This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
docker/setup-buildx-action	action	minor	v4.2.0 → v4.3.0
github.com/stackitcloud/stackit-sdk-go/services/dns	require	minor	v0.21.0 → v0.22.1
github.com/stretchr/testify	require	minor	v1.11.1 → v1.12.1
github/codeql-action	action	patch	v4.37.6 → v4.37.9
semgrep/semgrep	container	minor	1.172.0 → 1.175.0
step-security/harden-runner	action	minor	v2.20.0 → v2.21.0

---

Release Notes

docker/setup-buildx-action (docker/setup-buildx-action)

v4.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.92.0 to 0.95.0 in #​595
• Bump brace-expansion from 1.1.13 to 1.1.18 in #​600
• Bump js-yaml from 5.2.0 to 5.3.0 in #​585
• Bump postcss from 8.5.10 to 8.5.25 in #​598
• Bump undici from 6.27.0 to 6.28.0 in #​601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

stretchr/testify (github.com/stretchr/testify)

v1.12.1

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in #​1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in #​1772

New Contributors

• @​harryzcy made their first contribution in #​1935
• @​boekkooi-impossiblecloud made their first contribution in #​1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in #​1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in #​1772

New Contributors

• @​harryzcy made their first contribution in #​1935
• @​boekkooi-impossiblecloud made their first contribution in #​1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

Compare Source

What's Changed

Functional Changes

• assert: make *AssertionFunc types just aliases by @​dolmen in #​1563

Fixes

• mock: avoid panic when expected type is nil in Arguments.Diff by @​mutaiib in #​1775
• mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @​brackendawson in #​1786
• suite: validate method signatures and continue execution for valid tests by @​vyas-git in #​1665
• assert.PanicsWithError: report error message by @​olivergondza in #​1400
• assert: IsIncreasing et al can return false w/out failing by @​brackendawson in #​1787
• add type to error message of assert.Same by @​egawata in #​1792
• mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @​brackendawson in #​1795
• assert: truncate very long objects in test failure messages by @​brackendawson in #​1646
• assert: fix NotSubset error messages using %#v instead of %q (fixes #​1800) by @​nghiack7 in #​1888
• suite: prevent panic when SetupTest skips with HandleStats by @​blackwell-systems in #​1877

Documentation, Build & CI

• CI: test also with Go 1.23 by @​dolmen in #​1783
• Vendor unmaintained github.com/pmezard/go-difflib by @​brackendawson in #​1708
• Promote ccoVeille to maintainer by @​brackendawson in #​1784
• build(deps): bump actions/setup-go from 5 to 6 by @​dependabot[bot] in #​1790
• assert.YAMLEq: Document mutlidoc behavior by @​brackendawson in #​1791
• _codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @​dolmen in #​1782
• doc: remove ineffective inline code blocks by @​brackendawson in #​1714
• Tag generated assertions as non-generated in new .gitattributes by @​ubunatic in #​1815
• chore: vendor go-spew from https://github.com/davecgh/go-spew by @​ccoVeille in #​1827
• require: fix godoc generation for assertions returning a bool by @​Baxromumarov in #​1850
• docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @​a2not in #​1821
• docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @​a2not in #​1842
• EMERITUS.md: add @​tylerb by @​dolmen in #​1812
• CI: test also with Go 1.24 by @​alexandear in #​1856
• deps: bump objx to v0.5.3 and remove dependency cycle issue by @​ccoVeille in #​1823
• CI: upgrade GitHub Actions and pin hashes by @​SuperQ in #​1883
• CI: add _readme-gofmt tool to reformat Go code in README by @​dolmen in #​1889
• CI: add check of GitHub Action pinned hashes against tag by @​dolmen in #​1885
• _codegen: modernize by @​dolmen in #​1890
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​1906
• mock: Mock.Return does not exist anymore by @​Kentzo in #​1905

New Contributors

• @​mutaiib made their first contribution in #​1775
• @​vyas-git made their first contribution in #​1665
• @​olivergondza made their first contribution in #​1400
• @​egawata made their first contribution in #​1792
• @​ubunatic made their first contribution in #​1815
• @​Baxromumarov made their first contribution in #​1850
• @​a2not made their first contribution in #​1821
• @​nghiack7 made their first contribution in #​1888
• @​blackwell-systems made their first contribution in #​1877
• @​Kentzo made their first contribution in #​1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

What's Changed

• mock: avoid panic when expected type is nil in Arguments.Diff by @​mutaiib in #​1775
• CI: test also with Go 1.23 by @​dolmen in #​1783
• mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @​brackendawson in #​1786
• suite: validate method signatures and continue execution for valid tests by @​vyas-git in #​1665
• Vendor unmaintained github.com/pmezard/go-difflib by @​brackendawson in #​1708
• Promote ccoVeille to maintainer by @​brackendawson in #​1784
• build(deps): bump actions/setup-go from 5 to 6 by @​dependabot[bot] in #​1790
• assert.PanicsWithError: report error message by @​olivergondza in #​1400
• assert: IsIncreasing et al can return false w/out failing by @​brackendawson in #​1787
• add type to error message of assert.Same by @​egawata in #​1792
• assert.YAMLEq: Document mutlidoc behavior by @​brackendawson in #​1791
• mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @​brackendawson in #​1795
• _codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @​dolmen in #​1782
• assert: truncate very long objects in test failure messages by @​brackendawson in #​1646
• doc: remove ineffective inline code blocks by @​brackendawson in #​1714
• Tag generated assertions as non-generated in new .gitattributes by @​ubunatic in #​1815
• chore: vendor go-spew from https://github.com/davecgh/go-spew by @​ccoVeille in #​1827
• require: fix godoc generation for assertions returning a bool by @​Baxromumarov in #​1850
• docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @​a2not in #​1821
• docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @​a2not in #​1842
• EMERITUS.md: add @​tylerb by @​dolmen in #​1812
• CI: test also with Go 1.24 by @​alexandear in #​1856
• deps: bump objx to v0.5.3 and remove dependency cycle issue by @​ccoVeille in #​1823
• CI: upgrade GitHub Actions and pin hashes by @​SuperQ in #​1883
• assert: fix NotSubset error messages using %#v instead of %q (fixes #​1800) by @​nghiack7 in #​1888
• suite: prevent panic when SetupTest skips with HandleStats by @​blackwell-systems in #​1877
• CI: add _readme-gofmt tool to reformat Go code in README by @​dolmen in #​1889
• CI: add check of GitHub Action pinned hashes against tag by @​dolmen in #​1885
• _codegen: modernize by @​dolmen in #​1890
• assert: make *AssertionFunc types just aliases by @​dolmen in #​1563
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​1906
• mock: Mock.Return does not exist anymore by @​Kentzo in #​1905

New Contributors

• @​mutaiib made their first contribution in #​1775
• @​vyas-git made their first contribution in #​1665
• @​olivergondza made their first contribution in #​1400
• @​egawata made their first contribution in #​1792
• @​ubunatic made their first contribution in #​1815
• @​Baxromumarov made their first contribution in #​1850
• @​a2not made their first contribution in #​1821
• @​nghiack7 made their first contribution in #​1888
• @​blackwell-systems made their first contribution in #​1877
• @​Kentzo made their first contribution in #​1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

github/codeql-action (github/codeql-action)

v4.37.9

Compare Source

• Update default CodeQL bundle version to 2.26.4. #​4106

v4.37.8

Compare Source

No user facing changes.

v4.37.7

Compare Source

• Update default CodeQL bundle version to 2.26.3. #​4085

step-security/harden-runner (step-security/harden-runner)

v2.21.0

Compare Source

What's Changed

• Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
• Improved Support for AWS CodeBuild GitHub Actions Runners.
• Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

v2.20.1

Compare Source

What's Changed

• AWS CodeBuild-hosted runner support
• Implicitly allow single-labeled (internal) domains in block-mode

Full Changelog: step-security/harden-runner@v2.20.0...v2.20.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.