Skip to content

Comments

fix(deps): update all non-major dependencies#52

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#52
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 5, 2026

This PR contains the following updates:

Package Change Age Confidence Type Update
ariga.io/atlas v1.0.0v1.1.0 age confidence require minor
github.com/99designs/gqlgen v0.17.86v0.17.87 age confidence require patch
github.com/evanw/esbuild v0.27.2v0.27.3 age confidence require patch
github.com/uptrace/bun v1.2.16v1.2.17 age confidence require patch
github.com/uptrace/bun/dialect/pgdialect v1.2.16v1.2.17 age confidence require patch
github.com/uptrace/bun/dialect/sqlitedialect v1.2.16v1.2.17 age confidence require patch
github.com/uptrace/bun/driver/pgdriver v1.2.16v1.2.17 age confidence require patch
github.com/uptrace/bun/extra/bundebug v1.2.16v1.2.17 age confidence require patch
github.com/vektah/gqlparser/v2 v2.5.31v2.5.32 age confidence require patch
go 1.251.26 age confidence uses-with minor
golang 1.25-alpine1.26-alpine age confidence stage minor
golang.org/x/crypto v0.47.0v0.48.0 age confidence require minor
lucide-react (source) ^0.563.0^0.575.0 age confidence dependencies minor
modernc.org/sqlite v1.44.3v1.46.1 age confidence require minor
postgres 18.1-alpine18.2-alpine age confidence minor
revotale/docker-multi-arch-release-action v1.0.5v1.2.0 age confidence action minor

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

ariga/atlas (ariga.io/atlas)

v1.1.0

Compare Source

We're excited to announce Atlas v1.1.

This release delivers on a promise we made in v1.0: Database Security as Code is now available for Atlas Pro users.

We're also shipping declarative data management for lookup tables and seed data, expanding database coverage with Aurora DSQL, Azure Fabric, and CockroachDB Cloud, and further improving our drivers and Atlas Cloud.

Here is what you can find in this release:

Read the full announcement in our blogpost.

role "app_readonly" {
  comment = "Read-only access for application"
}

permission {
  for_each   = [table.users, table.orders, table.products]
  for        = each.value
  to         = role.app_readonly
  privileges = [SELECT]
}

role "app_admin" {
  superuser   = false
  create_db   = false
  create_role = false
  login       = true
  member_of   = [role.app_readonly]
}

permission {
  for        = schema.public
  to         = role.app_admin
  privileges = [ALL]
  grantable  = true
}

Quick installation

macOS + Linux:

curl -sSf https://atlasgo.sh | sh

Homebrew:

brew install ariga/tap/atlas

Docker:

docker pull arigaio/atlas
Windows

Download

Legal

The default binaries in this release are distributed released under Atlas EULA, and the community binaries are released under the Apache 2.0 license.

99designs/gqlgen (github.com/99designs/gqlgen)

v0.17.87

Compare Source

What's Changed

New Contributors

Full Changelog: 99designs/gqlgen@v0.17.86...v0.17.87

evanw/esbuild (github.com/evanw/esbuild)

v0.27.3

Compare Source

  • Preserve URL fragments in data URLs (#​4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
      <html>
        <head><link rel="stylesheet" href="icons.css"></head>
        <body><div class="triangle"></div></body>
      </html>
    • icons.css:

      .triangle {
        width: 10px;
        height: 10px;
        background: currentColor;
        clip-path: url(./triangle.svg#x);
      }
    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
        <defs>
          <clipPath id="x">
            <path d="M0 0H10V10Z"/>
          </clipPath>
        </defs>
      </svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
    .triangle {
      width: 10px;
      height: 10px;
      background: currentColor;
      clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
    }
  • Parse and print CSS @scope rules (#​4322)

    This release includes dedicated support for parsing @scope rules in CSS. These rules include optional "start" and "end" selector lists. One important consequence of this is that the local/global status of names in selector lists is now respected, which improves the correctness of esbuild's support for CSS modules. Minification of selectors inside @scope rules has also improved slightly.

    Here's an example:

    /* Original code */
    @&#8203;scope (:global(.foo)) to (:local(.bar)) {
      .bar {
        color: red;
      }
    }
    
    /* Old output (with --loader=local-css --minify) */
    @&#8203;scope (:global(.foo)) to (:local(.bar)){.o{color:red}}
    
    /* New output (with --loader=local-css --minify) */
    @&#8203;scope(.foo)to (.o){.o{color:red}}
  • Fix a minification bug with lowering of for await (#​4378, #​4385)

    This release fixes a bug where the minifier would incorrectly strip the variable in the automatically-generated catch clause of lowered for await loops. The code that generated the loop previously failed to mark the internal variable references as used.

  • Update the Go compiler from v1.25.5 to v1.25.7 (#​4383, #​4388)

    This PR was contributed by @​MikeWillCook.

uptrace/bun (github.com/uptrace/bun)

v1.2.17

Compare Source

Bug Fixes
  • migrator exec error propagation (#​1320) (b40f603)
  • OrderAscNullsFirst mapping (fixes #​1305) (43b6af2)
  • panic in indirectAsKey when loading complex models. TypeOf(v) returns nil (2788c5b)
  • RunMigration marks migration as applied after running (#​1330) (990c2eb)
Features
vektah/gqlparser (github.com/vektah/gqlparser/v2)

v2.5.32

Compare Source

What's Changed

Full Changelog: vektah/gqlparser@v2.5.31...v2.5.32

actions/go-versions (go)

v1.26.0: 1.26.0

Compare Source

Go 1.26.0

lucide-icons/lucide (lucide-react)

v0.575.0: Version 0.575.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.573.0...0.575.0

v0.574.0: Version 0.574.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.572.0...0.574.0

v0.573.0: Version 0.573.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.572.0...0.573.0

v0.572.0: Version 0.572.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.571.0...0.572.0

v0.571.0: Version 0.571.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.570.0...0.571.0

v0.570.0: Version 0.570.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@0.569.0...0.570.0

v0.569.0: Version 0.569.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@0.568.0...0.569.0

v0.568.0: Version 0.568.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.567.0...0.568.0

v0.567.0: Version 0.567.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@0.566.0...0.567.0

v0.566.0: Version 0.566.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.565.0...0.566.0

v0.565.0: Version 0.565.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@0.564.0...0.565.0

v0.564.0: Version 0.564.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.563.1...0.564.0

cznic/sqlite (modernc.org/sqlite)

v1.46.1

Compare Source

v1.46.0

Compare Source

v1.45.0

Compare Source

revotale/docker-multi-arch-release-action (revotale/docker-multi-arch-release-action)

v1.2.0

Compare Source

Features

v1.1.0

Compare Source

Features

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from aae20d9 to 302c5c2 Compare February 6, 2026 00:50
@renovate renovate bot changed the title fix(deps): update module ariga.io/atlas to v1.1.0 fix(deps): update all non-major dependencies Feb 6, 2026
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 302c5c2 to 1033a06 Compare February 6, 2026 17:55
@renovate renovate bot changed the title fix(deps): update all non-major dependencies fix(deps): update module ariga.io/atlas to v1.1.0 Feb 6, 2026
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1033a06 to b5f2c19 Compare February 6, 2026 20:54
@renovate renovate bot changed the title fix(deps): update module ariga.io/atlas to v1.1.0 fix(deps): update all non-major dependencies Feb 6, 2026
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 854beaa to 06a2549 Compare February 9, 2026 18:44
@renovate
Copy link
Contributor Author

renovate bot commented Feb 9, 2026

ℹ️ Artifact update notice

File name: server/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 6 additional dependencies were updated

Details:

Package Change
go.opentelemetry.io/otel v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/trace v1.39.0 -> v1.40.0
golang.org/x/mod v0.32.0 -> v0.33.0
golang.org/x/sys v0.40.0 -> v0.41.0
golang.org/x/text v0.33.0 -> v0.34.0
golang.org/x/tools v0.41.0 -> v0.42.0

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from a09e3d9 to 3387ba1 Compare February 17, 2026 22:59
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 3a88423 to 643978f Compare February 19, 2026 18:14
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 643978f to ed04a04 Compare February 21, 2026 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants