Update all dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change	Age	Confidence
curl	patch	8.14.1-2+deb13u3 → 8.14.1-2+deb13u4
go (source)	patch	1.26.4 → 1.26.5
ts-proto	minor	2.11.8 → 2.12.0

---

Release Notes

golang/go (go)

v1.26.5

stephenh/ts-proto (ts-proto)

v2.12.0

Compare Source

Features

• coerces bigint inputs inside fromPartial to bigint (#​1266) (a89ddec), closes #​1264

2.11.10 (2026-06-30)

Bug Fixes

• incorrect codegen when grpc-js & outputSchema is used (#​1262) (6ae3e40), closes #​609
• Update js map check to include forceLong=bigInt as well (#​1263) (1799765), closes #​905 #​940

2.11.9 (2026-06-27)

Bug Fixes

• prevent code injection via string option/extension values in out… (#​1261) (af15aff)

2.11.8 (2026-05-07)

Bug Fixes

• precision and canonical form in useDuration=string Duration JSON helpers (#​1257) (f31dada), closes #​1176 #​1176

2.11.7 (2026-05-03)

Bug Fixes

• wrappers are not generated for nested google.protobuf.Timestamp and google.protobuf.Struct (#​1254) (79b82f7)

2.11.6 (2026-03-23)

Bug Fixes

• cast globalThis.Buffer to any in env=both base64 helpers (#​1249) (b2e344d), closes #​967 #​999

2.11.5 (2026-03-09)

Bug Fixes

• add explicit type annotations for isolatedDeclarations compatibility (#​1246) (15c8dcc), closes #​1193 #​1192

2.11.4 (2026-02-26)

Bug Fixes

• useOptionals=none when handle oneof as union (#​1244) (97e0899), closes #​1243

2.11.3 (2026-02-25)

Bug Fixes

• Don't generate caching methods for streaming RPCs (#​1245) (abc7bf6)

2.11.2 (2026-02-03)

Bug Fixes

• generate void | Promise return type on empty response (#​1206) (bf67f78)

2.11.1 (2026-01-24)

Bug Fixes

• apply fileSuffix to protoMetadata imports when using outputSchema (#​1242) (ec1c90a), closes #​1238

v2.11.10

Compare Source

Features

• coerces bigint inputs inside fromPartial to bigint (#​1266) (a89ddec), closes #​1264

2.11.10 (2026-06-30)

Bug Fixes

• incorrect codegen when grpc-js & outputSchema is used (#​1262) (6ae3e40), closes #​609
• Update js map check to include forceLong=bigInt as well (#​1263) (1799765), closes #​905 #​940

2.11.9 (2026-06-27)

Bug Fixes

• prevent code injection via string option/extension values in out… (#​1261) (af15aff)

2.11.8 (2026-05-07)

Bug Fixes

• precision and canonical form in useDuration=string Duration JSON helpers (#​1257) (f31dada), closes #​1176 #​1176

2.11.7 (2026-05-03)

Bug Fixes

• wrappers are not generated for nested google.protobuf.Timestamp and google.protobuf.Struct (#​1254) (79b82f7)

2.11.6 (2026-03-23)

Bug Fixes

• cast globalThis.Buffer to any in env=both base64 helpers (#​1249) (b2e344d), closes #​967 #​999

2.11.5 (2026-03-09)

Bug Fixes

• add explicit type annotations for isolatedDeclarations compatibility (#​1246) (15c8dcc), closes #​1193 #​1192

2.11.4 (2026-02-26)

Bug Fixes

• useOptionals=none when handle oneof as union (#​1244) (97e0899), closes #​1243

2.11.3 (2026-02-25)

Bug Fixes

• Don't generate caching methods for streaming RPCs (#​1245) (abc7bf6)

2.11.2 (2026-02-03)

Bug Fixes

• generate void | Promise return type on empty response (#​1206) (bf67f78)

2.11.1 (2026-01-24)

Bug Fixes

• apply fileSuffix to protoMetadata imports when using outputSchema (#​1242) (ec1c90a), closes #​1238

v2.11.9

Compare Source

Features

• coerces bigint inputs inside fromPartial to bigint (#​1266) (a89ddec), closes #​1264

2.11.10 (2026-06-30)

Bug Fixes

• incorrect codegen when grpc-js & outputSchema is used (#​1262) (6ae3e40), closes #​609
• Update js map check to include forceLong=bigInt as well (#​1263) (1799765), closes #​905 #​940

2.11.9 (2026-06-27)

Bug Fixes

• prevent code injection via string option/extension values in out… (#​1261) (af15aff)

2.11.8 (2026-05-07)

Bug Fixes

• precision and canonical form in useDuration=string Duration JSON helpers (#​1257) (f31dada), closes #​1176 #​1176

2.11.7 (2026-05-03)

Bug Fixes

• wrappers are not generated for nested google.protobuf.Timestamp and google.protobuf.Struct (#​1254) (79b82f7)

2.11.6 (2026-03-23)

Bug Fixes

• cast globalThis.Buffer to any in env=both base64 helpers (#​1249) (b2e344d), closes #​967 #​999

2.11.5 (2026-03-09)

Bug Fixes

• add explicit type annotations for isolatedDeclarations compatibility (#​1246) (15c8dcc), closes #​1193 #​1192

2.11.4 (2026-02-26)

Bug Fixes

• useOptionals=none when handle oneof as union (#​1244) (97e0899), closes #​1243

2.11.3 (2026-02-25)

Bug Fixes

• Don't generate caching methods for streaming RPCs (#​1245) (abc7bf6)

2.11.2 (2026-02-03)

Bug Fixes

• generate void | Promise return type on empty response (#​1206) (bf67f78)

2.11.1 (2026-01-24)

Bug Fixes

• apply fileSuffix to protoMetadata imports when using outputSchema (#​1242) (ec1c90a), closes #​1238

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Super-linter summary

Language	Validation result
BIOME_FORMAT	Fail ❌
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

BIOME_FORMAT

Checked 1 file in 9ms. No fixes applied.
Found 1 error.renovate.json format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Formatter would have printed the following content:

     1  1 │   {
     2    │ - ··"$schema":·"https://docs.renovatebot.com/renovate-schema.json",
     3    │ - ··"extends":·[
     4    │ - ····"config:recommended"
     5    │ - ··],
     6    │ - ··"customManagers":·[
     7    │ - ····{
     8    │ - ······"customType":·"regex",
     9    │ - ······"description":·"Update·_VERSION·variables·in·Dockerfiles",
    10    │ - ······"fileMatch":·[
    11    │ - ········"(^|/|\\.)Dockerfile$",
    12    │ - ········"(^|/)Dockerfile\\.[^/]*$",
    13    │ - ········"(^|/)versions.env$"
    14    │ - ······],
    15    │ - ······"matchStrings":·[
    16    │ - ········"#·renovate:·datasource=(?<datasource>[a-z-]+?)(?:·depName=(?<depName>.+?))?·packageName=(?<packageName>.+?)(?:·versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG)·.+?_VERSION=(?<currentValue>.+?)\\s"
    17    │ - ······]
    18    │ - ····},
    19    │ - ····{
    20    │ - ······"customType":·"regex",
    21    │ - ······"fileMatch":·["^Dockerfile$"],
    22    │ - ······"matchStrings":·[
    23    │ - ········"#\\s*renovate:\\s*?(release=(?<release>.*?))?\\s*depName=(?<depName>.*?)?\\s(?:ENV|ARG)·.*?_VERSION=(?<currentValue>.*)"
    24    │ - ······],
    25    │ - ······"registryUrlTemplate":·"https://deb.debian.org/debian?suite=stable&components=main,contrib,non-free&binaryArch=amd64",
    26    │ - ······"datasourceTemplate":·"deb"
    27    │ - ····}
    28    │ - ··],
    29    │ - ··"enabledManagers":·[
    30    │ - ····"dockerfile",
    31    │ - ····"custom.regex"
    32    │ - ··],
    33    │ - ··"groupName":·"all·dependencies",
    34    │ - ··"groupSlug":·"all"
        2 │ + → "$schema":·"https://docs.renovatebot.com/renovate-schema.json",
        3 │ + → "extends":·["config:recommended"],
        4 │ + → "customManagers":·[
        5 │ + → → {
        6 │ + → → → "customType":·"regex",
        7 │ + → → → "description":·"Update·_VERSION·variables·in·Dockerfiles",
        8 │ + → → → "fileMatch":·[
        9 │ + → → → → "(^|/|\\.)Dockerfile$",
       10 │ + → → → → "(^|/)Dockerfile\\.[^/]*$",
       11 │ + → → → → "(^|/)versions.env$"
       12 │ + → → → ],
       13 │ + → → → "matchStrings":·[
       14 │ + → → → → "#·renovate:·datasource=(?<datasource>[a-z-]+?)(?:·depName=(?<depName>.+?))?·packageName=(?<packageName>.+?)(?:·versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG)·.+?_VERSION=(?<currentValue>.+?)\\s"
       15 │ + → → → ]
       16 │ + → → },
       17 │ + → → {
       18 │ + → → → "customType":·"regex",
       19 │ + → → → "fileMatch":·["^Dockerfile$"],
       20 │ + → → → "matchStrings":·[
       21 │ + → → → → "#\\s*renovate:\\s*?(release=(?<release>.*?))?\\s*depName=(?<depName>.*?)?\\s(?:ENV|ARG)·.*?_VERSION=(?<currentValue>.*)"
       22 │ + → → → ],
       23 │ + → → → "registryUrlTemplate":·"https://deb.debian.org/debian?suite=stable&components=main,contrib,non-free&binaryArch=amd64",
       24 │ + → → → "datasourceTemplate":·"deb"
       25 │ + → → }
       26 │ + → ],
       27 │ + → "enabledManagers":·["dockerfile",·"custom.regex"],
       28 │ + → "groupName":·"all·dependencies",
       29 │ + → "groupSlug":·"all"
    35 30 │   }
    36 31 │


format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Some errors were emitted while running checks.

TRIVY

Report Summary

┌────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│   Target   │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile │ dockerfile │        -        │         1         │    -    │
└────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 27 (SUCCESSES: 26, FAILURES: 1)
Failures: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds-0002
────────────────────────────────────────