fix(deps): update dependencies (patch & digest) by renovate[bot] · Pull Request #445 · opendefensecloud/artifact-conduit

renovate · 2026-07-27T01:14:48Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout (changelog)	action	digest	`9c091bb` → `3d3c42e`
actions/checkout	action	patch	`v7.0.0` → `v7.0.1`
alpine/helm		patch	`4.2.2` → `4.2.3`
amazon/aws-cli		patch	`2.36.7` → `2.36.8`	`2.36.10` (+1)
docker/login-action (changelog)	action	digest	`af1e73f` → `371161b`
gcr.io/distroless/static	stage	digest	`963fa6c` → `f7f8f72`
github.com/argoproj/argo-workflows/v4	require	patch	`v4.0.6` → `v4.0.8`
github.com/go-logr/logr	require	patch	`v1.4.3` → `v1.4.4`
helm	uses-with	patch	`v4.2.2` → `v4.2.3`
mkdocs-material (changelog)		patch	`== 9.7.6` → `==9.7.7`
ossf/scorecard-action	action	patch	`v2.4.3` → `v2.4.4`
release-drafter/release-drafter (changelog)	action	digest	`4d75298` → `eada3c9`
sigs.k8s.io/structured-merge-diff/v6	require	patch	`v6.4.1` → `v6.4.2`
softprops/action-gh-release (changelog)	action	digest	`718ea10` → `3d0d988`
squidfunk/mkdocs-material	final	digest	`868ad4d` → `51b8714`

Release Notes

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

argoproj/argo-workflows (github.com/argoproj/argo-workflows/v4)

`v4.0.8`

Compare Source

Full Changelog: v4.0.7...v4.0.8

Selected Changes

570c47058 chore(deps): update module golang.org/x/text to v0.39.0 [security] (release-4.0) (#16523)
48f1537f9 chore(deps): update module google.golang.org/grpc to v1.82.1 [security] (release-4.0) (#16520)
cfa106cea chore(deps): update module golang.org/x/net to v0.56.0 [security] (release-4.0) (#16522)
94d3e4768 fix: replace configmap watchers with informers (cherry-pick #16408 for 4.0) (#16516)
86e0b7bbf chore(deps): update module golang.org/x/net to v0.56.0 [security] (release-4.0) (#16518)
d356c8b8b fix: normalize GCS artifact keys to forward slashes on Windows. Fixes #16470 (cherry-pick #16476 for 4.0) (#16507)
a329a178b fix(controller): mark reapply-failed on persist errors to keep throttler slot (cherry-pick #16482 for 4.0) (#16505)
c90df9a82 fix(errors): treat gRPC client request timeout as transient (cherry-pick #16487 for 4.0) (#16504)
7d8802649 feat(controller): hot-reload namespaceParallelism from config (cherry-pick #16486 for 4.0) (#16501)
6cd56ceae fix(controller): treat client-go rate limiter wait deadline as transient (cherry-pick #16485 for 4.0) (#16500)
9c6aa812c fix(controller): allow onExit DAG handler to complete under Stop shutdown (cherry-pick #16488 for 4.0) (#16496)
751349b8f fix(errors): treat client-go response body read failures as transient (cherry-pick #16484 for 4.0) (#16498)
f0b8b5649 fix(ui): handle exceptions when retrieving user info (cherry-pick #16491 for 4.0) (#16493)
11895e122 fix: don't leak semaphore slots when limit fetch fails during release (cherry-pick #16405 for 4.0) (#16471)
fef0aee08 fix: make workflow retry reset deterministic. Fixes #16450 (cherry-pick #16451 for 4.0) (#16467)
30e3da0ac fix: complete orphaned TaskGroup nodes stuck Running. Fixes #16450 (cherry-pick #16454 for 4.0) (#16465)
445b84e6f chore(deps): update gcr.io/distroless/static-debian13:latest docker digest to 9197324 (release-4.0) (#16460)
61e0bdc09 chore(deps): update dependency rxjs to v7.8.2 (release-4.0) (#16462)
fe2a3b88d chore(deps): update dependency qs to v6.15.3 (release-4.0) (#16461)
fefe0c678 fix: log missing optional output parameter at warn level, not error. Fixes #16395 (cherry-pick #16402 for 4.0) (#16455)
6119ae208 chore(deps): bump loadash+loadash-es for snyk (release-4.0) (#16452)
afc4b74b6 chore(deps): update dependency @types/dagre to v0.7.54 (release-4.0) (#16449)
e19d0138c chore(deps): update dependency linkify-it to v5.0.2 (release-4.0) (#16446)
52dba927d fix(ui): resolve login logo paths with non-root baseHref (cherry-pick #16385 for 4.0) (#16412)
12e83f192 feat: configurable allowlist (cherry-pick #16344 for 4.0) (#16401)

Contributors

Aaron Mark
Alan Clucas
Ali Asghar
amarkdotdev
Claude Fable 5
Goutham Annem
Isitha Subasinghe
krisling049
Mason Malone
shuangkun tian

`v4.0.7`

Compare Source

Full Changelog: v4.0.6...v4.0.7

Selected Changes

9aeb47ce1 fix(ui): Fixed Azure Queue Storage icon in event flow diagram Fixes #16384 (cherry-pick #16390 for 4.0) (#16392)
bb4e7ff00 fix: reject stale copies of completed workflows using resourceVersion comparison (cherry-pick #16357 for 4.0) (#16382)
0f415c4dc fix: log "Max parallelism reached" at info level, not error. Fixes #16378 (cherry-pick #16379 for 4.0) (#16380)
6cb6553c9 fix(validate): validate placeholder step names (cherry-pick #15991 for 4.0) (#16318)
5f856f117 fix: honor ?? and ?. guards in strict missing-variable check (cherry-pick #16274 for 4.0) (#16316)
638a02fae fix!: drop values when skipped arguments are being substituted (cherry-pick #16223 for 4.0) (#16314)
1a36c5de9 fix: resolve race condition in custom metric initialization (cherry-pick #16238 for 4.0) (#16312)
f2b671c85 fix: return 404 instead of panic when archived workflow is not yet persisted (cherry-pick #16302 for 4.0) (#16307)
76fb8628c fix(auth): mask sensitive token in sso callback logs (cherry-pick #16268 for 4.0) (#16309)
109a2fe03 chore(deps): update dependency linkify-it to v5.0.1 [security] (release-4.0) (#16301)
33baac709 chore(deps): update dependency @babel/core to v7.29.6 [security] (release-4.0) (#16280)

Contributors

Alan Clucas
Claude Fable 5
Claude Opus 4.8 (1M context)
Isitha Subasinghe
Knut Zuidema
Liketosweep
Nebojša Jaćović
panaxging
Rin
Tommaso TBA. BARBERIS
Ville Vesilehto
zvdy

go-logr/logr (github.com/go-logr/logr)

`v1.4.4`

Compare Source

What's Changed

drop +build tags by @pohly in #401
CI: avoid floating dependencies, fix issues by @pohly in #432
Bump to Go 1.26 by @thockin in #445
funcr: bound slog.Group nesting depth to prevent stack overflow by @martinholovsky in #447
funcr: Handle and test recursive values by @thockin in #446

New Contributors

@martinholovsky made their first contribution in #447

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

helm/helm (helm)

`v4.2.3`

Compare Source

squidfunk/mkdocs-material (mkdocs-material)

`v9.7.7`: mkdocs-material-9.7.7

Compare Source

[!WARNING]

Material for MkDocs is approaching end of life

Material for MkDocs is scheduled to reach end of life on November 5, 2026. Until then, maintenance is limited to critical bug fixes and security updates.

The path forward is Zensical, our next-generation static site generator built from first principles. If you’re planning a new documentation project or thinking about your long-term setup, we encourage you to start exploring Zensical.

Organizations requiring support beyond this date can get in touch to discuss options.

Read the full announcement on our blog

Changes

Fixed a DOM-based XSS vulnerability in search suggestions

Thanks to @p- for responsibly reporting this issue.

ossf/scorecard-action (ossf/scorecard-action)

`v2.4.4`

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.5.0 release. For a complete list of changes, please refer to the Scorecard v5.4.0 release notes and the Scorecard v5.5.0 release notes.

log POST failures instead of failing entire action by @spencerschrock in #1625

Full Changelog: ossf/scorecard-action@v2.4.3...v2.4.4

kubernetes-sigs/structured-merge-diff (sigs.k8s.io/structured-merge-diff/v6)

`v6.4.2`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 5am on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-07-27T01:14:51Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Details:

Package	Change
`golang.org/x/mod`	`v0.36.0` -> `v0.37.0`
`golang.org/x/text`	`v0.38.0` -> `v0.39.0`
`golang.org/x/tools`	`v0.45.0` -> `v0.47.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260401024825-9d38bb4040a9` -> `v0.0.0-20260414002931-afd174a4e478`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260401024825-9d38bb4040a9` -> `v0.0.0-20260414002931-afd174a4e478`
`google.golang.org/grpc`	`v1.81.1` -> `v1.82.1`

coveralls · 2026-07-27T01:23:20Z

Coverage Report for CI Build 30414668223

Coverage decreased (-0.5%) to 84.322%

Details

Coverage decreased (-0.5%) from the base build.
Patch coverage: No coverable lines changed in this PR.
7 coverage regressions across 2 files.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

7 previously-covered lines in 2 files lost coverage.

File	Lines Losing Coverage	Coverage
pkg/controller/workflow_handler.go	4	83.26%
pkg/controller/order_controller.go	3	83.29%

Coverage Stats


Relevant Lines:	944
Covered Lines:	796
Line Coverage:	84.32%
Coverage Strength:	905.03 hits per line

💛 - Coveralls

renovate Bot added ok-to-helm PR is allowed to build an publish helm chart ok-to-image PR is allowed to run container build labels Jul 27, 2026

renovate Bot enabled auto-merge July 27, 2026 01:14

renovate Bot force-pushed the renovate/all-patch-and-digest-updates branch 7 times, most recently from fda9e86 to 23908cd Compare July 28, 2026 21:00

fix(deps): update dependencies (patch & digest)

b4e57ae

renovate Bot force-pushed the renovate/all-patch-and-digest-updates branch from 23908cd to b4e57ae Compare July 29, 2026 01:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update dependencies (patch & digest) - #445

fix(deps): update dependencies (patch & digest)#445
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-patch-and-digest-updates

renovate Bot commented Jul 27, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Jul 27, 2026

Uh oh!

coveralls commented Jul 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate Bot commented Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v7.0.1

v4.0.8

Selected Changes

Contributors

v4.0.7

Selected Changes

Contributors

v1.4.4

What's Changed

New Contributors

v4.2.3

v9.7.7: mkdocs-material-9.7.7

Changes

v2.4.4

What's Changed

v6.4.2

Configuration

Uh oh!

renovate Bot commented Jul 27, 2026

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

coveralls commented Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Coverage Report for CI Build 30414668223

Coverage decreased (-0.5%) to 84.322%

Details

Uncovered Changes

Coverage Regressions

Coverage Stats

💛 - Coveralls

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Jul 27, 2026 •

edited

Loading

`v7.0.1`

`v4.0.8`

`v4.0.7`

`v1.4.4`

`v4.2.3`

`v9.7.7`: mkdocs-material-9.7.7

`v2.4.4`

`v6.4.2`

coveralls commented Jul 27, 2026 •

edited

Loading