chore(deps): update go stacklok modules

[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/stacklok/mecatl	v0.0.0 → v0.0.48
github.com/stacklok/toolhive	v0.50.0 → v0.54.0
github.com/stacklok/toolhive-core	v0.0.51 → v0.0.55
github.com/stacklok/toolhive-core/redisconn	v0.0.2 → v0.0.4

---

Release Notes

stacklok/mecatl (github.com/stacklok/mecatl)

v0.0.48

Compare Source

What's Changed

• chore: drop stale acceptance-plan citations from code comments by @​rdimitrov in #​2187
• feat(studio): add session inspection panels and minimap by @​samuv in #​1942
• chore: fix stale code comments, dead test patterns, and docs claims by @​rdimitrov in #​2190
• docs: drop ADR citations from the domain model and fix acceptEdits by @​rdimitrov in #​2191
• fix(microvm): accept harmless release archive root entries by @​JAORMX in #​2189
• fix(studio): use full-width page layout outside chat by @​peppescg in #​2196
• fix(microvm): handle Darwin development manifests and socket paths by @​JAORMX in #​2200
• feat(studio): align settings cards with the prototype by @​peppescg in #​2197
• fix(studio): antialias text like the design references by @​peppescg in #​2199
• feat(mcp): accept client secrets from bounded files by @​jhrozek in #​2188
• test(studio): run vitest without isolation in web and server by @​kantord in #​2203
• test(studio): reset storage after test-owned restores by @​kantord in #​2214
• feat(studio): add shadcn primitives from the prototype and upstream shadcn by @​peppescg in #​2211
• chore(deps): update website by @​renovate[bot] in #​1961
• chore(ci): update github actions by @​renovate[bot] in #​1964
• chore(deps): update go kubernetes to v0.37.1 by @​renovate[bot] in #​1952
• chore(deps): update go charm by @​renovate[bot] in #​1949
• fix(studio): make Badge identical to the prototype by @​peppescg in #​2212
• chore(deps): update typescript sdk by @​renovate[bot] in #​1956
• chore(deps): bump toolhive-core to v0.0.51 by @​jhrozek in #​2215
• chore(deps): update go grpc and protobuf by @​renovate[bot] in #​1951
• feat: add provider-aware model aliases and delegation selectors by @​jbeda in #​2019
• feat(broker): define credential continuity contract by @​jhrozek in #​2217
• feat(authn): harden OIDC HTTPS and validate Kubernetes tokens by @​jhrozek in #​2218
• feat(studio): align memory settings and fact detail with the prototype by @​peppescg in #​2222
• fix(security): update Go and x/net vulnerability floors by @​JAORMX in #​2221
• fix(microvm): recognize absent Darwin daemon processes by @​JAORMX in #​2220
• feat(mecatui): modernize Dream modal surface and interaction by @​jbeda in #​2178
• fix(test): isolate command XDG storage by @​jbeda in #​2238
• fix(search): support Exa and Brave keys from auth.yaml by @​jbeda in #​2234
• feat(search): configure WebSearch in operator settings by @​jbeda in #​2241
• spike(mecatui): migrate help browser to the reusable scroll system by @​kantord in #​2042
• docs: make user-doc authoring guidance directory-scoped by @​jbeda in #​2267
• feat(mecatui): migrate effort picker to a bounded modal surface by @​jbeda in #​2266
• feat: add execution templates with platform-managed identity by @​JAORMX in #​2219
• feat(mecatui): enforce API compatibility before startup by @​jbeda in #​2269
• fix(temp): use managed job tmp for isolated test runtime by @​jbeda in #​2278
• fix(ci): make full-expiry renewal qualification explicit by @​JAORMX in #​2276
• test(e2e): retain live qualification artifact diagnostics by @​JAORMX in #​2274
• feat(studio): add the @​/ alias and port the prototype's foundation primitives and utilities by @​peppescg in #​2225
• feat(skills): read a skill's files through the client API by @​kantord in #​2192
• test(scheduler): add schedule-store claim and retry checks by @​JAORMX in #​2281
• fix(ci): trigger in-flight renewal and reuse qualified live deployment by @​JAORMX in #​2280
• feat(studio): converge card, table, tooltip, and input with the prototype by @​peppescg in #​2226
• fix(cli): simplify YOLO startup warnings by @​JAORMX in #​2283
• feat(broker): encrypt ToolHive credential storage by @​jhrozek in #​2275
• Release TypeScript SDK v0.5.0 by @​toolhive-release-app[bot] in #​2284
• fix(engine): show the full command in system temp-scope approval asks by @​peppescg in #​2263
• fix(scheduler): keep polling behind stuck fires without releasing ownership by @​JAORMX in #​2277
• docs: link local microVM execution from Get started by @​JAORMX in #​2236
• feat(studio): complete schedule management workspace by @​kantord in #​2194
• Release v0.0.48 by @​toolhive-release-app[bot] in #​2294

Full Changelog: v0.0.47...v0.0.48

v0.0.47

Compare Source

What's Changed

• feat(mecatui): inspect Edit requests and bounded Subagent activity by @​jbeda in #​2139
• refactor(execution): remove unused prototype migrations by @​JAORMX in #​2159
• fix(mcp): isolate failing servers during reconciliation by @​JAORMX in #​2158
• fix(release): stamp standalone host build identities by @​JAORMX in #​2183
• docs: lean rewrite of contributor docs by @​rdimitrov in #​2157
• chore: remove dead ADR references and fix stale code comments by @​rdimitrov in #​2169
• Release v0.0.47 by @​toolhive-release-app[bot] in #​2186

Full Changelog: v0.0.46...v0.0.47

v0.0.46

Compare Source

What's Changed

• feat(studio): skills inventory, detail page, and learned-skill review by @​kantord in #​2154
• test(e2e): isolate pending-delete outage test from the mecak8s reconciler by @​jbeda in #​2177
• docs: restructure user documentation journeys by @​danbarr in #​2136
• docs: copyedit public documentation by @​danbarr in #​2137
• docs: restore the technical writing skill by @​danbarr in #​2181
• fix(release): scan microVM and host binaries with sbom-action file: by @​jhrozek in #​2180
• Release v0.0.46 by @​toolhive-release-app[bot] in #​2182

Full Changelog: v0.0.45...v0.0.46

v0.0.45

Compare Source

What's Changed

• fix(mecated): force-remove unavailable MCP profiles by @​jhrozek in #​1938
• Plan / Interface: actionable mecatui exit handoff by @​jbeda in #​2039
• fix(mecated): mcp add settings corruption and late illegal-name failure by @​tgrunnagle in #​2038
• fix(release): hash Brood Box images with a native helper by @​JAORMX in #​2040
• fix(mecatui): persist ToolHive provider default by @​ChrisJBurns in #​2043
• docs(plan): define responsive Help browser contract by @​kantord in #​2045
• feat(mecatui): bound soul inspector to measured viewport by @​jbeda in #​2041
• chore(mecak8s): default Kind OpenRouter to GPT-6 Sol by @​ChrisJBurns in #​2050
• Implement actionable mecatui exit handoff by @​jbeda in #​2047
• Plan / Interface: mecatui remote endpoints and first-use connect sign-in by @​tgrunnagle in #​2049
• Plan / Interface amendment: resolve mecatui remote endpoints decisions and add remote commands by @​tgrunnagle in #​2053
• Plan / Interface: mecatui tool-call inspector by @​jbeda in #​2056
• Plan / Interface: canonical mecatui status surfaces by @​jbeda in #​2070
• Plan / Interface: authoritative mecatui session reload by @​jbeda in #​2073
• Implement mecatui tool-call inspector by @​jbeda in #​2061
• fix: return and fence auxiliary usage results by @​jbeda in #​1904
• Plan / Interface: quieter mecatui tool-call conversation by @​jbeda in #​2081
• Implement canonical mecatui status surfaces by @​jbeda in #​2075
• mecatui: aligned, humanized exit summary with aux usage by @​jbeda in #​2083
• fix: deterministic MCP authorization repeated-initial-control status by @​jbeda in #​2085
• test: show execution qualification phase and spec timing by @​jbeda in #​2086
• fix(slack-bot): harden release image by @​JAORMX in #​1182
• fix(mecatui): persist trusted server CA certificates by @​JAORMX in #​1233
• chore(deps): update docker images by @​renovate[bot] in #​2068
• [Plan / Interface] Quiet benign guardrail notices by @​aponcedeleonch in #​1957
• chore(catalog): refresh models.dev curated subset by @​github-actions[bot] in #​2093
• fix: align local file operands with built-in decoding by @​JAORMX in #​2095
• [Implementation] Quiet benign guardrail notices by @​aponcedeleonch in #​1958
• plan(permissions): one named permission-mode vocabulary and two admission gates by @​aponcedeleonch in #​1730
• feat(app): default Anthropic prompt-cache TTL to 1h by @​aponcedeleonch in #​2102
• fix(guardrails): include preparation in the review deadline by @​JAORMX in #​2009
• test: keep disposable fixtures out of repository scratch by @​jbeda in #​2087
• Fix retention scan and pre-execution cancellation races by @​JAORMX in #​2108
• [Plan / Interface] Server-owned provider recovery by @​JAORMX in #​1912
• chore: stop enforcing the acceptance spine and docs/lint gates by @​rdimitrov in #​2103
• test: time execution qualification image and lifecycle stages by @​jbeda in #​2088
• Plan / Interface: visible reasoning summaries across provider protocols by @​jbeda in #​2118
• test: time rotation convergence and scripted journeys by @​jbeda in #​2120
• feat(mecatui): quiet settled tool calls and open inspector from shortcut by @​jbeda in #​2089
• Plan / Interface: tool-call detail and delegation previews by @​jbeda in #​2125
• fix(lint): make non-Linux stubs pass staticcheck SA4023 on macOS by @​rdimitrov in #​2129
• Plan / Interface: admitted AGENTS.md hierarchy by @​JAORMX in #​2092
• [Implementation] Server-owned provider recovery by @​JAORMX in #​1920
• Plan / Interface amendment: complete AGENTS hierarchy MVP contract by @​JAORMX in #​2131
• fix(mecatui): clarify provisional tool status by @​JAORMX in #​2130
• chore: delete ADRs, acceptance plans, and process scaffolding by @​rdimitrov in #​2105
• fix(sdk): clear new dependency advisories in the SDK audit by @​rdimitrov in #​2132
• fix(studio): harden the image supply chain and pin one Node major by @​peppescg in #​2133
• chore: rewrite AGENTS.md and drop ADR citations from runtime strings by @​rdimitrov in #​2106
• chore: instruction-file hygiene and keep removed process directories removed by @​rdimitrov in #​2134
• test: speed projected volume updates in Kind qualification by @​jbeda in #​2124
• test(k8s): overlap qualification build and accelerate quota sync by @​jbeda in #​2140
• feat(studio): complete chat approvals, plan review, and Escape flow by @​samuv in #​1975
• fix(studio): unify verdict ledger and guard late side-thread verdicts by @​kantord in #​2143
• feat: discover nested AGENTS.md within trusted sources by @​JAORMX in #​2110
• docs: fix docs that contradict the code (salvaged from #​2107) by @​rdimitrov in #​2144
• docs: ADR-reference cleanup, rule hygiene, module AGENTS.md files by @​rdimitrov in #​2148
• docs: move proposals and work records into docs/drafts/ by @​rdimitrov in #​2151
• docs(proto): drop ADR references from public Harness and Schedule comments by @​rdimitrov in #​2153
• Implementation: visible reasoning summaries across provider protocols by @​jbeda in #​2126
• Release v0.0.45 by @​toolhive-release-app[bot] in #​2167

New Contributors

• @​tgrunnagle made their first contribution in #​2038

Full Changelog: v0.0.44...v0.0.45

v0.0.44

Compare Source

What's Changed

• fix(release): resolve helper image per platform by @​JAORMX in #​2011
• test(microvm): respect host umask in merge ownership assertions by @​jbeda in #​2014
• fix(adapters): use released module dependencies for standalone tests by @​jbeda in #​2021
• fix(modules): pin published adapters v0.1.1 by @​jbeda in #​2023
• Bound mecatui saved-memory browser by @​jbeda in #​2012
• feat: publish live tool-result availability before canonical batch drain by @​jbeda in #​2013
• test(modules): guard published module pins and proxy closure by @​jbeda in #​2026
• test(mecatui): fix carryover handoff close flake by @​jbeda in #​2020
• perf(agent): reduce tool-result availability allocations by @​JAORMX in #​2028
• feat(jsonlstore): support read-only access to existing stores by @​JAORMX in #​2031
• Add a skill for mecak8s kind testing by @​jhrozek in #​2035
• test: fix microVM guest-pipe and JSONL lineage flakes by @​jbeda in #​2033
• docs: establish contributor-facing TUI standards by @​jbeda in #​2037
• docs(plan): bound soul inspector viewport by @​jbeda in #​2034
• Release v0.0.44 by @​toolhive-release-app[bot] in #​2036

Full Changelog: v0.0.43...v0.0.44

v0.0.43

Compare Source

What's Changed

• chore(deps): update studio by @​renovate[bot] in #​1955
• fix(release): preflight execution bases and complete microVM image inputs by @​JAORMX in #​1993
• Plan / Interface: bound mecatui saved-memory browser by @​jbeda in #​1995
• fix(sdk): update fast-uri to clear Node audit by @​JAORMX in #​1996
• plan: session-scoped agent identity (Plan / Interface) by @​kantord in #​1815
• fix(test): isolate microVM integration dependencies and stabilize workspace metadata by @​JAORMX in #​1999
• fix(release): track execution image bases and build before tagging by @​JAORMX in #​2000
• fix(guardrails): review ListDir results without reading directories by @​JAORMX in #​2001
• fix(mecatui): silence routine guardrails and unify review feedback by @​JAORMX in #​2002
• fix(guardrails): isolate contextual reviewer instructions by @​JAORMX in #​2006
• fix(sdk): update brace-expansion advisory resolution by @​JAORMX in #​2007
• feat(adapters): publish production persistence implementations by @​JAORMX in #​2005
• Release v0.0.43 by @​toolhive-release-app[bot] in #​2010

Full Changelog: v0.0.42...v0.0.43

v0.0.42

Compare Source

What's Changed

• Release TypeScript SDK v0.4.0 by @​toolhive-release-app[bot] in #​1940
• docs(plan): define Studio session activity by @​samuv in #​1885
• feat(studio): show session delegation activity by @​samuv in #​1907
• feat(mecatui): bound sessions inventory by @​jbeda in #​1944
• docs: include user-docs in matlatl and use local documentation links by @​JAORMX in #​1934
• docs(plan): bound agent inventory viewport by @​jbeda in #​1946
• feat(mecatui): restore session status metrics by @​jbeda in #​1891
• docs: plan optional native Kubernetes execution provider by @​JAORMX in #​1579
• docs(plan): configurable Mecatl commit co-author guidance by @​jbeda in #​1947
• refactor(mecatui): use typed scrollback cards by @​jbeda in #​1836
• docs: mark typed scrollback plan landed by @​jbeda in #​1953
• feat: add microVM execution environments by @​JAORMX in #​580
• feat: draft native Kubernetes execution provider by @​JAORMX in #​1614
• fix(mecatui): restore steering after session resume by @​jbeda in #​1948
• feat(prompt): add configurable Mecatl commit coauthor guidance by @​jbeda in #​1954
• feat(mecatui): bound agent definition inventory by @​jbeda in #​1970
• docs: plan delegation provider model selectors by @​jbeda in #​1971
• fix(ci): gate microVM checks by changed paths by @​jbeda in #​1972
• fix(mecatui): settle concurrent tool cards promptly by @​jbeda in #​1977
• fix(fs): allow relative external paths in yolo sessions by @​JAORMX in #​1978
• docs(acceptance): plan skills bounded viewport by @​jbeda in #​1973
• fix(execution): support private registry pulls with tokenless executor identity by @​JAORMX in #​1984
• Plan: live tool-result availability by @​jbeda in #​1982
• fix(execution): project security material from independent Secrets by @​JAORMX in #​1985
• feat(execution): constrain executor scheduling to operator profiles by @​JAORMX in #​1988
• fix(slack-bot): stop empty arg values from breaking the approval card by @​kantord in #​1987
• feat(mecatui): bound skills inventory viewport by @​jbeda in #​1983
• chore(catalog): refresh models.dev curated subset by @​github-actions[bot] in #​1980
• Release v0.0.42 by @​toolhive-release-app[bot] in #​1990

Full Changelog: v0.0.41...v0.0.42

v0.0.41

Compare Source

Install

brew install stacklok/tap/mecatl

Installs both mecated (the server) and mecatui (the terminal UI).

Changelog

Features

• cb70893: feat(mcp): reconcile sources and refresh session tools (#​1673) (@​JAORMX)
• b3e8df8: feat(mecatui): bound mention palette (#​1833) (@​jbeda)
• 466aff2: feat(mecatui): bound slash command palette (#​1820) (@​jbeda)
• 0a68933: feat(mecatui): render StatusML terminal hyperlinks (#​1834) (@​jbeda)
• 50267ff: feat(mecatui): unify bounded scrolling and cursor selection (#​1615) (@​jbeda)
• a06b863: feat(models): replace alpha model discovery contract (#​1876) (@​JAORMX)
• b09f573: feat(studio): add exact plan control and authorization review prerequisite (#​1909) (@​samuv)
• 545ffc6: feat(studio): add public status and popup sign-in recovery (#​1871) (@​samuv)
• 7e2718f: feat(studio): align chat transcript and composer (#​1886) (@​samuv)
• 627d07b: feat(studio): implement appearance foundation (#​1873) (@​samuv)
• f3a9bb2: feat(studio): implement settings routes and About (#​1867) (@​samuv)
• b0a96d2: feat(studio): implement workspace shell (#​1869) (@​samuv)
• 2f2d1de: feat: centralize provider-scoped model discovery (#​1841) (@​JAORMX)
• 30a4c3c: feat: compose independent harness context sources (#​1875) (@​JAORMX)
• 4c28406: feat: correlate provider requests with the root session (#​1883) (@​aponcedeleonch)
• 409ea74: feat: integrate contextual guardrails into execution and approvals (#​1510) (@​JAORMX)

Fixes

• d96de1f: fix(ci): classify PR changes from merge base (#​1827) (@​jbeda)
• 2736535: fix(toolhive): support v0.50 encrypted LLM credentials (#​1813) (@​samuv)

Other changes

• 9b6caf9: Plan: StatusML terminal hyperlinks (#​1830) (@​jbeda)
• 01f96fd: Plan: bound the mecatui mention palette (#​1828) (@​jbeda)
• 89316cd: Release v0.0.41 (#​1941) (@​toolhive-release-app[bot])
• 6c4ff47: Switches to best-practices renovate config (#​1826) (@​ChrisJBurns)
• 1fd69fb: [Plan / Interface] Narrow HarnessContext binding for remote execution (#​1878) (@​JAORMX)
• 8f049d8: [Plan / Interface] Root-session provider correlation (#​1882) (@​aponcedeleonch)
• 56a8845: [Plan / Interface] durable model-stream structural evidence (#​1676) (#​1679) (@​jhrozek)
• 25c60a0: perf(app): avoid full catalogue copies for model metadata lookups (#​1927) (@​JAORMX)
• fc7c967: perf(ci): batch acceptance proof resolution (#​1832) (@​jbeda)
• 7cd1171: plan: consolidate provider-scoped model discovery (#​1805) (@​JAORMX)

Verify

cosign verify-blob \
  --certificate-identity 'https://github.com/stacklok/mecatl/.github/workflows/release.yml@refs/tags/v0.0.41' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle checksums.txt.sigstore.json checksums.txt
sha256sum --check --ignore-missing checksums.txt
gh attestation verify mecatl_0.0.41_darwin_arm64.tar.gz --repo stacklok/mecatl

v0.0.40

Compare Source

Install

brew install stacklok/tap/mecatl

Installs both mecated (the server) and mecatui (the terminal UI).

Changelog

Features

• c006c99: feat(mecatui): emit agent lifecycle hooks to host editors (#​1697) (@​aponcedeleonch)
• 8306a8e: feat(mecatui): own configurable terminal titles (#​1674) (@​jbeda)
• 117f6d0: feat(router): add Jev delegated-model routing (#​1738) (@​JAORMX)
• a8a720d: feat(studio): bootstrap the Mecatl Studio web UI as apps/ (#​1754) (@​samuv)
• 59c3aa5: feat(studio): chat — sessions, streamed runs, controls, and the chat workspace (#​1756) (@​samuv)
• 45a4c87: feat(studio): global search palette and keyboard-shortcuts reference (#​1764) (@​samuv)
• 4e45ca4: feat(studio): knowledge — skills, learned skills, learning review, memory consolidation (#​1760) (@​samuv)
• 0abf09e: feat(studio): schedules — capability-gated inventory, spec mapping, actions, fires (#​1758) (@​samuv)
• 3b393b7: feat(studio): settings — runtime inventory, storage health, settings workspace (#​1762) (@​samuv)

Fixes

• 6501b59: fix(ci): repair live compaction slot and module metadata (#​1728) (@​JAORMX)
• 494c990: fix(mecatui): clear answered approval notifications (#​1782) (@​aponcedeleonch)
• d303c77: fix(mecatui): fall back to a per-process diagnostics log when the shared one is held (#​1781) (@​aponcedeleonch)
• 11caafc: fix(mecatui): preserve TTY output through title controller (#​1745) (@​jbeda)
• bbc7af0: fix(mecatui): surface session title and connection (#​1792) (@​jbeda)
• f54c85c: fix(osfs): cancel no-match Glob and Grep traversal (#​1723) (@​JAORMX)
• 405d46d: fix: honor read posture for external ListDir paths (#​1804) (@​JAORMX)
• ca993a6: fix: preserve native gateway discovery during background refresh (#​1798) (@​JAORMX)
• da986d8: fix: preserve resolved model across session restart (#​1786) (@​JAORMX)
• 0c91705: fix: preserve workspace adapter during command discovery (#​1799) (@​samuv)

Other changes

• f271cc7: Release v0.0.40 (#​1768) (@​toolhive-release-app[bot])
• 23380ee: build: remove brittle aggregate task wiring check (#​1806) (@​JAORMX)
• 485e173: build: separate fast tests from pre-review race verification (#​1801) (@​JAORMX)
• 3aebbb5: refactor(mecatui): prepare conversation cards functionally (#​1744) (@​jbeda)
• b0cf03a: refactor: remove obsolete alpha compatibility paths (#​1725) (@​JAORMX)
• 09edca1: revert(mecatui): remove configurable terminal titles (#​1743) (@​jbeda)

Verify

cosign verify-blob \
  --certificate-identity 'https://github.com/stacklok/mecatl/.github/workflows/release.yml@refs/tags/v0.0.40' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle checksums.txt.sigstore.json checksums.txt
sha256sum --check --ignore-missing checksums.txt
gh attestation verify mecatl_0.0.40_darwin_arm64.tar.gz --repo stacklok/mecatl

v0.0.39

Compare Source

Install

brew install stacklok/tap/mecatl

Installs both mecated (the server) and mecatui (the terminal UI).

Changelog

Features

• d2200ab: feat(mecated): streamline direct MCP OAuth onboarding (#​1689) (@​jhrozek)
• 2eba2cc: feat(provider): ask for the prompt cache through the protocol, not the vendor (ADR 0346) (#​1573) (@​aponcedeleonch)
• 5b0db5a: feat(sdk): add MCP authorization

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: adapters/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
github.com/redis/go-redis/v9	v9.22.0 -> v9.23.0
go.uber.org/atomic	v1.11.0 -> v1.12.0
golang.org/x/sys	v0.48.0 -> v0.49.0

File name: authn/oidc/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
github.com/power-devops/perfstat	v0.0.0-20260805114148-88456608a4f6 -> v0.0.0-20260916203055-22a1a467d9f0
golang.org/x/net	v0.60.0 -> v0.61.0
golang.org/x/sys	v0.48.0 -> v0.49.0
golang.org/x/text	v0.42.0 -> v0.43.0

File name: environment/microvm/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 25 additional dependencies were updated

Details:

Package	Change
golang.org/x/sys	v0.48.0 -> v0.49.0
github.com/cyberphone/json-canonicalization	v0.0.0-20241213102144-19d51d7fe467 -> v0.0.0-20261011152517-32a48195b9b2
github.com/digitorus/pkcs7	v0.0.0-20250730155240-ffadbf3f398c -> v0.0.0-20260914070511-d678ea5ea03f
github.com/digitorus/timestamp	v0.0.0-20250524132541-c45532741eea -> v0.0.0-20260914073129-b4b58b92aa51
github.com/docker/cli	v29.7.2+incompatible -> v29.9.0+incompatible
github.com/docker/docker-credential-helpers	v0.9.5 -> v0.9.10
github.com/go-openapi/analysis	v1.0.0 -> v1.0.1
github.com/go-openapi/jsonpointer	v1.0.1 -> v1.0.2
github.com/go-openapi/jsonreference	v1.0.2 -> v1.0.3
github.com/go-openapi/strfmt	v0.27.2 -> v0.27.3
github.com/go-openapi/swag/loading	v0.29.1 -> v0.29.2
github.com/go-openapi/swag/mangling	v0.29.1 -> v0.29.2
github.com/go-openapi/swag/yamlutils	v0.29.1 -> v0.29.2
github.com/grpc-ecosystem/grpc-gateway/v2	v2.30.0 -> v2.31.0
github.com/klauspost/compress	v1.19.2 -> v1.20.3
github.com/sirupsen/logrus	v1.9.4 -> v1.10.2
golang.org/x/crypto	v0.57.0 -> v0.58.0
golang.org/x/mod	v0.41.0 -> v0.42.0
golang.org/x/net	v0.60.0 -> v0.61.0
golang.org/x/sync	v0.23.0 -> v0.24.0
golang.org/x/term	v0.46.0 -> v0.47.0
golang.org/x/text	v0.42.0 -> v0.43.0
golang.org/x/tools	v0.49.0 -> v0.51.0
google.golang.org/genproto/googleapis/api	v0.0.0-20260928230214-8a89bd6388cc -> v0.0.0-20261012220534-4341edf3f941
google.golang.org/genproto/googleapis/rpc	v0.0.0-20261005182115-fad411399dd8 -> v0.0.0-20261012220534-4341edf3f941

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 79 additional dependencies were updated

Details:

Package	Change
charm.land/bubbletea/v2	v2.0.10 -> v2.1.0
github.com/alicebob/miniredis/v2	v2.39.0 -> v2.40.0
github.com/charmbracelet/x/ansi	v0.11.8 -> v0.11.9
github.com/onsi/ginkgo/v2	v2.32.2 -> v2.33.1
github.com/onsi/gomega	v1.43.0 -> v1.44.0
github.com/prometheus/client_golang	v1.24.1 -> v1.25.0
github.com/redis/go-redis/v9	v9.22.0 -> v9.23.0
go.opentelemetry.io/proto/otlp	v1.11.0 -> v1.11.1
golang.org/x/net	v0.60.0 -> v0.61.0
golang.org/x/sys	v0.48.0 -> v0.49.0
golang.org/x/term	v0.46.0 -> v0.47.0
golang.org/x/tools	v0.49.0 -> v0.52.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20261005182115-fad411399dd8 -> v0.0.0-20261012220534-4341edf3f941
cel.dev/expr	v0.25.2 -> v0.25.3
github.com/Microsoft/go-winio	v0.6.2 -> v0.6.3
github.com/ProtonMail/go-crypto	v1.4.1 -> v1.5.2
github.com/aws/aws-sdk-go-v2	v1.47.1 -> v1.47.3
github.com/aws/aws-sdk-go-v2/config	v1.33.7 -> v1.33.9
github.com/aws/aws-sdk-go-v2/credentials	v1.20.7 -> v1.20.9
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.20.1 -> v1.20.3
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.5.4 -> v1.5.6
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.8.4 -> v2.8.6
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.5.4 -> v1.5.6
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.19 -> v1.13.21
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.14.4 -> v1.14.6
github.com/aws/aws-sdk-go-v2/service/signin	v1.10.2 -> v1.10.4
github.com/aws/aws-sdk-go-v2/service/sso	v1.38.2 -> v1.38.4
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.43.2 -> v1.43.4
github.com/aws/aws-sdk-go-v2/service/sts	v1.51.2 -> v1.51.4
github.com/aws/smithy-go	v1.28.1 -> v1.28.5
github.com/cenkalti/backoff/v7	v7.0.0 -> v7.0.1
github.com/charmbracelet/ultraviolet	v0.0.0-20260811164956-006e29f97886 -> v0.0.0-20261008173134-6b8d4baf91b4
github.com/cloudflare/circl	v1.6.3 -> v1.6.5
github.com/docker/cli	v29.7.2+incompatible -> v29.9.0+incompatible
github.com/docker/docker-credential-helpers	v0.9.5 -> v0.9.10
github.com/docker/go-connections	v0.8.1 -> v0.8.2
github.com/dustin/go-humanize	v1.0.1 -> v1.1.0
github.com/getsentry/sentry-go	v0.49.0 -> v0.50.0
github.com/getsentry/sentry-go/otel	v0.49.0 -> v0.50.0
github.com/getsentry/sentry-go/otel/otlp	v0.49.0 -> v0.50.0
github.com/go-chi/chi/v5	v5.3.2 -> v5.4.0
github.com/go-git/go-billy/v5	v5.9.1 -> v5.9.2
github.com/go-git/go-git/v5	v5.19.2 -> v5.19.3
github.com/go-openapi/jsonpointer	v1.0.1 -> v1.0.2
github.com/go-openapi/jsonreference	v1.0.2 -> v1.0.3
github.com/go-openapi/swag	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/cmdutils	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/loading	v0.29.1 -> v0.29.2
github.com/go-openapi/swag/mangling	v0.29.1 -> v0.29.2
github.com/go-openapi/swag/netutils	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/yamlutils	v0.29.1 -> v0.29.2
github.com/grpc-ecosystem/grpc-gateway/v2	v2.30.0 -> v2.31.0
github.com/klauspost/compress	v1.19.2 -> v1.20.3
github.com/mattn/go-runewidth	v0.0.27 -> v0.0.30
github.com/moby/moby/api	v1.56.0 -> v1.56.1
github.com/moby/moby/client	v0.6.0 -> v0.6.2
github.com/ncruces/go-strftime	v1.0.0 -> v1.1.0
github.com/pjbgf/sha1cd	v0.6.0 -> v0.7.0
github.com/power-devops/perfstat	v0.0.0-20260805114148-88456608a4f6 -> v0.0.0-20260916203055-22a1a467d9f0
github.com/prometheus/common	v0.72.0 -> v0.72.1
github.com/sirupsen/logrus	v1.9.4 -> v1.10.2
github.com/spiffe/go-spiffe/v2	v2.8.1 -> v2.9.0
github.com/stacklok/toolhive-core/redisconn	v0.0.2 -> v0.0.4
github.com/tidwall/gjson	v1.19.0 -> v1.20.0
github.com/xo/terminfo	v0.0.0-20220910002029-abceb7e1c41e -> v1.0.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.71.0 -> v0.72.0
go.uber.org/atomic	v1.11.0 -> v1.12.0
golang.org/x/crypto	v0.57.0 -> v0.58.0
golang.org/x/exp	v0.0.0-20260824195058-e88cd73687aa -> v0.0.0-20261014143641-f0251eb4aa3e
golang.org/x/exp/event	v0.0.0-20260824195058-e88cd73687aa -> v0.0.0-20261009195045-ca0d7ba23607
golang.org/x/exp/jsonrpc2	v0.0.0-20260908205506-85c1c2202aba -> v0.0.0-20261011100332-faecfb24eb49
golang.org/x/mod	v0.41.0 -> v0.42.0
golang.org/x/sync	v0.23.0 -> v0.24.0
golang.org/x/text	v0.42.0 -> v0.43.0
google.golang.org/genproto/googleapis/api	v0.0.0-20260928230214-8a89bd6388cc -> v0.0.0-20261012220534-4341edf3f941
modernc.org/libc	v1.75.6 -> v1.78.0
modernc.org/sqlite	v1.58.0 -> v1.60.1
oras.land/oras-go/v2	v2.6.2 -> v2.6.3
sigs.k8s.io/controller-runtime	v0.25.0 -> v0.25.2

File name: integration/microvm/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 79 additional dependencies were updated

Details:

Package	Change
cel.dev/expr	v0.25.2 -> v0.25.3
github.com/Microsoft/go-winio	v0.6.2 -> v0.6.3
github.com/ProtonMail/go-crypto	v1.4.1 -> v1.5.2
github.com/aws/aws-sdk-go-v2	v1.47.1 -> v1.47.3
github.com/aws/aws-sdk-go-v2/config	v1.33.7 -> v1.33.9
github.com/aws/aws-sdk-go-v2/credentials	v1.20.7 -> v1.20.9
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.20.1 -> v1.20.3
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.5.4 -> v1.5.6
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.8.4 -> v2.8.6
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.5.4 -> v1.5.6
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.19 -> v1.13.21
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.14.4 -> v1.14.6
github.com/aws/aws-sdk-go-v2/service/signin	v1.10.2 -> v1.10.4
github.com/aws/aws-sdk-go-v2/service/sso	v1.38.2 -> v1.38.4
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.43.2 -> v1.43.4
github.com/aws/aws-sdk-go-v2/service/sts	v1.51.2 -> v1.51.4
github.com/aws/smithy-go	v1.28.1 -> v1.28.5
github.com/cenkalti/backoff/v7	v7.0.0 -> v7.0.1
github.com/cloudflare/circl	v1.6.3 -> v1.6.5
github.com/cyberphone/json-canonicalization	v0.0.0-20241213102144-19d51d7fe467 -> v0.0.0-20261011152517-32a48195b9b2
github.com/digitorus/pkcs7	v0.0.0-20250730155240-ffadbf3f398c -> v0.0.0-20260914070511-d678ea5ea03f
github.com/digitorus/timestamp	v0.0.0-20250524132541-c45532741eea -> v0.0.0-20260914073129-b4b58b92aa51
github.com/docker/cli	v29.7.2+incompatible -> v29.9.0+incompatible
github.com/docker/docker-credential-helpers	v0.9.5 -> v0.9.10
github.com/docker/go-connections	v0.8.1 -> v0.8.2
github.com/dustin/go-humanize	v1.0.1 -> v1.1.0
github.com/getsentry/sentry-go	v0.49.0 -> v0.50.0
github.com/getsentry/sentry-go/otel	v0.49.0 -> v0.50.0
github.com/getsentry/sentry-go/otel/otlp	v0.49.0 -> v0.50.0
github.com/go-chi/chi/v5	v5.3.2 -> v5.4.0
github.com/go-git/go-billy/v5	v5.9.1 -> v5.9.2
github.com/go-git/go-git/v5	v5.19.2 -> v5.19.3
github.com/go-openapi/analysis	v1.0.0 -> v1.0.1
github.com/go-openapi/jsonpointer	v1.0.1 -> v1.0.2
github.com/go-openapi/jsonreference	v1.0.2 -> v1.0.3
github.com/go-openapi/strfmt	v0.27.2 -> v0.27.3
github.com/go-openapi/swag	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/cmdutils	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/loading	v0.29.1 -> v0.29.2
github.com/go-openapi/swag/mangling	v0.29.1 -> v0.29.2
github.com/go-openapi/swag/netutils	v0.28.0 -> v0.29.2
github.com/go-openapi/swag/yamlutils	v0.29.1 -> v0.29.2
github.com/grpc-ecosystem/grpc-gateway/v2	v2.30.0 -> v2.31.0
github.com/klauspost/compress	v1.19.2 -> v1.20.3
github.com/moby/moby/api	v1.56.0 -> v1.56.1
github.com/moby/moby/client	v0.6.0 -> v0.6.2
github.com/ncruces/go-strftime	v1.0.0 -> v1.1.0
github.com/pjbgf/sha1cd	v0.6.0 -> v0.7.0
github.com/power-devops/perfstat	v0.0.0-20260805114148-88456608a4f6 -> v0.0.0-20260916203055-22a1a467d9f0
github.com/prometheus/client_golang	v1.24.1 -> v1.25.0
github.com/prometheus/common	v0.72.0 -> v0.72.1
github.com/redis/go-redis/v9	v9.22.0 -> v9.23.0
github.com/sigstore/sigstore	v1.10.10 -> v1.11.0
github.com/sirupsen/logrus	v1.9.4 -> v1.10.2
github.com/spiffe/go-spiffe/v2	v2.8.1 -> v2.9.0
github.com/stacklok/toolhive	v0.50.0 -> v0.54.0
github.com/stacklok/toolhive-core	v0.0.51 -> v0.0.55
github.com/stacklok/toolhive-core/redisconn	v0.0.2 -> v0.0.4
github.com/tidwall/gjson	v1.19.0 -> v1.20.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.71.0 -> v0.72.0
go.opentelemetry.io/proto/otlp	v1.11.0 -> v1.11.1
go.uber.org/atomic	v1.11.0 -> v1.12.0
golang.org/x/crypto	v0.57.0 -> v0.58.0
golang.org/x/exp	v0.0.0-20260824195058-e88cd73687aa -> v0.0.0-20261014143641-f0251eb4aa3e
golang.org/x/exp/event	v0.0.0-20260824195058-e88cd73687aa -> v0.0.0-20261009195045-ca0d7ba23607
golang.org/x/exp/jsonrpc2	v0.0.0-20260908205506-85c1c2202aba -> v0.0.0-20261011100332-faecfb24eb49
golang.org/x/mod	v0.41.0 -> v0.42.0
golang.org/x/net	v0.60.0 -> v0.61.0
golang.org/x/sync	v0.23.0 -> v0.24.0
golang.org/x/sys	v0.48.0 -> v0.49.0
golang.org/x/term	v0.46.0 -> v0.47.0
golang.org/x/text	v0.42.0 -> v0.43.0
golang.org/x/tools	v0.49.0 -> v0.52.0
google.golang.org/genproto/googleapis/api	v0.0.0-20260928230214-8a89bd6388cc -> v0.0.0-20261012220534-4341edf3f941
google.golang.org/genproto/googleapis/rpc	v0.0.0-20261005182115-fad411399dd8 -> v0.0.0-20261012220534-4341edf3f941
modernc.org/libc	v1.75.6 -> v1.78.0
modernc.org/sqlite	v1.58.0 -> v1.60.1
oras.land/oras-go/v2	v2.6.2 -> v2.6.3
sigs.k8s.io/controller-runtime	v0.25.0 -> v0.25.2