Skip to content

fix(deps): update all non-major dependencies - #300

Open
renovate-coveooss[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#300
renovate-coveooss[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate-coveooss

@renovate-coveooss renovate-coveooss Bot commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Jira: DT-4929

This PR contains the following updates:

Package Type Update Change Pending Age Adoption Passing Confidence
actions/checkout action minor v6.0.2 → v6.1.0 age adoption passing confidence
actions/setup-go action minor v6.4.0 → v6.5.0 age adoption passing confidence
docker/login-action action minor v4.2.0 → v4.4.0 v4.6.0 (+3) age adoption passing confidence
github.com/getsentry/sentry-go require minor v0.46.2 → v0.48.0 age adoption passing confidence
step-security/harden-runner action minor v2.19.4 → v2.20.0 age adoption passing confidence

[skip release]

Release Notes

actions/checkout (actions/checkout)

v6.1.0

Compare Source

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

Compare Source

actions/setup-go (actions/setup-go)

v6.5.0

Compare Source

What's Changed
Dependency update
New Contributors

Full Changelog: actions/setup-go@v6...v6.5.0

docker/login-action (docker/login-action)

v4.4.0

Compare Source

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Compare Source

Full Changelog: docker/login-action@v4.2.0...v4.3.0

getsentry/sentry-go (github.com/getsentry/sentry-go)

v0.48.0: 0.48.0

Compare Source

Breaking Changes 🛠
New Features ✨
  • Add ClientOptions.DataCollection for granular control over data collected by automatic instrumentation, replacing the broad SendDefaultPII switch. DataCollection can independently configure automatic user.* population, cookies, request/response headers, HTTP bodies, and query parameters. When configured, it is the source of truth and SendDefaultPII is ignored. by @​giortzisg in #​1339
    • For backwards compatibility, clients that do not configure DataCollection keep a best-effort mapping of the previous SendDefaultPII behavior. To opt in to the new defaults, pass an empty DataCollection and then restrict individual categories as needed.
    sentry.Init(sentry.ClientOptions{
    Dsn: "https://public@example.com/1",

    // Opt in to the new data collection defaults. Omitted fields use their
    // defaults: user info, cookies, headers, query params, and supported HTTP
    // bodies are collected, with sensitive values filtered.
    DataCollection: &sentry.DataCollection{},
})
    • To opt in while disabling automatic user info and HTTP bodies, configure those fields explicitly:
    sentry.Init(sentry.ClientOptions{
    Dsn: "https://public@example.com/1",
    DataCollection: &sentry.DataCollection{
        UserInfo:   sentry.Set(false),
        HTTPBodies: []sentry.BodyType{},
    },
})
  • PushScope shorthand now returns the new scope reference by @​DoctorJohn in #​1335
Bug Fixes 🐛
Internal Changes 🔧
Deps
Other

v0.47.0: 0.47.0

Compare Source

Breaking Changes 🛠
  • Fix transaction_info source getting set incorrectly across HTTP middleware integrations (http, fasthttp, fiber). Users should now expect traces to properly get grouped with their parameterized path. Transactions in affected integrations may regroup after upgrading. by @​giortzisg in #​1325
  • remove deprecatedotel.NewSentrySpanProcessor. Users should now use the sentryotlp.NewTraceExporter instead by @​giortzisg in #​1307 
    // Before
sentry.Init(sentry.ClientOptions{Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0})

tp := sdktrace.NewTracerProvider(
	sdktrace.WithSpanProcessor(sentryotel.NewSentrySpanProcessor()),
)
otel.SetTextMapPropagator(sentryotel.NewSentryPropagator())
otel.SetTracerProvider(tp)

// After:
sentry.Init(sentry.ClientOptions{
	Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0,
	Integrations: func(i []sentry.Integration) []sentry.Integration {
		return append(i, sentryotel.NewOtelIntegration())
	},
})

exporter, _ := sentryotlp.NewTraceExporter(ctx, dsn)
tp := sdktrace.NewTracerProvider(sdktrace.WithBatcher(exporter))
otel.SetTracerProvider(tp)
  • Enable logs by default to skip double allow behavior. Enabling logs now happens once when setting up either sentry.NewLogger or any supported integration. Also the EnableLogs flag changes to DisableLogs for a global override switch by @​giortzisg in #​1306
  • Remove the ContextifyFrames integration. The recommended way to add source context is SCM by @​giortzisg in #​1302
New Features ✨
  • Add fiber v3 integration by @​giortzisg in #​1324
  • Bump fasthttp from 1.51.0 to 1.71.0 by @​giortzisg in #​1324
  • Add sentrysql SQL tracing integration by @​giortzisg in #​1305
    • Supports multiple integration paths depending on how your app opens database connections: sentrysql.Open(...), sentrysql.OpenDB(...), and wrapped drivers/connectors for custom setups.
    • Database metadata is not inferred in every setup. If the database name is not discoverable automatically, pass sentrysql.WithDatabaseName(...) so spans are populated correctly.
    • Example:
     // Simple driver-based setup
 db, err := sentrysql.Open("sqlite", ":memory:",
     sentrysql.WithDatabaseSystem(sentrysql.SystemSQLite),
     sentrysql.WithDatabaseName("main"),
 )
Internal Changes 🔧
Deps
Other
step-security/harden-runner (step-security/harden-runner)

v2.20.0

Compare Source

What's Changed
  • Support for block policy for MacOS and Windows GitHub-hosted runners
  • Support for Bitrise MacOS GitHub Actions runners
  • HTTPS monitoring support for Bun for Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0

Configuration

📅 Schedule: (in timezone America/Toronto)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • "after 9:00am and before 12:00pm on tuesday, wednesday, thursday"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@renovate-coveooss
renovate-coveooss Bot requested a review from a team as a code owner June 29, 2026 05:02
@renovate-coveooss

renovate-coveooss Bot commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
golang.org/x/sys v0.29.0 -> v0.45.0
golang.org/x/text v0.28.0 -> v0.37.0

@svcsnykcoveo

svcsnykcoveo commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@renovate-coveooss
renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch from e79e191 to d1f0551 Compare July 1, 2026 08:04
@renovate-coveooss
renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 9f63600 to e0a34d1 Compare July 14, 2026 10:01
@renovate-coveooss
renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch from e0a34d1 to 5e09750 Compare July 21, 2026 12:01
@renovate-coveooss
renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch from 5e09750 to 92b1cd5 Compare July 27, 2026 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

bot dependency update

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@svcsnykcoveo