chore(deps): update all non-major dependencies #18

Merged
alex merged 1 commit from renovate/all-non-major-dependencies into master 2026-08-20 08:15:46 +00:00
Owner

This PR contains the following updates:

Package Type Update Change
docker.io/library/golang (source) stage minor 1.261.27
ghcr.io/opentofu/opentofu stage patch 1.12.5-minimal1.12.6-minimal
public.ecr.aws/aws-cli/aws-cli stage patch 2.36.242.36.27

Release Notes

opentofu/opentofu (ghcr.io/opentofu/opentofu)

v1.12.6

Compare Source

SECURITY ADVISORIES:

  • When interacting with OCI Distribution registries for module or provider package installation, earlier versions of OpenTofu could incorrectly resend credentials intended for the original origin to the target of an HTTP redirect. (#​4422)
  • When interacting with an attacker-controlled remote state backend or provider/module registry, tofu init in earlier versions of OpenTofu could potentially cause high CPU usage and/or high memory usage resolving crafted relative URLs in the API responses. (#​4472)

Full Changelog: https://github.com/opentofu/opentofu/compare/v1.12.5...v1.12.6


Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "before 5am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker.io/library/golang](https://hub.docker.com/_/golang) ([source](https://github.com/docker-library/golang)) | stage | minor | `1.26` → `1.27` | | [ghcr.io/opentofu/opentofu](https://github.com/opentofu/opentofu) | stage | patch | `1.12.5-minimal` → `1.12.6-minimal` | | public.ecr.aws/aws-cli/aws-cli | stage | patch | `2.36.24` → `2.36.27` | --- ### Release Notes <details> <summary>opentofu/opentofu (ghcr.io/opentofu/opentofu)</summary> ### [`v1.12.6`](https://github.com/opentofu/opentofu/releases/tag/v1.12.6) [Compare Source](https://github.com/opentofu/opentofu/compare/v1.12.5...v1.12.6) #### SECURITY ADVISORIES: - When interacting with OCI Distribution registries for module or provider package installation, earlier versions of OpenTofu could incorrectly resend credentials intended for the original origin to the target of an HTTP redirect. ([#&#8203;4422](https://github.com/opentofu/opentofu/pull/4422)) - When interacting with an attacker-controlled remote state backend or provider/module registry, `tofu init` in earlier versions of OpenTofu could potentially cause high CPU usage and/or high memory usage resolving crafted relative URLs in the API responses. ([#&#8203;4472](https://github.com/opentofu/opentofu/pull/4472)) **Full Changelog**: <https://github.com/opentofu/opentofu/compare/v1.12.5...v1.12.6> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "before 5am" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMC4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTAuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
alex force-pushed renovate/all-non-major-dependencies from cca7648484 to 598e320dea
All checks were successful
Build and Push image / build-and-push-1 (push) Successful in 3m34s
Build and Push image / build-and-push (push) Successful in 0s
2026-08-20 02:03:11 +00:00
Compare
alex changed title from chore(deps): update public.ecr.aws/aws-cli/aws-cli docker tag to v2.36.25 to chore(deps): update all non-major dependencies 2026-08-20 02:03:17 +00:00
alex merged commit 598e320dea into master 2026-08-20 08:15:46 +00:00
alex deleted branch renovate/all-non-major-dependencies 2026-08-20 08:15:46 +00:00
Sign in to join this conversation.
No reviewers
No labels
dependencies
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
alex/runner-image!18
No description provided.