Update All Dependencies (!186) · Merge requests · FancyWhale Corporation / code-server

This MR contains the following updates:

Package	Type	Update	Change
bitwarden/clients		minor	`2025.5.0` -> `2025.7.0`
cli/cli		minor	`2.74.1` -> `2.76.2`
codercom/code-server	final	minor	`4.100.3-ubuntu` -> `4.102.2-ubuntu`
docker/buildx		minor	`0.24.0` -> `0.26.1`
docker/compose		minor	`2.37.1` -> `2.39.1`
fluxcd/flux2		patch	`2.6.1` -> `2.6.4`
gitlab-org/cli		minor	`1.59.2` -> `1.65.0`
helm/helm		patch	`3.18.2` -> `3.18.4`
kubernetes-sigs/kustomize		minor	`5.6.0` -> `5.7.1`
mikefarah/yq		minor	`4.45.4` -> `4.47.1`

Release Notes

bitwarden/clients (bitwarden/clients)

`v2025.7.0`: CLI v2025.7.0

Compare Source

Dependency updates, small bug-fixes, and enhancements

`v2025.6.1`: CLI v2025.6.1

Compare Source

Fixed Password generator is broken. Version 2025.6.0 (43904)

`v2025.6.0`: CLI v2025.6.0

Compare Source

Bug-fix for email 2FA codes not being sent
Dependency updates, small enhancements, and bug-fixes

cli/cli (cli/cli)

`v2.76.2`: GitHub CLI 2.76.2

Compare Source

`gh pr create` regression fix

This release fixes a regression introduced in v2.76.1 where organization teams were not present in prompts for pull request reviewers. This caused problems in multiple commands:

Interactive gh pr create could not select teams when adding pull request reviewers
Tab completions with gh pr create --reviewer flag did not present a list of organization teams
Tab completions with gh pr edit --add-reviewer flag did not present a list of organization teams
Tab completions with gh pr edit --remove-reviewer flag did not present a list of organization teams

For more information, see https://github.com/cli/cli/issues/11403

What's Changed

🐛 Fixes

Include org teams for MR reviewers by @andyfeller in https://github.com/cli/cli/pull/11407

📚 Docs & Chores

Delete obsolete comment about gh-models not respecting API rate-limit by @babakks in https://github.com/cli/cli/pull/11398

Full Changelog: https://github.com/cli/cli/compare/v2.76.1...v2.76.2

`v2.76.1`: GitHub CLI 2.76.1

Compare Source

`gh pr create` regression fix

This release fixes a regression introduced in v2.76.0 where organization teams were retrieved outside of intentional use cases. This caused problems for GitHub Enterprise Server users using the GitHub Actions automatic token that does not have access to organization teams.

For more information, see https://github.com/cli/cli/issues/11360

What's Changed

🐛 Fixes

Fix: gh pr create, only fetch teams when reviewers contain a team by @BagToad in https://github.com/cli/cli/pull/11361

📚 Docs & Chores

add tenancy aware for san matcher by @ejahnGithub in https://github.com/cli/cli/pull/11261
Run Lint and Tests on push to trunk branch by @andyfeller in https://github.com/cli/cli/pull/11325
update ownership of pkg/cmd/release/shared/ by @ejahnGithub in https://github.com/cli/cli/pull/11326
Automate spam issue detection by @babakks in https://github.com/cli/cli/pull/11316
Improve api --preview docs by @jsoref in https://github.com/cli/cli/pull/11274
Incorporate govulncheck into workflows by @andyfeller in https://github.com/cli/cli/pull/11332
chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1 by @dependabot[bot] in https://github.com/cli/cli/pull/11298
chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0 by @dependabot[bot] in https://github.com/cli/cli/pull/11307

Full Changelog: https://github.com/cli/cli/compare/v2.76.0...v2.76.1

`v2.76.0`: GitHub CLI 2.76.0

Compare Source

:copilot: Copilot Coding Agent Support

GitHub Copilot Pro+ and Copilot Enterprise subscribers can now assign issues to GitHub Copilot during issue creation using:

Command-line flag: gh issue create --assignee @copilot
Launching web browser: gh issue create --assignee @copilot --web
Or interactively selecting Copilot (AI) as assignee in gh issue create metadata

For more details, refer to the full changelog post for Copilot coding agent.

What's Changed

✨ Features

Assign Copilot during gh issue create by @andyfeller in https://github.com/cli/cli/pull/11279
Display immutable field in release view command by @bdehamer in https://github.com/cli/cli/pull/11251

🐛 Fixes

FIX: Do not fetch logs for skipped jobs by @babakks in https://github.com/cli/cli/pull/11312
Transform extension and filename qualifiers into path qualifier for web code search by @samcoe in https://github.com/cli/cli/pull/11211

📚 Docs & Chores

FIX: Workflow does not contain permissions by @BagToad in https://github.com/cli/cli/pull/11322
Add automated feature request response workflow by @BagToad in https://github.com/cli/cli/pull/11299

Full Changelog: https://github.com/cli/cli/compare/v2.75.1...v2.76.0

`v2.75.1`: GitHub CLI 2.75.1

Compare Source

What's Changed

🐛 Fixes

Ensure hostnames are visible in CLI website by @andyfeller in https://github.com/cli/cli/pull/11295
Revert "Fix: gh pr create prioritize --title and --body over --fill when --web is present" by @andyfeller in https://github.com/cli/cli/pull/11300

📚 Docs & Chores

Ensure go directive is always .0 version in bump by @williammartin in https://github.com/cli/cli/pull/11259
Minor (1-word) documentation typo in generated ~/.config/gh/config.yml by @kurahaupo in https://github.com/cli/cli/pull/11246
Automate closing of stale issues by @babakks in https://github.com/cli/cli/pull/11268
Filter the third-party/ folder out of CodeQL results by @BagToad in https://github.com/cli/cli/pull/11278
Exclude third-party source from golangci-lint by @andyfeller in https://github.com/cli/cli/pull/11293

:dependabot: Dependencies

Bump Go to 1.24.5 by @github-actions[bot] in https://github.com/cli/cli/pull/11255
chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.3 to 0.5.0 by @dependabot[bot] in https://github.com/cli/cli/pull/11263
chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 by @dependabot[bot] in https://github.com/cli/cli/pull/11266
chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by @dependabot[bot] in https://github.com/cli/cli/pull/11264
chore(deps): bump golang.org/x/text from 0.26.0 to 0.27.0 by @dependabot[bot] in https://github.com/cli/cli/pull/11265
chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @dependabot[bot] in https://github.com/cli/cli/pull/11275

New Contributors

@kurahaupo made their first contribution in https://github.com/cli/cli/pull/11246
@github-actions[bot] made their first contribution in https://github.com/cli/cli/pull/11255

Full Changelog: https://github.com/cli/cli/compare/v2.75.0...v2.75.1

`v2.75.0`: GitHub CLI 2.75.0

Compare Source

What's Changed

✨ Features

init release verify subcommands by @ejahnGithub in https://github.com/cli/cli/pull/11018
Embed Windows resources (VERSIONINFO) during build by @babakks in https://github.com/cli/cli/pull/11048
Support --no-repos-selected on gh secret set by @williammartin in https://github.com/cli/cli/pull/11217

🐛 Fixes

Fix: gh pr create prioritize --title and --body over --fill when --web is present by @dankrzeminski32 in https://github.com/cli/cli/pull/10547
fix: get token for active user instead of blank if possible by @anuraaga in https://github.com/cli/cli/pull/11038
Use Actions API to retrieve job run logs as a fallback mechanism by @babakks in https://github.com/cli/cli/pull/11172
Fix query object state mutation during pagination by @babakks in https://github.com/cli/cli/pull/11244
Handle HTTP 404 when deleting remote branch in pr merge by @babakks in https://github.com/cli/cli/pull/11234

📚 Docs & Chores

chore: fix function name by @jinjingroad in https://github.com/cli/cli/pull/11149
chore: update Go version to 1.24 in devcontainer configuration and docs by @tMinamiii in https://github.com/cli/cli/pull/11158
Ensure lint workflow checks whether 3rd party license and code is up to date by @andyfeller in https://github.com/cli/cli/pull/11047
docs: install_linux.md: add Solus linux install instructions by @chax in https://github.com/cli/cli/pull/10823
Fix missing newline in install_linux.md by @BagToad in https://github.com/cli/cli/pull/11160
Ensure automation uses pinned go-licenses version by @andyfeller in https://github.com/cli/cli/pull/11161
Add workflow_dispatch support to MR Help Wanted check by @BagToad in https://github.com/cli/cli/pull/11179
Remove unused GH_TOKEN env variable from workflow by @BagToad in https://github.com/cli/cli/pull/11190
Add workflow to automate go version bumping by @williammartin in https://github.com/cli/cli/pull/11189
Fix inconsistent use of tabs and spaces by @Stefan-Heimersheim in https://github.com/cli/cli/pull/11194
Decouple arg parsing from MR finder by @babakks in https://github.com/cli/cli/pull/11192
docs: consistently use apt in installation instructions by @tklauser in https://github.com/cli/cli/pull/11216
Ensure bump go script has git user configured by @williammartin in https://github.com/cli/cli/pull/11229
Inject token into bump-go workflow by @williammartin in https://github.com/cli/cli/pull/11233
Reinstating Primer Style CLI content within cli/cli repository by @andyfeller in https://github.com/cli/cli/pull/11060
Add setup-go to bump-go workflow by @williammartin in https://github.com/cli/cli/pull/11237
Ensure GoReleaser does not break on Mac OS and Linux when skipping Windows .rsyso generation script by @andyfeller in https://github.com/cli/cli/pull/11257

:dependabot: Dependencies

Bump all dependencies except dev-tunnels by @williammartin in https://github.com/cli/cli/pull/11203
Update microsoft dev-tunnels to v0.1.13 by @williammartin in https://github.com/cli/cli/pull/11205
Consume dependabot minor versions for go modules by @williammartin in https://github.com/cli/cli/pull/11213

New Contributors

@jinjingroad made their first contribution in https://github.com/cli/cli/pull/11149
@tMinamiii made their first contribution in https://github.com/cli/cli/pull/11158
@chax made their first contribution in https://github.com/cli/cli/pull/10823
@dankrzeminski32 made their first contribution in https://github.com/cli/cli/pull/10547
@anuraaga made their first contribution in https://github.com/cli/cli/pull/11038
@Stefan-Heimersheim made their first contribution in https://github.com/cli/cli/pull/11194

Full Changelog: https://github.com/cli/cli/compare/v2.74.2...v2.75.0

`v2.74.2`: GitHub CLI 2.74.2

Compare Source

What's Changed

🐛 Fixes

Fix assignees being dropped from gh pr edit by @BagToad in https://github.com/cli/cli/pull/11065
Add accurate context when run rerun fails by @leudz in https://github.com/cli/cli/pull/10774
Avoid requesting MR reviewer twice by @williammartin in https://github.com/cli/cli/pull/11099
Quote filenames suggested at the end of worklow run by @williammartin in https://github.com/cli/cli/pull/11134
Fix expected error output of TestRepo/repo-rename-transfer-ownership by @aconsuegra in https://github.com/cli/cli/pull/10888

📚 Docs & Chores

Add instructions for MidnightBSD installation by @laffer1 in https://github.com/cli/cli/pull/10699
docs: update install command for Debian by @MagneticNeedle in https://github.com/cli/cli/pull/10935
Fix step order for CodeQL workflow by @BagToad in https://github.com/cli/cli/pull/11145
Add workflow to check help wanted labelling by @williammartin in https://github.com/cli/cli/pull/11105
Quote workflow conditional by @williammartin in https://github.com/cli/cli/pull/11122
Fix script path for help-wanted check by @BagToad in https://github.com/cli/cli/pull/11125
Exclude 3rd party license compliance content from GHAS scanning by @andyfeller in https://github.com/cli/cli/pull/11127
Second fix for file not found in help-wanted check by @BagToad in https://github.com/cli/cli/pull/11128
Ensure gh executes in workflow check script by @williammartin in https://github.com/cli/cli/pull/11133
Improve help wanted check skipping logic by @BagToad in https://github.com/cli/cli/pull/11135

:dependabot: Dependencies

Bump go to 1.24 by @williammartin in https://github.com/cli/cli/pull/11142
chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4 by @dependabot in https://github.com/cli/cli/pull/11066
chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3 by @dependabot in https://github.com/cli/cli/pull/11092
chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2 by @dependabot in https://github.com/cli/cli/pull/11033
chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by @dependabot in https://github.com/cli/cli/pull/11107
chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2 by @dependabot in https://github.com/cli/cli/pull/11123
chore(deps): bump github.com/google/go-containerregistry from 0.20.3 to 0.20.6 by @dependabot in https://github.com/cli/cli/pull/11120
Bump golangci-lint to v2 by @williammartin in https://github.com/cli/cli/pull/11121

New Contributors

@MagneticNeedle made their first contribution in https://github.com/cli/cli/pull/10935
@laffer1 made their first contribution in https://github.com/cli/cli/pull/10699

Full Changelog: https://github.com/cli/cli/compare/v2.74.1...v2.74.2

docker/buildx (docker/buildx)

`v0.26.1`

Compare Source

Welcome to the v0.26.1 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

CrazyMax
Tõnis Tiigi

Notable Changes

Fix regression when validating compose files with Bake. #3329

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.26.0

`v0.26.0`

Compare Source

Welcome to the v0.26.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

CrazyMax
Tõnis Tiigi
Jonathan A. Sternberg
Sebastiaan van Stijn
Roberto Villarreal
Guillaume Lours
Nicolas De Loof
Samuel Archambault

Notable Changes

Experimental: The initial version of the DAP debugger has been added with a new dap build helper command. The new feature can be tried with the DockerDX VSCode extension. #3235
Bake command now supports pattern-matching target names with wildcards. #3280
history commands will automatically bootstrap the builder. #3300
Add SLSA v1 support to history inspect. #3245
Bake command now supports setting files through environment variable BUILDX_BAKE_FILE. #3242
Bake now ignores unrelated fields when parsing and validating compose files. #3292
Kubernetes driver option buildkit-root-volume-memory to use memory mount for the root volume. #3253
Compose compatibility has been updated to v2.7.1. #3282
Fix possible error from imagetools commands when accessing registries that don't return content length. #3316
Fix duplicated command descriptions from help output. #3298
Fix history inspect attachment to not require an argument. #3264
Fix resolving environment variables from .env file when building compose files with Bake. #3275 #3276 #3322

Dependency Changes

github.com/Masterminds/semver/v3 v3.2.1 -> v3.4.0
github.com/compose-spec/compose-go/v2 v2.6.3 -> 891fce5
github.com/containerd/containerd/v2 v2.1.1 -> v2.1.3
github.com/docker/cli v28.2.2 -> v28.3.2
github.com/docker/docker v28.2.2 -> v28.3.2
github.com/go-viper/mapstructure/v2 v2.0.0 -> v2.3.0
github.com/google/go-dap v0.12.0 new
github.com/moby/buildkit v0.23.0 -> 9b91d20
github.com/santhosh-tekuri/jsonschema/v6 v6.0.1 new
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.56.0 -> v0.60.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.31.0 -> v1.35.0

Previous release can be found at v0.25.0

`v0.25.0`

Compare Source

Welcome to the v0.25.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

Tõnis Tiigi
CrazyMax
Jonathan A. Sternberg
Sebastiaan van Stijn
Roberto Villarreal
ArthurFlag
Guillaume Lours

Notable Changes

Add support for bearer token auth. #3233
Add custom exit codes for internal, resource, and canceled errors in commands. #3214
Bake now supports defining extra-hosts. #3234
Consider typed, value-less variables to have null value in Bake. #3198
Show variable type when using --list=variables with Bake. #3207
Fix keep-storage flag deprecation notice for prune command. #3216
Add support for multiple IPs in extra hosts configuration #3244
Support for updated SLSA V1 provenance in buildx history commands #3245
Add support for RegistryToken configuration in imagetools commands. #3233

Dependency Changes

github.com/containerd/console v1.0.4 -> v1.0.5
github.com/containerd/containerd/api v1.8.0 -> v1.9.0
github.com/containerd/containerd/v2 v2.0.5 -> v2.1.1
github.com/docker/cli v28.1.1 -> v28.2.2
github.com/docker/cli-docs-tool v0.9.0 -> v0.10.0
github.com/docker/docker v28.1.1 -> v28.2.2
github.com/go-openapi/jsonpointer v0.19.6 -> v0.21.0
github.com/go-openapi/swag v0.22.4 -> v0.23.0
github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 -> v2.26.1
github.com/in-toto/in-toto-golang v0.5.0 -> v0.9.0
github.com/moby/buildkit v0.22.0 -> v0.23.0
github.com/secure-systems-lab/go-securesystemslib v0.4.0 -> v0.6.0
github.com/tonistiigi/fsutil 3f76f81 -> 586307a
github.com/tonistiigi/go-csvvalue ddb21b7 -> 030d3b2
go.opentelemetry.io/auto/sdk v1.1.0 new
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 -> v0.60.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 -> v0.60.0
go.opentelemetry.io/otel v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/metric v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/sdk v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/sdk/metric v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/trace v1.31.0 -> v1.35.0
go.opentelemetry.io/proto/otlp v1.3.1 -> v1.5.0
golang.org/x/sync v0.13.0 -> v0.14.0
golang.org/x/sys v0.32.0 -> v0.33.0
google.golang.org/genproto/googleapis/api 324edc3 -> 56aae31
google.golang.org/genproto/googleapis/rpc 324edc3 -> 56aae31
google.golang.org/grpc v1.69.4 -> v1.72.2
google.golang.org/protobuf v1.35.2 -> v1.36.6
gopkg.in/evanphx/json-patch.v4 v4.12.0 new
k8s.io/api v0.31.2 -> v0.32.3
k8s.io/apimachinery v0.31.2 -> v0.32.3
k8s.io/client-go v0.31.2 -> v0.32.3
k8s.io/kube-openapi 70dd376 -> 32ad38e
k8s.io/utils 18e509b -> 3ea5e8c
sigs.k8s.io/json bc3834c -> 9aa6b5e
sigs.k8s.io/structured-merge-diff/v4 v4.4.1 -> v4.4.2

Previous release can be found at v0.24.0

docker/compose (docker/compose)

`v2.39.1`

Compare Source

What's Changed

🔧 Internal

Add info about models usage to OpenTelemetry spans by @glours in https://github.com/docker/compose/pull/13094

⚙️ Dependencies

Bump compose-go to v2.8.1 by @glours in https://github.com/docker/compose/pull/13096

Full Changelog: https://github.com/docker/compose/compare/v2.39.0...v2.39.1

`v2.39.0`

Compare Source

What's Changed

✨ Improvements

Add --since & --until flags to events command by @jarqvi in https://github.com/docker/compose/pull/13030
Feat(os): add FreeBSD support by @atagtm in https://github.com/docker/compose/pull/13036
Add --models flag to config command by @jarqvi in https://github.com/docker/compose/pull/13022
Warn user COMPOSE_BAKE=false is deprecated by @ndeloof in https://github.com/docker/compose/pull/13065
Simpler stop UI by @ndeloof in https://github.com/docker/compose/pull/13064
Introduce build provenance and sbom attributes support by @ndeloof in https://github.com/docker/compose/pull/13067
Show build progress during watch rebuild by @ndeloof in https://github.com/docker/compose/pull/13059

🐛 Fixes

Add dry-run support to bake build by @glours in https://github.com/docker/compose/pull/13042
Keep containers attached on stop to capture termination logs by @ndeloof in https://github.com/docker/compose/pull/13010
Add default compose labels to images built from bake by @glours in https://github.com/docker/compose/pull/13049
Fix report image name in bake result by @principis in https://github.com/docker/compose/pull/13047
Don't run navigation menu if stdin isn't a terminal by @ndeloof in https://github.com/docker/compose/pull/13054
Monitor must watch events even when context is cancelled by @ndeloof in https://github.com/docker/compose/pull/13062
Force plain display mode if stdout isn't a terminal by @ndeloof in https://github.com/docker/compose/pull/13074
Do not pass user id on Windows system as engine is not able to handel it by @glours in https://github.com/docker/compose/pull/13080
Forward git command error to user by @ndeloof in https://github.com/docker/compose/pull/13084
Use output registry when push true and load to docker store if not by @glours in https://github.com/docker/compose/pull/13085

🔧 Internal

Add a space character to separate the timestamp from the log message by @xduugu in https://github.com/docker/compose/pull/13038
Fix the Helm bridge e2e tests after the latest update of the templates by @glours in https://github.com/docker/compose/pull/13053
Introduce monitor to manage containers events and application termination by @ndeloof in https://github.com/docker/compose/pull/12906
Abstract model-cli commands execution with a model (pseudo) API by @ndeloof in https://github.com/docker/compose/pull/13051
Swarm by @ndeloof in https://github.com/docker/compose/pull/13071
Remove uses of moby/errdefs by @thaJeztah in https://github.com/docker/compose/pull/13076
Use local copy of pkg/system.IsAbs by @thaJeztah in https://github.com/docker/compose/pull/13075
Optimize ansiColorCode by replacing fmt.Sprintf with strings.Builder by @suwakei in https://github.com/docker/compose/pull/13091
Eliminate magic number in init functions by @suwakei in https://github.com/docker/compose/pull/13090
Integration of SetAttributes calls by @suwakei in https://github.com/docker/compose/pull/13089

⚙️ Dependencies

Bump engine and cli to v28.3.2 by @ndeloof in https://github.com/docker/compose/pull/13035
Build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 by @dependabot[bot] in https://github.com/docker/compose/pull/13060
Bump compose-go to version v2.8.0 by @glours in https://github.com/docker/compose/pull/13082
Build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @dependabot[bot] in https://github.com/docker/compose/pull/13081
bump buildx to v0.26.1 by @glours in https://github.com/docker/compose/pull/13086

New Contributors

@atagtm made their first contribution in https://github.com/docker/compose/pull/13036
@xduugu made their first contribution in https://github.com/docker/compose/pull/13038
@principis made their first contribution in https://github.com/docker/compose/pull/13047
@suwakei made their first contribution in https://github.com/docker/compose/pull/13091

Full Changelog: https://github.com/docker/compose/compare/v2.38.2...v2.39.0

`v2.38.2`

Compare Source

What's Changed

✨ Improvements

Add --networks flag to config command by @jarqvi in https://github.com/docker/compose/pull/13021

🐛 Fixes

Add a Done event to model progress display by @glours in https://github.com/docker/compose/pull/13008
Fix the way we're checking if the provider metadata are empty or not by @glours in https://github.com/docker/compose/pull/13017
Build: fix service with profile missing secrets by @ndeloof in https://github.com/docker/compose/pull/13023
Fix select dockerignore based on Dockerfile name set from symlink by @ndeloof in https://github.com/docker/compose/pull/13024

🔧 Internal

pkg/compose: remove redundant uses of strslice.StrSlice by @thaJeztah in https://github.com/docker/compose/pull/13002
(reactoring) avoid a global variable by introducing logConsumer decorator by @ndeloof in https://github.com/docker/compose/pull/12945
Chore: fix some minor issues in the comments by @mountdisk in https://github.com/docker/compose/pull/12991
A single place for shell-out command setup by @ndeloof in https://github.com/docker/compose/pull/13007
Add USER_AGENT variable to cmd when shellouting by @glours in https://github.com/docker/compose/pull/13025

⚙️ Dependencies

Bump golang to v1.23.10 by @glours in https://github.com/docker/compose/pull/13004
Bump go-viper/mapstructure to version v2.3.0 by @glours in https://github.com/docker/compose/pull/13005
Build(deps): bump github.com/moby/buildkit from 0.23.1 to 0.23.2 by @dependabot in https://github.com/docker/compose/pull/13009
Build(deps): bump github.com/docker/cli from 28.3.0+incompatible to 28.3.1+incompatible by @dependabot in https://github.com/docker/compose/pull/13012
Build(deps): bump github.com/docker/docker from 28.3.0+incompatible to 28.3.1+incompatible by @dependabot in https://github.com/docker/compose/pull/13011

New Contributors

@mountdisk made their first contribution in https://github.com/docker/compose/pull/12991

Full Changelog: https://github.com/docker/compose/compare/v2.38.1...v2.38.2

`v2.38.1`

Compare Source

What's Changed

What's Changed

✨ Improvements

introduce support for models by @ndeloof in https://github.com/docker/compose/pull/12976
Add volumes command by @leoperegrino in https://github.com/docker/compose/pull/12954
remove publish limitation on bind mount by @glours in https://github.com/docker/compose/pull/12997
mount /var/run/docker.sock for --use-api-socket by @ndeloof in https://github.com/docker/compose/pull/12995

🐛 Fixes

only expose API socket to service asking for it by @ndeloof in https://github.com/docker/compose/pull/12972
check progress default value instead of empty string to use BUILDKIT_PROGRESS env variable value by @glours in https://github.com/docker/compose/pull/12982
exclude provider services from the list of dependencies that Compose should wait for by @glours in https://github.com/docker/compose/pull/12983
don't fail down cmd if services with pre_stop hook already stopped/removed by @glours in https://github.com/docker/compose/pull/12986
Swap to Reader in bake to avoid hangs on output by @nscott in https://github.com/docker/compose/pull/12984
make sure the post_start hooks fails by @glours in https://github.com/docker/compose/pull/12996
remove error message from exec outpout by default by @glours in https://github.com/docker/compose/pull/12992
fix: typos by @hezhizhen in https://github.com/docker/compose/pull/12963
pass project.environment to bake by @ndeloof in https://github.com/docker/compose/pull/12994
fix provider concurrent environment map accesses by @glours in https://github.com/docker/compose/pull/12999
e2e compose run --env by @ndeloof in https://github.com/docker/compose/pull/12967

⚙️ Dependencies

build(deps): bump github.com/docker/cli from 28.2.2+incompatible to 28.3.0+incompatible by @dependabot in https://github.com/docker/compose/pull/12974
build(deps): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.0+incompatible by @dependabot in https://github.com/docker/compose/pull/12975

New Contributors

@nscott made their first contribution in https://github.com/docker/compose/pull/12984
@hezhizhen made their first contribution in https://github.com/docker/compose/pull/12963
@leoperegrino made their first contribution in https://github.com/docker/compose/pull/12954

Full Changelog: https://github.com/docker/compose/compare/v2.37.3...v2.38.0

`v2.37.3`

Compare Source

What's Changed

✨ Improvements

add support for cache_to with bake by @ndeloof in https://github.com/docker/compose/pull/12959

🐛 Fixes

fix bake intergation by @ndeloof in https://github.com/docker/compose/pull/12960
don't create services passed as parameters of run command during dependencies creation process by @glours in https://github.com/docker/compose/pull/12968
inject secrets/config just before container is started by @ndeloof in https://github.com/docker/compose/pull/12970
propagate target docker host set by --host to Bake by @ndeloof in https://github.com/docker/compose/pull/12961

🔧 Internal

pkg/compose: remove uses of ExecOptions.Detach by @thaJeztah in https://github.com/docker/compose/pull/12950

⚙️ Dependencies

build(deps): bump github.com/moby/buildkit from 0.23.0 to 0.23.1 by @dependabot in https://github.com/docker/compose/pull/12964

Full Changelog: https://github.com/docker/compose/compare/v2.37.2...v2.37.3

`v2.37.2`

Compare Source

What's Changed

✨ Improvements

introduce use_api_socket by @ndeloof in https://github.com/docker/compose/pull/12908

🐛 Fixes

restore ContainerName in images --json by @ndeloof in https://github.com/docker/compose/pull/12943
fix panic using w shortcut on project without watch support by @ndeloof in https://github.com/docker/compose/pull/12944

🔧 Internal

move run logic inside backend by @ndeloof in https://github.com/docker/compose/pull/12908

⚙️ Dependencies

bump compose-go to v2.6.5 by @ndeloof in https://github.com/docker/compose/pull/12958
build(deps): bump github.com/containerd/containerd/v2 from 2.1.1 to 2.1.2 by @dependabot in https://github.com/docker/compose/pull/12939

Full Changelog: https://github.com/docker/compose/compare/v2.37.1...v2.37.2

fluxcd/flux2 (fluxcd/flux2)

`v2.6.4`

Compare Source

Highlights

Flux v2.6.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

Fixes:

Fix for SOPS decryption with US Government KMS keys failing with the error:

STS: AssumeRoleWithWebIdentity, https response error\n   StatusCode: 0, RequestID: ,
request send failed, Post\n \"https://sts.arn.amazonaws.com/\": dial tcp:
lookupts.arn.amazonaws.com on 10.100.0.10:53: no such host

Components changelog

kustomize-controller v1.6.1

CLI changed

[release/v2.6.x] Update toolkit components by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5444

Full Changelog: https://github.com/fluxcd/flux2/compare/v2.6.3...v2.6.4

`v2.6.3`

Compare Source

Highlights

Flux v2.6.3 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

Fixes:

Fix for rsa-sha2-512 and rsa-sha2-256 algorithms not being prioritized for ssh-rsa host keys in source-controller, image-automation-controller and Flux CLI bootstrap.

Components changelog

source-controller v1.6.2
image-automation-controller v0.41.2

CLI changed

[release/v2.6.x] Update toolkit components by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5427

Full Changelog: https://github.com/fluxcd/flux2/compare/v2.6.2...v2.6.3

`v2.6.2`

Compare Source

Highlights

Flux v2.6.2 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.

Fixes:

Fix authentication for flux push artifact --provider=azure on Azure DevOps runners.
Fix OIDC authentication for Amazon ECR Public in source-controller and image-reflector-controller.
Fix knownhosts key mismatch regression bug in the Flux CLI, source-controller and image-automation-controller.

Components changelog

source-controller v1.6.1
image-reflector-controller v0.35.2
image-automation-controller v0.41.1

CLI changelog

[release/v2.6.x] fix: Allow Azure CLI calls in flux push artifact --provider azure on DevOps runners by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5396
[release/v2.6.x] Fix knownhosts key mismatch regression bug by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5405
[release/v2.6.x] Update toolkit components by @fluxcdbot in https://github.com/fluxcd/flux2/pull/5410

Full Changelog: https://github.com/fluxcd/flux2/compare/v2.6.1...v2.6.2

gitlab-org/cli (gitlab-org/cli)

`v1.65.0`

Compare Source

Changelog

756cd01fbeedd56821f7d1031299915386f3b4b2: feat(issue): Remove --label and --not-label mutual exclusivity (Oscar Tovar otovar@gitlab.com)
711971abcd8ae89021c9379943a0aed824022390: feat(issue-update): add due-date functionality (Filip Aleksic faleksic@gitlab.com)
301202c4d1a7313e8d5d96236e6f685143cc4007: feat(job artifact): Add --list-paths to print paths (Caleb Hearth caleb@calebhearth.com)
7e032bfa6d2840ddb91825e78067484ba7c9072d: feat(mr): display file and line context for code comments (Charalampos Mitrodimas charmitro@posteo.net)
a852efebd9fbbdb6a0a823f69050313083b5d613: fix(get-token): gracefully handle concurrent token cache writes (Timo Furrer tfurrer@gitlab.com)

`v1.64.0`

Compare Source

Changelog

b43d15b13ac38974b6db27658bbcf9b77f51982a: docs: Add bare explanation of mTLS config (Amy Qualls aqualls@gitlab.com)
f24e02fa923ff162f5f39bdec57abf6725320d05: feat(agent get-token): cache token in local file (Timo Furrer tuxtimo@gmail.com)
8c98d4e927d26aa1d802ad359b16d2bc85f18562: feat(agent): support configurable token expiration duration (Timo Furrer tuxtimo@gmail.com)
4648624328c15c708f0c33c2d0daaaa4c191cb53: feat(release): support uploading release assets to generic package registry (Timo Furrer tuxtimo@gmail.com)
38cec94a87a994fc50af26e1276ae6adb6a891eb: feat: show all configured hosts in interactive login prompt (Markus <10796823-Links2004@users.noreply.gitlab.com>)
910d155e8ba4c15c659fcdca1df48465c155cd64: fix(api): use correct API path for GraphQL requests (Timo Furrer tfurrer@gitlab.com)
15a360409b5a86047b8ef921e481ec6904ca685a: fix(ci run): honor passing --variables (Timo Furrer tfurrer@gitlab.com)
42f62c1928b26d89a3892a317c0eb340e1d12fe3: fix(docker-credential-helper): default config stub fixes (Filip Aleksic faleksic@gitlab.com)
abff07a49057f4f95c6f5a393b05737d39b379a5: refactor(agent get-token): move pat creation into separate function (Timo Furrer tuxtimo@gmail.com)
e134fbb7869fd492315cdd3905fc0e3ff95d38fe: refactor(agent get-token): support cache mode (Timo Furrer tfurrer@gitlab.com)
24624f57132f2e8b9bfad9d71dfb699925a517fd: refactor(agent get-token): use keyring and fallback to fs for token cache (Timo Furrer tfurrer@gitlab.com)
d512caf5fb0d6db4ae572e64d3b726841f55f466: refactor(agent update-kubeconfig): remove unnecessary use of persistent flags (Timo Furrer tuxtimo@gmail.com)
81eac93b627d5f2ae01db8699c894e77ea635f75: refactor(config): remove unused UnsetHost method from Config (Timo Furrer tfurrer@gitlab.com)
30604590e35ef36de72666410bfaca465934a24b: refactor(get-token): us os.UserCacheDir instead of own version (Timo Furrer tfurrer@gitlab.com)
6e8b0dacdc8b1fb7708c593872545c5f618d84f6: refactor: factory ApiClient method does not ned to rely on config (Timo Furrer tfurrer@gitlab.com)
a21f69fbf08a454480eccf431709a437ac847c49: refactor: use AutoMerge (Timo Furrer tfurrer@gitlab.com)

`v1.63.0`

Compare Source

Changelog

84ba16323e264d17edfec4e97b4d2fcb69472154: feat(hidden-variables): List and set hidden variables (Filip Aleksic faleksic@gitlab.com)
a2d139876c5380178ca23889bed5b97a5e1b2f68: fix(docker-credential-helper): init cred helpers if empty (Oscar Tovar otovar@gitlab.com)
50964d36a8fc0e10b123e028d840198f33dfd8e8: refactor: do not use SSH URL translator for non-SSH URLs (Timo Furrer tuxtimo@gmail.com)
1e7f0d28090d721de460b9c44c11c4b159a2047a: refactor: remove unused url translator function (Timo Furrer tuxtimo@gmail.com)

`v1.62.0`

Compare Source

Changelog

a448c734e7de05c38283676d8bf749a0d581d859: ci: upgrade golangci-lint to v2 (Oleksandr Redko oleksandr.red+gitlab@gmail.com)
333a434f9a315a21ab5e5ffee7dbcc178f7aebbc: feat(cluster/graph): better error reporting (Mikhail Mazurskiy mmazurskiy@gitlab.com)
f46744d8bb7dac752168cdea059a6b354cf3311a: feat(cluster/graph): use struct for arc attributes (Mikhail Mazurskiy mmazurskiy@gitlab.com)
ef14951c63e7195d48881e4fbe6959f0454d188a: feat(var): add option to list instance vars (Sebastian Gumprich sebastian.gumprich@hzd.hessen.de)
e7f396680b1d4f857e5018e943b60da334c25da7: feat: add docker-credential-helper (Oscar Tovar otovar@gitlab.com)
bf2eb73b986d23eb7f33e8e3aa48e685a7124418: feat: allow (un)archiving repo with repo update --archive (Jordan Barrett jordan.mitchell.barrett@gmail.com)
7c4cf14ab88546134de660cf720e708d56b69fb7: fix: glab auth login to work with mTLS by using api.NewClientWithCfg instead of native HTTPClient (André Düwel <duewel1982@googlemail.com>)
2a4444e37883c6f7dd2b7bc516c718ac98930086: fix: prevent crash when it is not possible to get client for telemtry (Timo Furrer tuxtimo@gmail.com)
d8d90c0d83ad1bb0f70f598ec8f774a2f394604d: fix: reflection panic when using survey with release create (Timo Furrer tfurrer@gitlab.com)
313f222f50eab102e006dd4cfa89f68f797dec2b: refactor: add allowInsecure flag to tlsConfig func (Timo Furrer tuxtimo@gmail.com)
28b9830f47a72e5821a54646852ab932ae0de633: refactor: add depguard rule that no testing package is used in non-testing code (Timo Furrer tuxtimo@gmail.com)
d4bad0f492e61f2e458f719d49c3449bf9e573ec: refactor: always use factory to create client from commands (Timo Furrer tuxtimo@gmail.com)
8b03a80ffe201ec4f589ddc5cecab12ab1d34ac1: refactor: cache base repo (Timo Furrer tfurrer@gitlab.com)
c6eeafc8cb13d7b7fa50a6e310fa3d79ff7cb01e: refactor: concentrate debug mode setup in one place (Timo Furrer tuxtimo@gmail.com)
54dd658cbfb90553206f8e8f023242ce5e62f66d: refactor: configure iostreams from config in factory func (Timo Furrer tuxtimo@gmail.com)
bc98a6fc34e4d2efddc6e669aba09872edd7168c: refactor: create config before factory to improve factory immutability (Timo Furrer tuxtimo@gmail.com)
0a75c970dee73479c2c81c74868719eb8389c5e7: refactor: directly create factory with test config instead of stubbing (Timo Furrer tuxtimo@gmail.com)
6d2077bf75a95e795a6efb8a72792a57aa0dc4c9: refactor: do not stub factory when no required (Timo Furrer tuxtimo@gmail.com)
4f5a2e174941e5dccba0e17f3dc6c643fcdb2a39: refactor: do not used named returns unless it makes sense (Timo Furrer tuxtimo@gmail.com)
64d8dd3696e371bde4a3da1209e301d79e912194: refactor: do not write test key files if they already exist (Timo Furrer tuxtimo@gmail.com)
4ced0cd7f0f1f2fa24755b0811cde33773903d27: refactor: exclusively use cmdtest.TestIOStreams factory func in tests (Timo Furrer tuxtimo@gmail.com)
c77515f24011820d3a3bca1d50d16cebe47dd61b: refactor: improve structure of API client constructor (Timo Furrer tuxtimo@gmail.com)
fe371ebb6e9d067cc907105e0bff837ee7543b04: refactor: initialize config exactly once (Timo Furrer tuxtimo@gmail.com)
b001bc30544142afa43eb9e33a5493f9f6647f22: refactor: introduce ApiClient factory function (Timo Furrer tuxtimo@gmail.com)
37e19c9836709cde8c5801e57536005bb3fb08df: refactor: introduce build info to factory and use consistently in commands (Timo Furrer tuxtimo@gmail.com)
39b92469eca8c039728d1b101993b006d17357ca: refactor: introduce client option funcs to replace various client factory functions (Timo Furrer tuxtimo@gmail.com)
678ad59815867133fd3807b35ea979dad071547e: refactor: introduce http client client option funcs (Timo Furrer tuxtimo@gmail.com)
76dca29aea4c46beb2242588cde43e9bd71c4a5f: refactor: introduce proper factory for iostreams (Timo Furrer tuxtimo@gmail.com)
2d2da6a5984aac53497522d8f43c774c11654ee4: refactor: make api client auth source available for OAuth2 refresh workflow (Timo Furrer tuxtimo@gmail.com)
90ee8c1477735e77584347538d287b622efbee4d: refactor: make api client initialization more flexible and more maintainable (Timo Furrer tuxtimo@gmail.com)
44543d8e3e45f3a9b8a30922236461a24d32d952: refactor: move API test client to cmdtest package (Timo Furrer tuxtimo@gmail.com)
a362220f8439194889be9f5843b5f1ee79556055: refactor: move api package into internal/ (Timo Furrer tuxtimo@gmail.com)
7553aa20176acc50c103d8e7ae069fe7f2a5226e: refactor: move cmdtest package into internal/testing (Timo Furrer tuxtimo@gmail.com)
69aa6b141d53d0d982c4d70eb23a4a796e14d77a: refactor: move cmdutils package from commands/ to internal/ directly (Timo Furrer tuxtimo@gmail.com)
54397893032bb5158b093719d8456c20a2dd403d: refactor: move commands/ under internal/ (Timo Furrer tuxtimo@gmail.com)
b6b7b4bede0020bc483bd793be80b1bb695d5dc7: refactor: move commands/flag into cmdutils (Timo Furrer tuxtimo@gmail.com)
4da48cc3aacaf0280e17100c14dc507a5dc39d46: refactor: move global API functions that are overridden in tests to a local scope (Timo Furrer tuxtimo@gmail.com)
10e736dcbac98a0b84d103bfc358dd34b874f5c7: refactor: move hooks package into telemetry files in main pkg (Timo Furrer tuxtimo@gmail.com)
83528f34781f62dab894b95317b8ce830c3af23e: refactor: move httpmock to testing/ and introduce testing/gitmock (Timo Furrer tuxtimo@gmail.com)
52e1543abde831c249b603fecb07869913156003: refactor: move packages from pkg/ under internal/ (Timo Furrer tuxtimo@gmail.com)
777a1e339668ebb6620874efafc73e038abaa80e: refactor: move survey core setup out of main function (Timo Furrer tuxtimo@gmail.com)
b15480126feb76c91550482a7b04cb4b3a05d356: refactor: only depend on cmdutils from commands (Timo Furrer tuxtimo@gmail.com)
417b2d6e8d1438c649dc686353f3e18f58d92776: refactor: reduce down to single factory creation function (Timo Furrer tuxtimo@gmail.com)
842c1ccfb6267c4bc82ef348f1f152971b3f3d21: refactor: remove IOStreams globals (Timo Furrer tfurrer@gitlab.com)
1859d07148917b369c5853e90169887efdba62fd: refactor: remove condition httpclient nil check in api client (Timo Furrer tuxtimo@gmail.com)
590a50b36b9face0885d108fd71da026789146a9: refactor: remove custom Eq test helper (Timo Furrer tuxtimo@gmail.com)
371c87801cbaf3bb18bd0e38125c2782d93b45b3: refactor: remove deadcode (Timo Furrer tuxtimo@gmail.com)
08420152ee67e4e42114fb0468820ed399bd0d9a: refactor: remove exotic FirstLine test helper function (Timo Furrer tuxtimo@gmail.com)
ca286bd2f08feb53f35df985afbf8545b511ea41: refactor: remove global apiClient instance (Timo Furrer tuxtimo@gmail.com)
1957124bdd90254ab643d631e96742a393bd4dbc: refactor: remove global build info and introduce user agent to factories (Timo Furrer tuxtimo@gmail.com)
810049c1eaa9502a30b1b52d4dd0720d1ed539b6: refactor: remove global debug variable (Timo Furrer tuxtimo@gmail.com)
ff97fcfd0d64d923577be48fd95c412c44550eef: refactor: remove global default hostname and protocol variables (Timo Furrer tuxtimo@gmail.com)
9ad7929f54eba969067599388eaa64c9a89639f6: refactor: remove global terminal-related variables (Timo Furrer tuxtimo@gmail.com)
4523d4a9a6d89ae718e47bf02372aa6c9111addc: refactor: remove globals in ci lint command (Timo Furrer tuxtimo@gmail.com)
754db246174ddf9ad4ebc5cf89f261e7aa0a45e2: refactor: remove globals in ci run command (Timo Furrer tuxtimo@gmail.com)
4182c8a013ea2bddb190065b256e75599f3f2260: refactor: remove globals in create issue board command (Timo Furrer tuxtimo@gmail.com)
e273d04e343c2bc3135249bf10d1f801174910a1: refactor: remove globals in issue board view command (Timo Furrer tuxtimo@gmail.com)
03f5355a1f5451316752ec62ec122aa1aa22ebe5: refactor: remove globals in variable create command (Timo Furrer tuxtimo@gmail.com)
04f0444882f830e08c4ea20556cb7ff3fb1abc23: refactor: remove integration test that doesn't make sense (Timo Furrer tuxtimo@gmail.com)
3dbf0933fcd83b8e4ec460d6e339371893fd1516: refactor: remove introduce HTTP client override functionality (Timo Furrer tuxtimo@gmail.com)
a30a2a27609017d5cc86aafbf542f60914cbbeb0: refactor: remove manual RepoOverride from commands (Timo Furrer tuxtimo@gmail.com)
86013b73d1073a6f66f75b21c673485d97e857c9: refactor: remove manual RepoOverride from integration tests (Timo Furrer tuxtimo@gmail.com)
b06ced1bc5fd56766d31f8a9c24dde9d93a70f74: refactor: remove obsolete client refresh functionality (Timo Furrer tuxtimo@gmail.com)
0d207f865042cd9f134581a5c99e68cac4331841: refactor: remove unneccessary type conversions (Timo Furrer tuxtimo@gmail.com)
33ad900562aa1bb1e5def66638f5a22b3586ff55: refactor: remove unneccessary use of global apiClient (Timo Furrer tuxtimo@gmail.com)
08798cf9ef9e4388f98c8a43f831fbbe08224824: refactor: remove unnecessary if err check when creating new client (Timo Furrer tuxtimo@gmail.com)
83921118b22e9943d9bc8c2a3f573e805dc16e08: refactor: remove unnecessary lazy initalization of GitLab Client in API client (Timo Furrer tuxtimo@gmail.com)
d401a8d494c73d0e599c548f842e266ffb663d04: refactor: remove unused BaseURL method in API client (Timo Furrer tuxtimo@gmail.com)
77d05bc9e5c54b46a7362c06b5c5ba8036af9c03: refactor: remove unused cmdtest.InitFactory (Timo Furrer tuxtimo@gmail.com)
163ea6d20cc485da6f3863bcdd66f93de05549d0: refactor: remove unused git_mock package (Timo Furrer tuxtimo@gmail.com)
223e5b82a43adb7024362396916e3743b348f3bf: refactor: remove unused parameters (Timo Furrer tuxtimo@gmail.com)
a54f3ede2773580c8295f94be98f524e28c9e0c8: refactor: remove unused protocol parameter for api.NewClientWithCfg (Timo Furrer tuxtimo@gmail.com)
f1037d319b43037e4b67ef516b2c9ad00b46d652: refactor: rename MustTestClient to NewTestApiClient (Timo Furrer tuxtimo@gmail.com)
0974041184b843e40958a57b6cb35c963537bacd: refactor: rename api.NewClientWithCfg to api.NewClientFromConfig (Timo Furrer tuxtimo@gmail.com)
30bfbf796540345d71bf4183b27a76bbe8a592ba: refactor: rename oAuthClientID to oauthClientID (Timo Furrer tuxtimo@gmail.com)
2a1bcab63c12a7b18d4a15040cb8186640940579: refactor: rename telemtry hook setup function (Timo Furrer tuxtimo@gmail.com)
6e9f8a8de73816b88e08ace051c8f8f4aef6e2bf: refactor: speed up dpop generate test by pre-generating test data (Timo Furrer tuxtimo@gmail.com)
d469a715c83a83a872fae0cd68a1c646b89ff3af: refactor: unexport client protocol (Timo Furrer tuxtimo@gmail.com)
ae65148f952f15bbb076ff147e17dbb66a20b93d: refactor: unexport internal 256 color support check function (Timo Furrer tuxtimo@gmail.com)
eee9503fec92642cf9df0f6463217063a31f4c1c: refactor: unexport internal gitlab client (Timo Furrer tuxtimo@gmail.com)
c9e05df7c1bbf6313d9104d6f9518f87b2da70db: refactor: unexport private client factory functions (Timo Furrer tuxtimo@gmail.com)
078f45b901f073c45dc15b943d9bf18ce9a6492b: refactor: update check from main function (Timo Furrer tuxtimo@gmail.com)
96b814eb5aad35c2c25c72c593953b05d2445d2d: refactor: use ExecuteCommand in favor of RunCommnad (Timo Furrer tuxtimo@gmail.com)
b7aee747a428ce914b1ee3463d431f240941067a: refactor: use GitLab client-go directly in some ci commands (Timo Furrer tuxtimo@gmail.com)
98e5a2dcede68f9aac4b38b1fd27fe646a4b9e26: refactor: use GitLab client-go directly in some commands (Timo Furrer tuxtimo@gmail.com)
ca42fdbaa34ace19fc1ccc7ac5de16533147cdad: refactor: use GitLab client-go mocks instead of HTTP mocks in auth commands (Timo Furrer tuxtimo@gmail.com)
ab813990253e24ec4fcace96665fb2635666d880: refactor: use GitLab client-go mocks instead of HTTP mocks in changelog commands (Timo Furrer tuxtimo@gmail.com)
bb023561dbb83f1ca73479f6baac9de6f6cf4e0a: refactor: use NewTestFactory in SetupCmdTest (Timo Furrer tuxtimo@gmail.com)
3e042d23a6f160f9124c6fd69dbd54768f88d02b: refactor: use NewTestFactory instead of InitFactory in command tests (Timo Furrer tuxtimo@gmail.com)
7f3cffab4ecfc8cea4ff7485c512a4f43be93f9f: refactor: use NewTestFactory instead of manually constructing test factory (Timo Furrer tuxtimo@gmail.com)
35ac282bbc4db3c971a330b56fc849c72f9c5054: refactor: use NewTestFactory with NewTestApiClient to remove TestClient (Timo Furrer tuxtimo@gmail.com)
4178ba4dea16966d6cace4218e138c4ec36a26b0: refactor: use context for client HTTPRequest functions (Timo Furrer tuxtimo@gmail.com)
56485280dbe214cffab73ce2dac4797fc37e34c3: refactor: use context in OAuth2 authorization flow (Timo Furrer tuxtimo@gmail.com)
a84d90ebadcdb8ade4b958b1e4422a09ebfd2533: refactor: use oauth2 package from GitLab client-go (Timo Furrer tuxtimo@gmail.com)
4c17400b33f2af57d90f65a52e766e9403939180: refactor: use prod factory directly in integration tests (Timo Furrer tuxtimo@gmail.com)
b39fb03f786038371b863a88da544552417f47fb: refactor: use tagged switch instead of if to set iostreams prompt (Timo Furrer tuxtimo@gmail.com)
68346f5515dfc79fdf99321ab2c4fb020d5af18c: refactor: use x/oauth2 for authorization flow (Timo Furrer tuxtimo@gmail.com)
bdf44660545723e656cdbc3d765f62278bd7a29e: refactor: use x/oauth2 for refreshing token (Timo Furrer tuxtimo@gmail.com)
0d02dd9ba8fb0463b0e608cb6119fd0fb673fdd3: refactor: use x/oauth2 instead of custom OAuth2 types (Timo Furrer tuxtimo@gmail.com)

`v1.61.0`

Compare Source

Changelog

e1b0256c62891dc5fcb152aab1f98d4f7b3d2d75: feat(cluster/graph): allow selecting common resources in common groups (Mikhail Mazurskiy mmazurskiy@gitlab.com)
a5326a224cb6c0c10c02ffbf5cdba78e563ca735: feat(cluster/graph): allow selecting resources by name (Mikhail Mazurskiy mmazurskiy@gitlab.com)
a09fa5a6ece1089e9d89f63ba9039c5056cc1c8b: feat(cluster/graph): enhance docs (Mikhail Mazurskiy mmazurskiy@gitlab.com)
2405e305709ebeb75b1fddbf32db43b4e8f50ce9: feat(cluster/graph): extra docs on CEL (Mikhail Mazurskiy mmazurskiy@gitlab.com)
4e2999ba43716060386a31c95f6b4334b8232d13: feat(cluster/graph): support logging watch request (Mikhail Mazurskiy mmazurskiy@gitlab.com)
f229c7a7feb47a7148944cd1b910f404eb8acf52: feat(cluster/graph): support selecting namespaces (Mikhail Mazurskiy mmazurskiy@gitlab.com)
ad5110fb9c42b6926f55e90ac908d66280b71105: feat: add 'repo update' command (Jordan Barrett jordan.mitchell.barrett@gmail.com)
08c226aa9dc2e2579156a566b88d72bc18c6ca42: feat: command for ci run mr (Artur Mostowski artur.mostowski@protonmail.com)
f9cc7e8d545fc9a172d11b8b5ab1a0da8b2263da: fix(cluster/graph): remove print (Mikhail Mazurskiy mmazurskiy@gitlab.com)
d611df8bcc6abbd7f95d85d62f95f2e110004977: refactor(cluster/graph): rework default query construction (Mikhail Mazurskiy mmazurskiy@gitlab.com)
c06c5551c56970466ec7d301bcef2d8cc85c10dd: refactor: align more commands with common structure (Timo Furrer tuxtimo@gmail.com)
972473006296917030867acecdca5ce2fb0dc48c: refactor: first pass of aligning command structure (Timo Furrer tuxtimo@gmail.com)
669a8eceb69c2300535c36a9d9640c9c146cce33: refactor: remove unnecessary copying of test var (Timo Furrer tuxtimo@gmail.com)
432c0046d59849aa20cd1718e20944cae454df82: refactor: remove unused option struct fields (Timo Furrer tuxtimo@gmail.com)
e70f188c325db39ad96b6d213fd1dfc07e619c9c: refactor: remove unused runE / runF cmd args (Timo Furrer tfurrer@gitlab.com)

`v1.60.2`

Compare Source

Changelog

efac28bf1424cb9788b08297e7bc3748eb02b64b: refactor: custom factory for docs generation (Mikhail Mazurskiy mmazurskiy@gitlab.com)
26b34a9c4a587e579c38d4e0c6bb9db529e1f287: refactor: mutate io before passing (Mikhail Mazurskiy mmazurskiy@gitlab.com)
e69a023c64c45f303c25e7e02cd5afa4add7e54c: refactor: new factory interface (Mikhail Mazurskiy mmazurskiy@gitlab.com)
8588d1fd19db93c1cc8bba9fa9e71f5e0b6d3ced: refactor: pass IO streams to factory constructor (Mikhail Mazurskiy mmazurskiy@gitlab.com)
e694a2282b5c2a8789d50c0f7f86486144f0c365: refactor: remove error handling from RepoOverride() calls (Mikhail Mazurskiy mmazurskiy@gitlab.com)
a43651691361011c0af7579d9179c9a317abc221: refactor: rework test factory (Mikhail Mazurskiy mmazurskiy@gitlab.com)
3884900837d5646f9efda2b5268098203ed580f3: refactor: use IO function (Mikhail Mazurskiy mmazurskiy@gitlab.com)
3271f14415edc85a2fbcc5634deb484771c84514: refactor: use stubs in the test factory (Mikhail Mazurskiy mmazurskiy@gitlab.com)
9e91e031c777be8148fd57b52a6e367263e48362: refactor: use the interface (Mikhail Mazurskiy mmazurskiy@gitlab.com)
fee805842ec67c0352b4c7cd5922262377270b4f: refactor: use the test factory (Mikhail Mazurskiy mmazurskiy@gitlab.com)

`v1.60.1`

Compare Source

Changelog

086ee5aff2182ba74829ed1131a763a0cfca971f: fix: fix regression from 6fbcfab310b545cdd1cd4ca20918b5862be34255 (Mikhail Mazurskiy mmazurskiy@gitlab.com)

`v1.60.0`

Compare Source

Changelog

ebbefd1ffb94f3b5b0a9ac691c880c1073001ec3: docs(workspace): update doc for using workspace with cli project (Zhaochen Li zli@gitlab.com)
350f53a0522457b476f02e06ac6e2280a8593dda: feat: 🔧 Add helm-repository-address to cluster agent bootstrap command (Lenain lenaing@gmail.com)
2ec5967af9a90628d0dc9fc1dd4bbd5bdcf2db84: feat: cluster graph command (Mikhail Mazurskiy mmazurskiy@gitlab.com)
0fbc121e9397ee5e0f3d50c63d8669b98e64fd9c: fix(agent): use UTC when calculating token expiration (John Long john@johnsdomain.com)
01f9858ecb11aadeebb08652e4e4a8e19d8e6b4d: fix(cluster/agent): propagate repo host and name (Mikhail Mazurskiy mmazurskiy@gitlab.com)
978c9789524d7c75e282fdeba7726ec5c0893a88: fix(deps): drop direct golang.org/x/exp dependency (Mikhail Mazurskiy mmazurskiy@gitlab.com)
e168478232a476114450c6563ac32e463a02ccea: fix: Improving user feedback when no jobs exist in a pipeline (David MOREAU david.moreau@thalesaleniaspace.com)
7e9769efc1bd1ec88dbaac00fa75f856ba113c99: fix: add missing newline (Mikhail Mazurskiy mmazurskiy@gitlab.com)
5dced1975c889a90788f903811b78e17648f3cc3: fix: correctly use t.Setenv() in tests (Mikhail Mazurskiy mmazurskiy@gitlab.com)
7509b3357049d1999d3f5466f9ef47db37b7e9b9: fix: log errors to StdErr (Mikhail Mazurskiy mmazurskiy@gitlab.com)
c2d845a2175276d96874ac2868fddb692ee67e8b: refactor(agent bootstrap): use options struct (Timo Furrer tuxtimo@gmail.com)
700ec0a141a29c3795dffbbeb8b4a63ec31da229: refactor(cluster agent): mock GitLab API in get token cmd tests (Timo Furrer tuxtimo@gmail.com)
561902cb7a719c0da7b899e7bb0dfd7908ada666: refactor(cluster agent): use options struct (Timo Furrer tuxtimo@gmail.com)
fc517d9df2e4ee213c8f1e05d4187bee28654be7: refactor(cluster graph): unexport run method (Timo Furrer tuxtimo@gmail.com)
61ca4b2a2113cbddf59c38e1adff82eab9cb2af2: refactor: Add thread safety for factory (Gary Holtz gholtz@gitlab.com)
208461db8ed13fff910f18cb46189880e35da159: refactor: cleanup cluster agent update-kubeconfig (Mikhail Mazurskiy mmazurskiy@gitlab.com)
6fbcfab310b545cdd1cd4ca20918b5862be34255: refactor: do not use global OverrideAPIProtocol, set it on local client (Mikhail Mazurskiy mmazurskiy@gitlab.com)
516fbbbe7f72e4c16ee783e48abfe47a7a7be874: refactor: remove globals from tests (Mikhail Mazurskiy mmazurskiy@gitlab.com)
b99d44694a0a31644a356279278b4251687a4d1d: refactor: remove some of the global state, part 2 (Mikhail Mazurskiy mmazurskiy@gitlab.com)
40f835f616e851270305d2e730be3f381dfef7d8: refactor: remove unused fucntions (Mikhail Mazurskiy mmazurskiy@gitlab.com)

helm/helm (helm/helm)

`v3.18.4`: Helm v3.18.4

Compare Source

Helm v3.18.4 is a security release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing MRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Security Advisories

GHSA-557j-xg8c-q2mm: Chart Dependency Updating With Malicious Chart.yaml Content And Symlink

Installation and Upgrading

Download Helm v3.18.4. The common platform binaries are here:

MacOS amd64 (checksum / 860a7238285b44b5dc7b3c4dad6194316885d7015d77c34e23177e0e9554af8f)
MacOS arm64 (checksum / 041849741550b20710d7ad0956e805ebd960b483fe978864f8e7fdd03ca84ec8)
Linux amd64 (checksum / f8180838c23d7c7d797b208861fecb591d9ce1690d8704ed1e4cb8e2add966c1)
Linux arm (checksum / 34ea88aef15fd822e839da262176a36e865bb9cfdb89b1f723811c0cc527f981)
Linux arm64 (checksum / c0a45e67eef0c7416a8a8c9e9d5d2d30d70e4f4d3f7bea5de28241fffa8f3b89)
Linux i386 (checksum / 75c2d9858725a5907faf8f19d9fb21c0263e4cb864d27d6df8809f96f147d3c0)
Linux ppc64le (checksum / dbd74c59e7710f26e058596723abbf73662b553e01f40dfb08508ffffaeb7b81)
Linux s390x (checksum / c8bafb34bcebd53494f0223239977e1ff7b487e714598a5843a0cb1788e20075)
Linux riscv64 (checksum / f67f39104c7e695cbba04dc3b4507a80a034ce9e5ccbe55c84e91b1553b787bd)
Windows amd64 (checksum / 0af12a2233d71ef4207db1eabbf103b554631206ed5b2b34fc56b73a52596888)
Windows arm64 (checksum / de6bc8fcffeb041f524a92c6026ea22ef6f939118a30e6bb8b996b77a38486b1)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

3.18.5 is the next patch release and will be on August 13, 2025
3.19.0 is the next minor release and will be on September 11, 2025

Changelog

Disabling linter due to unknown issue f20a4ad (Matt Farina)
build(deps): bump the k8s-io group with 7 updates 563b094 (dependabot[bot])
Updating link handling 00de613 (Matt Farina)

`v3.18.3`: Helm 3.18.3

Compare Source

Helm v3.18.3 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing MRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.3. The common platform binaries are here:

MacOS amd64 (checksum / d186851d40b1999c5d75696bc0b754e4d29e860c8d0cf4c132ac1b1940c5cffc)
MacOS arm64 (checksum / 3fe3e9739ab3c75d88bfe13e464a79a2a7a804fc692c3258fa6a9d185d53e377)
Linux amd64 (checksum / 6ec85f306dd8fe9eb05c61ba4593182b2afcfefb52f21add3fe043ebbdc48e39)
Linux arm (checksum / 5ec62879f57d6acc0436440c88459d2a5c8de233273e73ff6498d79fd2d92653)
Linux arm64 (checksum / 3382ebdc6d6e027371551a63fc6e0a3073a1aec1061e346692932da61cfd8d24)
Linux i386 (checksum / 22d7bad5c6012729e550e09d0b719336ea98c9c7207730456d152f32124609af)
Linux ppc64le (checksum / ca5ab0bb205488276095881f04b72bfed5c0ddb92f715940dde6a7ccae72818c)
Linux s390x (checksum / be261f040b59c04ad4f1ce6fc2f976e500167475cadb468bf78cb9772300fb5d)
Linux riscv64 (checksum / 1f87dab39ed599af463abba2c8b2d4c625cfcbc2f2010da2c9c47db017b1c2ca)
Windows amd64 (checksum / 4cb9185cd7b84395853c04c84c4524a6b794cab07211cedc2e36839f53d8e26d)
Windows arm64 (checksum / 7e83d901af47ca804d99d2eb679b4622fdfe1b5b06b15550f5a432a0e4591bb8)

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

What's Next

3.18.4 is the next patch release and will be on July 09, 2025
3.19.0 is the next minor release and will be on September 11, 2025

Changelog

build(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 6838ebc (dependabot[bot])
fix: user username password for login 5b9e2f6 (Terry Howe)
Update pkg/registry/transport.go 2782412 (Terry Howe)
Update pkg/registry/transport.go e66cf6a (Terry Howe)
fix: add debug logging to oci transport 191f05c (Terry Howe)

kubernetes-sigs/kustomize (kubernetes-sigs/kustomize)

`v5.7.1`

Compare Source

This release introduces code to replace the shlex library used for parsing arguments in the exec plugin. If any existing manifests become corrupted, please file an issue. discussion: https://github.com/kubernetes/kubernetes/pull/132593#discussion_r2178116543

Dependencies

#5943: drop shlex dependency

Chore

#5948: Update kyaml to v0.20.1 #5949: Update cmd/config to v0.20.1 #5950: Update api to v0.20.1

`v5.7.0`

Compare Source

Feature

https://github.com/kubernetes-sigs/kustomize/pull/5630: Add static value source for replacement https://github.com/kubernetes-sigs/kustomize/pull/5921: feat: Add images suport for Image Volumes https://github.com/kubernetes-sigs/kustomize/pull/5771: fix: Allow patches with empty files with multiple newlines or comments https://github.com/kubernetes-sigs/kustomize/pull/5865: feat(helm): allow the use of devel alias for helmcharts

fix

https://github.com/kubernetes-sigs/kustomize/pull/5846: fix: Get version from the BuildInfo.Main.Version if not found in deps and build flag https://github.com/kubernetes-sigs/kustomize/pull/5859: fix: Don't panic on multiple $patch: delete strategic merge patches in a single patch file https://github.com/kubernetes-sigs/kustomize/pull/5877: fix: make private one field in replacements transformer struct that had a missing JSON tag

Dependencies

#5847: replace deplecated package github.com/google/shlex with github.com/carapace-sh/carapace-shlex #5873: Bump to github.com/spf13/viper v1.20.0 #5931: Drop usage of forked copies of goyaml.v2 and goyaml.v3

chore

https://github.com/kubernetes-sigs/kustomize/pull/5882: Set Git messages to English for TestRemoteLoad_LocalProtocol #5934: Update kyaml to v0.20.0 #5935: Update cmd/config to v0.20.0 #5936: Update api to v0.20.0

mikefarah/yq (mikefarah/yq)

`v4.47.1`: - Merge Anchor fixes (with flag)

Compare Source

Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes
- Fixed panic for syntax error when creating a map #2423
- Bumped dependencies

`v4.46.1`: - INI support + bug fixes

Compare Source

Added INI support
- Fixed 'add' operator when piped in with no data #2378, #2383, #2384
- Fixed delete after slice problem (bad node path) #2387 Thanks @antoinedeschenes
- Fixed yq small build Thanks @imzue
- Switched to YAML org supported go-yaml!
- Bumped dependencies

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Jul 31, 2025 by Guilherme Carraro Martins

Update All Dependencies

Release Notes

v2025.7.0: CLI v2025.7.0

v2025.6.1: CLI v2025.6.1

v2025.6.0: CLI v2025.6.0

v2.76.2: GitHub CLI 2.76.2

gh pr create regression fix

What's Changed

🐛 Fixes

📚 Docs & Chores

v2.76.1: GitHub CLI 2.76.1

gh pr create regression fix

What's Changed

🐛 Fixes

📚 Docs & Chores

v2.76.0: GitHub CLI 2.76.0

:copilot: Copilot Coding Agent Support

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

v2.75.1: GitHub CLI 2.75.1

What's Changed

🐛 Fixes

📚 Docs & Chores

:dependabot: Dependencies

New Contributors

v2.75.0: GitHub CLI 2.75.0

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

:dependabot: Dependencies

New Contributors

v2.74.2: GitHub CLI 2.74.2

What's Changed

🐛 Fixes

📚 Docs & Chores

:dependabot: Dependencies

New Contributors

Contributors

Notable Changes

Dependency Changes

Contributors

Notable Changes

Dependency Changes

Contributors

Notable Changes

Dependency Changes

What's Changed

What's Changed

✨ Improvements

🐛 Fixes

🔧 Internal

⚙️ Dependencies

New Contributors

What's Changed

✨ Improvements

🐛 Fixes

🔧 Internal

⚙️ Dependencies

New Contributors

What's Changed

✨ Improvements

⚙️ Dependencies

What's Changed

✨ Improvements

🐛 Fixes

⚙️ Dependencies

New Contributors

What's Changed

✨ Improvements

🐛 Fixes

🔧 Internal

⚙️ Dependencies

What's Changed

✨ Improvements

🐛 Fixes

🔧 Internal

⚙️ Dependencies

`v2025.7.0`: CLI v2025.7.0

`v2025.6.1`: CLI v2025.6.1

`v2025.6.0`: CLI v2025.6.0

`v2.76.2`: GitHub CLI 2.76.2

`gh pr create` regression fix

`v2.76.1`: GitHub CLI 2.76.1

`gh pr create` regression fix

`v2.76.0`: GitHub CLI 2.76.0

`v2.75.1`: GitHub CLI 2.75.1

`v2.75.0`: GitHub CLI 2.75.0

`v2.74.2`: GitHub CLI 2.74.2

`v3.18.4`: Helm v3.18.4

`v3.18.3`: Helm 3.18.3

`v4.47.1`: - Merge Anchor fixes (with flag)

`v4.46.1`: - INI support + bug fixes