Skip to content

Commit 5486d21

Browse files
chore(deps): update all non-major dependencies (#1164)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | alpine | final | minor | `3.22` -> `3.23` | | [biome](https://redirect.github.com/biomejs/biome) | | patch | `2.3.6` -> `2.3.8` | | [esbuild](https://redirect.github.com/evanw/esbuild) | | patch | `0.27.0` -> `0.27.1` | | [go](https://redirect.github.com/golang/go) | | patch | `1.25.4` -> `1.25.5` | | [go](https://go.dev/) ([source](https://redirect.github.com/golang/go)) | toolchain | patch | `1.25.4` -> `1.25.5` | | [uv](https://redirect.github.com/astral-sh/uv) | | patch | `0.9.10` -> `0.9.16` | --- ### Release Notes <details> <summary>biomejs/biome (biome)</summary> ### [`v2.3.8`](https://redirect.github.com/biomejs/biome/compare/8e97b89d2c3b28be6f051aff6a504469ada7196b...0a6b6fb1fb5d5ef24fde12f64f80e337110adb5d) ### [`v2.3.7`](https://redirect.github.com/biomejs/biome/compare/166d95b924368665fee2802d5c84170df1494c83...8e97b89d2c3b28be6f051aff6a504469ada7196b) </details> <details> <summary>evanw/esbuild (esbuild)</summary> ### [`v0.27.1`](https://redirect.github.com/evanw/esbuild/blob/HEAD/CHANGELOG.md#0271) [Compare Source](https://redirect.github.com/evanw/esbuild/compare/v0.27.0...v0.27.1) - Fix bundler bug with `var` nested inside `if` ([#&#8203;4348](https://redirect.github.com/evanw/esbuild/issues/4348)) This release fixes a bug with the bundler that happens when importing an ES module using `require` (which causes it to be wrapped) and there's a top-level `var` inside an `if` statement without being wrapped in a `{ ... }` block (and a few other conditions). The bundling transform needed to hoist these `var` declarations outside of the lazy ES module wrapper for correctness. See the issue for details. - Fix minifier bug with `for` inside `try` inside label ([#&#8203;4351](https://redirect.github.com/evanw/esbuild/issues/4351)) This fixes an old regression from [version v0.21.4](https://redirect.github.com/evanw/esbuild/releases/v0.21.4). Some code was introduced to move the label inside the `try` statement to address a problem with transforming labeled `for await` loops to avoid the `await` (the transformation involves converting the `for await` loop into a `for` loop and wrapping it in a `try` statement). However, it introduces problems for cross-compiled JVM code that uses all three of these features heavily. This release restricts this transform to only apply to `for` loops that esbuild itself generates internally as part of the `for await` transform. Here is an example of some affected code: ```js // Original code d: { e: { try { while (1) { break d } } catch { break e; } } } // Old output (with --minify) a:try{e:for(;;)break a}catch{break e} // New output (with --minify) a:e:try{for(;;)break a}catch{break e} ``` - Inline IIFEs containing a single expression ([#&#8203;4354](https://redirect.github.com/evanw/esbuild/issues/4354)) Previously inlining of IIFEs (immediately-invoked function expressions) only worked if the body contained a single `return` statement. Now it should also work if the body contains a single expression statement instead: ```js // Original code const foo = () => { const cb = () => { console.log(x()) } return cb() } // Old output (with --minify) const foo=()=>(()=>{console.log(x())})(); // New output (with --minify) const foo=()=>{console.log(x())}; ``` - The minifier now strips empty `finally` clauses ([#&#8203;4353](https://redirect.github.com/evanw/esbuild/issues/4353)) This improvement means that `finally` clauses containing dead code can potentially cause the associated `try` statement to be removed from the output entirely in minified builds: ```js // Original code function foo(callback) { if (DEBUG) stack.push(callback.name); try { callback(); } finally { if (DEBUG) stack.pop(); } } // Old output (with --minify --define:DEBUG=false) function foo(a){try{a()}finally{}} // New output (with --minify --define:DEBUG=false) function foo(a){a()} ``` - Allow tree-shaking of the `Symbol` constructor With this release, calling `Symbol` is now considered to be side-effect free when the argument is known to be a primitive value. This means esbuild can now tree-shake module-level symbol variables: ```js // Original code const a = Symbol('foo') const b = Symbol(bar) // Old output (with --tree-shaking=true) const a = Symbol("foo"); const b = Symbol(bar); // New output (with --tree-shaking=true) const b = Symbol(bar); ``` </details> <details> <summary>golang/go (go)</summary> ### [`v1.25.5`](https://redirect.github.com/golang/go/compare/go1.25.4...go1.25.5) </details> <details> <summary>astral-sh/uv (uv)</summary> ### [`v0.9.16`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0916) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.15...0.9.16) Released on 2025-12-06. ##### Python - Add CPython 3.14.2 - Add CPython 3.13.11 ##### Enhancements - Add a 5m default timeout to acquiring file locks to fail faster on deadlock ([#&#8203;16342](https://redirect.github.com/astral-sh/uv/pull/16342)) - Add a stub `debug` subcommand to `uv pip` announcing its intentional absence ([#&#8203;16966](https://redirect.github.com/astral-sh/uv/pull/16966)) - Add bounds in `uv add --script` ([#&#8203;16954](https://redirect.github.com/astral-sh/uv/pull/16954)) - Add brew specific message for `uv self update` ([#&#8203;16838](https://redirect.github.com/astral-sh/uv/pull/16838)) - Error when built wheel is for the wrong platform ([#&#8203;16074](https://redirect.github.com/astral-sh/uv/pull/16074)) - Filter wheels from PEP 751 files based on `--no-binary` et al in `uv pip compile` ([#&#8203;16956](https://redirect.github.com/astral-sh/uv/pull/16956)) - Support `--target` and `--prefix` in `uv pip list`, `uv pip freeze`, and `uv pip show` ([#&#8203;16955](https://redirect.github.com/astral-sh/uv/pull/16955)) - Tweak language for build backend validation errors ([#&#8203;16720](https://redirect.github.com/astral-sh/uv/pull/16720)) - Use explicit credentials cache instead of global static ([#&#8203;16768](https://redirect.github.com/astral-sh/uv/pull/16768)) - Enable SIMD in HTML parsing ([#&#8203;17010](https://redirect.github.com/astral-sh/uv/pull/17010)) ##### Preview features - Fix missing preview warning in `uv workspace metadata` ([#&#8203;16988](https://redirect.github.com/astral-sh/uv/pull/16988)) - Add a `uv auth helper --protocol bazel` command ([#&#8203;16886](https://redirect.github.com/astral-sh/uv/pull/16886)) ##### Bug fixes - Fix Pyston wheel compatibility tags ([#&#8203;16972](https://redirect.github.com/astral-sh/uv/pull/16972)) - Allow redundant entries in `tool.uv.build-backend.module-name` but emit warnings ([#&#8203;16928](https://redirect.github.com/astral-sh/uv/pull/16928)) - Fix infinite loop in non-attribute re-treats during HTML parsing ([#&#8203;17010](https://redirect.github.com/astral-sh/uv/pull/17010)) ##### Documentation - Clarify `--project` flag help text to indicate project discovery ([#&#8203;16965](https://redirect.github.com/astral-sh/uv/pull/16965)) - Regenerate the crates.io READMEs on release ([#&#8203;16992](https://redirect.github.com/astral-sh/uv/pull/16992)) - Update Docker integration guide to prefer `COPY` over `ADD` for simple cases ([#&#8203;16883](https://redirect.github.com/astral-sh/uv/pull/16883)) - Update PyTorch documentation to include information about supporting CUDA 13.0.x ([#&#8203;16957](https://redirect.github.com/astral-sh/uv/pull/16957)) - Update the versioning policy ([#&#8203;16710](https://redirect.github.com/astral-sh/uv/pull/16710)) - Upgrade PyTorch documentation to latest versions ([#&#8203;16970](https://redirect.github.com/astral-sh/uv/pull/16970)) ### [`v0.9.15`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0915) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.14...0.9.15) Released on 2025-12-02. ##### Python - Add CPython 3.14.1 - Add CPython 3.13.10 ##### Enhancements - Add ROCm 6.4 to `--torch-backend=auto` ([#&#8203;16919](https://redirect.github.com/astral-sh/uv/pull/16919)) - Add a Windows manifest to uv binaries ([#&#8203;16894](https://redirect.github.com/astral-sh/uv/pull/16894)) - Add LFS toggle to Git sources ([#&#8203;16143](https://redirect.github.com/astral-sh/uv/pull/16143)) - Cache source reads during resolution ([#&#8203;16888](https://redirect.github.com/astral-sh/uv/pull/16888)) - Include PEP 740 attestations when publishing uv to PyPI ([#&#8203;16910](https://redirect.github.com/astral-sh/uv/pull/16910)) - Allow reading requirements from scripts without an extension ([#&#8203;16923](https://redirect.github.com/astral-sh/uv/pull/16923)) - Allow reading requirements from scripts with HTTP(S) paths ([#&#8203;16891](https://redirect.github.com/astral-sh/uv/pull/16891)) ##### Bug fixes - Fix `uv-trampoline-builder` builds from crates.io by moving bundled executables ([#&#8203;16922](https://redirect.github.com/astral-sh/uv/pull/16922)) - Respect `NO_COLOR` and always show the command as a header when paging `uv help` output ([#&#8203;16908](https://redirect.github.com/astral-sh/uv/pull/16908)) - Use `0o666` permissions for flock files instead of `0o777` ([#&#8203;16845](https://redirect.github.com/astral-sh/uv/pull/16845)) - Revert "Bump `astral-tl` to v0.7.10 ([#&#8203;16887](https://redirect.github.com/astral-sh/uv/issues/16887))" to narrow down a regression causing hangs in metadata retrieval ([#&#8203;16938](https://redirect.github.com/astral-sh/uv/pull/16938)) ##### Documentation - Link to the uv version in crates.io member READMEs ([#&#8203;16939](https://redirect.github.com/astral-sh/uv/pull/16939)) ### [`v0.9.14`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0914) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.13...0.9.14) Released on 2025-12-01. ##### Performance - Bump `astral-tl` to v0.7.10 to enable SIMD for HTML parsing ([#&#8203;16887](https://redirect.github.com/astral-sh/uv/pull/16887)) ##### Bug fixes - Allow earlier post releases with exclusive ordering ([#&#8203;16881](https://redirect.github.com/astral-sh/uv/pull/16881)) - Prefer updating existing `.zshenv` over creating a new one in `tool update-shell` ([#&#8203;16866](https://redirect.github.com/astral-sh/uv/pull/16866)) - Respect `-e` flags in `uv add` ([#&#8203;16882](https://redirect.github.com/astral-sh/uv/pull/16882)) ##### Enhancements - Attach subcommand to User-Agent string ([#&#8203;16837](https://redirect.github.com/astral-sh/uv/pull/16837)) - Prefer `UV_WORKING_DIR` over `UV_WORKING_DIRECTORY` for consistency ([#&#8203;16884](https://redirect.github.com/astral-sh/uv/pull/16884)) ### [`v0.9.13`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0913) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.12...0.9.13) Released on 2025-11-26. ##### Bug fixes - Revert "Allow `--with-requirements` to load extensionless inline-metadata scripts" to fix reading of requirements files from streams ([#&#8203;16861](https://redirect.github.com/astral-sh/uv/pull/16861)) - Validate URL wheel tags against `Requires-Python` and required environments ([#&#8203;16824](https://redirect.github.com/astral-sh/uv/pull/16824)) ##### Documentation - Drop unpublished crates from the uv crates.io README ([#&#8203;16847](https://redirect.github.com/astral-sh/uv/pull/16847)) - Fix the links to uv in crates.io member READMEs ([#&#8203;16848](https://redirect.github.com/astral-sh/uv/pull/16848)) ### [`v0.9.12`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0912) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.11...0.9.12) Released on 2025-11-24. ##### Enhancements - Allow `--with-requirements` to load extensionless inline-metadata scripts ([#&#8203;16744](https://redirect.github.com/astral-sh/uv/pull/16744)) - Collect and upload PEP 740 attestations during `uv publish` ([#&#8203;16731](https://redirect.github.com/astral-sh/uv/pull/16731)) - Prevent `uv export` from overwriting `pyproject.toml` ([#&#8203;16745](https://redirect.github.com/astral-sh/uv/pull/16745)) ##### Documentation - Add a crates.io README for uv ([#&#8203;16809](https://redirect.github.com/astral-sh/uv/pull/16809)) - Add documentation for intermediate Docker layers in a workspace ([#&#8203;16787](https://redirect.github.com/astral-sh/uv/pull/16787)) - Enumerate workspace members in the uv crate README ([#&#8203;16811](https://redirect.github.com/astral-sh/uv/pull/16811)) - Fix documentation links for crates ([#&#8203;16801](https://redirect.github.com/astral-sh/uv/pull/16801)) - Generate a crates.io README for uv workspace members ([#&#8203;16812](https://redirect.github.com/astral-sh/uv/pull/16812)) - Move the "Export" guide to the projects concept section ([#&#8203;16835](https://redirect.github.com/astral-sh/uv/pull/16835)) - Update the cargo install recommendation to use crates ([#&#8203;16800](https://redirect.github.com/astral-sh/uv/pull/16800)) - Use the word "internal" in crate descriptions ([#&#8203;16810](https://redirect.github.com/astral-sh/uv/pull/16810)) ### [`v0.9.11`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0911) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.9.10...0.9.11) Released on 2025-11-20. ##### Python - Add CPython 3.15.0a2 See the [`python-build-standalone` release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20251120) for details. ##### Enhancements - Add SBOM support to `uv export` ([#&#8203;16523](https://redirect.github.com/astral-sh/uv/pull/16523)) - Publish to `crates.io` ([#&#8203;16770](https://redirect.github.com/astral-sh/uv/pull/16770)) ##### Preview features - Add `uv workspace list --paths` ([#&#8203;16776](https://redirect.github.com/astral-sh/uv/pull/16776)) - Fix the preview warning on `uv workspace dir` ([#&#8203;16775](https://redirect.github.com/astral-sh/uv/pull/16775)) ##### Bug fixes - Fix `uv init` author serialization via `toml_edit` inline tables ([#&#8203;16778](https://redirect.github.com/astral-sh/uv/pull/16778)) - Fix status messages without TTY ([#&#8203;16785](https://redirect.github.com/astral-sh/uv/pull/16785)) - Preserve end-of-line comment whitespace when editing `pyproject.toml` ([#&#8203;16734](https://redirect.github.com/astral-sh/uv/pull/16734)) - Disable `always-authenticate` when running under Dependabot ([#&#8203;16773](https://redirect.github.com/astral-sh/uv/pull/16773)) ##### Documentation - Document the new behavior for free-threaded python versions ([#&#8203;16781](https://redirect.github.com/astral-sh/uv/pull/16781)) - Improve note about build system in publish guide ([#&#8203;16788](https://redirect.github.com/astral-sh/uv/pull/16788)) - Move do not upload publish note out of the guide into concepts ([#&#8203;16789](https://redirect.github.com/astral-sh/uv/pull/16789)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/alecthomas/chroma). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xNi4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzIuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent 42c2aa1 commit 5486d21

File tree

13 files changed

+9
-9
lines changed

13 files changed

+9
-9
lines changed

Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ ENV GOARCH=amd64
2929
RUN make build/chromad
3030

3131
# Runtime stage
32-
FROM alpine:3.22 AS runtime
32+
FROM alpine:3.23 AS runtime
3333

3434
# Install ca-certificates for HTTPS requests
3535
RUN apk --no-cache add ca-certificates curl
File renamed without changes.
File renamed without changes.

bin/biome

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
.biome-2.3.6.pkg
1+
.biome-2.3.8.pkg

bin/esbuild

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
.esbuild-0.27.0.pkg
1+
.esbuild-0.27.1.pkg

bin/go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
.go-1.25.4.pkg
1+
.go-1.25.5.pkg

bin/gofmt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
.go-1.25.4.pkg
1+
.go-1.25.5.pkg

bin/uv

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
.uv-0.9.10.pkg
1+
.uv-0.9.16.pkg

0 commit comments

Comments
 (0)