2025-03-27 19:40:14 +00:00
|
|
|
module forgejo.org
|
2019-03-27 19:15:23 +08:00
|
|
|
|
2025-09-10 22:02:55 +02:00
|
|
|
go 1.24.0
|
2024-12-03 21:30:05 +01:00
|
|
|
|
2025-10-14 02:12:45 +02:00
|
|
|
toolchain go1.25.3
|
2019-03-27 19:15:23 +08:00
|
|
|
|
|
|
|
|
require (
|
2025-10-01 05:02:30 +02:00
|
|
|
code.forgejo.org/f3/gof3/v3 v3.11.1
|
2024-09-14 09:58:49 +02:00
|
|
|
code.forgejo.org/forgejo-contrib/go-libravatar v0.0.0-20191008002943-06d1c002b251
|
2025-05-25 12:30:04 +02:00
|
|
|
code.forgejo.org/forgejo/go-rpmutils v1.0.0
|
2025-02-28 15:23:58 +00:00
|
|
|
code.forgejo.org/forgejo/levelqueue v1.0.0
|
2024-06-09 00:05:02 +00:00
|
|
|
code.forgejo.org/forgejo/reply v1.0.2
|
feat: implement "concurrency" block in Forgejo Actions at the workflow level (#9434)
Currently references a pre-release version of `code.forgejo.org/forgejo/runner/v11`, pending release of https://code.forgejo.org/forgejo/runner/pulls/1026.
Fixes #5914.
This PR is quite large, but it can be reviewed commit-by-commit in relatively small, logical chunks.
Adds support for workflows with a `concurrency` block, and submembers `group` and `cancel-in-progress`. For example:
```
on:
workflow_dispatch:
jobs:
rust-checks:
runs-on: debian-latest
steps:
- run: sleep 300
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: false
```
The concurrency block effectively ends up with four supported behaviors that users will want to choose from:
- Backwards compatibility / default -- if omitted completely, the existing Forgejo behavior will be implemented. That behavior is that push and pull request synchronize events will cancel all previous runs on the same repository, branch, and workflow.
- Unlimited concurrency -- if the `cancel-in-progress` value is set to `false` and no `group` is provided, then the previously described Forgejo behavior will be disabled and an unlimited number of workflows can be executed simultaneously (to the maximum supported by the Forgejo Runner capacity).
- Queue-behind -- if a `group` is provided and `cancel-in-progress: false` is set, then every new action run with in the same repository with the same group value will be queued behind previous workflow runs, allowing only one workflow to execute at a time in the group, but allowing all workflows to finish naturally.
- Cancel-in-progress -- if a `group` is provided and `cancel-in-progress: true` is set, then every new action run with in the same repository with the same group value will cause previously queued or running runs to be cancelled, allowing only one workflow to execute at a time in the group, but preferring execution of the most recent workflow.
Both the `group` and `cancel-in-progress` values can access values from the `github`, `inputs` and `vars` context for dynamic behavior.
## Checklist
The [contributor guide](https://forgejo.org/docs/next/contributor/) contains information that will be helpful to first time contributors. There also are a few [conditions for merging Pull Requests in Forgejo repositories](https://codeberg.org/forgejo/governance/src/branch/main/PullRequestsAgreement.md). You are also welcome to join the [Forgejo development chatroom](https://matrix.to/#/#forgejo-development:matrix.org).
### Tests
- I added test coverage for Go changes...
- [x] in their respective `*_test.go` for unit tests.
- [x] in the `tests/integration` directory if it involves interactions with a live Forgejo server.
- I added test coverage for JavaScript changes...
- [ ] in `web_src/js/*.test.js` if it can be unit tested.
- [ ] in `tests/e2e/*.test.e2e.js` if it requires interactions with a live Forgejo server (see also the [developer guide for JavaScript testing](https://codeberg.org/forgejo/forgejo/src/branch/forgejo/tests/e2e/README.md#end-to-end-tests)).
### Documentation
- [x] I created a pull request [to the documentation](https://codeberg.org/forgejo/docs) to explain to Forgejo users how to use this change.
- https://codeberg.org/forgejo/docs/pulls/1513
- [ ] I did not document these changes and I do not expect someone else to do it.
### Release notes
- [ ] I do not want this change to show in the release notes.
- [x] I want the title to show in the release notes with a link to this pull request.
- [ ] I want the content of the `release-notes/<pull request number>.md` to be be used for the release notes instead of the title.
<!--start release-notes-assistant-->
## Release notes
<!--URL:https://codeberg.org/forgejo/forgejo-->
- Features
- [PR](https://codeberg.org/forgejo/forgejo/pulls/9434): <!--number 9434 --><!--line 0 --><!--description aW1wbGVtZW50ICJjb25jdXJyZW5jeSIgYmxvY2sgaW4gRm9yZ2VqbyBBY3Rpb25zIGF0IHRoZSB3b3JrZmxvdyBsZXZlbA==-->implement "concurrency" block in Forgejo Actions at the workflow level<!--description-->
<!--end release-notes-assistant-->
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9434
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Mathieu Fenniak <mathieu@fenniak.net>
Co-committed-by: Mathieu Fenniak <mathieu@fenniak.net>
2025-10-03 18:43:02 +02:00
|
|
|
code.forgejo.org/forgejo/runner/v11 v11.1.2
|
2025-05-25 12:17:48 +02:00
|
|
|
code.forgejo.org/go-chi/binding v1.0.1
|
|
|
|
|
code.forgejo.org/go-chi/cache v1.0.1
|
|
|
|
|
code.forgejo.org/go-chi/captcha v1.0.2
|
|
|
|
|
code.forgejo.org/go-chi/session v1.0.2
|
2024-02-20 23:22:30 +01:00
|
|
|
code.gitea.io/actions-proto-go v0.4.0
|
2025-04-04 03:49:54 +00:00
|
|
|
code.gitea.io/sdk/gitea v0.21.0
|
2025-10-13 23:16:17 +02:00
|
|
|
code.superseriousbusiness.org/exif-terminator v0.11.0
|
|
|
|
|
code.superseriousbusiness.org/go-jpeg-image-structure/v2 v2.3.0
|
2022-09-01 22:13:17 +01:00
|
|
|
codeberg.org/gusted/mcaptcha v0.0.0-20220723083913-4f3072e1d570
|
2025-10-10 14:33:57 +02:00
|
|
|
connectrpc.com/connect v1.19.1
|
2025-05-04 12:36:55 +00:00
|
|
|
github.com/42wim/httpsig v1.2.3
|
2025-05-03 06:37:53 +00:00
|
|
|
github.com/42wim/sshsig v0.0.0-20250502153856-5100632e8920
|
2023-05-03 05:40:46 +08:00
|
|
|
github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358
|
2025-05-24 23:43:27 +02:00
|
|
|
github.com/ProtonMail/go-crypto v1.3.0
|
2025-04-26 08:40:26 +00:00
|
|
|
github.com/PuerkitoBio/goquery v1.10.3
|
Support compression for Actions logs (#31761)
Support compression for Actions logs to save storage space and
bandwidth. Inspired by
https://github.com/go-gitea/gitea/issues/24256#issuecomment-1521153015
The biggest challenge is that the compression format should support
[seekable](https://github.com/facebook/zstd/blob/dev/contrib/seekable_format/zstd_seekable_compression_format.md).
So when users are viewing a part of the log lines, Gitea doesn't need to
download the whole compressed file and decompress it.
That means gzip cannot help here. And I did research, there aren't too
many choices, like bgzip and xz, but I think zstd is the most popular
one. It has an implementation in Golang with
[zstd](https://github.com/klauspost/compress/tree/master/zstd) and
[zstd-seekable-format-go](https://github.com/SaveTheRbtz/zstd-seekable-format-go),
and what is better is that it has good compatibility: a seekable format
zstd file can be read by a regular zstd reader.
This PR introduces a new package `zstd` to combine and wrap the two
packages, to provide a unified and easy-to-use API.
And a new setting `LOG_COMPRESSION` is added to the config, although I
don't see any reason why not to use compression, I think's it's a good
idea to keep the default with `none` to be consistent with old versions.
`LOG_COMPRESSION` takes effect for only new log files, it adds `.zst` as
an extension to the file name, so Gitea can determine if it needs
decompression according to the file name when reading. Old files will
keep the format since it's not worth converting them, as they will be
cleared after #31735.
<img width="541" alt="image"
src="https://github.com/user-attachments/assets/e9598764-a4e0-4b68-8c2b-f769265183c9">
(cherry picked from commit 33cc5837a655ad544b936d4d040ca36d74092588)
Conflicts:
assets/go-licenses.json
go.mod
go.sum
resolved with make tidy
2024-08-09 10:10:30 +08:00
|
|
|
github.com/SaveTheRbtz/zstd-seekable-format-go/pkg v0.7.2
|
2025-08-06 01:30:20 +02:00
|
|
|
github.com/alecthomas/chroma/v2 v2.20.0
|
2023-05-02 18:31:35 +02:00
|
|
|
github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb
|
2025-06-04 14:18:00 +02:00
|
|
|
github.com/blevesearch/bleve/v2 v2.5.2
|
2025-03-25 23:13:48 +00:00
|
|
|
github.com/buildkite/terminal-to-html/v3 v3.16.8
|
2025-08-06 16:10:19 +02:00
|
|
|
github.com/caddyserver/certmagic v0.24.0
|
2021-03-16 00:27:28 +02:00
|
|
|
github.com/chi-middleware/proxy v1.1.1
|
2021-06-20 23:00:46 +01:00
|
|
|
github.com/djherbis/buffer v1.2.0
|
|
|
|
|
github.com/djherbis/nio/v3 v3.0.1
|
2024-08-23 00:04:23 +00:00
|
|
|
github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707
|
2025-10-13 23:16:17 +02:00
|
|
|
github.com/dsoprea/go-exif/v3 v3.0.0-20210625224831-a6301f85c82b
|
2023-02-24 20:18:49 +00:00
|
|
|
github.com/dustin/go-humanize v1.0.1
|
2025-03-17 13:49:34 +00:00
|
|
|
github.com/editorconfig/editorconfig-core-go/v2 v2.6.3
|
2023-01-14 16:57:10 +01:00
|
|
|
github.com/emersion/go-imap v1.2.1
|
2024-08-31 00:04:17 +00:00
|
|
|
github.com/felixge/fgprof v0.9.5
|
2025-04-06 08:22:49 +00:00
|
|
|
github.com/fsnotify/fsnotify v1.9.0
|
2024-12-13 05:55:36 +00:00
|
|
|
github.com/gliderlabs/ssh v0.3.8
|
2023-12-19 09:18:42 +08:00
|
|
|
github.com/go-ap/activitypub v0.0.0-20231114162308-e219254dc5c9
|
2025-09-11 20:34:36 +02:00
|
|
|
github.com/go-ap/jsonld v0.0.0-20250905102310-8480b0fe24d9
|
2025-09-04 15:05:36 +02:00
|
|
|
github.com/go-chi/chi/v5 v5.2.3
|
2025-07-02 16:40:48 +02:00
|
|
|
github.com/go-chi/cors v1.2.2
|
2023-12-19 09:18:42 +08:00
|
|
|
github.com/go-co-op/gocron v1.37.0
|
2025-02-07 08:15:45 +00:00
|
|
|
github.com/go-enry/go-enry/v2 v2.9.2
|
2023-10-07 01:55:08 -04:00
|
|
|
github.com/go-ldap/ldap/v3 v3.4.6
|
2025-05-21 15:14:35 +02:00
|
|
|
github.com/go-openapi/spec v0.21.0
|
2025-06-14 07:54:51 +02:00
|
|
|
github.com/go-sql-driver/mysql v1.9.3
|
2025-09-18 20:53:12 +02:00
|
|
|
github.com/go-webauthn/webauthn v0.14.0
|
2019-09-09 08:48:21 +03:00
|
|
|
github.com/gobwas/glob v0.2.3
|
2022-03-08 06:15:30 -05:00
|
|
|
github.com/gogs/chardet v0.0.0-20211120154057-b7413eaefb8f
|
2021-02-01 05:49:25 +01:00
|
|
|
github.com/gogs/go-gogs-client v0.0.0-20210131175652-1d7215cd8d85
|
2025-08-01 21:01:58 +02:00
|
|
|
github.com/golang-jwt/jwt/v5 v5.3.0
|
Add a "summary card" to issues & PRs for consumption by OpenGraph clients (#6053)
## Overview
Hi all, I'm a first-time contributor to Forgejo. I was looking for something interesting to contribute and the first thing that caught my attention was https://codeberg.org/forgejo/forgejo/issues/6043, a request for an enhancement to include "issue previews" when publishing links to social media platforms. As a bit of background, the way these platforms work is that they search for meta tags in the posted link's content, and if they find a meta `og:image` (along with other meta tags) they'll pull the image to include in the social media post. Forgejo currently provides an `og:image` tag but it just renders the repository or repository-owner's avatar.
This PR will render `og:image` for an issue or PR into a link to `{...}/summary-card`, which is a dynamically generated image that contains a summary of the issue.
## Design Notes
### Rendering / Rasterization
The tricky part of solving this problem is rendering an image that combines some text, some images, and some layout elements. To address this, I've created a `card` module which allows for a handful of operations:
- Create a new rendered image (a "Card")
- Add a margin to a card
- Split the card, horizontally or vertically, into two pieces with a proportional layout (eg. 70%/30%, as desired), each of which are "Cards" that render into the same root image
- Render text into a card, with line-wrapping and text-alignment capabilities
- Render an image onto a card
- Fetches an external image as safely as possible (for server-side fetch of Gravatar, etc.)
The card module can be reused to create `og:image` summary cards for any object in the future, although obviously it's capabilities are limited. The current implementation is on issues/PRs.
I considered a few alternative approaches before taking this approach, and here's why I rejected those options:
- Provide the summary card as an SVG object which could be rendered much more easily with a template file -- however, support for SVG isn't defined as positive for OpenGraph, and a quick look through some existing implementations suggest that it is not widely supported, if at all
- Rendering as HTML/CSS, or SVG, and then using an external tool to convert into a PNG (or other static) image -- this would be much nicer and easier to implement, but would require tying in some very heavy-weight dependencies
- Rendering using a more sophisticated graphics library, eg. cairo -- also would be nicer and easier to implement, but again a heavy dependency for a small functionality
As a result of the limited capabilities of the new card module, summary cards don't have icons on them (which would require SVG rasterization) or pretty status badges with colors and rounded rects. In the future if better drawing capabilities were added, the graphics could be improved, but it doesn't seem too important.
### External Avatars
In order to rasterize a user's avatar onto the summary card, it might have to be retrieved by the server from the external source (eg. Gravatar). A `fetchExternalImage` routine attempts to do this in the safest way possible to protect the server from any possible security exposure from this; (a) verifying that the content-types are acceptable, (b) ensuring that the file-size and image-size are within the safe bounds that are used for custom avatars, (c) using a very-short timeout to avoid stalling the server if an external dependency is offline.
### Caching
Summary cards are cached after rendered. This has the downside of causing updates to statuses, avatars, titles, etc. being stale on the summary card for the cache TTL. However, during testing I found that some social media engines like Mastodon will cause the summary card to be accessed a significant number of times after being referenced by a post, causing a mini-tornado of requests. The cache compensates for this to avoid server load in this situation.
### Scope
I'm considering out-of-scope:
- Summary cards on other objects (eg. repos, users) can be left for future implementation
## Checklist
The [contributor guide](https://forgejo.org/docs/next/contributor/) contains information that will be helpful to first time contributors. There also are a few [conditions for merging Pull Requests in Forgejo repositories](https://codeberg.org/forgejo/governance/src/branch/main/PullRequestsAgreement.md). You are also welcome to join the [Forgejo development chatroom](https://matrix.to/#/#forgejo-development:matrix.org).
### Tests
- I added test coverage for Go changes...
- [x] in their respective `*_test.go` for unit tests.
- [x] in the `tests/integration` directory if it involves interactions with a live Forgejo server.
- ~~I added test coverage for JavaScript changes...~~ n/a, no JS changes
- [x] ~~in `web_src/js/*.test.js` if it can be unit tested.~~
- [x] ~~in `tests/e2e/*.test.e2e.js` if it requires interactions with a live Forgejo server (see also the [developer guide for JavaScript testing](https://codeberg.org/forgejo/forgejo/src/branch/forgejo/tests/e2e/README.md#end-to-end-tests)).~~
- Manual testing
- [x] Access & attach screenshots of both an issue and a pull-request's summary card; see below
- [x] Ensure reasonable (non-crash) behavior of rendering text with glyphs outside the font -- correctly rendered as replacement unicode chars
- [x] Using a public test instance, verify that og:image behavior looks good on platforms like Mastodon and BlueSky
- [x] Bluesky: ✅
- [x] Mastodon: ✅ (Note that the summary card will be requested many times as the post is federated; either each server, or each client, will fetch it itself)
- [x] OpenGraph test site (https://www.opengraph.xyz/): ✅
- [x] Discord: Looks OK ✅; needs "twitter:card" to be set to "summary_large_image" to display the large-scale image, but (a) that's probably annoying to use, (b) probably wrong because it doesn't match Twitter Card's spec for a "photographic image", and (c) don't want to encourage/continue use of vendor-specific tag
- [x] Verify cases with user avatar missing (or autogen), and repo avatar missing (falls back to repo owner avatar)
Pull request summary card:
Issue summary card:
(images to the right are the custom repo avatar, w/ fallback to the repo owner avatar)
### Documentation
- [ ] I created a pull request [to the documentation](https://codeberg.org/forgejo/docs) to explain to Forgejo users how to use this change.
- [x] I did not document these changes and I do not expect someone else to do it.
- OpenGraph capabilities are expected to work in the background without user awareness, and so there is no need for documentation to explain the capabilities for users.
### Release notes
- [ ] I do not want this change to show in the release notes.
- [x] I want the title to show in the release notes with a link to this pull request.
- [ ] I want the content of the `release-notes/<pull request number>.md` to be be used for the release notes instead of the title.
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/6053
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Co-authored-by: Mathieu Fenniak <mathieu@fenniak.net>
Co-committed-by: Mathieu Fenniak <mathieu@fenniak.net>
2024-11-29 15:02:03 +00:00
|
|
|
github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0
|
2024-08-24 16:05:36 +00:00
|
|
|
github.com/google/go-github/v64 v64.0.0
|
2025-10-01 10:06:50 +02:00
|
|
|
github.com/google/pprof v0.0.0-20250923004556-9e5a51aed1e8
|
2024-03-08 11:19:35 +08:00
|
|
|
github.com/google/uuid v1.6.0
|
2024-06-18 02:03:02 +00:00
|
|
|
github.com/gorilla/feeds v1.2.0
|
2024-11-03 00:04:40 +00:00
|
|
|
github.com/gorilla/sessions v1.4.0
|
2025-02-28 16:52:33 +00:00
|
|
|
github.com/hashicorp/go-version v1.7.0
|
2023-10-07 01:55:08 -04:00
|
|
|
github.com/hashicorp/golang-lru/v2 v2.0.7
|
2024-06-07 00:05:55 +00:00
|
|
|
github.com/huandu/xstrings v1.5.0
|
2025-06-26 08:49:20 +02:00
|
|
|
github.com/inbucket/html2text v0.9.0
|
|
|
|
|
github.com/jhillyerd/enmime/v2 v2.2.0
|
2022-02-06 21:38:14 +01:00
|
|
|
github.com/json-iterator/go v1.1.12
|
2020-11-06 19:41:42 +01:00
|
|
|
github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
|
2025-04-09 06:05:01 +00:00
|
|
|
github.com/klauspost/compress v1.18.0
|
2025-08-10 10:17:55 +02:00
|
|
|
github.com/klauspost/cpuid/v2 v2.2.11
|
2023-05-05 05:17:19 -04:00
|
|
|
github.com/lib/pq v1.10.9
|
2024-05-21 20:07:52 +00:00
|
|
|
github.com/markbates/goth v1.80.0
|
2023-12-19 09:18:42 +08:00
|
|
|
github.com/mattn/go-isatty v0.0.20
|
2025-08-15 05:27:41 +02:00
|
|
|
github.com/mattn/go-sqlite3 v1.14.32
|
2025-09-14 13:22:15 +02:00
|
|
|
github.com/meilisearch/meilisearch-go v0.34.0
|
2025-09-17 16:17:03 +02:00
|
|
|
github.com/mholt/archives v0.1.4
|
2024-07-05 00:02:11 +00:00
|
|
|
github.com/microcosm-cc/bluemonday v1.0.27
|
2025-08-10 10:17:55 +02:00
|
|
|
github.com/minio/minio-go/v7 v7.0.95
|
2025-05-14 02:36:04 +00:00
|
|
|
github.com/msteinert/pam/v2 v2.1.0
|
2025-07-20 02:48:29 +02:00
|
|
|
github.com/niklasfasching/go-org v1.9.1
|
2022-05-10 12:32:42 +02:00
|
|
|
github.com/olivere/elastic/v7 v7.0.32
|
2023-02-06 11:07:09 +01:00
|
|
|
github.com/opencontainers/go-digest v1.0.0
|
2025-03-04 00:33:22 +00:00
|
|
|
github.com/opencontainers/image-spec v1.1.1
|
2023-01-12 03:21:16 -05:00
|
|
|
github.com/pquerna/otp v1.4.0
|
2025-03-05 12:03:18 +00:00
|
|
|
github.com/prometheus/client_golang v1.21.1
|
Update module github.com/redis/go-redis/v9 to v9.8.0 (forgejo) (#7739)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | require | minor | `v9.7.3` -> `v9.8.0` |
---
### Release Notes
<details>
<summary>redis/go-redis (github.com/redis/go-redis/v9)</summary>
### [`v9.8.0`](https://github.com/redis/go-redis/releases/tag/v9.8.0)
[Compare Source](https://github.com/redis/go-redis/compare/v9.7.3...v9.8.0)
### 9.8.0 (2025-04-30)
#### 🚀 Highlights
- **Redis 8 Support**: Full compatibility with Redis 8.0, including testing and CI integration
- **Enhanced Hash Operations**: Added support for new hash commands (`HGETDEL`, `HGETEX`, `HSETEX`) and `HSTRLEN` command
- **Search Improvements**: Enabled Search DIALECT 2 by default and added `CountOnly` argument for `FT.Search`
#### ✨ New Features
- Added support for new hash commands: `HGETDEL`, `HGETEX`, `HSETEX` ([#​3305](https://github.com/redis/go-redis/pull/3305))
- Added `HSTRLEN` command for hash operations ([#​2843](https://github.com/redis/go-redis/pull/2843))
- Added `Do` method for raw query by single connection from `pool.Conn()` ([#​3182](https://github.com/redis/go-redis/pull/3182))
- Prevent false-positive marshaling by treating zero time.Time as empty in isEmptyValue ([#​3273](https://github.com/redis/go-redis/pull/3273))
- Added FailoverClusterClient support for Universal client ([#​2794](https://github.com/redis/go-redis/pull/2794))
- Added support for cluster mode with `IsClusterMode` config parameter ([#​3255](https://github.com/redis/go-redis/pull/3255))
- Added client name support in `HELLO` RESP handshake ([#​3294](https://github.com/redis/go-redis/pull/3294))
- **Enabled Search DIALECT 2 by default** ([#​3213](https://github.com/redis/go-redis/pull/3213))
- Added read-only option for failover configurations ([#​3281](https://github.com/redis/go-redis/pull/3281))
- Added `CountOnly` argument for `FT.Search` to use `LIMIT 0 0` ([#​3338](https://github.com/redis/go-redis/pull/3338))
- Added `DB` option support in `NewFailoverClusterClient` ([#​3342](https://github.com/redis/go-redis/pull/3342))
- Added `nil` check for the options when creating a client ([#​3363](https://github.com/redis/go-redis/pull/3363))
#### 🐛 Bug Fixes
- Fixed `PubSub` concurrency safety issues ([#​3360](https://github.com/redis/go-redis/pull/3360))
- Fixed panic caused when argument is `nil` ([#​3353](https://github.com/redis/go-redis/pull/3353))
- Improved error handling when fetching master node from sentinels ([#​3349](https://github.com/redis/go-redis/pull/3349))
- Fixed connection pool timeout issues and increased retries ([#​3298](https://github.com/redis/go-redis/pull/3298))
- Fixed context cancellation error leading to connection spikes on Primary instances ([#​3190](https://github.com/redis/go-redis/pull/3190))
- Fixed RedisCluster client to consider `MASTERDOWN` a retriable error ([#​3164](https://github.com/redis/go-redis/pull/3164))
- Fixed tracing to show complete commands instead of truncated versions ([#​3290](https://github.com/redis/go-redis/pull/3290))
- Fixed OpenTelemetry instrumentation to prevent multiple span reporting ([#​3168](https://github.com/redis/go-redis/pull/3168))
- Fixed `FT.Search` Limit argument and added `CountOnly` argument for limit 0 0 ([#​3338](https://github.com/redis/go-redis/pull/3338))
- Fixed missing command in interface ([#​3344](https://github.com/redis/go-redis/pull/3344))
- Fixed slot calculation for `COUNTKEYSINSLOT` command ([#​3327](https://github.com/redis/go-redis/pull/3327))
- Updated PubSub implementation with correct context ([#​3329](https://github.com/redis/go-redis/pull/3329))
#### 📚 Documentation
- Added hash search examples ([#​3357](https://github.com/redis/go-redis/pull/3357))
- Fixed documentation comments ([#​3351](https://github.com/redis/go-redis/pull/3351))
- Added `CountOnly` search example ([#​3345](https://github.com/redis/go-redis/pull/3345))
- Added examples for list commands: `LLEN`, `LPOP`, `LPUSH`, `LRANGE`, `RPOP`, `RPUSH` ([#​3234](https://github.com/redis/go-redis/pull/3234))
- Added `SADD` and `SMEMBERS` command examples ([#​3242](https://github.com/redis/go-redis/pull/3242))
- Updated `README.md` to use Redis Discord guild ([#​3331](https://github.com/redis/go-redis/pull/3331))
- Updated `HExpire` command documentation ([#​3355](https://github.com/redis/go-redis/pull/3355))
- Featured OpenTelemetry instrumentation more prominently ([#​3316](https://github.com/redis/go-redis/pull/3316))
- Updated `README.md` with additional information ([#​310ce55](https://github.com/redis/go-redis/commit/310ce55))
#### ⚡ Performance and Reliability
- Bound connection pool background dials to configured dial timeout ([#​3089](https://github.com/redis/go-redis/pull/3089))
- Ensured context isn't exhausted via concurrent query ([#​3334](https://github.com/redis/go-redis/pull/3334))
#### 🔧 Dependencies and Infrastructure
- Updated testing image to Redis 8.0-RC2 ([#​3361](https://github.com/redis/go-redis/pull/3361))
- Enabled CI for Redis CE 8.0 ([#​3274](https://github.com/redis/go-redis/pull/3274))
- Updated various dependencies:
- Bumped golangci/golangci-lint-action from 6.5.0 to 7.0.0 ([#​3354](https://github.com/redis/go-redis/pull/3354))
- Bumped rojopolis/spellcheck-github-actions ([#​3336](https://github.com/redis/go-redis/pull/3336))
- Bumped golang.org/x/net in example/otel ([#​3308](https://github.com/redis/go-redis/pull/3308))
- Migrated golangci-lint configuration to v2 format ([#​3354](https://github.com/redis/go-redis/pull/3354))
#### ⚠️ Breaking Changes
- **Enabled Search DIALECT 2 by default** ([#​3213](https://github.com/redis/go-redis/pull/3213))
- Dropped RedisGears (Triggers and Functions) support ([#​3321](https://github.com/redis/go-redis/pull/3321))
- Dropped FT.PROFILE command that was never enabled ([#​3323](https://github.com/redis/go-redis/pull/3323))
#### 🔒 Security
- Fixed network error handling on SETINFO (CVE-2025-29923) ([#​3295](https://github.com/redis/go-redis/pull/3295))
#### 🧪 Testing
- Added integration tests for Redis 8 behavior changes in Redis Search ([#​3337](https://github.com/redis/go-redis/pull/3337))
- Added vector types INT8 and UINT8 tests ([#​3299](https://github.com/redis/go-redis/pull/3299))
- Added test codes for search_commands.go ([#​3285](https://github.com/redis/go-redis/pull/3285))
- Fixed example test sorting ([#​3292](https://github.com/redis/go-redis/pull/3292))
#### 👥 Contributors
We would like to thank all the contributors who made this release possible:
[@​alexander-menshchikov](https://github.com/alexander-menshchikov), [@​EXPEbdodla](https://github.com/EXPEbdodla), [@​afti](https://github.com/afti), [@​dmaier-redislabs](https://github.com/dmaier-redislabs), [@​four_leaf_clover](https://github.com/four_leaf_clover), [@​alohaglenn](https://github.com/alohaglenn), [@​gh73962](https://github.com/gh73962), [@​justinmir](https://github.com/justinmir), [@​LINKIWI](https://github.com/LINKIWI), [@​liushuangbill](https://github.com/liushuangbill), [@​golang88](https://github.com/golang88), [@​gnpaone](https://github.com/gnpaone), [@​ndyakov](https://github.com/ndyakov), [@​nikolaydubina](https://github.com/nikolaydubina), [@​oleglacto](https://github.com/oleglacto), [@​andy-stark-redis](https://github.com/andy-stark-redis), [@​rodneyosodo](https://github.com/rodneyosodo), [@​dependabot](https://github.com/dependabot), [@​rfyiamcool](https://github.com/rfyiamcool), [@​frankxjkuang](https://github.com/frankxjkuang), [@​fukua95](https://github.com/fukua95), [@​soleymani-milad](https://github.com/soleymani-milad), [@​ofekshenawa](https://github.com/ofekshenawa), [@​khasanovbi](https://github.com/khasanovbi)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjI2MS40IiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/7739
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2025-05-01 08:45:55 +00:00
|
|
|
github.com/redis/go-redis/v9 v9.8.0
|
2023-08-24 11:06:51 +08:00
|
|
|
github.com/robfig/cron/v3 v3.0.1
|
2025-06-03 14:24:57 +02:00
|
|
|
github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
|
2025-06-06 15:02:54 +02:00
|
|
|
github.com/sergi/go-diff v1.4.0
|
2025-09-10 22:02:55 +02:00
|
|
|
github.com/stretchr/testify v1.11.1
|
2020-09-27 22:09:46 +01:00
|
|
|
github.com/syndtr/goleveldb v1.0.0
|
2025-09-04 00:43:58 +02:00
|
|
|
github.com/ulikunitz/xz v0.5.15
|
2025-08-13 03:19:13 +02:00
|
|
|
github.com/urfave/cli/v3 v3.4.1
|
2024-05-07 07:59:49 +00:00
|
|
|
github.com/valyala/fastjson v1.6.4
|
2023-05-05 05:17:19 -04:00
|
|
|
github.com/yohcop/openid-go v1.0.1
|
2025-07-23 02:58:57 +02:00
|
|
|
github.com/yuin/goldmark v1.7.13
|
2023-08-16 20:02:40 +08:00
|
|
|
github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc
|
2025-10-01 05:02:30 +02:00
|
|
|
gitlab.com/gitlab-org/api/client-go v0.143.2
|
2025-08-19 20:41:07 +02:00
|
|
|
go.uber.org/mock v0.6.0
|
2025-08-20 15:31:12 +02:00
|
|
|
go.yaml.in/yaml/v3 v3.0.4
|
2025-10-10 15:09:55 +02:00
|
|
|
golang.org/x/crypto v0.43.0
|
2025-10-11 14:06:42 +02:00
|
|
|
golang.org/x/image v0.32.0
|
2025-10-11 11:20:39 +02:00
|
|
|
golang.org/x/net v0.46.0
|
2025-10-11 04:55:20 +02:00
|
|
|
golang.org/x/oauth2 v0.32.0
|
2025-09-13 08:01:37 +02:00
|
|
|
golang.org/x/sync v0.17.0
|
2025-10-10 15:09:55 +02:00
|
|
|
golang.org/x/sys v0.37.0
|
|
|
|
|
golang.org/x/text v0.30.0
|
2025-10-03 09:02:14 +02:00
|
|
|
google.golang.org/protobuf v1.36.10
|
2019-03-27 19:15:23 +08:00
|
|
|
gopkg.in/gomail.v2 v2.0.0-20160411212932-81ebce5c23df
|
2022-09-01 22:13:17 +01:00
|
|
|
gopkg.in/ini.v1 v1.67.0
|
2023-07-13 22:00:31 -05:00
|
|
|
mvdan.cc/xurls/v2 v2.5.0
|
2023-07-26 04:27:44 +08:00
|
|
|
xorm.io/builder v0.3.13
|
2024-07-21 16:03:40 +00:00
|
|
|
xorm.io/xorm v1.3.9
|
2019-03-27 19:15:23 +08:00
|
|
|
)
|
2020-09-06 02:44:34 +02:00
|
|
|
|
2022-03-16 00:08:31 -04:00
|
|
|
require (
|
2025-03-08 15:28:58 +00:00
|
|
|
cloud.google.com/go/compute/metadata v0.6.0 // indirect
|
2025-10-13 23:16:17 +02:00
|
|
|
code.superseriousbusiness.org/go-png-image-structure/v2 v2.3.0 // indirect
|
2025-08-21 09:04:32 +02:00
|
|
|
dario.cat/mergo v1.0.2 // indirect
|
2024-03-10 14:50:56 +01:00
|
|
|
filippo.io/edwards25519 v1.1.0 // indirect
|
2022-09-01 22:13:17 +01:00
|
|
|
git.sr.ht/~mariusor/go-xsd-duration v0.0.0-20220703122237-02e73435a078 // indirect
|
2024-12-23 00:05:04 +00:00
|
|
|
github.com/Microsoft/go-winio v0.6.2 // indirect
|
Update module github.com/blevesearch/bleve/v2 to v2.5.0 (forgejo) (#7468)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) | require | minor | `v2.4.4` -> `v2.5.0` |
---
### Release Notes
<details>
<summary>blevesearch/bleve (github.com/blevesearch/bleve/v2)</summary>
### [`v2.5.0`](https://github.com/blevesearch/bleve/releases/tag/v2.5.0)
[Compare Source](https://github.com/blevesearch/bleve/compare/v2.4.4...v2.5.0)
##### Bug Fixes
- Exact hits to score higher than fuzzy hits, with https://github.com/blevesearch/bleve/pull/2056
- Fix boosting during hybrid search that involves text + nearest neighbor, with https://github.com/blevesearch/bleve/pull/2127
- Addressed bug in IP field handling while highlighting, with https://github.com/blevesearch/bleve/pull/2142
- Graceful error handling within registry, with https://github.com/blevesearch/bleve/pull/2151
- `http/` package (meant for demo purposes) removed from repository to remove vulnerability - [CVE-2022-31022](https://github.com/blevesearch/bleve/security/advisories/GHSA-9w9f-6mg8-jp7w), relocated to within https://github.com/blevesearch/bleve-explorer
- Geo radius queries will now advertise distances (within sort values) in readable format, with https://github.com/blevesearch/bleve/pull/2137
##### Improvements
- Vector search requires `faiss` dynamic library to be built from [blevesearch/faiss@352484e](https://github.com/blevesearch/faiss/tree/352484e0fc9d1f8f46737841efe5f26e0f383f71) which is a modified version of [v1.10.0](https://github.com/facebookresearch/faiss/releases/tag/v1.10.0)
- Support for **BM25 scoring**, see: [scoring.md](https://github.com/blevesearch/bleve/blob/v2.5.0/docs/scoring.md#bm25)
- Support for **synonyms' search**, see: [synonyms.md](https://github.com/blevesearch/bleve/blob/v2.5.0/docs/synonyms.md)
- **Significant performance improvements in pre-filtered vector search**, with https://github.com/blevesearch/bleve/pull/2169 + dependent changes
- `auto` fuzziness detection with https://github.com/blevesearch/bleve/pull/2060
- Ability to affect ingestion/drain rate by tuning persister workers with https://github.com/blevesearch/bleve/pull/2100
- Additional config in merge policy for improved merger behavior, with https://github.com/blevesearch/bleve/pull/2134
- Geo improvements: footprint reduction for polygons, better validation and graceful error handling, with https://github.com/blevesearch/bleve/pull/2162 + https://github.com/blevesearch/bleve/pull/2158 + https://github.com/blevesearch/bleve/pull/2165
- Upgrade to RoaringBitmap/roaring@v2.4.5, etcd.io/bbolt@v1.4.0
- More metrics
##### Milestone
- [v2.5.0](https://github.com/blevesearch/bleve/milestone/24)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "* 0-3 * * *" (UTC), Automerge - "* 0-3 * * *" (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuMSIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi4xIiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->
Co-authored-by: Gusted <postmaster@gusted.xyz>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/7468
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Reviewed-by: Shiny Nematoda <snematoda@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2025-04-06 08:41:38 +00:00
|
|
|
github.com/RoaringBitmap/roaring/v2 v2.4.5 // indirect
|
2025-09-17 16:17:03 +02:00
|
|
|
github.com/STARRY-S/zip v0.2.3 // indirect
|
|
|
|
|
github.com/andybalholm/brotli v1.2.0 // indirect
|
2025-01-01 08:03:04 +00:00
|
|
|
github.com/andybalholm/cascadia v1.3.3 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be // indirect
|
|
|
|
|
github.com/aymerick/douceur v0.2.0 // indirect
|
|
|
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
Update module github.com/blevesearch/bleve/v2 to v2.5.0 (forgejo) (#7468)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) | require | minor | `v2.4.4` -> `v2.5.0` |
---
### Release Notes
<details>
<summary>blevesearch/bleve (github.com/blevesearch/bleve/v2)</summary>
### [`v2.5.0`](https://github.com/blevesearch/bleve/releases/tag/v2.5.0)
[Compare Source](https://github.com/blevesearch/bleve/compare/v2.4.4...v2.5.0)
##### Bug Fixes
- Exact hits to score higher than fuzzy hits, with https://github.com/blevesearch/bleve/pull/2056
- Fix boosting during hybrid search that involves text + nearest neighbor, with https://github.com/blevesearch/bleve/pull/2127
- Addressed bug in IP field handling while highlighting, with https://github.com/blevesearch/bleve/pull/2142
- Graceful error handling within registry, with https://github.com/blevesearch/bleve/pull/2151
- `http/` package (meant for demo purposes) removed from repository to remove vulnerability - [CVE-2022-31022](https://github.com/blevesearch/bleve/security/advisories/GHSA-9w9f-6mg8-jp7w), relocated to within https://github.com/blevesearch/bleve-explorer
- Geo radius queries will now advertise distances (within sort values) in readable format, with https://github.com/blevesearch/bleve/pull/2137
##### Improvements
- Vector search requires `faiss` dynamic library to be built from [blevesearch/faiss@352484e](https://github.com/blevesearch/faiss/tree/352484e0fc9d1f8f46737841efe5f26e0f383f71) which is a modified version of [v1.10.0](https://github.com/facebookresearch/faiss/releases/tag/v1.10.0)
- Support for **BM25 scoring**, see: [scoring.md](https://github.com/blevesearch/bleve/blob/v2.5.0/docs/scoring.md#bm25)
- Support for **synonyms' search**, see: [synonyms.md](https://github.com/blevesearch/bleve/blob/v2.5.0/docs/synonyms.md)
- **Significant performance improvements in pre-filtered vector search**, with https://github.com/blevesearch/bleve/pull/2169 + dependent changes
- `auto` fuzziness detection with https://github.com/blevesearch/bleve/pull/2060
- Ability to affect ingestion/drain rate by tuning persister workers with https://github.com/blevesearch/bleve/pull/2100
- Additional config in merge policy for improved merger behavior, with https://github.com/blevesearch/bleve/pull/2134
- Geo improvements: footprint reduction for polygons, better validation and graceful error handling, with https://github.com/blevesearch/bleve/pull/2162 + https://github.com/blevesearch/bleve/pull/2158 + https://github.com/blevesearch/bleve/pull/2165
- Upgrade to RoaringBitmap/roaring@v2.4.5, etcd.io/bbolt@v1.4.0
- More metrics
##### Milestone
- [v2.5.0](https://github.com/blevesearch/bleve/milestone/24)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "* 0-3 * * *" (UTC), Automerge - "* 0-3 * * *" (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuMSIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi4xIiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->
Co-authored-by: Gusted <postmaster@gusted.xyz>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/7468
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Reviewed-by: Shiny Nematoda <snematoda@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2025-04-06 08:41:38 +00:00
|
|
|
github.com/bits-and-blooms/bitset v1.22.0 // indirect
|
2025-05-16 19:52:56 +00:00
|
|
|
github.com/blevesearch/bleve_index_api v1.2.8 // indirect
|
|
|
|
|
github.com/blevesearch/geo v0.2.3 // indirect
|
Update module github.com/blevesearch/bleve/v2 to v2.5.0 (forgejo) (#7468)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) | require | minor | `v2.4.4` -> `v2.5.0` |
---
### Release Notes
<details>
<summary>blevesearch/bleve (github.com/blevesearch/bleve/v2)</summary>
### [`v2.5.0`](https://github.com/blevesearch/bleve/releases/tag/v2.5.0)
[Compare Source](https://github.com/blevesearch/bleve/compare/v2.4.4...v2.5.0)
##### Bug Fixes
- Exact hits to score higher than fuzzy hits, with https://github.com/blevesearch/bleve/pull/2056
- Fix boosting during hybrid search that involves text + nearest neighbor, with https://github.com/blevesearch/bleve/pull/2127
- Addressed bug in IP field handling while highlighting, with https://github.com/blevesearch/bleve/pull/2142
- Graceful error handling within registry, with https://github.com/blevesearch/bleve/pull/2151
- `http/` package (meant for demo purposes) removed from repository to remove vulnerability - [CVE-2022-31022](https://github.com/blevesearch/bleve/security/advisories/GHSA-9w9f-6mg8-jp7w), relocated to within https://github.com/blevesearch/bleve-explorer
- Geo radius queries will now advertise distances (within sort values) in readable format, with https://github.com/blevesearch/bleve/pull/2137
##### Improvements
- Vector search requires `faiss` dynamic library to be built from [blevesearch/faiss@352484e](https://github.com/blevesearch/faiss/tree/352484e0fc9d1f8f46737841efe5f26e0f383f71) which is a modified version of [v1.10.0](https://github.com/facebookresearch/faiss/releases/tag/v1.10.0)
- Support for **BM25 scoring**, see: [scoring.md](https://github.com/blevesearch/bleve/blob/v2.5.0/docs/scoring.md#bm25)
- Support for **synonyms' search**, see: [synonyms.md](https://github.com/blevesearch/bleve/blob/v2.5.0/docs/synonyms.md)
- **Significant performance improvements in pre-filtered vector search**, with https://github.com/blevesearch/bleve/pull/2169 + dependent changes
- `auto` fuzziness detection with https://github.com/blevesearch/bleve/pull/2060
- Ability to affect ingestion/drain rate by tuning persister workers with https://github.com/blevesearch/bleve/pull/2100
- Additional config in merge policy for improved merger behavior, with https://github.com/blevesearch/bleve/pull/2134
- Geo improvements: footprint reduction for polygons, better validation and graceful error handling, with https://github.com/blevesearch/bleve/pull/2162 + https://github.com/blevesearch/bleve/pull/2158 + https://github.com/blevesearch/bleve/pull/2165
- Upgrade to RoaringBitmap/roaring@v2.4.5, etcd.io/bbolt@v1.4.0
- More metrics
##### Milestone
- [v2.5.0](https://github.com/blevesearch/bleve/milestone/24)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "* 0-3 * * *" (UTC), Automerge - "* 0-3 * * *" (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuMSIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi4xIiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->
Co-authored-by: Gusted <postmaster@gusted.xyz>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/7468
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Reviewed-by: Shiny Nematoda <snematoda@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2025-04-06 08:41:38 +00:00
|
|
|
github.com/blevesearch/go-faiss v1.0.25 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/blevesearch/go-porterstemmer v1.0.3 // indirect
|
2022-05-10 12:32:42 +02:00
|
|
|
github.com/blevesearch/gtreap v0.1.1 // indirect
|
2022-10-01 09:49:30 -04:00
|
|
|
github.com/blevesearch/mmap-go v1.0.4 // indirect
|
2025-05-16 19:52:56 +00:00
|
|
|
github.com/blevesearch/scorch_segment_api/v2 v2.3.10 // indirect
|
2023-01-12 03:21:16 -05:00
|
|
|
github.com/blevesearch/segment v0.9.1 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/blevesearch/snowballstem v0.9.0 // indirect
|
2023-01-12 03:21:16 -05:00
|
|
|
github.com/blevesearch/upsidedown_store_api v1.0.2 // indirect
|
Update module github.com/blevesearch/bleve/v2 to v2.5.0 (forgejo) (#7468)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) | require | minor | `v2.4.4` -> `v2.5.0` |
---
### Release Notes
<details>
<summary>blevesearch/bleve (github.com/blevesearch/bleve/v2)</summary>
### [`v2.5.0`](https://github.com/blevesearch/bleve/releases/tag/v2.5.0)
[Compare Source](https://github.com/blevesearch/bleve/compare/v2.4.4...v2.5.0)
##### Bug Fixes
- Exact hits to score higher than fuzzy hits, with https://github.com/blevesearch/bleve/pull/2056
- Fix boosting during hybrid search that involves text + nearest neighbor, with https://github.com/blevesearch/bleve/pull/2127
- Addressed bug in IP field handling while highlighting, with https://github.com/blevesearch/bleve/pull/2142
- Graceful error handling within registry, with https://github.com/blevesearch/bleve/pull/2151
- `http/` package (meant for demo purposes) removed from repository to remove vulnerability - [CVE-2022-31022](https://github.com/blevesearch/bleve/security/advisories/GHSA-9w9f-6mg8-jp7w), relocated to within https://github.com/blevesearch/bleve-explorer
- Geo radius queries will now advertise distances (within sort values) in readable format, with https://github.com/blevesearch/bleve/pull/2137
##### Improvements
- Vector search requires `faiss` dynamic library to be built from [blevesearch/faiss@352484e](https://github.com/blevesearch/faiss/tree/352484e0fc9d1f8f46737841efe5f26e0f383f71) which is a modified version of [v1.10.0](https://github.com/facebookresearch/faiss/releases/tag/v1.10.0)
- Support for **BM25 scoring**, see: [scoring.md](https://github.com/blevesearch/bleve/blob/v2.5.0/docs/scoring.md#bm25)
- Support for **synonyms' search**, see: [synonyms.md](https://github.com/blevesearch/bleve/blob/v2.5.0/docs/synonyms.md)
- **Significant performance improvements in pre-filtered vector search**, with https://github.com/blevesearch/bleve/pull/2169 + dependent changes
- `auto` fuzziness detection with https://github.com/blevesearch/bleve/pull/2060
- Ability to affect ingestion/drain rate by tuning persister workers with https://github.com/blevesearch/bleve/pull/2100
- Additional config in merge policy for improved merger behavior, with https://github.com/blevesearch/bleve/pull/2134
- Geo improvements: footprint reduction for polygons, better validation and graceful error handling, with https://github.com/blevesearch/bleve/pull/2162 + https://github.com/blevesearch/bleve/pull/2158 + https://github.com/blevesearch/bleve/pull/2165
- Upgrade to RoaringBitmap/roaring@v2.4.5, etcd.io/bbolt@v1.4.0
- More metrics
##### Milestone
- [v2.5.0](https://github.com/blevesearch/bleve/milestone/24)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "* 0-3 * * *" (UTC), Automerge - "* 0-3 * * *" (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuMSIsInVwZGF0ZWRJblZlciI6IjM5LjIyMi4xIiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->
Co-authored-by: Gusted <postmaster@gusted.xyz>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/7468
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Reviewed-by: Shiny Nematoda <snematoda@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2025-04-06 08:41:38 +00:00
|
|
|
github.com/blevesearch/vellum v1.1.0 // indirect
|
2025-05-16 19:52:56 +00:00
|
|
|
github.com/blevesearch/zapx/v11 v11.4.2 // indirect
|
|
|
|
|
github.com/blevesearch/zapx/v12 v12.4.2 // indirect
|
|
|
|
|
github.com/blevesearch/zapx/v13 v13.4.2 // indirect
|
|
|
|
|
github.com/blevesearch/zapx/v14 v14.4.2 // indirect
|
|
|
|
|
github.com/blevesearch/zapx/v15 v15.4.2 // indirect
|
2025-06-04 14:18:00 +02:00
|
|
|
github.com/blevesearch/zapx/v16 v16.2.4 // indirect
|
Update github.com/rhysd/actionlint (indirect) to v1.7.8 (forgejo) (#9655)
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [github.com/rhysd/actionlint](https://github.com/rhysd/actionlint) | `v1.7.7` -> `v1.7.8` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>rhysd/actionlint (github.com/rhysd/actionlint)</summary>
### [`v1.7.8`](https://github.com/rhysd/actionlint/blob/HEAD/CHANGELOG.md#v178---2025-10-11)
[Compare Source](https://github.com/rhysd/actionlint/compare/v1.7.7...v1.7.8)
- Support `models` permission in `permissions` section. ([#​531](https://github.com/rhysd/actionlint/issues/531), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Support `job.check_run_id` property. ([#​576](https://github.com/rhysd/actionlint/issues/576), thanks [@​muzimuzhi](https://github.com/muzimuzhi) for fixing the type at [#​577](https://github.com/rhysd/actionlint/issues/577))
- Support `node24` runtime at `using` section in action metadata. ([#​561](https://github.com/rhysd/actionlint/issues/561), thanks [@​salmanmkc](https://github.com/salmanmkc))
- Add support for the following runner labels
- [`macos-26` and `macos-26-large`](https://github.blog/changelog/2025-09-11-actions-macos-26-image-now-in-public-preview/) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- [`macos-15`](https://github.blog/changelog/2025-09-19-github-actions-macos-13-runner-image-is-closing-down/#what-you-need-to-do) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Drop support for the following runner labels.
- [`ubuntu-20.04`](https://github.com/actions/runner-images/issues/11101) ([#​534](https://github.com/rhysd/actionlint/issues/534), thanks [@​shogo82148](https://github.com/shogo82148))
- [`windows-2019`](https://github.blog/changelog/2025-04-15-upcoming-breaking-changes-and-releases-for-github-actions/#windows-server-2019-is-closing-down) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Support [`deprecationMessage`](https://docs.github.com/en/actions/reference/workflows-and-actions/metadata-syntax#inputsinput_iddeprecationmessage) in action inputs. ([#​540](https://github.com/rhysd/actionlint/issues/540), thanks [@​saansh45](https://github.com/saansh45))
- Support [`windows-11-arm` runner](https://github.blog/changelog/2025-04-14-windows-arm64-hosted-runners-now-available-in-public-preview/). ([#​542](https://github.com/rhysd/actionlint/issues/542), thanks [@​trim21](https://github.com/trim21))
- Handle `ubuntu-latest` runner label as `ubuntu-24.04` and `macos-latest` runner label as `macos-15`.
- Report mixing Intel Mac labels and Arm Mac labels as error.
- Add new types to `issues` and `pull_request_target` webhooks.
- Update the popular actions data set to the latest and add more actions to it (thanks [@​sethvargo](https://github.com/sethvargo) for fixing the `go generate` scripts)
- `actions/create-github-app-token`
- `actions/attest-sbom`
- `actions/ai-inference`
- `peter-evans/create-or-update-comment`
- `release-drafter/release-drafter`
- `SamKirkland/FTP-Deploy-Action`
- Fix the version value in `actionlint -version` can be empty.
- Fix outdated URL links in some error messages and documents.
- [Homebrew formula in this repository](https://github.com/rhysd/actionlint/blob/main/HomebrewFormula/actionlint.rb) is deprecated and [Homebrew cask](https://github.com/rhysd/actionlint/blob/main/Casks/actionlint.rb) is newly added instead because [GoReleaser no longer supports Homebrew formula update](https://goreleaser.com/deprecations/#brews). Note that Homebrew's official `actionlint` formula is still maintained. Please read the [documentation](https://github.com/rhysd/actionlint/blob/main/docs/install.md#homebrew) for more details.
- Drop support for Go 1.23 and earlier because they are no longer maintained officially. Go 1.24 and later are supported to build actionlint.
- Replace [`go-yaml/yaml@v3`](https://github.com/go-yaml/yaml) package with [`yaml/go-yaml@v4`](https://github.com/yaml/go-yaml) package. `go-yaml/yaml` was used for parsing workflow files however it was unmaintained. `yaml/go-yaml` is a successor of the library officially maintained by YAML organization. ([#​575](https://github.com/rhysd/actionlint/issues/575))
- Improve error messages on parsing workflow and action metadata files.
\[Changes]\[v1.7.8]
<a id="v1.7.7"></a>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzUuNSIsInVwZGF0ZWRJblZlciI6IjQxLjEzNS41IiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->
Co-authored-by: Earl Warren <contact@earl-warren.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9655
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2025-10-12 14:50:03 +02:00
|
|
|
github.com/bmatcuk/doublestar/v4 v4.9.1 // indirect
|
2025-08-08 06:53:20 +02:00
|
|
|
github.com/bodgit/plumbing v1.3.0 // indirect
|
2025-09-17 16:17:03 +02:00
|
|
|
github.com/bodgit/sevenzip v1.6.1 // indirect
|
2025-08-08 06:53:20 +02:00
|
|
|
github.com/bodgit/windows v1.0.1 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/boombuler/barcode v1.0.1 // indirect
|
2025-05-25 12:17:48 +02:00
|
|
|
github.com/bradfitz/gomemcache v0.0.0-20250403215159-8d39553ac7cf // indirect
|
2024-10-03 00:03:02 +00:00
|
|
|
github.com/caddyserver/zerossl v0.1.3 // indirect
|
2023-01-14 16:57:10 +01:00
|
|
|
github.com/cention-sany/utf7 v0.0.0-20170124080048-26cad61bd60a // indirect
|
2024-07-04 02:02:59 +00:00
|
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
2025-05-25 12:30:04 +02:00
|
|
|
github.com/cloudflare/circl v1.6.1 // indirect
|
2025-08-06 00:04:22 +00:00
|
|
|
github.com/cyphar/filepath-securejoin v0.4.1 // indirect
|
2023-10-13 12:11:15 -04:00
|
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
|
|
|
github.com/davidmz/go-pageant v1.0.2 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
|
2025-04-04 03:52:13 +00:00
|
|
|
github.com/dlclark/regexp2 v1.11.5 // indirect
|
2025-10-13 23:16:17 +02:00
|
|
|
github.com/dsoprea/go-iptc v0.0.0-20200609062250-162ae6b44feb // indirect
|
|
|
|
|
github.com/dsoprea/go-logging v0.0.0-20200710184922-b02d349568dd // indirect
|
|
|
|
|
github.com/dsoprea/go-photoshop-info-format v0.0.0-20200609050348-3db9b63b202c // indirect
|
|
|
|
|
github.com/dsoprea/go-utility/v2 v2.0.0-20200717064901-2fccff4aa15e // indirect
|
2023-12-19 09:18:42 +08:00
|
|
|
github.com/emersion/go-sasl v0.0.0-20231106173351-e73c9f7bad43 // indirect
|
2024-08-12 17:16:55 +02:00
|
|
|
github.com/emirpasic/gods v1.18.1 // indirect
|
2025-06-26 08:49:20 +02:00
|
|
|
github.com/fatih/color v1.18.0 // indirect
|
2025-07-22 23:55:46 +02:00
|
|
|
github.com/fxamacker/cbor/v2 v2.9.0 // indirect
|
2023-10-07 01:55:08 -04:00
|
|
|
github.com/go-ap/errors v0.0.0-20231003111023-183eef4b31b7 // indirect
|
|
|
|
|
github.com/go-asn1-ber/asn1-ber v1.5.5 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/go-enry/go-oniguruma v1.2.1 // indirect
|
2025-10-13 23:16:17 +02:00
|
|
|
github.com/go-errors/errors v1.1.1 // indirect
|
2025-01-17 03:17:10 +00:00
|
|
|
github.com/go-fed/httpsig v1.1.0 // indirect
|
2023-07-13 22:00:31 -05:00
|
|
|
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
|
2025-01-23 12:32:39 +00:00
|
|
|
github.com/go-git/go-billy/v5 v5.6.2 // indirect
|
2025-08-06 00:04:22 +00:00
|
|
|
github.com/go-git/go-git/v5 v5.16.2 // indirect
|
2024-07-03 18:07:19 +00:00
|
|
|
github.com/go-ini/ini v1.67.0 // indirect
|
2025-05-21 15:14:35 +02:00
|
|
|
github.com/go-openapi/jsonpointer v0.21.1 // indirect
|
|
|
|
|
github.com/go-openapi/jsonreference v0.21.0 // indirect
|
|
|
|
|
github.com/go-openapi/swag v0.23.1 // indirect
|
2025-09-18 20:53:12 +02:00
|
|
|
github.com/go-webauthn/x v0.1.25 // indirect
|
2025-10-13 23:16:17 +02:00
|
|
|
github.com/go-xmlfmt/xmlfmt v0.0.0-20191208150333-d5b6f63a941b // indirect
|
2025-03-11 20:40:23 +00:00
|
|
|
github.com/goccy/go-json v0.10.5 // indirect
|
2025-05-14 02:08:17 +00:00
|
|
|
github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
|
2025-10-13 23:16:17 +02:00
|
|
|
github.com/golang/geo v0.0.0-20200319012246-673a6f80352d // indirect
|
2025-08-06 00:04:22 +00:00
|
|
|
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
|
2024-07-04 02:02:59 +00:00
|
|
|
github.com/golang/protobuf v1.5.4 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/golang/snappy v0.0.4 // indirect
|
Support compression for Actions logs (#31761)
Support compression for Actions logs to save storage space and
bandwidth. Inspired by
https://github.com/go-gitea/gitea/issues/24256#issuecomment-1521153015
The biggest challenge is that the compression format should support
[seekable](https://github.com/facebook/zstd/blob/dev/contrib/seekable_format/zstd_seekable_compression_format.md).
So when users are viewing a part of the log lines, Gitea doesn't need to
download the whole compressed file and decompress it.
That means gzip cannot help here. And I did research, there aren't too
many choices, like bgzip and xz, but I think zstd is the most popular
one. It has an implementation in Golang with
[zstd](https://github.com/klauspost/compress/tree/master/zstd) and
[zstd-seekable-format-go](https://github.com/SaveTheRbtz/zstd-seekable-format-go),
and what is better is that it has good compatibility: a seekable format
zstd file can be read by a regular zstd reader.
This PR introduces a new package `zstd` to combine and wrap the two
packages, to provide a unified and easy-to-use API.
And a new setting `LOG_COMPRESSION` is added to the config, although I
don't see any reason why not to use compression, I think's it's a good
idea to keep the default with `none` to be consistent with old versions.
`LOG_COMPRESSION` takes effect for only new log files, it adds `.zst` as
an extension to the file name, so Gitea can determine if it needs
decompression according to the file name when reading. Old files will
keep the format since it's not worth converting them, as they will be
cleared after #31735.
<img width="541" alt="image"
src="https://github.com/user-attachments/assets/e9598764-a4e0-4b68-8c2b-f769265183c9">
(cherry picked from commit 33cc5837a655ad544b936d4d040ca36d74092588)
Conflicts:
assets/go-licenses.json
go.mod
go.sum
resolved with make tidy
2024-08-09 10:10:30 +08:00
|
|
|
github.com/google/btree v1.1.2 // indirect
|
2025-02-28 16:52:33 +00:00
|
|
|
github.com/google/go-cmp v0.7.0 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/google/go-querystring v1.1.0 // indirect
|
2025-05-14 01:56:07 +00:00
|
|
|
github.com/google/go-tpm v0.9.5 // indirect
|
2023-12-19 09:18:42 +08:00
|
|
|
github.com/gorilla/css v1.0.1 // indirect
|
|
|
|
|
github.com/gorilla/mux v1.8.1 // indirect
|
|
|
|
|
github.com/gorilla/securecookie v1.1.2 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
|
2025-10-01 05:02:30 +02:00
|
|
|
github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
|
|
|
|
|
github.com/josharian/intern v1.0.0 // indirect
|
2022-03-31 15:05:57 -07:00
|
|
|
github.com/kevinburke/ssh_config v1.2.0 // indirect
|
2023-05-05 05:17:19 -04:00
|
|
|
github.com/klauspost/pgzip v1.2.6 // indirect
|
2025-08-06 16:10:19 +02:00
|
|
|
github.com/libdns/libdns v1.0.0 // indirect
|
2025-02-21 00:08:46 +00:00
|
|
|
github.com/mailru/easyjson v0.9.0 // indirect
|
2023-07-13 22:00:31 -05:00
|
|
|
github.com/markbates/going v1.0.3 // indirect
|
2025-06-26 08:49:20 +02:00
|
|
|
github.com/mattn/go-colorable v0.1.14 // indirect
|
Update github.com/rhysd/actionlint (indirect) to v1.7.8 (forgejo) (#9655)
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [github.com/rhysd/actionlint](https://github.com/rhysd/actionlint) | `v1.7.7` -> `v1.7.8` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>rhysd/actionlint (github.com/rhysd/actionlint)</summary>
### [`v1.7.8`](https://github.com/rhysd/actionlint/blob/HEAD/CHANGELOG.md#v178---2025-10-11)
[Compare Source](https://github.com/rhysd/actionlint/compare/v1.7.7...v1.7.8)
- Support `models` permission in `permissions` section. ([#​531](https://github.com/rhysd/actionlint/issues/531), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Support `job.check_run_id` property. ([#​576](https://github.com/rhysd/actionlint/issues/576), thanks [@​muzimuzhi](https://github.com/muzimuzhi) for fixing the type at [#​577](https://github.com/rhysd/actionlint/issues/577))
- Support `node24` runtime at `using` section in action metadata. ([#​561](https://github.com/rhysd/actionlint/issues/561), thanks [@​salmanmkc](https://github.com/salmanmkc))
- Add support for the following runner labels
- [`macos-26` and `macos-26-large`](https://github.blog/changelog/2025-09-11-actions-macos-26-image-now-in-public-preview/) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- [`macos-15`](https://github.blog/changelog/2025-09-19-github-actions-macos-13-runner-image-is-closing-down/#what-you-need-to-do) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Drop support for the following runner labels.
- [`ubuntu-20.04`](https://github.com/actions/runner-images/issues/11101) ([#​534](https://github.com/rhysd/actionlint/issues/534), thanks [@​shogo82148](https://github.com/shogo82148))
- [`windows-2019`](https://github.blog/changelog/2025-04-15-upcoming-breaking-changes-and-releases-for-github-actions/#windows-server-2019-is-closing-down) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Support [`deprecationMessage`](https://docs.github.com/en/actions/reference/workflows-and-actions/metadata-syntax#inputsinput_iddeprecationmessage) in action inputs. ([#​540](https://github.com/rhysd/actionlint/issues/540), thanks [@​saansh45](https://github.com/saansh45))
- Support [`windows-11-arm` runner](https://github.blog/changelog/2025-04-14-windows-arm64-hosted-runners-now-available-in-public-preview/). ([#​542](https://github.com/rhysd/actionlint/issues/542), thanks [@​trim21](https://github.com/trim21))
- Handle `ubuntu-latest` runner label as `ubuntu-24.04` and `macos-latest` runner label as `macos-15`.
- Report mixing Intel Mac labels and Arm Mac labels as error.
- Add new types to `issues` and `pull_request_target` webhooks.
- Update the popular actions data set to the latest and add more actions to it (thanks [@​sethvargo](https://github.com/sethvargo) for fixing the `go generate` scripts)
- `actions/create-github-app-token`
- `actions/attest-sbom`
- `actions/ai-inference`
- `peter-evans/create-or-update-comment`
- `release-drafter/release-drafter`
- `SamKirkland/FTP-Deploy-Action`
- Fix the version value in `actionlint -version` can be empty.
- Fix outdated URL links in some error messages and documents.
- [Homebrew formula in this repository](https://github.com/rhysd/actionlint/blob/main/HomebrewFormula/actionlint.rb) is deprecated and [Homebrew cask](https://github.com/rhysd/actionlint/blob/main/Casks/actionlint.rb) is newly added instead because [GoReleaser no longer supports Homebrew formula update](https://goreleaser.com/deprecations/#brews). Note that Homebrew's official `actionlint` formula is still maintained. Please read the [documentation](https://github.com/rhysd/actionlint/blob/main/docs/install.md#homebrew) for more details.
- Drop support for Go 1.23 and earlier because they are no longer maintained officially. Go 1.24 and later are supported to build actionlint.
- Replace [`go-yaml/yaml@v3`](https://github.com/go-yaml/yaml) package with [`yaml/go-yaml@v4`](https://github.com/yaml/go-yaml) package. `go-yaml/yaml` was used for parsing workflow files however it was unmaintained. `yaml/go-yaml` is a successor of the library officially maintained by YAML organization. ([#​575](https://github.com/rhysd/actionlint/issues/575))
- Improve error messages on parsing workflow and action metadata files.
\[Changes]\[v1.7.8]
<a id="v1.7.7"></a>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzUuNSIsInVwZGF0ZWRJblZlciI6IjQxLjEzNS41IiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->
Co-authored-by: Earl Warren <contact@earl-warren.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9655
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2025-10-12 14:50:03 +02:00
|
|
|
github.com/mattn/go-runewidth v0.0.17 // indirect
|
2025-08-06 00:04:22 +00:00
|
|
|
github.com/mattn/go-shellwords v1.0.12 // indirect
|
2025-04-17 05:03:23 +00:00
|
|
|
github.com/mholt/acmez/v3 v3.1.2 // indirect
|
2025-03-07 00:45:40 +00:00
|
|
|
github.com/miekg/dns v1.1.63 // indirect
|
2025-08-10 02:26:23 +02:00
|
|
|
github.com/mikelolasagasti/xz v1.0.1 // indirect
|
2025-08-10 10:17:55 +02:00
|
|
|
github.com/minio/crc64nvme v1.0.2 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/minio/md5-simd v1.1.2 // indirect
|
2025-09-17 16:17:03 +02:00
|
|
|
github.com/minio/minlz v1.0.1 // indirect
|
2022-09-01 22:13:17 +01:00
|
|
|
github.com/mitchellh/mapstructure v1.5.0 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
|
|
|
github.com/modern-go/reflect2 v1.0.2 // indirect
|
|
|
|
|
github.com/mrjones/oauth v0.0.0-20190623134757-126b35219450 // indirect
|
|
|
|
|
github.com/mschoch/smat v0.2.0 // indirect
|
2024-10-19 12:03:54 +00:00
|
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
2025-09-17 16:17:03 +02:00
|
|
|
github.com/nwaples/rardecode/v2 v2.1.1 // indirect
|
2025-06-26 08:49:20 +02:00
|
|
|
github.com/olekukonko/errors v1.1.0 // indirect
|
|
|
|
|
github.com/olekukonko/ll v0.0.9 // indirect
|
|
|
|
|
github.com/olekukonko/tablewriter v1.0.7 // indirect
|
2023-04-13 18:41:04 -04:00
|
|
|
github.com/onsi/ginkgo v1.16.5 // indirect
|
2025-08-10 10:17:55 +02:00
|
|
|
github.com/philhofer/fwd v1.2.0 // indirect
|
2025-09-17 16:17:03 +02:00
|
|
|
github.com/pierrec/lz4/v4 v4.1.22 // indirect
|
2025-01-23 12:32:39 +00:00
|
|
|
github.com/pjbgf/sha1cd v0.3.2 // indirect
|
2023-11-04 22:09:19 +01:00
|
|
|
github.com/pkg/errors v0.9.1 // indirect
|
2023-10-13 12:11:15 -04:00
|
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
|
2024-10-19 12:03:54 +00:00
|
|
|
github.com/prometheus/client_model v0.6.1 // indirect
|
Update module github.com/prometheus/client_golang to v1.21.0 (forgejo) (#7016)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | require | minor | `v1.20.5` -> `v1.21.0` |
---
### Release Notes
<details>
<summary>prometheus/client_golang (github.com/prometheus/client_golang)</summary>
### [`v1.21.0`](https://github.com/prometheus/client_golang/releases/tag/v1.21.0): / 2025-02-19
[Compare Source](https://github.com/prometheus/client_golang/compare/v1.20.5...v1.21.0)
:warning: This release contains potential breaking change if you upgrade `github.com/prometheus/common` to 0.62+ together with client_golang (and depend on the strict, legacy validation for the label names). New common version [changes `model.NameValidationScheme` global variable](https://github.com/prometheus/common/pull/724), which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change `model.NameValidationScheme` to old `model.LegacyValidation` value in your project `init` function. :warning:
- \[BUGFIX] gocollector: Fix help message for runtime/metric metrics. [#​1583](https://github.com/prometheus/client_golang/issues/1583)
- \[BUGFIX] prometheus: Fix `Desc.String()` method for no labels case. [#​1687](https://github.com/prometheus/client_golang/issues/1687)
- \[PERF] prometheus: Optimize popular `prometheus.BuildFQName` function; now up to 30% faster. [#​1665](https://github.com/prometheus/client_golang/issues/1665)
- \[PERF] prometheus: Optimize `Inc`, `Add` and `Observe` cumulative metrics; now up to 50% faster under high concurrent contention. [#​1661](https://github.com/prometheus/client_golang/issues/1661)
- \[CHANGE] Upgrade prometheus/common to 0.62.0 which changes `model.NameValidationScheme` global variable. [#​1712](https://github.com/prometheus/client_golang/issues/1712)
- \[CHANGE] Add support for Go 1.23. [#​1602](https://github.com/prometheus/client_golang/issues/1602)
- \[FEATURE] process_collector: Add support for Darwin systems. [#​1600](https://github.com/prometheus/client_golang/issues/1600) [#​1616](https://github.com/prometheus/client_golang/issues/1616) [#​1625](https://github.com/prometheus/client_golang/issues/1625) [#​1675](https://github.com/prometheus/client_golang/issues/1675) [#​1715](https://github.com/prometheus/client_golang/issues/1715)
- \[FEATURE] api: Add ability to invoke `CloseIdleConnections` on api.Client using `api.Client.(CloseIdler).CloseIdleConnections()` casting. [#​1513](https://github.com/prometheus/client_golang/issues/1513)
- \[FEATURE] promhttp: Add `promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples` option to create OpenMetrics \_created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). [#​1408](https://github.com/prometheus/client_golang/issues/1408)
- \[FEATURE] prometheus: Add `NewConstNativeHistogram` function. [#​1654](https://github.com/prometheus/client_golang/issues/1654)
<details>
<summary> All commits </summary>
* Merge release-1.20 to main by @​bwplotka in https://github.com/prometheus/client_golang/pull/1582
* gocollector: Tiny fix for help message with runtime/metrics source. by @​bwplotka in https://github.com/prometheus/client_golang/pull/1583
* ci: bump dagger to the latest version by @​marcosnils in https://github.com/prometheus/client_golang/pull/1588
* Merge release-1.20 back to main by @​ArthurSens in https://github.com/prometheus/client_golang/pull/1593
* Update linting by @​SuperQ in https://github.com/prometheus/client_golang/pull/1603
* Update supported Go versions by @​SuperQ in https://github.com/prometheus/client_golang/pull/1602
* build(deps): bump golang.org/x/sys from 0.22.0 to 0.24.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1611
* build(deps): bump github.com/prometheus/common from 0.55.0 to 0.57.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1612
* changed the name of all variables with min/max name by @​parthlaw in https://github.com/prometheus/client_golang/pull/1606
* Update Dagger and build. by @​SuperQ in https://github.com/prometheus/client_golang/pull/1610
* build(deps): bump github/codeql-action from 3.25.15 to 3.26.6 in the github-actions group across 1 directory by @​dependabot in https://github.com/prometheus/client_golang/pull/1614
* examples: Improved GoCollector example. by @​bwplotka in https://github.com/prometheus/client_golang/pull/1589
* Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1615
* process_collector: fill in most statistics on macOS by @​mharbison72 in https://github.com/prometheus/client_golang/pull/1600
* :zap: http client defer CloseIdleConnections by @​cuisongliu in https://github.com/prometheus/client_golang/pull/1513
* Set allow-utf-8 in Format during tests to avoid escaping. by @​ywwg in https://github.com/prometheus/client_golang/pull/1618
* Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1622
* Merge Release 1.20 back to main by @​ArthurSens in https://github.com/prometheus/client_golang/pull/1627
* examples: Add custom labels example by @​ying-jeanne in https://github.com/prometheus/client_golang/pull/1626
* Refactor default runtime metrics tests for Go collector so that default runtime metric set autogenerates by @​vesari in https://github.com/prometheus/client_golang/pull/1631
* Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1628
* process_xxx_memory statistics for macOS (cgo) by @​mharbison72 in https://github.com/prometheus/client_golang/pull/1616
* build(deps): bump github.com/klauspost/compress from 1.17.9 to 1.17.10 by @​dependabot in https://github.com/prometheus/client_golang/pull/1633
* build(deps): bump golang.org/x/sys from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1632
* process_collector: Add Platform-Specific Describe for processCollector by @​ying-jeanne in https://github.com/prometheus/client_golang/pull/1625
* Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1635
* build(deps): bump the github-actions group with 4 updates by @​dependabot in https://github.com/prometheus/client_golang/pull/1634
* Optionally print OM created lines by @​ArthurSens in https://github.com/prometheus/client_golang/pull/1408
* process_collector: merge wasip1 and js into a single implementation by @​ying-jeanne in https://github.com/prometheus/client_golang/pull/1644
* Merge release 1.20 to main by @​bwplotka in https://github.com/prometheus/client_golang/pull/1647
* Add Arianna as maintainer 💪 by @​ArthurSens in https://github.com/prometheus/client_golang/pull/1651
* test add headers round tripper by @​Manask322 in https://github.com/prometheus/client_golang/pull/1657
* build(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11 by @​dependabot in https://github.com/prometheus/client_golang/pull/1668
* build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1669
* build(deps): bump github.com/prometheus/common from 0.59.1 to 0.60.1 by @​dependabot in https://github.com/prometheus/client_golang/pull/1667
* build(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.1 by @​dependabot in https://github.com/prometheus/client_golang/pull/1670
* Optimize BuildFQName function by @​jkroepke in https://github.com/prometheus/client_golang/pull/1665
* fix: use injected now() instead of time.Now() in summary methods by @​imorph in https://github.com/prometheus/client_golang/pull/1672
* process_collector: avoid a compiler warning on macOS (fixes #​1660) by @​mharbison72 in https://github.com/prometheus/client_golang/pull/1675
* Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1674
* build(deps): bump the github-actions group across 1 directory with 3 updates by @​dependabot in https://github.com/prometheus/client_golang/pull/1678
* [chore]: enable perfsprint linter by @​mmorel-35 in https://github.com/prometheus/client_golang/pull/1676
* Duplicate of #​1662 by @​imorph in https://github.com/prometheus/client_golang/pull/1673
* Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1679
* chore: enable usestdlibvars linter by @​mmorel-35 in https://github.com/prometheus/client_golang/pull/1680
* Add: exponential backoff for CAS operations on floats by @​imorph in https://github.com/prometheus/client_golang/pull/1661
* Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1683
* [1617] Add ConstnativeHistogram by @​shivanthzen in https://github.com/prometheus/client_golang/pull/1654
* fix: replace fmt.Errorf with errors.New by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1689
* Add codeowners by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1688
* fix: add very small delay between observations in `TestHistogramAtomicObserve` by @​imorph in https://github.com/prometheus/client_golang/pull/1691
* Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1692
* Fix: handle nil variableLabels in Desc.String() method and add tests for nil label values by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1687
* examples: Follow best practices and established naming conventions by @​lilic in https://github.com/prometheus/client_golang/pull/1650
* setup OSSF Scorecard workflow by @​mmorel-35 in https://github.com/prometheus/client_golang/pull/1432
* build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 by @​dependabot in https://github.com/prometheus/client_golang/pull/1697
* build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1696
* build(deps): bump the github-actions group with 5 updates by @​dependabot in https://github.com/prometheus/client_golang/pull/1695
* update links to openmetrics to reference the v1.0.0 release by @​dashpole in https://github.com/prometheus/client_golang/pull/1699
* build(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.1 by @​dependabot in https://github.com/prometheus/client_golang/pull/1706
* build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1705
* build(deps): bump the github-actions group with 5 updates by @​dependabot in https://github.com/prometheus/client_golang/pull/1707
* build(deps): bump github.com/prometheus/common from 0.60.1 to 0.61.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1704
* Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1703
* Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1708
* Upgrade to prometheus/common 0.62.0 with breaking change by @​bwplotka in https://github.com/prometheus/client_golang/pull/1712
* build(deps): bump golang.org/x/net from 0.26.0 to 0.33.0 in /tutorials/whatsup by @​dependabot in https://github.com/prometheus/client_golang/pull/1713
* docs: Add RELEASE.md for the release process by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1690
* tutorials/whatsup: Updated deps by @​bwplotka in https://github.com/prometheus/client_golang/pull/1716
* process collector: Fixed pedantic registry failures on darwin with cgo. by @​bwplotka in https://github.com/prometheus/client_golang/pull/1715
* Revert "ci: daggerize test and lint pipelines (#​1534)" by @​bwplotka in https://github.com/prometheus/client_golang/pull/1717
* Cut 1.21.0-rc.0 by @​bwplotka in https://github.com/prometheus/client_golang/pull/1718
* Cut 1.21 by @​bwplotka in https://github.com/prometheus/client_golang/pull/1737
</details>
#### New Contributors
* @​parthlaw made their first contribution in https://github.com/prometheus/client_golang/pull/1606
* @​mharbison72 made their first contribution in https://github.com/prometheus/client_golang/pull/1600
* @​cuisongliu made their first contribution in https://github.com/prometheus/client_golang/pull/1513
* @​ying-jeanne made their first contribution in https://github.com/prometheus/client_golang/pull/1626
* @​Manask322 made their first contribution in https://github.com/prometheus/client_golang/pull/1657
* @​jkroepke made their first contribution in https://github.com/prometheus/client_golang/pull/1665
* @​imorph made their first contribution in https://github.com/prometheus/client_golang/pull/1672
* @​mmorel-35 made their first contribution in https://github.com/prometheus/client_golang/pull/1676
* @​shivanthzen made their first contribution in https://github.com/prometheus/client_golang/pull/1654
* @​dashpole made their first contribution in https://github.com/prometheus/client_golang/pull/1699
**Full Changelog**: https://github.com/prometheus/client_golang/compare/v1.20.5...v1.21.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "* 0-3 * * *" (UTC), Automerge - "* 0-3 * * *" (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjM5LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/7016
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2025-02-25 12:42:31 +00:00
|
|
|
github.com/prometheus/common v0.62.0 // indirect
|
2024-10-19 12:03:54 +00:00
|
|
|
github.com/prometheus/procfs v0.15.1 // indirect
|
Update github.com/rhysd/actionlint (indirect) to v1.7.8 (forgejo) (#9655)
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [github.com/rhysd/actionlint](https://github.com/rhysd/actionlint) | `v1.7.7` -> `v1.7.8` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>rhysd/actionlint (github.com/rhysd/actionlint)</summary>
### [`v1.7.8`](https://github.com/rhysd/actionlint/blob/HEAD/CHANGELOG.md#v178---2025-10-11)
[Compare Source](https://github.com/rhysd/actionlint/compare/v1.7.7...v1.7.8)
- Support `models` permission in `permissions` section. ([#​531](https://github.com/rhysd/actionlint/issues/531), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Support `job.check_run_id` property. ([#​576](https://github.com/rhysd/actionlint/issues/576), thanks [@​muzimuzhi](https://github.com/muzimuzhi) for fixing the type at [#​577](https://github.com/rhysd/actionlint/issues/577))
- Support `node24` runtime at `using` section in action metadata. ([#​561](https://github.com/rhysd/actionlint/issues/561), thanks [@​salmanmkc](https://github.com/salmanmkc))
- Add support for the following runner labels
- [`macos-26` and `macos-26-large`](https://github.blog/changelog/2025-09-11-actions-macos-26-image-now-in-public-preview/) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- [`macos-15`](https://github.blog/changelog/2025-09-19-github-actions-macos-13-runner-image-is-closing-down/#what-you-need-to-do) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Drop support for the following runner labels.
- [`ubuntu-20.04`](https://github.com/actions/runner-images/issues/11101) ([#​534](https://github.com/rhysd/actionlint/issues/534), thanks [@​shogo82148](https://github.com/shogo82148))
- [`windows-2019`](https://github.blog/changelog/2025-04-15-upcoming-breaking-changes-and-releases-for-github-actions/#windows-server-2019-is-closing-down) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Support [`deprecationMessage`](https://docs.github.com/en/actions/reference/workflows-and-actions/metadata-syntax#inputsinput_iddeprecationmessage) in action inputs. ([#​540](https://github.com/rhysd/actionlint/issues/540), thanks [@​saansh45](https://github.com/saansh45))
- Support [`windows-11-arm` runner](https://github.blog/changelog/2025-04-14-windows-arm64-hosted-runners-now-available-in-public-preview/). ([#​542](https://github.com/rhysd/actionlint/issues/542), thanks [@​trim21](https://github.com/trim21))
- Handle `ubuntu-latest` runner label as `ubuntu-24.04` and `macos-latest` runner label as `macos-15`.
- Report mixing Intel Mac labels and Arm Mac labels as error.
- Add new types to `issues` and `pull_request_target` webhooks.
- Update the popular actions data set to the latest and add more actions to it (thanks [@​sethvargo](https://github.com/sethvargo) for fixing the `go generate` scripts)
- `actions/create-github-app-token`
- `actions/attest-sbom`
- `actions/ai-inference`
- `peter-evans/create-or-update-comment`
- `release-drafter/release-drafter`
- `SamKirkland/FTP-Deploy-Action`
- Fix the version value in `actionlint -version` can be empty.
- Fix outdated URL links in some error messages and documents.
- [Homebrew formula in this repository](https://github.com/rhysd/actionlint/blob/main/HomebrewFormula/actionlint.rb) is deprecated and [Homebrew cask](https://github.com/rhysd/actionlint/blob/main/Casks/actionlint.rb) is newly added instead because [GoReleaser no longer supports Homebrew formula update](https://goreleaser.com/deprecations/#brews). Note that Homebrew's official `actionlint` formula is still maintained. Please read the [documentation](https://github.com/rhysd/actionlint/blob/main/docs/install.md#homebrew) for more details.
- Drop support for Go 1.23 and earlier because they are no longer maintained officially. Go 1.24 and later are supported to build actionlint.
- Replace [`go-yaml/yaml@v3`](https://github.com/go-yaml/yaml) package with [`yaml/go-yaml@v4`](https://github.com/yaml/go-yaml) package. `go-yaml/yaml` was used for parsing workflow files however it was unmaintained. `yaml/go-yaml` is a successor of the library officially maintained by YAML organization. ([#​575](https://github.com/rhysd/actionlint/issues/575))
- Improve error messages on parsing workflow and action metadata files.
\[Changes]\[v1.7.8]
<a id="v1.7.7"></a>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzUuNSIsInVwZGF0ZWRJblZlciI6IjQxLjEzNS41IiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->
Co-authored-by: Earl Warren <contact@earl-warren.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9655
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2025-10-12 14:50:03 +02:00
|
|
|
github.com/rhysd/actionlint v1.7.8 // indirect
|
2024-04-27 02:04:59 +00:00
|
|
|
github.com/rivo/uniseg v0.4.7 // indirect
|
2024-09-26 02:03:56 +00:00
|
|
|
github.com/rs/xid v1.6.0 // indirect
|
2023-07-13 22:00:31 -05:00
|
|
|
github.com/sirupsen/logrus v1.9.3 // indirect
|
2025-08-06 00:04:22 +00:00
|
|
|
github.com/skeema/knownhosts v1.3.1 // indirect
|
2025-09-17 16:17:03 +02:00
|
|
|
github.com/sorairolake/lzip-go v0.3.8 // indirect
|
|
|
|
|
github.com/spf13/afero v1.11.0 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/ssor/bom v0.0.0-20170718123548-6386211fdfcf // indirect
|
2025-06-12 02:03:08 +00:00
|
|
|
github.com/tinylib/msgp v1.3.0 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
github.com/x448/float16 v0.8.4 // indirect
|
2023-01-12 03:21:16 -05:00
|
|
|
github.com/xanzy/ssh-agent v0.3.3 // indirect
|
2025-04-29 19:28:56 +00:00
|
|
|
github.com/zeebo/assert v1.3.0 // indirect
|
2024-10-03 00:03:02 +00:00
|
|
|
github.com/zeebo/blake3 v0.2.4 // indirect
|
2025-09-10 22:02:55 +02:00
|
|
|
go.etcd.io/bbolt v1.4.3 // indirect
|
2023-05-05 05:17:19 -04:00
|
|
|
go.uber.org/atomic v1.11.0 // indirect
|
|
|
|
|
go.uber.org/multierr v1.11.0 // indirect
|
Update module github.com/caddyserver/certmagic to v0.21.0 (#3724)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/caddyserver/certmagic](https://github.com/caddyserver/certmagic) | require | minor | `v0.20.0` -> `v0.21.0` |
---
### Release Notes
<details>
<summary>caddyserver/certmagic (github.com/caddyserver/certmagic)</summary>
### [`v0.21.0`](https://github.com/caddyserver/certmagic/releases/tag/v0.21.0)
[Compare Source](https://github.com/caddyserver/certmagic/compare/v0.20.0...v0.21.0)
CertMagic v0.21 introduces some big changes:
- Draft support for draft-03 of [ACME Renewal Information (ARI)](https://datatracker.ietf.org/doc/draft-ietf-acme-ari/) which assists with deciding when to renew certificates. This augments CertMagic's already-advanced logic using cert lifetime and OCSP/revocation status.
- New [`ZeroSSLIssuer`](https://pkg.go.dev/github.com/caddyserver/certmagic@v0.21.0#ZeroSSLIssuer) uses the [ZeroSSL API](https://zerossl.com/documentation/api/) to get certificates. ZeroSSL also has an ACME endpoint, which can still be accesed using the existing ACMEIssuer, as always. Their proprietary API is paid, but has extra features like IP certificates, better reliability, and support.
- DNS challenges should be smoother in some cases as we've improved propagation checking.
- In the odd case your ACME account disappears from the ACME server, CertMagic will automatically retry with a new account. (This happens in some test/dev environments.)
- ACME accounts are identified only by their public keys, but CertMagic maps accounts by CA+email for practical/storage reasons. So now you can "pin" an account key to use by specifying your email and the account public key in your config, which is useful if you need to absolutely be sure to use a specific account (like if you get rate limit exemptions from a CA).
Please try it out and report any issues!
Thanks to [@​Framer](https://github.com/Framer) for their contributions to this release!
#### What's Changed
- Bump golang.org/x/crypto from 0.14.0 to 0.17.0 by [@​dependabot](https://github.com/dependabot) in https://github.com/caddyserver/certmagic/pull/264
- Demote "storage cleaning happened too recently" from WARN to INFO by [@​francislavoie](https://github.com/francislavoie) in https://github.com/caddyserver/certmagic/pull/270
- Check DNS propagation at authoritative nameservers only with default resolvers by [@​pgeh](https://github.com/pgeh) in https://github.com/caddyserver/certmagic/pull/274
- Retry with new account if account disappeared remotely by [@​mholt](https://github.com/mholt) in https://github.com/caddyserver/certmagic/pull/269
- Update readme examples to use TLS-ALPN const from ACMEz by [@​goksan](https://github.com/goksan) in https://github.com/caddyserver/certmagic/pull/277
- Initial implementation of ZeroSSL API issuer by [@​mholt](https://github.com/mholt) in https://github.com/caddyserver/certmagic/pull/279
- Allow deleting directories via FileStorage by [@​goksan](https://github.com/goksan) in https://github.com/caddyserver/certmagic/pull/282
- Use the `email` configuration in the ACME issuer to "pin" an account to a key by [@​ankon](https://github.com/ankon) in https://github.com/caddyserver/certmagic/pull/283
- Initial implementation of ARI by [@​mholt](https://github.com/mholt) in https://github.com/caddyserver/certmagic/pull/286
#### New Contributors
- [@​pgeh](https://github.com/pgeh) made their first contribution in https://github.com/caddyserver/certmagic/pull/274
- [@​goksan](https://github.com/goksan) made their first contribution in https://github.com/caddyserver/certmagic/pull/277
**Full Changelog**: https://github.com/caddyserver/certmagic/compare/v0.20.0...v0.21.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge - "before 4am" (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNTEuMiIsInVwZGF0ZWRJblZlciI6IjM3LjM1MS4yIiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6W119-->
Co-authored-by: Earl Warren <contact@earl-warren.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/3724
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2024-05-12 14:56:39 +00:00
|
|
|
go.uber.org/zap v1.27.0 // indirect
|
2024-12-31 00:04:13 +00:00
|
|
|
go.uber.org/zap/exp v0.3.0 // indirect
|
Update github.com/rhysd/actionlint (indirect) to v1.7.8 (forgejo) (#9655)
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [github.com/rhysd/actionlint](https://github.com/rhysd/actionlint) | `v1.7.7` -> `v1.7.8` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>rhysd/actionlint (github.com/rhysd/actionlint)</summary>
### [`v1.7.8`](https://github.com/rhysd/actionlint/blob/HEAD/CHANGELOG.md#v178---2025-10-11)
[Compare Source](https://github.com/rhysd/actionlint/compare/v1.7.7...v1.7.8)
- Support `models` permission in `permissions` section. ([#​531](https://github.com/rhysd/actionlint/issues/531), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Support `job.check_run_id` property. ([#​576](https://github.com/rhysd/actionlint/issues/576), thanks [@​muzimuzhi](https://github.com/muzimuzhi) for fixing the type at [#​577](https://github.com/rhysd/actionlint/issues/577))
- Support `node24` runtime at `using` section in action metadata. ([#​561](https://github.com/rhysd/actionlint/issues/561), thanks [@​salmanmkc](https://github.com/salmanmkc))
- Add support for the following runner labels
- [`macos-26` and `macos-26-large`](https://github.blog/changelog/2025-09-11-actions-macos-26-image-now-in-public-preview/) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- [`macos-15`](https://github.blog/changelog/2025-09-19-github-actions-macos-13-runner-image-is-closing-down/#what-you-need-to-do) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Drop support for the following runner labels.
- [`ubuntu-20.04`](https://github.com/actions/runner-images/issues/11101) ([#​534](https://github.com/rhysd/actionlint/issues/534), thanks [@​shogo82148](https://github.com/shogo82148))
- [`windows-2019`](https://github.blog/changelog/2025-04-15-upcoming-breaking-changes-and-releases-for-github-actions/#windows-server-2019-is-closing-down) ([#​572](https://github.com/rhysd/actionlint/issues/572), thanks [@​muzimuzhi](https://github.com/muzimuzhi))
- Support [`deprecationMessage`](https://docs.github.com/en/actions/reference/workflows-and-actions/metadata-syntax#inputsinput_iddeprecationmessage) in action inputs. ([#​540](https://github.com/rhysd/actionlint/issues/540), thanks [@​saansh45](https://github.com/saansh45))
- Support [`windows-11-arm` runner](https://github.blog/changelog/2025-04-14-windows-arm64-hosted-runners-now-available-in-public-preview/). ([#​542](https://github.com/rhysd/actionlint/issues/542), thanks [@​trim21](https://github.com/trim21))
- Handle `ubuntu-latest` runner label as `ubuntu-24.04` and `macos-latest` runner label as `macos-15`.
- Report mixing Intel Mac labels and Arm Mac labels as error.
- Add new types to `issues` and `pull_request_target` webhooks.
- Update the popular actions data set to the latest and add more actions to it (thanks [@​sethvargo](https://github.com/sethvargo) for fixing the `go generate` scripts)
- `actions/create-github-app-token`
- `actions/attest-sbom`
- `actions/ai-inference`
- `peter-evans/create-or-update-comment`
- `release-drafter/release-drafter`
- `SamKirkland/FTP-Deploy-Action`
- Fix the version value in `actionlint -version` can be empty.
- Fix outdated URL links in some error messages and documents.
- [Homebrew formula in this repository](https://github.com/rhysd/actionlint/blob/main/HomebrewFormula/actionlint.rb) is deprecated and [Homebrew cask](https://github.com/rhysd/actionlint/blob/main/Casks/actionlint.rb) is newly added instead because [GoReleaser no longer supports Homebrew formula update](https://goreleaser.com/deprecations/#brews). Note that Homebrew's official `actionlint` formula is still maintained. Please read the [documentation](https://github.com/rhysd/actionlint/blob/main/docs/install.md#homebrew) for more details.
- Drop support for Go 1.23 and earlier because they are no longer maintained officially. Go 1.24 and later are supported to build actionlint.
- Replace [`go-yaml/yaml@v3`](https://github.com/go-yaml/yaml) package with [`yaml/go-yaml@v4`](https://github.com/yaml/go-yaml) package. `go-yaml/yaml` was used for parsing workflow files however it was unmaintained. `yaml/go-yaml` is a successor of the library officially maintained by YAML organization. ([#​575](https://github.com/rhysd/actionlint/issues/575))
- Improve error messages on parsing workflow and action metadata files.
\[Changes]\[v1.7.8]
<a id="v1.7.7"></a>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzUuNSIsInVwZGF0ZWRJblZlciI6IjQxLjEzNS41IiwidGFyZ2V0QnJhbmNoIjoiZm9yZ2VqbyIsImxhYmVscyI6WyJkZXBlbmRlbmN5LXVwZ3JhZGUiLCJ0ZXN0L25vdC1uZWVkZWQiXX0=-->
Co-authored-by: Earl Warren <contact@earl-warren.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9655
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
2025-10-12 14:50:03 +02:00
|
|
|
go.yaml.in/yaml/v4 v4.0.0-rc.2 // indirect
|
2025-08-08 06:53:20 +02:00
|
|
|
go4.org v0.0.0-20230225012048-214862532bf5 // indirect
|
2025-10-08 21:48:19 +02:00
|
|
|
golang.org/x/mod v0.28.0 // indirect
|
2025-09-10 22:02:55 +02:00
|
|
|
golang.org/x/time v0.13.0 // indirect
|
2025-10-08 21:48:19 +02:00
|
|
|
golang.org/x/tools v0.37.0 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
|
|
|
|
|
gopkg.in/warnings.v0 v0.1.2 // indirect
|
2025-10-13 23:16:17 +02:00
|
|
|
gopkg.in/yaml.v2 v2.4.0 // indirect
|
2025-08-21 09:04:32 +02:00
|
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
2022-03-16 00:08:31 -04:00
|
|
|
)
|
|
|
|
|
|
2021-04-23 02:08:53 +02:00
|
|
|
replace github.com/hashicorp/go-version => github.com/6543/go-version v1.3.1
|
2021-08-03 19:32:01 +01:00
|
|
|
|
2024-06-05 22:07:40 +02:00
|
|
|
replace github.com/mholt/archiver/v3 => code.forgejo.org/forgejo/archiver/v3 v3.5.1
|
2024-11-10 02:21:28 +01:00
|
|
|
|
2024-12-11 23:14:27 +01:00
|
|
|
replace github.com/gliderlabs/ssh => code.forgejo.org/forgejo/ssh v0.0.0-20241211213324-5fc306ca0616
|
2025-01-03 08:45:02 +00:00
|
|
|
|
|
|
|
|
replace git.sr.ht/~mariusor/go-xsd-duration => code.forgejo.org/forgejo/go-xsd-duration v0.0.0-20220703122237-02e73435a078
|
2025-09-19 06:30:04 +02:00
|
|
|
|
2025-10-01 00:31:38 +02:00
|
|
|
replace xorm.io/xorm v1.3.9 => code.forgejo.org/xorm/xorm v1.3.9-forgejo.2
|