Bump taskcluster from 90.0.3 to 90.0.5

[dependabot]

Bumps taskcluster from 90.0.3 to 90.0.5.

Release notes

Sourced from taskcluster's releases.

v90.0.5

GENERAL

▶ [patch] Upgrades to Node.js v22.20.0, go1.25.2 [SECURITY], yarn 4.10.3, and golangci-lint 4.5.0.

USERS

▶ [patch] #8004 D2G: always pulls named docker images to fetch latest tag.

Automated Package Updates

• build(deps): bump taskcluster from 88.0.5 to 90.0.4 in /taskcluster (ef55684a67)
• build(deps): bump taskcluster-taskgraph in /taskcluster (e77e96731f)
• build(deps): bump the client-rust-deps group (ef66adc8d6)
• build(deps): bump pyyaml in /taskcluster in the python-deps group (e107bc2cd5)
• build(deps): bump the go-deps group with 9 updates (a42d2e1b63)
• build(deps-dev): bump the client-web-node-deps group (a800bf4397)
• build(deps): bump the client-node-deps group (d828bb8ffd)
• build(deps): bump actions/checkout from 4 to 5 (0a6c085f71)
• build(deps): bump actions/setup-go from 5 to 6 (5b7aa019ff)

v90.0.4

USERS

▶ [patch] bug 1990389 D2G: add stderr logging if any docker commands fail within the task feature.

▶ [patch] #7974 D2G: fixes docker: invalid env file (env.list): bufio.Scanner: token too long error when providing the docker run command an --env-file that contains a line longer than 64KiB. D2G now passes the variable directly to the run command with -e <envVarName>=<envVarValue> to work around this constraint.

▶ [patch] D2G: removes exit codes 125, 128 from payload.onExitStatus.retry array, as docker pulls now happen outside of the payload being run (inside the D2G task feature startup).

Changelog

Sourced from taskcluster's changelog.

v90.0.5

GENERAL

▶ [patch] Upgrades to Node.js v22.20.0, go1.25.2 [SECURITY], yarn 4.10.3, and golangci-lint 4.5.0.

USERS

▶ [patch] #8004 D2G: always pulls named docker images to fetch latest tag.

Automated Package Updates

• build(deps): bump taskcluster from 88.0.5 to 90.0.4 in /taskcluster (ef55684a67)
• build(deps): bump taskcluster-taskgraph in /taskcluster (e77e96731f)
• build(deps): bump the client-rust-deps group (ef66adc8d6)
• build(deps): bump pyyaml in /taskcluster in the python-deps group (e107bc2cd5)
• build(deps): bump the go-deps group with 9 updates (a42d2e1b63)
• build(deps-dev): bump the client-web-node-deps group (a800bf4397)
• build(deps): bump the client-node-deps group (d828bb8ffd)
• build(deps): bump actions/checkout from 4 to 5 (0a6c085f71)
• build(deps): bump actions/setup-go from 5 to 6 (5b7aa019ff)

v90.0.4

USERS

▶ [patch] bug 1990389 D2G: add stderr logging if any docker commands fail within the task feature.

▶ [patch] #7974 D2G: fixes docker: invalid env file (env.list): bufio.Scanner: token too long error when providing the docker run command an --env-file that contains a line longer than 64KiB. D2G now passes the variable directly to the run command with -e <envVarName>=<envVarValue> to work around this constraint.

▶ [patch] D2G: removes exit codes 125, 128 from payload.onExitStatus.retry array, as docker pulls now happen outside of the payload being run (inside the D2G task feature startup).

Commits

• 6c7a9f0 v90.0.5
• 92139f9 Merge pull request #8006 from taskcluster/matt-boris/d2gBypassImageCacheForNa...
• e733492 Merge pull request #8007 from taskcluster/matt-boris/node22.20.0go1.25.2
• f32cbfc fix(tests): remove root cert that's no longer available
• 62ac28c build(deps): upgrade to node 22.20.0 and go1.25.2 [SECURITY]
• 4af811b fix(d2g): always pull named docker images
• beb8e07 Merge pull request #7987 from taskcluster/dependabot/npm_and_yarn/clients/cli...
• 052c6d5 Merge pull request #7985 from taskcluster/dependabot/npm_and_yarn/clients/cli...
• b35a625 Merge pull request #7993 from taskcluster/dependabot/pip/taskcluster/taskclus...
• 445bc53 Merge pull request #7989 from taskcluster/dependabot/go_modules/go-deps-c1635...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)