fix(deps): pin dependencies by ccf-release-bot[bot] · Pull Request #146 · compliance-framework/workflows

ccf-release-bot · 2026-10-22T13:56:24Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	pinDigest	→ `11d5960`
actions/create-github-app-token	action	minor	`v3.2.0` → `v3.3.0`
actions/setup-node	action	minor	`v7.0.0` → `v7.1.0`
chart-testing	uses-with	minor	`3.14.0` → `3.15.0`
github.com/google/go-containerregistry	require	minor	`v0.21.2` → `v0.22.1`
github.com/hashicorp/go-plugin	require	minor	`v1.7.0` → `v1.8.0`
go.yaml.in/yaml/v3	require	patch	`v3.0.4` → `v3.0.5`
golang.org/x/crypto	require	minor	`v0.57.0` → `v0.58.0`
golang.org/x/mod	require	minor	`v0.41.0` → `v0.42.0`
golangci/golangci-lint	uses-with	minor	`v2.11.4` → `v2.15.0`
google.golang.org/grpc	require	minor	`v1.83.2` → `v1.84.0`
google/osv-scanner-action	workflow	minor	`v2.6.0` → `v2.7.0`
goreleaser/goreleaser	uses-with	patch	`v2.18.2` → `v2.18.3`	`v2.19.0`
goreleaser/goreleaser-action	action	minor	`v7.2.3` → `v7.3.0`
helm	uses-with	patch	`v3.22.0` → `v3.22.1`
helm/chart-testing-action	action	minor	`v2.8.0` → `v2.9.0`
renovatebot/github-action	action	patch	`v46.3.7` → `v46.3.8`	`v46.3.9`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/create-github-app-token

`v3.3.0`

Compare Source

Features

update permission inputs (#399) (a47236f)

Bug Fixes

deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

actions/setup-node

`v7.1.0`

Compare Source

What's Changed

Enhancements:

Add support for mise.toml file by @gperdomor in #1421
Support absolute paths in node-version-file by @v-mahabaleshwars in #1633

Bug fixes:

Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in #1580

Documentation updates:

README.md: bump actions/checkout to latest version 7 by @deining in #1578
docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @v-gowridurgad in #1593
Fixed cache recommendation syntax by @SubJunk in #1603

Dependency updates:

Update workflow pins and migrate Node matrices to modern versions by @v-HarithaVattikuti in #1583
Upgrade @actions/cache to 6.2.0 by @philip-gai in #1584
Pin @types/node to v24 by @v-priyagupta108 in #1585
Override brace-expansion to 5.0.8 by @v-priyagupta108 with @Copilot in #1599
Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in #1598
Upgrade prettier from 3.8.4 to 3.9.6 by @dependabot in #1590
Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in #1610
Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @dependabot in #1602
Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @dependabot in #1629
Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in #1616
Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in #1615
Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @dependabot in #1631
Upgrade jest-each from 30.4.1 to 30.5.2 by @dependabot in #1636
Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @dependabot in #1638
Update dependencies and add license files by @v-HarithaVattikuti in #1642
Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @dependabot in #1635

New Contributors

@v-jitenderpalsingh made their first contribution in #1580
@philip-gai made their first contribution in #1584
@gperdomor made their first contribution in #1421
@SubJunk made their first contribution in #1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

helm/chart-testing (chart-testing)

`v3.15.0`

Compare Source

What's Changed

build(deps): Bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #784
build(deps): Bump helm.sh/helm/v3 from 3.18.6 to 3.19.2 by @dependabot[bot] in #785
build(deps): Bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #793
build(deps): Bump alpine from 3.22 to 3.23 in the docker group by @dependabot[bot] in #794
build(deps): Bump github.com/spf13/cobra from 1.10.1 to 1.10.2 in the gomod group by @dependabot[bot] in #792
build(deps): Bump actions/checkout from 5.0.1 to 6.0.1 by @dependabot[bot] in #797
build(deps): Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 by @dependabot[bot] in #798
build(deps): Bump helm.sh/helm/v3 from 3.19.2 to 3.19.4 in the gomod group by @dependabot[bot] in #795
build(deps): Bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #799
build(deps): Bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #802
build(deps): Bump helm.sh/helm/v3 from 3.19.4 to 3.19.5 in the gomod group by @dependabot[bot] in #803
build(deps): Bump the actions group with 2 updates by @dependabot[bot] in #805
build(deps): Bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #815
build(deps): Bump helm.sh/helm/v3 from 3.19.5 to 3.20.1 by @dependabot[bot] in #823
build(deps): Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #820
build(deps): Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #821
build(deps): Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #818
build(deps): Bump anchore/sbom-action from 0.23.0 to 0.23.1 in the actions group by @dependabot[bot] in #817
build(deps): Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @dependabot[bot] in #822
build(deps): Bump the actions group across 1 directory with 3 updates by @dependabot[bot] in #827
build(deps): Bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 in the actions group by @dependabot[bot] in #831
build(deps): Bump the gomod group with 2 updates by @dependabot[bot] in #830
build(deps): Bump azure/setup-helm from 4.3.1 to 5.0.0 by @dependabot[bot] in #825
build(deps): Bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 in the actions group by @dependabot[bot] in #832
chore: bump to Go 1.26, harden release workflow, tidy code by @cpanato in #835
build(deps): Bump helm.sh/helm/v3 from 3.20.2 to 3.21.0 by @dependabot[bot] in #836
build(deps): Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 in the actions group by @dependabot[bot] in #837
build(deps): Bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #840
build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #844
build(deps): Bump the actions group across 1 directory with 7 updates by @dependabot[bot] in #846
build(deps): Bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #856
build(deps): Bump actions/stale from 10.3.0 to 11.0.0 by @dependabot[bot] in #859
build(deps): Bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 in the gomod group across 1 directory by @dependabot[bot] in #860
build(deps): Bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #858
build(deps): Bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #857
build(deps): Bump alpine from 3.23 to 3.24 in the docker group across 1 directory by @dependabot[bot] in #843
fix: honor --release-name instead of generating a random release name by @somaz94 in #841
build(deps): Bump the actions group with 2 updates by @dependabot[bot] in #865
build(deps): Bump helm.sh/helm/v3 from 3.21.0 to 3.22.0 by @dependabot[bot] in #864
build(deps): Bump github.com/mattn/go-shellwords from 1.0.14 to 1.0.15 in the gomod group by @dependabot[bot] in #862
build(deps): Bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 in the actions group by @dependabot[bot] in #867
build(deps): Bump github.com/mattn/go-shellwords from 1.0.15 to 1.0.16 in the gomod group by @dependabot[bot] in #866
updates to prepare for release by @cpanato in #868

New Contributors

@somaz94 made their first contribution in #841

Full Changelog: helm/chart-testing@v3.14.0...v3.15.0

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.22.1`

Compare Source

What's Changed

Reject non-canonical IP literals in all SSRF guards by @shaggyinsomniac in #2426
daemon: fix stale docker/docker reference in WithClient docs by @BobDu in #2428
build(deps): bump the go-deps group across 2 directories with 4 updates by @dependabot[bot] in #2422
authn: do not overwrite AuthConfig.Auth when username and password are empty by @nileshpatil6 in #2420
build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in #2423
Support pulling images by sha512 digest by @BobDu in #2427
Allow empty label and annotation values in crane mutate by @theadsingh in #2418
fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml by @tprussak in #2434
validate: support index attestation manifests and empty configs by @Subserial in #2414
name: improve error when parsing a reference with a URL scheme by @locker95 in #2431
fix(build): install binaries to /ko-app and add to PATH (#2424) by @tprussak in #2436
fix(release): honor declared Go toolchain by @rksharma-owg in #2435
remote: apply checkRedirectSSRF to writer-side HTTP clients by @locker95 in #2432
flatten: preserve config and layer media types when flattening by @Subserial in #2438
fix(mutate): make Time layer updates lazy by @amarkdotdev in #2429
build(deps): bump the go-deps group across 2 directories with 3 updates by @dependabot[bot] in #2439
remote: copy manifest annotations to referrers fallback tag descriptors by @codysoyland in #2441

New Contributors

@shaggyinsomniac made their first contribution in #2426
@BobDu made their first contribution in #2428
@nileshpatil6 made their first contribution in #2420
@theadsingh made their first contribution in #2418
@locker95 made their first contribution in #2431
@rksharma-owg made their first contribution in #2435
@codysoyland made their first contribution in #2441

Full Changelog: google/go-containerregistry@v0.22.0...v0.22.1

`v0.22.0`

Compare Source

What's Changed

mutate: let Time and Canonical take tarball.LayerOption by @mzihlmann in #2403
build: add multi-architecture Cloud Build configurations for crane, gcrane, and krane by @tprussak in #2412
remote: resolve push-check credentials against the repository by @mzihlmann in #2411
Allow single-character repository paths by @semx in #2407
fix: add missing substitutions and workspace cleanup to new build files by @tprussak in #2413
remote: retry failed Puller and Pusher initialization by @iahsanGill in #2406
build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in #2405
build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in #2415
go.mod: bump Go version + add toolchain directive to replace .go-version file by @Subserial in #2416
fix: Fix new build options and provenance by @tprussak in #2417
fix(build): unify new build flow into cloudbuild_v2.yaml by @tprussak in #2419

New Contributors

@mzihlmann made their first contribution in #2403
@tprussak made their first contribution in #2412
@semx made their first contribution in #2407

Full Changelog: google/go-containerregistry@v0.21.9...v0.21.10

`v0.21.9`

Compare Source

What's Changed

actions: pin slsa generator by version by @Subserial in #2395
fix: prevent data race on scope refreshes within remote.writer by @Subserial in #2396
fix: remove '.' from unsafe path prefixes by @Subserial in #2400
build(deps): bump the actions group with 3 updates by @dependabot[bot] in #2398

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

`v0.21.8`

Compare Source

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in #2353
build(deps): bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /cmd/krane by @dependabot[bot] in #2367
build(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /pkg/authn/k8schain by @dependabot[bot] in #2368
build(deps): bump golang.org/x/net from 0.49.0 to 0.55.0 in /pkg/authn/kubernetes by @dependabot[bot] in #2363
build(deps): bump the go-deps group across 3 directories with 7 updates by @dependabot[bot] in #2377
build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #2375
Reject unsafe Windows archive paths in Extract by @Haihan-Jiang in #2330
feat(goreleaser): add loong64 build support for crane/gcrane/krane by @xuxiaowei-com-cn in #2358
Document tag and digest reference semantics by @Haihan-Jiang in #2325
remote: release pull limiter slot when body is read to EOF by @knQzx in #2373
tarball: bounds-check layer index in uncompressed LayerByDiffID by @arpitjain099 in #2370
authn: read Podman auth from XDG config by @vigneshakaviki in #2379
transport: per-host bearer token exchange on cross-host redirect by @amitzig in #2360
mutate: bounds-check layer index when building rebase addendums by @arpitjain099 in #2371
fix(daemon): copy ExposedPorts from source config in computeImageConfig by @x64vps in #2356
feat(remote): add WithReferrersTagFallback option by @kevinmdavis in #2366
mutate: apply opaque-directory whiteouts (.wh..wh..opq) in Extract by @sadmanf in #2372
tarball: use correct file extension for zstd/uncompressed by @milas in #2382
build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 in the go-deps group across 1 directory by @dependabot[bot] in #2380
actions: update actions to be pinned by hash by @Subserial in #2384
Bump go version to 1.26.5 by @Subserial in #2388

New Contributors

@xuxiaowei-com-cn made their first contribution in #2358
@knQzx made their first contribution in #2373
@arpitjain099 made their first contribution in #2370
@vigneshakaviki made their first contribution in #2379
@amitzig made their first contribution in #2360
@x64vps made their first contribution in #2356
@kevinmdavis made their first contribution in #2366
@sadmanf made their first contribution in #2372

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

`v0.21.7`

Compare Source

What's Changed

tarball: return error instead of panicking on missing rootfs.diff_ids by @iahsanGill in #2304
gcrane: honor --platform flag in copy by @iahsanGill in #2307
mutate: verify layer digests in Extract and Time by @momenashrafff in #2303
tarball: close layer readers during Write by @nandbhat in #2308
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2311
build(deps): bump github.com/docker/cli from 29.4.3+incompatible to 29.5.2+incompatible in the go-deps group across 1 directory by @dependabot[bot] in #2312
BUGFIX: Fail with error when read exceeds maximum by @inteon in #2328
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2327
fix(name): anchor loopback registry detection by @rohan-patnaik in #2314
Reject symlinks in OCI layout blobs by @mosskappa in #2306
fix(crane): avoid creating export tar on pull failure by @Haihan-Jiang in #2318
feat(kubernetes): allow ignoring pull secrets by @rohan-patnaik in #2315
fix(name): preserve localhost registry references by @rohan-patnaik in #2316
pkg/registry: export ErrNotFound by @malt3 in #2176
pkg/registry: export RedirectError by @malt3 in #2177
build(deps): bump the go-deps group across 1 directory with 2 updates by @dependabot[bot] in #2343
build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #2344
fix: prevent SSRF in google.List() pagination by @tufstraka in #2332
internal/gzip: fix goroutine leak in ReadCloserLevel by @amarkdotdev in #2347
fix(transport): apply refreshed bearer token after cross-host redirect by @64johnlee in #2337
build(deps): bump the go-deps group across 3 directories with 4 updates by @dependabot[bot] in #2348
fix(tarball): normalize paths when matching files by @bstoll in #2334
transport: do not re-attach bearer token after cross-host redirect by @evilgensec in #2349
Bump CI go version to 1.26.4 by @Subserial in #2350

New Contributors

@momenashrafff made their first contribution in #2303
@nandbhat made their first contribution in #2308
@inteon made their first contribution in #2328
@rohan-patnaik made their first contribution in #2314
@mosskappa made their first contribution in #2306
@Haihan-Jiang made their first contribution in #2318
@tufstraka made their first contribution in #2332
@amarkdotdev made their first contribution in #2347
@64johnlee made their first contribution in #2337
@bstoll made their first contribution in #2334

Full Changelog: google/go-containerregistry@v0.21.6...v0.21.7

`v0.21.6`

Compare Source

What's Changed

fix: update dependencies to use new azure sdk components by @gaganhr94 in #2262
transport: restore resp.Body in retryError so CheckError can parse it by @alliasgher in #2264
pkg/registry: return 202 Accepted for PATCH chunk uploads by @alliasgher in #2265
Follow OCI distribution spec for artifactType and annotations by @malt3 in #2269
actions: attach Codecov token to coverage tests on main by @Subserial in #2270
remote: use DeleteScope (with "delete" action) for manifest deletion by @alliasgher in #2266
remote: limit concurrent layer pulls by @gnix0 in #2271
pkg/registry: reject corrupt disk blobs by @gnix0 in #2272
mutate: close layer readers during export by @gnix0 in #2277
crane/flatten: preserve image media type when flattening by @alliasgher in #2267
build(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 in the actions group across 1 directory by @dependabot[bot] in #2273
build(deps): bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by @dependabot[bot] in #2278
build(deps): bump the go-deps group across 3 directories with 6 updates by @dependabot[bot] in #2280
Replace go-homedir with os.UserHomeDir by @jammie-jelly in #2282
pkg/name: only treat .localhost as non-HTTPS, not .local by @blackwell-systems in #2281
transport: block unspecified IPs (0.0.0.0, ::) in validateRealmURL by @marwan9696 in #2285
test(mutate): add Extract round-trip test for filesystem object preservation by @blackwell-systems in #2283
experiments: remove deprecated support for estargz by @thaJeztah in #2288
build(deps): bump aws-actions/configure-aws-credentials from 6.1.0 to 6.1.1 in the actions group by @dependabot[bot] in #2289
fix: limit HTTP response body reads to prevent OOM by @evilgensec in #2296
build(deps): bump the go-deps group across 3 directories with 6 updates by @dependabot[bot] in #2297
transport: block redirects from token server to private/link-local addresses (SSRF fix) by @evilgensec in #2292
pkg/v1/mutate: preserve relative symlinks that stay within rootfs in Extract by @anishesg in #2279
validate: skip non-layer layers by @imjasonh in #2298
remote: validate foreign layer URLs to prevent SSRF (fixes #2259) by @evilgensec in #2293
remote: block SSRF via private-IP Location headers in blob uploads by @adilburaksen in #2295
fix(mutate): preserve config blob and layers for non-Docker OCI artifacts by @blackwell-systems in #2286
fix: preserve per-occurrence layer identity in mutate.Image.Layers() by @iahsanGill in #2299
transport: retry HTTP 429 (Too Many Requests) by @iahsanGill in #2301
transport: allow bearer realm at same host:port as registry by @iahsanGill in #2302
Update go version to 1.26.3 by @Subserial in #2300

New Contributors

@gaganhr94 made their first contribution in #2262
@alliasgher made their first contribution in #2264
@malt3 made their first contribution in #2269
@gnix0 made their first contribution in #2271
@blackwell-systems made their first contribution in #2281
@marwan9696 made their first contribution in #2285
@anishesg made their first contribution in #2279
@adilburaksen made their first contribution in #2295
@iahsanGill made their first contribution in #2299

Full Changelog: google/go-containerregistry@v0.21.5...v0.21.6

`v0.21.5`

Compare Source

What's Changed

Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 by @thaJeztah in #2254
update to Go 1.26.2 by @thaJeztah in #2255
Bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in the actions group across 1 directory by @dependabot[bot] in #2257
build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps group across 1 directory by @dependabot[bot] in #2260

Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5

`v0.21.4`

Compare Source

What's Changed

go.mod: do not make a viral minimum go version by @howardjohn in #2237
Avoid pruning absolute links from extracted and flattened images by @Subserial in #2241
Bump the go-deps group across 3 directories with 5 updates by @dependabot[bot] in #2245
fix: update to go1.25.8, and use separate .go-version file by @thaJeztah in [#2246](https://redirect.github.com/google/go-containerregistry

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone UTC)

Branch creation
- On day 8 and 22 of the month (* * 8,22 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

ccf-release-bot · 2026-10-22T13:56:28Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
`github.com/docker/cli`	`v29.3.0+incompatible` -> `v29.7.2+incompatible`
`github.com/klauspost/compress`	`v1.18.7` -> `v1.19.2`
`golang.org/x/sync`	`v0.23.0` -> `v0.24.0`
`golang.org/x/sys`	`v0.48.0` -> `v0.49.0`
`golang.org/x/text`	`v0.42.0` -> `v0.43.0`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260526163538-3dc84a4a5aaa` -> `v0.0.0-20260706201446-f0a921348800`

coderabbitai · 2026-10-22T13:56:52Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Organization UI
Review profile: ASSERTIVE
Plan: Advanced
Run ID: 1b554198-bacd-4367-9516-b06c399d6ae5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

ccf-release-bot Bot added the renovate:automerge label Oct 22, 2026

fix(deps): pin dependencies

57d0c91

ccf-release-bot Bot force-pushed the renovate/all-non-major branch from 9db389b to 57d0c91 Compare October 23, 2026 13:36

Navigation Menu

Repository navigation

fix(deps): pin dependencies - #146

fix(deps): pin dependencies#146
ccf-release-bot[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major

ccf-release-bot Bot commented Oct 22, 2026 •

edited

Loading

Uh oh!

ccf-release-bot Bot commented Oct 22, 2026

Uh oh!

coderabbitai Bot commented Oct 22, 2026 •

edited

Loading

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

ccf-release-bot Bot commented Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

Configuration

Uh oh!

ccf-release-bot Bot commented Oct 22, 2026

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

coderabbitai Bot commented Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

ccf-release-bot Bot commented Oct 22, 2026 •

edited

Loading

coderabbitai Bot commented Oct 22, 2026 •

edited

Loading