chore(deps): bump taskcluster from 105.0.0 to 107.0.0

[dependabot]

Bumps taskcluster from 105.0.0 to 107.0.0.

Release notes

Sourced from taskcluster's releases.

v107.0.0

GENERAL

▶ [patch] Upgrades to go1.27.0 and golangci-lint v2.13.1.

Release notes here.

WORKER-DEPLOYERS

▶ [patch] bug 2062170 Pass taskcluster proxy credentials through environment variables instead of named parameters

USERS

▶ [MAJOR] Removed all mentions of the unused queue actions feature.

The actions property is removed from the responses of queue.listProvisioners, queue.getProvisioner, queue.getWorkerType, queue.getWorker, and workerManager.worker, from the corresponding GraphQL types, and from the web UI.

▶ [MAJOR] bug 2062161 Removed the deprecated queue.declareProvisioner and queue.declareWorkerType methods.

▶ [patch] Fixed unsafe handling of inherited JavaScript properties when rendering .taskcluster.yml files through v0 parameters and v1 as_slugid() labels.

▶ [patch] bug 2065461 Prevent the notify service from fetching files and remote URLs referenced in the content of the emails it sends. This also stops the plain text part of those emails from being mangled by the HTML processing.

▶ [patch] bug 2062161 queue.declareWorker now returns a 400 instead of a 500 when passed an empty body

DEVELOPERS

▶ [patch] #8981 UI Clients page switches from GraphQL to direct service calls

▶ [patch] Upgrades to yarn 4.18.0

v106.0.0

USERS

▶ [MAJOR] bug 2064901

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v107.0.0

GENERAL

▶ [patch] Upgrades to go1.27.0 and golangci-lint v2.13.1.

Release notes here.

WORKER-DEPLOYERS

▶ [patch] bug 2062170 Pass taskcluster proxy credentials through environment variables instead of named parameters

USERS

▶ [MAJOR] Removed all mentions of the unused queue actions feature.

The actions property is removed from the responses of queue.listProvisioners, queue.getProvisioner, queue.getWorkerType, queue.getWorker, and workerManager.worker, from the corresponding GraphQL types, and from the web UI.

▶ [MAJOR] bug 2062161 Removed the deprecated queue.declareProvisioner and queue.declareWorkerType methods.

▶ [patch] Fixed unsafe handling of inherited JavaScript properties when rendering .taskcluster.yml files through v0 parameters and v1 as_slugid() labels.

▶ [patch] bug 2065461 Prevent the notify service from fetching files and remote URLs referenced in the content of the emails it sends. This also stops the plain text part of those emails from being mangled by the HTML processing.

▶ [patch] bug 2062161 queue.declareWorker now returns a 400 instead of a 500 when passed an empty body

DEVELOPERS

▶ [patch] #8981 UI Clients page switches from GraphQL to direct service calls

▶ [patch] Upgrades to yarn 4.18.0

v106.0.0

USERS

... (truncated)

Commits

• 6b2f6f6 v107.0.0
• 9d59eb5 Merge pull request #9043 from Eijebong/i-hate-emails
• 99b4e09 Merge pull request #9044 from Eijebong/proxy-through-env
• 9bae634 Bug 2062170 - Pass proxy credentials from the worker through environment vari...
• a8138a8 Bug 2065461 - Stop rendering emails through juice's resource inliner
• fb35bd7 Merge pull request #9041 from taskcluster/matt-boris/go1.27yarn4.18
• c53c32c feat(github): fix unsafe handling in as_slugid helper (#9042)
• cca7b51 Merge pull request #9040 from Eijebong/drop-queue-actions
• a7601f9 Remove the concept of queue actions
• 8a9695b Merge pull request #9039 from Eijebong/fix-queue-declare
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.55%. Comparing base (6b780c6) to head (1b01b4b).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #19   +/-   ##
=======================================
  Coverage   78.55%   78.55%           
=======================================
  Files          27       27           
  Lines        5054     5054           
=======================================
  Hits         3970     3970           
  Misses       1084     1084           

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6b780c6...1b01b4b. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.