fix(deps): update all dependencies by renovate[bot] · Pull Request #205 · aperturerobotics/controllerbus

renovate · 2026-02-23T12:36:07Z

This PR contains the following updates:

Package	Change	Type	Update
@aptre/common	`0.33.1` → `0.35.1`	devDependencies	minor
@aptre/protobuf-es-lite	`1.1.0` → `1.1.1`	overrides	patch
@aptre/protobuf-es-lite	`1.1.0` → `1.1.1`	resolutions	patch
@aptre/protobuf-es-lite	`1.1.0` → `1.1.1`	dependencies	patch
actions/cache	`v5` → `v6`	action	major
actions/checkout	`v6.0.2` → `v7.0.1`	action	major
actions/setup-go	`v6.4.0` → `v7.0.0`	action	major
actions/setup-node	`v6.4.0` → `v7.0.0`	action	major
github.com/aperturerobotics/common	`v0.33.1` → `v0.35.1`	require	minor
github.com/aperturerobotics/controllerbus	`v0.53.3` → `v0.53.4`	require	patch
github.com/aperturerobotics/protobuf-go-lite	`v0.14.0` → `v0.17.0`	require	minor
github.com/aperturerobotics/starpc	`v0.49.16` → `v0.52.0`	require	minor
github.com/aperturerobotics/util	`v1.34.7` → `v1.34.9`	require	patch
github.com/sirupsen/logrus	`d4a5065` → `ed957d5`	require	digest
github/codeql-action	`v4.36.0` → `v4.37.6`	action	minor
go (source)	`1.26.3` → `1.26.5`	toolchain	patch
golang.org/x/mod	`v0.36.0` → `v0.39.0`	require	minor
golang.org/x/tools	`v0.45.0` → `v0.48.0`	require	minor
mvdan.cc/gofumpt	`v0.10.0` → `v0.11.0`	require	minor
starpc	`^0.49.0` → `^0.52.0`	dependencies	minor
typescript (source)	`^6.0.3` → `^7.0.0`	devDependencies	major

Release Notes

aperturerobotics/common (@aptre/common)

What's Changed

fix(tools): restore module hashes for the tool build by @paralin in #51

Full Changelog: aperturerobotics/common@v0.34.3...v0.34.4

`v0.34.3`

Compare Source

Full Changelog: aperturerobotics/common@v0.34.2...v0.34.3

`v0.34.2`

Compare Source

What's Changed

fix(deps): update all dependencies by @renovate[bot] in #49

Full Changelog: aperturerobotics/common@v0.34.1...v0.34.2

`v0.34.1`

Compare Source

Full Changelog: aperturerobotics/common@v0.34.0...v0.34.1

`v0.34.0`

Compare Source

Full Changelog: aperturerobotics/common@v0.33.1...v0.34.0

aperturerobotics/protobuf-es-lite (@aptre/protobuf-es-lite)

`v1.1.1`

Compare Source

Full Changelog: aperturerobotics/protobuf-es-lite@v1.1.0...v1.1.1

actions/cache (actions/cache)

`v6.1.0`

Compare Source

What's Changed

Bump @actions/cache to v6.1.0 - handle read-only cache access by @jasongin in #1768

Full Changelog: actions/cache@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Update packages, migrate to ESM by @Samirat in #1760

Full Changelog: actions/cache@v5...v6.0.0

`v6`

Compare Source

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.1.0`

Compare Source

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

actions/setup-go (actions/setup-go)

`v7.0.0`

Compare Source

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in #763
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #771

New Contributors

@philip-gai made their first contribution in #771

Full Changelog: actions/setup-go@v6...v7.0.0

`v7`

Compare Source

`v6.5.0`

Compare Source

actions/setup-node (actions/setup-node)

`v7.0.0`

Compare Source

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in #1577
Migrate to ESM and upgrade dependencies by @gowridurgad in #1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in #1558
Only use mirrorToken in getManifest if it's provided by @deiga in #1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in #1536
docs: Update restore-only cache documentation by @priya-kinthali in #1550
docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in #1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1569

New Contributors

@chiranjib-swain made their first contribution in #1536
@deiga made their first contribution in #1548
@jasongin made their first contribution in #1569

Full Changelog: actions/setup-node@v6...v7.0.0

`v7`

Compare Source

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

aperturerobotics/controllerbus (github.com/aperturerobotics/controllerbus)

`v0.53.4`

Compare Source

aperturerobotics/protobuf-go-lite (github.com/aperturerobotics/protobuf-go-lite)

`v0.17.0`

Compare Source

`v0.16.0`

Compare Source

`v0.15.0`

Compare Source

aperturerobotics/starpc (github.com/aperturerobotics/starpc)

`v0.52.0`

Compare Source

What's Changed

chore(deps): update dependency oxfmt to v0.62.0 by @renovate[bot] in #213
feat(srpc): pass explicit server contexts by @paralin in #215

Full Changelog: aperturerobotics/starpc@v0.51.0...v0.52.0

`v0.51.0`

Compare Source

What's Changed

fix(deps): update module github.com/aperturerobotics/common to v0.35.0 by @renovate[bot] in #210
fix(srpc): name the close that arrives without a completion by @paralin in #212
refactor(srpc): remove held call receipts by @paralin in #214

Full Changelog: aperturerobotics/starpc@v0.50.0...v0.51.0

`v0.50.0`

Compare Source

Full Changelog: aperturerobotics/starpc@v0.49.21...v0.50.0

`v0.49.21`

Compare Source

`v0.49.20`

Compare Source

Full Changelog: aperturerobotics/starpc@v0.49.19...v0.49.20

`v0.49.19`

Compare Source

Full Changelog: aperturerobotics/starpc@v0.49.18...v0.49.19

`v0.49.18`

Compare Source

Full Changelog: aperturerobotics/starpc@v0.49.17...v0.49.18

`v0.49.17`

Compare Source

Full Changelog: aperturerobotics/starpc@v0.49.16...v0.49.17

aperturerobotics/util (github.com/aperturerobotics/util)

`v1.34.9`

Compare Source

`v1.34.8`

Compare Source

github/codeql-action (github/codeql-action)

`v4.37.6`

Compare Source

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

`v4.37.5`

Compare Source

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

`v4.37.4`

Compare Source

`v4.37.3`

Compare Source

No user facing changes.

`v4.37.2`

Compare Source

The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023
The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007

`v4.37.1`

Compare Source

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956
Update default CodeQL bundle version to 2.26.1. #4019

`v4.37.0`

Compare Source

Update default CodeQL bundle version to 2.26.0. #3995
In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

`v4.36.3`

Compare Source

No user facing changes.

`v4.36.2`

Compare Source

Cache CodeQL CLI version information across Actions steps. #3943
Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937
Update default CodeQL bundle version to 2.25.6. #3948

`v4.36.1`

Compare Source

No user facing changes.

golang/go (go)

`v1.26.5`

`v1.26.4`

mvdan/gofumpt (mvdan.cc/gofumpt)

`v0.11.0`

Compare Source

Like v0.10.0, this release is based on Go 1.26's gofmt, and requires Go 1.25 or later.

The multi-line function call rule introduced in v0.10.0 proved controversial,
so it is now the extra rule balance_calls, disabled by default.
It is also narrowed to only place the closing parenthesis on its own line
when the opening parenthesis ends a line. See #74.

Avoid crashing when compiled with tinygo for Wasm, which lacks recover support,
by detecting commented-out code without the parser's bailout panic. See #230.

Produce stable output in a single pass when a lone var declaration is adjacent
to a single-element var group, which previously required a second run. See #355.

Keep the parentheses around an expression which begins with a composite literal
of the form T{...}, such as (s{}.Foo()), as they are required when the
expression starts an if, for, or switch clause. See #356.

microsoft/TypeScript (typescript)

`v7.0.2`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-02-23T19:14:57Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance	License
npm/@aptre/common@0.33.1 ⏵ 0.35.1	⁺²	⁺¹	⁺³
golang/golang.org/x/tools@v0.48.0
npm/starpc@0.49.7 ⏵ 0.52.0	⁺¹	⁺¹
npm/@aptre/protobuf-es-lite@1.1.0 ⏵ 1.1.1		⁺¹	⁺¹
npm/typescript@6.0.3 ⏵ 7.0.2		^-1		⁺¹⁰
golang/github.com/aperturerobotics/starpc@v0.49.11 ⏵ v0.52.0
golang/golang.org/x/mod@v0.39.0
golang/github.com/aperturerobotics/util@v1.34.5 ⏵ v1.34.9	⁺¹
golang/github.com/aperturerobotics/common@v0.33.1 ⏵ v0.35.1
golang/github.com/sirupsen/logrus@v1.9.5-0.20260508084601-d4a50659cfd6 ⏵ v1.9.5-0.20260812164836-ca74dacf6077	⁺¹
golang/mvdan.cc/gofumpt@v0.11.0
golang/github.com/aperturerobotics/controllerbus@v0.53.3 ⏵ v0.53.4	⁺¹
golang/github.com/aperturerobotics/protobuf-go-lite@v0.14.0 ⏵ v0.17.0

View full report

renovate · 2026-05-31T14:27:06Z

ℹ️ Artifact update notice

File name: example/plugin-demo/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`golang.org/x/sys`	`v0.44.0` -> `v0.45.0`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`github.com/aperturerobotics/go-websocket`	`v1.8.15-0.20260329113544-74dbfb8f11c6` -> `v1.8.15-0.20260619192713-a096778f08c1`
`golang.org/x/sync`	`v0.20.0` -> `v0.22.0`
`golang.org/x/sys`	`v0.45.0` -> `v0.47.0`

socket-security · 2026-06-12T00:38:53Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot changed the title ~~fix(deps): update all dependencies~~ fix(deps): update github.com/aperturerobotics/json-iterator-lite digest to 12a7c33 Feb 23, 2026

renovate Bot force-pushed the renovate/all branch from c39329e to 32cfa13 Compare February 23, 2026 13:04

renovate Bot changed the title ~~fix(deps): update github.com/aperturerobotics/json-iterator-lite digest to 12a7c33~~ fix(deps): update github.com/aperturerobotics/json-iterator-lite digest to 12a7c33 - autoclosed Feb 23, 2026

renovate Bot closed this Feb 23, 2026

renovate Bot deleted the renovate/all branch February 23, 2026 13:07

renovate Bot changed the title ~~fix(deps): update github.com/aperturerobotics/json-iterator-lite digest to 12a7c33 - autoclosed~~ chore(deps): update dependency @aptre/common to ^0.31.0 Feb 23, 2026

renovate Bot reopened this Feb 23, 2026

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 7733050 to 1103078 Compare February 23, 2026 19:14

renovate Bot changed the title ~~chore(deps): update dependency @aptre/common to ^0.31.0~~ fix(deps): update all dependencies Feb 23, 2026

renovate Bot force-pushed the renovate/all branch 10 times, most recently from ccc9560 to 17dcb0a Compare March 2, 2026 18:36

renovate Bot force-pushed the renovate/all branch 8 times, most recently from eb09c28 to d83758f Compare March 7, 2026 00:39

renovate Bot force-pushed the renovate/all branch 6 times, most recently from addd0f2 to 57cba88 Compare March 27, 2026 16:53

renovate Bot force-pushed the renovate/all branch from 57cba88 to 3df7ba0 Compare March 29, 2026 12:50

renovate Bot changed the title ~~fix(deps): update all dependencies~~ fix(deps): update github.com/aperturerobotics/json-iterator-lite digest to 783bbb0 Mar 29, 2026

renovate Bot force-pushed the renovate/all branch 2 times, most recently from b0f2bb8 to c14c70c Compare March 30, 2026 01:00

renovate Bot changed the title ~~fix(deps): update github.com/aperturerobotics/json-iterator-lite digest to 783bbb0~~ fix(deps): update all dependencies Mar 30, 2026

renovate Bot force-pushed the renovate/all branch 5 times, most recently from 15015df to 25a555f Compare April 4, 2026 22:03

renovate Bot force-pushed the renovate/all branch 5 times, most recently from 064e310 to 5476560 Compare April 12, 2026 04:51

renovate Bot force-pushed the renovate/all branch 6 times, most recently from 1870da6 to b688ad9 Compare April 21, 2026 20:57

fix(deps): update all dependencies

3c7c407

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Navigation Menu

Uh oh!

fix(deps): update all dependencies - #205

fix(deps): update all dependencies#205
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all

renovate Bot commented Feb 23, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Feb 23, 2026 •

edited

Loading

Uh oh!

renovate Bot commented May 31, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Feb 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

What's Changed

What's Changed

What's Changed

Configuration

Uh oh!

socket-security Bot commented Feb 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate Bot commented May 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: example/plugin-demo/go.mod

File name: go.mod

Uh oh!

socket-security Bot commented Jun 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Feb 23, 2026 •

edited

Loading

socket-security Bot commented Feb 23, 2026 •

edited

Loading

renovate Bot commented May 31, 2026 •

edited

Loading

socket-security Bot commented Jun 12, 2026 •

edited

Loading