Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps github.com/taskcluster/taskcluster/v94 from 94.0.1 to 94.1.1.

Release notes

Sourced from github.com/taskcluster/taskcluster/v94's releases.

v94.1.1

Automated Package Updates

  • build(deps): bump jws from 3.2.2 to 3.2.3 (da9d202243)

v94.1.0

GENERAL

▶ [patch] Client (python): upgrades many dependencies to latest minor/patch releases using uv lock --upgrade.

▶ [patch] Upgrades to Node.js v24.11.1 and rust v1.91.1. Additionally upgrades yarn to 4.12.0.

Replaces backoff crate with backon due to https://rustsec.org/advisories/RUSTSEC-2025-0012

▶ [patch] Upgrades to go1.25.5 [SECURITY].

See more here.

WORKER-DEPLOYERS

▶ [patch] #8115 Generic Worker (windows): reverts #8030 to use CREATE_NEW_CONSOLE over CREATE_NO_WINDOW so that child processes can call AllocConsole() to create new consoles.

DEVELOPERS

▶ [minor] #8093 Github webhook endpoint returns 200 instead of 400 for unsupported events. 200 means we received and processed webhook, even if we don't actually support such event at the moment. 400 is only for validation issues.

Automated Package Updates

  • build(deps): bump the go-deps group with 2 updates (a50efca685)
  • build(deps): bump the client-node-deps group (c70a6f6bc1)
  • build(deps-dev): bump eslint (c39ca3d277)
  • build(deps): bump tokio-util (e1a85b8485)
  • build(deps): bump actions/checkout from 5 to 6 (4d2553a4dd)
  • build(deps): bump express from 4.21.2 to 4.22.0 (d638d580a4)
  • build(deps): bump express from 4.21.0 to 4.22.0 in /ui (7de97b46b7)
  • build(deps): bump node-forge from 1.3.1 to 1.3.2 (63ffe5deaa)

... (truncated)

Changelog

Sourced from github.com/taskcluster/taskcluster/v94's changelog.

v94.1.1

Automated Package Updates

  • build(deps): bump jws from 3.2.2 to 3.2.3 (da9d202243)

v94.1.0

GENERAL

▶ [patch] Client (python): upgrades many dependencies to latest minor/patch releases using uv lock --upgrade.

▶ [patch] Upgrades to Node.js v24.11.1 and rust v1.91.1. Additionally upgrades yarn to 4.12.0.

Replaces backoff crate with backon due to https://rustsec.org/advisories/RUSTSEC-2025-0012

▶ [patch] Upgrades to go1.25.5 [SECURITY].

See more here.

WORKER-DEPLOYERS

▶ [patch] #8115 Generic Worker (windows): reverts #8030 to use CREATE_NEW_CONSOLE over CREATE_NO_WINDOW so that child processes can call AllocConsole() to create new consoles.

DEVELOPERS

▶ [minor] #8093 Github webhook endpoint returns 200 instead of 400 for unsupported events. 200 means we received and processed webhook, even if we don't actually support such event at the moment. 400 is only for validation issues.

Automated Package Updates

  • build(deps): bump the go-deps group with 2 updates (a50efca685)
  • build(deps): bump the client-node-deps group (c70a6f6bc1)
  • build(deps-dev): bump eslint (c39ca3d277)
  • build(deps): bump tokio-util (e1a85b8485)

... (truncated)

Commits
  • 34be876 v94.1.1
  • 4bd2269 Merge pull request #8151 from taskcluster/matt-boris/cargoUseCredentialsToml
  • 6adea43 Merge pull request #8150 from taskcluster/dependabot/npm_and_yarn/jws-3.2.3
  • a7c95cb fix(release): use credentials.toml file for publishing to crates.io
  • da9d202 build(deps): bump jws from 3.2.2 to 3.2.3
  • 44d8d72 v94.1.0
  • 966a61d Merge pull request #8120 from taskcluster/matt-boris/gwWindowsDetachedConsole
  • 44da65b fix(generic-worker): allow tasks to create new consoles (windows)
  • 94d37d9 Merge pull request #8149 from moijes12/fix-dev-process-doc-typo
  • dc9497d Merge pull request #8128 from taskcluster/feat/8093-webhook-status-code
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 8, 2025
@jrobbins
Copy link
Collaborator

jrobbins commented Dec 8, 2025

@dependabot rebase

Bumps [github.com/taskcluster/taskcluster/v94](https://github.com/taskcluster/taskcluster) from 94.0.1 to 94.1.1.
- [Release notes](https://github.com/taskcluster/taskcluster/releases)
- [Changelog](https://github.com/taskcluster/taskcluster/blob/main/CHANGELOG.md)
- [Commits](taskcluster/taskcluster@v94.0.1...v94.1.1)

---
updated-dependencies:
- dependency-name: github.com/taskcluster/taskcluster/v94
  dependency-version: 94.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/taskcluster/taskcluster/v94-94.1.1 branch from a290090 to 9326f3b Compare December 8, 2025 17:23
@jrobbins jrobbins merged commit 7ba9187 into main Dec 8, 2025
13 checks passed
@jrobbins jrobbins deleted the dependabot/go_modules/github.com/taskcluster/taskcluster/v94-94.1.1 branch December 8, 2025 18:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants