fix(deps): update all non-major dependencies in .github/workflows/tinygo.yml

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/cache (changelog)	action	digest	a783357 → cdf6c1f
actions/checkout (changelog)	action	digest	1af3b93 → de0fac2
actions/setup-go (changelog)	action	digest	4469467 → 7a3fe6c
actions/stale (changelog)	action	digest	3a9db7e → 9971854
codecov/codecov-action (changelog)	action	digest	5a10915 → 671740a
github.com/bmatcuk/doublestar/v4	require	minor	v4.9.1 → v4.10.0
github.com/corazawaf/coraza-coreruleset/v4	require	minor	v4.20.0 → v4.23.0
github.com/corazawaf/libinjection-go	require	patch	v0.2.2 → v0.2.3
github.com/foxcpp/go-mockdns	require	minor	v1.1.0 → v1.2.0
github.com/jcchavezs/mergefs	require	patch	v0.1.0 → v0.1.1
github.com/kaptinlin/jsonschema	require	minor	v0.4.6 → v0.7.1
github.com/mccutchen/go-httpbin/v2	require	minor	v2.18.3 → v2.20.0
github/codeql-action (changelog)	action	digest	e296a93 → 9e907b5
go	uses-with	minor	1.25.x → 1.26.x

---

Release Notes

bmatcuk/doublestar (github.com/bmatcuk/doublestar/v4)

v4.10.0: Added WithNoHidden option

Compare Source

Added support for a WithNoHidden option to ignore hidden files in patterns that might unintentionally match them. For example, a .config directory would not be matched by * or recursed into by **, but would be matched by .* or recursed by .config/**.

Thanks to @​lukasngl for the initial PR and idea!

What's Changed

• feat: add WithNoHidden option to skip hidden files by @​lukasngl in #​109

New Contributors

• @​lukasngl made their first contribution in #​109

Full Changelog: bmatcuk/doublestar@v4.9.2...v4.10.0

v4.9.2: Fixed Handling of Paths With Meta Chars Using Alts

Compare Source

@​toga4 submitted a PR that fixed a small bug with the way paths were handled when the pattern used {alts}: if some part of the on-disk path that came before the {alt} included meta characters (say, a directory name that included the character ?), these meta characters were not escaped when they were passed back through the globbing routines. This caused doublestar to interpret them as actual meta characters, rather than a fixed-string path as it should have. Nice find, @​toga4 !

What's Changed

• fix: escape meta characters in paths during brace expansion by @​toga4 in #​108

New Contributors

• @​toga4 made their first contribution in #​108

Full Changelog: bmatcuk/doublestar@v4.9.1...v4.9.2

corazawaf/coraza-coreruleset (github.com/corazawaf/coraza-coreruleset/v4)

v4.23.0

Compare Source

v4.23.0 ships:

• CRS v4.23.0 (See CRS changelog: https://github.com/coreruleset/coreruleset/releases/tag/v4.23.0).
• Coraza v3.3.3 config file.

Note that to run the CRS regression tests against this version:

• An updated version (>=v1.0.0) of go-ftw is needed. See go-ftw releases.
• Albedo is expected to be the backend server.

Full Changelog: corazawaf/coraza-coreruleset@v4.22.0...v4.23.0

v4.22.0

Compare Source

What's Changed

• chore(deps): update module github.com/corazawaf/coraza-coreruleset/v4 to v4.21.0 by @​renovate[bot] in #​75
• renovate: add gomodTidy as postUpdateOptions by @​M4tteoP in #​76
• chore(deps): update dependency coreruleset/coreruleset to v4.22.0 by @​renovate[bot] in #​78

Full Changelog: corazawaf/coraza-coreruleset@v4.21.0...v4.22.0

v4.21.0

Compare Source

v4.21.0 ships:

• CRS v4.21.0 (See CRS changelog: https://github.com/coreruleset/coreruleset/releases/tag/v4.21.0).
• Coraza v3.3.3 config file.

Note that to run the CRS regression tests against this version:

• An updated version (>=v1.0.0) of go-ftw is needed. See go-ftw releases.
• Albedo is expected to be the backend server.

Full Changelog: corazawaf/coraza-coreruleset@v4.20.0...v4.21.0

corazawaf/libinjection-go (github.com/corazawaf/libinjection-go)

v0.2.3

Compare Source

0.2.3 (2025-11-16)

Bug Fixes

• gosec warnings (4a07924)
• update golanci-lint (07d3576)

Continuous Integration

• add additional linters (f701d80)
• fix precommit (eb2db3e)

What's Changed

• chore(deps): pin dependencies in .github/workflows/test-coverage.yml by @​renovate[bot] in #​33
• chore(deps): update github/codeql-action digest to 6624720 in .github/workflows/codeql.yml by @​renovate[bot] in #​34
• chore(deps): update actions/checkout digest to 11bd719 in .github/workflows/test-coverage.yml by @​renovate[bot] in #​35
• chore(deps): update all non-major dependencies in .github/workflows/test-coverage.yml by @​renovate[bot] in #​36
• chore(deps): update github/codeql-action digest to 4f3212b in .github/workflows/codeql.yml by @​renovate[bot] in #​37
• chore(deps): update github/codeql-action digest to 396bb3e in .github/workflows/codeql.yml by @​renovate[bot] in #​38
• chore(deps): update github/codeql-action digest to ea9e4e3 in .github/workflows/codeql.yml by @​renovate[bot] in #​39
• chore(deps): update github/codeql-action digest to f09c1c0 in .github/workflows/codeql.yml by @​renovate[bot] in #​40
• chore(deps): update github/codeql-action digest to aa57810 in .github/workflows/codeql.yml by @​renovate[bot] in #​41
• chore(deps): update github/codeql-action digest to babb554 in .github/workflows/codeql.yml by @​renovate[bot] in #​42
• chore(deps): update actions/setup-go digest to 3041bf5 in .github/workflows/test-coverage.yml by @​renovate[bot] in #​43
• chore(deps): update github/codeql-action digest to df409f7 in .github/workflows/codeql.yml by @​renovate[bot] in #​44
• chore(deps): update github/codeql-action digest to 48ab28a in .github/workflows/codeql.yml by @​renovate[bot] in #​45
• chore(deps): update github/codeql-action digest to b6a472f in .github/workflows/codeql.yml by @​renovate[bot] in #​47
• chore(deps): update ncipollo/release-action digest to cdcc88a in .github/workflows/release.yml by @​renovate[bot] in #​48
• chore(deps): update all non-major dependencies in .github/workflows/test-coverage.yml by @​renovate[bot] in #​49
• chore(deps): update github/codeql-action digest to dd196fa in .github/workflows/codeql.yml by @​renovate[bot] in #​50
• chore(deps): update github/codeql-action digest to ee117c9 in .github/workflows/codeql.yml by @​renovate[bot] in #​51
• chore(deps): update github/codeql-action digest to f6091c0 in .github/workflows/codeql.yml by @​renovate[bot] in #​52
• chore(deps): update github/codeql-action digest to 17a820b in .github/workflows/codeql.yml by @​renovate[bot] in #​53
• chore(deps): update actions/setup-python digest to 4237552 in .github/workflows/lint.yml by @​renovate[bot] in #​54
• chore(deps): update github/codeql-action digest to dd74661 in .github/workflows/codeql.yml by @​renovate[bot] in #​55
• chore(deps): update github/codeql-action digest to 9e8d078 in .github/workflows/codeql.yml by @​renovate[bot] in #​56
• chore(deps): update github/codeql-action digest to b56ba49 in .github/workflows/codeql.yml by @​renovate[bot] in #​57
• chore(deps): update ncipollo/release-action digest to 440c8c1 in .github/workflows/release.yml by @​renovate[bot] in #​58
• chore(deps): update github/codeql-action digest to 6bb031a in .github/workflows/codeql.yml by @​renovate[bot] in #​59
• chore(deps): update dependency go to 1.24.x in .github/workflows/test-coverage.yml by @​renovate[bot] in #​60
• chore(deps): update all non-major dependencies in .github/workflows/test-coverage.yml by @​renovate[bot] in #​61
• chore(deps): update github/codeql-action digest to 1b549b9 in .github/workflows/codeql.yml by @​renovate[bot] in #​62
• chore(deps): update actions/setup-python digest to 8d9ed9a in .github/workflows/lint.yml by @​renovate[bot] in #​63
• chore(deps): update actions/checkout action to v5 in .github/workflows/test-coverage.yml by @​renovate[bot] in #​65
• chore(deps): update all major dependencies to v6 in .github/workflows/test-coverage.yml (major) by @​renovate[bot] in #​66
• chore(deps): update github/codeql-action action to v4 in .github/workflows/codeql.yml by @​renovate[bot] in #​68
• chore: update go version by @​fzipi in #​73

Full Changelog: corazawaf/libinjection-go@v0.2.2...v0.2.3

foxcpp/go-mockdns (github.com/foxcpp/go-mockdns)

v1.2.0

Compare Source

What's Changed

• Fix CNAME chain handling when querying for a CNAME by @​horkhe in #​20

New Contributors

• @​horkhe made their first contribution in #​20

Full Changelog: foxcpp/go-mockdns@v1.1.0...v1.2.0

jcchavezs/mergefs (github.com/jcchavezs/mergefs)

v0.1.1: Version 0.1.1

Compare Source

What's Changed

• fix: sort ReadDir result by @​erikwilson in #​3

New Contributors

• @​erikwilson made their first contribution in #​3

Full Changelog: jcchavezs/mergefs@v0.1.0...v0.1.1

kaptinlin/jsonschema (github.com/kaptinlin/jsonschema)

v0.7.1

Compare Source

v0.7.0

Compare Source

v0.6.15

Compare Source

v0.6.14

Compare Source

v0.6.13

Compare Source

v0.6.12

Compare Source

v0.6.11

Compare Source

v0.6.10

Compare Source

v0.6.9

Compare Source

v0.6.8

Compare Source

v0.6.7

Compare Source

v0.6.6

Compare Source

v0.6.5

Compare Source

v0.6.4

Compare Source

v0.6.3

Compare Source

v0.6.2

Compare Source

v0.6.1

Compare Source

v0.6.0

Compare Source

v0.5.2

Compare Source

v0.5.1

Compare Source

v0.5.0

Compare Source

v0.4.15

Compare Source

v0.4.14

Compare Source

v0.4.13

Compare Source

v0.4.12

Compare Source

v0.4.11

Compare Source

v0.4.10

Compare Source

v0.4.9

Compare Source

v0.4.8

Compare Source

v0.4.7

Compare Source

mccutchen/go-httpbin (github.com/mccutchen/go-httpbin/v2)

v2.20.0

Compare Source

[!WARNING]
Potential Breaking Change

The /bytes and /stream-bytes endpoints now respect the-max-body-size/MAX_BODY_SIZE configuration rather than hard-coding a 100KiB limit. See #​229 for details.

What's Changed

• docs: add link to go-httpbin GitHub action by @​ModeSevenIndustrialSolutions in #​219
• chore: drop reflection from test suite by @​mccutchen in #​227
• fix: respect MAX_BODY_SIZE in /bytes and /stream-bytes endpoints by @​derekmpage in #​229

New Contributors

• @​ModeSevenIndustrialSolutions made their first contribution in #​219
• @​derekmpage made their first contribution in #​229

Full Changelog: mccutchen/go-httpbin@v2.19.0...v2.20.0

v2.19.0

Compare Source

[!WARNING]
Potential Breaking Change

Pre-built docker images provided on Docker Hub and GitHub Container Registry now run as non-root by default, which may necessitate additional configuration for deployments that use both privileged ports and host networking. See Configuring non-root docker images in the README and #​224 for more details.

What's Changed

• chore: modernize by @​mccutchen in #​221
• chore: update autobahn docker image tag by @​mccutchen in #​225
• docker: switch base image from distroless/base to distroless/static:nonroot by @​yosida95 in #​224

New Contributors

• @​yosida95 made their first contribution in #​224

Full Changelog: mccutchen/go-httpbin@v2.18.3...v2.19.0

actions/go-versions (go)

v1.26.0: 1.26.0

Compare Source

Go 1.26.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.