fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/davidbyttow/govips/v2	v2.16.0 → v2.17.0			require	minor
github.com/go-resty/resty/v2	v2.16.5 → v2.17.2			require	minor
golang	1.25-alpine → 1.26-alpine			stage	minor

---

Release Notes

davidbyttow/govips (github.com/davidbyttow/govips/v2)

v2.17.0

Compare Source

What's Changed

New Features

• Add built-in vipsgen code generator for auto-generating C bridge wrappers
• Add NewTransparentCanvas helper for creating transparent RGBA images
• Add Grey() constructor for creating gradient images
• Add fast Go image.Image interop: ToGoImage and NewImageFromGoImage
• Add Loop API and preserve loop/delay metadata in RemoveMetadata
• Add gravity function
• Add PSD support
• Add Magick Save, support ICO load
• Add access options while loading image
• Add additional image operation functions

Bug Fixes

• Fix memory leak, panics, and race condition
• Fix memory leak when using multi pages
• Fix animated resize producing toilet-roll images
• Fix CMYK ICC profile ignored when embedded profile exists
• Fix TIFF tile dimensions zero-value crash
• Fix JXL type detection for ISOBMFF containers with varying box sizes
• Add runtime.KeepAlive to prevent GC finalization during CGo calls
• Stop implicitly converting BMP files to PNG

Internal Improvements

• Consolidate generated C bridge files into generated.{c,h,go}
• Consolidate hand-written C bridge files into operations.{c,h,go}
• Reduce hand-written C bridge code by using generated wrappers
• Remove dead code (INT_TO_GBOOLEAN, unused max_alpha())
• Split golden tests by format for better organization

Security

• Update gopkg.in/yaml.v3 v3.0.0 to v3.0.1 (security fix)
• Bump golang.org/x/net from 0.25.0 to 0.38.0

Other

• Add new HEIC magic numbers
• Document GIF quality param limitation with native gifsave
• Add side effects import for golang.org/x/image/webp

go-resty/resty (github.com/go-resty/resty/v2)

v2.17.2

Compare Source

Release Notes

Backport

• backport: header deepcopy fix by @​jeevatkm in #​1110

Release

• release: version bump to v2.17.2 and readme update by @​jeevatkm in #​1112

Full Changelog: go-resty/resty@v2.17.1...v2.17.2

v2.17.1

Compare Source

Release Notes

Bug Fixes

• fix: content type request header on http.NoBody type #​1074 by @​jeevatkm in #​1079

Full Changelog: go-resty/resty@v2.17.0...v2.17.1

v2.17.0

Compare Source

Release Notes

Bug Fixes

• Fix off-by-one error in key/value resolution by @​mbsulliv in #​975
• Fix/missing content length header on empty post req by @​Libero-Dev in #​1003

Backport

• backport: potential wrong total time in trace info from PR #​1017 by @​git-hulk in #​1018
• backport: negative trace substraction when using SetTimeout by @​nicolasbeauvais in #​1065

Release Updates

• For v2.17.0 release by @​jeevatkm in #​1066

New Contributors

• @​mbsulliv made their first contribution in #​975
• @​Libero-Dev made their first contribution in #​1003

Full Changelog: go-resty/resty@v2.16.5...v2.17.0

---

Configuration

📅 Schedule: Branch creation - "before 6am" in timezone Asia/Jakarta, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.20 -> 1.23.0
golang.org/x/net	v0.33.0 -> v0.43.0
golang.org/x/sys	v0.28.0 -> v0.35.0
golang.org/x/text	v0.21.0 -> v0.28.0