chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/setup-go	action	minor	v6.4.0 → v6.5.0
actions/setup-python	action	minor	v6.2.0 → v6.3.0
cel.dev/expr	indirect	patch	v0.25.1 → v0.25.2
cloud.google.com/go/auth	indirect	minor	v0.18.2 → v0.20.0
cloud.google.com/go/iam	indirect	minor	v1.5.3 → v1.11.0
cloud.google.com/go/monitoring	indirect	minor	v1.24.3 → v1.29.0
cloud.google.com/go/storage	indirect	minor	v1.61.3 → v1.63.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	indirect	minor	v1.30.0 → v1.33.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	indirect	minor	v0.55.0 → v0.57.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	indirect	minor	v0.55.0 → v0.57.0
github.com/aws/aws-sdk-go-v2	indirect	minor	v1.41.5 → v1.42.0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	indirect	patch	v1.7.8 → v1.7.13
github.com/aws/aws-sdk-go-v2/config	indirect	patch	v1.32.12 → v1.32.26
github.com/aws/aws-sdk-go-v2/credentials	indirect	patch	v1.19.12 → v1.19.25
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	patch	v1.18.20 → v1.18.29
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	patch	v1.4.21 → v1.4.29
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	indirect	patch	v2.7.21 → v2.7.29
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	patch	v1.4.22 → v1.4.30
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	patch	v1.13.7 → v1.13.12
github.com/aws/aws-sdk-go-v2/service/internal/checksum	indirect	patch	v1.9.13 → v1.9.22
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	patch	v1.13.21 → v1.13.29
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	indirect	patch	v1.19.21 → v1.19.30
github.com/aws/aws-sdk-go-v2/service/s3	indirect	minor	v1.97.3 → v1.104.1
github.com/aws/aws-sdk-go-v2/service/signin	indirect	minor	v1.0.8 → v1.2.1
github.com/aws/aws-sdk-go-v2/service/sso	indirect	minor	v1.30.13 → v1.31.4
github.com/aws/aws-sdk-go-v2/service/ssooidc	indirect	minor	v1.35.17 → v1.36.7
github.com/aws/aws-sdk-go-v2/service/sts	indirect	minor	v1.41.9 → v1.43.4
github.com/aws/smithy-go	indirect	minor	v1.24.2 → v1.27.3
github.com/charmbracelet/ultraviolet	indirect	digest	948f455 → f39628c
github.com/cncf/xds/go	indirect	digest	ee656c7 → dba9d58
github.com/dlclark/regexp2/v2	indirect	patch	v2.2.1 → v2.2.2
github.com/envoyproxy/go-control-plane/envoy	indirect	minor	v1.36.0 → v1.37.0
github.com/envoyproxy/protoc-gen-validate	indirect	patch	v1.3.0 → v1.3.3
github.com/felixge/httpsnoop	indirect	minor	v1.0.4 → v1.1.0
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	v0.3.14 → v0.3.17
github.com/googleapis/gax-go/v2	indirect	minor	v2.17.0 → v2.22.0
github.com/hashicorp/aws-sdk-go-base/v2	indirect	patch	v2.0.0-beta.72 → v2.0.0-beta.73
github.com/hashicorp/go-version	indirect	minor	v1.8.0 → v1.9.0
github.com/klauspost/compress	indirect	patch	v1.18.5 → v1.18.7
github.com/klauspost/cpuid/v2	indirect	minor	v2.3.0 → v2.4.0
github.com/mattn/go-colorable	indirect	patch	v0.1.14 → v0.1.15
github.com/mattn/go-isatty	indirect	patch	v0.0.20 → v0.0.22
github.com/mattn/go-runewidth	indirect	patch	v0.0.23 → v0.0.24
github.com/pierrec/lz4/v4	indirect	patch	v4.1.22 → v4.1.27
github.com/planetscale/vtprotobuf	indirect	digest	0393e58 → ba97887
github.com/sergi/go-diff	indirect	minor	v1.3.2-0.20230802210424-5b0b94c5c0d3 → v1.4.0
github.com/spiffe/go-spiffe/v2	indirect	minor	v2.6.0 → v2.8.1
github.com/stretchr/objx	indirect	patch	v0.5.2 → v0.5.3
github.com/u-root/u-root	indirect	minor	v0.15.1-0.20251208185023-2f8c7e763cf8 → v0.16.0
go.opentelemetry.io/contrib/detectors/gcp	indirect	minor	v1.39.0 → v1.44.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	v0.63.0 → v0.69.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	v0.61.0 → v0.69.0
go.opentelemetry.io/otel	indirect	minor	v1.43.0 → v1.44.0
go.opentelemetry.io/otel/metric	indirect	minor	v1.43.0 → v1.44.0
go.opentelemetry.io/otel/sdk	indirect	minor	v1.43.0 → v1.44.0
go.opentelemetry.io/otel/sdk/metric	indirect	minor	v1.43.0 → v1.44.0
go.opentelemetry.io/otel/trace	indirect	minor	v1.43.0 → v1.44.0
golang.org/x/crypto	indirect	minor	v0.52.0 → v0.53.0
golang.org/x/exp	indirect	digest	746e56f → c48552f
golang.org/x/net	indirect	minor	v0.55.0 → v0.56.0
golang.org/x/text	indirect	minor	v0.37.0 → v0.38.0
golangci/golangci-lint-action	action	minor	v9.2.1 → v9.3.0
google.golang.org/api	indirect	minor	v0.271.0 → v0.287.0
google.golang.org/genproto	indirect	digest	8636f87 → 925bb5d
google.golang.org/genproto/googleapis/api	indirect	digest	546029d → 925bb5d
google.golang.org/genproto/googleapis/rpc	indirect	digest	a57be14 → 925bb5d
google.golang.org/grpc	indirect	minor	v1.79.3 → v1.82.0
goreleaser/goreleaser-action (changelog)	action	digest	5daf1e9 → f06c13b
mvdan.cc/sh/moreinterp	require	digest	19def06 → 2255122
mvdan.cc/sh/v3	require	digest	f5c6e27 → 2255122
pnpm (source)	packageManager	minor	11.8.0+sha512.c1f5e7c4cb241c8f174b743851d82f42b802324afc8b0f116b96adb15aa06664948dde36960a3ba1079ba5b4b29dd0140135b94b5b5f5263592249d68e555f26 → 11.9.0
pnpm (source)		minor	11.8.0 → 11.9.0
prettier (source)	devDependencies	minor	3.8.4 → 3.9.4
vitepress-plugin-llms	devDependencies	patch	1.13.1 → 1.13.2
vue (source)	devDependencies	patch	3.5.38 → 3.5.39

---

Release Notes

actions/setup-go (actions/setup-go)

v6.5.0

Compare Source

actions/setup-python (actions/setup-python)

v6.3.0

Compare Source

What's Changed

Enhancement

• Add RHEL support and include Linux distro in cache keys by @​priyagupta108 in #​1323
• Fix pip cache error handling on Windows by @​priyagupta108 in #​1040

Dependency update

• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​1281
• Upgrade actions dependencies by @​gowridurgad with @​Copilot in #​1303
• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in #​1324
• Upgrade dependency versions and test workflow configuration by @​HarithaVattikuti in #​1322

Documentation

• Update advanced-usage.md by @​Dunky-Z in #​811

New Contributors

• @​gowridurgad with @​Copilot made their first contribution in #​1303
• @​jasongin made their first contribution in #​1324
• @​Dunky-Z made their first contribution in #​811

Full Changelog: actions/setup-python@v6...v6.3.0

google/cel-spec (cel.dev/expr)

v0.25.2

Compare Source

What's Changed

• Add conformance tests for (string).reverse() by @​jnthntatum in #​491
• Updates to the conformance tests for integer values in %e and %f format directives by @​TristonianJones in #​495
• Add automated BCR publishing on release tags by @​mmorel-35 in #​498
• Add clarification on scoping rules. by @​jnthntatum in #​506
• Networking extension conformance tests by @​TristonianJones in #​507
• Add conformance test cases for null assignability around repeated fields and maps by @​l46kok in #​510

New Contributors

• @​mmorel-35 made their first contribution in #​498

Full Changelog: cel-expr/cel-spec@v0.25.1...v0.25.2

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.20.0

Compare Source

• bigquery: Support SchemaUpdateOptions for load jobs.

• bigtable:

  • Add SampleRowKeys.
  • cbt: Support union, intersection GCPolicy.
  • Retry admin RPCS.
  • Add trace spans to retries.

• datastore: Add OpenCensus tracing.

• firestore:

  • Fix queries involving Null and NaN.
  • Allow Timestamp protobuffers for time values.

• logging: Add a WriteTimeout option.

• spanner: Support Batch API.

• storage: Add OpenCensus tracing.

v0.19.0

• bigquery:

  • Support customer-managed encryption keys.

• bigtable:

  • Improved emulator support.
  • Support GetCluster.

• datastore:

  • Add general mutations.
  • Support pointer struct fields.
  • Support transaction options.

• firestore:

  • Add Transaction.GetAll.
  • Support document cursors.

• logging:

  • Support concurrent RPCs to the service.
  • Support per-entry resources.

• profiler:

  • Add config options to disable heap and thread profiling.
  • Read the project ID from $GOOGLE_CLOUD_PROJECT when it's set.

• pubsub:

  • BEHAVIOR CHANGE: Release flow control after ack/nack (instead of after the
    callback returns).
  • Add SubscriptionInProject.
  • Add OpenCensus instrumentation for streaming pull.

• storage:

  • Support CORS.

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

v0.57.0: v1.33.0/v0.57.0

Compare Source

What's Changed

• Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] by @​renovate-bot in #​1146
• Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] by @​renovate-bot in #​1145
• Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] by @​renovate-bot in #​1144
• [chore] retry_on_failure is removed from our exporter by @​braydonk in #​1151
• downgrade davecgh/go-spew, pmezard/go-difflib to tagged releases by @​thaJeztah in #​1152
• Update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY] by @​renovate-bot in #​1149
• Update e2e-testing image to fix presubmits by @​dashpole in #​1155
• Update go.opentelemetry.io/collector by @​renovate-bot in #​1073
• Auto comment /gcbrun for dependency updates by @​dashpole in #​1154
• Revert "Auto comment /gcbrun for dependency updates" by @​dashpole in #​1157
• Update module github.com/prometheus/common to v0.67.5 by @​renovate-bot in #​1156
• Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0 in /tools by @​dependabot[bot] in #​1118
• Update golang.org/x by @​renovate-bot in #​1008
• Combine dependency bumps by @​dashpole in #​1158
• Update All Dependencies by @​renovate-bot in #​1161
• Update all major dependencies by @​dashpole in #​1164
• Update All Dependencies by @​renovate-bot in #​1163
• Add AGENTS.md by @​dashpole in #​1165
• Fix CodeQL permissions to allow uploading results by @​dashpole in #​1166
• collector: bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 by @​dashpole in #​1170
• Migrate impersonate to use cloud.google.com/go/auth by @​dashpole in #​1169
• fix: Support OTLP event_name field in logs exporter by @​putcho01 in #​1088
• exporter/collector/logs: accept string-typed line in sourceLocation by @​alliasgher in #​1142
• exporter/collector/logs: use parsed httpRequest.protocol instead of hardcoded HTTP/1.1 by @​alliasgher in #​1143
• exporter/trace: sanitize invalid UTF-8 in span fields by @​alliasgher in #​1141
• chore: update E2E tests to use centralized async cleanup 0.22.0 by @​aabmass in #​1171
• Add support for cloud run worker pools by @​dashpole in #​1112
• Prerelease 1.33.0/v0.57.0 by @​avilevy18 in #​1173

New Contributors

• @​thaJeztah made their first contribution in #​1152
• @​putcho01 made their first contribution in #​1088
• @​alliasgher made their first contribution in #​1142

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.56.0...v0.57.0

v0.56.0: v1.32.0/v0.56.0

Compare Source

What's Changed

• Support universe domains in collector exporter client configuration by @​dashpole in #​1097
• Don't pass credentials fetched using FindDefaultCredentials by @​dashpole in #​1098
• googleclientauthextension: support Proxy-Authorization header by @​lindeskar in #​1105
• Improve unit tests for gcp auth extension by @​dashpole in #​1103
• Allow providing a context to create the monitoring client by @​dashpole in #​1096
• Add support for go 1.26 by @​dashpole in #​1107
• chore(deps): update module golang.org/x/crypto to v0.45.0 [security] by @​renovate-bot in #​1102
• Don't allow modifying the default scopes by @​dashpole in #​1109
• Ignore versions in the user agent header when comparing fixtures by @​dashpole in #​1115
• Bump go version to resolve govulncheck failures by @​dashpole in #​1114
• Separate out govulncheck into its own CI job by @​dashpole in #​1113
• Normalize user agents in span attributes as well by @​dashpole in #​1117
• fix(deps): update module google.golang.org/grpc to v1.79.3 [security] by @​jefferbrecht in #​1131
• Prepare for v1.32.0/v0.56.0 by @​dashpole in #​1132

New Contributors

• @​lindeskar made their first contribution in #​1105
• @​jefferbrecht made their first contribution in #​1131

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.55.0...v0.56.0

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

v1.42.0

Compare Source

General Highlights

• Dependency Update: Bump smithy-go to 1.25.0 to support endpointBdd trait
• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.43.0
  • Feature: This release adds support for configurable spark properties for Cleanrooms PySpark workloads.
• github.com/aws/aws-sdk-go-v2/service/connect: v1.171.0
  • Feature: Fixes in SDK for customers using TestCase APIs
• github.com/aws/aws-sdk-go-v2/service/connectcampaignsv2: v1.12.0
  • Feature: This release adds support for campaign entry limits configuration and hourly refresh frequency in Amazon Connect Outbound Campaigns.
• github.com/aws/aws-sdk-go-v2/service/groundstation: v1.41.0
  • Feature: Adds support for updating contacts, listing antennas, and listing ground station reservations. New API operations - UpdateContact, ListContactVersions, DescribeContactVersion, ListAntennas, and ListGroundStationReservations.
• github.com/aws/aws-sdk-go-v2/service/imagebuilder: v1.53.0
  • Feature: ImportDiskImage API adds registerImageOptions for Secure Boot control and custom UEFI data. It adds windowsConfiguration for selecting a specific edition from multi-image .wim files during ISO import.
• github.com/aws/aws-sdk-go-v2/service/neptune: v1.44.4
  • Documentation: Improving Documentation for Neptune
• github.com/aws/aws-sdk-go-v2/service/quicksight: v1.107.0
  • Feature: Public release of dashboard customization summary, S3 Tables data source type, Athena cross-account connector, custom sorting for controls, and AI-powered analysis generation.
• github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.241.0
  • Feature: Adds support for providing NetworkInterface for efa enabled instances and Simplified cluster creation for Slurm-orchestrated clusters with optional Lifecycle Script (LCS) configuration.
• github.com/aws/aws-sdk-go-v2/service/sts: v1.42.0
  • Feature: The STS client now supports configuring SigV4a through the auth scheme preference setting. SigV4a uses asymmetric cryptography, enabling customers using long-term IAM credentials to continue making STS API calls even when a region is isolated from the partition leader.

v1.41.12

Compare Source

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/aws-sdk-go-v2: v1.41.5
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/accessanalyzer: v1.45.12
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/account: v1.30.5
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/acm: v1.37.23
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/acmpca: v1.46.12
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/aiops: v1.6.21
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/amp: v1.42.9
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/amplify: v1.38.14
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/amplifybackend: v1.32.20
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder: v1.28.20
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/apigateway: v1.39.1
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi: v1.29.14
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/apigatewayv2: v1.34.1
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/appconfig: v1.43.13
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/appconfigdata: v1.23.22
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/appfabric: v1.16.21
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/appflow: v1.51.12
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/appintegrations: v1.37.7
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/applicationautoscaling: v1.41.14
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler: v1.27.12
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/applicationdiscoveryservice: v1.35.13
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/applicationinsights: v1.34.20
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/applicationsignals: v1.19.1
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/appmesh: v1.35.12
  • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
• github.com/aws/aws-sdk-go-v2/service/apprunner: v1.39.14
  • Bug Fix: Fix a bug where a recorde

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.