Skip to content

chore(deps): pin dependencies#174

Open
ferrlabs-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

chore(deps): pin dependencies#174
ferrlabs-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@ferrlabs-renovate

@ferrlabs-renovate ferrlabs-renovate Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
FerrLabs/.github action pinDigest 9d30d15
FerrLabs/FerrFlow action minor v5.22.1v5.25.1 v5.31.1 (+13)
Swatinem/rust-cache action pinDigest e18b497
actions/setup-go action pinDigest 924ae3a
docker/login-action action pinDigest af1e73f
docker/setup-buildx-action action pinDigest bb05f3f
dtolnay/rust-toolchain action pinDigest 4be7066
github/codeql-action (changelog) action digest 54f647b99df26d
helm uses-with patch v4.2.2v4.2.3
helm/kind-action action pinDigest ef37e7f
ossf/scorecard-action action pinDigest 4eaacf0
rust (source, changelog) uses-with minor 1.961.97
taiki-e/create-gh-release-action action pinDigest eba8ea9
taiki-e/upload-rust-binary-action action pinDigest f0d45ae

Release Notes

FerrLabs/FerrFlow (FerrLabs/FerrFlow)

v5.25.1

Compare Source

[5.25.1] - 2026-07-12

Bug Fixes
  • fix(deps): bump gix to 0.85 and gix-traverse to 0.59 (#​647)

Performance

Binary
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k ferrflow 4.2ms 100.7ms 27.3ms 4.0ms 3.5ms 13.1 MB
mono-50-5k ferrflow 3.4ms 447.3ms 95.4ms 3.3ms 2.9ms 13.3 MB
mono-large ferrflow 4.8ms 891.5ms 189.3ms 4.9ms 4.1ms 15.2 MB
mono-medium ferrflow 3.2ms 54.3ms 15.1ms 3.0ms 3.1ms 13.1 MB
mono-small ferrflow 2.6ms 17.9ms 5.2ms 2.5ms 2.6ms 13.1 MB
single ferrflow 2.5ms 16.6ms 4.8ms 2.3ms 2.3ms 13.3 MB

Note: every competitor is a Node.js package — none ship a native binary, so this section can only show ferrflow. Cross-tool comparisons live in the Npm section.

Docker
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k ferrflow - - 515.5ms 225.8ms 383.3ms 48.4 MB
mono-50-5k ferrflow - - 387.1ms 183.0ms 341.5ms 48.5 MB
mono-large ferrflow - - 625.0ms 405.9ms 255.8ms 46.0 MB
mono-medium ferrflow - - 281.3ms 316.7ms 435.2ms 45.7 MB
mono-small ferrflow - - 252.4ms 210.8ms 232.5ms 48.2 MB
single ferrflow - - 172.9ms 163.1ms 164.5ms 45.5 MB

Note: no competitor publishes a first-party Docker image that is comparable to ghcr.io/ferrlabs/ferrflow (a single static binary). Wrapping the Node tools in node:lts would only re-time node startup + npm + the tool already measured in the Npm section, so this section is intentionally limited to ferrflow.

Npm
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k changesets 685.8ms - - - - 113.1 MB
mono-100-1k commit-and-tag-version 535.3ms - - - - 92.4 MB
mono-100-1k ferrflow 225.2ms 323.6ms 249.9ms 230.6ms 224.1ms 92.2 MB
mono-100-1k standard-version 553.1ms - - - - 96.6 MB
mono-50-5k changesets 667.2ms - - - - 113.1 MB
mono-50-5k commit-and-tag-version 1005.7ms - - - - 119.6 MB
mono-50-5k ferrflow 224.6ms 674.2ms 315.8ms 228.3ms 225.0ms 92.6 MB
mono-50-5k standard-version 1022.8ms - - - - 123.9 MB
mono-large changesets 759.8ms - - - - 120.0 MB
mono-large commit-and-tag-version 1567.4ms - - - - 160.0 MB
mono-large ferrflow 227.4ms 1126.1ms 413.0ms 226.5ms 225.8ms 92.6 MB
mono-large standard-version 1598.5ms - - - - 162.2 MB
mono-medium changesets 654.1ms - - - - 113.4 MB
mono-medium commit-and-tag-version 481.3ms - - - - 92.3 MB
mono-medium ferrflow 223.0ms 275.0ms 235.7ms 224.3ms 227.8ms 92.5 MB
mono-medium standard-version 484.0ms - - - - 94.4 MB
mono-small changesets 636.5ms - - - - 114.2 MB
mono-small commit-and-tag-version 415.6ms - - - - 92.5 MB
mono-small ferrflow 226.1ms 240.1ms 231.7ms 222.4ms 226.1ms 92.9 MB
mono-small standard-version 417.3ms - - - - 92.2 MB
single changesets 614.3ms - - - - 110.6 MB
single commit-and-tag-version 417.0ms - - - - 93.9 MB
single ferrflow 224.2ms 243.3ms 230.8ms 228.9ms 227.0ms 92.8 MB
single standard-version 424.0ms - - - - 93.0 MB
Install footprint
Tool npm binary
changesets 26.0 MB
commit-and-tag-version 20.0 MB
ferrflow 9.0 MB 9.0 MB
release-please 95.0 MB
semantic-release 69.0 MB
standard-version 21.0 MB

v5.25.0

Compare Source

[5.25.0] - 2026-07-12

Features
  • feat(obs): migrate monorepo report output to tracing (#​642)
  • feat(obs): migrate monorepo run progress lines to tracing (#​643)
  • feat(obs): migrate validate output to tracing (#​641)
  • feat(obs): migrate main error printer and timing breakdown to tracing (#​644)

Performance

Binary
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k ferrflow 5.3ms 128.3ms 34.2ms 4.7ms 4.1ms 13.0 MB
mono-50-5k ferrflow 4.2ms 575.6ms 123.7ms 4.2ms 4.0ms 13.1 MB
mono-large ferrflow 6.3ms 1139.7ms 244.0ms 6.2ms 5.4ms 15.0 MB
mono-medium ferrflow 3.9ms 69.7ms 19.8ms 4.0ms 3.6ms 13.0 MB
mono-small ferrflow 3.4ms 23.8ms 7.3ms 3.2ms 3.0ms 13.0 MB
single ferrflow 3.8ms 21.6ms 6.3ms 3.0ms 2.9ms 13.0 MB

Note: every competitor is a Node.js package — none ship a native binary, so this section can only show ferrflow. Cross-tool comparisons live in the Npm section.

Docker
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k ferrflow - - 227.7ms 194.9ms 195.5ms 43.1 MB
mono-50-5k ferrflow - - 330.6ms 189.9ms 190.0ms 45.4 MB
mono-large ferrflow - - 470.2ms 191.3ms 195.5ms 45.9 MB
mono-medium ferrflow - - 210.2ms 189.9ms 190.1ms 43.1 MB
mono-small ferrflow - - 194.3ms 191.1ms 188.2ms 43.2 MB
single ferrflow - - 196.8ms 191.8ms 188.5ms 45.0 MB

Note: no competitor publishes a first-party Docker image that is comparable to ghcr.io/ferrlabs/ferrflow (a single static binary). Wrapping the Node tools in node:lts would only re-time node startup + npm + the tool already measured in the Npm section, so this section is intentionally limited to ferrflow.

Npm
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k changesets 835.4ms - - - - 112.0 MB
mono-100-1k commit-and-tag-version 675.3ms - - - - 92.9 MB
mono-100-1k ferrflow 286.9ms 408.4ms 314.4ms 288.7ms 286.5ms 92.5 MB
mono-100-1k standard-version 706.1ms - - - - 96.2 MB
mono-50-5k changesets 797.6ms - - - - 112.9 MB
mono-50-5k commit-and-tag-version 1267.6ms - - - - 120.1 MB
mono-50-5k ferrflow 288.5ms 858.0ms 403.2ms 287.6ms 289.8ms 92.5 MB
mono-50-5k standard-version 1331.9ms - - - - 125.5 MB
mono-large changesets 921.1ms - - - - 120.9 MB
mono-large commit-and-tag-version 1995.9ms - - - - 159.3 MB
mono-large ferrflow 289.4ms 1436.8ms 530.5ms 293.5ms 295.0ms 92.6 MB
mono-large standard-version 2056.3ms - - - - 162.2 MB
mono-medium changesets 793.3ms - - - - 114.3 MB
mono-medium commit-and-tag-version 597.3ms - - - - 92.2 MB
mono-medium ferrflow 293.0ms 357.5ms 307.6ms 291.4ms 290.0ms 92.4 MB
mono-medium standard-version 631.9ms - - - - 93.3 MB
mono-small changesets 759.4ms - - - - 109.4 MB
mono-small commit-and-tag-version 530.2ms - - - - 93.1 MB
mono-small ferrflow 290.4ms 308.2ms 292.5ms 290.7ms 289.0ms 92.4 MB
mono-small standard-version 544.4ms - - - - 92.3 MB
single changesets 735.8ms - - - - 106.1 MB
single commit-and-tag-version 535.5ms - - - - 92.2 MB
single ferrflow 293.6ms 310.4ms 296.3ms 293.9ms 292.3ms 92.5 MB
single standard-version 552.7ms - - - - 92.4 MB
Install footprint
Tool npm binary
changesets 26.0 MB
commit-and-tag-version 20.0 MB
ferrflow 9.0 MB 9.0 MB
release-please 95.0 MB
semantic-release 69.0 MB
standard-version 21.0 MB

v5.24.0

Compare Source

[5.24.0] - 2026-07-12

Features
  • feat(obs): migrate validate output to tracing (#​641)
  • feat(obs): migrate main error printer and timing breakdown to tracing (#​644)

v5.23.0

Compare Source

[5.23.0] - 2026-07-03

Features
  • feat(obs): migrate publishers, hooks, and gitlab forge to tracing (#​637)
Bug Fixes
  • perf(ci): PGO build for the x64-linux release binary (#​634)

Performance

Binary
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k ferrflow 4.6ms 126.6ms 33.7ms 4.5ms 4.1ms 13.0 MB
mono-50-5k ferrflow 4.1ms 545.0ms 123.2ms 4.0ms 3.5ms 12.9 MB
mono-large ferrflow 6.2ms 1087.6ms 234.5ms 6.0ms 5.1ms 15.3 MB
mono-medium ferrflow 3.9ms 69.7ms 19.2ms 4.1ms 3.6ms 13.1 MB
mono-small ferrflow 3.2ms 23.7ms 6.8ms 3.2ms 3.2ms 13.2 MB
single ferrflow 3.0ms 21.4ms 6.3ms 3.0ms 3.0ms 13.1 MB

Note: every competitor is a Node.js package — none ship a native binary, so this section can only show ferrflow. Cross-tool comparisons live in the Npm section.

Docker
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k ferrflow - - 230.0ms 196.3ms 193.8ms 47.7 MB
mono-50-5k ferrflow - - 326.8ms 191.2ms 189.4ms 43.1 MB
mono-large ferrflow - - 468.1ms 194.4ms 194.4ms 45.5 MB
mono-medium ferrflow - - 210.6ms 193.2ms 193.8ms 43.1 MB
mono-small ferrflow - - 197.1ms 191.6ms 194.1ms 45.6 MB
single ferrflow - - 194.1ms 192.3ms 191.6ms 43.1 MB

Note: no competitor publishes a first-party Docker image that is comparable to ghcr.io/ferrlabs/ferrflow (a single static binary). Wrapping the Node tools in node:lts would only re-time node startup + npm + the tool already measured in the Npm section, so this section is intentionally limited to ferrflow.

Npm
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k changesets 878.2ms - - - - 107.6 MB
mono-100-1k commit-and-tag-version 714.4ms - - - - 90.8 MB
mono-100-1k ferrflow 290.3ms 413.4ms 323.1ms 290.5ms 291.8ms 92.4 MB
mono-100-1k standard-version 738.2ms - - - - 97.7 MB
mono-50-5k changesets 826.3ms - - - - 112.2 MB
mono-50-5k commit-and-tag-version 1348.6ms - - - - 117.7 MB
mono-50-5k ferrflow 290.9ms 834.8ms 402.1ms 291.2ms 291.3ms 92.5 MB
mono-50-5k standard-version 1414.3ms - - - - 128.4 MB
mono-large changesets 974.4ms - - - - 113.3 MB
mono-large commit-and-tag-version 2260.6ms - - - - 158.3 MB
mono-large ferrflow 292.2ms 1374.9ms 518.7ms 293.5ms 293.5ms 92.3 MB
mono-large standard-version 2327.5ms - - - - 168.1 MB
mono-medium changesets 825.2ms - - - - 110.7 MB
mono-medium commit-and-tag-version 623.7ms - - - - 92.3 MB
mono-medium ferrflow 291.1ms 358.4ms 306.6ms 291.5ms 289.7ms 92.5 MB
mono-medium standard-version 644.8ms - - - - 94.7 MB
mono-small changesets 793.0ms - - - - 105.5 MB
mono-small commit-and-tag-version 541.7ms - - - - 93.2 MB
mono-small ferrflow 289.8ms 312.0ms 293.4ms 290.0ms 291.8ms 93.0 MB
mono-small standard-version 550.4ms - - - - 92.3 MB
single changesets 760.7ms - - - - 108.2 MB
single commit-and-tag-version 543.2ms - - - - 92.4 MB
single ferrflow 289.5ms 312.3ms 298.3ms 291.4ms 292.9ms 92.9 MB
single standard-version 558.0ms - - - - 92.9 MB
Install footprint
Tool npm binary
changesets 26.0 MB
commit-and-tag-version 20.0 MB
ferrflow 9.0 MB 9.0 MB
release-please 95.0 MB
semantic-release 69.0 MB
standard-version 21.0 MB

v5.22.2

Compare Source

[5.22.2] - 2026-07-03

Refactoring
  • refactor(formats): share a format-preserving splice helper across handlers (#​631)

Performance

Binary
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k ferrflow 3.5ms 84.3ms 23.6ms 3.5ms 3.0ms 13.1 MB
mono-50-5k ferrflow 3.2ms 370.5ms 84.7ms 3.1ms 2.6ms 12.9 MB
mono-large ferrflow 4.1ms 738.2ms 158.0ms 4.6ms 3.9ms 15.1 MB
mono-medium ferrflow 3.4ms 54.1ms 13.8ms 3.3ms 2.8ms 13.2 MB
mono-small ferrflow 2.8ms 17.1ms 4.9ms 2.7ms 2.6ms 13.1 MB
single ferrflow 2.9ms 15.1ms 4.6ms 2.6ms 2.6ms 13.2 MB

Note: every competitor is a Node.js package — none ship a native binary, so this section can only show ferrflow. Cross-tool comparisons live in the Npm section.

Docker
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k ferrflow - - 183.8ms 160.8ms 164.0ms 42.5 MB
mono-50-5k ferrflow - - 251.9ms 157.8ms 165.7ms 46.0 MB
mono-large ferrflow - - 341.8ms 161.6ms 158.8ms 43.3 MB
mono-medium ferrflow - - 171.3ms 161.2ms 160.9ms 43.2 MB
mono-small ferrflow - - 161.8ms 161.8ms 159.7ms 43.0 MB
single ferrflow - - 164.4ms 157.1ms 159.8ms 42.9 MB

Note: no competitor publishes a first-party Docker image that is comparable to ghcr.io/ferrlabs/ferrflow (a single static binary). Wrapping the Node tools in node:lts would only re-time node startup + npm + the tool already measured in the Npm section, so this section is intentionally limited to ferrflow.

Npm
Fixture Tool check release-dry-run tag validate version Peak RSS
mono-100-1k changesets 818.3ms - - - - 115.2 MB
mono-100-1k commit-and-tag-version 602.4ms - - - - 90.5 MB
mono-100-1k ferrflow 255.7ms 334.1ms 271.1ms 254.1ms 252.3ms 92.6 MB
mono-100-1k standard-version 627.1ms - - - - 95.8 MB
mono-50-5k changesets 779.2ms - - - - 111.9 MB
mono-50-5k commit-and-tag-version 1150.6ms - - - - 119.8 MB
mono-50-5k ferrflow 252.4ms 631.7ms 328.6ms 251.8ms 251.4ms 92.2 MB
mono-50-5k standard-version 1184.1ms - - - - 124.7 MB
mono-large changesets 882.2ms - - - - 119.2 MB
mono-large commit-and-tag-version 1818.4ms - - - - 158.5 MB
mono-large ferrflow 249.5ms 994.3ms 406.6ms 254.1ms 251.4ms 92.7 MB
mono-large standard-version 1847.7ms - - - - 165.6 MB
mono-medium changesets 772.2ms - - - - 111.7 MB
mono-medium commit-and-tag-version 524.5ms - - - - 92.9 MB
mono-medium ferrflow 249.2ms 300.7ms 263.2ms 253.3ms 255.1ms 91.7 MB
mono-medium standard-version 550.5ms - - - - 94.4 MB
mono-small changesets 729.8ms - - - - 107.2 MB
mono-small commit-and-tag-version 462.0ms - - - - 92.6 MB
mono-small ferrflow 250.5ms 264.2ms 253.8ms 250.1ms 252.2ms 93.2 MB
mono-small standard-version 472.4ms - - - - 92.4 MB
single changesets 715.4ms - - - - 108.0 MB
single commit-and-tag-version 460.2ms - - - - 92.7 MB
single ferrflow 255.2ms 267.3ms 257.6ms 256.1ms 256.2ms 93.5 MB
single standard-version 470.8ms - - - - 92.5 MB
Install footprint
Tool npm binary
changesets 26.0 MB
commit-and-tag-version 20.0 MB
ferrflow 10.0 MB 10.0 MB
release-please 95.0 MB
semantic-release 69.0 MB
standard-version 21.0 MB
helm/helm (helm)

v4.2.3: Helm v4.2.3

Compare Source

Helm v4.2.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v4.2.3. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 43e8b7f (Terry Howe)
rust-lang/rust (rust)

v1.97.0

Compare Source

==========================

Language

Platform Support

Refer to Rust's platform support page
for more information on Rust's tiered platform support.

Stabilized APIs

These previously stable APIs are now stable in const contexts:

Cargo

Rustdoc

Compatibility Notes


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@ferrlabs-renovate ferrlabs-renovate Bot enabled auto-merge (squash) July 13, 2026 01:10
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/sbom-track.yml Fixed
Comment thread .github/workflows/security-scan.yml Fixed
@ferrlabs-renovate ferrlabs-renovate Bot force-pushed the renovate/github-actions branch 2 times, most recently from a07b6c5 to f20f3cb Compare July 13, 2026 08:24
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/sbom-track.yml Fixed
Comment thread .github/workflows/security-scan.yml Fixed
@ferrlabs-renovate ferrlabs-renovate Bot force-pushed the renovate/github-actions branch 2 times, most recently from c1936df to fddc1b3 Compare July 15, 2026 11:23
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/sbom-track.yml Fixed
Comment thread .github/workflows/security-scan.yml Fixed
@ferrlabs-renovate ferrlabs-renovate Bot force-pushed the renovate/github-actions branch 2 times, most recently from 76ecdcc to a6b1ac9 Compare July 15, 2026 19:10
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/sbom-track.yml Fixed
Comment thread .github/workflows/security-scan.yml Fixed
@ferrlabs-renovate ferrlabs-renovate Bot force-pushed the renovate/github-actions branch from a6b1ac9 to 6620ba9 Compare July 15, 2026 20:38
Comment thread .github/workflows/ci.yml
ci:
name: CI
uses: FerrLabs/.github/.github/workflows/reusable-ci-go.yml@main
uses: FerrLabs/.github/.github/workflows/reusable-ci-go.yml@9d30d151f9b45c94bca36c54bde080885073fe94 # main
sbom:
name: SBOM → Dependency-Track
uses: FerrLabs/.github/.github/workflows/reusable-sbom-track.yml@main
uses: FerrLabs/.github/.github/workflows/reusable-sbom-track.yml@9d30d151f9b45c94bca36c54bde080885073fe94 # main
scan:
name: Secrets + CVE
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@main
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@9d30d151f9b45c94bca36c54bde080885073fe94 # main
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant