Changes

🐛 Bug Fixes

• fix: skip resource depends on skipped source @olblak (#9916)
• fix: go module cooldown with pseudo version @olblak (#9917)
• fix(yaml): pass keyonly condition with searchpattern when at least one file matches @junnhwan (#9889)
• fix(temurin): include specificversion in ReportConfig @loispostula (#9850)

🧰 Maintenance

• deps: Bump Golang version to 1.26.6 @updateclibot[bot] (#9925)
• deps: bump Updatecli GH action to v3.5.0 @updateclibot[bot] (#9901)
• deps: bump Updatecli GH action to v0.120.0 @updateclibot[bot] (#9890)
• deps(updatecli/policies): bump all policies @updateclibot[bot] (#9877)
• deps(go): bump module go.opentelemetry.io/otel/trace to v1.45.0 @updateclibot[bot] (#9861)
• chore(dockerfile): upgrade node version @updateclibot[bot] (#9822)

📝 Documentation

• Add checklist item for manual testing @olblak (#9905)

Contributors

@junnhwan, @loispostula, @olblak, @updateclibot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

Changes

⚠ Security

• fix: file target does not confine writes to the working directory @ihopenre-eng (GHSA-hj4x-hm4v-7wpw)
• fix: Credential-bearing URLs written to console @ihopenre-eng (GHSA-gc47-hwcc-8qp4)

🚀 Features

• feat(core): add function to validate manifest @olblak (#9721)
• feat(core): Add flag to enable/disable report @olblak (#9715)
• feat(csv/json/toml): add Dasel v3 support @olblak (#9704)
• feat(gitcommit): add Git commit source resource @ihopenre-eng (#9609)
• feat: add opt-in singleBranch option to speed up git scm checkout @kuisathaverat (#9590)

🐛 Bug Fixes

• fix(autodiscovery/dockercompose): skip images whose tag is not a version @jouve (#9760)
• fix: flux OCIRepository autodiscovery with digest @rowan-walsh (#9744)
• fix(autodiscovery/updatecli): correctly use relative file path @olblak (#9759)
• fix(terragrunt): support source including git username @dexner-jambit (#9731)
• fix: updatecli pipeline prepare --clean @olblak (#9716)
• fix: add username/password auth to helm/argocd autodiscovery @itsteddyyo (#9706)
• fix: guard against short paths in changelog GitHub URL redirect @AruneshDwivedi (#9688)
• Fix YAML quoted scalar reads @ahfoysal (#9385)
• fix: don't use action info to generate report ID @olblak (#9612)

🧰 Maintenance

• deps(go): bump module github.com/go-git/go-git/v5 to v5.19.2 @updateclibot[bot] (#9816)
• deps(go): bump module github.com/getsops/sops/v3 to v3.13.3 @updateclibot[bot] (#9809)
• deps(go): bump module github.com/drone/go-scm to v1.42.13 @updateclibot[bot] (#9805)
• deps(go): bump module github.com/hashicorp/terraform-registry-address to v0.5.0 @updateclibot[bot] (#9799)
• chore(ci): upgrade uv version @updateclibot[bot] (#9783)
• deps(go): bump module github.com/moby/buildkit to v0.32.0 @updateclibot[bot] (#9780)
• deps(go): bump module go.yaml.in/yaml/v3 to v3.0.5 @updateclibot[bot] (#9771)
• deps(go): bump module github.com/google/go-containerregistry to v0.21.8 @updateclibot[bot] (#9770)
• deps(go): bump module github.com/fluxcd/helm-controller/api to v1.6.3 @updateclibot[bot] (#9755)
• deps(go): bump module github.com/yuin/goldmark to v1.8.5 @updateclibot[bot] (#9752)
• chore: various cleanup @olblak (#9757)
• chore(dockerfile): upgrade node version @updateclibot[bot] (#9741)
• chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 in the go_modules group across 1 directory @dependabot[bot] (#9722)
• deps(go): bump module github.com/testcontainers/testcontainers-go to v0.43.0 @updateclibot[bot] (#9687)
• deps(go): bump module github.com/fluxcd/helm-controller/api to v1.6.2 @updateclibot[bot] (#9677)
• deps(go): bump module github.com/moby/buildkit to v0.31.2 @updateclibot[bot] (#9674)
• deps(go): bump module github.com/zclconf/go-cty to v1.19.0 @updateclibot[bot] (#9671)
• deps(go): bump module cuelang.org/go to v0.17.1 @updateclibot[bot] (#9663)
• deps(go): bump module github.com/fluxcd/source-controller/api to v1.9.3 @updateclibot[bot] (#9636)
• deps(updatecli/policies): bump all policies @updateclibot[bot] (#9637)
• deps(go): bump module github.com/jferrl/go-githubauth to v1.7.0 @updateclibot[bot] (#9625)
• deps(go): bump module github.com/beevik/etree to v1.7.0 @updateclibot[bot] (#9601)
• deps(go): bump module github.com/drone/go-scm to v1.42.10 @updateclibot[bot] (#9602)
• deps(go): bump module github.com/yuin/goldmark to v1.8.4 @updateclibot[bot] (#9605)
• fix(shell): function typo @olblak (#9608)
• chore(dockerfile): upgrade node version @updateclibot[bot] (#9591)
• deps(github/action): bump all dependencies @updateclibot[bot] (#9565)
• deps(go): bump module oras.land/oras-go/v2 to v2.6.2 @updateclibot[bot] (#9583)
• deps(go): bump module github.com/google/go-containerregistry to v0.21.7 @updateclibot[bot] (#9585)
• deps(golang): Bump minor version for github.com/shurcooL module @updateclibot[bot] (#9587)
• deps(golang): Bump minor version for github.com/aws module @updateclibot[bot] (#9588)
• deps(golang): Bump minor version for go.opentelemetry.io module @updateclibot[bot] (#9589)
• chore(ci): upgrade uv version @updateclibot[bot] (#9562)
• fix: golang dependencies update @olblak (#9560)
• deps(go): bump module github.com/getsops/sops/v3 to v3.13.2 @updateclibot[bot] (#9559)
• deps(go): bump module helm.sh/helm/v3 to v3.21.3 @updateclibot[bot] (#9558)

📝 Documentation

• doc: update contributing.adoc @olblak (#9758)
• chore: various cleanup @olblak (#9757)
• doc: update pyproject documentation @olblak (#9736)
• chore: cleanup autodiscovery spec comment @olblak (#9699)

Contributors

@AruneshDwivedi, @ahfoysal, @dependabot[bot], @dexner-jambit, @ihopenre-eng, @itsteddyyo, @jouve, @kuisathaverat, @olblak, @rowan-walsh, @updateclibot[bot], dependabot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

Changes

🚀 Features

• feat(systemd): add resource plugin for systemd unit files @ScMofeoluwa (#8970)
• feat: support cooldown for Golang module @olblak (#8966)

🐛 Bug Fixes

• Fix cleanup action for already merged pull requests @perlan (#9133)
• fix: correctly init report name and config @olblak (#9283)
• fix(terraform): include registry hostname in autodiscovery manifest @Pankaj-Gupta25 (#9281)
• fix(pyproject): track uv.lock relative to target workdir @nguyeda (#9266)

🧰 Maintenance

• deps: automate updatecli version update in gha workflow @olblak (#9470)
• chore(ci): upgrade uv version @updateclibot[bot] (#9394)
• chore(dockerfile): upgrade node version @updateclibot[bot] (#9392)
• deps: fix default golang update @olblak (#9391)
• chore(ci): add repo parameter to issue creation command @olblak (#9380)
• chore: remove peter-evans/create-issue-from-file gha @olblak (#9379)
• chore: remove Go Report Card badge from README @olblak (#9377)
• chore(ci): upgrade uv version @updateclibot[bot] (#9374)
• chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in the go_modules group across 1 directory @dependabot[bot] (#9233)
• chore: refactor Updatecli compose workflow @olblak (#9368)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/credentials to v1.19.26 @updateclibot[bot] (#9329)
• chore(ci): upgrade uv version @updateclibot[bot] (#9285)
• deps(updatecli/policies): bump all policies @updateclibot[bot] (#9287)
• chore(dockerfile): upgrade node version @updateclibot[bot] (#9284)
• deps(go): bump module go.opentelemetry.io/otel/sdk to v1.44.0 @updateclibot[bot] (#9269)
• deps(go): bump module golang.org/x/mod to v0.37.0 @updateclibot[bot] (#9273)
• deps(go): bump module github.com/aws/smithy-go to v1.27.2 @updateclibot[bot] (#9279)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/credentials to v1.19.24 @updateclibot[bot] (#9277)
• deps(go): bump module gopkg.in/ini.v1 to v1.67.3 @updateclibot[bot] (#9248)
• deps(go): bump module helm.sh/helm/v3 to v3.21.2 @updateclibot[bot] (#9231)
• deps(go): bump module github.com/drone/go-scm to v1.42.7 @updateclibot[bot] (#9212)
• chore(ci): upgrade uv version @updateclibot[bot] (#9180)
• deps(go): bump module go.opentelemetry.io/otel/trace to v1.44.0 @updateclibot[bot] (#9169)
• deps(go): bump module golang.org/x/net to v0.56.0 @updateclibot[bot] (#9158)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/config to v1.32.24 @updateclibot[bot] (#9146)
• deps: Bump Golang version to 1.26.4 @updateclibot[bot] (#9116)

Contributors

@Pankaj-Gupta25, @ScMofeoluwa, @dependabot[bot], @nguyeda, @olblak, @perlan, @updateclibot[bot], dependabot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

Changes

🚀 Features

• feat: add disable changelog flag and env var @omer-cengel (#8969)

🐛 Bug Fixes

• fix: skip version check for generator commands @ambikeesshh (#9064)
• chore: don't show version diff if newer @olblak (#9000)

🧰 Maintenance

• deps(go): bump module github.com/fluxcd/helm-controller/api to v1.5.5 @updateclibot[bot] (#9093)
• chore(ci): upgrade uv version @updateclibot[bot] (#9046)
• chore(dockerfile): upgrade node version @updateclibot[bot] (#9009)
• deps(go): bump module github.com/drone/go-scm to v1.42.3 @updateclibot[bot] (#8990)
• deps(go): bump module github.com/fluxcd/source-controller/api to v1.8.5 @updateclibot[bot] (#8994)
• chore: add govulncheck GitHub Action workflow @olblak (#9007)
• deps(go): bump module github.com/google/go-containerregistry to v0.21.6 @updateclibot[bot] (#8995)
• deps(go): bump module github.com/tetratelabs/wazero to v1.12.0 @updateclibot[bot] (#9002)
• chore: updatecli docs handle different exit code @olblak (#9001)

Contributors

@ambikeesshh, @olblak, @omer-cengel, @updateclibot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

Changes

🐛 Bug Fixes

• fix(autodiscovery/kubernetes): handle empty yaml @olblak (#8943)
• fix(dockerdigest): include HideTag in ReportConfig to prevent source cache collision @max-chaban (#8927)
• fix: sanitize version when checking the latest Updatecli version available @olblak (#8824)

🧰 Maintenance

• chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 in the go_modules group across 1 directory @dependabot[bot] (#8959)
• chore(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 in the go_modules group across 1 directory @dependabot[bot] (#8936)
• deps(go): bump module code.gitea.io/sdk/gitea to v0.25.1 @updateclibot[bot] (#8932)
• deps(go): bump module golang.org/x/mod to v0.36.0 @updateclibot[bot] (#8934)
• chore: Improve version update message warning @olblak (#8928)
• deps(go): bump module github.com/moby/buildkit to v0.30.0 @updateclibot[bot] (#8908)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.302.0 @updateclibot[bot] (#8911)
• chore(ci): upgrade uv version @updateclibot[bot] (#8899)
• deps(go): bump module github.com/getsops/sops/v3 to v3.13.1 @updateclibot[bot] (#8892)
• deps(go): bump module golang.org/x/net to v0.54.0 @updateclibot[bot] (#8885)
• deps(go): bump module github.com/minamijoyo/hcledit to v0.2.18 @updateclibot[bot] (#8875)
• deps(go): bump module helm.sh/helm/v3 to v3.21.0 @updateclibot[bot] (#8860)
• deps(go): bump module github.com/fluxcd/source-controller/api to v1.8.4 @updateclibot[bot] (#8851)
• chore: add ci pipeline job in global report @olblak (#8825)
• deps(go): bump module gopkg.in/ini.v1 to v1.67.2 @updateclibot[bot] (#8808)
• chore(dockerfile): upgrade node version @updateclibot[bot] (#8777)
• chore: update pnpm/action-setup version in workflows @olblak (#8748)

📝 Documentation

• fix: convert README.adoc to markdown @olblak (#8954)

Contributors

@dependabot[bot], @max-chaban, @olblak, @updateclibot[bot], dependabot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

Changes

🚀 Features

• feat: add azure devops support @olblak (#8586)
• feat(autodiscovery/argocd): enhance support of ApplicationSet with multiple sources @af-beng (#8677)
• feat: allow Updatecli manifest dependson @olblak (#8437)
• feat: show updatecli warning if using outdated version @olblak (#8567)

🐛 Bug Fixes

• fix(autodiscovery/golang): correctly handle pseudo version @olblak (#8698)
• fix(autodiscovery/flux): skip HelmRelease without chart template to avoid nil pointer panic @jouve (#8680)
• fix: handle skipped condition dependencies in target gating @nickzerjeski (#8426)
• feat(autodiscovery/precommit): detect rev version from comment @nickzerjeski (#8402)
• fix(bitbucket): use FindBranch and paginate PR listing in pullrequest… @roulettedares (#8584)

🧰 Maintenance

• deps: Bump Golang version to 1.26.3 @updateclibot[bot] (#8709)
• chore(deps): update github.com/Masterminds/semver/v3 to v3.5.0 @olblak (#8699)
• chore(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in the go_modules group across 1 directory @dependabot[bot] (#8690)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.299.1 @updateclibot[bot] (#8671)
• chore(ci): upgrade uv version @updateclibot[bot] (#8663)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/config to v1.32.17 @updateclibot[bot] (#8661)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/credentials to v1.19.16 @updateclibot[bot] (#8653)
• deps(go): bump module github.com/aws/smithy-go to v1.25.1 @updateclibot[bot] (#8640)
• deps(go): bump module github.com/invopop/jsonschema to v0.14.0 @updateclibot[bot] (#8623)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.299.0 @updateclibot[bot] (#8619)
• deps(go): bump module github.com/jferrl/go-githubauth to v1.6.0 @updateclibot[bot] (#8615)
• deps(go): bump module github.com/fluxcd/source-controller/api to v1.8.3 @updateclibot[bot] (#8610)
• deps(go): bump module github.com/fluxcd/helm-controller/api to v1.5.4 @updateclibot[bot] (#8601)
• deps(go): bump module github.com/zclconf/go-cty to v1.18.1 @updateclibot[bot] (#8558)
• deps(go): bump module github.com/drone/go-scm to v1.42.2 @updateclibot[bot] (#8557)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.297.1 @updateclibot[bot] (#8552)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/config to v1.32.16 @updateclibot[bot] (#8544)
• chore: update updatecli version and streamline workflow steps @olblak (#8534)
• deps: bump Updatecli GH action @olblak (#8524)

📝 Documentation

• doc: add devoxx fr talk record @olblak (#8725)

Contributors

@af-beng, @dependabot[bot], @jouve, @nickzerjeski, @olblak, @roulettedares, @updateclibot[bot], dependabot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

Changes

🐛 Bug Fixes

• fix(cache): include SCM identity in source cache key @loispostula (#8523)

🧰 Maintenance

• deps(go): bump module github.com/aws/aws-sdk-go-v2 to v1.41.6 @updateclibot[bot] (#8517)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/credentials to v1.19.15 @updateclibot[bot] (#8516)
• deps: Updatecli version used by GitHub action @olblak (#8509)

Contributors

@loispostula, @olblak, @updateclibot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

Changes

🐛 Bug Fixes

• fix: graph report content @olblak (#8482)
• fix: propagate npmrcpath to lockfile shell targets @nickzerjeski (#8407)
• fix: changelog dockerimage nil pointer @olblak (#8473)
• fix: do not generate empty argocd pipeline using autodiscovery @olblak (#8472)

🧰 Maintenance

• chore(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 in the go_modules group across 1 directory @dependabot[bot] (#8506)
• install typos gha action v1.45.1 @updateclibot[bot] (#8471)
• chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in the go_modules group across 1 directory @dependabot[bot] (#8497)
• chore(dockerfile): upgrade node version @updateclibot[bot] (#8489)
• deps(go): bump module github.com/aws/aws-sdk-go-v2/config to v1.32.15 @updateclibot[bot] (#8486)
• chore(ci): upgrade uv version @updateclibot[bot] (#8478)
• fix: update devcontainer updatecli pipeline @olblak (#8475)
• deps(golang): update minor dependencies @olblak (#8474)
• install Zizmor gha action v0.5.3 @updateclibot[bot] (#8434)
• deps(go): bump module github.com/getsops/sops/v3 to v3.12.2 @updateclibot[bot] (#8431)
• chore: cleanup updatecli configuration @olblak (#8432)
• github action configuration tidy up @olblak (#8433)
• deps: Bump Golang version to 1.26.2 @updateclibot[bot] (#8372)
• deps(github/action): bump all dependencies @updateclibot[bot] (#8370)
• deps(github/action): bump all dependencies @updateclibot[bot] (#8338)

Contributors

@dependabot[bot], @nickzerjeski, @olblak, @updateclibot[bot], dependabot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

Changes

🧰 Bug

• fix(pyproject): use uv lock instead of uv add to preserve pyproject.toml#8340 @loispostula (#8340)

🧰 Maintenance

• deps(go): bump module github.com/aws/aws-sdk-go-v2 to v1.41.5 @updateclibot[bot] (#8331)
• deps(go): bump module helm.sh/helm/v3 to v3.20.2 @updateclibot[bot] (#8336)
• deps(go): bump module code.gitea.io/sdk/gitea to v0.24.1 @updateclibot[bot] (#8317)
• deps(go): bump module github.com/go-git/go-git/v5 to v5.17.2 @updateclibot[bot] (#8329)
• Update Bluesky username in goreleaser configuration @olblak

Contributors

@loispostula, @olblak @updateclibot[bot] and updateclibot[bot]

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

Changes

🚀 Features

• feat: source caching @loispostula (#8291)
• feat: golang module support pseudo version @olblak (#8293)
• feat(github): add client-side pull request merge option @LeC-D (#8204)
• feat: add PyPI resource and pyproject autodiscovery plugins @loispostula (#8155)
• feat(telemetry): add OpenTelemetry tracing for pipeline execution @loispostula (#8055)
• feat: allow to filter compose policies based on policy id @olblak (#8246)
• feat(version): add pep440 version kind @loispostula (#8245)

🐛 Bug Fixes

• fix(yaml): compare decoded scalar values to avoid rewriting folded blocks @loispostula (#8296)
• fix(github): nil-check token source to avoid panic when no token configured @loispostula (#8298)

🧰 Maintenance

• install Zizmor gha action v0.5.2 @updateclibot[bot] (#8294)
• deps(github/action): bump all dependencies @updateclibot[bot] (#8206)
• deps(updatecli/policies): bump all policies @updateclibot[bot] (#8205)
• deps(updatecli/policies): bump all policies @updateclibot[bot] (#8179)

Contributors

@LeC-D, @loispostula, @olblak, @updateclibot[bot] and updateclibot[bot]

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.