Skip to content

chore(deps): update tools#616

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/tools
Open

chore(deps): update tools#616
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/tools

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 20, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Update
github.com/goreleaser/goreleaser/v2 v2.15.4 → v2.16.0 age adoption passing confidence minor
hashicorp/vault v2.0.0 → v2.0.1 age adoption passing confidence patch
k8s.io/kube-openapi v0.0.0-20260512234627-ef417d054102 → v0.0.0-20260520065146-aa012df4f4af age adoption passing confidence patch
protocolbuffers/protobuf v34.1 → v34.2 age adoption passing confidence minor
rclone/rclone v1.74.1 → v1.74.2 age adoption passing confidence patch

Release Notes

goreleaser/goreleaser (github.com/goreleaser/goreleaser/v2)

v2.16.0

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.16.

Changelog

New Features
Bug fixes
Documentation updates
Other work

Full Changelog: goreleaser/goreleaser@v2.15.4...v2.16.0

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

GoReleaser logo

hashicorp/vault (hashicorp/vault)

v2.0.1

Compare Source

BREAKING CHANGES:

  • containers: set cap_ipc_lock capability on vault at build time. Container runtimes will need to add IPC_LOCK capabilities when running the vault container.

SECURITY:

  • api: Update golang.org/x/net to resolve GO-2026-4918"
  • core/identity: reject wildcards in rendered identity templates
  • core: Resolve GHSA-j88v-2chj-qfwx by removing our dependency on github.com/jackc/pgx/v3 and github.com/jackc/pgx/v4
  • core: Update github.com/Azure/go-ntlmssp to fix security vulnerability v0.1.1.
  • core: Update github.com/apache/thrift to fix security vulnerability GHSA-wf45-q9ch-q8gh
  • core: Update github.com/jackc/pgx/v5 to fix security vulnerability GHSA-j88v-2chj-qfwx.
  • core: Update golang.org/x/net to resolve GO-2026-4918"
  • core: Validate both path and file_path cannot be empty for requests to sys/audit/{path}
  • sdk: Resolve GHSA-j88v-2chj-qfwx by removing our dependency on github.com/jackc/pgx/v3 and github.com/jackc/pgx/v4
  • sdk: Update github.com/Azure/go-ntlmssp to fix security vulnerability v0.1.1.
  • sdk: Update github.com/jackc/pgx/v5 to fix security vulnerability GHSA-j88v-2chj-qfwx.
  • sdk: Update golang.org/x/net to resolve GO-2026-4918"

CHANGES:

  • auth/jwt: Update plugin to v0.26.3
  • core: Bump Go version to 1.26.3
  • identity: Require sudo capability to invoke the identity entity merge API endpoint (identity/entity/merge).
  • secrets/azure: Update plugin to v0.26.2+ent
  • secrets/openldap: Update plugin to v0.18.1+ent

FEATURES:

  • Billing metrics dashboard: Create a new billing dashboard with responsive layout to display metric data.
  • Secrets Sync UI: Added Workload Identity Federation (WIF) support in the UI for AWS, Azure, and GCP sync destinations

IMPROVEMENTS:

  • api: Add start_month and end_month parameters to /sys/billing/overview endpoint to allow querying billing data for specific time ranges.
  • api: Add migration_done_at_epoch to sys/seal-status response.
  • consumption-billing: Add billing tracking for OS Local Account static roles to support consumption-based billing metrics and high-water mark (HWM) tracking.
  • consumption-billing: Added consumption billing metrics for OIDC tokens.
  • consumption-billing: Added consumption billing metrics for PKI External CA certificates.
  • consumption-billing: Added consumption billing metrics for SPIFFE JWT tokens.
  • consumption-billing: Enabled sys/billing/overview endpoint in admin namespace.
  • consumption-billing: Float64 values returned by sys/billing/overview are now rounded to 4 decimal places.
  • consumption-billing: Increased billing data retention from 2 months to 37 months. The /sys/internal/billing/overview API endpoint now returns 37 months of historical consumption billing data by default.
  • consumption-billing: The /sys/internal/billing/overview API endpoint now always returns all metric types in the response, even when their values are zero. This ensures consistent response structure for easier client-side parsing.
  • core (Enterprise): Sanitized config now shows kms_library config.
  • core/seal (enterprise): Make it possible for new nodes to join a cluster configured with Seal High Availability.
  • scim: The SCIM Group PATCH handler now supports the path field in the form members[value eq "id"] on remove operations.
  • sdk: Expand support for docker test cluster options like seals, kms libraries, and entropy augmentation. DockerClusterNode.UpdateConfig now takes a full set of cluster options instead of just node config.
  • sdk: add WIF and rotation helpers for checking if params were updated to allow the consumer to know when changes need to be persisted to storage
  • secrets/pki (enterprise): Allow SCEP to use an issuer that is backed by an RSA based PKCS#11 managed key
  • secrets/transit: Change to using Trail of Bits libraries for PQC signature implementation in Transit
  • ui/dashboard: Reorganized dashboard widgets to improve layout and usability. Updated widgets to use HDS table components for better consistency. Enhanced the Quick Actions card with frequently used links alongside existing actions.
  • ui: Set pagination size to 10 for custom messages list view and toggle the "Apply filters" button visibility based on filter selection.
  • ui: Update copy on merge entities page to specify entity ID is the required data input when merging entities.
  • ui: add validations to the ACL visual policy editor to prevent it from saving policies with empty paths or capabilities.

BUG FIXES:

  • auth/aws: fix bug where rotation and wif config updates were not persisted to storage
  • client/ocsp: Adds a grace period to renew the cached entry for OCSP response.
  • core: Fix failure to detect errors during storage writes of totp keys.
  • database/mssql: Fix "sysadmin" requirement during lease revocation by replacing the undocumented sp_msloginmappings procedure with a granular metadata query. This allows the plugin to function with VIEW ANY DEFINITION instead of full sysadmin privileges.
  • database/mssql: Fix dynamic secret revocation by executing custom statements as a single batch instead of splitting on semicolons
  • database/snowflake: Fix WAL rollback issue for key-pair root credential rotation.
  • database: prevent static role rotation and connection init from hanging indefinitely when database calls block by adding timeouts around UpdateUser and Initialize
  • events (enterprise): Fix panic when replicating lease events.
  • go-plugin: Upgrade go-plugin to fix a bug where file descriptors could be leaked when spawning external plugins
  • identity: fixed a rare but possible data race issue with identities.
  • sdk: Small bugfixes relating to docker test container cleanup and image building.
  • secrets-sync (enterprise): Fix destination PATCH handling for WIF identity_token_ttl normalization and GCP service_account_email decoding.
  • secrets/kmip (enterprise): Address a nil pointer within the invalidation handler for managed objects.
  • secrets/ldap: enable proper license checking on 'openldap' plugin alias. This enables enterprise features when configuring mounts with the 'openldap' alias.
  • secrets/pki (enterprise): Fix SCEP nonce logging in audit data.
  • secrets/pki (enterprise): Include root CA in chain for CIEPS endpoints when root is the direct issuer, unless remove_roots_from_chain is true.
  • secrets/pki: Remove invalid value from the supported list of ACME algorithms.
  • ui: Add name field validation to LDAP create and edit roles forms.
  • ui: Fix LDAP hierarchical role navigation in UI
  • ui: Fix entities page to show success message after successfully editing an entity.
  • ui: Fix secrets to secrets-engines redirect for bookmarked URLs.
  • ui: Fixed custom messages list to display the expiration time on Inactive message badges.
  • ui: Fixed sidebar navigation animation issues
  • ui: Restore re-sizable columns for secrets and namespaces tables.
  • ui: Update DR operation token generation to accept a primary root token for authentication.
  • ui: Update KV max_version validation to disallow negative values.
protocolbuffers/protobuf (protocolbuffers/protobuf)

v34.2: Protocol Buffers v34.2

Compare Source

Announcements

  • Protobuf News may include additional announcements or pre-announcements for upcoming changes.

Bazel

  • Remove unused dependency on aspect_bazel_lib (784a77f)

C++

  • Workaround for attribute handling bug in gcc < 13 (1a5c5c5)

upb

  • Avoid theoretical overflow of uintptr_t in AddAllLinkedExtensions (08d520a)
  • Fixed two GCC-only issues around upb's generated extension registry (33debf3)
rclone/rclone (rclone/rclone)

v1.74.2: rclone v1.74.2

Compare Source

This is the v1.74.2 release of rclone.

Full details of the changes can be found in the changelog.

Configuration

📅 Schedule: (in timezone Europe/London)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file ok-to-test labels May 20, 2026
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented May 20, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Command failed: make vendor-go learn-tools-shas
go: downloading github.com/google/go-containerregistry v0.21.6
go: downloading github.com/docker/cli v29.4.3+incompatible
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading github.com/spf13/cobra v1.10.2
go: downloading golang.org/x/sync v0.20.0
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/google/go-cmp v0.7.0
go: downloading github.com/spf13/pflag v1.0.10
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/docker/docker-credential-helpers v0.9.3
go: downloading github.com/klauspost/compress v1.18.6
go: downloading golang.org/x/sys v0.44.0
curl: (22) The requested URL returned error: 404
make[1]: *** [tools/00_mod.mk:550: /tmp/tmp.hpPwg8qXY0/_bin/learn/download/tools/vault@v2.0.1_darwin_amd64] Error 22
make[1]: *** Waiting for unfinished jobs....
make: *** [Makefile:108: learn-tools-shas] Error 2

@cert-manager-prow cert-manager-prow Bot added dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels May 20, 2026
@renovate renovate Bot force-pushed the renovate/tools branch 2 times, most recently from 3c1ed11 to 83d2a14 Compare May 20, 2026 20:27
erikgb
erikgb reviewed May 20, 2026
View reviewed changes
Copy link
Copy Markdown
Member

@erikgb erikgb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@cert-manager-prow cert-manager-prow Bot added the lgtm Indicates that a PR is ready to be merged. label May 20, 2026
@cert-manager-prow
Copy link
Copy Markdown
Contributor

cert-manager-prow Bot commented May 20, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: erikgb

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@cert-manager-prow cert-manager-prow Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label May 20, 2026
@renovate renovate Bot force-pushed the renovate/tools branch from 83d2a14 to 32e7b83 Compare May 21, 2026 17:16
@cert-manager-prow cert-manager-prow Bot removed the lgtm Indicates that a PR is ready to be merged. label May 21, 2026
@cert-manager-prow
Copy link
Copy Markdown
Contributor

cert-manager-prow Bot commented May 21, 2026

New changes are detected. LGTM label has been removed.

@renovate renovate Bot force-pushed the renovate/tools branch from 32e7b83 to e4f8d90 Compare May 21, 2026 17:23
@erikgb
Copy link
Copy Markdown
Member

erikgb commented May 21, 2026

This is failing because of an issue with Vault binaries:
image

Ref. https://developer.hashicorp.com/vault/docs/updates/release-notes#vault-2-0-1

@renovate renovate Bot force-pushed the renovate/tools branch from e4f8d90 to 2dcf2a6 Compare May 23, 2026 12:24
@renovate
chore(deps): update tools
23f84df 
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
@renovate renovate Bot force-pushed the renovate/tools branch from 2dcf2a6 to 23f84df Compare May 24, 2026 20:27
@cert-manager-prow cert-manager-prow Bot added size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels May 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@erikgb erikgb erikgb left review comments

Assignees

No one assigned

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. dependencies Pull requests that update a dependency file ok-to-test size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@erikgb