Skip to content

⬆️ chore(deps): update pinned build tools - #515

Merged
konih merged 2 commits into
mainfrom
renovate/pinned-build-tools
Oct 30, 2026
Merged

konih merged 2 commits into
mainfrom
renovate/pinned-build-tools

Conversation

@konih

@konih konih commented Oct 29, 2026 •

Copy link
Copy Markdown
Collaborator

This PR contains the following updates:

Package Update Change
fe3dback/go-arch-lint patch v1.19.0 → v1.19.1
go-task/task minor 3.52.0 → 3.54.0
orhun/git-cliff minor v2.13.1 → v2.14.2

Release Notes

fe3dback/go-arch-lint

v1.19.1

Compare Source

What's Changed

  • fix(scanner): tolerate missing optional std packages during Go standard library load by @​AdamMagued in #​91

New Contributors

Full Changelog: fe3dback/go-arch-lint@v1.19.0...v1.19.1

go-task/task

v3.54.0

Compare Source

🚀 Features
  • Added versioned Homebrew casks (go-task@<major>.<minor>) to install a
    specific minor version of Task (#​3023 by @​vmaerten).
  • Added a remote.headers config option to send HTTP headers when downloading a
    remote Taskfile, configured per host. Header values support templating
    functions, e.g. {{env "GITLAB_TOKEN"}}. This keeps the credential out of the
    include URL, where it would leak into error messages and the confirmation
    prompt (#​2329 by @​vmaerten).
🐛 Fixes
  • Fixed remote Git Taskfile cache poisoning on shared hosts (GHSA-679p-658w-m3wr,
    reported by @​danielcadev, fixed by @​vmaerten).

  • Fixed tasks cancelled by the user returning exit code 201 instead of 205
    (#​3040, #​3041 by @​r3wretrhy).

  • Fixed a bug on Windows where watching source paths did not work as expected
    (#​2863, #​3028 by @​pd93).

  • Fixed a remote Taskfile whose server refuses the credentials being reported as
    a missing Taskfile. A 401 now stops the search and reports the status code,
    instead of retrying every default Taskfile name and concluding that no
    Taskfile exists (#​2329 by @​vmaerten).

  • task --completion <shell> now serves a new completion engine that unifies
    Bash, Fish, Zsh, Nushell and PowerShell behind a single task __complete
    command, so every shell offers the same suggestions: task names, aliases,
    flags, flag values and per-task CLI variables. The Zsh show-aliases and
    verbose zstyles keep working, now backed by the --no-aliases and
    --no-descriptions completion flags (#​2897 by @​vmaerten).

📦 Package API
  • Bumped the minimum Go version to 1.26. Task follows Go's two-latest support
    window, and is now tested against 1.26 and 1.27. This only affects projects
    importing Task as a Go module (#​2920 by @​vmaerten).
Other
  • Refactored some functional options to always return a concrete type instead of
    an interface and moved options into their own file (#​3037 by @​pd93).
  • Refactored the execext package to use mvdan/sh's new BashOpts API (#​3035 by
    @​pd93).

v3.53.1

Compare Source

🚀 Features
  • Remote Taskfiles are now generally available! This has been an
    experimental feature for 3 years, but is now enabled by default. Massive
    thanks to all those that contributed and gave feedback (too many to list
    here). We've also given the
    Remote Taskfiles documentation a
    bit of a polish (#​1317, #​2906 by @​pd93).
  • Added a per-command timeout that terminates a command once it exceeds the
    given duration (Go duration syntax). It covers shell commands, task calls,
    deferred commands, deps and the if condition, obeys ignore_error, and
    reports exit code 124. Callers that join a run: once or when_changed
    task already running now honor their own timeout, and inherit that task's
    failure instead of being told it succeeded (#​1569, #​2898 by @​vmaerten).
  • Considerably improve performance of fingerprinting on large repositories
    (monorepos). Fingerprinting is up to 86% faster and make up to 70% fewer
    memory allocations on the more advanced scenarios. Benchmarks were added as
    well. We're basically skipping work when not needed. (#​2853, #​2883 by
    @​Napolitain, #​2884 by @​Napolitain).
  • Further improved fingerprinting performance on large repositories: hashing
    source files now reuses a single buffer, reducing memory allocations by ~98%
    and wall-clock time by ~7% (#​2925 by @​vmaerten).
  • includes.excludes can now exclude a whole namespace: append :* to the
    namespace name, e.g. excludes: ['debug:*']. Bare entries still match a
    single task name exactly (#​2300, #​2959 by @​xmxxc).
  • Added support for enum.ref in --interactive prompts. Required vars using
    enum.ref now show the selection list like static enums, instead of falling
    back to free-form input (#​2817 by @​vmaerten).
  • Added Nushell completions, available via task --completion nu. They complete
    task names and aliases, every flag with its description, and the values of
    --completion, --output and --sort (#​2966 by @​vmaerten).
  • Added a verbose log line for failed tasks. In --verbose mode, a task whose
    command exits non-zero now reports task: "<name>" failed: <error> instead of
    stopping without a trace (#​2240 by @​Drino).
🐛 Fixes
  • Fixed a pinned checksum: not being verified when a remote Taskfile came from
    the cache (#​2980 by @​vmaerten).
  • Fixed the fingerprint variable ({{.CHECKSUM}}/{{.TIMESTAMP}}) ignoring a
    method: set at the Taskfile level: the variable now follows the same method
    resolution as the up-to-date check. Only the variable matching the effective
    method is injected, so a task inheriting a Taskfile-level method: timestamp
    gets {{.TIMESTAMP}} and no longer a {{.CHECKSUM}} (which now renders as an
    empty string), and neither variable is injected when the effective method is
    none (#​2924 by @​vmaerten).
  • Fixed ref: in for: matrix: and enum: only accepting literal lists. Refs
    computed with template functions like keys or splitList no longer fail
    with "must resolve to a list" (#​2544, #​2956 by @​no-hup).
  • Fixed pressing Esc at an interactive variable prompt not cancelling the run
    (#​2942 by @​anilnatha).
  • Fixed joinUrl collapsing the // in a URL scheme (e.g. producing
    http:/localhost instead of http://localhost) (#​2915 by @​vsaraikin).
  • Fixed the JSON schema rejecting ignore_error on a command inside a for
    loop. Editors no longer flag a Taskfile that Task runs perfectly fine (#​2044
    by @​gokeefe-atb).
  • Fixed the JSON schema rejecting more keys the Taskfile parser accepts:
    ignore_error on a task: call, and if, set and shopt on a command
    inside a for loop (#​2967 by @​vmaerten).
📚 Documentation & Website
  • Updated taskfile versions doc to mention when version checks were introduced
    (#​2184 by @​jubr).
  • Load the sidebar data and titles/excerpts from the blog post markdown document
    and its frontmatter on the website (#​2981 by @​pd93).
orhun/git-cliff

v2.14.2

Compare Source

animation

2.14.2 - 2026-09-18
⛰️ Features
  • (parser) Allow commits to be parsed by multiple parsers (#​1611) - (4644e5f)
🐛 Bug Fixes
📚 Documentation
🧪 Testing
⚙️ Miscellaneous Tasks
❤️ New Contributors

v2.14.1

Compare Source

⛰️ Features
🐛 Bug Fixes
  • (args) [breaking] Stop greedy multi-value options from swallowing the positional range (#​1614) - (7123bd3)
  • (args) Use default help literal color (#​1578) - (717e711)
  • (bump) Evaluate increment regexes against the commit subject only (#​1605) - (fa8000b)
  • (bump) Honor no_increment_regex for raw messages (#​1576) - (79fce6e)
  • (cd) Restore v2.12 compatibility and roll changes into v2.14.1 - (b799bb3)
  • (changelog) Replace dynamic headers when prepending (#​1603) - (680b6a9)
  • (changelog) Assign commits to releases by graph reachability (#​1601) - (e86c95e)
  • (changelog) Keep prepended section separated from existing content (#​1528) - (ce24883)
  • (ci) Disable docker push for builds on forks (#​1622) - (73c994a)
  • (config) Move heart emoji before "New Contributors" heading (#​1527) - (7e35ff5)
  • (git) Fall through to the next parser when a commit field is missing (#​1600) - (8bcca0a)
  • (git) Match directory include/exclude patterns on Windows (#​1593) - (d962b5c)
  • (git) Handle nested annotated tags (#​1360) - (772e01d)
  • (remote) Use the default HTTP timeout for unconfigured remotes (#​1597) - (5963160)
  • (statistics) Don't compute statistics when templates do not use them (#​1543) - (4526e13)
  • (statistics) Ignore missing git objects (#​1523) - (4377363)
  • (templates) Handle missing previous release (#​1621) - (afe3a5b)
  • (website) Link to correct release notes (#​1526) - (39d51b9)
📚 Documentation
⚙️ Miscellaneous Tasks

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@konih konih added the dependencies Pull requests that update a dependency file label Oct 29, 2026
@codecov

codecov Bot commented Oct 29, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@konih
konih force-pushed the renovate/pinned-build-tools branch from 7cd551b to dab9cff Compare October 29, 2026 19:03
renovate-bot and others added 2 commits October 30, 2026 03:53
The W1 self-test mutant rewrites mutation.yaml's setup-task version by
literal, and still looked for 3.52.0 after the pin moved to 3.54.0, so the
mutation step failed before anything was tested and the lint job went red.
@konih
konih force-pushed the renovate/pinned-build-tools branch from 005d86f to 68dca2c Compare October 30, 2026 02:53
@sonarqubecloud

Copy link
Copy Markdown

@konih
konih merged commit 5777876 into main Oct 30, 2026
43 checks passed
@konih
konih deleted the renovate/pinned-build-tools branch October 30, 2026 03:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants