This PR contains the following updates:

Package	Type	Update	Change	Pending
go	tools	minor	1.26.10 → 1.27.2	1.27.3
golangci-lint	tools	minor	2.11.3 → 2.15.0
pre-commit	tools	minor	4.5.1 → 4.7.0
yq	tools	minor	4.52.4 → 4.54.1

---

Release Notes

golang/go (go)

v1.27.2

Compare Source

v1.27.1

Compare Source

v1.27.0

Compare Source

golangci/golangci-lint (golangci-lint)

v2.15.0

Compare Source

Released on 2026-10-16

1. Linters new features or changes
   • errcheck: from 1.20.0 to 1.30.0
   • exhaustive: from 0.13.0 to 0.15.0 (⚠️ changes)
   • gocognit: from 1.2.1 to 1.3.0
   • golines: from 0.15.0 to 0.16.0
   • govet-modernize: from 0.50.0 to 0.52.0
   • loggercheck: from 0.12.0 to 0.13.0
   • predeclared: from 0.2.2 to 0.3.0
   • wrapcheck: from 2.12.0 to 2.13.0
2. Linters bug fixes
   • bidichk: from 0.3.3 to 0.3.4
   • canonicalheader: from a25c71c to e18e5c5
   • gofumpt: improve deprecation logs
   • gosec: improve concurrency default value
   • iface: from 1.5.1 to 1.5.3
   • paralleltest: from 1.0.15 to 1.0.16
   • revive: from 1.17.0 to 1.17.1
   • revive: the rules context-keys-type, errorf, modifies-value-receiver, range-val-address, string-of-int, time-equal, time-naming, unexported-return, unhandled-error, var-declaration are working (less randomly).
   • rowserrcheck: from c5f79b8 to e0740d5
   • staticcheck: from 0.8.1 to 0.8.2
3. Bug fixes
   • fix: compute custom version hash with module versions
   • fix: env vars loading (related to revive)

⚠️ Changes of the exhaustive linter:

• The replaced options still exists, and partially works, but they are deprecated.
• The options explicit-exhaustive-switch and explicit-exhaustive-map have been replaced by explicit-exhaustive.
• The check the value map has been replaced by mapliteral.
• The option ignore-enum-members (string) has been replaced by ignore-constants (slice).
• The option ignore-enum-types (string) has been replaced by ignore-types (slice).
• New report messages.
• The linter is a now a "slow" linter.

v2.14.0

Compare Source

Released on 2026-09-24

1. Bug fixes
   • fix: cache of facts reloading
2. Linters new features or changes
   • bodyclose: from 73d1f95 to 857993a (new directive handled)
   • exhaustive: from 0.12.0 to 0.13.0
   • exhaustruct_v5: from 5.0.3 to 5.2.0 (new option: allow-empty-blank-assignments)
   • go-check-sumtype: from 0.3.1 to ae6904d
   • gocritic: from 0.14.4 to 0.15.0
   • gofumpt: from 0.11.0 to 0.12.0
   • gomoddirectives: from 0.9.0 to 0.10.0
   • gosec: from 2.28.0 to 2.29.0 (re-enable G407)
   • govet-modernize: from 0.49.0 to 0.50.0
   • loggercheck: from 0.11.0 to 0.12.0
   • revive: from 1.15.0 to 1.17.0 (new rules: marshal-receiver, multiline-if-init, use-slices-concat)
   • tagliatelle: from 0.7.2 to 0.8.0
3. Linters bug fixes
   • fatcontext: from 0.10.0 to 0.10.1
   • flock: from 0.13.0 to 0.13.1
   • godoclint: from 0.11.2 to 0.11.4
   • protogetter: from 0.3.21 to 1.0.1
   • recvcheck: from 0.3.0 to 0.3.1
   • tagalign: from 1.4.3 to 1.4.4

v2.13.2

Compare Source

Released on 2026-08-28

1. Bug fixes
   • Decrease cache entropy
2. Linters bug fixes
   • iface: from 1.5.0 to 1.5.1
   • staticcheck: from 0.8.0 to 0.8.1
   • unparam: from 3f964bc to 2fa3d84
   • canonicalheader: from v1.1.2 to a temporary fork

v2.13.1

Compare Source

Released on 2026-08-20

1. Linters bug fixes
   • ginkgolinter: from 0.23.1 to 0.24.0
   • gofmt: from d62b90e to e84e050
   • staticcheck: from 0.8.0-rc.1 to 0.8.0
   • wsl_v5: from 5.8.0 to 5.9.0

v2.13.0

Compare Source

Released on 2026-08-19

1. Enhancements
   • 🎉 go1.27 support
2. Bug fixes
   • fix: cache package facts
3. Linters new features or changes
   • dupword: from 0.1.7 to 0.1.8 (new option skip-raw-strings)
   • errcheck: from 1.10.0 to 1.20.0
   • exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)
   • exhaustruct: deprecated and replaced by exhaustruct_v5
   • fatcontext: from 0.9.0 to 0.10.0 (new options: check-loops, check-function-literals)
   • goconst: from 1.10.0 to 1.11.0 (new options: ignore-map-keys, exclude-types)
   • gofumpt: from 0.9.2 to 0.11.0 (new options: extra.group-params, extra.clothe-returns, extra.balance-calls)
   • gomoddirectives: from 0.8.0 to 0.9.0 (new option: replace-allow-all)
   • gosec: from 2.26.1 to 2.27.1
   • govet-modernize: from 0.44.0 to 0.49.0 (fmtappendf is removed. New analyzers atomictypes, embedlit, errorsastype, importcomment, reflecttypeassert, slicesclip, and slicesbackward. waitgroup is renamed waitgroupgo)
   • iface: from 1.4.3 to 1.5.0 (new analyzer: unusedmethod)
   • noinlineerr: from 1.0.5 to 1.0.6
   • nonamedreturns: from 1.0.6 to 1.0.8 (new option: allow-unused-named-returns)
   • recvcheck: from 0.2.0 to 0.3.0 (new default exclusions)
   • unparam: from 5beb8c8 to 3f964bc
4. Linters bug fixes
   • clickhouse-go-linter: from 1.2.0 to 1.2.1
   • errname: from 1.1.1 to 1.1.2
   • exhaustruct_v5: from 5.0.2 to 5.0.3
   • funcorder: add missing Function field
   • ginkgolinter: from 0.23.0 to 0.23.1
   • gocheckcompilerdirectives: from 1.3.0 to 1.4.0
   • gocritic: from 0.14.3 to 0.14.4
   • gomoddirectives: add missing IgnoreForbidden field
   • iface: from 1.4.2 to 1.4.3
   • mirror: from 1.3.0 to 1.3.3
   • nilnil: from 1.1.1 to 1.1.2
   • protogetter: from 0.3.20 to 0.3.21

v2.12.2

Compare Source

Released on 2026-05-06

1. Linters bug fixes
   • gomodguard_v2: fix blocked configuration
   • gomodguard_v2: from 2.1.0 to 2.1.3
   • iface: from 1.4.1 to 1.4.2

v2.12.1

Compare Source

Released on 2026-05-01

1. Linters bug fixes
   • gomodguard_v2: fix panic with migration suggestion
2. Misc.
   • fix install.sh script (if you are still using an URL based on the branch master, please update to use https://golangci-lint.run/install.sh)

v2.12.0

Compare Source

Released on 2026-05-01

1. New linters
   • Add clickhouselint linter https://github.com/ClickHouse/clickhouse-go-linter
2. Linters new features or changes
   • dupl: from f665c8d to c99c5cf (extended detection)
   • funcorder: from 0.5.0 to 0.6.0 (new option: function)
   • goconst: add an option to ignore strings from tests
   • goconst: from 1.8.2 to 1.10.0 (extended detection)
   • gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)
   • gosec: from 619ce21 to 2.28.0 (new checks: G124, G708, G709, G710)
   • govet: add inline analyzer
   • makezero: from 2.1.0 to 2.2.1 (support slice type aliases)
   • paralleltest: expose checkcleanup option
   • sloglint: from 0.11.1 to 0.12.0 (new options: allowed-keys, custom-funcs)
   • wsl_v5: from 5.6.0 to 5.8.0 (new option: cuddle-max-statements; new checks: after-decl, after-defer, after-expr, after-go, cuddle-group)
3. Linters bug fixes
   • forbidigo: from 2.3.0 to 2.3.1
   • godot: from 1.5.4 to 1.5.6
   • govet-modernize: from 0.43.0 to 0.44.0
   • ireturn: from 0.4.0 to 0.4.1
   • rowserrcheck: from 1.1.1 to c5f79b8
4. Misc.
   • Decrease cache entropy
   • Embed the JSON schema in the binary
   • Filter env vars when cloning the repository with the custom command

v2.11.4

Compare Source

Released on 2026-03-22

1. Linters bug fixes
   • govet-modernize: from 0.42.0 to 0.43.0
   • noctx: from 0.5.0 to 0.5.1
   • sqlclosecheck: from 0.5.1 to 0.6.0

pre-commit/pre-commit (pre-commit)

v4.7.0

Compare Source

==================

Fixes

• Fix language: node hooks during commit with -a or inside a submodule.
  • Regressed in 4.6.1.
  • #​3773 issue by @​cbirkhold.
  • #​3774 PR by @​cbirkhold.

v4.6.2

Compare Source

==================

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with
  npm 11.x.
  • Regressed in 4.6.1.
  • #​3737 issue by @​mheiges.
  • #​3743 PR by @​asottile.

v4.6.1

Compare Source

==================

Fixes

• Install language: node hooks via git.
  • Fixes npm 12.x compatibility
  • #​3719 PR by @​asottile.
  • #​3517 issue by @​ojob.
• Set JULIA_DEPOT_PATH for language: julia.
  • #​3711 PR by @​damonbayer.
  • pre-commit-ci/runner-image#335 issue by @​damonbayer.
• Produce error on mistyped --repo for pre-commit autoupdate.
  • #​3701 PR by @​mxr.
  • #​3695 issue by @​mxr.
• Improve performance of commit existence check in pre-push.
  • #​3726 PR by @​asottile.
  • #​3604 issue by @​ptarjan.
• Avoid duplicating conflicted filenames during pre-commit run --all-files.
  • #​3727 PR by @​asottile.
  • #​3706 issue by @​RomanValov.

v4.6.0

Compare Source

==================

Features

• pre-commit hook-impl: allow --hook-dir to be missing to enable easier
  usage with git 2.54+ git hooks.
  • #​3662 PR by @​asottile.

Fixes

• pre-commit hook-impl: --hook-type is required.
  • #​3661 PR by @​asottile.

mikefarah/yq (yq)

v4.54.1: - if-then-else

Compare Source

• Added jq style if-then-elif-else-end conditional operator (#​2871) Thanks to @​anandghegde
  • Added @base64url/@base64urld operators (RFC 4648 §5) (#​2827) Thanks @​MsfPablo
  • Fixed: preserve explicit assignments in read-only expressions (#​2850) Thanks @​RRXXZZYY
  • Fixed: error on int64 overflow in +, -, * instead of silently wrapping (#​2826) Thanks @​MsfPablo
  • Fixed(toml): quote empty keys (#​2870) Thanks @​jakezwang
  • Fixed: /dev/null was triggering colour output (#​2852) Thanks @​laraibg786
  • Fixed dead snapcraft confinement link in README (#​2840) Thanks @​ShurongCAO
  • Bumped dependencies

v4.53.6

Compare Source

• Fixing release build issue
  • Fixed line wrapping bug (#​2824, #​2823) Thanks @​mxey
  • Bumped dependencies

v4.53.4

Compare Source

• Close input files after processing each one (#​2796) (#​2808) Thanks @​MsfPablo
• Fixed non string HCL string keys (#​2795)
• Fixed heap allocation bug (#​2809) Thanks @​MsfPablo
• Fix deleting commented empty list YAML output (#​2765) Thanks @​dpersek
• Fix (has) return false for negative array indices (#​2769) Thanks @​maximilize
• Fix (sort): avoid int64 overflow comparing large integers (#​2771) Thanks @​maximilize
• Fix: preserve correct parent references in explode merge anchor reconstruction (#​2730) Thanks @​vomba
• Improve Guard ExpressionParser initialization with sync.Once (#​2789) Thanks @​arcaven
• Fix: reject negative indent instead of panicking (#​2746) Thanks @​StressTestor
• Fix: parse signed hex and octal integers (#​2749) Thanks @​StressTestor
• Fix: skip UTF-8 BOM when processing front matter (#​2751) Thanks @​StressTestor
• Fix !!merge tag regression for yq (#​2705) Thanks @​W-Floyd
• Default to yaml when a file's extension is not a recognised format (#​2785) Thanks @​devthedevil
• Bumped dependencies

v4.53.3

Compare Source

• Add --ini-preserve-quotes flag for INI round-trip quote preservation (#​2728) Thanks @​toller892!
• Fix: reset INI decoder state on init (#​2719) Thanks @​xieby1!
• Fix: decode properties array bracket paths (#​2693) Thanks @​cyphercodes!
• Fix: preserve floats with trailing zero when encoding YAML to JSON (#​2701) Thanks @​ChrisJr404!
• Fix: JSON to TOML root scope and null handling (#​2689) Thanks @​LovesAsuna!
• Fix: reset TOML decoder finished flag on Init for multi-doc evaluation (#​2704) Thanks @​terminalchai!
• Fix: reset TOML decoder between files when evaluating all at once (#​2685) Thanks @​terminalchai!
• Fix: preserve TOML inline table array scope (#​2694) Thanks @​cyphercodes!
• Fix: preserve empty TOML arrays in tables (#​2686) Thanks @​cyphercodes!
• Fix: TOML encoder uses inline tables for YAML FlowStyle mappings (#​2687)
• Fix nested inline YAML merge explode (#​2699) Thanks @​cyphercodes!
• Fix repeatString overflow test on 32-bit platforms (#​2680) Thanks @​jandubois!
• Bumped dependencies

v4.53.2

Compare Source

• Releases and tags now signed and immutable!
• Add system(command; args) operator (disabled by default) (#​2640)
• TOML encoder: prefer readable table sections over inline tables (#​2649)
• Fix TOML encoder to quote keys containing special characters (#​2648)
• Add string slicing support (#​2639)
• Fix findInArray misuse on MappingNodes in equality and contains (#​2645) Thanks @​jandubois!
• Fix panic on negative slice indices that underflow after adjustment (#​2646) Thanks @​jandubois!
• Fix stack overflow from circular alias in traverse (#​2647) Thanks @​jandubois!
• Fix panic and OOM in repeatString for large repeat counts (#​2644) Thanks @​jandubois!
• Bumped dependencies

v4.52.5

Compare Source

• Fix: reset TOML decoder state between files (#​2634) thanks @​terminalchai
  • Fix: preserve original filename when using --front-matter (#​2613) thanks @​cobyfrombrooklyn-bot
  • Fix typo in filename (#​2611) thanks @​alexandear
  • Bumped dependencies

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.