Update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/checkout	action	minor	v4.1.7 -> v4.2.2
actions/checkout	action	digest	692973e -> 11bd719
actions/upload-artifact	action	digest	5076954 -> 65c4c4a
github.com/anchore/syft	require	minor	v1.12.2 -> v1.19.0
github.com/docker/buildx	require	minor	v0.17.1 -> v0.20.1
github.com/go-resty/resty/v2	require	minor	v2.15.0 -> v2.16.5
github.com/ortelius/scec-commons	require	patch	v0.1.45 -> v0.1.46
github/codeql-action	action	minor	v3.26.7 -> v3.28.5
oxsecurity/megalinter	action	digest	c217fe8 -> 1fc052d
peter-evans/create-pull-request	action	digest	5e91468 -> 67ccf78
stefanzweifel/git-auto-commit-action	action	digest	8621497 -> e348103
step-security/harden-runner	action	patch	v2.10.1 -> v2.10.4

---

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

anchore/syft (github.com/anchore/syft)

v1.19.0

Compare Source

Added Features

• add license parsing from vendor dirs [#​3522 @​dschmidt]
• Support cataloging NuGet packages [#​373 #​3484 @​Kemosabert]

Bug Fixes

• Syft generates invalid PURLs when name contains : [#​3577 #​3596 @​spiffcs @​jkugler]
• warn instead of error if zero package catalogers are select - user might still run file metadata cataloger, for example [#​3128 #​3468 @​tomersein]
• sbom report: missing licenses [#​3527 #​3549 @​kzantow]

Additional Changes

• bump stereoscope to v0.0.13 [#​3601 @​spiffcs]

(Full Changelog)

v1.18.1

Compare Source

Bug Fixes

• Runtime Error with Syft on Singularity .sif file (panic: index out of range) [#​3390]
• SPDX expressions are lost from CycloneDX if they contain extra parenthesis [#​3441 #​3517 @​willmurphyscode]

Additional Changes

• migrate syft to use anchore fork of archiver without replace [#​3516 @​spiffcs]

(Full Changelog)

v1.18.0

Compare Source

Added Features

• convert spdx absolute to relative [#​3509 @​spiffcs]
• Add relationships for rust audit binary packages [#​3500 @​wagoodman]
• support configuration of layer size in Syft [#​3428 #​3464 @​tomersein]
• Support Dart arm/v7 in 3.x and 2.x [#​3278 #​3475 @​witchcraze]

Bug Fixes

• fix order of rust dependencies and support git sources in Cargo.lock dependencies [#​3502 @​willmurphyscode]
• Use file indexer directly when scanning with file source [#​3333 @​adammcclenaghan]
• Remove incorrect power-user help text that only image sources are supported [#​2046]
• Invalid SPDX: missing copyright text [#​3346 #​3495 @​spiffcs]
• Scanning a source tree with duplicate conanfile.txt dependencies generates multiple components [#​3403]

(Full Changelog)

v1.17.0

Compare Source

Added Features

• Surface Rust dependency relationships [#​2353 #​3443 @​willmurphyscode]
• Support node 6.x versions [#​3404 #​3419 @​witchcraze]

Bug Fixes

• Restore log on UI teardown [#​3427 @​wagoodman]
• Syft should log warnings even when no TTY is present [#​3081 #​3466 @​willmurphyscode]
• Special characters (tab, newline) in license URL [#​3122 #​3449 @​spiffcs]
• LicenseDeclared not as per SPDX License List [#​3030 #​3461 @​spiffcs]

Additional Changes

• doc: Add official Syft logo license information [#​3421 @​popey]

(Full Changelog)

v1.16.0

Compare Source

Added Features

• omit devDependencies for package-lock.json files by default [#​2348 #​3371 @​njv299]

Bug Fixes

• add support for dependencies and purl for Native Image SBOMs [#​3399 @​rudsberg]
• stop bubbling fileResolver errors from binary cataloger [#​3410 @​spiffcs]
• malformed pom.xml may cause recursive loop [#​3391 @​kzantow]
• syft convert: broken link in help - documentation no longer existing [#​3143 #​3407 @​Makefolder]

(Full Changelog)

v1.15.0

Compare Source

Added Features

• Merge config files hierarchically and add support for config profiles [#​3337 @​kzantow]
• Enable cargo-auditable-binary-cataloger for files/directories [#​3376 @​ariel-miculas]
• Improve mariadb binary classifer to detect older versions [#​3052]
• Look for dpkg status file at additional globs [#​2692 #​3373 @​njv299]
• Emit relationships for Java dependencies [#​3189 #​3363 @​kzantow]

(Full Changelog)

v1.14.2

Compare Source

Bug Fixes

• Use single license scanner for all catalogers [#​3348 @​wagoodman]
• use official CPE for linux kernel [#​3343 @​westonsteimel]
• improve mariadb binary classifer to detect older versions [#​3339 @​westonsteimel]

Additional Changes

• Update to latest packageurl-go [#​3347 @​wagoodman]

(Full Changelog)

v1.14.1

Compare Source

Bug Fixes

• stop some log.Warn spam due parsing an empty string as a CPE [#​3330 @​willmurphyscode]
• improve go binary semver extraction for traefik [#​3325 @​westonsteimel]

(Full Changelog)

v1.14.0

Compare Source

Added Features

• Report known unknowns directly in the output SBOM [#​518 #​2998 @​kzantow]
• Identify bash.preinst [#​3191 #​3228 @​wagoodman]
• Support HAProxy rc and some old versions [#​3233 #​3277 @​witchcraze]
• Support Redis arm/v5, arm/v7, 386 in 7.2, 7.4, 8.0 [#​3279 #​3281 @​witchcraze]
• Support node old versions [#​3236 #​3284 @​witchcraze]
• Support rubylang/ruby dev versions [#​3239 #​3285 @​witchcraze]
• Support ruby rc, preview [#​3238 #​3285 @​witchcraze]

Bug Fixes

• performance: instantiate license check scanner to prevent memory leak [#​3290 @​govrin]
• Parse package.json with non-standard fields in 'author' section [#​3300 @​nuada]
• make failed CPE validation correctly return error [#​2762 @​willmurphyscode]
• Improve subpath to mount matching [#​3269 @​cdupuis]

Additional Changes

• add pull request template [#​3294 @​willmurphyscode]

(Full Changelog)

v1.13.0

Compare Source

Added Features

• --enrich flag for data enrichment feature enablement [#​3182 @​kzantow]
• Add classifier for Dart lang [#​3265 @​LaurentGoderre]
• add binary classifiers for lighttp, proftpd, zstd, xz, gzip, jq, and sqlcipher [#​3252 @​krysgor]
• Catalog JDKs more completely [#​3188 #​3217 @​wagoodman]
• Show richer information for JVM installations [#​1426 #​3217 @​wagoodman]
• Allow for stubbing unknown versions over dropping packages [#​2652 #​3257 @​wagoodman]
• Name and Version empty for Java package when scanning provided image [#​2132 #​3257 @​wagoodman]
• Support bitnami/mysql:8.x [#​3025]

Bug Fixes

• OpenJDK CPEs [#​2422 #​3217 @​wagoodman]
• SBOM generated from poetry lock file contains no license information on any dependencies [#​3204]
• Scanning a folder with a jar archive with no metadata creates a SPDX package without versionInfo (Non-NTIA compliant) [#​2039 #​3257 @​wagoodman]
• Using replace in a go.mod creates a SPDX package without versionInfo (Non-NTIA compliant) [#​2038 #​3257 @​wagoodman]
• Command make add-snippet can fail in some cases [#​3249]

(Full Changelog)

docker/buildx (github.com/docker/buildx)

v0.20.1

Compare Source

Welcome to the v0.20.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• David Karlsson
• Jonathan A. Sternberg
• Tõnis Tiigi
• CrazyMax

Notable Changes

• Fix bake --print output missing some attributes for attestations #​2937
• Fix allowing comma separated image reference strings for cache import and export values #​2944

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.20.0

v0.20.0

Compare Source

Welcome to the v0.20.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

[!NOTE]
This version of buildx enables filesystem entitlement checks for buildx bake command by default. If your Bake definition needs to read or write files outside your current working directory, you need to allow access to these paths with --allow fs=<path|*>. On the terminal, you can also interactively approve these paths with the provided prompt. Optionally, you can disable these checks by setting BUILDX_BAKE_ENTITLEMENTS_FS=0. This validation produced a warning in buildx v0.19.0+, but starting from current release it produces an error. docs

Contributors

• CrazyMax
• Tõnis Tiigi
• Sebastiaan van Stijn
• Guillaume Lours
• Jonathan A. Sternberg
• Arran Walker
• David Karlsson
• Nicolas De Loof

Notable Changes

• New buildx history command has been added that allows working with build records of completed and running builds. You can use these commands to list, inspect, remove your builds, replay the logs of already completed builds, and quickly open your builds in Docker Desktop Build UI for further debugging. This is an early version of this command and we expect to add more features in the future releases. #​2891 #​2925
• Bake: Definition now supports new object notation for the fields that previously required CSV strings as inputs (attest, output, cache-from, cache-to, secret, ssh) #​2758 #​2848 #​2871 #​2814
• Bake: Make FS entitlements error by default. To disable it, you can set BUILDX_BAKE_ENTITLEMENTS_FS=0 #​2875
• Bake: Infer git auth token from remote files to build request #​2905
• Bake: Add support for --list flag to list targets and variables #​2900 #​2907
• Bake: Update lookup order for default definition files to load the files with "override" suffix later #​2886
• Bake: Fix entitlements check for default SSH socket #​2898
• Bake: Fix named context from target platform matching #​2877
• Bake: Fix missing default target in group's default targets #​2863
• Validate BuildKit configuration before creating a builder #​2864
• Compose compatibility has been updated to v2.4.7 #​2893 #​2857 #​2829
• Fix missing last progress from loading layers #​2876
• Fix missing documentation for quiet progress mode #​2899

Dependency Changes

• github.com/AdaLogics/go-fuzz-headers ced1acd -> e8a1dd7
• github.com/aws/aws-sdk-go-v2 v1.24.1 -> v1.30.3
• github.com/aws/aws-sdk-go-v2/config v1.26.6 -> v1.27.27
• github.com/aws/aws-sdk-go-v2/credentials v1.16.16 -> v1.17.27
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.11 -> v1.16.11
• github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.10 -> v1.3.15
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.10 -> v2.6.15
• github.com/aws/aws-sdk-go-v2/internal/ini v1.7.3 -> v1.8.0
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 -> v1.11.3
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.10 -> v1.11.17
• github.com/aws/aws-sdk-go-v2/service/sso v1.18.7 -> v1.22.4
• github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.7 -> v1.26.4
• github.com/aws/aws-sdk-go-v2/service/sts v1.26.7 -> v1.30.3
• github.com/aws/smithy-go v1.19.0 -> v1.20.3
• github.com/compose-spec/compose-go/v2 v2.4.4 -> v2.4.7
• github.com/containerd/containerd/api v1.7.19 -> v1.8.0
• github.com/containerd/containerd/v2 v2.0.2 new
• github.com/containerd/errdefs v0.3.0 -> v1.0.0
• github.com/containerd/errdefs/pkg v0.3.0 new
• github.com/containerd/platforms v0.2.1 -> v1.0.0-rc.1
• github.com/containerd/ttrpc v1.2.5 -> v1.2.7
• github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.6
• github.com/creack/pty v1.1.21 -> v1.1.24
• github.com/docker/cli v27.4.0-rc.2 -> v27.5.0
• github.com/docker/cli-docs-tool v0.8.0 -> v0.9.0
• github.com/docker/docker v27.4.0-rc.2 -> v27.5.0
• github.com/fxamacker/cbor/v2 v2.7.0 new
• github.com/go-openapi/swag v0.22.3 -> v0.22.4
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.22.0
• github.com/hashicorp/go-cty-funcs a090f58 -> c51673e
• github.com/hashicorp/hcl/v2 v2.20.1 -> v2.23.0
• github.com/moby/buildkit v0.18.0 -> v0.19.0
• github.com/moby/spdystream v0.2.0 -> v0.4.0
• github.com/pkg/browser 5ac0b6a new
• github.com/prometheus/client_golang v1.20.2 -> v1.20.5
• github.com/stretchr/testify v1.9.0 -> v1.10.0
• github.com/tonistiigi/fsutil 31cf1f4 -> b14e27f
• github.com/x448/float16 v0.8.4 new
• github.com/zclconf/go-cty v1.14.4 -> v1.16.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.46.1 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.46.1 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 -> v0.56.0
• go.opentelemetry.io/otel v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.44.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.44.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/metric v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk/metric v1.28.0 -> v1.31.0
• go.opentelemetry.io/otel/trace v1.28.0 -> v1.31.0
• golang.org/x/crypto v0.27.0 -> v0.31.0
• golang.org/x/net v0.29.0 -> v0.33.0
• golang.org/x/oauth2 v0.21.0 -> v0.23.0
• golang.org/x/sync v0.8.0 -> v0.10.0
• golang.org/x/sys v0.26.0 -> v0.28.0
• golang.org/x/term v0.24.0 -> v0.27.0
• golang.org/x/text v0.18.0 -> v0.21.0
• google.golang.org/genproto/googleapis/api f6361c8 -> 5fefd90
• google.golang.org/genproto/googleapis/rpc f6361c8 -> 324edc3
• google.golang.org/grpc v1.66.3 -> v1.68.1
• google.golang.org/protobuf v1.35.1 -> v1.35.2
• k8s.io/api v0.29.2 -> v0.31.2
• k8s.io/apimachinery v0.29.2 -> v0.31.2
• k8s.io/client-go v0.29.2 -> v0.31.2
• k8s.io/klog/v2 v2.110.1 -> v2.130.1
• k8s.io/kube-openapi 2dd684a -> 70dd376
• k8s.io/utils 3b25d92 -> 18e509b
• sigs.k8s.io/yaml v1.3.0 -> v1.4.0

Previous release can be found at v0.19.3

v0.19.3

Compare Source

Welcome to the v0.19.3 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax

Notable changes

• Bake: change evaluation of entitlement paths to allow non-existing paths #​2860
• Bake: ignore empty values set by --set #​2861

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.19.2

v0.19.2

Compare Source

Welcome to the v0.19.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Notable changes

• Bake: fix issue where entitlement requests may have been not detected when Bake target writes output outside of the current working directory #​2834
• Bake: automatically add filesystem entitlements to the paths defined with --set flag to avoid the need to allow the same path multiple times #​2834

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.19.1

v0.19.1

Compare Source

buildx 0.19.1

Welcome to the v0.19.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Notable Changes

• Unfortunately, we had to revert the change that added new object notation for the fields that previously required CSV strings in Bake definition because of backwards incompatibility issues were discovered in some edge cases. This feature has now been postponed for future v0.20.0 release #​2824

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.19.0

v0.19.0

Compare Source

buildx 0.19.0

Welcome to the v0.19.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• David Karlsson
• Jonathan A. Sternberg
• Akihiro Suda
• Guillaume Lours
• Laurent Goderre
• Sebastiaan van Stijn

Notable Changes

• Bake command now requires passing filesystem entitlements with --allow when your build needs to read or write files outside of your current working directory. This feature currently only reports a warning when using local Bake definition, but will start to produce an error starting from the v0.20 release. If you wish to enable the error in the current release, you can set BUILDX_BAKE_ENTITLEMENTS_FS=1 #​2796 #​2812
• Bake definition now supports new object notation for the fields that previously required CSV strings as inputs (output, cache-from, cache-to, secret, ssh) #​2758
• Bake definition now allows defining validation conditions to variables #​2794
• Compose support has been updated to v2.4.4 #​2806 #​2780
• Metadata file values can now contain JSON array values #​2777
• Improve error messages when using an incorrect format for labels #​2778
• FreeBSD and OpenBSD artifacts are now included in release #​2774 #​2775 #​2781
• Fix printing bake definition with empty Compose networks #​2790

Dependency Changes

• github.com/cenkalti/backoff/v4 v4.2.1 -> v4.3.0
• github.com/compose-spec/compose-go/v2 v2.4.1 -> v2.4.4
• github.com/containerd/containerd v1.7.22 -> v1.7.24
• github.com/containerd/continuity v0.4.4 -> v0.4.5
• github.com/containerd/errdefs v0.1.0 -> v0.3.0
• github.com/containerd/typeurl/v2 v2.2.0 -> v2.2.3
• github.com/docker/cli v27.3.1 -> v27.4.0-rc.2
• github.com/docker/docker v27.3.1 -> v27.4.0-rc.2
• github.com/go-logr/logr v1.4.1 -> v1.4.2
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 -> v2.20.0
• github.com/moby/buildkit v0.17.0 -> v0.18.0
• github.com/prometheus/client_golang v1.17.0 -> v1.20.2
• github.com/prometheus/client_model v0.5.0 -> v0.6.1
• github.com/prometheus/common v0.44.0 -> v0.55.0
• github.com/tonistiigi/fsutil 397af53 -> 31cf1f4
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1 -> v0.53.0
• go.opentelemetry.io/otel v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/metric v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/sdk v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/sdk/metric v1.21.0 -> v1.28.0
• go.opentelemetry.io/otel/trace v1.21.0 -> v1.28.0
• go.opentelemetry.io/proto/otlp v1.0.0 -> v1.3.1
• google.golang.org/genproto/googleapis/api ef581f9 -> f6361c8
• google.golang.org/genproto/googleapis/rpc ef581f9 -> f6361c8
• google.golang.org/grpc v1.66.2 -> v1.66.3

Previous release can be found at v0.18.0

v0.18.0

Compare Source

Welcome to the v0.18.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• CrazyMax
• Tõnis Tiigi
• Jonathan A. Sternberg
• David Karlsson
• Sebastiaan van Stijn
• Talon Bowler
• Guillaume Lours
• Tim Neumann

Notable Changes

• prune command now allows new --max-used-space and --min-free-space filters on BuildKit v0.17.0+ builders #​2766
• ls command output is now more compact by default by compacting the platform list. New --no-trunc option can be used for full list #​2138 #​2717
• inspect command now displays BuildKit daemon configuration options set with a TOML file #​2684
• Memory allocations have been reduced by switching to new protobuf implementation #​2724 #​2713
• Size limits for maximum Dockerfile sizes from standard input have been raised #​2716 #​2719
• Allow listing targets and variables in buildx bake without initializing the builder #​2763
• Compose compatibility has been updated to v2.4.1 #​2760
• Add OpenTelemetry grouping around build function #​2742
• Allow capturing of CPU and memory profiles with pprof via environment variables #​2746
• Fix possible issues with entitlements when using linked targets in Bake #​2701
• Fix possible permission issues when accessing local state after running buildx with sudo #​2745
• Fix missing error message on running invalid command #​2741
• Fix build details link not showing in experimental mode #​2722
• Fix possible bogus warnings for local state in --call requests #​2754
• Fallback images for --check/--call option have been updated to correct references #​2705
• Improve error messages with source code snippets by mapping the file to the correct path #​2672
• Fix invalid target linking validation for Bake #​2700

Dependency Changes

• github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
• github.com/compose-spec/compose-go/v2 v2.1.6 -> v2.4.1
• github.com/containerd/containerd v1.7.21 -> v1.7.22
• github.com/containerd/continuity v0.4.3 -> v0.4.4
• github.com/cpuguy83/go-md2man/v2 v2.0.4 -> v2.0.5
• github.com/docker/cli 48a2cdf -> v27.3.1
• github.com/docker/docker v27.2.1 -> v27.3.1
• github.com/klauspost/compress v1.17.9 -> v1.17.11
• github.com/moby/buildkit v0.16.0 -> v0.17.0
• github.com/moby/sys/sequential v0.5.0 -> v0.6.0
• github.com/planetscale/vtprotobuf 0393e58 new
• github.com/tonistiigi/dchapes-mode ca0759f new
• github.com/tonistiigi/fsutil 91a3fc4 -> 397af53
• golang.org/x/exp db7319d -> 701f63a
• google.golang.org/genproto/googleapis/api ef43131 -> ef581f9
• google.golang.org/genproto/googleapis/rpc ef43131 -> ef581f9
• google.golang.org/grpc v1.62.0 -> v1.66.2
• google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1 new

Previous release can be found at v0.17.1

go-resty/resty (github.com/go-resty/resty/v2)

v2.16.5

Compare Source

Release Notes

Bug Fixes

• fix: auth scheme and token from client level #​959 by @​jeevatkm in https://github.com/go-resty/resty/pull/960

Documentation

• chore(release): version bump and readme update by @​jeevatkm in https://github.com/go-resty/resty/pull/961

Full Changelog: go-resty/resty@v2.16.4...v2.16.5

v2.16.4

Compare Source

Release Notes

Bug Fixes

• fix: retry not reset multipartField reader by @​wxip in https://github.com/go-resty/resty/pull/953
• fix: auth scheme override with empty value #​954 by @​jeevatkm in https://github.com/go-resty/resty/pull/956

Documentation

• chore(release): version bump and readme update by @​jeevatkm in https://github.com/go-resty/resty/pull/958

New Contributors

• @​wxip made their first contribution in https://github.com/go-resty/resty/pull/953

Full Changelog: go-resty/resty@v2.16.3...v2.16.4

v2.16.3

Compare Source

Release Notes

• chore(deps, release): update go mod, version bump and readme update by @​jeevatkm in https://github.com/go-resty/resty/pull/946

Full Changelog: go-resty/resty@v2.16.2...v2.16.3

v2.16.2

Compare Source

Release Notes

Bug Fixes

• fix: buffer reuse and back to pool and release v2.16.2 by @​jeevatkm in https://github.com/go-resty/resty/pull/919

Full Changelog: go-resty/resty@v2.16.1...v2.16.2

v2.16.1

Compare Source

Release Notes

Bug Fixes

• fix: buffer reset issue in io.Reader with content length enabled and release v2.16.1 by @​jeevatkm in https://github.com/go-resty/resty/pull/918

Full Changelog: go-resty/resty@v2.16.0...v2.16.1

v2.16.0

Compare Source

Release Notes

New Features

• feat: option to set URL query params without encoding by @​jeevatkm in https://github.com/go-resty/resty/pull/885

Enhancements

• Enhance buildCurlRequest for unit test by @​yaziedda in https://github.com/go-resty/resty/pull/884
• Code optimizations by @​jeevatkm in https://github.com/go-resty/resty/pull/892

Documentation

• release: version bump and readme update for v2.16.0 by @​jeevatkm in https://github.com/go-resty/resty/pull/907

New Contributors

• @​yaziedda made their first contribution in https://github.com/go-resty/resty/pull/884

Full Changelog: go-resty/resty@v2.15.3...v2.16.0

v2.15.3

Compare Source

Release Notes

Bug Fixes

• fix: 'invalid memory address or nil pointer dereference' in response logger by @​matlockx in https://github.com/go-resty/resty/pull/872

Documentation

• For release v2.15.3 by @​jeevatkm in https://github.com/go-resty/resty/pull/874

New Contributors

• @​matlockx made their first contribution in https://github.com/go-resty/resty/pull/872

Full Changelog: go-resty/resty@v2.15.2...v2.15.3

v2.15.2

Compare Source

Release Notes

Bug Fixes

• fix: do not use errors.Join, just use custom error approach by @​jeevatkm in https://github.com/go-resty/resty/pull/863

Documentation

• release: version bump and readme update for v2.15.2 by @​jeevatkm in https://github.com/go-resty/resty/pull/864

Full Changelog: go-resty/resty@v2.15.1...v2.15.2

v2.15.1

Compare Source

Release Notes

Bug Fixes

• fix: do not parse response debug log with correct text by @​jeevatkm in https://github.com/go-resty/resty/pull/858

Documentation

• for v2.15.1 release by @​jeevatkm in https://github.com/go-resty/resty/pull/859

Full Changelog: go-resty/resty@v2.15.0...v2.15.1

ortelius/scec-commons (github.com/ortelius/scec-commons)

v0.1.46

[Compare Source](https://redirect.githu

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 36 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.22.2 -> 1.23.5
github.com/CycloneDX/cyclonedx-go	v0.9.1 -> v0.9.2
github.com/Microsoft/hcsshim	v0.12.5 -> v0.12.9
github.com/anchore/packageurl-go	v0.1.1-0.20240507183024-848e011fc24f -> v0.1.1-0.20250117185454-edf36a908b10
github.com/anchore/stereoscope	v0.0.3 -> v0.0.13
github.com/andybalholm/brotli	v1.1.0 -> v1.1.1
github.com/bmatcuk/doublestar/v4	v4.6.1 -> v4.8.0
github.com/containerd/containerd	v1.7.22 -> v1.7.24
github.com/containerd/errdefs	v0.2.0 -> v1.0.0
github.com/containerd/platforms	v0.2.1 -> v1.0.0-rc.1
github.com/containerd/typeurl/v2	v2.2.0 -> v2.2.3
github.com/docker/cli	v27.3.0-rc.2+incompatible -> v27.5.0+incompatible
github.com/gabriel-vasile/mimetype	v1.4.5 -> v1.4.8
github.com/google/go-containerregistry	v0.20.2 -> v0.20.3
github.com/klauspost/compress	v1.17.9 -> v1.17.11
github.com/moby/buildkit	v0.16.0 -> v0.19.0
github.com/spf13/afero	v1.11.0 -> v1.12.0
github.com/sylabs/squashfs	v1.0.0 -> v1.0.4
github.com/tonistiigi/fsutil	v0.0.0-20240902111258-43b9329361d9 -> v0.0.0-20250113203817-b14e27f4135a
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.55.0 -> v0.56.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace	v0.55.0 -> v0.56.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.55.0 -> v0.58.0
go.opentelemetry.io/otel	v1.30.0 -> v1.33.0
go.opentelemetry.io/otel/metric	v1.30.0 -> v1.33.0
go.opentelemetry.io/otel/sdk	v1.30.0 -> v1.33.0
go.opentelemetry.io/otel/trace	v1.30.0 -> v1.33.0
golang.org/x/exp	v0.0.0-20240318143956-a85f2c67cd81 -> v0.0.0-20240909161429-701f63a606c0
golang.org/x/net	v0.29.0 -> v0.34.0
golang.org/x/sync	v0.8.0 -> v0.10.0
golang.org/x/text	v0.18.0 -> v0.21.0
google.golang.org/genproto	v0.0.0-20240730163845-b1a4ccb954bf -> v0.0.0-20241118233622-e639e219e697
google.golang.org/genproto/googleapis/rpc	v0.0.0-20240903143218-8af14fe29dc1 -> v0.0.0-20241223144023-3abc09e42ca8
google.golang.org/grpc	v1.66.2 -> v1.68.1
google.golang.org/protobuf	v1.34.2 -> v1.36.3
golang.org/x/crypto	v0.27.0 -> v0.32.0
golang.org/x/sys	v0.25.0 -> v0.29.0
golang.org/x/term	v0.24.0 -> v0.28.0