build(deps): bump taskcluster from 95.0.0 to 98.0.1 in /bot

[dependabot]

Bumps taskcluster from 95.0.0 to 98.0.1.

Release notes

Sourced from taskcluster's releases.

v98.0.1

GENERAL

▶ [patch] Upgrades to Node.js 24.14.1 [SECURITY].

DEPLOYERS

▶ [patch] #8388 The GitHub service now streams backing log artifacts instead of downloading them entirely into memory. Previously, tasks with very large logs (e.g. ~98MB) caused the status handler to crash with an out-of-memory error, leaving GitHub check runs stuck as in_progress indefinitely.

OTHER

▶ Additional change not described here: #3665.

Automated Package Updates

• build(deps): bump node-forge from 1.3.2 to 1.4.0 (f3d131fd44)
• build(deps): bump @​apollo/server from 5.4.0 to 5.5.0 (73dd22b5d7)
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /clients/client-test (6380afb674)
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /clients/client-web (2cbbc205fe)
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /ui (d01a5f2ee0)
• build(deps): bump picomatch from 2.3.1 to 2.3.2 (59c571c71b)
• build(deps): bump flatted from 3.2.5 to 3.4.2 in /ui (fd066ad684)
• build(deps): bump rustls-webpki in /clients/client-rust (7df9333c32)

v98.0.0

GENERAL

▶ [patch] Upgrades @​octokit/core (v3 to v6), @​octokit/rest (v18 to v21), and @​octokit/auth-app (v4 to v6) to resolve peer dependency warnings.

▶ [patch] Upgrades taskgraph decision image to v20.0.0

USERS

▶ [MAJOR] #6689 Breaking change: Generic Worker now evaluates absolute paths inside mounts (properties directory and file) and artifacts (property path) correctly. Previously Generic Worker would effectively strip leading path separators and treat them as relative paths inside the task directory. For example, /tmp would be resolved as the relative path tmp from inside the task directory.

Although this is technically a bug fix, it does change the behaviour of Generic

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v98.0.1

GENERAL

▶ [patch] Upgrades to Node.js 24.14.1 [SECURITY].

DEPLOYERS

▶ [patch] #8388 The GitHub service now streams backing log artifacts instead of downloading them entirely into memory. Previously, tasks with very large logs (e.g. ~98MB) caused the status handler to crash with an out-of-memory error, leaving GitHub check runs stuck as in_progress indefinitely.

OTHER

▶ Additional change not described here: #3665.

Automated Package Updates

• build(deps): bump node-forge from 1.3.2 to 1.4.0 (f3d131fd44)
• build(deps): bump @​apollo/server from 5.4.0 to 5.5.0 (73dd22b5d7)
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /clients/client-test (6380afb674)
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /clients/client-web (2cbbc205fe)
• build(deps): bump picomatch from 2.3.1 to 2.3.2 in /ui (d01a5f2ee0)
• build(deps): bump picomatch from 2.3.1 to 2.3.2 (59c571c71b)
• build(deps): bump flatted from 3.2.5 to 3.4.2 in /ui (fd066ad684)
• build(deps): bump rustls-webpki in /clients/client-rust (7df9333c32)

v98.0.0

GENERAL

▶ [patch] Upgrades @​octokit/core (v3 to v6), @​octokit/rest (v18 to v21), and @​octokit/auth-app (v4 to v6) to resolve peer dependency warnings.

▶ [patch] Upgrades taskgraph decision image to v20.0.0

USERS

▶ [MAJOR] #6689 Breaking change: Generic Worker now evaluates absolute paths inside mounts (properties directory and file) and artifacts (property path) correctly. Previously Generic Worker would effectively strip leading path separators and treat them as relative paths inside the task directory. For example, /tmp would be resolved as the relative path tmp from inside the task directory.

... (truncated)

Commits

• 9ca87da v98.0.1
• 9baa6f3 Merge pull request #8389 from taskcluster/fix-large-artifact-oom
• 56e4503 fix(github): stream backing log in extractLog to prevent OOM on large artifacts
• dbad568 Merge pull request #8401 from taskcluster/dependabot/npm_and_yarn/node-forge-...
• f3d131f build(deps): bump node-forge from 1.3.2 to 1.4.0
• 0f1a62a Merge pull request #8399 from taskcluster/dependabot/npm_and_yarn/apollo/serv...
• 73dd22b build(deps): bump @​apollo/server from 5.4.0 to 5.5.0
• c46a536 Merge pull request #8397 from taskcluster/matt-boris/reduceIntermittentTestFa...
• a5812ce fix(tests): close all server connections to prevent intermittent EADDRINUSE...
• c27a964 Merge pull request #8390 from taskcluster/matt-boris/node24.14.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)