Skip to content

fix(deps): update all non-major dependencies - #59

Merged
pilat merged 4 commits into
mainfrom
renovate/all-minor-patch
Oct 5, 2026
Merged

pilat merged 4 commits into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Sep 14, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/compose-spec/compose-go/v2 v2.15.0 → v2.16.1 age confidence
github.com/docker/cli v29.8.0+incompatible → v29.8.2+incompatible age confidence
github.com/docker/compose/v5 v5.5.1 → v5.6.0 age confidence
github.com/moby/moby/api v1.56.0 → v1.56.1 age confidence
github.com/moby/moby/client v0.6.0 → v0.6.1 age confidence
golang.org/x/net v0.58.0 → v0.59.0 age confidence
golang.org/x/term v0.45.0 → v0.46.0 age confidence

Release Notes

compose-spec/compose-go (github.com/compose-spec/compose-go/v2)

v2.16.1

Compare Source

What's Changed

Full Changelog: compose-spec/compose-go@v2.16.0...v2.16.1

v2.16.0

Compare Source

⚠️ Breaking change (Go API)

types.ServiceConfig now embeds types.ContainerSpec and types.WorkloadSpec, shared with the new jobs element and pre_start init containers. Field access is unchanged (svc.Image), but struct literals must now set moved fields through the embedded structs, and code walking ServiceConfig with reflection will see these two embedded structs instead of a flat list of fields:

types.ServiceConfig{Name: "web", ContainerSpec: types.ContainerSpec{Image: "nginx"}}

ServiceConfig.PreStart is now a []types.PreStartHook (was []types.ServiceHook), which embeds a full ContainerSpec; Image and PerReplica are no longer fields of ServiceHook.

The order of keys in the YAML and JSON produced for a service also changes (service-level keys first, then container-level, then workload-level ones). The content is the same, but expected files compared as text need to be regenerated.

What's Changed

New Contributors

Full Changelog: compose-spec/compose-go@v2.15.0...v2.16.0

docker/cli (github.com/docker/cli)

v29.8.2+incompatible

Compare Source

v29.8.1+incompatible

Compare Source

docker/compose (github.com/docker/compose/v5)

v5.6.0

Compare Source

What's Changed

ℹ️ This release adds partial support for jobs: only manually-triggered jobs are supported for now, scheduled jobs are not yet available. Full job support will land once the corresponding Docker Engine support is merged.

✨ Improvements

Jobs

Provider services

Other

🐛 Fixes
🔧 Internal
⚙️ Dependencies

Full Changelog: docker/compose@v5.5.1...v5.6.0

moby/moby (github.com/moby/moby/api)

v1.56.1

1.56.1

Changelog

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Sep 14, 2026 •

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 19 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=24 hours

Details:

Package Change
go 1.26.4 -> 1.26.8
github.com/DefangLabs/secret-detector v0.0.0-20250403165618-22662109213e -> v0.0.0-20260916192156-3e28d7ed64df
github.com/containerd/containerd/api v1.11.1 -> v1.12.0
github.com/containerd/containerd/v2 v2.3.4 -> v2.4.1
github.com/containerd/log v0.1.0 -> v0.2.0
github.com/docker/docker-credential-helpers v0.9.8 -> v0.9.9
github.com/docker/go-connections v0.7.0 -> v0.8.1
github.com/klauspost/compress v1.19.2 -> v1.20.0
github.com/mattn/go-runewidth v0.0.23 -> v0.0.30
github.com/mattn/go-shellwords v1.0.14 -> v1.0.15
github.com/moby/buildkit v0.33.0 -> v0.33.1
github.com/moby/sys/userns v0.2.0 -> v0.2.1
github.com/santhosh-tekuri/jsonschema/v6 v6.0.1 -> v6.0.3
golang.org/x/crypto v0.56.0 -> v0.57.0
golang.org/x/sync v0.22.0 -> v0.23.0
golang.org/x/sys v0.47.0 -> v0.48.0
golang.org/x/text v0.41.0 -> v0.42.0
golang.org/x/time v0.15.0 -> v0.16.0
google.golang.org/grpc v1.83.2 -> v1.84.0
tags.cncf.io/container-device-interface v1.1.0 -> v1.1.1

@coderabbitai

coderabbitai Bot commented Sep 14, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: pilat/devbox/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 97c606f4-2e0c-437b-9702-183abef6b521

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from be9582e to 2833e2c Compare September 16, 2026 13:06
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 9a90c72 to 1c22cd7 Compare October 2, 2026 20:24
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 1c22cd7 to 4e798c7 Compare October 3, 2026 17:40
pilat added 3 commits October 5, 2026 17:06
compose-go v2.16.0 moved container fields (including Volumes) from
types.ServiceConfig into the embedded types.ContainerSpec; struct
literals in the test must set them through the embedded struct.
…nfig

compose-go v2.16.0 moved Volumes into embedded ContainerSpec and Build
into embedded WorkloadSpec; struct literals must set them via the
embedded structs.
compose-go v2.16 deprecated cli.ProjectFromOptions in favor of
ProjectOptions.LoadProject; the wrapper body is identical, so this is
a drop-in swap.
@pilat
pilat merged commit c7708e4 into main Oct 5, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant