chore(deps): update reference package support dependencies by renovate[bot] · Pull Request #7 · uds-packages/reference-package

renovate · 2026-03-10T20:53:48Z

This PR contains the following updates:

Package	Change	Type	Update
@playwright/test (source)	`1.57.0` → `1.59.1`	devDependencies	minor
@types/node (source)	`24.10.9` → `24.12.2`	devDependencies	minor
actions/checkout	`v6.0.1` → `v6.0.2`	action	patch
azure/setup-helm	`v4.3.1` → `v5`	action	major
defenseunicorns/uds-cli	`v0.27.21` → `v0.30.3`		minor
defenseunicorns/uds-common	`v1.24.2` → `v1.24.5`		patch
defenseunicorns/uds-common	`v1.24.2` → `v1.24.5`	action	patch
docker/setup-buildx-action	`v3.12.0` → `v4`	action	major
docker/setup-qemu-action	`v3.7.0` → `v4`	action	major
mcr.microsoft.com/playwright	`v1.57.0` → `v1.59.1`		minor
oras-project/oras	`1.3.0` → `1.3.2`		patch
oras-project/setup-oras	`v1.2.4` → `v2`	action	major
typescript (source)	`^5.4.5` → `^6.0.0`	devDependencies	major

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

microsoft/playwright (@playwright/test)

Highlights

#39036 fix(msedge): fix local network permissions
#39037 chore: update cft download location
#38995 chore(webkit): disable frame sessions on fronzen builds

Browser Versions

Chromium 145.0.7632.6
Mozilla Firefox 146.0.1
WebKit 26.0

`v1.58.0`

Compare Source

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

azure/setup-helm (azure/setup-helm)

`v5`

Compare Source

`v5.0.0`

Compare Source

Changed

defenseunicorns/uds-cli (defenseunicorns/uds-cli)

`v0.30.3`

Compare Source

What's Changed

chore(deps): update test-dependencies to v6.11.2 by @renovate[bot] in #1367
chore(deps): update github-actions by @renovate[bot] in #1366
chore(deps): update github actions to v4.35.2 by @renovate[bot] in #1370
chore(deps): update github-actions (major) by @renovate[bot] in #1346
fix(deps): update go-dependencies by @renovate[bot] in #1297

Full Changelog: defenseunicorns/uds-cli@v0.30.2...v0.30.3

`v0.30.2`

Compare Source

What's Changed

fix(deps): update zarf to v0.74.2 by @emoskito in #1369

Full Changelog: defenseunicorns/uds-cli@v0.30.1...v0.30.2

`v0.30.1`

Compare Source

What's Changed

chore(docs): align index landing page with core by @chance-coleman in #1357
chore: set SSA field manager on helm v4 kube package (instead of v3) to match Zarf by @emoskito in #1358
chore(deps): update github-actions by @renovate[bot] in #1359
fix: add docs shim by @chance-coleman in #1354
chore(docs): update landing page to be consistent with core by @chance-coleman in #1361
fix(docs): llm friendly docs by @chance-coleman in #1360
fix(deps): update go-dependencies by @emoskito in #1362
fix: migrate helm v3 -> v4 by @emoskito in #1363
fix(deps): update zarf to v0.74.1 by @renovate[bot] in #1364

Full Changelog: defenseunicorns/uds-cli@v0.30.0...v0.30.1

`v0.30.0`

Compare Source

What's Changed

chore(docs): add docs.config.json file by @chance-coleman in #1347
chore(docs): fix broken link by @chance-coleman in #1348
chore(docs): create cli docs and remove old docs and their generation by @chance-coleman in #1349
chore(docs): address documentation feedback and cleanup by @chance-coleman in #1351
chore: update dev-docs to support hot-reloading by @mjnagel in #1352
chore(docs): remove css from index.mdx file by @chance-coleman in #1353
feat!: update zarf v0.74.0 with new --force-conflicts deploy argument by @emoskito in #1356
chore(deps): update github-actions by @renovate[bot] in #1343
chore(deps): update test-dependencies to v6.11.1 by @renovate[bot] in #1344

Full Changelog: defenseunicorns/uds-cli@v0.29.0...v0.30.0

`v0.29.0`

Compare Source

What's Changed

feat: redeploy failed or incomplete packages with --resume by @Racer159 in #1341
feat: added timeout override for zarf package deployments by @JoshuaFurman in #1337
chore(deps): update github-actions by @renovate[bot] in #1340
chore(deps): update github actions to v4 by @renovate[bot] in #1342

New Contributors

@JoshuaFurman made their first contribution in #1337

Full Changelog: defenseunicorns/uds-cli@v0.28.4...v0.29.0

`v0.28.4`

Compare Source

What's Changed

chore: bump to go 1.25.7 by @mjnagel in #1336
fix(deps): update zarf to v0.73.1 by @renovate[bot] in #1339
chore(deps): update github-actions (major) by @renovate[bot] in #1328
chore(deps): update github-actions by @renovate[bot] in #1331
chore(deps): update test-dependencies to v6.10.2 by @renovate[bot] in #1335

Full Changelog: defenseunicorns/uds-cli@v0.28.3...v0.28.4

`v0.28.3`

Compare Source

What's Changed

chore(deps): update github-actions by @renovate[bot] in #1322
feat(oci): report progress for OCI pull operations by @brandtkeller in #1321
chore(deps): update github-actions by @renovate[bot] in #1323
fix(deps): update zarf to v0.72.0 by @renovate[bot] in #1324
chore(deps): update github-actions by @renovate[bot] in #1325
fix(zarf): return error from Execute by @AustinAbro321 in #1326
fix(registryinfo): set registry mode to empty by default by @brandtkeller in #1330

Full Changelog: defenseunicorns/uds-cli@v0.28.2...v0.28.3

`v0.28.2`

Compare Source

What's Changed

fix: cleanup zarf --no-progress deprecation by @chance-coleman in #1315
feat: adding method to expose package list in bundle by @nicleary in #1314
chore(deps): update github-actions by @renovate[bot] in #1316
fix: help text for output flag by @mjnagel in #1317
fix(fetcher): remove filter for runtime.GOOS by @brandtkeller in #1319

New Contributors

@nicleary made their first contribution in #1314

Full Changelog: defenseunicorns/uds-cli@v0.28.1...v0.28.2

`v0.28.1`

Compare Source

What's Changed

chore(deps): update Zarf to v0.71.1 by @AustinAbro321 in #1312

Full Changelog: defenseunicorns/uds-cli@v0.28.0...v0.28.1

`v0.28.0`

Compare Source

What's Changed

fix(release): add ldflags to the release process by @brandtkeller in #1273
feat(verify): deprecate --skip-signature-validation for --verify by @brandtkeller in #1281
chore(deps): update github-actions by @renovate[bot] in #1280
fix(docs): typo in bundle overrides ref by @daniel-s-palmer in #1283
chore: update codeowners by @mjnagel in #1288
chore(deps): update github-actions by @renovate[bot] in #1282
chore: rename --verify arg to --verify-packages by @emoskito in #1285
chore: pin anchore/grype module version to v0.104.1 by @emoskito in #1296
fix(inspect): update inspect logic to handle public key by @brandtkeller in #1289
fix(ci): remove apply of unneeded dev manifest during engine-e2e test by @jasonwashburn in #1303
fix(deps): update zarf to 0.70.1 by @AustinAbro321 in #1299
chore(deps): update github-actions by @renovate[bot] in #1295
fix: restore pepr monitor functionality in uds core 0.59.0+ by @jasonwashburn in #1302
chore(deps): update github actions to v3.7.0 by @renovate[bot] in #1304
chore: revert to using --skip-signature-validation instead of --verify-packages by @emoskito in #1305
fix: ensure package verification on inspect of built bundles by @mjnagel in #1300
chore(deps): update github actions to v4.32.1 by @renovate[bot] in #1309
chore(deps): update test-dependencies to v6.10.0 by @renovate[bot] in #1308
chore(deps): update github-actions (major) by @renovate[bot] in #1264
chore(deps): update test-dependencies to v6.10.1 by @renovate[bot] in #1311
fix(create): verify package signature for remote packages by @emoskito in #1310
feat(list): add support for uds list command by @brandtkeller in #1276

New Contributors

@daniel-s-palmer made their first contribution in #1283
@jasonwashburn made their first contribution in #1303

Full Changelog: defenseunicorns/uds-cli@v0.27.21...v0.28.0

defenseunicorns/uds-common (defenseunicorns/uds-common)

`v1.24.5`

Compare Source

Bug Fixes

handle v prefix in tags for test-upgrade (#649) (b074243)
remove prCreation from common renovate config (#647) (681baac)

Miscellaneous

add our defenseunicorns org prefix for npm (#641) (e4b9cf0)
deps: update uds common foundation dependencies (#643) (abcefcf)
deps: update uds common package dependencies (#644) (1371aa8)
deps: update uds common support dependencies (#646) (d3ae37b)

`v1.24.4`

Compare Source

Bug Fixes

ci: proper github env setup for maru auth (#642) (0f28072)

Miscellaneous

add a minimum release age to common renovate (#639) (ac85223)
deps: update uds common support dependencies (#630) (2e3c999)
downgrade oras cli dep (#645) (31a0fce)

`v1.24.3`

Compare Source

Bug Fixes

match tf files in renovate (#635) (651417c)
renovate on bundles (#632) (4bcc9f3)

Miscellaneous

add banner redirect for docs (#637) (2b10358)
allow task file globs to be configured in shell lint (#628) (a28169d)
ci: fix releaser version for unicorn common test (#638) (ba58701)
deps: update uds common foundation dependencies (#631) (092c5f1)
deps: update uds common package dependencies (#634) (38a1691)

docker/setup-buildx-action (docker/setup-buildx-action)

`v4`

Compare Source

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #483
Remove deprecated inputs/outputs by @crazy-max in #464
Switch to ESM and update config/test wiring by @crazy-max in #481
Bump @actions/core from 1.11.1 to 3.0.0 in #475
Bump @docker/actions-toolkit from 0.63.0 to 0.79.0 in #482 #485
Bump js-yaml from 4.1.0 to 4.1.1 in #452
Bump lodash from 4.17.21 to 4.17.23 in #472
Bump minimatch from 3.1.2 to 3.1.5 in #480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

docker/setup-qemu-action (docker/setup-qemu-action)

`v4`

Compare Source

`v4.0.0`

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #245
Switch to ESM and update config/test wiring by @crazy-max in #241
Bump @actions/core from 1.11.1 to 3.0.0 in #244
Bump @docker/actions-toolkit from 0.67.0 to 0.77.0 in #243
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #240
Bump js-yaml from 3.14.1 to 3.14.2 in #231
Bump lodash from 4.17.21 to 4.17.23 in #238

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

oras-project/oras (oras-project/oras)

`v1.3.2`

Compare Source

Changelog

Upgrade Go snap to 1.26 in snapcraft.yaml (#2011)
Bump alpine base image from 3.22.1 → 3.22.3 (#2014)
Bump Go to 1.26.2, patching Go CVEs from 1.26.1 (#2026)

Verification

All release artifacts are signed with GPG key E462A3894CBAAA47. Signatures (.asc files) are attached to this release.

Public keys are available in the KEYS file.

`v1.3.1`

Compare Source

Bug Fixes

Fix #1903: oras cp should not mount if source and destination credentials are different
Fix #1872: allow setting org.opencontainers.image.title in annotation file

Other Changes

Upgrade to Go 1.26
Update dependencies

What's Changed

fix: cp should not mount if src and dst credentials are different by @wangxiaoxuan273 in #1903
fix: allow setting org.opencontainers.image.title in annotation file by @rafaelgieschke in #1872
build(deps): cherry-pick Go 1.25.7 bump to release-1.3 by @TerryHowe in #1990
build(deps): cherry-pick golang.org/x/crypto bump to release-1.3 by @TerryHowe in #1994
chore: bump Go to 1.26 by @TerryHowe in #2001

Full Changelog: oras-project/oras@v1.3.0...v1.3.1

Notes

This release was signed with 2DA4 61D1 3B0C 2784 5EDF A77F E462 A389 4CBA AA47 (@TerryHowe's GPG key) which can be found here.

oras-project/setup-oras (oras-project/setup-oras)

`v2`

Compare Source

`v2.0`

Compare Source

`v2.0.0`

Compare Source

Highlights

Support ORAS CLI v1.3.1
Migrate action runtime from node20 to node24 (#153)
Pin undici to >=6.24.1 to address 5 CVEs: GHSA-f269-vfmq-vjvj, GHSA-2mjp-6q6p-2qxm, GHSA-vrm6-8vpv-qv8q, GHSA-v9p9-hfj2-hcw8, GHSA-4992-7rv2-5pvq
Bump @actions/core from ^2.x to ^3.0.0 (ESM-only)
Bump @actions/tool-cache from ^3.x to ^4.0.0 (ESM-only)
Replace @vercel/ncc with esbuild as the build bundler

What's Changed

Add version 1.3.1 with checksums (#150)
feat: migrate action runtime from node20 to node24 (#153)
fix: pin undici to >=6.24.1 to address CVEs (#157)
chore(deps): bump @actions/core to 3.x and @actions/tool-cache to 4.x (#159)
chore(deps): Bump @actions/core from 1.11.1 to 2.0.1 (#130)
chore(deps): Bump typescript from 5.9.2 to 6.0.2 (#151)
chore(deps): Bump actions/checkout from 5 to 6 (#128)
chore(deps): Bump actions/setup-node from 5 to 6 (#123)
chore(deps): Bump @types/node from 24.12.0 to 25.5.2 (multiple PRs)

Full Changelog: oras-project/setup-oras@v1.2.4...v2.0.0

microsoft/TypeScript (typescript)

`v6.0.3`

Compare Source

`v6.0.2`

Compare Source

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- "after 7am and before 9am every weekday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource | package | from | to | | ----------- | ---------------------------- | -------- | ------- | | npm | @playwright/test | 1.57.0 | 1.59.1 | | npm | @types/node | 24.10.9 | 24.12.2 | | github-tags | actions/checkout | v6.0.1 | v6.0.2 | | github-tags | azure/setup-helm | v4.3.1 | v5 | | github-tags | defenseunicorns/uds-cli | v0.27.21 | v0.30.3 | | github-tags | defenseunicorns/uds-common | v1.24.2 | v1.24.5 | | github-tags | docker/setup-buildx-action | v3.12.0 | v4 | | github-tags | docker/setup-qemu-action | v3.7.0 | v4 | | docker | mcr.microsoft.com/playwright | v1.57.0 | v1.59.1 | | github-tags | oras-project/oras | v1.3.0 | v1.3.2 | | github-tags | oras-project/setup-oras | v1.2.4 | v2 | | npm | typescript | 5.9.3 | 6.0.3 |

renovate · 2026-04-24T20:07:13Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate Bot added the support-deps label Mar 10, 2026

renovate Bot force-pushed the renovate/reference-package-support-dependencies branch from 48a6521 to 1d9de1f Compare March 13, 2026 17:58

renovate Bot force-pushed the renovate/reference-package-support-dependencies branch 3 times, most recently from b23ea7c to 52e308e Compare April 3, 2026 14:33

renovate Bot force-pushed the renovate/reference-package-support-dependencies branch 2 times, most recently from 4c34fc1 to 84bbc12 Compare April 19, 2026 06:15

renovate Bot force-pushed the renovate/reference-package-support-dependencies branch from 84bbc12 to e77341e Compare April 24, 2026 16:03

Merge branch 'main' into renovate/reference-package-support-dependencies

2de1ccb

Merge branch 'main' into renovate/reference-package-support-dependencies

ac60138

codyshoffner approved these changes Apr 27, 2026

View reviewed changes

codyshoffner merged commit a4f7893 into main Apr 27, 2026
12 checks passed

codyshoffner deleted the renovate/reference-package-support-dependencies branch April 27, 2026 15:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update reference package support dependencies#7

chore(deps): update reference package support dependencies#7
codyshoffner merged 3 commits into
mainfrom
renovate/reference-package-support-dependencies

renovate Bot commented Mar 10, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Apr 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Mar 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Highlights

Browser Versions

Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

Bug Fixes

Miscellaneous

Bug Fixes

Miscellaneous

Bug Fixes

Miscellaneous

Changelog

Verification

Bug Fixes

Other Changes

What's Changed

Notes

Highlights

What's Changed

Configuration

Uh oh!

renovate Bot commented Apr 24, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Mar 10, 2026 •

edited

Loading