fix(deps): update all non-major dependencies by buildkite-renovate-self-hosted[bot] · Pull Request #393 · buildkite/buildkite-gha

buildkite-renovate-self-hosted · 2026-08-25T08:01:36Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	minor	`v3.4.0` → `v3.5.0`
actions/checkout	action	minor	`v2.3.4` → `v2.8.0`
actions/setup-python	action	minor	`v7.0.0` → `v7.1.0`
cygwin/cygwin-install-action	action	minor	`v6.0.2` → `v6.1`
github-actions		minor	`v0.9.3` → `v0.14.0`
github.com/bmatcuk/doublestar/v4	require	patch	`v4.10.0` → `v4.10.4`
github.com/santhosh-tekuri/jsonschema/v6	require	patch	`v6.0.2` → `v6.0.3`
go	tools	minor	`1.26.10` → `1.27.3`
go (source)	toolchain	minor	`1.26.10` → `1.27.3`
go	uses-with	minor	`1.26.5` → `1.27.3`
go.yaml.in/yaml/v4	require	patch	`v4.0.0-rc.3` → `v4.0.0`
golang.org/x/sys	require	minor	`v0.47.0` → `v0.50.0`
golangci-lint	tools	minor	`2.13.1` → `2.15.0`
goreleaser	tools	minor	`2.17.0` → `2.20.0`
msys2/setup-msys2	action	minor	`v2.32.0` → `v2.33.0`
node (source)	tools	minor	`24.18.0` → `24.22.2`
node	uses-with	minor	`24.18.0` → `24.22.2`
powershell	tools	minor	`7.4.13` → `7.6.9`
python	uses-with	minor	`3.13` → `3.15`
setup-go		patch	`v0.1.0` → `v0.1.1`
tests		minor	`v1.0.0` → `v1.1.0`

Release Notes

actions/cache

`v3.5.0`

Compare Source

Bump actions/cache to v4.1.0

Full Changelog: actions/cache@v3...v3.5.0

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v3.4.0, see those release notes and the announcement for more details.

Bump @actions/cache to v4.0.1 by @robherley in #1554

Full Changelog: actions/cache@v3.4.0...v3.4.2

`v3.4.1`

Compare Source

[!WARNING]
This version was incorrectly released using a SHA pointing to a newer version for immutable actions only. Please use v3.4.2 (or v3) instead.

actions/checkout

`v2.8.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v2 by @aiqiaoy in #2504
backport fixes to releases-v2 by @aiqiaoy in #2526

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v2.7.0...v2.8.0

`v2.7.0`

Compare Source

What's Changed

Add new public key for known_hosts (#1237) by @TingluoHuang in #1238

Full Changelog: actions/checkout@v2.6.0...v2.7.0

`v2.6.0`

Compare Source

What's Changed

Add backports to v2 branch by @cory-miller in #1040
- Includes backports from the following changes: #964, #1002, #1029
- Upgraded the licensed version to match what is used in v3.

Full Changelog: actions/checkout@v2.5.0...v2.6.0

`v2.5.0`

Compare Source

What's Changed

Update @actions/core to 1.10.0 by @rentziass in #962

Full Changelog: actions/checkout@v2...v2.5.0

`v2.4.2`

Compare Source

What's Changed

Add set-safe-directory input to allow customers to take control. (#770) by @TingluoHuang in #776
Prepare changelog for v2.4.2. by @TingluoHuang in #778

Full Changelog: actions/checkout@v2...v2.4.2

`v2.4.1`

Compare Source

Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory

`v2.4.0`

Compare Source

Convert SSH URLs like org-<ORG_ID>@github.com: to https://github.com/ - pr

`v2.3.5`

Compare Source

Update dependencies

actions/setup-python

`v7.1.0`

Compare Source

What's Changed

Enhancements

Add mirror and mirror-token inputs for custom Python distribution sources by @luhenry in #1302
Improve error message clarity by @v-lmvysakh in #1351

Dependency Upgrade

Upgrade browserslist from 4.28.2 to 4.28.9 by @dependabot in #1353
Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in #1343
Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by @dependabot in #1342
Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in #1357
Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in #1359
Upgrade undici from 6.28.0 to 6.29.0 by @dependabot in #1364
Upgrade ts-jest from 29.4.11 to 29.4.14 by @dependabot in #1361
Upgrade brace-expansion from 5.0.9 to 5.0.12 by @dependabot in #1365
Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 by @dependabot in #1363
Upgrade @typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 by @dependabot in #1369
Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in #1345
Upgrade cache to 6.3.0 by @v-HarithaVattikuti in #1370
Resolve Basic Validation audit failures by @v-HarithaVattikuti in #1347
Resolve npm audit failures by @v-HarithaVattikuti in #1350

New Contributors

@luhenry made their first contribution in #1302

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

cygwin/cygwin-install-action

`v6.1`

Compare Source

buildkite-plugins/github-actions-buildkite-plugin (github-actions)

`v0.14.0`

Compare Source

🤖

What's Changed

Update documentation for buildkite-gha v0.26.0 by @karensawrey in #52
Update documentation for buildkite-gha v0.35.1 by @karensawrey in #53
Test released native macOS importers by @lox in #46
Allow selector-free Pipeline Trigger configuration by @sj26 in #54
Fix smoke tests on Buildkite Agent v4 by @sj26 in #58
Allow branches and tags in source-ref by @sj26 in #57
Build Windows runtimes for source-ref by @sj26 in #56
Collapse the Prepare workflows log group by @dannymidnight in #59
Update documentation for buildkite-gha v0.97.2 by @karensawrey in #60
fix: require mise 2026.10.17 with eMudhra distrust (SUP-8483) by @omehegan in #66
fix: build source runtimes with Go 1.26.10 (SUP-8482) by @omehegan in #65
Prepare v0.14.0 release by @omehegan in #67

New Contributors

@sj26 made their first contribution in #54
@omehegan made their first contribution in #66

Full Changelog: buildkite-plugins/github-actions-buildkite-plugin@v0.13.0...v0.14.0

`v0.13.0`

Compare Source

What's Changed

Add OIDC plugin configuration by @lox in #50
Prepare v0.13.0 release by @lox in #51

Full Changelog: buildkite-plugins/github-actions-buildkite-plugin@v0.12.0...v0.13.0

`v0.12.0`

Compare Source

What's Changed

Suppress routine mise acquisition progress by @lox in #48
Add experimental runner user support by @wolfeidau in #47
Prepare v0.12.0 release by @wolfeidau in #49

New Contributors

@wolfeidau made their first contribution in #47

Full Changelog: buildkite-plugins/github-actions-buildkite-plugin@v0.11.0...v0.12.0

`v0.11.0`

Compare Source

What's Changed

Update docs for buildkite-gha v0.12.1 by @karensawrey in #41
Update GitHub Actions plugin version to latest by @mitchbne in #43
Support native macOS arm64 importers by @lox in #44
Prepare v0.11.0 release by @lox in #45

New Contributors

@mitchbne made their first contribution in #43

Full Changelog: buildkite-plugins/github-actions-buildkite-plugin@v0.10.0...v0.11.0

`v0.10.0`

Compare Source

What's Changed

Support importing multiple GitHub Actions workflows by @dannymidnight in #33
Replace CI latest publisher with local mise release flow by @lox in #38
Prepare plugin v0.10.0 for workflows runtime by @lox in #37
Support singular workflow selector by @lox in #39
Use buildkite-gha v0.11.0 by @lox in #40

New Contributors

@dannymidnight made their first contribution in #33

Full Changelog: buildkite-plugins/github-actions-buildkite-plugin@v0.9.3...v0.10.0

bmatcuk/doublestar (github.com/bmatcuk/doublestar/v4)

`v4.10.4`: Preserves segment position across alternatives

Compare Source

Fixes patterns like x{**/a,b} which should be treated like x*/a and xb because the doublestar appears mid-pattern.

What's Changed

fix: preserve segment position across brace alternatives by @yuefdev in #125

New Contributors

@yuefdev made their first contribution in #125

Full Changelog: bmatcuk/doublestar@v4.10.3...v4.10.4

`v4.10.3`: Handles character ranges when using WithCaseInsensitive

Compare Source

Character ranges, such as [a-z] would not match things like A when using WithCaseInsensitive. This release fixes that.

Thanks to @bensynapse for bringing this to my attention.

Full Changelog: bmatcuk/doublestar@v4.10.2...v4.10.3

`v4.10.2`: Better support for Windows "Junctions"

Compare Source

Has improved support for reading "junctions" in Windows (ie, Windows' version of symlinks).

Thanks @x0Lazarus for the PR!

What's Changed

Fix Windows junction traversal with Go 1.23 and later by @x0Lazarus in #117

New Contributors

@x0Lazarus made their first contribution in #117

Full Changelog: bmatcuk/doublestar@v4.10.1...v4.10.2

`v4.10.1`: Fixed issue with alternatives and character classes

Compare Source

There was an issue where commas or ending curly brackets inside a character class would cause code looking for the next alternative (commas) or the end of alternatives (ending curly brackets) to erroneously match those characters inside the character classes.

Thanks to @sidsri14 for the fix!

What's Changed

fix brace alternation scanning with character classes by @sidsri14 in #115

New Contributors

@sidsri14 made their first contribution in #115

Full Changelog: bmatcuk/doublestar@v4.10.0...v4.10.1

santhosh-tekuri/jsonschema (github.com/santhosh-tekuri/jsonschema/v6)

`v6.0.3`

Compare Source

bugfixes:

empty instLocation for propetyNames and contentSchema
fix intLocation for items and additionalItems validation
check invalid floats NaN/Inf
fix closing quote check in email validation
ensure both are numbers in equals validation

features

ef59f39: ref like property in custom vocab

golang/go (go)

`v1.27.3`

Compare Source

`v1.27.2`

Compare Source

`v1.27.1`

Compare Source

`v1.27.0`

Compare Source

actions/go-versions (go)

`v1.27.3`: 1.27.3

Compare Source

Go 1.27.3

`v1.27.2`: 1.27.2

Compare Source

Go 1.27.2

`v1.27.1`: 1.27.1

Compare Source

Go 1.27.1

`v1.27.0`: 1.27.0

Compare Source

Go 1.27.0

`v1.26.10`: 1.26.10

Compare Source

Go 1.26.10

`v1.26.9`: 1.26.9

Compare Source

Go 1.26.9

`v1.26.8`: 1.26.8

Compare Source

Go 1.26.8

`v1.26.7`: 1.26.7

Compare Source

Go 1.26.7

`v1.26.6`: 1.26.6

Compare Source

Go 1.26.6

yaml/go-yaml (go.yaml.in/yaml/v4)

`v4.0.0`: go-yaml v4.0.0

Compare Source

go-yaml v4.0.0

go-yaml v4.0.0 is the first stable release of the v4 series, maintained by the
YAML organization.
It adds configurable loading and dumping, public plugin interfaces, structured
errors, and a CLI for inspecting YAML processing.
The classic APIs remain supported, so applications can adopt v4 incrementally.

Getting started

Install the release:

go get go.yaml.in/yaml/v4@v4.0.0

Use this import path in your Go code:

import "go.yaml.in/yaml/v4"

For an existing v3 application, start by updating imports, reviewing custom
unmarshalers, and running your tests.
You can continue using Unmarshal, Marshal, NewDecoder, and NewEncoder.
The v2 and v3 APIs remain frozen, with security fixes only; new features and
routine bug fixes are developed in v4.

Why add Load and Dump?

Applications need different YAML policies: strict configuration validation,
particular output layouts, or custom anchor handling.
The new Load and Dump functions and streaming Loader and Dumper accept
functional options and plugins for those choices.
They use YAML's load/dump terminology and are recommended for new code.

The classic entry points keep compatibility settings rather than changing
formatting and error presentation for every existing caller.
Moving to the new API is an explicit choice to use v4 defaults, with presets
available when you want older settings.
Classic APIs remain supported.

For example, load a configuration with strict field checking, then choose its
output indentation:

package main

import (
    "fmt"
    "log"

    "go.yaml.in/yaml/v4"
)

func main() {
    var config struct {
        Name string `yaml:"name"`
        Port int    `yaml:"port"`
    }
    input := []byte("name: api\nport: 8080\n")
    if err := yaml.Load(input, &config, yaml.WithKnownFields()); err != nil {
        log.Fatal(err)
    }
    output, err := yaml.Dump(config, yaml.WithIndent(4))
    if err != nil {
        log.Fatal(err)
    }
    fmt.Print(string(output))
}

Unknown struct fields are ignored by default; WithKnownFields() opts into
rejecting them.
Duplicate mapping keys are rejected by default.
Options apply in order, so later options override earlier settings.

Defaults and compatibility

Setting	Classic Marshal / Unmarshal	Load / Dump defaults
Output indentation	4 spaces	2 spaces
Sequence indentation	Non-compact	Compact
Quote preference	Legacy mixed quoting	Single quotes where possible
Preferred output width	Unlimited for Marshal	80 characters
Error presentation	v3 style	v4 style with stage and position

Quoting still depends on scalar content and styles, and line width is a
preference rather than a guaranteed maximum.
NewDecoder uses v3 error formatting; NewEncoder retains v3 output settings
with v4 error formatting.

Choose WithV3Defaults() to select compatibility defaults through the new API.
When replacing Marshal, also disable wrapping to match its line-width setting:

output, err := yaml.Dump(config,
    yaml.WithV3Defaults(),
    yaml.WithLineWidth(-1),
)

Presets select defaults; they do not reverse every v4 bug fix or reproduce every
legacy code path.
For example, package-level Load requires exactly one document, whereas
Unmarshal retains legacy handling of empty input and trailing content.
WithSingleDocument() deliberately skips validation of later documents.
Use WithAllDocuments() to load or dump slices as document streams, or use a
streaming loader or dumper to process documents individually.

Options, plugins, and nodes

Options control indentation, sequence layout, quoting, document markers,
Unicode escaping, field validation, and more.
OptsYAML accepts YAML configuration for supported settings, which can also be
shared with the CLI.

The public plugin APIs cover six areas:

Loader-Limits: configure depth and alias expansion checks.
Merge-Key: control merge directives and mapping conflicts, or replace the
merge algorithm.
Alias-Data: supply external anchors, retain anchors across documents, use
dotted paths, or reject alias references.
Error-format: select error presentation or implement a custom formatter.
YAML-parser: select an alternative parser implementation.
Tab-indent: opt into tab-aware input and output indentation.

The core module provides implementations for these APIs.
Additional parsers live in separate modules, keeping their dependencies optional.
Existing depth and alias protections remain enabled by default.

yaml.Node gives access to tags, styles, comments, anchors, and source positions.
Node.Load and Node.Dump accept options for node conversion.
Pass construction options explicitly inside custom unmarshaler hooks;
Node.Load starts with fresh defaults independently of its calling loader.
Stream nodes can expose encoding and YAML directives.
Node output retains supported styles and comments without promising identical
source formatting.

Migration details to check

NewLoader and NewDumper return errors; check them before using the stream.
Check dumper Dump and Close errors as well.

Custom UnmarshalYAML(*yaml.Node) error hooks must use the v4 node type.
Recognized v3 node hooks produce a migration error rather than silently losing
custom behavior.
The legacy UnmarshalYAML(func(any) error) error callback remains supported.

Conversion failures return structured *yaml.LoadErrors values.
Use errors.As to inspect structured errors or match legacy *yaml.TypeError
values, rather than relying on a direct type assertion or fixed message text.

Review the migration guide
for the complete compatibility guidance.

Inspect YAML with the CLI

Install the CLI from this release:

go install go.yaml.in/yaml/v4/cmd/go-yaml@v4.0.0

Convert to JSON, inspect nodes, or examine scanner and parser output:

go-yaml -J config.yaml
go-yaml -N config.yaml
go-yaml -T config.yaml
go-yaml -E config.yaml

The CLI also supports reusable options files and pipelines between intermediate
stages, making small bug reports easier to reproduce.
Runtime plugin selection chooses implementations already linked into the binary.

`v4.0.0-rc.9`

Compare Source

`v4.0.0-rc.8`

Compare Source

`v4.0.0-rc.7`

Compare Source

`v4.0.0-rc.6`

Compare Source

`v4.0.0-rc.5`

Compare Source

`v4.0.0-rc.4`

Compare Source

golangci/golangci-lint (golangci-lint)

`v2.15.0`

Compare Source

Released on 2026-10-16

Linters new features or changes
- errcheck: from 1.20.0 to 1.30.0
- exhaustive: from 0.13.0 to 0.15.0 (⚠️ changes)
- gocognit: from 1.2.1 to 1.3.0
- golines: from 0.15.0 to 0.16.0
- govet-modernize: from 0.50.0 to 0.52.0
- loggercheck: from 0.12.0 to 0.13.0
- predeclared: from 0.2.2 to 0.3.0
- wrapcheck: from 2.12.0 to 2.13.0
Linters bug fixes
- bidichk: from 0.3.3 to 0.3.4
- canonicalheader: from a25c71c to e18e5c5
- gofumpt: improve deprecation logs
- gosec: improve concurrency default value
- iface: from 1.5.1 to 1.5.3
- paralleltest: from 1.0.15 to 1.0.16
- revive: from 1.17.0 to 1.17.1
- revive: the rules context-keys-type, errorf, modifies-value-receiver, range-val-address, string-of-int, time-equal, time-naming, unexported-return, unhandled-error, var-declaration are working (less randomly).
- rowserrcheck: from c5f79b8 to e0740d5
- staticcheck: from 0.8.1 to 0.8.2
Bug fixes
- fix: compute custom version hash with module versions
- fix: env vars loading (related to revive)

⚠️ Changes of the exhaustive linter:

The replaced options still exists, and partially works, but they are deprecated.
The options explicit-exhaustive-switch and explicit-exhaustive-map have been replaced by explicit-exhaustive.
The check the value map has been replaced by mapliteral.
The option ignore-enum-members (string) has been replaced by ignore-constants (slice).
The option ignore-enum-types (string) has been replaced by ignore-types (slice).
New report messages.
The linter is a now a "slow" linter.

`v2.14.0`

Compare Source

Released on 2026-09-24

Bug fixes
- fix: cache of facts reloading
Linters new features or changes
- bodyclose: from 73d1f95 to 857993a (new directive handled)
- exhaustive: from 0.12.0 to 0.13.0
- exhaustruct_v5: from 5.0.3 to 5.2.0 (new option: allow-empty-blank-assignments)
- go-check-sumtype: from 0.3.1 to ae6904d
- gocritic: from 0.14.4 to 0.15.0
- gofumpt: from 0.11.0 to 0.12.0
- gomoddirectives: from 0.9.0 to 0.10.0
- gosec: from 2.28.0 to 2.29.0 (re-enable G407)
- govet-modernize: from 0.49.0 to 0.50.0
- loggercheck: from 0.11.0 to 0.12.0
- revive: from 1.15.0 to 1.17.0 (new rules: marshal-receiver, multiline-if-init, use-slices-concat)
- tagliatelle: from 0.7.2 to 0.8.0
Linters bug fixes
- fatcontext: from 0.10.0 to 0.10.1
- flock: from 0.13.0 to 0.13.1
- godoclint: from 0.11.2 to 0.11.4
- protogetter: from 0.3.21 to 1.0.1
- recvcheck: from 0.3.0 to 0.3.1
- tagalign: from 1.4.3 to 1.4.4

`v2.13.2`

Compare Source

Released on 2026-08-28

Bug fixes
- Decrease cache entropy
Linters bug fixes
- iface: from 1.5.0 to 1.5.1
- staticcheck: from 0.8.0 to 0.8.1
- unparam: from 3f964bc to 2fa3d84
- canonicalheader: from v1.1.2 to a temporary fork

goreleaser/goreleaser (goreleaser)

`v2.20.0`

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.20.

Security

GoReleaser v2.20.0 fixes an issue that could write inline publishing SSH private keys in cleartext to dist/artifacts.json. Upgrade to v2.20.0 and revoke and replace any keys exposed through shared or uploaded release metadata.

See GHSA-9422-8p9m-393x for details.

Changelog

New Features

e1176e6: feat(cask): render zap :not_required when no zap directives are set (#7253) (@SimonMiaou)
afd8f84: feat(gitlab): add asset type selection (#7255) (@mavogel)
b8f79e0: feat(ko): allow templates in platforms (#7233) (@mrueg and @caarlos0)
2e260e4: feat(winget): update manifest schema to latest (1.28.0) (#7242) (@abemedia)
4a1a1ae: feat: allow skipping the changelog with --skip=changelog (#7234) (@mrueg and @caarlos0)

Bug fixes

24ec0fd: fix(bluesky): do not add a link facet when there is no release URL (#7262) ([@10kartik](https://red

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Monday through Friday (* * * * 1-5)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

socket-security · 2026-08-25T08:02:15Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	go.yaml.in/yaml/v4@v4.0.0-rc.3 ⏵ v4.0.0-rc.6	^-1
	github.com/santhosh-tekuri/jsonschema/v6@v6.0.2 ⏵ v6.0.3	⁺¹

View full report

buildkite-renovate-self-hosted · 2026-08-25T12:00:38Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

sj26 · 2026-11-10T02:49:37Z

🤖 Closing this stale mixed update after #667 merged. The fixture action updates are now excluded. Renovate marks this grouped PR as automatically recreated when closed, so its legitimate CI, Go, and toolchain updates should return under the new rules on the next run.

buildkite-renovate-self-hosted Bot added the dependencies label Aug 25, 2026

buildkite-renovate-self-hosted Bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from 6ff8356 to 0f5e845 Compare November 9, 2026 08:01

fix(deps): update all non-major dependencies

205b64d

buildkite-renovate-self-hosted Bot force-pushed the renovate/all-minor-patch branch from 0f5e845 to 205b64d Compare November 10, 2026 00:01

sj26 mentioned this pull request Nov 10, 2026

Preserve action versions in examples and test fixtures #667

Merged

sj26 closed this Nov 10, 2026

Navigation Menu

Repository navigation

fix(deps): update all non-major dependencies - #393

fix(deps): update all non-major dependencies#393
buildkite-renovate-self-hosted[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

buildkite-renovate-self-hosted Bot commented Aug 25, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 25, 2026

Uh oh!

buildkite-renovate-self-hosted Bot commented Aug 25, 2026

Uh oh!

sj26 commented Nov 10, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

buildkite-renovate-self-hosted Bot commented Aug 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

Enhancements

Dependency Upgrade

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

v4.10.4: Preserves segment position across alternatives

What's Changed

New Contributors

v4.10.3: Handles character ranges when using WithCaseInsensitive

v4.10.2: Better support for Windows "Junctions"

What's Changed

New Contributors

v4.10.1: Fixed issue with alternatives and character classes

What's Changed

New Contributors

bugfixes:

features

v1.27.3: 1.27.3

v1.27.2: 1.27.2

v1.27.1: 1.27.1

v1.27.0: 1.27.0

v1.26.10: 1.26.10

v1.26.9: 1.26.9

v1.26.8: 1.26.8

v1.26.7: 1.26.7

v1.26.6: 1.26.6

v4.0.0: go-yaml v4.0.0

go-yaml v4.0.0

Getting started

Why add Load and Dump?

Defaults and compatibility

Options, plugins, and nodes

Migration details to check

Inspect YAML with the CLI

Further reading and thanks

Announcement

Security

Changelog

New Features

Bug fixes

Configuration

Uh oh!

socket-security Bot commented Aug 25, 2026

Uh oh!

buildkite-renovate-self-hosted Bot commented Aug 25, 2026

Edited/Blocked Notification

Uh oh!

sj26 commented Nov 10, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

buildkite-renovate-self-hosted Bot commented Aug 25, 2026 •

edited

Loading

`v4.10.4`: Preserves segment position across alternatives

`v4.10.3`: Handles character ranges when using WithCaseInsensitive

`v4.10.2`: Better support for Windows "Junctions"

`v4.10.1`: Fixed issue with alternatives and character classes

`v1.27.3`: 1.27.3

`v1.27.2`: 1.27.2

`v1.27.1`: 1.27.1

`v1.27.0`: 1.27.0

`v1.26.10`: 1.26.10

`v1.26.9`: 1.26.9

`v1.26.8`: 1.26.8

`v1.26.7`: 1.26.7

`v1.26.6`: 1.26.6

`v4.0.0`: go-yaml v4.0.0