Skip to content

chore(deps): update build tools - #429

Merged
fcomte merged 1 commit into
mainfrom
renovate/build-tools
Oct 16, 2026
Merged

fcomte merged 1 commit into
mainfrom
renovate/build-tools

Conversation

@renovate

@renovate renovate Bot commented Oct 11, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
JuliaLang/julia build-tool patch 1.13.1 → 1.13.2
anomalyco/opencode build-tool minor 1.18.34 → 1.19.3
aws/aws-cli build-tool minor 2.37.9 → 2.38.1
coder/code-server build-tool minor 4.140.0 → 4.141.0
helm/helm build-tool patch 4.3.0 → 4.3.1
quarto-dev/quarto-cli build-tool patch 1.10.18 → 1.10.19

Release Notes

JuliaLang/julia

v1.13.2

Compare Source

Full change log: JuliaLang/julia@v1.13.1...v1.13.2

anomalyco/opencode

v1.19.3

Compare Source

Core

Improvements
  • Configure model reasoning options to generate reasoning variants, replacing catalog variants while preserving your configured variant overrides.

v1.19.2

Compare Source

Core

Bugfixes
  • OpenCode 1 now stays on the 1.x release line: update checks use only the npm opencode-ai latest version, so 1.x installs are never offered a 2.x build as a regular update.
  • Upgrading to OpenCode 2 remains a separate, explicit choice through the 2.0 offer in /update or opencode upgrade --major.
  • Fix upgrades for installs managed by yarn.
  • Skip 1.x updates for Homebrew Core installs, which now track OpenCode 2, and check tap and Chocolatey availability before offering an update.
  • The install script refuses to install 2.x versions.

v1.19.1

Compare Source

Core

Bugfixes
  • Session sharing has been discontinued. Existing share links and session-sharing commands are no longer available, and importing sessions from share URLs is unsupported.

v1.19.0

Compare Source

Core

Improvements
  • Run opencode upgrade --major to upgrade to OpenCode 2.
Bugfixes
  • Allow the OpenAI ultrafast service tier.
  • Validate PTY connection origins and tickets before checking whether a PTY exists.

TUI

Improvements
  • Use /update to install OpenCode updates or upgrade to OpenCode 2; updates are no longer installed automatically.

Thank you to 1 community contributor:

  • @​dc85:
    • docs(web): add Exo Free to Zen docs (#​53622)
    • fix(stats): attribute exo usage to an unknown provider (#​53621)
    • docs(web): remove Fledge Alpha Free from Zen docs (#​53984)

v1.18.35

Compare Source

Core

Improvements
  • Added canonical redirects and JSON and Markdown data formats for agent-readable stats.
Bugfixes
  • xAI tool results now include supported images, while unsupported image formats are skipped. (@​Jaaneek)

Thank you to 3 community contributors:

aws/aws-cli

v2.38.1

Compare Source

======

  • api-change:organizations: With dual-stack enabled, all requests now resolve to the endpoint in the partition's primary Region (for example, organizations.us-east-1.api.aws) and are signed for that Region. Previously, requests from other Regions resolved to a nonexistent endpoint. No API changes.
  • api-change:dynamodbstreams: Add support for a new iterator type (AT TIMESTAMP) for DynamoDB Streams GetShardIterator API that allows reading from a specific point in time from the stream.
  • api-change:arc-region-switch: Features - Adds support for an optional payload to invoke the Lambda function with as part of the Custom action Lambda execution block
  • api-change:guardduty: Releasing support for Custom Detection Rule Runtime Monitoring
  • api-change:ec2: Adds T8i instance sizes to the InstanceType enum. T8i instances are low-cost burstable instances powered by custom sixth generation Intel Xeon 6 processors, available exclusively on AWS, and built on the latest sixth generation AWS Nitro cards
  • api-change:meteringmarketplace: Documentation update - added a Get started pointer to the AWS Marketplace AI Metering Agent Skill in the BatchMeterUsage API reference. No API or behavior change.
  • api-change:imagebuilder: This release adds parentInstance to infrastructure configurations, so builds can use an already-running instance from an Amazon EC2 Auto Scaling group. It also adds terminateInstanceOnCompletion, which keeps build and test instances running after image creation ends.
  • api-change:bedrock-agentcore-control: This release supports scoping Amazon Bedrock AgentCore Gateway rate limits by request header or request body field.
  • bugfix:HTTP: Fixes regression where Content-Length validation is moved back to botocore from urllib3. This re-enables functionality that depends on botocore's validation, such as resilient streaming from S3 to stdout in the case of an IncompleteRead.
  • api-change:transfer: AWS Transfer Family now lets you store SFTP server host keys in AWS Secrets Manager in your own AWS account. This gives you greater control over your server identity and helps simplify server migrations and failover.
  • api-change:lambda: AWS Lambda now supports an optional X-Ray trace header for chained invocations in durable executions, enabling child invocations to be linked to the initiating span.
  • api-change:cloudfront: This release adds a new "IpAddressType" field to "VPCOriginEndpointConfig", allowing customers to specify whether their VPC origin accepts IPv4-only or dualstack connections.

v2.38.0

Compare Source

======

  • api-change:omics: With Expanded container registry support, you can use container images from registries such as Seqera (Wave), NVIDIA NGC, and Google Artifact Registry with AWS HealthOmics private workflows, without manually migrating images into Amazon ECR or editing your workflow definitions.
  • api-change:appstream: Adds support for administrators to require users to re-authenticate OneDrive and Google Drive storage connectors when a streaming session is reused.
  • api-change:agent-registry-control: AWS Agent Registry is improving recently launched custom metadata schema feature to make shared attributes easier to manage.
  • api-change:resiliencehubv2: Adds support for DevOpsAgent integration where users can specify the agent space ARN at service level and launch investigations directly from Resilience Hub v2.
  • bugfix:crt: Disable TLS in CRT client when resolved endpoint scheme is http. Fixes #&#8203;10748 <https://github.com/aws/aws-cli/issues/10748>__
  • api-change:arc-region-switch: Adds support for SSM Execution Block in Region switch plans
  • api-change:glue: Amazon Glue releasing support for adding custom namespace for S3 Tables in Glue zero-ETL integration
  • api-change:lambda-web: Documentation update to include common use cases.
  • feature:crt: Enable the CRT S3 transfer client by default on all hosts.
  • api-change:sagemaker: Adds Amazon Athena, Cleanup, ForEach, and Amazon EMR Serverless step metadata, ForEach iteration context, and the CompletedWithFailures execution status to SageMaker Pipelines.
  • api-change:gamelift: Adds support for new instance types in the C8a, C8i, C9g, M8a, M8i, and M9g families for managed EC2 and container fleets
  • api-change:securityhub: Adds and updates APIs to support criticality. This feature allows customers to create automation rules to assign criticality to resources matching a criteria. With this release, resources and exposure findings will include the criticality.
  • api-change:connect: New APIs to support aliases and versions for ContactFlow.
  • api-change:datasync: AWS DataSync Enhanced mode now supports FSx for OpenZFS, NFS 4.2, and object metadata controls
  • api-change:lakeformation: Added new LakeFormation APIs and documentation updates for Simple Row-level Security (RLS).
  • api-change:appintegrations: This release adds the Connect JWT authentication type and the AudienceOverride field to AuthConfig, letting A2A server applications authenticate with JWTs issued by Amazon Connect.
  • bugfix:s3: Fixes a race condition where CreateSession is called multiple times across different threads during an S3-Express recursive upload/download.
  • api-change:route53domains: Route 53 Domains now supports premium domains. This release adds consent objects to operations on premium domains and a new GetDomainPrices API. Also, the Flags and PublicKey fields were deprecated from the DnssecKey response.
  • enhancement:configure: Add region autocomplete to the aws configure region prompt when run in an interactive terminal.

v2.37.13

Compare Source

=======

  • api-change:glue: Adds new AWS Glue Data Quality APIs to retrieve and list data quality evaluation results. The new GetDataQualityResultV2, BatchGetDataQualityResultV2, and ListDataQualityResultsV2 operations return data quality results published from any supported data processing engine.
  • api-change:devops-agent: Adds support for the includedData field in GetAgentSpace and ListAgentSpaces APIs
  • api-change:bedrock-agentcore-control: AgentCore Memory now supports configuring Long-Term Memory Time-to-Live (TTL) on Memory Strategies.
  • enhancement:lambda-web: Added aws lambda-web deploy to create or update an AWS Lambda Web Function from a local HTTP application.
  • api-change:sagemaker: Amazon SageMaker Training Session is a managed service for training on shared GPU infrastructure. It provides full lifecycle management of training sessions and exposes low-level primitive APIs for operations like forward-backward passes, optimizer steps, and state management.
  • api-change:cloudwatchomni: Adds support for updating agentCoreEvaluationRoleArn in UpdateSpace API
  • api-change:sagemakertrainingsessionruntime: Amazon SageMaker Training Session Runtime provides APIs for executing operations within active training sessions, including asynchronous training operations, sampling and inference requests, and streaming real-time model responses, enabling programmatic control over the training loop.
  • api-change:observabilityadmin: Adding support for TransactionSearch telemetry rules.
  • api-change:pcs: Adding scheduler version to RegisterComputeNodeGroup API. A compute node uses this value to run the matching scheduler version.
  • api-change:mediaconnect: This release adds support for MediaConnect Router high-bitrate tiers. It also adds a configurable audio reference level for NDI flows, and enhanced source metadata that includes color information and transport stream ID.
  • api-change:lambda: Doc updates to reposition Lambda Functions as Lambda Event Functions
  • api-change:securityagent: Adds support for Jira integration provider in AWS Security Agent.
  • api-change:pinpoint-sms-voice-v2: DescribePhoneNumbers and DescribeSenderIds now return an optional PricingTier field that indicates whether a phone number, sender ID, short code, or long code is classified as Domestic or International, enabling customers to identify origination identities eligible for local pricing.
  • api-change:bedrock-agentcore: AgentCore Memory now supports Long-Term Memory Time-to-Live on Batch APIs.
  • api-change:lambda-core: Lambda Network Connector now supports Lambda Web Functions, letting them reach private VPC resources, and adds versioning, each connector update creates an immutable version that revisions pin to, so customers can roll out and roll back networking changes without affecting running workloads
  • api-change:lambda-web: Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends
  • api-change:omics: AWS HealthOmics now supports private workflow runs using VPC resources shared across accounts via AWS RAM. A new optional vpcOwnerAccountId field in CreateConfiguration's VpcConfig allows customers to specify the account that owns the shared subnets and security groups.

v2.37.12

Compare Source

=======

  • api-change:securityagent: Adds a test scope field to specify whether a pentest targets a web application or a generative AI application.
  • api-change:meteringmarketplace: AWS Marketplace Metering Service adds AgreementId to ResolveCustomer API response.
  • api-change:mediatailor: Add caching settings to http functions
  • api-change:deadline: The new ListMemberships API enables users to discover their memberships across Deadline Cloud resources, enabling scoped users of Deadline resources to discover and interact with the resources they have been provided scoped access to.
  • api-change:quicksight: Adds granular custom permissions for the Gong action connector (GongAction, CreateAndUpdateGongAction, ShareGongAction, UseGongAction) and for create, update, and share operations on 45 data source connectors, such as Amazon S3 and Snowflake, through the Custom Permissions APIs.

v2.37.11

Compare Source

=======

  • api-change:cloudformation: CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback.
  • api-change:ce: Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature.
  • api-change:securityhub: Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket.
  • api-change:guardduty: Added support for GuardDuty RDS Data Activity Monitoring
  • api-change:devops-agent: Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC.
  • api-change:translate: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
  • api-change:marketplace-agreement: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
  • api-change:medialive: AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates.
  • api-change:glue: Introduced GetSystemLogsForJobRun and GetSystemLogsForSession APIs, enabling account admins to retrieve system-space logs for FGAC-enabled Glue jobs and sessions.
  • api-change:gamelift: Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance.
  • api-change:eks: Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration.
  • api-change:emr-serverless: This release adds support for system profile logs for lakeformation enabled Spark connect sessions .
  • api-change:securityagent: Include model field for suggested remediation steps as part of findings
  • api-change:security-ir: Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership.
  • api-change:opensearch: This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains.
  • api-change:sesv2: SESV2 DEED - Documentation Update
  • api-change:keyspaces: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
  • bugfix:md5: Fix the CLI failing at startup on systems where Python's hashlib has no MD5 support, such as FIPS-hardened builds.
  • api-change:budgets: Adds a product attribute dimension to CreateBudget and UpdateBudget, letting customers filter AWS Budgets costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature.
  • api-change:codeconnections: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol.
  • api-change:lambda: AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry.
  • api-change:datazone: Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook.
  • api-change:pi: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
  • api-change:health: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.
  • enhancement:crt: Enable the CRT S3 transfer client by default on the following EC2 instance families - t4g, t3a, t3, t2, and any other instance families that have not been previously enabled by default. This also includes all EC2 instance families that will be released in the future.
  • api-change:fms: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol.

v2.37.10

Compare Source

=======

  • api-change:lambda-web: Removes operations that are not yet generally available from the Lambda Web.
  • bugfix:lambda-web: Remove operations that are not yet generally available.
coder/code-server

v4.141.0

Compare Source

Code v1.141.0

Added
  • A new --enable-remote-storage flag can be used to make code-server persist
    workbench storage on the remote server instead of browser storage. Use this if
    you want to share storage between multiple devices.
Fixed
  • The Typescript extension was trying to load as a browser extension even though
    we build the remote server version, causing it to fail to activate.
Changed
  • Update to Code 1.141.0
helm/helm

v4.3.1: Helm v4.3.1

Compare Source

Helm v4.3.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Installation and Upgrading

Download Helm v4.3.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.2 and 3.22.2 are the next patch releases scheduled for November 11, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)

Changelog

  • chore(deps): bump otlploghttp and stdoutlog to v0.21.0 c0d08d0 (Terry Howe)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates 0c0146e (dependabot[bot])
  • fix: bump golang.org/x/net to v0.61.0 (#​32758) dd91731 (Terry Howe)
  • fix(linters): update golangci-lint to v2.14.0 (#​32744) 3a376b2 (Ruslan Shaydullin)
  • fix(action): wait for CRD establishment under HookOnlyStrategy (#​32672) 5fed6a5 (Pujitha Paladugu)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.25.1 to 0.25.2 (#​32726) b227bf4 (dependabot[bot])
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.1 to 0.21.2 (#​32715) af79b8e (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc ab6b245 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (#​32665) 0f20617 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc (#​32664) e26e158 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace (#​32663) 23ab1c5 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 (#​32662) 8303180 (dependabot[bot])
quarto-dev/quarto-cli

v1.10.19

Compare Source

Changelog since last release: quarto-dev/quarto-cli@v1.10.18...v1.10.19

Full 1.10 changelog up to this version:


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Only on Sunday (* * * * 0)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/build-tools branch 9 times, most recently from 1611c29 to 6e9c6df Compare October 16, 2026 13:59
@renovate
renovate Bot force-pushed the renovate/build-tools branch from 6e9c6df to eecc26b Compare October 16, 2026 14:12
@fcomte
fcomte merged commit 855ec98 into main Oct 16, 2026
1 check passed
@fcomte
fcomte deleted the renovate/build-tools branch October 16, 2026 14:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant