Skip to content

Release v1.17.1#837

Merged
DavidS-ovm merged 8 commits intomainfrom
copybara/v1.17.1
Mar 16, 2026
Merged

Release v1.17.1#837
DavidS-ovm merged 8 commits intomainfrom
copybara/v1.17.1

Conversation

@github-actions
Copy link

@github-actions github-actions bot commented Mar 16, 2026

Copybara Sync - Release v1.17.1

This PR was automatically created by Copybara, syncing changes from the overmindtech/workspace monorepo.

Original author: David Schmitt (david.schmitt@overmind.tech)

What happens when this PR is merged?

  1. The tag-on-merge workflow will automatically create the v1.17.1 tag on main
  2. This tag will trigger the release workflow, which will:
    • Run tests
    • Build and publish release binaries via GoReleaser
    • Upload packages to Cloudsmith

Review Checklist

  • Changes look correct and match the expected monorepo sync
  • Tests pass (see CI checks below)

renovate bot and others added 8 commits March 16, 2026 15:10
… 84a4fc4 (#4253)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `a57be14` → `84a4fc4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - "before 10am on friday" in timezone
Europe/London, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ29sYW5nIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 50ce4a254bd6337b89ba92665510975f7683ae17
<!-- CURSOR_AGENT_PR_BODY_BEGIN -->
<!-- One very short sentence on the WHAT and WHY of the PR. E.g. "Remove
pathHash attribute because it is confirmed unused." or "Add DNS round
robin to improve load distribution." -->
Implements the backend for risk feedback submission and integrates Slack
notifications to improve the risk feedback experience.

<!-- OPTIONAL: If the WHY of the PR is not obvious, perhaps because it
fixed a gnarly bug, explain it in a short paragraph here. E.g. "Commit
a73bb98 introduced a bug where the class list was filtered to only work
for MDC files, hence we partially revert it here." -->
This PR completes Phase 2 of the "Improve Risk Feedback Experience"
project (ENG-3061). It introduces a new RPC for submitting risk
feedback, a dedicated database table (`risk_feedback`) for storing this
data, and an RPC handler that performs authentication, validation,
persistence, and sends structured notifications to Slack. The
implementation adheres to established patterns for multi-tenancy,
internal-only tables, and foreign key behavior.

---
Linear Issue:
[ENG-3061](https://linear.app/overmind/issue/ENG-3061/phase-2-feedback-backend-and-slack-notifications)

<p><a
href="https://cursor.com/agents/bc-c5c63850-0ee3-4000-a0f3-518f6d2e03a5"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-web-light.png"><img
alt="Open in Web" width="114" height="28"
src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a>&nbsp;<a
href="https://cursor.com/background-agent?bcId=bc-c5c63850-0ee3-4000-a0f3-518f6d2e03a5"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img
alt="Open in Cursor" width="131" height="28"
src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a>&nbsp;</p>

<!-- CURSOR_AGENT_PR_BODY_END -->

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: David Schmitt <david.schmitt@overmind.tech>
GitOrigin-RevId: 7ad1252c5845c987d175d51423d031d230f815ae
> ℹ️ **Note**
>
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[charm.land/lipgloss/v2](https://redirect.github.com/charmbracelet/lipgloss)
| `v2.0.0` → `v2.0.2` |
![age](https://developer.mend.io/api/mc/badges/age/go/charm.land%2flipgloss%2fv2/v2.0.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/charm.land%2flipgloss%2fv2/v2.0.0/v2.0.2?slim=true)
|
|
[cloud.google.com/go/aiplatform](https://redirect.github.com/googleapis/google-cloud-go)
| `v1.119.0` → `v1.120.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2faiplatform/v1.120.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2faiplatform/v1.119.0/v1.120.0?slim=true)
|
|
[cloud.google.com/go/compute](https://redirect.github.com/googleapis/google-cloud-go)
| `v1.56.0` → `v1.57.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fcompute/v1.57.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fcompute/v1.56.0/v1.57.0?slim=true)
|
|
[cloud.google.com/go/storage](https://redirect.github.com/googleapis/google-cloud-go)
| `v1.60.0` → `v1.61.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fstorage/v1.61.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fstorage/v1.60.0/v1.61.3?slim=true)
|
|
[github.com/auth0/go-auth0/v2](https://redirect.github.com/auth0/go-auth0)
| `v2.6.0` → `v2.7.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.7.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.6.0/v2.7.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/eks](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.80.2` → `v1.81.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.81.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.80.2/v1.81.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/iam](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.53.4` → `v1.53.5` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.53.5?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.53.4/v1.53.5?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.96.4` → `v1.97.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.97.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.96.4/v1.97.0?slim=true)
|
|
[github.com/aws/aws-sdk-go-v2/service/sesv2](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.59.4` → `v1.60.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.60.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.59.4/v1.60.0?slim=true)
|
|
[github.com/bradleyfalzon/ghinstallation/v2](https://redirect.github.com/bradleyfalzon/ghinstallation)
| `v2.17.0` → `v2.18.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fbradleyfalzon%2fghinstallation%2fv2/v2.18.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fbradleyfalzon%2fghinstallation%2fv2/v2.17.0/v2.18.0?slim=true)
|
|
[github.com/googleapis/gax-go/v2](https://redirect.github.com/googleapis/gax-go)
| `v2.17.0` → `v2.18.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogleapis%2fgax-go%2fv2/v2.18.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogleapis%2fgax-go%2fv2/v2.17.0/v2.18.0?slim=true)
|
|
[github.com/goreleaser/goreleaser/v2](https://redirect.github.com/goreleaser/goreleaser)
| `v2.14.1` → `v2.14.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.14.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.14.1/v2.14.3?slim=true)
|
|
[github.com/harness/harness-go-sdk](https://redirect.github.com/harness/harness-go-sdk)
| `v0.7.13` → `v0.7.15` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fharness%2fharness-go-sdk/v0.7.15?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fharness%2fharness-go-sdk/v0.7.13/v0.7.15?slim=true)
|
|
[github.com/hashicorp/terraform-plugin-framework](https://redirect.github.com/hashicorp/terraform-plugin-framework)
| `v1.18.0` → `v1.19.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fterraform-plugin-framework/v1.19.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fterraform-plugin-framework/v1.18.0/v1.19.0?slim=true)
|
|
[github.com/hashicorp/terraform-plugin-go](https://redirect.github.com/hashicorp/terraform-plugin-go)
| `v0.30.0` → `v0.31.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fterraform-plugin-go/v0.31.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fterraform-plugin-go/v0.30.0/v0.31.0?slim=true)
|
|
[github.com/hashicorp/terraform-plugin-testing](https://redirect.github.com/hashicorp/terraform-plugin-testing)
| `v1.14.0` → `v1.15.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fterraform-plugin-testing/v1.15.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fterraform-plugin-testing/v1.14.0/v1.15.0?slim=true)
|
|
[github.com/nats-io/nats-server/v2](https://redirect.github.com/nats-io/nats-server)
| `v2.12.4` → `v2.12.5` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fnats-io%2fnats-server%2fv2/v2.12.5?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fnats-io%2fnats-server%2fv2/v2.12.4/v2.12.5?slim=true)
|
|
[github.com/posthog/posthog-go](https://redirect.github.com/posthog/posthog-go)
| `v1.10.0` → `v1.11.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fposthog%2fposthog-go/v1.11.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fposthog%2fposthog-go/v1.10.0/v1.11.1?slim=true)
|
|
[github.com/projectdiscovery/subfinder/v2](https://redirect.github.com/projectdiscovery/subfinder)
| `v2.12.0` → `v2.13.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fprojectdiscovery%2fsubfinder%2fv2/v2.13.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fprojectdiscovery%2fsubfinder%2fv2/v2.12.0/v2.13.0?slim=true)
|
|
[github.com/stripe/stripe-go/v84](https://redirect.github.com/stripe/stripe-go)
| `v84.4.0` → `v84.4.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fstripe%2fstripe-go%2fv84/v84.4.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fstripe%2fstripe-go%2fv84/v84.4.0/v84.4.1?slim=true)
|
|
[go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib)
| `v0.66.0` → `v0.67.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcontrib%2finstrumentation%2fnet%2fhttp%2fotelhttp/v0.67.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcontrib%2finstrumentation%2fnet%2fhttp%2fotelhttp/v0.66.0/v0.67.0?slim=true)
|
|
[go.opentelemetry.io/otel](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.41.0` → `v1.42.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel/v1.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel/v1.41.0/v1.42.0?slim=true)
|
|
[go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.41.0` → `v1.42.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.41.0/v1.42.0?slim=true)
|
|
[go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.41.0` → `v1.42.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.41.0/v1.42.0?slim=true)
|
|
[go.opentelemetry.io/otel/exporters/stdout/stdouttrace](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.41.0` → `v1.42.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.41.0/v1.42.0?slim=true)
|
|
[go.opentelemetry.io/otel/sdk](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.41.0` → `v1.42.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fsdk/v1.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fsdk/v1.41.0/v1.42.0?slim=true)
|
|
[go.opentelemetry.io/otel/trace](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.41.0` → `v1.42.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2ftrace/v1.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2ftrace/v1.41.0/v1.42.0?slim=true)
|
| [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.51.0` →
`v0.52.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.51.0...refs/tags/v0.52.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.52.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.51.0/v0.52.0?slim=true)
|
| [golang.org/x/oauth2](https://pkg.go.dev/golang.org/x/oauth2) |
[`v0.35.0` →
`v0.36.0`](https://cs.opensource.google/go/x/oauth2/+/refs/tags/v0.35.0...refs/tags/v0.36.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2foauth2/v0.36.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2foauth2/v0.35.0/v0.36.0?slim=true)
|
| [golang.org/x/sync](https://pkg.go.dev/golang.org/x/sync) | [`v0.19.0`
→
`v0.20.0`](https://cs.opensource.google/go/x/sync/+/refs/tags/v0.19.0...refs/tags/v0.20.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fsync/v0.20.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fsync/v0.19.0/v0.20.0?slim=true)
|
| [golang.org/x/text](https://pkg.go.dev/golang.org/x/text) | [`v0.34.0`
→
`v0.35.0`](https://cs.opensource.google/go/x/text/+/refs/tags/v0.34.0...refs/tags/v0.35.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftext/v0.35.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftext/v0.34.0/v0.35.0?slim=true)
|
|
[google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client)
| `v0.269.0` → `v0.271.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.271.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.269.0/v0.271.0?slim=true)
|
|
[sigs.k8s.io/controller-runtime/tools/setup-envtest](https://redirect.github.com/kubernetes-sigs/controller-runtime)
| `v0.0.0-20260305141020-105baa6284da` →
`v0.0.0-20260311125736-37c380b7405b` |
![age](https://developer.mend.io/api/mc/badges/age/go/sigs.k8s.io%2fcontroller-runtime%2ftools%2fsetup-envtest/v0.0.0-20260311125736-37c380b7405b?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/sigs.k8s.io%2fcontroller-runtime%2ftools%2fsetup-envtest/v0.0.0-20260305141020-105baa6284da/v0.0.0-20260311125736-37c380b7405b?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

## ⚠️ Warning

These modules are almost certainly going to break everything. They do
every time they update. If you update even one repo's OTEL modules, go
will then pull in new versions due to
[MVS](https://research.swtch.com/vgo-mvs) which will cause your repo to
break. All [otel pull
requests](https://redirect.github.com/pulls?q=is%3Aopen+is%3Apr+user%3Aovermindtech+archived%3Afalse+label%3Aobservability+)
need to be merged basically at the same time, and after all of the
modules have been updated to be compatible with each other.

---

### Release Notes

<details>
<summary>charmbracelet/lipgloss (charm.land/lipgloss/v2)</summary>

###
[`v2.0.2`](https://redirect.github.com/charmbracelet/lipgloss/releases/tag/v2.0.2)

[Compare
Source](https://redirect.github.com/charmbracelet/lipgloss/compare/v2.0.1...v2.0.2)

### Table patch

If you don't know, we made big improvements in table rendering recently
shipped in v2.0.0.

[@&#8203;MartinodF](https://redirect.github.com/MartinodF) made a good
job on improving it even further for tricky edge cases, in particular
when content wrapping is enabled.

#### Changelog

##### Fixed

-
[`c289bad`](https://redirect.github.com/charmbracelet/lipgloss/commit/c289bad531f2588fc7506d7fbd5cdfd3daf4cb27):
fix(table): height and overflow with wrapping content
([#&#8203;620](https://redirect.github.com/charmbracelet/lipgloss/issues/620))
([@&#8203;MartinodF](https://redirect.github.com/MartinodF))

***

<a href="https://charm.land/"><img alt="The Charm logo"
src="https://stuff.charm.sh/charm-banner-next.jpg" width="400"></a>

Thoughts? Questions? We love hearing from you. Feel free to reach out on
[X](https://x.com/charmcli), [Discord](https://charm.land/discord),
[Slack](https://charm.land/slack), [The
Fediverse](https://mastodon.social/@&#8203;charmcli),
[Bluesky](https://bsky.app/profile/charm.land).

###
[`v2.0.1`](https://redirect.github.com/charmbracelet/lipgloss/releases/tag/v2.0.1)

[Compare
Source](https://redirect.github.com/charmbracelet/lipgloss/compare/v2.0.0...v2.0.1)

A small release to properly set style underline colors, as well as
handling partial reads while querying the terminal.

#### Changelog

##### Fixed

-
[`3044146`](https://redirect.github.com/charmbracelet/lipgloss/commit/30441468e81b8d5322c78e7a78cac1aaf6b1b57d):
fix: add missing underlineColorKey case in getAsColor
([#&#8203;624](https://redirect.github.com/charmbracelet/lipgloss/issues/624))
([@&#8203;flux627](https://redirect.github.com/flux627))

##### Docs

-
[`61e734b`](https://redirect.github.com/charmbracelet/lipgloss/commit/61e734b4628b1f808f2a40dde55c8886432a110b):
docs: Charm logo link in upgrade guide
([@&#8203;aymanbagabas](https://redirect.github.com/aymanbagabas))

##### Other stuff

-
[`92b13d8`](https://redirect.github.com/charmbracelet/lipgloss/commit/92b13d8d3982df42416dddcad755f8700d5f1a76):
ci: sync golangci-lint config
([#&#8203;621](https://redirect.github.com/charmbracelet/lipgloss/issues/621))
([@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot])

***

<a href="https://charm.land/"><img alt="The Charm logo"
src="https://stuff.charm.sh/charm-banner-next.jpg" width="400"></a>

Thoughts? Questions? We love hearing from you. Feel free to reach out on
[X](https://x.com/charmcli), [Discord](https://charm.land/discord),
[Slack](https://charm.land/slack), [The
Fediverse](https://mastodon.social/@&#8203;charmcli),
[Bluesky](https://bsky.app/profile/charm.land).

</details>

<details>
<summary>auth0/go-auth0 (github.com/auth0/go-auth0/v2)</summary>

###
[`v2.7.0`](https://redirect.github.com/auth0/go-auth0/blob/HEAD/CHANGELOG.md#v270-2026-03-11)

[Compare
Source](https://redirect.github.com/auth0/go-auth0/compare/v2.6.0...v2.7.0)

[Full
Changelog](https://redirect.github.com/auth0/go-auth0/compare/v2.6.0...v2.7.0)

**Added**

- feat: improve DateTime parsing with multi-format support
[#&#8203;723](https://redirect.github.com/auth0/go-auth0/pull/723)
([fern-api\[bot\]](https://redirect.github.com/apps/fern-api))
- feat: add Auth0Managed network ACL field, additional signing
algorithms, and SCIM group provisioning scopes
[#&#8203;717](https://redirect.github.com/auth0/go-auth0/pull/717)
([fern-api\[bot\]](https://redirect.github.com/apps/fern-api))

**Fixed**

- fix: remove redundant WithContext call in HTTP request builder
[#&#8203;724](https://redirect.github.com/auth0/go-auth0/pull/724)
([fern-api\[bot\]](https://redirect.github.com/apps/fern-api))

</details>

<details>
<summary>aws/aws-sdk-go-v2
(github.com/aws/aws-sdk-go-v2/service/eks)</summary>

###
[`v1.81.0`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2025-06-18)

#### General Highlights

- **Dependency Update**: Updated to the latest SDK module versions

#### Module Highlights

- `github.com/aws/aws-sdk-go-v2/service/aiops`:
[v1.0.0](service/aiops/CHANGELOG.md#v100-2025-06-18)
  - **Release**: New AWS service client module
- **Feature**: This is the initial SDK release for Amazon AI Operations
(AIOps). AIOps is a generative AI-powered assistant that helps you
respond to incidents in your system by scanning your system's telemetry
and quickly surface suggestions that might be related to your issue.
- `github.com/aws/aws-sdk-go-v2/service/autoscaling`:
[v1.54.0](service/autoscaling/CHANGELOG.md#v1540-2025-06-18)
- **Feature**: Add IncludeInstances parameter to
DescribeAutoScalingGroups API
- `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs`:
[v1.51.0](service/cloudwatchlogs/CHANGELOG.md#v1510-2025-06-18)
- **Feature**: Added CloudWatch Logs Transformer support for converting
CloudTrail, VPC Flow, EKS Audit, AWS WAF and Route53 Resolver logs to
OCSF v1.1 format.
- `github.com/aws/aws-sdk-go-v2/service/s3`:
[v1.81.0](service/s3/CHANGELOG.md#v1810-2025-06-18)
- **Feature**: Added support for renaming objects within the same bucket
using the new RenameObject API.
- `github.com/aws/aws-sdk-go-v2/service/sagemaker`:
[v1.197.0](service/sagemaker/CHANGELOG.md#v11970-2025-06-18)
- **Feature**: Add support for p6-b200 instance type for SageMaker
Hyperpod

</details>

<details>
<summary>bradleyfalzon/ghinstallation
(github.com/bradleyfalzon/ghinstallation/v2)</summary>

###
[`v2.18.0`](https://redirect.github.com/bradleyfalzon/ghinstallation/releases/tag/v2.18.0)

[Compare
Source](https://redirect.github.com/bradleyfalzon/ghinstallation/compare/v2.17.0...v2.18.0)

#### What's Changed

- Bump actions/checkout from 4.2.2 to 5.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;165](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/165)
- bump github.com/google/go-github to v83 and ci updates by
[@&#8203;cpanato](https://redirect.github.com/cpanato) in
[#&#8203;184](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/184)
- Update google/go-github to v84 by
[@&#8203;asvoboda](https://redirect.github.com/asvoboda) in
[#&#8203;185](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/185)
- Bump actions/checkout from 5.0.0 to 6.0.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;180](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/180)
- Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;176](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/176)

**Full Changelog**:
<https://github.com/bradleyfalzon/ghinstallation/compare/v2.17.0...v2.18.0>

</details>

<details>
<summary>googleapis/gax-go (github.com/googleapis/gax-go/v2)</summary>

###
[`v2.18.0`](https://redirect.github.com/googleapis/gax-go/releases/tag/v2.18.0):
v2: v2.18.0

[Compare
Source](https://redirect.github.com/googleapis/gax-go/compare/v2.17.0...v2.18.0)

##### Features

- move gax-go to use 1.25 as the lower bound of support
([#&#8203;469](https://redirect.github.com/googleapis/gax-go/issues/469))
([01594ca5](https://redirect.github.com/googleapis/gax-go/commit/01594ca5))

- add callctx telemetry helpers
([#&#8203;472](https://redirect.github.com/googleapis/gax-go/issues/472))
([fa319ffc](https://redirect.github.com/googleapis/gax-go/commit/fa319ffc))

</details>

<details>
<summary>goreleaser/goreleaser
(github.com/goreleaser/goreleaser/v2)</summary>

###
[`v2.14.3`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.14.3)

[Compare
Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.14.2...v2.14.3)

#### Announcement

Read the official announcement: [Announcing GoReleaser
v2.14](https://goreleaser.com/blog/goreleaser-v2.14/).

#### Changelog

##### Other work

-
[`7cc4509`](https://redirect.github.com/goreleaser/goreleaser/commit/7cc45095d4e0bebd44c8d2bbf97823856405cfd7):
chore: fix svu config
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

**Full Changelog**:
<https://github.com/goreleaser/goreleaser/compare/v2.14.2...v2.14.3>

#### Helping out

This release is only possible thanks to **all** the support of some
**awesome people**!

Want to be one of them?
You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro
License](https://goreleaser.com/pro) or [contribute with
code](https://goreleaser.com/contributing).

#### Where to go next?

- Find examples and commented usage of all options in our
[website](https://goreleaser.com/intro/).
- Reach out on [Discord](https://discord.gg/RGEBtg8vQ6) and
[Twitter](https://twitter.com/goreleaser)!

<a href="https://goreleaser.com"><img
src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png"
with="100%" alt="GoReleaser logo"></a>

###
[`v2.14.2`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.14.2)

[Compare
Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.14.1...v2.14.2)

#### Announcement

Read the official announcement: [Announcing GoReleaser
v2.14](https://goreleaser.com/blog/goreleaser-v2.14/).

#### Changelog

##### Bug fixes

-
[`a5070ed`](https://redirect.github.com/goreleaser/goreleaser/commit/a5070ed2d4bd751e3abfc30c3e025ded2465b432):
fix(sbom): fix Windows CI test failure in catalog\_source\_archives
([@&#8203;caarlos0](https://redirect.github.com/caarlos0) and
[@&#8203;Copilot](https://redirect.github.com/Copilot))
-
[`89d4957`](https://redirect.github.com/goreleaser/goreleaser/commit/89d4957538bf5ba2c6ea1ec607249e5f7c010b0f):
fix(telegram): chat\_id should be allowed in the `@channelname` form
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`7089915`](https://redirect.github.com/goreleaser/goreleaser/commit/7089915a98555ca6afca9817df30aec83825aec5):
fix(telegram): improve default message template
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`6a3f983`](https://redirect.github.com/goreleaser/goreleaser/commit/6a3f983c7e7963dded48166185d205b6f31fc54a):
fix(upload): prevent sendFile race condition on Windows
([@&#8203;caarlos0](https://redirect.github.com/caarlos0) and
[@&#8203;Copilot](https://redirect.github.com/Copilot))
-
[`0c0906d`](https://redirect.github.com/goreleaser/goreleaser/commit/0c0906d5c66482ac750f5508c324f3020280da85):
fix: go1.26.1 ([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`0dfb84b`](https://redirect.github.com/goreleaser/goreleaser/commit/0dfb84b03945a0b1499536e30bc5f1360de651bf):
fix: improve logs
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`53dd3b7`](https://redirect.github.com/goreleaser/goreleaser/commit/53dd3b7290d3913c652ff3a6a913ec30ab8acc49):
fix: lint ([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

##### Documentation updates

-
[`b2b85e0`](https://redirect.github.com/goreleaser/goreleaser/commit/b2b85e07e619b7fe7bd21a5666b8db20cb0caea4):
docs(deps): bump mkdocs-material in /www in the docs group
([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot])
-
[`3227c59`](https://redirect.github.com/goreleaser/goreleaser/commit/3227c599eb5962b078c89cacecaab15631811598):
docs(deps): bump mkdocs-material in /www in the docs group
([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot])
-
[`a6aee4a`](https://redirect.github.com/goreleaser/goreleaser/commit/a6aee4ae99a481cbb8932e480f03e9cbeab3bd26):
docs: fix badges
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`3722f3c`](https://redirect.github.com/goreleaser/goreleaser/commit/3722f3c67f9630170f141a2d1555dc61fc2d3976):
docs: improve telegram docs
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`43ce1c2`](https://redirect.github.com/goreleaser/goreleaser/commit/43ce1c231759a9d53b3aab77aab6c44d6d3a7db6):
docs: telegram link
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`ed620f1`](https://redirect.github.com/goreleaser/goreleaser/commit/ed620f1557b33fe3029cb4f6b91dc53b7b00dc1d):
docs: update install.md
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))

##### Other work

-
[`7e53058`](https://redirect.github.com/goreleaser/goreleaser/commit/7e5305831e946fefc0d069ad9f7e0dc11e5fe668):
chore(ci): switch artifact attestations gen to actions/attest
([@&#8203;scop](https://redirect.github.com/scop))
-
[`b8b56ef`](https://redirect.github.com/goreleaser/goreleaser/commit/b8b56ef89a6338e241c39eed6cb807ba02ebc4ad):
chore: add .env to .gitignore
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`0513ddb`](https://redirect.github.com/goreleaser/goreleaser/commit/0513ddbd12616b6494fcb8c9911c01970159323d):
chore: add comment
([@&#8203;caarlos0](https://redirect.github.com/caarlos0))
-
[`ec28ed7`](https://redirect.github.com/goreleaser/goreleaser/commit/ec28ed71dfabed8fd695a4a8de2d53accf257bf8):
ci(deps): bump the actions group with 11 updates
([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot])
-
[`b51c2e8`](https://redirect.github.com/goreleaser/goreleaser/commit/b51c2e80fe1b2e665ab8138c7792be2813f8940c):
ci(deps): bump the actions group with 7 updates
([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot])

**Full Changelog**:
<https://github.com/goreleaser/goreleaser/compare/v2.14.1...v2.14.2>

#### Helping out

This release is only possible thanks to **all** the support of some
**awesome people**!

Want to be one of them?
You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro
License](https://goreleaser.com/pro) or [contribute with
code](https://goreleaser.com/contributing).

#### Where to go next?

- Find examples and commented usage of all options in our
[website](https://goreleaser.com/intro/).
- Reach out on [Discord](https://discord.gg/RGEBtg8vQ6) and
[Twitter](https://twitter.com/goreleaser)!

<a href="https://goreleaser.com"><img
src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png"
with="100%" alt="GoReleaser logo"></a>

</details>

<details>
<summary>harness/harness-go-sdk
(github.com/harness/harness-go-sdk)</summary>

###
[`v0.7.15`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.7.14...v0.7.15)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.7.14...v0.7.15)

###
[`v0.7.14`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.7.13...v0.7.14)

[Compare
Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.7.13...v0.7.14)

</details>

<details>
<summary>hashicorp/terraform-plugin-framework
(github.com/hashicorp/terraform-plugin-framework)</summary>

###
[`v1.19.0`](https://redirect.github.com/hashicorp/terraform-plugin-framework/releases/tag/v1.19.0)

[Compare
Source](https://redirect.github.com/hashicorp/terraform-plugin-framework/compare/v1.18.0...v1.19.0)

NOTES:

- This release moves the [resource configuration
generation](https://developer.hashicorp.com/terraform/language/import/generating-configuration)
logic for the `-generate-config-out` flag from Terraform Core to the
Framework for Terraform `v1.14.0` and above. There should be no
functionality changes for resource configuration generation in this
release.
([#&#8203;1281](https://redirect.github.com/hashicorp/terraform-plugin-framework/issues/1281))
- This Go module has been updated to Go 1.25 per the [Go support
policy](https://golang.org/doc/devel/release.html#policy). Any consumers
building on earlier Go versions may experience errors.
([#&#8203;1287](https://redirect.github.com/hashicorp/terraform-plugin-framework/issues/1287))

</details>

<details>
<summary>hashicorp/terraform-plugin-go
(github.com/hashicorp/terraform-plugin-go)</summary>

###
[`v0.31.0`](https://redirect.github.com/hashicorp/terraform-plugin-go/releases/tag/v0.31.0)

[Compare
Source](https://redirect.github.com/hashicorp/terraform-plugin-go/compare/v0.30.0...v0.31.0)

BREAKING CHANGES:

- tfprotov5+tfprotov6: The `GenerateResourceConfig` RPC call is now
required in `ResourceServer`.
([#&#8203;607](https://redirect.github.com/hashicorp/terraform-plugin-go/issues/607))

NOTES:

- This Go module has been updated to Go 1.25 per the [Go support
policy](https://golang.org/doc/devel/release.html#policy). Any consumers
building on earlier Go versions may experience errors.
([#&#8203;612](https://redirect.github.com/hashicorp/terraform-plugin-go/issues/612))
- all: To prevent compilation errors, ensure your Go module is updated
to at least terraform-plugin-framework\@&#8203;v1.19.0,
terraform-plugin-mux\@&#8203;v0.23.0,
terraform-plugin-sdk/v2\@&#8203;v2.40.0, and
terraform-plugin-testing\@&#8203;v1.15.0 before upgrading this
dependency.
([#&#8203;607](https://redirect.github.com/hashicorp/terraform-plugin-go/issues/607))

</details>

<details>
<summary>hashicorp/terraform-plugin-testing
(github.com/hashicorp/terraform-plugin-testing)</summary>

###
[`v1.15.0`](https://redirect.github.com/hashicorp/terraform-plugin-testing/releases/tag/v1.15.0)

[Compare
Source](https://redirect.github.com/hashicorp/terraform-plugin-testing/compare/v1.14.0...v1.15.0)

NOTES:

- This Go module has been updated to Go 1.25 per the [Go support
policy](https://golang.org/doc/devel/release.html#policy). Any consumers
building on earlier Go versions may experience errors.
([#&#8203;629](https://redirect.github.com/hashicorp/terraform-plugin-testing/issues/629))

FEATURES:

- helper/resource: Added new `StateStore` testing mode to `TestStep`,
which can be used to smoke test Terraform state storage.
([#&#8203;591](https://redirect.github.com/hashicorp/terraform-plugin-testing/issues/591))

BUG FIXES:

- helper/resource: Test steps in `Config` mode using `Destroy: true` and
`Check` functions will now create an additional destroy plan prior to
running `terraform apply` to avoid a potential "Saved Plan is Stale"
error from Terraform.
([#&#8203;602](https://redirect.github.com/hashicorp/terraform-plugin-testing/issues/602))
- helper/resource: Test steps in `Config` mode using the
`TF_ACC_REFRESH_AFTER_APPLY` compatibility flag will not refresh if
`ExpectNonEmptyPlan` is true.
([#&#8203;602](https://redirect.github.com/hashicorp/terraform-plugin-testing/issues/602))

</details>

<details>
<summary>nats-io/nats-server
(github.com/nats-io/nats-server/v2)</summary>

###
[`v2.12.5`](https://redirect.github.com/nats-io/nats-server/releases/tag/v2.12.5)

[Compare
Source](https://redirect.github.com/nats-io/nats-server/compare/v2.12.4...v2.12.5)

#### Changelog

Refer to the [2.12 Upgrade
Guide](https://docs.nats.io/release-notes/whats_new/whats_new_212) for
backwards compatibility notes with 2.11.x.

> \[!WARNING]
> A regression has been found in this version where a stream update may
result in the loss of consumers in clustered deployments in specific
cases. Single-server deployments are not affected. To temporarily
mitigate, set `meta_compact_sync: true` in the `jetstream` config block
and perform a configuration reload. We will soon follow up with a fixed
2.12.6 release.

##### Go Version

- 1.25.8

##### Dependencies

- github.com/nats-io/nkeys v0.4.15
([#&#8203;7797](https://redirect.github.com/nats-io/nats-server/issues/7797))
- github.com/klauspost/compress v1.18.4
([#&#8203;7812](https://redirect.github.com/nats-io/nats-server/issues/7812))
- golang.org/x/sys v0.42.0
([#&#8203;7923](https://redirect.github.com/nats-io/nats-server/issues/7923))
- github.com/antithesishq/antithesis-sdk-go v0.6.0-default-no-op
([#&#8203;7835](https://redirect.github.com/nats-io/nats-server/issues/7835))
- golang.org/x/crypto v0.48.0
([#&#8203;7874](https://redirect.github.com/nats-io/nats-server/issues/7874))
- github.com/nats-io/nats.go v1.49.0
([#&#8203;7835](https://redirect.github.com/nats-io/nats-server/issues/7835))
- golang.org/x/time v0.15.0
([#&#8203;7923](https://redirect.github.com/nats-io/nats-server/issues/7923))

##### CVEs

- Fixes CVE-2026-29785 (affects systems with leafnode compression
enabled)
- Fixes CVE-2026-27889 (affects systems with WebSockets enabled)

##### Added

JetStream

- The stream snapshot/backup endpoint now accepts the `window_size`
parameter, to allow improving flow control over slow or unreliable
connections
([#&#8203;7839](https://redirect.github.com/nats-io/nats-server/issues/7839))

##### Improved

General

- `max_conns` in the server configuration can now be configured to `0`
(zero) to reject all incoming client connections
([#&#8203;7877](https://redirect.github.com/nats-io/nats-server/issues/7877))

JetStream

- "Catchup for stream" log lines are now more consistent
([#&#8203;7784](https://redirect.github.com/nats-io/nats-server/issues/7784))
- Raft now only accepts forwarded proposals if caught up as the new
leader, limiting potentially unbounded log growth
([#&#8203;7809](https://redirect.github.com/nats-io/nats-server/issues/7809))
- Raft now correctly refuses concurrent membership changes if forwarded
a peer removal from another node
([#&#8203;7809](https://redirect.github.com/nats-io/nats-server/issues/7809))
- The `max_consumers` limit of a stream can now be updated after stream
creation
([#&#8203;7724](https://redirect.github.com/nats-io/nats-server/issues/7724))
- The pending messages and bytes are now included in consumer unpin
responses
([#&#8203;7815](https://redirect.github.com/nats-io/nats-server/issues/7815))
- Stream backups/snapshots are now streamed to clients with improved
flow control, which should improve throughput and robustness,
particularly over unreliable links, reducing the chance of backups
failing due to flow control errors
([#&#8203;7828](https://redirect.github.com/nats-io/nats-server/issues/7828))
- Orphaned stream and consumer checks are now aligned with the metalayer
snapshot logic
([#&#8203;7826](https://redirect.github.com/nats-io/nats-server/issues/7826))
- Wildcard filtering when loading messages is now considerably faster in
the memory store
([#&#8203;7840](https://redirect.github.com/nats-io/nats-server/issues/7840),
[#&#8203;7855](https://redirect.github.com/nats-io/nats-server/issues/7855))
- Metalayer snapshots now take place asynchronously when possible, such
that JS API operations are not blocked while the snapshot is taking
place
([#&#8203;7827](https://redirect.github.com/nats-io/nats-server/issues/7827),
[#&#8203;7846](https://redirect.github.com/nats-io/nats-server/issues/7846))
- This behaviour can be disabled by setting `meta_compact_sync: true` in
the `jetstream` configuration block
- Consumers with a single subject filter no longer incorrectly use the
multi-filter message lookups
([#&#8203;7856](https://redirect.github.com/nats-io/nats-server/issues/7856))
- The check for colliding stream subjects is now faster
([#&#8203;7870](https://redirect.github.com/nats-io/nats-server/issues/7870))
- Raft replica `lag` and `current` values in stream info, consumer info
and `/jsz` are now more consistent, no longer reporting incorrect values
on follower nodes
([#&#8203;7885](https://redirect.github.com/nats-io/nats-server/issues/7885))
- Num pending calculations for R1 consumers now happen asynchronously
and should no longer block the metalayer
([#&#8203;7889](https://redirect.github.com/nats-io/nats-server/issues/7889))

##### Fixed

General

- Routed message arguments no longer escape to the heap, improving
performance
([#&#8203;7867](https://redirect.github.com/nats-io/nats-server/issues/7867))
- Malformed functions or operations in user permissions templates or on
invalid template expansion during auth should no longer result in a
server panic

Leafnodes

- A crash when leafnodes with bad credentials performs an auth callout
has been fixed
([#&#8203;7844](https://redirect.github.com/nats-io/nats-server/issues/7844))
- Receiving a leafnode subscription before negotiating compression
should no longer result in a server panic

JetStream

- A filestore bug which could hold onto a lock when exiting after an
error has been fixed
([#&#8203;7780](https://redirect.github.com/nats-io/nats-server/issues/7780))
- The filestore now always uses tombstones for recovering trailing
deletes
([#&#8203;7782](https://redirect.github.com/nats-io/nats-server/issues/7782))
- Fixed a race condition when rebuilding block state during recovery
([#&#8203;7783](https://redirect.github.com/nats-io/nats-server/issues/7783))
- The filestore binary search for a message block now correctly sorts
blocks that contain only tombstones
([#&#8203;7787](https://redirect.github.com/nats-io/nats-server/issues/7787))
- Fixed a data race for streams when acquiring the deduplication
sequence
([#&#8203;7789](https://redirect.github.com/nats-io/nats-server/issues/7789))
- Raft now correctly checks the closed state when reporting if the node
is current
([#&#8203;7793](https://redirect.github.com/nats-io/nats-server/issues/7793))
- Raft now sets the election timeout instead of the campaign timeout
when leaving observer mode
([#&#8203;7793](https://redirect.github.com/nats-io/nats-server/issues/7793))
- The metalayer now tracks in-flight meta changes for invalid stream or
consumer updates
([#&#8203;7798](https://redirect.github.com/nats-io/nats-server/issues/7798))
- The metalayer no longer incorrectly overwrites local consumer
assignments before they are applied, which would result in them being
omitted from the meta snapshot
([#&#8203;7798](https://redirect.github.com/nats-io/nats-server/issues/7798))
- The inactive threshold clean-up no longer leave lingering goroutines
([#&#8203;7799](https://redirect.github.com/nats-io/nats-server/issues/7799))
- Pooled publish message underlying buffer capacity is now reused
correctly
([#&#8203;7790](https://redirect.github.com/nats-io/nats-server/issues/7790))
- Consumers with overlapping filter subjects where one is not a subset
of the other are now allowed
([#&#8203;7810](https://redirect.github.com/nats-io/nats-server/issues/7810))
- The filestore now checksums after truncation on compressed or
encrypted stores
([#&#8203;7816](https://redirect.github.com/nats-io/nats-server/issues/7816))
- The filestore no longer leaks locks in various error states
([#&#8203;7816](https://redirect.github.com/nats-io/nats-server/issues/7816))
- The filestore now correctly holds the lock during snapshotting on
encrypted stores
([#&#8203;7816](https://redirect.github.com/nats-io/nats-server/issues/7816))
- The filestore now ensures that num pending calculations cannot
overflow
([#&#8203;7816](https://redirect.github.com/nats-io/nats-server/issues/7816))
- The filestore now correctly recalculates the subject state as needed
when finding last sequences
([#&#8203;7816](https://redirect.github.com/nats-io/nats-server/issues/7816))
- The filestore now sorts configured subjects when checking whether
filters represent all of the configured filters
([#&#8203;7816](https://redirect.github.com/nats-io/nats-server/issues/7816))
- The filestore now avoids subject and header corruption in more cases
([#&#8203;7816](https://redirect.github.com/nats-io/nats-server/issues/7816))
- Consumer unpinning is now handled correctly when stepping down
([#&#8203;7819](https://redirect.github.com/nats-io/nats-server/issues/7819))
- Consumer unpinning now allows the next client to pick up the next pin
without waiting for new messages
([#&#8203;7819](https://redirect.github.com/nats-io/nats-server/issues/7819))
- Fixed a race condition when remapping the underlying group of a
replicated asset
([#&#8203;7820](https://redirect.github.com/nats-io/nats-server/issues/7820),
[#&#8203;7883](https://redirect.github.com/nats-io/nats-server/issues/7883))
- An overflowed pull request when min pending or min ack pending is
above the threshold is now handled correctly
([#&#8203;7795](https://redirect.github.com/nats-io/nats-server/issues/7795))
- Timers are no longer leaked when failing to set up mirrors, which
resulted in high CPU usage
([#&#8203;7825](https://redirect.github.com/nats-io/nats-server/issues/7825))
- Monitor quit channels are created on demand, fixing cases where an
asset restarts with a different underlying Raft group
([#&#8203;7837](https://redirect.github.com/nats-io/nats-server/issues/7837))
- Recovered streams and consumers are now correctly handled when not
present in a metalayer catchup snapshot
([#&#8203;7824](https://redirect.github.com/nats-io/nats-server/issues/7824))
- Ensure that messages that have reached the max deliver state are
preserved with the WorkQueue retention policy
([#&#8203;7845](https://redirect.github.com/nats-io/nats-server/issues/7845))
- An inconsistency with consumer naming between the current and legacy
consumer create endpoints has been fixed
([#&#8203;7848](https://redirect.github.com/nats-io/nats-server/issues/7848))
- The Raft layer no longer incorrectly reverts the last snapshot applied
sequence when truncating uncommitted entries after a catchup snapshot
([#&#8203;7849](https://redirect.github.com/nats-io/nats-server/issues/7849))
- The Raft layer no longer incorrectly restores the cluster size to 1 at
startup, which could result in an isolated node incorrectly winning a
single-node election
([#&#8203;7850](https://redirect.github.com/nats-io/nats-server/issues/7850))
- The memory store correctly refreshes the last sequence of a subject in
the subject state tracking
([#&#8203;7865](https://redirect.github.com/nats-io/nats-server/issues/7865))
- Tiered reservations are now handled more consistently, fixing issues
where replicated assets could be over-counted and where reservations
were incorrectly applied on recovery
([#&#8203;7880](https://redirect.github.com/nats-io/nats-server/issues/7880))
- When scaling down a replicated consumer to R1, the correct consumer
name is now used in the request where no durable name is set
([#&#8203;7891](https://redirect.github.com/nats-io/nats-server/issues/7891))
- Consumer deletion will now retry correctly when erroring with a
directory not empty error
([#&#8203;7886](https://redirect.github.com/nats-io/nats-server/issues/7886))
- The `store_max_stream_bytes` and `memory_max_stream_bytes` are no
longer incorrectly applied when determining whether account resource
limits have been exceeded, fixing a long-standing bug where it would
incorrectly limit total reservations
([#&#8203;7895](https://redirect.github.com/nats-io/nats-server/issues/7895))
- A race condition in the memory store when updating the delete map has
been fixed
([#&#8203;7897](https://redirect.github.com/nats-io/nats-server/issues/7897))
- Stream source checks are now enforced correctly when from a different
account or domain
([#&#8203;7903](https://redirect.github.com/nats-io/nats-server/issues/7903))
- Consumer assignments no longer incorrectly handle or store transition
state which could lead to issues on recovery or cause consumer state to
be lost
([#&#8203;7905](https://redirect.github.com/nats-io/nats-server/issues/7905),
[#&#8203;7908](https://redirect.github.com/nats-io/nats-server/issues/7908))

MQTT

- SUB and UNSUB packets now correctly detect and reject the Packet
Identifier being set to 0
([#&#8203;7805](https://redirect.github.com/nats-io/nats-server/issues/7805))

WebSockets

- Fix invalid parsing of 64-bit payload lengths, which could lead to a
server panic
- Correctly reject compressed frames when compression was not negotiated
as a part of the handshake
- The `Origin` header validation now validates the protocol scheme as
well as host and port
- Gracefully handle failed connection upgrades
- The `CLOSE` frame lengths and status codes are now validated correctly
- The compressor state is correctly reset when a max payload error
occurs
- Buffers are now correctly reused, reducing memory pressure
([#&#8203;7901](https://redirect.github.com/nats-io/nats-server/issues/7901))
- Empty compressed buffers should no longer result in a server panic

##### Complete Changes

</details>

<details>
<summary>posthog/posthog-go (github.com/posthog/posthog-go)</summary>

###
[`v1.11.1`](https://redirect.github.com/PostHog/posthog-go/releases/tag/v1.11.1)

[Compare
Source](https://redirect.github.com/posthog/posthog-go/compare/v1.10.0...v1.11.1)

#### 1.11.1 - 2026-03-11

- [Full
Changelog](https://redirect.github.com/PostHog/posthog-go/compare/v1.11.0...v1.11.1)

</details>

<details>
<summary>projectdiscovery/subfinder
(github.com/projectdiscovery/subfinder/v2)</summary>

###
[`v2.13.0`](https://redirect.github.com/projectdiscovery/subfinder/releases/tag/v2.13.0)

[Compare
Source](https://redirect.github.com/projectdiscovery/subfinder/compare/v2.12.0...v2.13.0)

#### What's Changed

##### 🎉 New Features

- Added URLScan.io as passive subdomain source by
[@&#8203;Jigardjain](https://redirect.github.com/Jigardjain) in
[#&#8203;1710](https://redirect.github.com/projectdiscovery/subfinder/pull/1710)

##### 🐞 Bug Fixes

- Fixed timeout issue for Crtsh source by
[@&#8203;recepgunes1](https://redirect.github.com/recepgunes1) in
[#&#8203;1723](https://redirect.github.com/projectdiscovery/subfinder/pull/1723)

##### Other Changes

- Changed working directory path for Dependabot by
[@&#8203;mikelolasagasti](https://redirect.github.com/mikelolasagasti)
in
[#&#8203;1708](https://redirect.github.com/projectdiscovery/subfinder/pull/1708)
- Added PR template by
[@&#8203;dogancanbakir](https://redirect.github.com/dogancanbakir) in
[#&#8203;1729](https://redirect.github.com/projectdiscovery/subfinder/pull/1729)
- Sorted sources alphabetically by
[@&#8203;PontusLindblom](https://redirect.github.com/PontusLindblom) in
[#&#8203;1720](https://redirect.github.com/projectdiscovery/subfinder/pull/1720)
- Marked LeakIX as requiring an API key by
[@&#8203;spameier](https://redirect.github.com/spameier) in
[#&#8203;1709](https://redirect.github.com/projectdiscovery/subfinder/pull/1709)

#### New Contributors

- [@&#8203;Jigardjain](https://redirect.github.com/Jigardjain) made
their first contribution in
[#&#8203;1710](https://redirect.github.com/projectdiscovery/subfinder/pull/1710)
- [@&#8203;PontusLindblom](https://redirect.github.com/PontusLindblom)
made their first contribution in
[#&#8203;1720](https://redirect.github.com/projectdiscovery/subfinder/pull/1720)
- [@&#8203;spameier](https://redirect.github.com/spameier) made their
first contribution in
[#&#8203;1709](https://redirect.github.com/projectdiscovery/subfinder/pull/1709)
- [@&#8203;recepgunes1](https://redirect.github.com/recepgunes1) made
their first contribution in
[#&#8203;1723](https://redirect.github.com/projectdiscovery/subfinder/pull/1723)

**Full Changelog**:
<https://github.com/projectdiscovery/subfinder/compare/v2.12.0...v2.13.0>

</details>

<details>
<summary>stripe/stripe-go (github.com/stripe/stripe-go/v84)</summary>

###
[`v84.4.1`](https://redirect.github.com/stripe/stripe-go/releases/tag/v84.4.1)

[Compare
Source](https://redirect.github.com/stripe/stripe-go/compare/v84.4.0...v84.4.1)

- [#&#8203;2288](https://redirect.github.com/stripe/stripe-go/pull/2288)
Add Stripe-Request-Trigger header
- [#&#8203;2285](https://redirect.github.com/stripe/stripe-go/pull/2285)
Add agent information to UserAgent

See [the changelog for more
details](https://redirect.github.com/stripe/stripe-go/blob/v84.4.1/CHANGELOG.md).

</details>

<details>
<summary>open-telemetry/opentelemetry-go
(go.opentelemetry.io/otel)</summary>

###
[`v1.42.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v1.42.0):
/v0.64.0/v0.18.0/v0.0.16

[Compare
Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0)

##### Added

- Add `go.opentelemetry.io/otel/semconv/v1.40.0` package.
The package contains semantic conventions from the `v1.40.0` version of
the OpenTelemetry Semantic Conventions.
See the [migration documentation](./semconv/v1.40.0/MIGRATION.md) for
information on how to upgrade from
`go.opentelemetry.io/otel/semconv/v1.39.0`.
([#&#8203;7985](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985))
- Add `Err` and `SetErr` on `Record` in `go.opentelemetry.io/otel/log`
to attach an error and set record exception attributes in
`go.opentelemetry.io/otel/log/sdk`.
([#&#8203;7924](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924))

##### Changed

- `TracerProvider.ForceFlush` in `go.opentelemetry.io/otel/sdk/trace`
joins errors together and continues iteration through SpanProcessors as
opposed to returning the first encountered error without attempting
exports on subsequent SpanProcessors.
([#&#8203;7856](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856))

##### Fixed

- Fix missing `request.GetBody` in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to
correctly handle HTTP2 GOAWAY frame.
([#&#8203;7931](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931))
- Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty.
([#&#8203;7964](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964))
- Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
`go.opentelemetry.io/otel/propagation`.
([#&#8203;7834](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834))

##### Removed

- Drop support for \[Go 1.24].
([#&#8203;7984](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984))

#### What's Changed

- fix changelog protection marker by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;7986](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7986)
- Drop support for Go 1.24 by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;7984](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7984)
- fix(deps): update golang.org/x by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;7907](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7907)
- chore(deps): update module go.opentelemetry.io/collector/featuregate
to v1.53.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;7981](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7981)
- chore(deps): update benchmark-action/github-action-benchmark action to
v1.21.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;7989](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7989)
- fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.53.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;7982](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7982)
- Revert "Revert "Generate semconv/v1.40.0"" by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;7985](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7985)
- support stdlib request.GetBody on metrics by
[@&#8203;marifari-hue](https://redirect.github.com/marifari-hue) in
[#&#8203;7931](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7931)
- attribute: add TestNotEquivalence and equality operator tests by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;7979](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7979)
- Refactor benchmark CI by
[@&#8203;XSAM](https://redirect.github.com/XSAM) in
[#&#8203;7873](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7873)
- chore(deps): update module github.com/securego/gosec/v2 to v2.24.7 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;7988](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7988)
- chore(deps): pin codspeedhq/action action to
[`df47568`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/df47568)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;7996](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7996)
- chore(deps): update actions/checkout action to v6.0.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;7997](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7997)
- chore(deps): update codspeedhq/action action to v4.11.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;7999](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7999)
- Upgrade to semconv/v1.40.0 by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;7991](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7991)
- Regenerate semconv/v1.40.0/MIGRATION.md by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;7992](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7992)
- fix: generated semconv helpers skipping attributes by
[@&#8203;victoraugustolls](https://redirect.github.com/victoraugustolls)
in
[#&#8203;7964](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7964)
- Feat: Have SpanContext support the new W3C random flag. by
[@&#8203;nikhilmantri0902](https://redirect.github.com/nikhilmantri0902)
in
[#&#8203;7834](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7834)
- Semconv metric helper caller-slice mutation fix by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;7993](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7993)
- Fix semconv generated error type to check error chain for custom type
declaration by [@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;7994](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7994)
- refactor: replace uint64 and int32 with atomic types in tests by
[@&#8203;alexandear](https://redirect.github.com/alexandear) in
[#&#8203;7941](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7941)
- chore(deps): update golang.org/x/telemetry digest to
[`18da590`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/18da590)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8000](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8000)
- TracerProvider ForceFlush() Error Fix by
[@&#8203;sawamurataxman](https://redirect.github.com/sawamurataxman) in
[#&#8203;7856](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7856)
- log: add error field to Record and make SDK to emit exception
attributes by [@&#8203;iblancasa](https://redirect.github.com/iblancasa)
in
[#&#8203;7924](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7924)
- chore(deps): update dependency codespell to v2.4.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8003](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8003)
- chore(deps): update github/codeql-action action to v4.32.6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8004](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8004)
- chore(deps): update codspeedhq/action action to v4.11.1 by
[@&#8203;renovate](https://redirect.github.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 10am on friday" in timezone
Europe/London, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ29sYW5nIiwib2JzZXJ2YWJpbGl0eSJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 386d28c6a4508094a2586db8a7a545464bb699c1
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[golangci/golangci-lint](https://redirect.github.com/golangci/golangci-lint)
| minor | `v2.10.1` → `v2.11.3` |
|
[golangci/golangci-lint](https://redirect.github.com/golangci/golangci-lint)
| minor | `2.10.1` → `2.11.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>golangci/golangci-lint (golangci/golangci-lint)</summary>

###
[`v2.11.3`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2113)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.2...v2.11.3)

*Released on 2026-03-10*

1. Linters bug fixes
- `gosec`: from v2.24.7 to
[`619ce21`](https://redirect.github.com/golangci/golangci-lint/commit/619ce2117e08)

###
[`v2.11.2`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2112)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.1...v2.11.2)

*Released on 2026-03-07*

1. Fixes
   - `fmt`: fix error when using the `fmt` command with explicit paths.

###
[`v2.11.1`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2111)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.0...v2.11.1)

*Released on 2026-03-06*

Due to an error related to AUR, some artifacts of the v2.11.0 release
have not been published.

This release contains the same things as v2.11.0.

###
[`v2.11.0`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2110)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.10.1...v2.11.0)

*Released on 2026-03-06*

1. Linters new features or changes
- `errcheck`: from 1.9.0 to 1.10.0 (exclude `crypto/rand.Read` by
default)
- `gosec`: from 2.23.0 to 2.24.6 (new rules: `G113`, `G118`, `G119`,
`G120`, `G121`, `G122`, `G123`, `G408`, `G707`)
- `noctx`: from 0.4.0 to 0.5.0 (new detection:
`httptest.NewRequestWithContext`)
   - `prealloc`: from 1.0.2 to 1.1.0
- `revive`: from 1.14.0 to 1.15.0 (⚠️ Breaking change: package-related
checks moved from `var-naming` to a new rule `package-naming`)
2. Linters bug fixes
   - `gocognit`: from 1.2.0 to 1.2.1
   - `gosec`: from 2.24.6 to 2.24.7
   - `unqueryvet`: from 1.5.3 to 1.5.4

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 10am on friday" in timezone
Europe/London, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Mostly a tooling upgrade, but it also changes runtime behavior by
enforcing request body size limits on several admin/API handlers, which
could reject previously-accepted large submissions.
>
> **Overview**
> Updates `golangci-lint` to `v2.11.3` in both the devcontainer and CI.
>
> To satisfy new linter rules, this removes/adjusts many
`//nolint:gosec` annotations, switches multiple tests to
`httptest.NewRequestWithContext`, and adds/updates a few targeted
suppressions (e.g. `context.WithCancel`, `context.WithTimeout`).
>
> Adds explicit `http.MaxBytesReader` limits on various Area51 admin
handlers (typically 10MB; 200MB for snapshot/blast-radius uploads),
reducing risk of oversized request bodies at the cost of stricter input
limits.
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
aa6ee6c4ad731a9c1dd0433d3f2abb4402a4ca5f. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: carabasdaniel <daniel.carabas@overmind.tech>
GitOrigin-RevId: 4cf21c8a7518ea44685543934946dc11213ab426
## Summary
- Rename the `Cache.StoreError` method to `StoreUnavailableItem` across
all implementations and call sites to better describe its purpose:
caching the fact that an item is unavailable, not there is a store
Error.
## Changes
Pure mechanical rename of `StoreError` -> `StoreUnavailableItem`
touching 54 files:
- **Interface + implementations**: `Cache` interface, `NoOpCache`,
`MemoryCache`, `BoltCache`, `ShardedCache` in `go/sdpcache/`
- **Tests**: `cache_test.go`, `cache_stuck_test.go`,
`sharded_cache_test.go`, and GCP KMS test files
- **Source adapters**: `sources/transformer.go`, GCP dynamic/manual
adapters, K8s generic source, stdlib adapters (DNS, HTTP, RDAP), AWS
adapter helpers
- **Docs**: `go/sdpcache/README.md`
No logic changes — only identifier and comment renames.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Broad mechanical rename across many call sites and cache
implementations, with low behavioral risk but a moderate chance of
missed references or interface mismatch causing compile/runtime issues.
>
> **Overview**
> **Renames the sdpcache method used to cache non-successful lookups**
from `StoreError` to `StoreUnavailableItem` to better reflect that it
caches *item unavailability* (e.g., NOTFOUND/non-retryable failures).
>
> Updates the `Cache` interface plus `BoltCache`, `MemoryCache`,
`NoOpCache`, and `ShardedCache`, and migrates all callers
(AWS/K8s/GCP/stdlib adapters, transformer, and discovery tests) along
with `go/sdpcache/README.md` and cache-related tests to the new method
name.
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
4cacbbe7893355b02d98b6c2160f5e8756df83c3. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

GitOrigin-RevId: 54ff7a20925465f428f2fb7c1535210814dd48a8
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [auth0](https://registry.terraform.io/providers/auth0/auth0)
([source](https://redirect.github.com/auth0/terraform-provider-auth0)) |
required_provider | minor | `1.40.0` → `1.41.0` |
| [aws](https://registry.terraform.io/providers/hashicorp/aws)
([source](https://redirect.github.com/hashicorp/terraform-provider-aws))
| required_provider | minor | `6.35.1` → `6.36.0` |
| [google](https://registry.terraform.io/providers/hashicorp/google)
([source](https://redirect.github.com/hashicorp/terraform-provider-google))
| required_provider | minor | `7.22.0` → `7.23.0` |
| [kubectl](https://registry.terraform.io/providers/alekc/kubectl)
([source](https://redirect.github.com/alekc/terraform-provider-kubectl))
| required_provider | patch | `2.1.3` → `2.1.5` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/370) for more information.

---

### Release Notes

<details>
<summary>auth0/terraform-provider-auth0 (auth0)</summary>

###
[`v1.41.0`](https://redirect.github.com/auth0/terraform-provider-auth0/blob/HEAD/CHANGELOG.md#v1410)

[Compare
Source](https://redirect.github.com/auth0/terraform-provider-auth0/compare/v1.40.0...v1.41.0)

FEATURES:

- `resource/auth0_connection` – Add support for configuring
api\_behavior and signup\_behavior under
options.password.authentication\_methods (EA Only)
([#&#8203;1494](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1494))
- `resource/auth0_tenant` – Add support for configuring
`phone_consolidated_experience` (Unified Phone Experience flag)
([#&#8203;1495](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1495))
- `resource/auth0_resource_server` – Add support for configuring
required\_for in DPoP configuration (GA)
([#&#8203;1487](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1487))

BUG FIXES:

- `resource/auth0_client` – Support empty arrays for
`async_approval_notification_channels` and
`organization_discovery_methods`
([#&#8203;1493](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1493))

</details>

<details>
<summary>hashicorp/terraform-provider-aws (aws)</summary>

###
[`v6.36.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6360-March-11-2026)

[Compare
Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.35.1...v6.36.0)

NOTES:

- provider: Update Go version to v1.25.8. Addresses `GO-2026-4602,
FileInfo can escape from a Root in os`, `GO-2026-4603, URLs in meta
content attribute actions are not escaped in html/template`, and
`GO-2026-4601, Incorrect parsing of IPv6 host literals in net/url`
([#&#8203;46820](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46820))

FEATURES:

- **New Data Source:** `aws_iam_outbound_web_identity_federation`
([#&#8203;46503](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46503))
- **New Ephemeral Resource:** `aws_sts_web_identity_token`
([#&#8203;46173](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46173))
- **New List Resource:** `aws_s3_bucket_versioning`
([#&#8203;46802](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46802))

ENHANCEMENTS:

- listresource/aws\_s3\_bucket: No longer returns values for deprecated
parameters
([#&#8203;46852](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46852))
- resource/aws\_bedrockagentcore\_agent\_runtime: Add
`authorizer_config.custom_jwt_authorizer.allowed_scopes` argument
([#&#8203;46828](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46828))
- resource/aws\_cloudwatch\_log\_resource\_policy: Add `resource_arn`
argument and `policy_scope` and `revision_id` attributes. `policy_name`
is now optional
([#&#8203;46813](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46813))
- resource/aws\_glue\_catalog\_table: Add
`open_table_format_input.iceberg_input.iceberg_table_input` argument
([#&#8203;46843](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46843))
- resource/aws\_glue\_catalog\_table: Add `view_definition` argument
([#&#8203;46843](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46843))
- resource/aws\_glue\_catalog\_table: Change
`open_table_format_input.iceberg_input.metadata_operation` and
`open_table_format_input.iceberg_input.version` to
[ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew)
([#&#8203;46843](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46843))
- resource/aws\_glue\_catalog\_table: Change `parameters`,
`storage_descriptor`, and `table_type` to Optional and Computed
([#&#8203;46843](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46843))
- resource/aws\_guardduty\_ipset: Add `ip_set_id` attribute
([#&#8203;46703](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46703))
- resource/aws\_guardduty\_publishing\_destination: Add `arn` and
`destination_id` attributes
([#&#8203;46703](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46703))
- resource/aws\_guardduty\_publishing\_destination: Add tagging support
([#&#8203;46703](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46703))
- resource/aws\_guardduty\_threatintelset: Add `threat_intel_set_id`
attribute
([#&#8203;46703](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46703))
-
resource/aws\_observabilityadmin\_centralization\_rule\_for\_organization:
Add
`rule.destination.destination_logs_configuration.log_group_name_configuration`
block
([#&#8203;46811](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46811))

BUG FIXES:

- data-source/aws\_glue\_catalog\_table: Use the table's catalog ID when
reading partition indexes, fixing `EntityNotFoundException` errors
([#&#8203;46843](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46843))
- list-resource/aws\_iam\_role\_policy\_attachment: Prevent infinite
loop when IAM Role deleted during list
([#&#8203;46763](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46763))
- listresource/aws\_s3\_bucket: No longer appears to hang when buckets
are deleted concurrently with listing
([#&#8203;46852](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46852))
- resource/aws\_appconfig\_deployment\_strategy: Fix panic due to
"interface conversion: interface {} is float64, not float32" when
updating `growth_factor`
([#&#8203;46810](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46810))
- resource/aws\_glue\_catalog\_table: Use the table's catalog ID when
reading partition indexes, fixing `EntityNotFoundException` errors
([#&#8203;46843](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46843))
- resource/aws\_vpc\_endpoint: Allow in-place update of
`private_dns_enabled` when `vpc_endpoint_type` is `Interface`
([#&#8203;46800](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46800))
- resource/aws\_vpc\_endpoint: Set new computed value for
`network_interface_ids` attribute when changing `subnet_configuration`
or `subnet_ids`
([#&#8203;46800](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46800))
- resource/aws\_vpn\_concentrator: Retry `VpnConcentratorLimitExceeded:
The maximum number of mutating objects has been reached` errors on
Create
([#&#8203;46823](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46823))

</details>

<details>
<summary>hashicorp/terraform-provider-google (google)</summary>

###
[`v7.23.0`](https://redirect.github.com/hashicorp/terraform-provider-google/releases/tag/v7.23.0)

[Compare
Source](https://redirect.github.com/hashicorp/terraform-provider-google/compare/v7.22.0...v7.23.0)

DEPRECATIONS:

- notebooks: `google_notebooks_environment` is deprecated and will be
removed in a future major release. Use `google_workbench_instance`
instead
([#&#8203;26288](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26288))
- provider: `google_*_iam_*` resources and datasources will now show
deprecation messages when their parent resource has been deprecated
([#&#8203;26288](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26288))

FEATURES:

- **New Data Source:** `google_oracle_database_odb_network`
([#&#8203;26290](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26290))
- **New Data Source:** `google_oracle_database_odb_subnet`
([#&#8203;26290](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26290))
- **New Resource:** `google_vector_search_collection` (ga)
([#&#8203;26353](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26353))

IMPROVEMENTS:

- alloydb: added `dataplex_config` field to `google_alloydb_cluster`
resource
([#&#8203;26304](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26304))
- biglake: added `primary_location` to `google_biglake_iceberg_catalog`
resource
([#&#8203;26307](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26307))
- compute: added `params` field to `google_compute_external_vpn_gateway`
resource (ga)
([#&#8203;26348](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26348))
- compute: added `params` field to `google_compute_ha_vpn_gateway`
resource (ga)
([#&#8203;26348](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26348))
- compute: added `params` field to `google_compute_vpn_gateway` resource
(ga)
([#&#8203;26348](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26348))
- compute: added `params` field to `google_compute_vpn_tunnel` resource
(ga)
([#&#8203;26348](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26348))
- compute: added `storage_pool` support to
`google_compute_instance_template` and
`google_compute_region_instance_template` disks
([#&#8203;26347](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26347))
- container: added `control_plane_disk_encryption_key_versions` field to
`user_managed_keys_config` in `google_container_cluster` resource
([#&#8203;26289](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26289))
- dataproc: added `cluster_type` to `google_dataproc_cluster` resource
([#&#8203;26350](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26350))
- dlp: added `actions.publish_to_scc`, `actions.publish_to_chronicle`,
`actions.export_data.sample_findings_table` and
`targets.big_query_target.filter.table_reference.project_id` fields to
`google_data_loss_prevention_discovery_config` resource
([#&#8203;26281](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26281))
- gkebackup: added `protected_namespace_count` field to
`google_gke_backup_backup_plan` resource
([#&#8203;26283](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26283))
- netapp: added `mode` field to `google_netapp_storage_pool` resource
([#&#8203;26319](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26319))
- osconfig: added `patch_config.skip_unpatchable_vms` field to
`google_os_config_patch_deployment` resource
([#&#8203;26282](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26282))
- pubsub: added `text_config` field to `google_pubsub_subscription`
resource
([#&#8203;26329](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26329))

BUG FIXES:

- tags: fixed iam read-after-write consistency issue with conditions in
`google_tags_tag_key_iam_member` resource
([#&#8203;26330](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26330))

</details>

<details>
<summary>alekc/terraform-provider-kubectl (kubectl)</summary>

###
[`v2.1.5`](https://redirect.github.com/alekc/terraform-provider-kubectl/releases/tag/v2.1.5)

[Compare
Source](https://redirect.github.com/alekc/terraform-provider-kubectl/compare/v2.1.4...v2.1.5)

##### Changelog

-
[`f7a2fd6`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/f7a2fd601cfe6fc31ab06e922156f20899cdddb7)
Dependencies: Bump github.com/cloudflare/circl from 1.3.7 to 1.6.3
-
[`e913487`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/e9134875176edbedf1212371c4d120f5f26b25ab)
chore: update goreleaser configuration for version 2 and archive formats
-
[`9d18196`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/9d18196646a166c84866146cac8b79e4348f02e7)
Dependencies: Bump the gomod group across 1 directory with 4 updates
-
[`f07ca1b`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/f07ca1b7b5738532f90530d63d65033b0f181b00)
Dependencies: Bump the github-actions group across 1 directory with 4
updates

###
[`v2.1.4`](https://redirect.github.com/alekc/terraform-provider-kubectl/releases/tag/v2.1.4)

[Compare
Source](https://redirect.github.com/alekc/terraform-provider-kubectl/compare/v2.1.3...v2.1.4)

##### Changelog

-
[`4c30aba`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/4c30abaad694210ab7205fbee0e546674adda82f)
chore: update Go modules to latest versions

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 10am on friday" in timezone
Europe/London, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/overmindtech/workspace).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNS4xMSIsInVwZGF0ZWRJblZlciI6IjQzLjY2LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsInRlcnJhZm9ybSJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
GitOrigin-RevId: 2cccc3bb71a81a295f13cc2b90e8b716a879847b
<!-- CURSOR_SUMMARY -->
> [!NOTE]
> **Medium Risk**
> Adds a new Azure discovery adapter and wires it into global adapter
registration, which can affect runtime discovery behavior and
linked-item traversal. Also introduces a new Azure integration test that
provisions real resources, increasing CI/config sensitivity if enabled.
>
> **Overview**
> Adds support for Azure Private DNS Zone Virtual Network Links via a
new `NetworkDNSVirtualNetworkLink` SearchableWrapper, including
linked-item queries to the parent private DNS zone and the referenced
virtual network (with cross-resource-group scope extraction).
>
> Registers the new adapter in `manual/adapters.go`, adds a thin
`VirtualNetworkLinksClient` interface + generated mock, and updates
`shared/utils.go` resource-ID path key mapping for this new type.
>
> Adds both unit tests and a full Azure integration test that provisions
a VNet, private DNS zone, and virtual network link, then validates
`Get`/`Search`, item attributes, and linked-item queries. Updates the
adapter-creation skill docs to require bidirectional parent/child SEARCH
links and to include integration test guidance.
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
b25ff898296056b50fc9562b4f7e7838b27fe2e8. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

GitOrigin-RevId: 8865f06c70fba163edfa433bc7a66c8baa166ddb
@DavidS-ovm DavidS-ovm merged commit a12b067 into main Mar 16, 2026
@DavidS-ovm DavidS-ovm deleted the copybara/v1.17.1 branch March 16, 2026 15:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants