0` |
|
|
| [mongoose](https://mongoosejs.com)
([source](https://redirect.github.com/Automattic/mongoose)) |
devDependencies | minor | [`9.8.1` →
`9.9.1`](https://renovatebot.com/diffs/npm/mongoose/9.8.1/9.9.1) |
|
|
|
[pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish)
| action | patch | `v1.14.1` → `v1.14.2` |
|
|
|
[start-server-and-test](https://redirect.github.com/bahmutov/start-server-and-test)
| devDependencies | patch | [`3.0.11` →
`3.0.12`](https://renovatebot.com/diffs/npm/start-server-and-test/3.0.11/3.0.12)
|
|
|
| [org.hibernate.orm:hibernate-core](https://hibernate.org/orm)
([source](https://redirect.github.com/hibernate/hibernate-orm)) |
dependencies | patch | `6.6.54.Final` → `6.6.55.Final` |
|
|
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/15) for more information.
---
### Release Notes
<details>
<summary>actions/setup-java (actions/setup-java)</summary>
###
[`v5.7.0`](https://redirect.github.com/actions/setup-java/compare/v5.6.0...v5.7.0)
[Compare
Source](https://redirect.github.com/actions/setup-java/compare/v5.6.0...v5.7.0)
</details>
<details>
<summary>get-convex/convex-backend (convex)</summary>
###
[`v1.43.0`](https://redirect.github.com/get-convex/convex-backend/blob/HEAD/npm-packages/convex/CHANGELOG.md#1430)
- Added new `npx convex deployment usage` and
`npx convex deployment usage-limits` CLI commands to
view a deployment’s current resource usage, and
view or edit deployment usage limits.
- When defining hourly cron jobs, you can now omit the
`minuteUTC` parameter. When omitted, Convex will automatically
choose a stable start time within the scheduled hour,
avoiding concentrating jobs at the top of the hour.
- Mutations can now reference their upcoming
[commit
timestamp](https://docs.convex.dev/database/advanced/commit-timestamp)
with `ctx.db.vars.commitTs`. While the mutation is running,
`ctx.db.vars.commitTs` is a placeholder symbol that is
replaced with a Int64 value at commit time that is guaranteed
to strictly follow commit order, unlike the `_creationTime` system
field.
This low-level primitive is helpful for advanced use cases such as
implementing
efficient FIFO queues.
- Added a new `v.commitTs()` validator that accepts either the
upcoming commit timestamp placeholder, or a Int64 commit timestamp.
- The Convex CLI is now able to find the right TypeScript compiler
when using side-by-side TypeScript 6 and 7 installation.
(This setup is used in codebases that want to use the native TypeScript
7
compiler but still need access to the TypeScript compiler JavaScript
API.)
- Deprecated the `typescriptCompiler` parameter in `convex.json`.
This parameter was only necessary when using the TypeScript Native
Preview
([@​typescript/native-preview](https://redirect.github.com/typescript/native-preview)).
With TypeScript 7, Convex
automatically picks the right binary.
- When a component only uses environment variables that are all
optional,
it’s now possible to omit the `env` argument from `app.use(component, {
… })`.
- Fixed a bug where `app.use()` failed to require
a second argument when a component has required environment variables
(e.g. `app.use(component, { env: { REQUIRED_VAR: "value" } })`).
- Fixed a bug in `usePaginatedQuery_experimental`
where page splits were handled incorrectly.
</details>
<details>
<summary>testcontainers/testcontainers-go
(github.com/testcontainers/testcontainers-go)</summary>
###
[`v0.44.0`](https://redirect.github.com/testcontainers/testcontainers-go/releases/tag/v0.44.0)
[Compare
Source](https://redirect.github.com/testcontainers/testcontainers-go/compare/v0.43.0...v0.44.0)
##### What's Changed
##### 🔒 Security
- security: fix Dependabot alerts for grpc and OTel
([#​3835](https://redirect.github.com/testcontainers/testcontainers-go/issues/3835))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
##### 🚀 Features
- feat: allow overriding the session ID
([#​3051](https://redirect.github.com/testcontainers/testcontainers-go/issues/3051))
[@​jcmfernandes](https://redirect.github.com/jcmfernandes)
- feat: add Azure SQL Edge module
([#​3787](https://redirect.github.com/testcontainers/testcontainers-go/issues/3787))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add S3Mock module
([#​3781](https://redirect.github.com/testcontainers/testcontainers-go/issues/3781))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Fake-GCS-Server module
([#​3770](https://redirect.github.com/testcontainers/testcontainers-go/issues/3770))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Typesense module
([#​3786](https://redirect.github.com/testcontainers/testcontainers-go/issues/3786))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Firebird module
([#​3771](https://redirect.github.com/testcontainers/testcontainers-go/issues/3771))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add CouchDB module
([#​3768](https://redirect.github.com/testcontainers/testcontainers-go/issues/3768))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Mosquitto module
([#​3774](https://redirect.github.com/testcontainers/testcontainers-go/issues/3774))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Papercut-SMTP module
([#​3777](https://redirect.github.com/testcontainers/testcontainers-go/issues/3777))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Timeplus module
([#​3784](https://redirect.github.com/testcontainers/testcontainers-go/issues/3784))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Solr module
([#​3783](https://redirect.github.com/testcontainers/testcontainers-go/issues/3783))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add SFTP module
([#​3782](https://redirect.github.com/testcontainers/testcontainers-go/issues/3782))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add RavenDB module
([#​3780](https://redirect.github.com/testcontainers/testcontainers-go/issues/3780))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add QuestDB module
([#​3779](https://redirect.github.com/testcontainers/testcontainers-go/issues/3779))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Presto module
([#​3778](https://redirect.github.com/testcontainers/testcontainers-go/issues/3778))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add OrientDB module
([#​3776](https://redirect.github.com/testcontainers/testcontainers-go/issues/3776))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Nginx module
([#​3775](https://redirect.github.com/testcontainers/testcontainers-go/issues/3775))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Mailpit module
([#​3773](https://redirect.github.com/testcontainers/testcontainers-go/issues/3773))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add Trino module
([#​3785](https://redirect.github.com/testcontainers/testcontainers-go/issues/3785))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add KurrentDB module
([#​3772](https://redirect.github.com/testcontainers/testcontainers-go/issues/3772))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add CrateDB module
([#​3769](https://redirect.github.com/testcontainers/testcontainers-go/issues/3769))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add ActiveMQ Classic module
([#​3767](https://redirect.github.com/testcontainers/testcontainers-go/issues/3767))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- feat: add ability to chain WithConfigModifier,
WithEndpointSettingsModifier and WithHostConfigModifier
([#​3733](https://redirect.github.com/testcontainers/testcontainers-go/issues/3733))
[@​LaurentGoderre](https://redirect.github.com/LaurentGoderre)
##### 🐛 Bug Fixes
- fix: escape the container name in the Docker name filter
([#​3837](https://redirect.github.com/testcontainers/testcontainers-go/issues/3837))
[@​jcmfernandes](https://redirect.github.com/jcmfernandes)
- fix: should print max information by default
([#​3459](https://redirect.github.com/testcontainers/testcontainers-go/issues/3459))
[@​strowk](https://redirect.github.com/strowk)
- fix: read exec exit code only after draining the output stream
([#​3766](https://redirect.github.com/testcontainers/testcontainers-go/issues/3766))
[@​dean-island](https://redirect.github.com/dean-island)
- fix: properly wait for Ryuk startup when reusing reaper
([#​3761](https://redirect.github.com/testcontainers/testcontainers-go/issues/3761))
[@​karsov](https://redirect.github.com/karsov)
- fix(openfga): remove playground wait from Run and up image to v1.18.0
([#​3745](https://redirect.github.com/testcontainers/testcontainers-go/issues/3745))
[@​selvakannanjr](https://redirect.github.com/selvakannanjr)
##### 📖 Documentation
- docs: fix incomplete CleanupContainer documentation
([#​3826](https://redirect.github.com/testcontainers/testcontainers-go/issues/3826))
[@​Hashim1999164](https://redirect.github.com/Hashim1999164)
- docs: fix typo in SkipIfProviderIsNotHealthy docstring
([#​3764](https://redirect.github.com/testcontainers/testcontainers-go/issues/3764))
[@​salandered](https://redirect.github.com/salandered)
- chore: update modules usage metrics (2026-07)
([#​3759](https://redirect.github.com/testcontainers/testcontainers-go/issues/3759))
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
- chore: update usage metrics (2026-07)
([#​3757](https://redirect.github.com/testcontainers/testcontainers-go/issues/3757))
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
- chore(metrics): usage metrics for modules
([#​3737](https://redirect.github.com/testcontainers/testcontainers-go/issues/3737))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- docs(site): add missing languages and reorder docs navigation
([#​3735](https://redirect.github.com/testcontainers/testcontainers-go/issues/3735))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
##### 🧹 Housekeeping
- chore: update usage metrics (2026-08)
([#​3830](https://redirect.github.com/testcontainers/testcontainers-go/issues/3830))
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
- chore: update modules usage metrics (2026-08)
([#​3831](https://redirect.github.com/testcontainers/testcontainers-go/issues/3831))
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
- fix: correct indentation in dependabot.yml
([#​3808](https://redirect.github.com/testcontainers/testcontainers-go/issues/3808))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- chore(compose): use require instead of assert for service name checks
([#​3765](https://redirect.github.com/testcontainers/testcontainers-go/issues/3765))
[@​sunghyun1999](https://redirect.github.com/sunghyun1999)
- chore: update usage metrics (2026-07)
([#​3757](https://redirect.github.com/testcontainers/testcontainers-go/issues/3757))
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
- chore(wait): replace manual StrategyTarget mocks with generated
mockery mocks
([#​3603](https://redirect.github.com/testcontainers/testcontainers-go/issues/3603))
[@​mateenali66](https://redirect.github.com/mateenali66)
- chore: use testify's require instead of assert
([#​3740](https://redirect.github.com/testcontainers/testcontainers-go/issues/3740))
[@​TheRodzz](https://redirect.github.com/TheRodzz)
- fix(metrics): harden collect.go and modules workflow
([#​3738](https://redirect.github.com/testcontainers/testcontainers-go/issues/3738))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
##### 📦 Dependency updates
- chore(deps): bump slackapi/slack-github-action from 3.0.3 to 4.0.0
([#​3788](https://redirect.github.com/testcontainers/testcontainers-go/issues/3788))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
([#​3789](https://redirect.github.com/testcontainers/testcontainers-go/issues/3789))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump docker/setup-docker-action from 5.1.0 to 5.4.0
([#​3790](https://redirect.github.com/testcontainers/testcontainers-go/issues/3790))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(azurite): tidy module dependencies
([#​3838](https://redirect.github.com/testcontainers/testcontainers-go/issues/3838))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- security: fix Dependabot alerts for grpc and OTel
([#​3835](https://redirect.github.com/testcontainers/testcontainers-go/issues/3835))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
from 1.6.0 to 1.8.0 in /modules/azure
([#​3805](https://redirect.github.com/testcontainers/testcontainers-go/issues/3805))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets from
1.4.0 to 1.5.0 in /modules/azure
([#​3806](https://redirect.github.com/testcontainers/testcontainers-go/issues/3806))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in
/modules/weaviate
([#​3820](https://redirect.github.com/testcontainers/testcontainers-go/issues/3820))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in
/modules/qdrant
([#​3821](https://redirect.github.com/testcontainers/testcontainers-go/issues/3821))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 in
/modules/grafana-lgtm
([#​3822](https://redirect.github.com/testcontainers/testcontainers-go/issues/3822))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.82.1 in
/modules/gcloud
([#​3823](https://redirect.github.com/testcontainers/testcontainers-go/issues/3823))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 in
/modules/compose
([#​3824](https://redirect.github.com/testcontainers/testcontainers-go/issues/3824))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore: propagate azcore dependency update to azurite module
([#​3818](https://redirect.github.com/testcontainers/testcontainers-go/issues/3818))
[@​mdelapenya](https://redirect.github.com/mdelapenya)
- chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from
1.21.1 to 1.22.0 in /modules/azure
([#​3809](https://redirect.github.com/testcontainers/testcontainers-go/issues/3809))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0
([#​3791](https://redirect.github.com/testcontainers/testcontainers-go/issues/3791))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.5 to 4.26.6
([#​3750](https://redirect.github.com/testcontainers/testcontainers-go/issues/3750))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/data/azcosmos
from 1.4.1 to 1.5.0 in /modules/azure
([#​3810](https://redirect.github.com/testcontainers/testcontainers-go/issues/3810))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.5
to 1.19.29 in /modules/localstack
([#​3812](https://redirect.github.com/testcontainers/testcontainers-go/issues/3812))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from
1.19.28 to 1.19.29 in /modules/s3mock
([#​3813](https://redirect.github.com/testcontainers/testcontainers-go/issues/3813))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from
1.17.46 to 1.19.29 in /modules/scylladb
([#​3814](https://redirect.github.com/testcontainers/testcontainers-go/issues/3814))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 in
/modules/azure
([#​3811](https://redirect.github.com/testcontainers/testcontainers-go/issues/3811))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 in
/modules/azure
([#​3794](https://redirect.github.com/testcontainers/testcontainers-go/issues/3794))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump github.com/go-stomp/stomp/v3 from 3.0.5 to 3.1.5 in
/modules/artemis
([#​3801](https://redirect.github.com/testcontainers/testcontainers-go/issues/3801))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity
from 1.13.1 to 1.14.0 in /modules/azure
([#​3803](https://redirect.github.com/testcontainers/testcontainers-go/issues/3803))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump software.sslmate.com/src/go-pkcs12 from 0.6.0 to
0.7.3 in /modules/cassandra
([#​3804](https://redirect.github.com/testcontainers/testcontainers-go/issues/3804))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/mod from 0.37.0 to 0.38.0 in
/modules/elasticsearch
([#​3796](https://redirect.github.com/testcontainers/testcontainers-go/issues/3796))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/mod from 0.37.0 to 0.38.0 in
/modules/kafka
([#​3797](https://redirect.github.com/testcontainers/testcontainers-go/issues/3797))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump github.com/arangodb/go-driver/v2 from 2.1.3 to 2.3.1
in /modules/arangodb
([#​3800](https://redirect.github.com/testcontainers/testcontainers-go/issues/3800))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.54.0 in
/modules/dex
([#​3795](https://redirect.github.com/testcontainers/testcontainers-go/issues/3795))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump github.com/aerospike/aerospike-client-go/v8 from
8.6.0 to 8.7.0 in /modules/aerospike
([#​3799](https://redirect.github.com/testcontainers/testcontainers-go/issues/3799))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in
/modules/dex
([#​3763](https://redirect.github.com/testcontainers/testcontainers-go/issues/3763))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 in
/modules/dex
([#​3758](https://redirect.github.com/testcontainers/testcontainers-go/issues/3758))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/mod from 0.36.0 to 0.37.0 in /modulegen
([#​3751](https://redirect.github.com/testcontainers/testcontainers-go/issues/3751))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/mod from 0.33.0 to 0.37.0 in
/modules/redpanda
([#​3756](https://redirect.github.com/testcontainers/testcontainers-go/issues/3756))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golangci/golangci-lint-action from 7.0.0 to 9.3.0
([#​3748](https://redirect.github.com/testcontainers/testcontainers-go/issues/3748))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump tj-actions/changed-files from 47.0.1 to 47.0.6
([#​3746](https://redirect.github.com/testcontainers/testcontainers-go/issues/3746))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump SonarSource/sonarqube-scan-action from 5.1.0 to
8.2.0
([#​3747](https://redirect.github.com/testcontainers/testcontainers-go/issues/3747))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump mkdocs-include-markdown-plugin from 7.2.2 to 7.3.0
([#​3749](https://redirect.github.com/testcontainers/testcontainers-go/issues/3749))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/text from 0.34.0 to 0.38.0 in
/modulegen
([#​3752](https://redirect.github.com/testcontainers/testcontainers-go/issues/3752))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/mod from 0.33.0 to 0.37.0 in
/modules/elasticsearch
([#​3753](https://redirect.github.com/testcontainers/testcontainers-go/issues/3753))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/mod from 0.33.0 to 0.37.0 in
/modules/kafka
([#​3754](https://redirect.github.com/testcontainers/testcontainers-go/issues/3754))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump golang.org/x/mod from 0.33.0 to 0.37.0 in
/modules/localstack
([#​3755](https://redirect.github.com/testcontainers/testcontainers-go/issues/3755))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump actions/github-script from 7.0.1 to 9.0.0
([#​3675](https://redirect.github.com/testcontainers/testcontainers-go/issues/3675))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump pymdown-extensions from 10.16.1 to 10.21.3
([#​3707](https://redirect.github.com/testcontainers/testcontainers-go/issues/3707))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump go.mongodb.org/mongo-driver/v2 from 2.3.0 to 2.4.2
in /modules/mongodb
([#​3730](https://redirect.github.com/testcontainers/testcontainers-go/issues/3730))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): bump go.mongodb.org/mongo-driver from 1.14.0 to 1.17.7 in
/modules/weaviate
([#​3731](https://redirect.github.com/testcontainers/testcontainers-go/issues/3731))
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
- chore(deps): update moby to latest version
([#​3736](https://redirect.github.com/testcontainers/testcontainers-go/issues/3736))
[@​Steven-Harris](https://redirect.github.com/Steven-Harris)
</details>
<details>
<summary>gradle/actions (gradle/actions)</summary>
###
[`v6.3.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.3.0)
[Compare
Source](https://redirect.github.com/gradle/actions/compare/v6.2.0...v6.3.0)
#### Highlights
##### Enhanced Caching: Windows fixes and a cache-protocol bump
This release updates `gradle-actions-caching` to **v1.0.0** (up from
v0.7.0), which fixes two significant caching defects, both most visible
on Windows:
- **Cache entries failed to store at all on Windows.**. Every entry
failed
with `Path Validation Error: Path(s) specified in the action for caching
do(es) not
exist`, even though the Gradle User Home was fully intact. Nothing was
stored, so
every downstream job ran against an empty Gradle User Home. The cause
was a nested,
unpatched copy of `@actions/glob` combined with a silently swallowed
`require()` in
the bundle, which left Windows path separators unnormalized.
- **Cache cleanup deleted instrumented jars that were in use.** A bug in
key
hashing for paths shorter than 64 characters made cleanup judge freshly
created
`caches/jars-9` entries as unused and remove them, so the
`instrumented-jars` entry
was never saved and every job re-instrumented its classpaths.
Also included: cache entry names are now consistent between the save and
restore
reports — restore previously fell back to showing the raw glob pattern
(e.g.
`/home/runner/.gradle/caches/modules-*/files-*/*/*/*/*/`) instead of
`dependencies`.
> \[!IMPORTANT]
> **Existing cache entries are invalidated by this release.** The cache
protocol
> version was bumped to `v2`, so the first run after upgrading will be a
cache miss
> and will repopulate the cache. No configuration changes are required.
##### Basic caching warns instead of failing silently
The basic (open-source) caching provider now emits a warning and reports
`(Entry not saved: save failed)` in the Job Summary when a cache save
fails, rather
than reporting success
([#​1028](https://redirect.github.com/gradle/actions/issues/1028)).
##### Dependency submission works with Isolated Projects
`dependency-submission` now disables Isolated Projects via a promoted
property, so
dependency graph generation works on builds that enable it
([#​1025](https://redirect.github.com/gradle/actions/issues/1025)).
Thanks to [@​reinsch82](https://redirect.github.com/reinsch82) for
the contribution.
##### Updated defaults
- Injected Develocity Gradle plugin: **4.4.2 → 4.5.0**
- 36 new known-good wrapper checksums added for `wrapper-validation`
#### What's Changed
- Render configuration-cache status in the caching Job Summary by
[@​bigdaz](https://redirect.github.com/bigdaz) in
[#​989](https://redirect.github.com/gradle/actions/pull/989)
- Update gradle-actions-caching library to v0.8.0 by
[@​bot-githubaction](https://redirect.github.com/bot-githubaction)
in [#​993](https://redirect.github.com/gradle/actions/pull/993)
- Support experimental project-entry caching (configuration-cache +
build-logic) by [@​bigdaz](https://redirect.github.com/bigdaz) in
[#​994](https://redirect.github.com/gradle/actions/pull/994)
- Update gradle-actions-caching library to v0.9.0 by
[@​bot-githubaction](https://redirect.github.com/bot-githubaction)
in [#​996](https://redirect.github.com/gradle/actions/pull/996)
- Disable Isolated Projects via promoted property in
dependency-submission by
[@​reinsch82](https://redirect.github.com/reinsch82) in
[#​1025](https://redirect.github.com/gradle/actions/pull/1025)
- Add Windows coverage for caching via a new smoke-test suite by
[@​bigdaz](https://redirect.github.com/bigdaz) in
[#​1027](https://redirect.github.com/gradle/actions/pull/1027)
- Fix basic caching smoke test on Windows, and warn on save failure by
[@​bigdaz](https://redirect.github.com/bigdaz) in
[#​1028](https://redirect.github.com/gradle/actions/pull/1028)
- Move non-smoke restore-gradle-home tests back to the integ-test suite
by [@​bigdaz](https://redirect.github.com/bigdaz) in
[#​1032](https://redirect.github.com/gradle/actions/pull/1032)
- Bump npm-dependencies group with TypeScript 6.0.3,
[@​types/node](https://redirect.github.com/types/node) 24.x, and
security fixes by [@​bigdaz](https://redirect.github.com/bigdaz)
in [#​1033](https://redirect.github.com/gradle/actions/pull/1033)
- Bump Gradle Wrapper to 9.6.1, wrapper checksums, and Develocity plugin
to 4.5.0 by [@​bigdaz](https://redirect.github.com/bigdaz) in
[#​1034](https://redirect.github.com/gradle/actions/pull/1034)
- Update gradle-actions-caching library to v1.0.0 by
[@​bot-githubaction](https://redirect.github.com/bot-githubaction)
in [#​1029](https://redirect.github.com/gradle/actions/pull/1029)
- Bump the npm-dependencies group across 1 directory with 2 updates by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1037](https://redirect.github.com/gradle/actions/pull/1037)
- Bump the github-actions group across 2 directories with 9 updates by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1024](https://redirect.github.com/gradle/actions/pull/1024)
#### New Contributors
- [@​reinsch82](https://redirect.github.com/reinsch82) made their
first contribution in
[#​1025](https://redirect.github.com/gradle/actions/pull/1025)
**Full Changelog**:
<gradle/actions@v6.2.0...v6.3.0>
</details>
<details>
<summary>Automattic/mongoose (mongoose)</summary>
###
[`v9.9.1`](https://redirect.github.com/Automattic/mongoose/blob/HEAD/CHANGELOG.md#991--2026-07-31)
[Compare
Source](https://redirect.github.com/Automattic/mongoose/compare/9.9.0...9.9.1)
\==================
- fix(query): avoid path collision when excluding subdocuments with
nested `select: false` paths
[#​12798](https://redirect.github.com/Automattic/mongoose/issues/12798)
[BIGSUS24](https://redirect.github.com/BIGSUS24)
- types(model): apply schema-level lean to find()
[#​16413](https://redirect.github.com/Automattic/mongoose/issues/16413)
- types(model): support overriding schema-level `lean` with `lean:
false`
[#​16413](https://redirect.github.com/Automattic/mongoose/issues/16413)
###
[`v9.9.0`](https://redirect.github.com/Automattic/mongoose/blob/HEAD/CHANGELOG.md#990--2026-07-30)
[Compare
Source](https://redirect.github.com/Automattic/mongoose/compare/9.8.1...9.9.0)
\==================
- perf(document): improve toObject perf with faster string checks and
avoiding unnecessary isSelected on paths with no getters
[#​16407](https://redirect.github.com/Automattic/mongoose/issues/16407)
[#​16373](https://redirect.github.com/Automattic/mongoose/issues/16373)
[#​16385](https://redirect.github.com/Automattic/mongoose/issues/16385)
- perf(model): improve insertMany() performance and general change
tracking performance
[#​16370](https://redirect.github.com/Automattic/mongoose/issues/16370)
- perf(timestamps): avoid adding $setOnInsert for createdAt unless
upsert set
[#​16411](https://redirect.github.com/Automattic/mongoose/issues/16411)
- perf: improve toObject() performance
[#​16408](https://redirect.github.com/Automattic/mongoose/issues/16408)
[#​16405](https://redirect.github.com/Automattic/mongoose/issues/16405)
[#​16378](https://redirect.github.com/Automattic/mongoose/issues/16378)
[#​14394](https://redirect.github.com/Automattic/mongoose/issues/14394)
[BIGSUS24](https://redirect.github.com/BIGSUS24)
- types: add discriminator key to each member of embedded discriminator
enum-
[#​16412](https://redirect.github.com/Automattic/mongoose/issues/16412)
[#​16045](https://redirect.github.com/Automattic/mongoose/issues/16045)
</details>
<details>
<summary>pypa/gh-action-pypi-publish
(pypa/gh-action-pypi-publish)</summary>
###
[`v1.14.2`](https://redirect.github.com/pypa/gh-action-pypi-publish/releases/tag/v1.14.2)
[Compare
Source](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/v1.14.1...v1.14.2)
<p align="right"><i>This one probably won't touch you visibly so just
bookmark <a
href="https://ep2026.europython.eu/session/defending-open-source-from-ai-slop-a-maintainer-s-practical-guide">@​webknjaz's
EuroPython 2026 “AI” slop rant for when it's published on YouTube</a> or
<a href="https://redirect.github.com/sponsors/webknjaz">encourage him to
come back with more to share next year</a>!</i></p>
#### 🛠️ Urgh… Another release!? Again? Explain yourself!
Looking at the diff, you'll only witness updates across the dependency
tree. That's it! It's not a security fix or anything like that even, no.
But you'll want this update.
> \[!tip]
> So what *most* people will find useful is
[@​takluyver](https://redirect.github.com/takluyver)[💰](https://redirect.github.com/sponsors/takluyver)'s
update of Twine to v7 that we use internally
([#​416](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/416)).
This version will let them upload their sdists and wheels containing
core packaging metadata v2.5 to (Test)PyPI.
#### 🧐 Tell me why..
<details>
<summary>
The rest of the updates bump things related to
<code>pypi-attestations</code> and <code>sigstore</code>, which has the
most interesting backstory here. @​facutuesca<a
href="https://redirect.github.com/sponsors/facutuesca">💰</a> sent a
patch in #​417 but a bunch more helped out.
</summary>
TL;DR non-pure-python projects with C-extensions tend to have dozens
(sometimes hundreds) wheels to upload to PyPI per release. They are
often quite big and take time to transfer over the network. People
started noticing problems and coming up with DIY sharding workarounds
like
[aio-libs/aiohttp#13226](https://redirect.github.com/aio-libs/aiohttp/pull/13226)
around July 23.
On this date, projects with a good amount of bytes to publish would
start getting timeouts 5 minutes after the PyPI publishing job begun.
The same job that worked just fine before.
I had to start pinging upstream library and ecosystem people, on GitHub
and privately, to start making sense of what was happening. Eventually,
we collectively concluded that GitHub must've shortened the lifetime of
their OIDC identity — it seems to have used to be 10 minutes long (at
some point in the past) and is now 5 minutes, apparently. It's not
documented clearly, and we have not been able to get any clarity by
attempting to contact GitHub through private channels, using personal
connections.
Over the course of investigation,
[@​facutuesca](https://redirect.github.com/facutuesca)[💰](https://redirect.github.com/sponsors/facutuesca)
found and fixed a related underlying cache invalidation bug in
[sigstore/sigstore-python#1838](https://redirect.github.com/sigstore/sigstore-python/pull/1838),
which he then coordinated propagation through the dependency chain
updates in sigstore-python, pypi-attestations, gh-action-pypi-publish
and gh-action-sigstore-python.
Mike's also discovered that Sigstore's Rekor slowdown seems to have
become the main contributing cause of the last week's incident. He's
collected some data to support this claim:
<https://publishing-five-minute-timeout.tiiny.site>.
<center>
<a href="https://xkcd.com/2549/">
<img src="https://imgs.xkcd.com/comics/edge_cake_2x.png" alt="Edge Cake
XKCD feels just like this release">
</a>
</center>
</details>
#### 🫶 New Contributors
- [@​davidbrochart](https://redirect.github.com/davidbrochart)
made their first contribution in
[#​415](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/415)
- [@​takluyver](https://redirect.github.com/takluyver) made their
first contribution in
[#​416](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/416)
**🪞 Full Diff**:
<pypa/gh-action-pypi-publish@v1.14.1...v1.14.2>
**🧔♂️ Release Manager:**
[@​webknjaz](https://redirect.github.com/sponsors/webknjaz)
[🇺🇦](https://stand-with-ukraine.pp.ua)
**🙏 Special Thanks** to
[@​davidbrochart](https://redirect.github.com/davidbrochart)[💰](https://redirect.github.com/sponsors/davidbrochart)
and
[@​Dreamsorcerer](https://redirect.github.com/Dreamsorcerer)[💰](https://redirect.github.com/sponsors/Dreamsorcerer)
for turning my attention (in
[#​415](https://redirect.github.com/pypa/gh-action-pypi-publish/issues/415)
and in private) to the newly surfaced corner case in GitHub's behavior
that only affected a narrow category of projects while many others
remained blissfully unaware.
[@​bdraco](https://redirect.github.com/bdraco)[💰](https://redirect.github.com/sponsors/bdraco)
came up with a DIY sharding workaround for aiohttp that served as a demo
for other projects.
[@​miketheman](https://redirect.github.com/miketheman)[💰](https://redirect.github.com/sponsors/miketheman)
confirmed the Warehouse-side details. Also,
[@​jku](https://redirect.github.com/jku)[💰](https://redirect.github.com/sponsors/jku)
and
[@​woodruffw](https://redirect.github.com/woodruffw)[💰](https://redirect.github.com/sponsors/woodruffw)
helped work through, review and release the Sigstore ecosystem upstream
libs.
**💬 Discuss** [on Bluesky
🦋](https://bsky.app/profile/did:plc:ve6s3mxkefjaxty3m4fdqumn/post/3mrsqy2xba22j),
[on Mastodon
🐘](https://mastodon.social/@​webknjaz/117005132816750073) and [on
GitHub][release discussion].
[![GH Sponsors badge]][GH Sponsors URL]
[GH Sponsors badge]:
https://img.shields.io/badge/%40webknjaz-transparent?logo=githubsponsors&logoColor=%23EA4AAA&label=Sponsor&color=2a313c
[GH Sponsors URL]: https://redirect.github.com/sponsors/webknjaz
[release discussion]:
https://redirect.github.com/pypa/gh-action-pypi-publish/discussions/419
</details>
<details>
<summary>bahmutov/start-server-and-test
(start-server-and-test)</summary>
###
[`v3.0.12`](https://redirect.github.com/bahmutov/start-server-and-test/releases/tag/v3.0.12)
[Compare
Source](https://redirect.github.com/bahmutov/start-server-and-test/compare/v3.0.11...v3.0.12)
##### Bug Fixes
- **deps:** update dependency wait-on to v9.1.0
([#​518](https://redirect.github.com/bahmutov/start-server-and-test/issues/518))
([61074e6](https://redirect.github.com/bahmutov/start-server-and-test/commit/61074e6662228e579190cf40087c802f252dccfe))
</details>
<details>
<summary>hibernate/hibernate-orm
(org.hibernate.orm:hibernate-core)</summary>
###
[`v6.6.55.Final`](https://redirect.github.com/hibernate/hibernate-orm/compare/6.6.54...6.6.55)
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
- "after 9am and before 5pm Monday"
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/cerbos/query-plan-adapters).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent 4776943 commit 261a29a
11 files changed
Lines changed: 150 additions & 72 deletions
File tree
- .github/workflows
- convex
- ent
- langchain-chromadb
- mongoose
- pgx
- spring-data
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
31 | | - | |
| 31 | + | |
32 | 32 | | |
33 | 33 | | |
34 | 34 | | |
35 | 35 | | |
36 | 36 | | |
37 | | - | |
| 37 | + | |
38 | 38 | | |
39 | 39 | | |
40 | 40 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
31 | | - | |
| 31 | + | |
32 | 32 | | |
33 | 33 | | |
34 | 34 | | |
35 | 35 | | |
36 | 36 | | |
37 | | - | |
| 37 | + | |
38 | 38 | | |
39 | 39 | | |
40 | 40 | | |
| |||
71 | 71 | | |
72 | 72 | | |
73 | 73 | | |
74 | | - | |
| 74 | + | |
75 | 75 | | |
76 | 76 | | |
77 | 77 | | |
78 | 78 | | |
79 | 79 | | |
80 | | - | |
| 80 | + | |
81 | 81 | | |
82 | 82 | | |
83 | 83 | | |
| |||
105 | 105 | | |
106 | 106 | | |
107 | 107 | | |
108 | | - | |
| 108 | + | |
109 | 109 | | |
110 | 110 | | |
111 | 111 | | |
112 | 112 | | |
113 | 113 | | |
114 | | - | |
| 114 | + | |
115 | 115 | | |
116 | 116 | | |
117 | 117 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
45 | 45 | | |
46 | 46 | | |
47 | 47 | | |
48 | | - | |
| 48 | + | |
49 | 49 | | |
50 | 50 | | |
51 | 51 | | |
| |||
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
12 | | - | |
13 | | - | |
14 | | - | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
15 | 15 | | |
16 | 16 | | |
17 | 17 | | |
| |||
43 | 43 | | |
44 | 44 | | |
45 | 45 | | |
46 | | - | |
| 46 | + | |
47 | 47 | | |
48 | | - | |
| 48 | + | |
49 | 49 | | |
50 | 50 | | |
51 | 51 | | |
52 | | - | |
| 52 | + | |
53 | 53 | | |
54 | 54 | | |
55 | 55 | | |
| |||
72 | 72 | | |
73 | 73 | | |
74 | 74 | | |
75 | | - | |
| 75 | + | |
76 | 76 | | |
77 | 77 | | |
78 | 78 | | |
| |||
81 | 81 | | |
82 | 82 | | |
83 | 83 | | |
84 | | - | |
| 84 | + | |
85 | 85 | | |
86 | 86 | | |
87 | 87 | | |
| |||
95 | 95 | | |
96 | 96 | | |
97 | 97 | | |
98 | | - | |
| 98 | + | |
99 | 99 | | |
100 | 100 | | |
101 | | - | |
102 | | - | |
| 101 | + | |
| 102 | + | |
103 | 103 | | |
104 | 104 | | |
105 | 105 | | |
106 | 106 | | |
107 | | - | |
108 | | - | |
109 | | - | |
110 | | - | |
| 107 | + | |
| 108 | + | |
| 109 | + | |
| 110 | + | |
111 | 111 | | |
112 | 112 | | |
113 | | - | |
| 113 | + | |
114 | 114 | | |
115 | | - | |
116 | | - | |
| 115 | + | |
| 116 | + | |
117 | 117 | | |
118 | | - | |
| 118 | + | |
119 | 119 | | |
120 | 120 | | |
121 | 121 | | |
| |||
0 commit comments