chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@codemirror/view	6.29.0 -> 6.30.0					dependencies	minor
@storybook/addon-essentials (source)	8.2.7 -> 8.2.8					devDependencies	patch
@storybook/addon-interactions (source)	8.2.7 -> 8.2.8					devDependencies	patch
@storybook/addon-links (source)	8.2.7 -> 8.2.8					devDependencies	patch
@storybook/addon-onboarding (source)	8.2.7 -> 8.2.8					devDependencies	patch
@storybook/addon-themes (source)	8.2.7 -> 8.2.8					devDependencies	patch
@storybook/blocks (source)	8.2.7 -> 8.2.8					devDependencies	patch
@storybook/react (source)	8.2.7 -> 8.2.8					devDependencies	patch
@storybook/react-vite (source)	8.2.7 -> 8.2.8					devDependencies	patch
@storybook/test (source)	8.2.7 -> 8.2.8					devDependencies	patch
@types/node (source)	20.14.13 -> 20.14.14					devDependencies	patch
@types/vscode (source)	1.91.0 -> 1.92.0					devDependencies	minor
@typescript-eslint/eslint-plugin (source)	7.17.0 -> 7.18.0					devDependencies	minor
@typescript-eslint/parser (source)	7.17.0 -> 7.18.0					devDependencies	minor
act	0.2.64 -> 0.2.65						patch
buf	1.35.1 -> 1.36.0						minor
clap	4.5.11 -> 4.5.14					workspace.dependencies	patch
github.com/alecthomas/assert/v2	v2.6.0 -> v2.10.0					require	minor
github.com/tliron/commonlog	v0.2.17 -> v0.2.18					require	patch
github.com/tliron/kutil	v0.3.24 -> v0.3.25					require	patch
go	1.22.5 -> 1.22.6						patch
golang.org/x/mod	v0.19.0 -> v0.20.0					require	minor
golang.org/x/net	v0.27.0 -> v0.28.0					require	minor
golang.org/x/sync	v0.7.0 -> v0.8.0					require	minor
golang.org/x/sys	v0.22.0 -> v0.24.0					require	minor
golang.org/x/term	v0.22.0 -> v0.23.0					require	minor
golang.org/x/tools	v0.18.0 -> v0.24.0					require	minor
just	1.32.0 -> 1.34.0						minor
k3d	5.7.2 -> 5.7.3						patch
kotlin	2.0.0 -> 2.0.10						patch
lint-staged	15.2.7 -> 15.2.8					devDependencies	patch
modernc.org/sqlite	v1.31.1 -> v1.32.0					require	minor
postcss (source)	8.4.40 -> 8.4.41					devDependencies	patch
postgres	15.7 -> 15.8						minor
pre-commit	3.7.1 -> 3.8.0						minor
protoc	27.2 -> 27.3						minor
react-router-dom (source)	6.25.1 -> 6.26.0					dependencies	minor
serde (source)	1.0.204 -> 1.0.205					workspace.dependencies	patch
serde_json	1.0.121 -> 1.0.122					workspace.dependencies	patch
sqlc	1.26.0 -> 1.27.0						minor
storybook (source)	8.2.7 -> 8.2.8					devDependencies	patch
tailwindcss (source)	3.4.7 -> 3.4.9					dependencies	patch
type-fest	4.23.0 -> 4.24.0					dependencies	minor
vscode-languageclient (source)	10.0.0-next.9 -> 10.0.0-next.11					dependencies	patch
yq	4.44.2 -> 4.44.3						patch
org.codehaus.mojo:exec-maven-plugin (source)	3.3.0 -> 3.4.0					build	minor
org.jetbrains.kotlin:kotlin-reflect (source)	2.0.0 -> 2.0.10					compile	patch
io.grpc:grpc-stub	1.65.1 -> 1.66.0					compile	minor
io.grpc:grpc-protobuf	1.65.1 -> 1.66.0					compile	minor
io.grpc:grpc-netty	1.65.1 -> 1.66.0					compile	minor
org.jetbrains.kotlin:kotlin-maven-plugin (source)	2.0.0 -> 2.0.10					build	patch
org.jetbrains.kotlin:kotlin-test-junit5 (source)	2.0.0 -> 2.0.10					test	patch
org.jetbrains.kotlin:kotlin-stdlib (source)	2.0.0 -> 2.0.10					compile	patch

---

Release Notes

codemirror/view (@​codemirror/view)

v6.30.0

Compare Source

Bug fixes

Make spell check corrections work again on EditContext-enabled Chrome versions.

New features

The value returned by hoverTooltip now has an active property providing the state field used to store the open tooltips.

v6.29.1

Compare Source

Bug fixes

Fix a crash on old Safari browsers that don't support MediaQueryList.addEventListener.

Fix an issue where EditorView.viewportLineBlocks (and thus other things like the gutter) might be out of date after some kinds of decoration changes.

storybookjs/storybook (@​storybook/addon-essentials)

v8.2.8

Compare Source

• CLI: Parse more Yarn Berry errors - #​28816, thanks @​yannbf!
• Fix: Invariant failed: Expected package.json#version to be defined in the "undefined" package - #​28752, thanks @​abcdmku!

storybookjs/storybook (@​storybook/addon-onboarding)

v8.2.8

Compare Source

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v7.18.0

Compare Source

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] prevent runtime error when asserting a variable declared in default TS lib

• eslint-plugin: [unbound-method] report on destructuring in function parameters

• eslint-plugin: [no-duplicate-type-constituents] shouldn't report on error types

• eslint-plugin: [strict-boolean-expressions] support branded booleans

❤️ Thank You

• auvred
• Oliver Salzburg
• Vinccool96
• Yukihiro Hasegawa

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v7.18.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

nektos/act (act)

v0.2.65

Changelog

Bug fixes

• 3c7eda7 fix: docker stub and add a test for this (#​2355)
• a1a96da fix: changed location of actrc in info message (#​2373)
• 6de25a5 fix: make node tool non volatile (#​2372)
• 2ad5ff7 fix: add missing service container health check (#​2354)

Other

• bda491e chore: bump VERSION to 0.2.65
• cd8b710 remove double negation in --help (#​2405)
• a62063b Bump mergo to v1.0.0 with new module URL (#​2403)
• 2feff3f build(deps): bump github.com/timshannon/bolthold to v0.0.0-20240314194003-30aac6950928 (#​2248)
• 570ccf3 Fix #​2363. Add /pre- and /post-entrypoint handling (#​2394)
• 1d6a00c build(deps): bump golang.org/x/term from 0.21.0 to 0.22.0 (#​2387)
• 21fe901 build(deps): bump github.com/adrg/xdg from 0.4.0 to 0.5.0 (#​2398)
• 1ac4b60 build(deps): bump megalinter/megalinter from 7.11.1 to 7.13.0 (#​2389)

bufbuild/buf (buf)

v1.36.0

• Add --list-services and --list-methods flags to buf curl, which trigger the command to list
  known services or methods in the RPC schema, instead of invoking an RPC method.
• Add clean as a top-level option in buf.gen.yaml, matching the buf generate --clean flag. If
  set to true, this will delete the directories, jar files, or zip files set to out for each
  plugin.
• Fix git input handling of annotated tags.
• Update buf registry login to complete the login flow in the browser by default. This allows
  users to login with their browser and have the token automatically provided to the CLI.
• Add buf registry organization {create, delete, info, update} commands to manage BSR
  organizations. Remove buf beta registry organization commands.
• Add buf registry module {create, delete, deprecate, info, undeprecate, update} commands to
  manage BSR modules. Remove buf beta registry repository commands.
• Add buf registry label {archive, info, list, unarchive} commands to manage BSR module labels.
  Remove buf beta registry label commands and buf beta registry {archive, unarchive}.
• Add buf registry commit {add-label, info, list, resolve} to manage BSR module commits. Remove
  buf beta registry commit commands.

clap-rs/clap (clap)

v4.5.14

Compare Source

Features

• (unstable-ext) Added Arg::add for attaching arbitrary state, like completion hints, to Arg without Arg knowing about it

v4.5.13

Compare Source

Fixes

• (derive) Improve error message when #[flatten]ing an optional #[group(skip)]
• (help) Properly wrap long subcommand descriptions in help

v4.5.12

Compare Source

alecthomas/assert (github.com/alecthomas/assert/v2)

v2.10.0

Compare Source

v2.9.0

Compare Source

v2.8.1

Compare Source

v2.8.0

Compare Source

v2.7.0

Compare Source

tliron/commonlog (github.com/tliron/commonlog)

v0.2.18

Compare Source

tliron/kutil (github.com/tliron/kutil)

v0.3.25

Compare Source

golang/go (go)

v1.22.6

casey/just (just)

v1.34.0

Compare Source

Fixed

• Make function paths relative to correct working directory (#​2294 by casey)

Changed

• Keep multi-line shebangs together (#​2276 by vkstrm)

Misc

• Document set working-directory (#​2288 by nyurik)
• Fix readme typos (#​2289 by casey)

v1.33.0

Compare Source

Fixed

• Use correct backtick and shell() expression working directory in submodules (#​2285 by casey)

Added

• Add working-directory setting (#​2283 by nyurik)
• Allow [group] attribute on submodules (#​2263 by jmwoliver)
• Allow empty [script] attribute and add set script-interpreter (#​2264 by casey)

Misc

• Document which attributes apply to which items (#​2282 by casey)
• Add missing productions (#​2280 by poliorcetics)
• Fix Rust 1.80.0 warnings (#​2281 by casey)
• Update softprops/action-gh-release (#​2269 by app/dependabot)
• Remove (no group) header before ungrouped recipes (#​2268 by casey)
• Document script-interpreter setting (#​2265 by casey)
• set dotenv-path does not override set dotenv-filename (#​2262 by casey)

rancher/k3d (k3d)

v5.7.3

What's Changed

• fix: busybox xargs unlinked on new k3s releases by @​thejan2009 in https://github.com/k3d-io/k3d/pull/1479

Full Changelog: k3d-io/k3d@v5.7.2...v5.7.3

JetBrains/kotlin (kotlin)

v2.0.10: Kotlin 2.0.10

2.0.10

Apple Ecosystem

• KT-68257 Xcode incorrectly reuses embedAndSign framework when moving to and from 2.0.0

Compiler

Fixes

• KT-69876 K2 Compile exception: Only IrBlockBody together with kotlinx serialization
• KT-68521 K2: Property's private setters can be bypassed when using plusAssign and minusAssign operators
• KT-68667 K2: Compiler hangs on mapNotNull and elvis inside lambda
• KT-68747 K2: Long compilation time because of constraint solving when using typealias in different modules
• KT-68940 K2: "IllegalArgumentException: All variables should be fixed to something"
• KT-68797 K2 / Native: "java.lang.IllegalStateException: FIELD" caused by enabled caching
• KT-68362 False-positive ABSTRACT_MEMBER_NOT_IMPLEMENTED for inheritor of java class which directly implements java.util.Map
• KT-68449 K2: "when" expression returns Unit
• KT-67072 K2: inconsistent stability of open vals on receivers of final type
• KT-68570 K2: "Unresolved reference" in call with lambda argument and nested lambda argument
• KT-69159 K2: KotlinNothingValueException in Exposed
• KT-68623 K2: "Only safe or null-asserted calls are allowed" on safe call
• KT-68193 JDK 21: new MutableList.addFirst/addLast methods allow adding nullable value for non-null types
• KT-67804 removeFirst and removeLast return type with Java 21
• KT-68727 K2: "Null argument in ExpressionCodegen for parameter VALUE_PARAMETER" caused by an enum class with default parameter in a different module
• KT-68383 K2: "Argument type mismatch: actual type is 'kotlin.String', but 'T & Any' was expected." with intersection types
• KT-68546 K2: false-positive conflicting overloads error on inheriting generic type with inherited generic and non-generic member overloads
• KT-68626 K2: "Conflicting Overloads" for function if inherited from generic type
• KT-68351 K2: "Suspension functions can only be called within coroutine body"
• KT-68489 K2: WRONG_ANNOTATION_TARGET with Java and Kotlin @Target annotation positions
• KT-69058 K2: Java-defined property annotations not persisted
• KT-64515 K2 IDE: [NEW_INFERENCE_ERROR] in a build.gradle.kts script while applying "jvm-test-suite" plugin and then configuring

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[wesbillman]

we definitely don't want this update as it will make all the syntax files come back. I'll add a PR to ignore this dependency from renovate

[renovate]

ℹ Artifact update notice

File name: cmd/lint-commit-or-rollback/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
golang.org/x/mod	v0.15.0 -> v0.20.0

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
golang.org/x/crypto	v0.25.0 -> v0.26.0
golang.org/x/text	v0.16.0 -> v0.17.0

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[alecthomas]

@wesbillman I retried this and couldn't see the package you were referring to, but obviously revert if you find it

[alecthomas]

@worstell mind taking a look at this?

The extraction code is failing, not sure why, but some upstream code has broken us :(

=== RUN   TestExtractModuleSchemaFSM
    schema_test.go:285: Did not expect an error but got:
        ./... matched no packages
--- FAIL: TestExtractModuleSchemaFSM (0.03s)
FAIL
FAIL    github.com/TBD54566975/ftl/go-runtime/schema    0.274s
FAIL

[matt2e]

@worstell mind taking a look at this?
The extraction code is failing, not sure why, but some upstream code has broken us :(

go mod tidy on that testdata module fixed it