fix(deps): update all non-major dependencies by ccf-release-bot[bot] · Pull Request #184 · compliance-framework/workflows

ccf-release-bot · 2026-11-03T21:54:47Z

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
ghcr.io/renovatebot/renovate (source)	uses-with	minor	`44.199.2` → `44.216.5`
google.golang.org/grpc	require	minor	`v1.84.0` → `v1.85.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

renovatebot/renovate (ghcr.io/renovatebot/renovate)

`v44.216.5`

Compare Source

Bug Fixes

deps: update renovate-base-image to v13.160.3 (main) (#47774) (1a5f40a)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.66.2 (main) (#47773) (99f2287)

`v44.216.4`

Compare Source

Bug Fixes

deps: update renovate-base-image to v13.160.2 (main) (#47772) (ad3caf6)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.66.1 (main) (#47771) (e8bdcc4)

`v44.216.3`

Compare Source

Build System

deps: update dependency google-auth-library to v11.3.2 (main) (#47770) (f35b836)

`v44.216.2`

Compare Source

Build System

deps: update dependency @opentelemetry/semantic-conventions to v1.44.0 (main) (#47767) (176dc4b)

`v44.216.1`

Compare Source

Bug Fixes

deps: update renovate-base-image to v13.160.1 (main) (#47766) (2e77c1c)

Miscellaneous Chores

deps: update github/codeql-action action to v4.39.3 (main) (#47757) (d0f966d)
deps: update sigstore/cosign-installer action to v4.1.3 (main) (#47763) (570fdbb)

`v44.216.0`

Compare Source

Features

deps: update renovate-base-image to v13.160.0 (main) (#47756) (708d7d0)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.65.0 (main) (#47754) (4dff7ef)
deps: update ghcr.io/containerbase/devcontainer docker tag to v14.66.0 (main) (#47755) (c255569)

`v44.215.0`

Compare Source

Features

config/migration: migrate erlang constraints with ^, ~ and ~> to comparators (#47724) (c537a34)
util/exec: use semver-extended versioning for jb and erlang (#47723) (852aa30)

`v44.214.0`

Compare Source

Features

deps: update renovate-base-image to v13.158.0 (main) (#47751) (02e76c9)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.64.0 (main) (#47750) (939a802)

Continuous Integration

setup-docker: free disk space when less than 40 GB are available (#47749) (e25e231)

`v44.213.0`

Compare Source

Features

logger: log containerbase and osv-offline messages via Renovate's logger (#47649) (6ef4696)
versioning/semver-extended: support ranges (#47720) (1695b40)
versioning/semver-extended: support the widen range strategy (#47722) (6988c14)
versioning/semver-extended: update ranges with bump and replace (#47721) (23db582)
versioning: add semver-extended versioning (#47719) (40329e5)

Bug Fixes

deps: update renovate-base-image to v13.157.1 (main) (#47745) (922bc68)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.63.1 (main) (#47744) (25a7f72)
lint: prefer versioning helpers over version regexes (#47730) (627a217)

`v44.212.1`

Compare Source

Bug Fixes

changelog: ignore URLs when matching version in body (#44793) (1f55e95)
custom: preserve datasource-provided changelog content (#45867) (b9874b1)
dashboard: skip package files without listed dependencies (#47005) (d7dc43c)
npm: link the change diff to the looked up package (#47007) (96c2f98)
platform/gerrit: merge unpushed onboarding change from local branch (#47115) (7895d77)
versioning/rez: preserve replacement versions (#46528) (62925c4)
workers/repository: don't report platform errors as base branch config errors (#47726) (18ca498), closes #43916
workers/repository: handle empty or missing base branch config file (#47727) (0609a27)

`v44.212.0`

Compare Source

Features

gerrit: enable push signing when gitPrivateKey is set (#44228) (8fd150c)
manager/apm: follow branch refs by their commit (#46881) (870347b)
monorepo: Add CloudEvents SDK monorepos (#45064) (3072bb0)
presets/monorepos: Add Excel-DNA (#38220) (4bb7ac7)
presets: add Chat SDK monorepo (#45251) (887fb29)
support assembling versions from named groups in extractVersion (#44014) (f2e8ca6)

Bug Fixes

manager/nix: keep flakes without updatable inputs for lock file maintenance (#43892) (1ed2dd4)
platform/azure: Encode all path segments (#44854) (3f24483), closes #3582 #3620 #44818
platform/azure: stop &[#8203](https://redirect.github.com/renovatebot/renovate/issues/8203); entities linking Azure Boards work item 8203 (#46832) (c95f9b9)
platform/github: reduce max body length to 50k (#46613) (9576a0e)

`v44.211.0`

Compare Source

Features

deps: update renovate-base-image to v13.157.0 (main) (#47711) (ebee4f1)

Miscellaneous Chores

deps: update zizmor (main) (#47710) (17a9d3a)
lint: add rule against deeply nested logical expressions (#47693) (b6c6e68)
lint: limit nested logical expressions to one level (#47697) (e6316a2)
lint: rename prefer-json-pipe to prefer-parser-pipe and enforce Ini (#47694) (2393db1)

Code Refactoring

http: add status code helpers (#47700) (d8953e5)

`v44.210.2`

Compare Source

Miscellaneous Chores

deps: update dependency astral-sh/uv to v0.13.7 (main) (#47702) (3ac9a53)
deps: update dependency pnpm to v11.28.9 (main) (#47703) (ad318a2)
deps: update dependency uv to v0.13.7 (main) (#47705) (ef23b7c)
deps: update ghcr.io/containerbase/devcontainer docker tag to v14.63.0 (main) (#47708) (c4298a4)
deps: update github/codeql-action action to v4.39.2 (main) (#47706) (ba64fe6)

Build System

deps: update dependency @renovatebot/good-enough-parser to v4 (main) (#47576) (bb7ac2a)

`v44.210.1`

Compare Source

Miscellaneous Chores

deps: update dependency tsdown to v0.23.3 (main) (#47617) (99cdecc)

Build System

deps: update dependency @renovatebot/osv-offline to v4.5.10 (main) (#47701) (e83ec70)

`v44.210.0`

Compare Source

Features

datasource: add julia-general-metadata datasource (#42994) (e2627de), closes #29623 #46112 #47166
versioning: add julia versioning (#42995) (f312ab8), closes JuliaGPU/CUDA.jl#3152 dependabot/dependabot-core#16307
versioning: add vcpkg versioning (#43497) (4d0f1cd)

`v44.209.0`

Compare Source

Features

vulnerabilities: store the osv-offline database in cacheDir (#47686) (b9c7424)

Bug Fixes

workers/repository: respect global ignorePresets when logging shallow config (#47671) (7a4a762), closes #47656

`v44.208.0`

Compare Source

Features

gerrit: implement pr cache (#35676) (01a5991), closes #41382

`v44.207.0`

Compare Source

Features

deps: update renovate-base-image to v13.155.0 (main) (#47689) (ac4eea2)

`v44.206.3`

Compare Source

Bug Fixes

manager/cargo: read .cargo/config before .cargo/config.toml like cargo (#47685) (f526b3c)

Documentation

allow force pushing branches of GitHub PR stacks (#47676) (ea9e592)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.61.0 (main) (#47681) (6b681a6)
deps: update jdx/mise-action action to v5.2.6 (main) (#47680) (06dee93)

`v44.206.2`

Compare Source

Build System

deps: update dependency @renovatebot/osv-offline to v4.5.9 (main) (#47675) (0394985)

`v44.206.1`

Compare Source

Bug Fixes

deps: update dependency github/gh-actions-lock to v0.4.1 (main) (#47673) (e72c088)

`v44.206.0`

Compare Source

Features

deps: update renovate-base-image to v13.154.0 (main) (#47672) (61b15d6)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.60.0 (main) (#47670) (1b93482)

`v44.205.2`

Compare Source

Bug Fixes

util/exec: reinstall child tools when the parent tool version changes (#47642) (1b4c266)

Documentation

config: remove overly nested baseBranchPatterns code block (#47657) (00b0bf8)

Code Refactoring

drop the ES5 prototype fix from ExternalHostError (#47645) (3576eb7)

Build System

deps: update dependency @renovatebot/osv-offline to v4.5.8 (main) (#47669) (2359029)

`v44.205.1`

Compare Source

Bug Fixes

vulnerabilities: dispose the OSV databases when finishing (#47658) (e733ff0)

`v44.205.0`

Compare Source

Features

manager/github-actions: extract the flux-mirror setup action version (#47650) (bc0f78f)
preset: @primer group preset (#45696) (050ea8e)

`v44.204.0`

Compare Source

Features

datasource/go: derive Go env from host rules (#47572) (fa8522f)

`v44.203.0`

Compare Source

Features

presets: add rumdl to packages:linters (#47404) (327c2a6)

Miscellaneous Chores

tools: allow global:safeEnv env vars in doc fence check (#47651) (cbcc656)

Tests

cache: pass a compare function to toSorted (#47648) (98eafac)

`v44.202.1`

Compare Source

Build System

deps: update dependency @renovatebot/ruby-semver to v6 (main) (#47629) (5010656)

`v44.202.0`

Compare Source

Features

presets: add group:java preset (#47573) (c766f2c)
presets: add group:nodeJsWithTypes (#47577) (c48e653)
presets: add ruff to packages:linters (#47405) (e8686c2)

`v44.201.1`

Compare Source

Bug Fixes

config: describe manager config objects by their display name (#47634) (98d544f)
json-schema: link manager config objects to their manager docs (#47632) (976d9a1)

Code Refactoring

config: record where autogenerated config comes from (#47630) (394b8a2)

`v44.201.0`

Compare Source

Features

deps: update renovate-base-image to v13.152.12 (main) (#47628) (754799e)

Miscellaneous Chores

deps: update dependency knip to v6.43.0 (main) (#47626) (21c3e7c)

`v44.200.2`

Compare Source

Bug Fixes

json-schema: reject unknown keys in toolSettings and postUpgradeTasks (#47197) (5c8702c)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.59.8 (main) (#47627) (785f555)

Tests

manager/flux: use inline fixtures (#47176) (b496a93)

`v44.200.1`

Compare Source

Bug Fixes

vulnerability: keep the dependency's versioning when building OSV rules (#46868) (9eaae58), closes #43308

Miscellaneous Chores

deps: update jdx/mise-action action to v5.2.5 (main) (#47624) (942fa34)

Build System

deps: update dependency @renovatebot/detect-tools to v5 (main) (#47529) (50d89c5)
deps: update dependency @renovatebot/osv-offline to v4.5.7 (main) (#47625) (429f033)
deps: update dependency @renovatebot/pep440 to v6 (main) (#47537) (db493ae)

`v44.200.0`

Compare Source

Features

static-data: add 3 new mise tools (#47621) (f9c3e22)
static-data: update Node.js release schedule (#47622) (f0a6c8e)

Miscellaneous Chores

deps: update cbrgm/pr-size-labeler-action action to v1.4.1 (main) (#47610) (796307b)
deps: update dependency @biomejs/biome to v2.6.3 (main) (#47611) (afe92af)
deps: update dependency @containerbase/semantic-release-pnpm to v1.4.4 (main) (#47612) (e4a4a4e)
deps: update dependency katex@>=0.11.0 <0.18.2 to v0.19.1 (main) (#47613) (646668f)
deps: update dependency pnpm to v11.28.8 (main) (#47616) (4046723)

grpc/grpc-go (google.golang.org/grpc)

`v1.85.0`: Release 1.85.0

Compare Source

New Features

stats: Expose the effective client authority (sent on the wire as the HTTP/2 :authority header) in client stats.OutHeader events. (#9296)
- Special Thanks: @aryansk
metadata: Add ValueFromOutgoingContext, which reads a single metadata value from outgoing context without copying the entire outgoing metadata into a new map. (#9282)
- Special Thanks: @yuyangguo42

Bug Fixes

transport: Refine control buffer throttling to only count peer-induced control frames, raise the default GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT from 100 to 10,000, and close client connections if reads remain throttled for 10s. (#9563)
server: Ensure Stop() forcefully terminates the server while GracefulStop() is waiting for active handlers to complete. (#9394)
- Special Thanks: @stanhu
server: Unconditionally increment the highest-seen stream ID on when handling HEADERS frames to comply with RFC 7540 §5.1.1. Previously, truncated HEADERS frames left the connection in an inconsistent state and allowed stream IDs to be reused by clients without resulting in a protocol error. (#9414)
server: Terminate streams immediately when a HEADERS frame includes the EndStream bit. Previously, this caused server handlers to hang when reading a message. (#9391)
server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (#9365)
xds: Fix a bug where route header matchers with non-lowercase names failed to match routes. (#9353)
- Special Thanks: @winklemad
client: Ensure retried RPCs use the correct :authority value specified by the LB policy instead of inheriting it from a previous attempt. (#9277)
- Special Thanks: @nvxbug
transport: Fail streams with io.ErrUnexpectedEOF instead of io.EOF upon receiving truncated message headers or bodies after partial data has already been received. (#9204)
- Special Thanks: @buger

Configuration

📅 Schedule: (in timezone UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

ccf-release-bot · 2026-11-03T21:54:51Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

2 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260706201446-f0a921348800` -> `v0.0.0-20260817212433-ac3dfec99bb1`
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12`

coderabbitai · 2026-11-03T21:54:58Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Organization UI
Review profile: ASSERTIVE
Plan: Advanced
Run ID: 9654a318-2d93-4954-9ea6-1c88582bf5d6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

ccf-release-bot Bot added the renovate:automerge label Nov 3, 2026

fix(deps): update all non-major dependencies

4b65fc6

ccf-release-bot Bot force-pushed the renovate/all-non-major branch from ed76547 to 4b65fc6 Compare November 5, 2026 07:59

ccf-release-bot Bot merged commit 6f16ad9 into main Nov 5, 2026
6 checks passed

ccf-release-bot Bot deleted the renovate/all-non-major branch November 5, 2026 08:03

ccf-release-bot Bot mentioned this pull request Nov 5, 2026

chore(main): release 1.9.3 #175

Open

Navigation Menu

Repository navigation

fix(deps): update all non-major dependencies - #184

fix(deps): update all non-major dependencies#184
ccf-release-bot[bot] merged 1 commit into
mainfrom
renovate/all-non-major

ccf-release-bot Bot commented Nov 3, 2026 •

edited

Loading

Uh oh!

ccf-release-bot Bot commented Nov 3, 2026

Uh oh!

coderabbitai Bot commented Nov 3, 2026 •

edited

Loading

Review skipped

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

ccf-release-bot Bot commented Nov 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Build System

Build System

Bug Fixes

Miscellaneous Chores

Features

Miscellaneous Chores

Features

Features

Miscellaneous Chores

Continuous Integration

Features

Bug Fixes

Miscellaneous Chores

Bug Fixes

Features

Bug Fixes

Features

Miscellaneous Chores

Code Refactoring

Miscellaneous Chores

Build System

Miscellaneous Chores

Build System

Features

Features

Bug Fixes

Features

Features

Bug Fixes

Documentation

Miscellaneous Chores

Build System

Bug Fixes

Features

Miscellaneous Chores

Bug Fixes

Documentation

Code Refactoring

Build System

Bug Fixes

Features

Features

Features

Miscellaneous Chores

Tests

Build System

Features

Bug Fixes

Code Refactoring

Features

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Tests

Bug Fixes

Miscellaneous Chores

Build System

Features

Miscellaneous Chores

v1.85.0: Release 1.85.0

New Features

Bug Fixes

Configuration

Uh oh!

ccf-release-bot Bot commented Nov 3, 2026

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

coderabbitai Bot commented Nov 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

ccf-release-bot Bot commented Nov 3, 2026 •

edited

Loading

`v1.85.0`: Release 1.85.0

coderabbitai Bot commented Nov 3, 2026 •

edited

Loading