Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
anothrNick/github-tag-action	action	minor	1.67.0 → 1.75.0
flyway/flyway		patch	9.22.2 → 9.22.3
gitea/gitea		minor	1.20 → 1.26
offen/docker-volume-backup (source)		minor	v2.28.0 → v2.48.0
com.google.cloud.tools:jib-maven-plugin	build	minor	3.3.2 → 3.5.1
com.diffplug.spotless:spotless-maven-plugin	build	minor	2.38.0 → 2.46.1
io.micrometer:context-propagation	compile	minor	1.0.4 → 1.2.1
com.discord4j:discord4j-core	compile	minor	3.2.5 → 3.3.2
com.google.guava:guava	compile	patch	32.1.2-jre → 32.1.3-jre
org.eclipse.jgit:org.eclipse.jgit	compile	minor	6.6.0.202305301015-r → 6.10.1.202505221210-r
org.passay:passay (source)	compile	patch	1.6.3 → 1.6.6
org.apache.httpcomponents.client5:httpclient5 (source)	compile	minor	5.2.1 → 5.6.1
io.cucumber:cucumber-bom (source)	import	minor	7.13.0 → 7.34.3
org.springframework.boot:spring-boot-starter-parent (source)	parent	minor	3.1.2 → 3.5.15
me.qoomon:maven-git-versioning-extension	build	minor	9.6.5 → 9.12.1

---

Release Notes

anothrNick/github-tag-action (anothrNick/github-tag-action)

v1.75.0

Compare Source

What's Changed

• Support Escapable Characters in Prefix With BATs Testing by @​TheYorkshireDev in #​347

New Contributors

• @​TheYorkshireDev made their first contribution in #​347

Full Changelog: anothrNick/github-tag-action@1...1.75.0

v1.74.0

Compare Source

What's Changed

• Bugfix for duplicate prefix on first prerelease tag by @​rorybartie in #​338

New Contributors

• @​rorybartie made their first contribution in #​338

Full Changelog: anothrNick/github-tag-action@1...1.74.0

v1.73.0

Compare Source

What's Changed

• Add git-lfs to installed packages in Dockerfile by @​mikaellindemann in #​329

New Contributors

• @​mikaellindemann made their first contribution in #​329

Full Changelog: anothrNick/github-tag-action@1...1.73.0

v1.72.0

Compare Source

What's Changed

• Added TAG_PREFIX so more descriptive tags can be used by @​timothyclarke in #​326

New Contributors

• @​timothyclarke made their first contribution in #​326

Full Changelog: anothrNick/github-tag-action@1...1.72.0

v1.71.0

Compare Source

What's Changed

• Add tag message override by @​omerap12 in #​323

New Contributors

• @​omerap12 made their first contribution in #​323

Full Changelog: anothrNick/github-tag-action@1...1.71.0

v1.70.0

Compare Source

What's Changed

• Add old_tag Output to the README by @​gabriel-stackhouse in #​314
• Fix Auto Releases by @​gabriel-stackhouse in #​317

New Contributors

• @​gabriel-stackhouse made their first contribution in #​314

Full Changelog: anothrNick/github-tag-action@1...1.70.0

v1.69.0

Compare Source

v1.68.0

Compare Source

go-gitea/gitea (gitea/gitea)

v1.26

• SECURITY

  • fix(permissions): Fix reading permission (#​37769)
  • fix(actions): make artifact signature payloads unambiguous (#​37707)
  • fix: Unify public-only token filtering in API queries and repo access checks (#​37118)
  • fix: Add missed token scope checking (#​37735)
  • fix(oauth): bind token exchanges to the original client request (#​37704)
  • fix(oauth): strengthen PKCE validation and refresh token replay protection (#​37706)
  • fix(web): enforce token scopes on raw, media, and attachment downloads (#​37698)
  • fix(security): enforce wiki git writes and LFS token access at request time (#​37695)
  • feat(api): encrypt AWS creds (#​37679)
  • fix(deps): update dependency mermaid to v11.15.0 [security], add e2e test
  • fix(packages): Add label for private and internal package and fix composor package source permission check (#​37610)
  • fix(git): Fix smart http request scope bug (#​37583)
  • Fix basic auth bug (#​37503)
  • Fix allow maintainer edit permission check (#​37479) (#​37484)
  • Fix URL sanitization to handle schemeless credentials (#​37440) (#​37471)
  • Fix attachment Content-Security-Policy (#​37455) (#​37464)
  • chore(deps): bump go-git/go-git/v5 to 5.19.0 (#​37608)

• BUGFIXES

  • fix(pull): handle empty pull request files view to allow reviews (#​37783)
  • fix(markup): make RenderString never fail (#​37779)
  • fix: add natural sort to sortTreeViewNodes (#​37772)
  • fix: package creation unique conflict (#​37774)
  • fix!: add DEFAULT_TITLE_SOURCE setting for pull request title default behavior (#​37465)
  • fix: Allow direct commits for unprotected files with push restrictions (#​37657)
  • fix(actions): wrong assumption that run id always >= job id (#​37737)
  • fix(auth): set User-Agent on avatar fetch and sync avatar on link-account register (#​37564) (#​37588)
  • fix(actions): deadlock between PrepareRunAndInsert and UpdateTaskByState (#​37692)
  • fix(repo): /generate must sync the branch table for the new repo (#​37693)
  • build: Fix snap build (1.26)
  • fix(actions): run TransferLogs on UpdateLog{Rows:[], NoMore:true} (#​37631)
  • fix show correct mergebase
  • fix: make clone URL respect public URL detection setting (#​37615)
  • fix: "run as root" check (#​37622)
  • chore(deps): update dependency go to v1.26.3 (#​37601)
  • Compare dropdown fails when selecting branch with no common merge-base (#​37470)
  • fix: treat email addresses case-insensitively (#​37600)
  • fix(actions): fix blank lines after ::endgroup:: (#​37597)
  • fix(actions): report individual step status in workflow job API response (#​37592)
  • fix: Invalid UTF-8 commit messages in JSON API responses (#​37542)
  • fix: use consistent GetUser family functions (#​37553)
  • fix(api): return 409 message instead of empty JSON for wrong commit id (#​37572)
  • fix(actions): prevent panic when workflow contains null jobs (#​37570)
  • Make ServeSetHeaders default to download attachment if filename exists (#​37552) (#​37555)
  • Fix(actions): validate workflow param to prevent 500 error (#​37546) (#​37554)
  • Don't unblock run-level-concurrency-blocked runs in the resolver (#​37461) (#​37538)
  • Fix(packages): use file names for generic web downloads (#​37514) (#​37520)
  • Fix merge autodetect can't close other PRs but only the last one when multiple PRs are pushed at once (#​37512) (#​37516)
  • Fix update branch protection order (#​37508) (#​37513)
  • Fix mCaptcha broken after Vite migration (#​37492) (#​37509)
  • Fix review submission from single-commit PR view (#​37475) (#​37485)
  • Fix scheduled action panic with null event payload (#​37459) (#​37466)
  • Make GetPossibleUserByID can handle deleted user (#​37430) (#​37431)
  • Remove excessive quote from terraform instructions (#​37424) (#​37426)
  • Fix color regressions, add priority color (#​37417) (#​37421)

• MISC

  • Add CurrentURL template variable back (#​37444) (#​37449)

v1.25

• SECURITY
  • Toolchain Update to Go 1.25.6 (#​36480) (#​36487)
  • Adjust the toolchain version (#​36537) (#​36542)
  • Update toolchain to 1.25.8 for v1.25 (#​36888)
  • Prevent redirect bypasses via backslash-encoded paths (#​36660) (#​36716)
  • Fix get release draft permission check (#​36659) (#​36715)
  • Fix a bug user could change another user's primary email (#​36586) (#​36607)
  • Fix OAuth2 authorization code expiry and reuse handling (#​36797) (#​36851)
  • Add validation constraints for repository creation fields (#​36671) (#​36757)
  • Fix bug to check whether user can update pull request branch or rebase branch (#​36465) (#​36838)
  • Add migration http transport for push/sync mirror lfs (#​36665) (#​36691)
  • Fix track time list permission check (#​36662) (#​36744)
  • Fix track time issue id (#​36664) (#​36689)
  • Fix path resolving (#​36734) (#​36746)
  • Fix dump release asset bug (#​36799) (#​36839)
  • Fix org permission API visibility checks for hidden members and private orgs (#​36798) (#​36841)
  • Fix forwarded proto handling for public URL detection (#​36810) (#​36836)
  • Add a git grep search timeout (#​36809) (#​36835)
  • Fix oauth2 s256 (#​36462) (#​36477)
• ENHANCEMENTS
  • Make security-check informational only (#​36681) (#​36852)
  • Upgrade to github.com/cloudflare/circl 1.6.3, svgo 4.0.1, markdownlint-cli 0.48.0 (#​36840)
  • Add some validation on values provided to USER_DISABLED_FEATURES and EXTERNAL_USER_DISABLED_FEATURES (#​36688) (#​36692)
  • Upgrade gogit to 5.16.5 (#​36687)
  • Add wrap to runner label list (#​36565) (#​36574)
  • Add dnf5 command for Fedora in RPM package instructions (#​36527) (#​36572)
  • Allow scroll propagation outside code editor (#​36502) (#​36510)
• BUGFIXES
  • Fix non-admins unable to automerge PRs from forks (#​36833) (#​36843)
  • Fix bug when pushing mirror with wiki (#​36795) (#​36807)
  • Fix artifacts v4 backend upload problems (#​36805) (#​36834)
  • Fix CRAN package version validation to allow more than 4 version components (#​36813) (#​36821)
  • Fix force push time-line commit comments of pull request (#​36653) (#​36717)
  • Fix SVG height calculation in diff viewer (#​36748) (#​36750)
  • Fix push time bug (#​36693) (#​36713)
  • Fix bug the protected branch rule name is conflicted with renamed branch name (#​36650) (#​36661)
  • Fix bug when do LFS GC (#​36500) (#​36608)
  • Fix focus lost bugs in the Monaco editor (#​36609)
  • Reprocess htmx content after loading more files (#​36568) (#​36577)
  • Fix assignee sidebar links and empty placeholder (#​36559) (#​36563)
  • Fix issues filter dropdown showing empty label scope section (#​36535) (#​36544)
  • Fix various mermaid bugs (#​36547) (#​36552)
  • Fix data race when uploading container blobs concurrently (#​36524) (#​36526)
  • Correct spacing between username and bot label (#​36473) (#​36484)

v1.24

• SECURITY
  • Refactor legacy code (#​35708) (#​35713)
  • Fixing issue #​35530: Password Leak in Log Messages (#​35584) (#​35665)
  • Fix a bug missed return (#​35655) (#​35671)
• BUGFIXES
  • Fix inputing review comment will remove reviewer (#​35591) (#​35664)
• TESTING
  • Mock external service in hcaptcha TestCaptcha (#​35604) (#​35663)
  • Fix build (#​35669)

v1.23

• SECURITY
  • Fix a bug when uploading file via lfs ssh command (#​34408) (#​34411)
  • Update net package (#​34228) (#​34232)
• BUGFIXES
  • Fix releases sidebar navigation link (#​34436) #​34439
  • Fix bug webhook milestone is not right. (#​34419) #​34429
  • Fix two missed null value checks on the wiki page. (#​34205) (#​34215)
  • Swift files can be passed either as file or as form value (#​34068) (#​34236)
  • Fix bug when API get pull changed files for deleted head repository (#​34333) (#​34368)
  • Upgrade github v61 -> v71 to fix migrating bug (#​34389)
  • Fix bug when visiting comparation page (#​34334) (#​34364)
  • Fix wrong review requests when updating the pull request (#​34286) (#​34304)
  • Fix github migration error when using multiple tokens (#​34144) (#​34302)
  • Explicitly not update indexes when sync database schemas (#​34281) (#​34295)
  • Fix panic when comment is nil (#​34257) (#​34277)
  • Fix project board links to related Pull Requests (#​34213) (#​34222)
  • Don't assume the default wiki branch is master in the wiki API (#​34244) (#​34245)
• DOCUMENTATION
  • Update token creation API swagger documentation (#​34288) (#​34296)
• MISC
  • Fix CI Build (#​34315)
  • Add riscv64 support (#​34199) (#​34204)
  • Bump go version in go.mod (#​34160)
  • remove hardcoded 'code' string in clone_panel.tmpl (#​34153) (#​34158)

v1.22

• SECURITY
  • Fix misuse of PublicKeyCallback(#​32810)
• BUGFIXES
  • Fix lfs migration (#​32812) (#​32818)
  • Add missing two sync feed for refs/pull (#​32815)
• TESTING
  • Avoid MacOS keychain dialog in integration tests (#​32813) (#​32816)

v1.21

• SECURITY
  • Use go1.21.9 to include Golang security fix
  • Fix possible renderer security problem (#​30136) (#​30315)
  • Performance optimization for git push and check permissions for push options (#​30104) (#​30354)
• BUGFIXES
  • Fix close file in the Upload func (#​30262) (#​30269)
  • Fix inline math blocks can't be preceded/followed by alphanumerical characters (#​30175) (#​30250)
  • Fix missing 0 prefix of GPG key id (#​30245) (#​30247)
  • Include encoding in signature payload (#​30174) (#​30181)
  • Move from max( id ) to max( index ) for latest commit statuses (#​30076) (#​30155)
  • Load attachments for code comments (#​30124) (#​30126)
  • Fix gitea doctor will remove repo-avatar files when executing command storage-archives (#​30094) (#​30120)
  • Fix possible data race on tests (#​30093) (#​30108)
  • Fix duplicate migrated milestones (#​30102) (#​30105)
  • Fix panic for fixBrokenRepoUnits16961 (#​30068) (#​30100)
  • Fix incorrect SVGs (#​30086) (#​30087)
  • Fix create commit status (#​30225) (#​30340)
  • Fix misuse of unsupported global variables (#​30402)
  • Fix to delete the cookie when AppSubURL is non-empty (#​30375) (#​30468)
  • Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#​30357) (#​30408)
  • Change the default maxPerPage for gitbucket (#​30392) (#​30471)
  • Check the token's owner and repository when registering a runner (#​30406) (#​30412)
  • Avoid losing token when updating mirror settings (#​30429) (#​30466)
  • Fix commit status cache which missed target_url (#​30426) (#​30445)
  • Fix rename branch 500 when the target branch is deleted but exist in database (#​30430) (#​30437)
  • Fix mirror error when mirror repo is empty (#​30432) (#​30467)
  • Use db.ListOptions directly instead of Paginator interface to make it easier to use and fix performance of /pulls and /issues (#​29990) (#​30447)
  • Fix code owners will not be mentioned when a pull request comes from a forked repository (#​30476) (#​30497)
• DOCS
  • Update actions variables documents (#​30394) (#​30405)
• MISC
  • Update katex to 0.16.10 (#​30089)
  • Upgrade go-sqlite to v1.14.22 (#​30462)

offen/docker-volume-backup (offen/docker-volume-backup)

v2.48.0

Compare Source

Features

• Support reading timezone info from env #​748 (thanks @​mmichalak-swe)

Chores

• Dependency hygiene #​737 #​738 #​742 #​745 #​743 #​751 #​752 #​754 #​753 #​755 #​758 #​757 #​762 #​761 #​760 #​676 #​766 #​763 #​764 #​765 #​768 #​769 #​770 #​771
• increase rebuild speed by avoiding retrigger of mod download #​759 (thanks @​mmittelb)

Docs

• Update docs on setting timezone #​750 (thanks @​mmichalak-swe)
• Fix typos in documentation #​739 (thanks @​SmallFriendlyKiwi)

---

Refer to the documentation at https://offen.github.io/docker-volume-backup/how-tos/set-container-timezone.html for more information on how to update your timezone configuration following this release

v2.47.2

Compare Source

Fixes

• Google Drive upload fails silently when configuration is wrong #​733
• Service count in Swarm mode is always 0 #​736 (thanks @​SmallFriendlyKiwi)

Chores

• Dependency hygiene #​731 #​734 #​735

v2.47.1

Compare Source

Fixes

• Send Content-MD5 header on S3 uploads #​728 (thanks @​tianshanghong)

Chores

• Build using Go 1.26 #​730 #​726
• Dependeny hygiene #​709 #​710 #​712 #​713 #​714 #​715 #​716 #​717 #​718 #​719 #​720 #​721 #​722 #​723 #​724 #​725

v2.47.0

Compare Source

Features

• Add print-config subcommand for debugging #​698 (thanks @​le-lenn)

Fixes

• send failure notifications for config init errors too #​697 (thanks @​le-lenn)

Chores

• Update alpine version to 3.23 #​693
• Migrate from package docker/docker to moby packages #​676 #​682
• Dependency hygiene #​670 #​672 #​669 #​673 #​671 #​675 #​677 #​678 #​679 #​68 #​684 #​683 #​681 #​685 #​688 #​689 #​690 #​691 #​692 #​695 #​701 #​706 #​707
• Desired go version can be read from go.mod #​647
• optimize test suite for local use #​702 #​700 (thanks @​le-lenn)

v2.46.1

Compare Source

Fixes

• Close dangling SSH connections after use #​668

Chores

• Dependency Hygiene #​665 #​666

v2.46.0

Compare Source

Features

• Add option to skip restart of stopped containers/services after backup #​659 (thanks @​ChainsLunatic)

Chores

• Dependency hygiene #​656 #​657 #​658 #​660 #​661 #​662

v2.45.0

Compare Source

Features

• Add optional jittering before any backup actions #​654 (thanks @​estebanthi)

Fixes

• Update shoutrrr to set default SMTP timeout of 10s #​655 (thanks @​PythonGermany @​nicholas-fedor)

Chores

• Dependeny hygiene #​649 #​650 #​651 #​652

v2.44.1

Compare Source

Fixes

• Ensure destination exists when using SSH storage #​646 (Thanks @​estebanthi)

Chores

• Replace containrrr/shoutrrr with nicholas-fedor/shoutrrr #​643 (Thanks @​nicholas-fedor for updating the documentation for my usecase)
• Dependency hygiene #​616 #​617 #​618 #​619 #​625 #​626 #​630 #​632 #​633 #​634 #​636 #​635 #​639 #​640 #​641 #​644 #​645
• Update golanglint-ci integration #​637

Docs

• Fix mistake in notification template documentation #​623 (Thanks @​igox)

v2.44.0

Compare Source

Features

• Add Google Drive support #​613 (thanks @​luizguilhermesj)

Chores

• Dependency hygiene #​594 #​596 #​599 #​600 #​601 #​602 #​604 #​606 #​605 #​610 #​609 #​615
• Test setup improvements #​597 #​598

v2.43.4

Compare Source

Fixes

• Fall back to default behavior when deployed to a Swarm worker node #​593

Docs

• Link to Dropbox from config reference is outdated #​562
• Update encrypt-backups.md #​550 (Thanks @​danial23)

Chores

• Dependency hygiene #​551 #​553 #​554 #​555 #​556 #​557 #​558 #​559 #​560 #​568 #​569 #​570 #​572 #​573 #​577 [#​579](https://redirect.github.com/offen/docker-volume-backup/issues/5

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.