[PR #1385] chore(deps): update all non-major dependencies #5699

Closed
opened 2026-03-01 15:42:19 +03:00 by kerem · 0 comments
Owner

Original Pull Request: https://github.com/0xJacky/nginx-ui/pull/1385

State: closed
Merged: Yes


This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/docker/docker v28.4.0+incompatible -> v28.5.0+incompatible age confidence require minor
github.com/go-playground/validator/v10 v10.27.0 -> v10.28.0 age confidence require minor
go (source) 1.25.1 -> 1.25.2 age confidence golang patch
go ^1.25.1 -> ^1.25.2 age confidence uses-with patch
golang.org/x/net v0.44.0 -> v0.45.0 age confidence require minor
google.golang.org/grpc v1.75.1 -> v1.76.0 age confidence require minor
less (source) ^4.4.1 -> ^4.4.2 age confidence devDependencies patch
marked (source) ^16.3.0 -> ^16.4.0 age confidence dependencies minor
pnpm (source) 10.17.1+sha512.17c560fca4867ae9473a3899ad84a88334914f379be46d455cbf92e5cf4b39d34985d452d2583baf19967fa76cb5c17bc9e245529d0b98745721aa7200ecaf7a -> 10.18.1 age confidence packageManager minor
python 3.13.7 -> 3.14.0 age confidence uses-with minor
vue-tsc (source) ^3.1.0 -> ^3.1.1 age confidence devDependencies patch

Release Notes

docker/docker (github.com/docker/docker)

v28.5.0+incompatible

Compare Source

go-playground/validator (github.com/go-playground/validator/v10)

v10.28.0: Release 10.28.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/go-playground/validator/compare/v10.27.0...v10.28.0

golang/go (go)

v1.25.2

actions/go-versions (go)

v1.25.2: 1.25.2

Compare Source

Go 1.25.2

grpc/grpc-go (google.golang.org/grpc)

v1.76.0: Release 1.76.0

Compare Source

Dependencies

Bug Fixes

  • client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#​8523)
  • client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#​8518)
  • pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#​8615)

New Features

  • credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#​8431)

Performance Improvements

  • client: Improve HTTP/2 header size estimate to reduce re-allocations. (#​8547)
  • encoding/proto: Avoid redundant message size calculation when marshaling. (#​8569)
markedjs/marked (marked)

v16.4.0

Compare Source

pnpm/pnpm (pnpm)

v10.18.1

Compare Source

Patch Changes
  • Don't print a warning, when --lockfile-only is used #​8320.
  • pnpm setup creates a command shim to the pnpm executable. This is needed to be able to run pnpm self-update on Windows #​5700.
  • When using pnpm catalogs and running a normal pnpm install, pnpm produced false positive warnings for "skip adding to the default catalog because it already exists". This warning now only prints when using pnpm add --save-catalog as originally intended.

v10.18.0

Compare Source

Minor Changes
  • Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

    Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
    Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

    Related PR: #​10025.

Patch Changes
  • Retry filesystem operations on EAGAIN errors #​9959.
  • Outdated command respects minimumReleaseAge configuration #​10030.
  • Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
  • Don't fail with a meaningless error when scriptShell is set to false #​8748.
  • pnpm dlx should not fail when minimumReleaseAge is set #​10037.
actions/python-versions (python)

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

v3.13.8: 3.13.8

Compare Source

Python 3.13.8


Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

**Original Pull Request:** https://github.com/0xJacky/nginx-ui/pull/1385 **State:** closed **Merged:** Yes --- This PR contains the following updates: | Package | Change | Age | Confidence | Type | Update | |---|---|---|---|---|---| | [github.com/docker/docker](https://redirect.github.com/docker/docker) | `v28.4.0+incompatible` -> `v28.5.0+incompatible` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fdocker%2fdocker/v28.5.0+incompatible?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fdocker%2fdocker/v28.4.0+incompatible/v28.5.0+incompatible?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/go-playground/validator/v10](https://redirect.github.com/go-playground/validator) | `v10.27.0` -> `v10.28.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-playground%2fvalidator%2fv10/v10.28.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-playground%2fvalidator%2fv10/v10.27.0/v10.28.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go](https://go.dev/) ([source](https://redirect.github.com/golang/go)) | `1.25.1` -> `1.25.2` | [![age](https://developer.mend.io/api/mc/badges/age/golang-version/go/1.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/golang-version/go/1.25.1/1.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | golang | patch | | [go](https://redirect.github.com/actions/go-versions) | `^1.25.1` -> `^1.25.2` | [![age](https://developer.mend.io/api/mc/badges/age/github-releases/actions%2fgo-versions/1.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/actions%2fgo-versions/1.25.1/1.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | uses-with | patch | | golang.org/x/net | `v0.44.0` -> `v0.45.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.45.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.44.0/v0.45.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | `v1.75.1` -> `v1.76.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.76.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.75.1/v1.76.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [less](http://lesscss.org) ([source](https://redirect.github.com/less/less.js)) | [`^4.4.1` -> `^4.4.2`](https://renovatebot.com/diffs/npm/less/4.4.2/4.4.2) | [![age](https://developer.mend.io/api/mc/badges/age/npm/less/4.4.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/less/4.4.2/4.4.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch | | [marked](https://marked.js.org) ([source](https://redirect.github.com/markedjs/marked)) | [`^16.3.0` -> `^16.4.0`](https://renovatebot.com/diffs/npm/marked/16.3.0/16.4.0) | [![age](https://developer.mend.io/api/mc/badges/age/npm/marked/16.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/marked/16.3.0/16.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | | [pnpm](https://pnpm.io) ([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm)) | [`10.17.1+sha512.17c560fca4867ae9473a3899ad84a88334914f379be46d455cbf92e5cf4b39d34985d452d2583baf19967fa76cb5c17bc9e245529d0b98745721aa7200ecaf7a` -> `10.18.1`](https://renovatebot.com/diffs/npm/pnpm/10.17.1/10.18.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/pnpm/10.18.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pnpm/10.17.1/10.18.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | packageManager | minor | | [python](https://redirect.github.com/actions/python-versions) | `3.13.7` -> `3.14.0` | [![age](https://developer.mend.io/api/mc/badges/age/github-releases/actions%2fpython-versions/3.14.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/actions%2fpython-versions/3.13.7/3.14.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | uses-with | minor | | [vue-tsc](https://redirect.github.com/vuejs/language-tools) ([source](https://redirect.github.com/vuejs/language-tools/tree/HEAD/packages/tsc)) | [`^3.1.0` -> `^3.1.1`](https://renovatebot.com/diffs/npm/vue-tsc/3.1.1/3.1.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/vue-tsc/3.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vue-tsc/3.1.1/3.1.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch | --- ### Release Notes <details> <summary>docker/docker (github.com/docker/docker)</summary> ### [`v28.5.0+incompatible`](https://redirect.github.com/docker/docker/compare/v28.4.0...v28.5.0) [Compare Source](https://redirect.github.com/docker/docker/compare/v28.4.0...v28.5.0) </details> <details> <summary>go-playground/validator (github.com/go-playground/validator/v10)</summary> ### [`v10.28.0`](https://redirect.github.com/go-playground/validator/releases/tag/v10.28.0): Release 10.28.0 [Compare Source](https://redirect.github.com/go-playground/validator/compare/v10.27.0...v10.28.0) #### What's Changed - Update workflow\.yml to support 2 most recent major versions by [@&#8203;nodivbyzero](https://redirect.github.com/nodivbyzero) in [#&#8203;1417](https://redirect.github.com/go-playground/validator/pull/1417) - Bump actions/checkout from 4 to 5 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1456](https://redirect.github.com/go-playground/validator/pull/1456) - Go 1.25 support by [@&#8203;nodivbyzero](https://redirect.github.com/nodivbyzero) in [#&#8203;1459](https://redirect.github.com/go-playground/validator/pull/1459) - Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1463](https://redirect.github.com/go-playground/validator/pull/1463) - Bump golang.org/x/text from 0.22.0 to 0.29.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1464](https://redirect.github.com/go-playground/validator/pull/1464) - Bump actions/setup-go from 5 to 6 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1465](https://redirect.github.com/go-playground/validator/pull/1465) - Bump golang.org/x/crypto from 0.33.0 to 0.42.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;1467](https://redirect.github.com/go-playground/validator/pull/1467) - fix: should panic when define duplicate field param in `required_if` by [@&#8203;duyquang6](https://redirect.github.com/duyquang6) in [#&#8203;1468](https://redirect.github.com/go-playground/validator/pull/1468) - Fixed missing keys from returned errors in map validation by [@&#8203;gelozr](https://redirect.github.com/gelozr) in [#&#8203;1284](https://redirect.github.com/go-playground/validator/pull/1284) - Added https\_url tag by [@&#8203;ahmedkamalio](https://redirect.github.com/ahmedkamalio) in [#&#8203;1461](https://redirect.github.com/go-playground/validator/pull/1461) - docs: add description for 'port' validator by [@&#8203;nodivbyzero](https://redirect.github.com/nodivbyzero) in [#&#8203;1435](https://redirect.github.com/go-playground/validator/pull/1435) - Add alphaspace validator by [@&#8203;takaaa220](https://redirect.github.com/takaaa220) in [#&#8203;1343](https://redirect.github.com/go-playground/validator/pull/1343) #### New Contributors - [@&#8203;duyquang6](https://redirect.github.com/duyquang6) made their first contribution in [#&#8203;1468](https://redirect.github.com/go-playground/validator/pull/1468) - [@&#8203;gelozr](https://redirect.github.com/gelozr) made their first contribution in [#&#8203;1284](https://redirect.github.com/go-playground/validator/pull/1284) - [@&#8203;ahmedkamalio](https://redirect.github.com/ahmedkamalio) made their first contribution in [#&#8203;1461](https://redirect.github.com/go-playground/validator/pull/1461) - [@&#8203;takaaa220](https://redirect.github.com/takaaa220) made their first contribution in [#&#8203;1343](https://redirect.github.com/go-playground/validator/pull/1343) **Full Changelog**: <https://github.com/go-playground/validator/compare/v10.27.0...v10.28.0> </details> <details> <summary>golang/go (go)</summary> ### [`v1.25.2`](https://redirect.github.com/golang/go/compare/go1.25.1...go1.25.2) </details> <details> <summary>actions/go-versions (go)</summary> ### [`v1.25.2`](https://redirect.github.com/actions/go-versions/releases/tag/1.25.2-18331015608): 1.25.2 [Compare Source](https://redirect.github.com/actions/go-versions/compare/1.25.1-17451174567...1.25.2-18331015608) Go 1.25.2 </details> <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.76.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.76.0): Release 1.76.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.75.1...v1.76.0) ### Dependencies - Minimum supported Go version is now 1.24 ([#&#8203;8509](https://redirect.github.com/grpc/grpc-go/issues/8509)) - Special Thanks: [@&#8203;kevinGC](https://redirect.github.com/kevinGC) ### Bug Fixes - client: Return status `INTERNAL` when a server sends zero response messages for a unary or client-streaming RPC. ([#&#8203;8523](https://redirect.github.com/grpc/grpc-go/issues/8523)) - client: Fail RPCs with status `INTERNAL` instead of `UNKNOWN` upon receiving http headers with status 1xx and `END_STREAM` flag set. ([#&#8203;8518](https://redirect.github.com/grpc/grpc-go/issues/8518)) - Special Thanks: [@&#8203;vinothkumarr227](https://redirect.github.com/vinothkumarr227) - pick\_first: Fix race condition that could cause pick\_first to get stuck in `IDLE` state on backend address change. ([#&#8203;8615](https://redirect.github.com/grpc/grpc-go/issues/8615)) ### New Features - credentials: Add `credentials/jwt` package providing file-based JWT PerRPCCredentials (A97). ([#&#8203;8431](https://redirect.github.com/grpc/grpc-go/issues/8431)) - Special Thanks: [@&#8203;dimpavloff](https://redirect.github.com/dimpavloff) ### Performance Improvements - client: Improve HTTP/2 header size estimate to reduce re-allocations. ([#&#8203;8547](https://redirect.github.com/grpc/grpc-go/issues/8547)) - encoding/proto: Avoid redundant message size calculation when marshaling. ([#&#8203;8569](https://redirect.github.com/grpc/grpc-go/issues/8569)) - Special Thanks: [@&#8203;rs-unity](https://redirect.github.com/rs-unity) </details> <details> <summary>markedjs/marked (marked)</summary> ### [`v16.4.0`](https://redirect.github.com/markedjs/marked/compare/v16.3.0...3cadbbf96fc48ec962e9744ec88a0e640e480fe8) [Compare Source](https://redirect.github.com/markedjs/marked/compare/v16.3.0...v16.4.0) </details> <details> <summary>pnpm/pnpm (pnpm)</summary> ### [`v10.18.1`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#10181) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.18.0...v10.18.1) ##### Patch Changes - Don't print a warning, when `--lockfile-only` is used [#&#8203;8320](https://redirect.github.com/pnpm/pnpm/issues/8320). - `pnpm setup` creates a command shim to the pnpm executable. This is needed to be able to run `pnpm self-update` on Windows [#&#8203;5700](https://redirect.github.com/pnpm/pnpm/issues/5700). - When using pnpm catalogs and running a normal `pnpm install`, pnpm produced false positive warnings for "*skip adding to the default catalog because it already exists*". This warning now only prints when using `pnpm add --save-catalog` as originally intended. ### [`v10.18.0`](https://redirect.github.com/pnpm/pnpm/blob/HEAD/pnpm/CHANGELOG.md#10180) [Compare Source](https://redirect.github.com/pnpm/pnpm/compare/v10.17.1...v10.18.0) ##### Minor Changes - Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads. Added configuration options for warning thresholds: `fetchWarnTimeoutMs` and `fetchMinSpeedKiBps`. Warning messages are displayed when requests exceed time thresholds or fall below speed minimums Related PR: [#&#8203;10025](https://redirect.github.com/pnpm/pnpm/pull/10025). ##### Patch Changes - Retry filesystem operations on EAGAIN errors [#&#8203;9959](https://redirect.github.com/pnpm/pnpm/pull/9959). - Outdated command respects `minimumReleaseAge` configuration [#&#8203;10030](https://redirect.github.com/pnpm/pnpm/pull/10030). - Correctly apply the `cleanupUnusedCatalogs` configuration when removing dependent packages. - Don't fail with a meaningless error when `scriptShell` is set to `false` [#&#8203;8748](https://redirect.github.com/pnpm/pnpm/issues/8748). - `pnpm dlx` should not fail when `minimumReleaseAge` is set [#&#8203;10037](https://redirect.github.com/pnpm/pnpm/issues/10037). </details> <details> <summary>actions/python-versions (python)</summary> ### [`v3.14.0`](https://redirect.github.com/actions/python-versions/releases/tag/3.14.0-18313368925): 3.14.0 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.8-18331000654...3.14.0-18313368925) Python 3.14.0 ### [`v3.13.8`](https://redirect.github.com/actions/python-versions/releases/tag/3.13.8-18331000654): 3.13.8 [Compare Source](https://redirect.github.com/actions/python-versions/compare/3.13.7-16980743123...3.13.8-18331000654) Python 3.13.8 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/0xJacky/nginx-ui). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzEuOSIsInVwZGF0ZWRJblZlciI6IjQxLjEzMS45IiwidGFyZ2V0QnJhbmNoIjoiZGV2IiwibGFiZWxzIjpbXX0=-->
kerem 2026-03-01 15:42:19 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-ui#5699
No description provided.