chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/docker/docker	v28.4.0+incompatible -> v28.5.0+incompatible			require	minor
github.com/go-playground/validator/v10	v10.27.0 -> v10.28.0			require	minor
go (source)	1.25.1 -> 1.25.2			golang	patch
go	^1.25.1 -> ^1.25.2			uses-with	patch
golang.org/x/net	v0.44.0 -> v0.45.0			require	minor
google.golang.org/grpc	v1.75.1 -> v1.76.0			require	minor
less (source)	^4.4.1 -> ^4.4.2			devDependencies	patch
marked (source)	^16.3.0 -> ^16.4.0			dependencies	minor
pnpm (source)	10.17.1+sha512.17c560fca4867ae9473a3899ad84a88334914f379be46d455cbf92e5cf4b39d34985d452d2583baf19967fa76cb5c17bc9e245529d0b98745721aa7200ecaf7a -> 10.18.1			packageManager	minor
python	3.13.7 -> 3.14.0			uses-with	minor
vue-tsc (source)	^3.1.0 -> ^3.1.1			devDependencies	patch

---

Release Notes

docker/docker (github.com/docker/docker)

v28.5.0+incompatible

Compare Source

go-playground/validator (github.com/go-playground/validator/v10)

v10.28.0: Release 10.28.0

Compare Source

What's Changed

• Update workflow.yml to support 2 most recent major versions by @​nodivbyzero in #​1417
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​1456
• Go 1.25 support by @​nodivbyzero in #​1459
• Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 by @​dependabot[bot] in #​1463
• Bump golang.org/x/text from 0.22.0 to 0.29.0 by @​dependabot[bot] in #​1464
• Bump actions/setup-go from 5 to 6 by @​dependabot[bot] in #​1465
• Bump golang.org/x/crypto from 0.33.0 to 0.42.0 by @​dependabot[bot] in #​1467
• fix: should panic when define duplicate field param in required_if by @​duyquang6 in #​1468
• Fixed missing keys from returned errors in map validation by @​gelozr in #​1284
• Added https_url tag by @​ahmedkamalio in #​1461
• docs: add description for 'port' validator by @​nodivbyzero in #​1435
• Add alphaspace validator by @​takaaa220 in #​1343

New Contributors

• @​duyquang6 made their first contribution in #​1468
• @​gelozr made their first contribution in #​1284
• @​ahmedkamalio made their first contribution in #​1461
• @​takaaa220 made their first contribution in #​1343

Full Changelog: go-playground/validator@v10.27.0...v10.28.0

golang/go (go)

v1.25.2

actions/go-versions (go)

v1.25.2: 1.25.2

Compare Source

Go 1.25.2

grpc/grpc-go (google.golang.org/grpc)

v1.76.0: Release 1.76.0

Compare Source

Dependencies

• Minimum supported Go version is now 1.24 (#​8509)
  • Special Thanks: @​kevinGC

Bug Fixes

• client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#​8523)
• client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#​8518)
  • Special Thanks: @​vinothkumarr227
• pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#​8615)

New Features

• credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#​8431)
  • Special Thanks: @​dimpavloff

Performance Improvements

• client: Improve HTTP/2 header size estimate to reduce re-allocations. (#​8547)
• encoding/proto: Avoid redundant message size calculation when marshaling. (#​8569)
  • Special Thanks: @​rs-unity

markedjs/marked (marked)

v16.4.0

Compare Source

pnpm/pnpm (pnpm)

v10.18.1

Compare Source

Patch Changes

• Don't print a warning, when --lockfile-only is used #​8320.
• pnpm setup creates a command shim to the pnpm executable. This is needed to be able to run pnpm self-update on Windows #​5700.
• When using pnpm catalogs and running a normal pnpm install, pnpm produced false positive warnings for "skip adding to the default catalog because it already exists". This warning now only prints when using pnpm add --save-catalog as originally intended.

v10.18.0

Compare Source

Minor Changes

• Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

  Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
  Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

  Related PR: #​10025.

Patch Changes

• Retry filesystem operations on EAGAIN errors #​9959.
• Outdated command respects minimumReleaseAge configuration #​10030.
• Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
• Don't fail with a meaningless error when scriptShell is set to false #​8748.
• pnpm dlx should not fail when minimumReleaseAge is set #​10037.

actions/python-versions (python)

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

v3.13.8: 3.13.8

Compare Source

Python 3.13.8

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.