chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
esbuild		minor	0.20.2 -> 0.21.4
github.com/alecthomas/assert/v2	require	minor	v2.7.0 -> v2.10.0
github.com/alecthomas/chroma/v2	require	minor	v2.13.0 -> v2.14.0
go		patch	1.22.1 -> 1.22.3
goreleaser		minor	1.24.0 -> 1.26.2

---

Release Notes

evanw/esbuild (esbuild)

v0.21.4

Compare Source

• Update support for import assertions and import attributes in node (#​3778)

  Import assertions (the assert keyword) have been removed from node starting in v22.0.0. So esbuild will now strip them and generate a warning with --target=node22 or above:

  ▲ [WARNING] The "assert" keyword is not supported in the configured target environment ("node22") [assert-to-with]
  
      example.mjs:1:40:
        1 │ import json from "esbuild/package.json" assert { type: "json" }
          │                                         ~~~~~~
          ╵                                         with
  
    Did you mean to use "with" instead of "assert"?
  

  Import attributes (the with keyword) have been backported to node 18 starting in v18.20.0. So esbuild will no longer strip them with --target=node18.N if N is 20 or greater.

• Fix for await transform when a label is present

  This release fixes a bug where the for await transform, which wraps the loop in a try statement, previously failed to also move the loop's label into the try statement. This bug only affects code that uses both of these features in combination. Here's an example of some affected code:

  // Original code
  async function test() {
    outer: for await (const x of [Promise.resolve([0, 1])]) {
      for (const y of x) if (y) break outer
      throw 'fail'
    }
  }
  
  // Old output (with --target=es6)
  function test() {
    return __async(this, null, function* () {
      outer: try {
        for (var iter = __forAwait([Promise.resolve([0, 1])]), more, temp, error; more = !(temp = yield iter.next()).done; more = false) {
          const x = temp.value;
          for (const y of x) if (y) break outer;
          throw "fail";
        }
      } catch (temp) {
        error = [temp];
      } finally {
        try {
          more && (temp = iter.return) && (yield temp.call(iter));
        } finally {
          if (error)
            throw error[0];
        }
      }
    });
  }
  
  // New output (with --target=es6)
  function test() {
    return __async(this, null, function* () {
      try {
        outer: for (var iter = __forAwait([Promise.resolve([0, 1])]), more, temp, error; more = !(temp = yield iter.next()).done; more = false) {
          const x = temp.value;
          for (const y of x) if (y) break outer;
          throw "fail";
        }
      } catch (temp) {
        error = [temp];
      } finally {
        try {
          more && (temp = iter.return) && (yield temp.call(iter));
        } finally {
          if (error)
            throw error[0];
        }
      }
    });
  }

• Do additional constant folding after cross-module enum inlining (#​3416, #​3425)

  This release adds a few more cases where esbuild does constant folding after cross-module enum inlining.

  // Original code: enum.ts
  export enum Platform {
    WINDOWS = 'windows',
    MACOS = 'macos',
    LINUX = 'linux',
  }
  
  // Original code: main.ts
  import { Platform } from './enum';
  declare const PLATFORM: string;
  export function logPlatform() {
    if (PLATFORM == Platform.WINDOWS) console.log('Windows');
    else if (PLATFORM == Platform.MACOS) console.log('macOS');
    else if (PLATFORM == Platform.LINUX) console.log('Linux');
    else console.log('Other');
  }
  
  // Old output (with --bundle '--define:PLATFORM="macos"' --minify --format=esm)
  function n(){"windows"=="macos"?console.log("Windows"):"macos"=="macos"?console.log("macOS"):"linux"=="macos"?console.log("Linux"):console.log("Other")}export{n as logPlatform};
  
  // New output (with --bundle '--define:PLATFORM="macos"' --minify --format=esm)
  function n(){console.log("macOS")}export{n as logPlatform};

• Pass import attributes to on-resolve plugins (#​3384, #​3639, #​3646)

  With this release, on-resolve plugins will now have access to the import attributes on the import via the with property of the arguments object. This mirrors the with property of the arguments object that's already passed to on-load plugins. In addition, you can now pass with to the resolve() API call which will then forward that value on to all relevant plugins. Here's an example of a plugin that can now be written:

  const examplePlugin = {
    name: 'Example plugin',
    setup(build) {
      build.onResolve({ filter: /.*/ }, args => {
        if (args.with.type === 'external')
          return { external: true }
      })
    }
  }
  
  require('esbuild').build({
    stdin: {
      contents: `
        import foo from "./foo" with { type: "external" }
        foo()
      `,
    },
    bundle: true,
    format: 'esm',
    write: false,
    plugins: [examplePlugin],
  }).then(result => {
    console.log(result.outputFiles[0].text)
  })

• Formatting support for the @position-try rule (#​3773)

  Chrome shipped this new CSS at-rule in version 125 as part of the CSS anchor positioning API. With this release, esbuild now knows to expect a declaration list inside of the @position-try body block and will format it appropriately.

• Always allow internal string import and export aliases (#​3343)

  Import and export names can be string literals in ES2022+. Previously esbuild forbid any usage of these aliases when the target was below ES2022. Starting with this release, esbuild will only forbid such usage when the alias would otherwise end up in output as a string literal. String literal aliases that are only used internally in the bundle and are "compiled away" are no longer errors. This makes it possible to use string literal aliases with esbuild's inject feature even when the target is earlier than ES2022.

v0.21.3

Compare Source

• Implement the decorator metadata proposal (#​3760)

  This release implements the decorator metadata proposal, which is a sub-proposal of the decorators proposal. Microsoft shipped the decorators proposal in TypeScript 5.0 and the decorator metadata proposal in TypeScript 5.2, so it's important that esbuild also supports both of these features. Here's a quick example:

  // Shim the "Symbol.metadata" symbol
  Symbol.metadata ??= Symbol('Symbol.metadata')
  
  const track = (_, context) => {
    (context.metadata.names ||= []).push(context.name)
  }
  
  class Foo {
    @​track foo = 1
    @​track bar = 2
  }
  
  // Prints ["foo", "bar"]
  console.log(Foo[Symbol.metadata].names)

  ⚠️ WARNING ⚠️

  This proposal has been marked as "stage 3" which means "recommended for implementation". However, it's still a work in progress and isn't a part of JavaScript yet, so keep in mind that any code that uses JavaScript decorator metadata may need to be updated as the feature continues to evolve. If/when that happens, I will update esbuild's implementation to match the specification. I will not be supporting old versions of the specification.

• Fix bundled decorators in derived classes (#​3768)

  In certain cases, bundling code that uses decorators in a derived class with a class body that references its own class name could previously generate code that crashes at run-time due to an incorrect variable name. This problem has been fixed. Here is an example of code that was compiled incorrectly before this fix:

  class Foo extends Object {
    @​(x => x) foo() {
      return Foo
    }
  }
  console.log(new Foo().foo())

• Fix tsconfig.json files inside symlinked directories (#​3767)

  This release fixes an issue with a scenario involving a tsconfig.json file that extends another file from within a symlinked directory that uses the paths feature. In that case, the implicit baseURL value should be based on the real path (i.e. after expanding all symbolic links) instead of the original path. This was already done for other files that esbuild resolves but was not yet done for tsconfig.json because it's special-cased (the regular path resolver can't be used because the information inside tsconfig.json is involved in path resolution). Note that this fix no longer applies if the --preserve-symlinks setting is enabled.

v0.21.2

Compare Source

• Correct this in field and accessor decorators (#​3761)

  This release changes the value of this in initializers for class field and accessor decorators from the module-level this value to the appropriate this value for the decorated element (either the class or the instance). It was previously incorrect due to lack of test coverage. Here's an example of a decorator that doesn't work without this change:

  const dec = () => function() { this.bar = true }
  class Foo { @​dec static foo }
  console.log(Foo.bar) // Should be "true"

• Allow es2023 as a target environment (#​3762)

  TypeScript recently added es2023 as a compilation target, so esbuild now supports this too. There is no difference between a target of es2022 and es2023 as far as esbuild is concerned since the 2023 edition of JavaScript doesn't introduce any new syntax features.

v0.21.1

• Fix a regression with --keep-names (#​3756)

  The previous release introduced a regression with the --keep-names setting and object literals with get/set accessor methods, in which case the generated code contained syntax errors. This release fixes the regression:

  // Original code
  x = { get y() {} }
  
  // Output from version 0.21.0 (with --keep-names)
  x = { get y: /* @​__PURE__ */ __name(function() {
  }, "y") };
  
  // Output from this version (with --keep-names)
  x = { get y() {
  } };

alecthomas/assert (github.com/alecthomas/assert/v2)

v2.10.0

Compare Source

v2.9.0

Compare Source

v2.8.1

Compare Source

v2.8.0

Compare Source

alecthomas/chroma (github.com/alecthomas/chroma/v2)

v2.14.0

Compare Source

Changelog

• 1e983e7 lexers/cue: support CUE attributes (#​961)
• 9347b55 Add Gleam syntax highlighting (#​959)
• 6b7ffe1 chore(styles): add tokyonight inspired styles (#​957)
• 736c0ea Typescript: Several fixes (#​952)
• e5c25d0 Org: Keep all newlines (#​951)
• d07caa4 chore(deps): update module github.com/alecthomas/assert/v2 to v2.7.0 (#​949)
• 5f83664 Vue: Handle more edge cases (#​950)
• 32c053f chore(deps): update all non-major dependencies (#​948)
• 2580aaa Add Bazel bzlmod support into Python lexer (#​947)

golang/go (go)

v1.22.3

v1.22.2

goreleaser/goreleaser (goreleaser)

v1.26.2

Changelog

Bug fixes

• b3d6460: fix(docs): version typo (#​4878) (@​nullswan)

Dependency updates

• 73a22e5: chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#​4876) (@​dependabot[bot])
• 1c66ce4: chore(deps): bump anchore/sbom-action from 0.15.11 to 0.16.0 (#​4881) (@​dependabot[bot])
• 39d1f44: chore(deps): bump cachix/install-nix-action from 26 to 27 (#​4874) (@​dependabot[bot])
• 1d49b22: chore(deps): bump codecov/codecov-action from 4.4.0 to 4.4.1 (#​4882) (@​dependabot[bot])
• fae464e: chore(deps): bump github.com/caarlos0/env/v11 from 11.0.0 to 11.0.1 (#​4888) (@​dependabot[bot])
• de796eb: chore(deps): bump github.com/google/ko from 0.15.2 to 0.15.4 (#​4885) (@​dependabot[bot])
• b4d768b: chore(deps): bump github.com/mattn/go-mastodon from 0.0.6 to 0.0.8 (#​4872) (@​dependabot[bot])
• a82491a: chore(deps): bump github.com/slack-go/slack from 0.12.5 to 0.13.0 (#​4871) (@​dependabot[bot])
• cf2c47a: chore(deps): bump github/codeql-action from 2.13.4 to 3.25.5 (#​4880) (@​dependabot[bot])
• 79caa9c: chore(deps): bump github/codeql-action from 3.25.5 to 3.25.6 (#​4883) (@​dependabot[bot])
• b534f07: chore(deps): bump golang from c24516e to f1fe698 (#​4873) (@​dependabot[bot])
• d7c23c1: chore(deps): bump golang from f1fe698 to b8ded51 (#​4887) (@​dependabot[bot])

Documentation updates

• 2023d4b: docs: fix winget default path (#​4875) (@​lionello)

Build process updates

• f4cd8fc: build: fix changelog not showing dependencies updates (@​caarlos0)

Other work

• 919b132: chore: auto-update generated files (@​actions-user)

Full Changelog: goreleaser/goreleaser@v1.26.1...v1.26.2

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

• Find examples and commented usage of all options in our website.
• Reach out on Discord and Twitter!

v1.26.1

Changelog

Security updates

• 19b94f6: sec: GHSA-f6mm-5fc7-3g3c (@​caarlos0)

Bug fixes

• 9cf3bbb: fix(build): do not print 'go: downloading' bits of go build output (#​4869) (@​caarlos0)
• e466507: fix(cmd): --draft should only override if set (@​caarlos0)
• c5204df: fix: close HTTP resp body to prevent resource leak (#​4857) (@​alexandear)
• 7e0155c: fix: disable logs on some commands (#​4865) (@​caarlos0)
• 6505654: fix: fix nolintlint issues (#​4854) (@​alexandear)
• 00a376c: refactor: remove unneeded in Go 1.22 loop var copy (#​4856) (@​alexandear)

Documentation updates

• ba7e915: docs: announce v1.26 (#​4851) (@​caarlos0)
• 2f56643: docs: update action docs (@​caarlos0)
• c148106: docs: update old Go website links (#​4855) (@​alexandear)

Build process updates

• c09c86c: build: disable appendAssign gocritic check (@​caarlos0)

Full Changelog: goreleaser/goreleaser@v1.26.0...v1.26.1

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

• Find examples and commented usage of all options in our website.
• Reach out on Discord and Twitter!

v1.26.0

Changelog

New Features

• de72cab: feat(announce): add BlueSky support (#​4779) (@​jghiloni)
• e538341: feat(archive): support tar.zst (#​4825) (@​caarlos0)
• 39bf666: feat(changelog): custom commit format (#​4802) (@​caarlos0)
• 5d98c69: feat(checksum): supports BLAKE2 and SHA-3 (#​4850) (@​sorairolake)
• c1615ea: feat(cmd): release --draft (#​4771) (@​caarlos0)
• c8488dc: feat(gitea): implement Changelog function (#​4794) (@​appleboy)
• 2c93bd7: feat(gitlab): Allow PRs to be created (#​4793) (@​baurmatt)
• 5d37c9a: feat: always log build output (#​4787) (@​caarlos0)
• 60a1ccc: feat: isEnvSet tmpl function (#​4775) (@​caarlos0)
• b05a62f: feat: migrate to new homebrew constuctions (on_arm, on_intel) (#​4822) (@​kvendingoldo)
• 3cd2e07: feat: notarize macos binaries (#​4774) (@​caarlos0)

Security updates

• c052ccc: sec(deps): update runc for CVE-2024-3154 (@​caarlos0)

Bug fixes

• 172d6d4: Revert "fix: temp disable snapcraft" (#​4830) (@​caarlos0)
• b45c3b1: fix(bluesky): change default env, fix user agent, update tests (@​caarlos0)
• bee8665: fix(brew): cpu conditionals (#​4814) (@​caarlos0)
• 14ab459: fix(brew): linux brew with extra end (@​caarlos0)
• b1723af: fix(gitea): changelog output (@​caarlos0)
• fd40f5d: fix(gitlab): Use start_branch for file creation if branch doesn't exist already (#​4792) (@​baurmatt)
• bf31227: fix(nfpm): termux platform (#​4812) (@​caarlos0)
• 2f87663: fix(nix): update valid licenses (@​caarlos0)
• 56e0f79: fix(telegram): mdv2escape ProjectName by default (#​4784) (@​EpicStep)
• ca52f85: fix: bad json tag name (@​caarlos0)
• 7552d0b: fix: lint issues (@​caarlos0)
• 7982a33: fix: telegram default message (#​4821) (@​EpicStep)
• fbddb70: fix: temp disable snapcraft (#​4826) (@​caarlos0)
• 0a38d90: fix: typo in User-Agent header value (#​4765) (@​alexandear)
• 780a3a4: fix: update SBOM generation to add .json as file type (#​4781) (@​cpanato)
• bf79c2c: fix: use correct path variable for logging in check command (#​4756) (@​hhromic)
• 1ed1a62: fix: winget paths on windows (#​4786) (@​caarlos0)
• 6735555: refactor: improve switch (@​caarlos0)
• ddb60f4: refactor: improve switch (@​caarlos0)
• d5fc94a: refactor: optimize strings replacers (#​4788) (@​EpicStep)

Dependency updates

• 8391ce5: fix(deps): update go-set to fix armv7 build (@​caarlos0)

Documentation updates

• 9b3f514: docs: description for chocolateys.package_source_url (#​4763) (@​alexandear)
• f6615b1: docs: fix typos (#​4764) (@​alexandear)
• e21a99a: docs: improve -p help message (#​4798) (@​jftuga)
• 7b78e19: docs: notes on prefixed tags and monorepos (@​caarlos0)
• 0481e63: docs: remove mentions to --skip-something flags (@​caarlos0)
• 919f220: docs: update (@​caarlos0)
• 4015fa3: docs: update (@​caarlos0)
• 12d236d: docs: update (@​caarlos0)
• 2cffcc5: docs: update (@​caarlos0)
• b7b4883: docs: update (@​caarlos0)
• f4c149e: docs: update USERS.md (#​4839) (@​xcloudscript)
• faadd02: docs: update bluesky docs (@​caarlos0)
• 60f12de: docs: update changelog (@​caarlos0)
• 7468cf8: docs: update dirty.md deprecated syntax (#​4766) (@​johnmaguire)
• 652fd30: docs: update repository.md (@​caarlos0)

Build process updates

• 1ec2e16: build: fix nightly job (@​caarlos0)
• 52dc2cb: build: use latest snapcraft (#​4849) (@​caarlos0)

Other work

• 3c0c714: blob: permit skipping the configuration of the Content-Disposition header (#​4832) (@​mvisonneau)

Full Changelog: goreleaser/goreleaser@v1.25.1...v1.26.0

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

• Find examples and commented usage of all options in our website.
• Reach out on Discord and Twitter!

v1.25.1

Changelog

Bug fixes

• 053eccd: fix(release): only change release draft status on new releases (#​4744) (@​caarlos0)
• 22b7daa: fix(release): publish tag with skip_upload (#​4745) (@​caarlos0)
• 0ff94f1: fix: properly skip docker builds of skipped builds (#​4747) (@​caarlos0)

Documentation updates

• d972be9: docs: announce v1.25 (@​caarlos0)
• 6a7a9ba: docs: fix deprecation typos (#​4750) (@​j178)

Build process updates

• 85cb59c: build: simplify (#​4748) (@​caarlos0)

Full Changelog: goreleaser/goreleaser@v1.25.0...v1.25.1

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

• Find examples and commented usage of all options in our website.
• Reach out on Discord and Twitter!

v1.25.0

Changelog

New Features

• 1db9347: feat(archives): format override to 'none' to skip certain goos (#​4730) (@​caarlos0)
• 4d2bcfd: feat(brew): allow to set headers in the url (#​4648) (@​caarlos0)
• b9b8a65: feat(brew): sync fork before opening PR (@​caarlos0)
• ec7106f: feat(git): retry git clone on retriable error (#​4725) (@​Zebradil)
• 2ecd71e: feat(krew): sync fork before opening PR (@​caarlos0)
• d9e9e82: feat(nfpm): also allow $NFPM_PASSPHRASE (#​4633) (@​caarlos0)
• 42d2db2: feat(nfpm): compression, fields, and predends on debs (#​4632) (@​caarlos0)
• 42b6282: feat(nix): sync fork before opening PR (@​caarlos0)
• 1af98af: feat(nix): update licenses (@​caarlos0)
• ef90821: feat(pipe/release): Mark GitHub releases as non-draft only after all artifacts are uploaded. (#​4626) (@​nichtverstehen)
• 500be66: feat(scoop): sync fork before opening PR (@​caarlos0)
• 3687c09: feat(winget): sync fork before opening PR (@​caarlos0)
• 263cd05: feat(winget): update manifest version to 1.6.0 (#​4658) (@​vedantmgoyal9)
• 2498ea7: feat: add metadata to the release (#​4714) (@​caarlos0)
• 6e0f426: feat: allow to delete existing artifacts in the release (#​4711) (@​caarlos0)
• 54ee014: feat: checksums.split (#​4707) (@​caarlos0)
• 7fc9399: feat: consistently use directory in property names (#​4737) (@​caarlos0)
• 566e99a: feat: fig is being sunset, remove (#​4694) (@​caarlos0)
• a00bf7e: feat: support .config dir (@​caarlos0)
• b614d64: feat: support netbsd/arm64 (#​4706) (@​maxbrunet)
• 56c5a09: feat: support projectID for gitlab CreateFile (brew, nix, etc) (#​4705) (@​bradleyjames)
• e43604f: feat: use go 1.22 (#​4614) (@​caarlos0)

Bug fixes

• 08851dc: fix(aur): allow to have multiple AUR configs pointing to the same repo (#​4712) (@​caarlos0)
• 554ca5f: fix(build): buildmode: pie (#​4631) (@​caarlos0)
• be511eb: fix(nix): update licenses (@​caarlos0)
• ec22d60: fix(winget): name is not actually required (@​caarlos0)
• 8d3cd4c: fix: run not being truly POSIX-compliant (#​4739) (@​bartekpacia)
• c9ca63e: fix: adjust unused function params in client mock package (#​4738) (@​idnandre)
• dc0de4c: fix: artifact filtering (@​caarlos0)
• b33f14c: fix: better universalbinary message (#​4627) (@​caarlos0)
• e0db6ac: fix: brews.url_headers is not required (@​caarlos0)
• 5a8b6d4: fix: convert run install script to pure POSIX sh (#​4736) (@​bartekpacia)
• 6f356ff: fix: do not log release published if it is a draft (#​4691) (@​nekohasekai)
• af97e63: fix: improve artifact refresh and filtering (@​caarlos0)
• 0a27203: fix: only build archlinux and aur for supported arches (#​4695) (@​caarlos0)
• c9068b4: fix: properly template builds.gobinary (@​caarlos0)
• 994d01a: fix: remove repetitive words (#​4701) (@​standstaff)
• 306999b: fix: sort order of brew artifacts (#​4617) (@​brianstrauch)
• 8cd325e: fix: support dir in gomod (#​4729) (@​caarlos0)
• 05e8b33: fix: use new refresh func (@​caarlos0)
• c54e530: refactor: moving config load logic to another file (@​caarlos0)

Documentation updates

• df3e799: docs(blog): fix broken link (#​4704) (@​alexandear)
• 6353982: docs: Minor edits to 'dockerhub' (#​4740) (@​rfay)
• fd24a00: docs: bump setup-go version (#​4638) (@​ddymko)
• 85f213c: docs: clarify changelog sorting (@​caarlos0)
• 26c003a: docs: dockerhub singular (@​caarlos0)
• e539e12: docs: fix broken links (@​caarlos0)
• f0abada: docs: fix default for build.id attribute (#​4734) (@​hhromic)
• e354734: docs: fix dockerhub missing images property (@​caarlos0)
• 12fe252: docs: fix link (@​caarlos0)
• 79aa2fc: docs: fix typo username in dockerhubs example (#​4733) (@​rfay)
• 7baf594: docs: sort the GoReleaser configuration YAML code examples (#​4652) (@​cafferata)
• 5073bd1: docs: update (@​caarlos0)
• 1f39bdd: docs: update (@​caarlos0)
• 1a9d3f7: docs: update (@​caarlos0)
• 84e214a: docs: update (@​caarlos0)
• 74c0885: docs: update (@​caarlos0)
• ec8819a: docs: update (@​caarlos0)
• f36318b: docs: update CONTRIBUTING (@​caarlos0)
• 2c892be: docs: update contributing (@​caarlos0)
• fa431f3: docs: update docs (@​caarlos0)
• 5256f06: docs: update github action (@​caarlos0)
• 6262ce5: docs: update nix.md (@​caarlos0)
• b728f52: docs: update sign docs (@​caarlos0)
• 932e424: docs: update users (@​caarlos0)
• b31a2ac: docs: update users (@​caarlos0)
• [72a0d9d](https://togithub.

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.