From 61e3a27e18178d8dfac93368a3775d5ac9e4cb0e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 13:52:27 +0000 Subject: [PATCH 1/6] chore(deps-dev): bump heroku/heroku-buildpack-php in /tests/apps/php Bumps [heroku/heroku-buildpack-php](https://github.com/heroku/heroku-buildpack-php) from 299 to 300. - [Release notes](https://github.com/heroku/heroku-buildpack-php/releases) - [Changelog](https://github.com/heroku/heroku-buildpack-php/blob/main/CHANGELOG.md) - [Commits](https://github.com/heroku/heroku-buildpack-php/compare/v299...v300) --- updated-dependencies: - dependency-name: heroku/heroku-buildpack-php dependency-version: '300' dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- tests/apps/php/composer.lock | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/tests/apps/php/composer.lock b/tests/apps/php/composer.lock index ad8e05a04..617d8a0ad 100644 --- a/tests/apps/php/composer.lock +++ b/tests/apps/php/composer.lock @@ -605,16 +605,16 @@ "packages-dev": [ { "name": "heroku/heroku-buildpack-php", - "version": "v299", + "version": "v300", "source": { "type": "git", "url": "https://github.com/heroku/heroku-buildpack-php.git", - "reference": "207f07a27f4644d0cf349febe88219d53695f57d" + "reference": "b52841c0eea8c9dadf4d7dc4dc0736d4ee3d2b29" }, "dist": { "type": "zip", - "url": "https://api.github.com/repos/heroku/heroku-buildpack-php/zipball/207f07a27f4644d0cf349febe88219d53695f57d", - "reference": "207f07a27f4644d0cf349febe88219d53695f57d", + "url": "https://api.github.com/repos/heroku/heroku-buildpack-php/zipball/b52841c0eea8c9dadf4d7dc4dc0736d4ee3d2b29", + "reference": "b52841c0eea8c9dadf4d7dc4dc0736d4ee3d2b29", "shasum": "" }, "bin": [ @@ -644,9 +644,9 @@ ], "support": { "issues": "https://github.com/heroku/heroku-buildpack-php/issues", - "source": "https://github.com/heroku/heroku-buildpack-php/tree/v299" + "source": "https://github.com/heroku/heroku-buildpack-php/tree/v300" }, - "time": "2026-10-22T18:15:48+00:00" + "time": "2026-10-29T18:03:00+00:00" } ], "aliases": [], From ee9df1188e577666eccfe2dbc6a9eedf4bbf6895 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 13:53:05 +0000 Subject: [PATCH 2/6] chore(deps): bump timberio/vector in /plugins/logs Bumps timberio/vector from 0.60.0-debian to 0.61.0-debian. --- updated-dependencies: - dependency-name: timberio/vector dependency-version: 0.61.0-debian dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- plugins/logs/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugins/logs/Dockerfile b/plugins/logs/Dockerfile index 49da49756..a888ccffa 100644 --- a/plugins/logs/Dockerfile +++ b/plugins/logs/Dockerfile @@ -1 +1 @@ -FROM timberio/vector:0.60.0-debian +FROM timberio/vector:0.61.0-debian From 20643e83e7f7bb79dbfe9eec62258704ba061ae8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 13:53:29 +0000 Subject: [PATCH 3/6] chore(deps): bump byjg/easy-haproxy in /plugins/haproxy-vhosts Bumps byjg/easy-haproxy from 6.5.1 to 6.5.2. --- updated-dependencies: - dependency-name: byjg/easy-haproxy dependency-version: 6.5.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- plugins/haproxy-vhosts/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugins/haproxy-vhosts/Dockerfile b/plugins/haproxy-vhosts/Dockerfile index 8496c6512..d1377b30a 100644 --- a/plugins/haproxy-vhosts/Dockerfile +++ b/plugins/haproxy-vhosts/Dockerfile @@ -1 +1 @@ -FROM byjg/easy-haproxy:6.5.1 +FROM byjg/easy-haproxy:6.5.2 From 5d6b6d2bf6a2c08ceca60341b94dfadf3ee4b188 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 13:53:36 +0000 Subject: [PATCH 4/6] chore(deps): bump sass from 1.106.1 to 1.107.0 in /tests/apps/multi Bumps [sass](https://github.com/sass/dart-sass) from 1.106.1 to 1.107.0. - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](https://github.com/sass/dart-sass/compare/1.106.1...1.107.0) --- updated-dependencies: - dependency-name: sass dependency-version: 1.107.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- tests/apps/multi/package-lock.json | 8 ++++---- tests/apps/multi/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/tests/apps/multi/package-lock.json b/tests/apps/multi/package-lock.json index 3738352f3..8301137ae 100644 --- a/tests/apps/multi/package-lock.json +++ b/tests/apps/multi/package-lock.json @@ -11,7 +11,7 @@ "license": "ISC", "dependencies": { "bootstrap": "^5.3.8", - "sass": "^1.106.1" + "sass": "^1.107.0" }, "engines": { "node": "24.x.x", @@ -432,9 +432,9 @@ } }, "node_modules/sass": { - "version": "1.106.1", - "resolved": "https://registry.npmjs.org/sass/-/sass-1.106.1.tgz", - "integrity": "sha512-kD+Gi66vycZcbJt+42NC4z4PXNMcCajVrJPhqoKKXy5cOBMmJQt052CxIBcRjwYXeImHYOpu/ydWWGZQIenl7A==", + "version": "1.107.0", + "resolved": "https://registry.npmjs.org/sass/-/sass-1.107.0.tgz", + "integrity": "sha512-+whPilvVNoAD57xvdIPLQT0gXo4RD1lHYw+Uw8zYHlojaeaMDxK14tc0JmEsz/XMns48h3lpypisMP+3E8eHQA==", "license": "MIT", "dependencies": { "chokidar": "^5.0.0", diff --git a/tests/apps/multi/package.json b/tests/apps/multi/package.json index a676f6ea3..10ce80305 100644 --- a/tests/apps/multi/package.json +++ b/tests/apps/multi/package.json @@ -2,7 +2,7 @@ "author": "Al Johri", "dependencies": { "bootstrap": "^5.3.8", - "sass": "^1.106.1" + "sass": "^1.107.0" }, "description": "Test application for heroku multi buildpack.", "engines": { From 235b27c81a2fdf94cbb4b22d6bcd2c2d69e2d4f2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 13:58:53 +0000 Subject: [PATCH 5/6] chore(deps): bump github.com/traefik/traefik/v2 Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) in `/plugins/scheduler-k3s` from 2.11.60 to 2.11.61. Updates `github.com/traefik/traefik/v2` from 2.11.60 to 2.11.61 - [Release notes](https://github.com/traefik/traefik/releases) - [Changelog](https://github.com/traefik/traefik/blob/v2.11.61/CHANGELOG.md) - [Commits](https://github.com/traefik/traefik/compare/v2.11.60...v2.11.61) --- updated-dependencies: - dependency-name: github.com/traefik/traefik/v2 dependency-version: 2.11.61 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go_modules ... Signed-off-by: dependabot[bot] --- plugins/scheduler-k3s/go.mod | 4 ++-- plugins/scheduler-k3s/go.sum | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod index 510736a5b..2519b899e 100644 --- a/plugins/scheduler-k3s/go.mod +++ b/plugins/scheduler-k3s/go.mod @@ -26,7 +26,7 @@ require ( github.com/onsi/gomega v1.44.0 github.com/ryanuber/columnize v2.1.2+incompatible github.com/spf13/pflag v1.0.10 - github.com/traefik/traefik/v2 v2.11.60 + github.com/traefik/traefik/v2 v2.11.61 golang.org/x/sync v0.24.0 gopkg.in/yaml.v2 v2.4.0 gopkg.in/yaml.v3 v3.0.1 @@ -153,7 +153,7 @@ require ( go.yaml.in/yaml/v3 v3.0.5 // indirect golang.org/x/crypto v0.58.0 // indirect golang.org/x/mod v0.41.0 // indirect - golang.org/x/net v0.61.0 // indirect + golang.org/x/net v0.62.0 // indirect golang.org/x/oauth2 v0.37.0 // indirect golang.org/x/sys v0.49.0 // indirect golang.org/x/term v0.47.0 // indirect diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum index 9a07bc6a4..6ed804403 100644 --- a/plugins/scheduler-k3s/go.sum +++ b/plugins/scheduler-k3s/go.sum @@ -357,8 +357,8 @@ github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a h1:a6TNDN9CgG+cYj github.com/tailscale/hujson v0.0.0-20250605163823-992244df8c5a/go.mod h1:EbW0wDK/qEUYI0A5bqq0C2kF8JTQwWONmGDBbzsxxHo= github.com/traefik/paerser v0.2.2 h1:cpzW/ZrQrBh3mdwD/jnp6aXASiUFKOVr6ldP+keJTcQ= github.com/traefik/paerser v0.2.2/go.mod h1:7BBDd4FANoVgaTZG+yh26jI6CA2nds7D/4VTEdIsh24= -github.com/traefik/traefik/v2 v2.11.60 h1:Er+VSOIMVk6awpIVwqSR7jIC9bXBBEHF29+CHeOliZM= -github.com/traefik/traefik/v2 v2.11.60/go.mod h1:tnle1HBnPg47Bw2q9NDegW2P61ULztKQBw9AR/NMDMc= +github.com/traefik/traefik/v2 v2.11.61 h1:u8s2pE7Ck4VCYoVbW9JRtzz4QJ3iGMqpZ2tXuzsBgdM= +github.com/traefik/traefik/v2 v2.11.61/go.mod h1:jj0mKHVCWL7EboxVPxW7HnAE16LFryv2Nq/kNh9ueis= github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM= github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= @@ -426,8 +426,8 @@ golang.org/x/crypto v0.58.0 h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54= golang.org/x/crypto v0.58.0/go.mod h1:Xh+kl5A+M0gMiWDytH2Hhr5Z7WbNCpv/eB/EFgfSk+w= golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c= golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o= -golang.org/x/net v0.61.0 h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw= -golang.org/x/net v0.61.0/go.mod h1:WgDCOTH8iwtB66T4/GfI94AHo/hhdb7Hah9NDseQfiI= +golang.org/x/net v0.62.0 h1:18ELalfM5+XNRwzM2nYqXsZQ9ByS1uhj2O/U7+5jqRY= +golang.org/x/net v0.62.0/go.mod h1:WgDCOTH8iwtB66T4/GfI94AHo/hhdb7Hah9NDseQfiI= golang.org/x/oauth2 v0.37.0 h1:JUlcxA8oAtauLfiH8FX2/FkAWHAdi0QtGCGc+hofE98= golang.org/x/oauth2 v0.37.0/go.mod h1:IxwZNxUULJmpBFf9K/9NTMSIfZZuvuTy1gGxhigP/58= golang.org/x/sync v0.24.0 h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA= From 7cbcfde8596fa8563d209c020f5ea364f125d001 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 13:59:23 +0000 Subject: [PATCH 6/6] chore(deps): bump k8s.io/apimachinery in /plugins/scheduler-k3s Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) in `/plugins/scheduler-k3s` from 0.37.1 to 0.37.2. Updates `k8s.io/apimachinery` from 0.37.1 to 0.37.2 - [Commits](https://github.com/kubernetes/apimachinery/compare/v0.37.1...v0.37.2) --- updated-dependencies: - dependency-name: k8s.io/apimachinery dependency-version: 0.37.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go_modules ... Signed-off-by: dependabot[bot] --- plugins/scheduler-k3s/go.mod | 4 ++-- plugins/scheduler-k3s/go.sum | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/plugins/scheduler-k3s/go.mod b/plugins/scheduler-k3s/go.mod index 510736a5b..79b5e3f08 100644 --- a/plugins/scheduler-k3s/go.mod +++ b/plugins/scheduler-k3s/go.mod @@ -32,7 +32,7 @@ require ( gopkg.in/yaml.v3 v3.0.1 helm.sh/helm/v3 v3.22.1 k8s.io/api v0.37.1 - k8s.io/apimachinery v0.37.1 + k8s.io/apimachinery v0.37.2 k8s.io/client-go v0.37.1 k8s.io/kubectl v0.37.1 k8s.io/kubernetes v1.37.2 @@ -170,7 +170,7 @@ require ( k8s.io/component-base v0.37.1 // indirect k8s.io/klog/v2 v2.140.0 // indirect k8s.io/kube-openapi v0.0.0-20260821135717-be32def86098 // indirect - k8s.io/streaming v0.37.1 // indirect + k8s.io/streaming v0.37.2 // indirect oras.land/oras-go/v2 v2.6.2 // indirect sigs.k8s.io/controller-runtime v0.25.2 // indirect sigs.k8s.io/gateway-api v1.6.0 // indirect diff --git a/plugins/scheduler-k3s/go.sum b/plugins/scheduler-k3s/go.sum index 9a07bc6a4..efd8ace1e 100644 --- a/plugins/scheduler-k3s/go.sum +++ b/plugins/scheduler-k3s/go.sum @@ -472,8 +472,8 @@ k8s.io/api v0.37.1 h1:l6N77U7tjwB5L056bgrBTJIEdevac/naBZ3iSvDNfpM= k8s.io/api v0.37.1/go.mod h1:zSlbB1YpJ1YQlFVQy20UYll81UJSJJUMLhkhvg6Z78M= k8s.io/apiextensions-apiserver v0.37.1 h1:7fIQG8eThDSTVYBWg/DOpI8v5wYfKCo0N8/TDMjj+zY= k8s.io/apiextensions-apiserver v0.37.1/go.mod h1:1Q3ujWwHgnhBoGsdmGORflwK1sDFmuaqH1OsMDWk2Gs= -k8s.io/apimachinery v0.37.1 h1:hGCYyvKHCwtwMitj2vU4vYx0Z16N9GyZk9BBnz0wDAE= -k8s.io/apimachinery v0.37.1/go.mod h1:jF84AyUi/IRIXRot5f+lm6MpxoWI+F1XgjaMmwCdTFw= +k8s.io/apimachinery v0.37.2 h1:G4t9RGoPDbQML38hz/kQQiltttgd3egg2ODCR8aIc2o= +k8s.io/apimachinery v0.37.2/go.mod h1:qaAvSNvgU2x07wRM95MSHSJTPQ/ob/LeNAGbeDgqQJg= k8s.io/apiserver v0.37.1 h1:dUsNwjsvItyVKNpC1N0AhQ0OBSiUJKfWz004vPifOe0= k8s.io/apiserver v0.37.1/go.mod h1:EWXW6PntGfOC2uD9GGVobnOExgFoX1z0hZo7f7Rs7Ng= k8s.io/cli-runtime v0.37.1 h1:3mir5bM4XjMJHW3SMRk++3Ylf4YQne0XFFsW+IGT85U= @@ -490,8 +490,8 @@ k8s.io/kubectl v0.37.1 h1:n1VCIntOJiX943uByXCThSZQmE+4v9jGS8S9u94/aHU= k8s.io/kubectl v0.37.1/go.mod h1:66cc4Bz8PxBTxlrHzBuzXEzGIytAnNasKQPeEcpuaV8= k8s.io/kubernetes v1.37.2 h1:A2VDEiObzkYqFTKhSsn0ZEb0RlLEXpHWj93gi2HqEwE= k8s.io/kubernetes v1.37.2/go.mod h1:zAK7e3i5feyBL/bhucQnA5VRKuyrS8F+ijHJkZzQaWw= -k8s.io/streaming v0.37.1 h1:TpzVfQeFuVndn2g9mFqxy1UcUYPwDzqjUmwR/IzJCWc= -k8s.io/streaming v0.37.1/go.mod h1:APlJR26ZWRcVy5bIEj0QRrKUXROtBHPcxl2NT7EAzPU= +k8s.io/streaming v0.37.2 h1:xmzp9nbqIbjvsRcqrBYa+K5XPQ6Jy/Dm3zZ8mN916AI= +k8s.io/streaming v0.37.2/go.mod h1:APlJR26ZWRcVy5bIEj0QRrKUXROtBHPcxl2NT7EAzPU= k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3 h1:jVkFFVfXdXP74B/zbO3hM3hpSFD0xvhQ5U686DPurkE= k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3/go.mod h1:M2s5JB1lIYP3jzZdorPLHXIPJzt9vv2muW5a6L9DtNM= mvdan.cc/sh/v3 v3.14.1 h1:bXkhQWNHCs0KZEChF8hYS6FC+T2N9mUZLbQv9blditI=