Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 4, 2025

Bumps taskcluster from 91.0.1 to 94.1.1.

Release notes

Sourced from taskcluster's releases.

v94.1.1

Automated Package Updates

  • build(deps): bump jws from 3.2.2 to 3.2.3 (da9d202243)

v94.1.0

GENERAL

▶ [patch] Client (python): upgrades many dependencies to latest minor/patch releases using uv lock --upgrade.

▶ [patch] Upgrades to Node.js v24.11.1 and rust v1.91.1. Additionally upgrades yarn to 4.12.0.

Replaces backoff crate with backon due to https://rustsec.org/advisories/RUSTSEC-2025-0012

▶ [patch] Upgrades to go1.25.5 [SECURITY].

See more here.

WORKER-DEPLOYERS

▶ [patch] #8115 Generic Worker (windows): reverts #8030 to use CREATE_NEW_CONSOLE over CREATE_NO_WINDOW so that child processes can call AllocConsole() to create new consoles.

DEVELOPERS

▶ [minor] #8093 Github webhook endpoint returns 200 instead of 400 for unsupported events. 200 means we received and processed webhook, even if we don't actually support such event at the moment. 400 is only for validation issues.

Automated Package Updates

  • build(deps): bump the go-deps group with 2 updates (a50efca685)
  • build(deps): bump the client-node-deps group (c70a6f6bc1)
  • build(deps-dev): bump eslint (c39ca3d277)
  • build(deps): bump tokio-util (e1a85b8485)
  • build(deps): bump actions/checkout from 5 to 6 (4d2553a4dd)
  • build(deps): bump express from 4.21.2 to 4.22.0 (d638d580a4)
  • build(deps): bump express from 4.21.0 to 4.22.0 in /ui (7de97b46b7)
  • build(deps): bump node-forge from 1.3.1 to 1.3.2 (63ffe5deaa)

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v94.1.1

Automated Package Updates

  • build(deps): bump jws from 3.2.2 to 3.2.3 (da9d202243)

v94.1.0

GENERAL

▶ [patch] Client (python): upgrades many dependencies to latest minor/patch releases using uv lock --upgrade.

▶ [patch] Upgrades to Node.js v24.11.1 and rust v1.91.1. Additionally upgrades yarn to 4.12.0.

Replaces backoff crate with backon due to https://rustsec.org/advisories/RUSTSEC-2025-0012

▶ [patch] Upgrades to go1.25.5 [SECURITY].

See more here.

WORKER-DEPLOYERS

▶ [patch] #8115 Generic Worker (windows): reverts #8030 to use CREATE_NEW_CONSOLE over CREATE_NO_WINDOW so that child processes can call AllocConsole() to create new consoles.

DEVELOPERS

▶ [minor] #8093 Github webhook endpoint returns 200 instead of 400 for unsupported events. 200 means we received and processed webhook, even if we don't actually support such event at the moment. 400 is only for validation issues.

Automated Package Updates

  • build(deps): bump the go-deps group with 2 updates (a50efca685)
  • build(deps): bump the client-node-deps group (c70a6f6bc1)
  • build(deps-dev): bump eslint (c39ca3d277)
  • build(deps): bump tokio-util (e1a85b8485)

... (truncated)

Commits
  • 34be876 v94.1.1
  • 4bd2269 Merge pull request #8151 from taskcluster/matt-boris/cargoUseCredentialsToml
  • 6adea43 Merge pull request #8150 from taskcluster/dependabot/npm_and_yarn/jws-3.2.3
  • a7c95cb fix(release): use credentials.toml file for publishing to crates.io
  • da9d202 build(deps): bump jws from 3.2.2 to 3.2.3
  • 44d8d72 v94.1.0
  • 966a61d Merge pull request #8120 from taskcluster/matt-boris/gwWindowsDetachedConsole
  • 44da65b fix(generic-worker): allow tasks to create new consoles (windows)
  • 94d37d9 Merge pull request #8149 from moijes12/fix-dev-process-doc-typo
  • dc9497d Merge pull request #8128 from taskcluster/feat/8093-webhook-status-code
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [taskcluster](https://github.com/taskcluster/taskcluster) from 91.0.1 to 94.1.1.
- [Release notes](https://github.com/taskcluster/taskcluster/releases)
- [Changelog](https://github.com/taskcluster/taskcluster/blob/main/CHANGELOG.md)
- [Commits](taskcluster/taskcluster@v91.0.1...v94.1.1)

---
updated-dependencies:
- dependency-name: taskcluster
  dependency-version: 94.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci dependencies Pull requests that update a dependency file infra python Pull requests that update Python code requirements_tests.txt

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants