chore(deps): update bump-dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
alpine (source)		minor	3.22 → 3.24
docker-buildx		minor	v0.35.0 → v0.37.0
docker-compose		minor	v5.3.1 → v5.5.1
go	uses-with	minor	1.26.x → 1.27.x
google (source)	required_provider	minor	7.45.0 → 7.46.0
linode (source)	required_provider	minor	4.3.0 → 4.4.0
python (source)		minor	3.11-slim → 3.14-slim
sitectl-archivesspace		patch	v2.1.1 → v2.1.2
sitectl-drupal		minor	v1.5.0 → v1.6.2
sitectl-isle		minor	v1.6.0 → v1.7.3
sitectl-ojs		patch	v1.4.0 → v1.4.1
sitectl-omeka-classic		patch	v1.4.0 → v1.4.1
sitectl-omeka-s		patch	v1.4.0 → v1.4.1
sitectl-wp		patch	v2.1.0 → v2.1.1
uv (source, changelog)		minor	0.11.29 → 0.12.9
zensical (changelog)		patch	0.0.50 → 0.0.59

---

Release Notes

docker/buildx (docker-buildx)

v0.37.0

Compare Source

Welcome to the v0.37.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Alberto Garcia Hierro
• Brad Davidson
• Guilhem Charles
• Guillaume Lours

Notable Changes

• Buildx now supports cloud driver builder instances to run builds with Docker Build Cloud service. No custom version of Buildx binary is needed anymore. #​4017
• Newly started container builders now wait for BuildKit readiness before first use. #​4027
• Policy evaluation now uses Docker CLI registry auth for image metadata. #​4046
• Several consistency issues with handling Windows platform identifiers with OS version have been fixed. #​4035 #​4034 #​4008
• Using the Kubernetes driver now skips terminating pods when choosing a pod. #​3997
• Avoid creating temporary files on the host to send builder configuration to remote containers. #​3996
• Fix issue where Bake builds could sometimes drop sending build secrets when using linked targets. #​4014
• Fix cases where empty source policy sessions were created for some builds, possibly causing confusing progress output. #​4028

Dependency Changes

• github.com/aws/aws-sdk-go-v2 v1.43.0 -> v1.43.8
• github.com/aws/aws-sdk-go-v2/config v1.32.31 -> v1.32.39
• github.com/aws/aws-sdk-go-v2/credentials v1.19.30 -> v1.19.38
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 -> v1.18.39
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 -> v1.4.39
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 -> v2.7.39
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 -> v1.4.40
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 -> v1.13.18
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 -> v1.13.39
• github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 -> v1.5.8
• github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 -> v1.33.8
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 -> v1.38.8
• github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 -> v1.45.8
• github.com/aws/smithy-go v1.27.4 -> v1.27.10
• github.com/compose-spec/compose-go/v2 v2.13.0 -> v2.14.0
• github.com/containerd/containerd/v2 v2.3.3 -> v2.3.4
• github.com/containerd/platforms v1.0.0-rc.4 -> v1.0.0-rc.5
• github.com/docker/cli v29.6.2 -> v29.7.2
• github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
• github.com/go-logr/logr v1.4.3 -> v1.4.4
• github.com/klauspost/compress v1.19.1 -> v1.19.2
• github.com/moby/buildkit v0.32.2 -> v0.33.0
• github.com/moby/go-archive v0.2.1 -> v0.2.0
• github.com/moby/policy-helpers 856be88 -> dd6c549
• github.com/pelletier/go-toml/v2 v2.3.1 -> v2.4.3
• github.com/sirupsen/logrus v1.9.4 -> v1.10.2
• github.com/stretchr/testify v1.11.1 -> v1.12.1
• github.com/tonistiigi/fsutil 6d9dc2e -> 83cac42
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.69.0 -> v0.70.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 -> v0.70.0
• go.opentelemetry.io/otel v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
• go.opentelemetry.io/otel/trace v1.44.0 -> v1.45.0
• go.opentelemetry.io/proto/otlp v1.10.0 -> v1.11.0
• go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
• golang.org/x/crypto v0.54.0 -> v0.55.0
• golang.org/x/mod v0.38.0 -> v0.40.0
• golang.org/x/net v0.57.0 -> v0.58.0
• golang.org/x/text v0.40.0 -> v0.41.0
• golang.org/x/tools v0.47.0 -> v0.49.0
• google.golang.org/genproto/googleapis/api 3dc84a4 -> 6ac0973
• google.golang.org/genproto/googleapis/rpc 3dc84a4 -> 6ac0973
• google.golang.org/grpc v1.82.1 -> v1.83.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.6.1 -> v1.6.2
• google.golang.org/protobuf f2248ac -> v1.36.12
• k8s.io/api v0.36.0 -> v0.36.3
• k8s.io/apimachinery v0.36.0 -> v0.36.3
• k8s.io/client-go v0.36.0 -> v0.36.3
• sigs.k8s.io/structured-merge-diff/v6 v6.3.2 -> v6.3.3

Previous release can be found at v0.36.1

v0.36.1

Compare Source

Welcome to the v0.36.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax

Notable Changes

• Add BUILDX_NO_DEFAULT_OCI_ARTIFACT as alternative to oci-artifact=false when users have not set it explicitly. #​3991

Dependency Changes

• github.com/moby/buildkit v0.32.0 -> v0.32.2

Previous release can be found at v0.36.0

v0.36.0

Compare Source

Welcome to the v0.36.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• MohammadHasan Akbari
• Matt Van Horn
• amarkdotdev
• Areeb Ahmed
• Guillaume Lours
• Paweł Gronowski
• Pierre Gimalac
• s3onghyun

Notables Changes

• Default source policy can now validate the authenticity of BuildKit release images when creating docker-container builder with docker buildx create command. #​3961
• Bake command now supports overriding declared secret sources. #​3962
• Broken builder instances are now correctly handled on removal. #​3934
• Bake now supports resolving files relative to the bake file location instead of the current working directory with BUILDX_BAKE_FILE_RELATIVE_PATHS=true. #​3935
• Source policies now support new array.flatten builtin and OPA template strings. #​3913
• Imagetools commands now do extra validation of the descriptor inputs from files. #​3933
• Windows release binaries are now code-signed, matching the signing coverage already provided for macOS release artifacts. #​3978
• Compose compatibility has been updated to v2.13.0. #​3929
• Fix source policy support on Windows when loading local files inside policy. #​3944
• Fix Kubernetes driver random load balancer support. #​3861
• Fix Kubernetes driver builds hanging indefinitely when the remote exec stream ends. #​3966
• Fix iidfile for containerd-backed Docker driver. #​3952
• Fix authority pseudo-header when using remote driver. #​3928
• Fix possible FD leak when using source policies. #​3943

Dependency Changes

• github.com/Microsoft/go-winio v0.6.2 -> ad3df93
• github.com/ProtonMail/go-crypto v1.3.0 -> v1.4.1
• github.com/aws/aws-sdk-go-v2 v1.42.0 -> v1.43.0
• github.com/aws/aws-sdk-go-v2/config v1.32.24 -> v1.32.31
• github.com/aws/aws-sdk-go-v2/credentials v1.19.23 -> v1.19.30
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.29 -> v1.18.31
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.29 -> v1.4.31
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29 -> v2.7.31
• github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30 -> v1.4.32
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12 -> v1.13.13
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.29 -> v1.13.31
• github.com/aws/aws-sdk-go-v2/service/signin v1.1.5 -> v1.5.0
• github.com/aws/aws-sdk-go-v2/service/sso v1.31.3 -> v1.33.0
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.6 -> v1.38.0
• github.com/aws/aws-sdk-go-v2/service/sts v1.43.3 -> v1.45.0
• github.com/aws/smithy-go v1.27.2 -> v1.27.4
• github.com/compose-spec/compose-go/v2 v2.10.2 -> v2.13.0
• github.com/containerd/containerd/api v1.10.0 -> v1.11.1
• github.com/containerd/containerd/v2 v2.2.4 -> v2.3.3
• github.com/containerd/ttrpc v1.2.8 -> v1.2.9
• github.com/docker/cli v29.5.3 -> v29.6.2
• github.com/go-openapi/errors v0.22.7 -> v0.22.8
• github.com/go-openapi/loads v0.23.3 -> v0.24.0
• github.com/go-openapi/runtime v0.32.3 -> v0.32.4
• github.com/go-openapi/spec v0.22.5 -> v0.22.6
• github.com/go-openapi/strfmt v0.26.3 -> v0.26.4
• github.com/go-openapi/swag v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/cmdutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/conv v0.26.0 -> v0.27.0
• github.com/go-openapi/swag/fileutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/jsonname v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/jsonutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/loading v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/mangling v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/netutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/stringutils v0.26.0 -> v0.26.1
• github.com/go-openapi/swag/typeutils v0.26.0 -> v0.27.0
• github.com/go-openapi/swag/yamlutils v0.26.0 -> v0.26.1
• github.com/go-openapi/validate v0.25.3 -> v0.26.0
• github.com/google/go-containerregistry v0.21.6 -> v0.21.7
• github.com/klauspost/compress v1.18.6 -> v1.19.1
• github.com/lestrrat-go/httprc/v3 v3.0.1 -> v3.0.2
• github.com/lestrrat-go/jwx/v3 v3.0.11 -> v3.0.13
• github.com/moby/buildkit v0.31.0 -> v0.32.0
• github.com/moby/go-archive v0.2.0 -> v0.2.1
• github.com/moby/moby/api v1.54.2 -> v1.55.0
• github.com/moby/moby/client v0.4.1 -> v0.5.0
• github.com/moby/policy-helpers d5411a9 -> 856be88
• github.com/moby/sys/user v0.4.0 -> v0.4.1
• github.com/open-policy-agent/opa v1.10.1 -> v1.14.1
• github.com/segmentio/asm v1.2.0 -> v1.2.1
• github.com/sigstore/rekor v1.5.2 -> v1.5.3
• github.com/sigstore/rekor-tiles/v2 5d098a2 -> v2.3.0
• github.com/sigstore/sigstore-go v1.2.1 -> v1.2.2
• github.com/tonistiigi/fsutil 0257b33 -> 6d9dc2e
• github.com/valyala/fastjson v1.6.4 -> v1.6.7
• github.com/vektah/gqlparser/v2 v2.5.30 -> v2.5.32
• golang.org/x/crypto v0.52.0 -> v0.54.0
• golang.org/x/mod v0.36.0 -> v0.38.0
• golang.org/x/net v0.55.0 -> v0.57.0
• golang.org/x/sync v0.20.0 -> v0.22.0
• golang.org/x/sys v0.45.0 -> v0.47.0
• golang.org/x/term v0.43.0 -> v0.45.0
• golang.org/x/text v0.37.0 -> v0.40.0
• golang.org/x/tools v0.45.0 -> v0.47.0
• google.golang.org/grpc v1.81.1 -> v1.82.1
• google.golang.org/protobuf v1.36.11 -> f2248ac
• k8s.io/api v0.35.4 -> v0.36.0
• k8s.io/apimachinery v0.35.4 -> v0.36.0
• k8s.io/client-go v0.35.4 -> v0.36.0
• k8s.io/kube-openapi 589584f -> 5883c5e
• k8s.io/streaming v0.36.0 new
• k8s.io/utils bc988d5 -> 28399d8
• sigs.k8s.io/structured-merge-diff/v6 v6.3.0 -> v6.3.2

Previous release can be found at v0.35.0

docker/compose (docker-compose)

v5.5.1

Compare Source

What's Changed

✨ Improvements

• Feat(hooks): capture and surface lifecycle hook output by @​glours in #​14091
• Feat(tracing): surface otel shutdown errors via --debug by @​htoyoda18 in #​14152

🐛 Fixes

• Fix(events): validate service names before subscribing to events by @​glours in #​14076
• Fix: bake target names collision for services differing by . vs _ by @​ndeloof in #​14058
• Fix(watch): sync into a symlinked directory instead of failing by @​Endika in #​14084
• Fix(hooks): include hook output in the error when a hook fails by @​dennislapchenko in #​14088
• Fix(build): TTY progress on Windows — hand the real stdout to buildkit by @​ndeloof in #​14090
• Fix(watch): sync all files on initial_sync, regardless of mtime by @​glours in #​14096
• Fix(network): pass IPAM options when creating networks by @​glours in #​14094
• Fix(ps): honor psFormat from Docker CLI config when no --format flag given by @​glours in #​14095
• Fix: dependency wait timeout surfaced only by luck by @​ndeloof in #​14105
• Fix: hold startMx on the start path actually exercised by @​ndeloof in #​14106
• Fix(watch): exclude Dockerfile and compose files from initial sync by @​htoyoda18 in #​14117
• Fix(display): stop ttyWriter.Done from hanging after context cancel by @​glours in #​14119
• Fix(build): honor provenance/sbom false in per-service bake attest by @​glours in #​14112
• Fix(compose): reject unknown subcommands under bridge/transformations by @​glours in #​14143
• Fix(plugins): honor PATHEXT for provider lookup on Windows by @​ndeloof in #​14159
• Fix(watch): stop swallowing SetRecursive errors via nolint by @​glours in #​14165
• Fix(bridge): confirm before wiping non-empty convert output dir by @​glours in #​14174
• Fix(down): spare dangling images of orphaned services, like their tagged image by @​htoyoda18 in #​14154

🔧 Internal

• CI: raise e2e go-test timeout to 20m by @​ndeloof in #​14072
• Lint: replace gocyclo with gocognit by @​ndeloof in #​14057
• Test(e2e): prepend provider bin dir to PATH in provider tests by @​glours in #​14079
• Refactor: dismantle the gocognit hotspots, one concern per function by @​ndeloof in #​14060
• Test(e2e): declarative Scenario layer, project files under testdata// by @​ndeloof in #​14087
• Docs: document engine container event sequences in up monitor by @​ndeloof in #​14024
• E2E: fix test resource isolation and make standalone parallelism configurable by @​glours in #​14073
• API: ScaleOptions carries the replica counts by @​ndeloof in #​14077
• Chore: explicit, unique, greppable internal names by @​ndeloof in #​14049
• Docs: update CONTRIBUTING.md to reflect current tooling and practices by @​glours in #​14098
• API: option structs document what the implementation actually honors by @​ndeloof in #​14078
• Test: unit-lock the imperative start path by @​ndeloof in #​14104
• CLI: display.Mode always resolves to the mode actually rendered by @​ndeloof in #​14103
• CI: validate generated mocks are in sync by @​ndeloof in #​14102
• Docs(sdk): document the EventProcessor API that actually exists by @​ndeloof in #​14131
• Test(e2e): gate the e2e suite behind the build tag the docs already promise by @​ndeloof in #​14132
• Build: error messages name the real remedy, not a removed builder by @​ndeloof in #​14133
• Docs(contributing): legibility guidelines — comments state behavior, not history by @​ndeloof in #​14135
• Test(docs): compile the sdk.md examples by @​ndeloof in #​14136
• Chore(compose): rename convergence.go, whose convergence engine no longer exists by @​ndeloof in #​14129
• Chore(compose): comments state behavior, not history by @​ndeloof in #​14130
• Test(build): re-enable wrong ssh key id test by @​htoyoda18 in #​14120
• Chore(compose): orphan semantics stated where up and down diverge by @​ndeloof in #​14142
• Refactor: NewGraph stops mutating the project by @​ndeloof in #​14124
• Test(e2e): bump compose-bridge images to v0.0.7 by @​ricardobranco777 in #​14170

⚙️ Dependencies

• Build(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 by @​dependabot[bot] in #​14101
• Remove buildx as a Go dependency by @​ndeloof in #​14123
• Chore(deps): github.com/sirupsen/logrus v1.10.2, google.golang.org/grpc v1.83.2 by @​thaJeztah in #​14137
• Build: bump golangci-lint to v2.13.2 by @​ndeloof in #​14164
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9 by @​dependabot[bot] in #​14167
• Update to go1.26.8 by @​thaJeztah in #​14172
• Feat(deps): github.com/moby/buildkit v0.33.0 by @​thaJeztah in #​14171
• Build(deps): golang.org/x/crypto v0.56.0 by @​thaJeztah in #​14173
• Bump compose-go to version v2.15.0 by @​glours in #​14178

New Contributors

• @​dennislapchenko made their first contribution in #​14088

Full Changelog: docker/compose@v5.5.0...v5.5.1

v5.5.0

Compare Source

What's Changed

ℹ️ This release overhauls image digest reconciliation to prevent unnecessary container recreation.
Existing containers may be recreated the first time you run compose up after upgrading, as image digests are re-evaluated using the new logic.

compose pull now honors pull_policy refresh windows (daily, weekly, every_N).

✨ Improvements

• New image digest reconciliation process by @​glours & @​ndeloof #​14011 #​14041

🐛 Fixes

• Fix(bridge): skip pulling default image references for build-only ser… by @​ericwyles in #​14010
• Fix(watch): stop pruning every dangling image of the project by @​glours in #​14012
• Fix(config): resolve service environment when computing --hash by @​glours in #​14002
• Fix(watch): skip unreadable directories instead of failing the watch by @​Endika in #​13992
• Fix: ignore one-off container events in up monitor by @​brano-osif in #​14038
• Fix(bridge): validate arguments of bridge subcommands by @​glours in #​14003
• Fix(images): tolerate containers whose image record is gone by @​ndeloof in #​14028

🔧 Internal

• Test: Set stop_signal to SIGTERM in nginx-based services by @​ricardobranco777 in #​13881
• Chore: inline needlessly extracted single-use helpers by @​ndeloof in #​14048
• Add ENGINE column driven by label by @​nicksieger in #​13959

⚙️ Dependencies

• Build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 by @​dependabot[bot] in #​13999
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4 by @​dependabot[bot] in #​14009
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.5 by @​dependabot[bot] in #​14019
• Build(deps): bump github.com/moby/buildkit from 0.32.1 to 0.32.2 by @​dependabot[bot] in #​14033
• Build(deps): bump github.com/docker/buildx from 0.36.0 to 0.36.1 by @​dependabot[bot] in #​14034
• Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.15.0 to 1.16.0 in the docker-actions group by @​dependabot[bot] in #​14035
• Build(deps): bump github.com/moby/go-archive from 0.3.2 to 0.3.3 by @​dependabot[bot] in #​14043
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6 by @​dependabot[bot] in #​14022
• Build(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.2+incompatible by @​dependabot[bot] in #​14042
• Build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @​dependabot[bot] in #​14008
• Bump golang to version 1.26.6 by @​glours in #​14045

New Contributors

• @​ericwyles made their first contribution in #​14010
• @​Endika made their first contribution in #​13992
• @​brano-osif made their first contribution in #​14038

Full Changelog: docker/compose@v5.4.0...v5.5.0

v5.4.0

Compare Source

What's Changed

ℹ️ This release introduces a new way to reconcile resources such as volumes and networks

✨ Improvements

• Feat(reconcile): model volume recreation in the plan by @​ndeloof in #​13962
• Feat(reconcile): model network lifecycle in the plan by @​ndeloof in #​13966

🐛 Fixes

• Fix(reconcile): preserve zero-replica services during hashing by @​junhaoliao in #​13931
• Fix(config): warn when service selection is silently ignored by @​glours in #​13950
• Fix(build): use platform image-manifest digest, not attested index by @​glours in #​13949
• Fix(oci): honor --insecure-registry when up re-loads the model by @​ptrdom in #​13894
• Fix(config): pin type:image volume sources and pre_start hook images by @​glours in #​13956
• Tolerate missing env file on more runtime commands by @​maxproske in #​13603
• Resolve pre_start hook images alongside service images by @​ndeloof in #​13937
• Fix(cp): return non-nil Content from dry-run CopyFromContainer by @​glours in #​13982
• Fix(config): apply config flags to --services/--volumes/--networks/--models/--hash by @​glours in #​13979
• Fix: tolerate missing env file on scale, watch and shell completion by @​glours in #​13973

🔧 Internal

• README: remove Go Report Card badge by @​thaJeztah in #​13926
• Docs: adopt AGENTS.md standard, symlink CLAUDE.md to it by @​glours in #​13871
• Dockerfile: update golang image to alpine 3.23 by @​thaJeztah in #​13921
• Docs: require dated AI_AGENT_DISCLOSURE.md, drop committed copy by @​glours in #​13976
• CI: publish images to Docker Hub using OIDC by @​glours in #​13994

⚙️ Dependencies

• Build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by @​dependabot[bot] in #​13942
• Build(deps): bump the docker-actions group across 1 directory with 4 updates by @​dependabot[bot] in #​13941
• Build(deps): bump actions/stale from 10.3.0 to 10.4.0 by @​dependabot[bot] in #​13943
• Build(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 by @​dependabot[bot] in #​13948
• Build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @​dependabot[bot] in #​13927
• Build(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by @​dependabot[bot] in #​13928
• Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.13.0 to 1.14.0 in the docker-actions group by @​dependabot[bot] in #​13953
• Build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @​dependabot[bot] in #​13922
• Build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 by @​dependabot[bot] in #​13955
• Build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @​dependabot[bot] in #​13960
• Build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in the go_modules group across 1 directory by @​dependabot[bot] in #​13961
• Build(deps): bump github.com/docker/cli from 29.6.1+incompatible to 29.6.2+incompatible by @​dependabot[bot] in #​13968
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 by @​dependabot[bot] in #​13981
• Build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​13970
• Build(deps): bump github.com/moby/buildkit from 0.31.1 to 0.31.2 by @​dependabot[bot] in #​13969
• Bump compose-go to version v2.14.0 by @​glours in #​13983
• Bump go-archive to version v0.3.0 by @​glours in #​13986
• Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.14.0 to 1.15.0 in the docker-actions group by @​dependabot[bot] in #​13989
• Chore(deps): bump github.com/moby/go-archive v0.3.2 by @​thaJeztah in #​13991
• Update to go1.26.5 by @​thaJeztah in #​13920
• Build(deps): bump actions/stale from 10.4.0 to 11.0.0 by @​dependabot[bot] in #​13996
• Build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml from 2.0.2 to 2.0.3 in the docker-actions group by @​dependabot[bot] in #​13995
• Build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @​dependabot[bot] in #​13984
• Chore(deps): github.com/docker/buildx v0.36.0, buildkit v0.32.0 by @​glours in #​13975
• Bump buildkit v0.32.1 by @​glours in #​13997

New Contributors

• @​junhaoliao made their first contribution in #​13931

Full Changelog: docker/compose@v5.3.1...v5.4.0

actions/go-versions (go)

v1.27.1: 1.27.1

Compare Source

Go 1.27.1

v1.27.0: 1.27.0

Compare Source

Go 1.27.0

hashicorp/terraform-provider-google (google)

v7.46.0

Compare Source

linode/terraform-provider-linode (linode)

v4.4.0

Compare Source

What's Changed

🐛 Bug Fixes

• Fixed issue with obj bucket lifecycle_rule by @​ezilber-akamai in #​2438
• Resolve issue that causes implicit LKE cluster nested pool resize on unrelated updates in Pulumi by @​lgarber-akamai in #​2446
• Stabilize database and firewall behavior by @​lgarber-akamai in #​2451

🚀 New Features

• add group_by support to monitor alert definition by @​zliang-akamai in #​2440

💡 Improvements

• Refactor for bucket migration by @​zliang-akamai in #​2276
• Mark databases list filters as API-filterable by @​zliang-akamai in #​2442

⚙️ Repo/CI Improvements

• Replace pre-Go-1.24 tools pattern with go tool by @​zliang-akamai in #​2449
• Resolve linter failures by @​lgarber-akamai in #​2454

📖 Documentation

• Add docs to distinguish between block and nested attributes by @​yec-akamai in #​2447

Full Changelog: linode/terraform-provider-linode@v4.3.0...v4.4.0

v4.3.1

Compare Source

[!NOTE]
This release is identical to v4.4.0 due to an oversight in the release process.

What's Changed

🐛 Bug Fixes

• Fixed issue with obj bucket lifecycle_rule by @​ezilber-akamai in #​2438
• Resolve issue that causes implicit LKE cluster nested pool resize on unrelated updates in Pulumi by @​lgarber-akamai in #​2446
• Stabilize database and firewall behavior by @​lgarber-akamai in #​2451

🚀 New Features

• Add group_by support to monitor alert definition by @​zliang-akamai in #​2440

💡 Improvements

• Mark databases list filters as API-filterable by @​zliang-akamai in #​2442
• Resolve linter failures by @​lgarber-akamai in #​2454
• Refactor for bucket migration by @​zliang-akamai in #​2276

📖 Documentation

• Add docs to distinguish between block and nested attributes by @​yec-akamai in #​2447

⚙️ Repo/CI Improvements

• Replace pre-Go-1.24 tools pattern with go tool by @​zliang-akamai in #​2449

Full Changelog: linode/terraform-provider-linode@v4.3.0...v4.3.1

libops/sitectl-archivesspace (sitectl-archivesspace)

v2.1.2

Compare Source

What's Changed

• [patch] Restore

✂ Note

PR body was truncated to here.