Update dependency buildkit to v0.26.0

renovate-bot bot commented

2025-11-17 10:17:01 +01:00

Collaborator

This PR contains the following updates:

Package	Update	Change
buildkit	minor	`0.25.1` -> `0.26.0`

Release Notes

moby/buildkit (buildkit)

`v0.26.0`

Compare Source

buildkit 0.26.0

Welcome to the v0.26.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

Tõnis Tiigi
CrazyMax
Akihiro Suda
Sebastiaan van Stijn
Jonathan A. Sternberg
Brian Goff
Dawei Wei
Alberto Garcia Hierro
Damon Holden
David Karlsson
Justin Chadwell
Mikhail Dmitrichenko
bpascard

Notable Changes

Change how file checksum is calculated when wildcards and include/exclude patterns are involved to better align with how they are calculated in the non-wildcard path. #6238
LLB Copy operation now allows specifying required paths to be included in the copy. #6229
Fixed race condition between cache and snapshot for the Git source. #6281
Fixed race condition in HTTP cache key digest computation that could cause duplicate requests and digest mismatch errors. #6292
Runc container runtime has been updated to v1.3.3. #6331
Source metadata requests via ResolveSourceMeta, previously available for image sources, can now be performed for Git sources. This can be used to resolve Git commit and tag checksums and also to access the raw commit and tag objects for further verification. #6283
Source metadata requests via ResolveSourceMeta, previously available for image sources, can now be performed for HTTP sources. This can be used to access artifact checksums, last-modified time etc. #6285
Git sources can now perform verification of GPG or SSH signatures on commits and tags. Enable git signature checks via source policy. #6300 #6344
contentutil package now supports moving referrer objects when using CopyChain function. #6336
Fix fetch by commit for git source when tags change or branch names are updated. #6259
Fix http connection leak when resolving metadata from http source on non-2xx HTTP status codes. #6313
A new type of source policies has been added that supports making policy decisions on the client side via session tunnel. #6276
Add buildkit capability for detecting if source policy decisions can be made via session tunnel. #6345
Avoid intermediate type wrappers for custom fields in provenance. #6275
Add raw commit/tag object access when resolving git source metadata. #6298
Move image source resolver away from the ResolveImageConfig type to ResolveSourceMetadata. #6330 # probably not needed for changelog
Fix inline cache used with multiple exporters. #6263
Fix handling multiple inline cache exporters configured for single build. #6272
Fix handling of annotated Git tags. The pin of the annotated tag should be the SHA of the tag and not the commit it is pointing to. #6251
Fix source policy attributes validation when multiple rules use the same identifier. #6342

Dependency Changes

github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0 -> v1.18.2
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.0 -> v1.11.0
github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 -> v1.11.2
github.com/AzureAD/microsoft-authentication-library-for-go v1.3.2 -> v1.4.2
github.com/Microsoft/hcsshim v0.13.0 -> v0.14.0-rc.1
github.com/ProtonMail/go-crypto v1.3.0 new
github.com/aws/aws-sdk-go-v2 v1.30.3 -> v1.38.1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 -> v1.7.0
github.com/aws/aws-sdk-go-v2/config v1.27.27 -> v1.31.3
github.com/aws/aws-sdk-go-v2/credentials v1.17.27 -> v1.18.7
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 -> v1.18.4
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.8 -> v1.17.10
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 -> v1.4.4
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 -> v2.7.4
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 -> v1.8.3
github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 -> v1.4.4
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 -> v1.13.0
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 -> v1.8.4
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 -> v1.13.4
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 -> v1.19.4
github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 -> v1.87.1
github.com/aws/aws-sdk-go-v2/service/sso v1.22.4 -> v1.28.2
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 -> v1.34.0
github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 -> v1.38.0
github.com/aws/smithy-go v1.20.3 -> v1.22.5
github.com/cenkalti/backoff/v5 v5.0.3 new
github.com/cloudflare/circl v1.6.0 new
github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0
github.com/containerd/containerd/api v1.9.0 -> v1.10.0
github.com/containerd/containerd/v2 v2.1.4 -> v2.2.0
github.com/containerd/go-cni v1.1.12 -> v1.1.13
github.com/containerd/nydus-snapshotter v0.15.2 -> v0.15.4
github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
github.com/containerd/stargz-snapshotter v0.16.3 -> v0.17.0
github.com/containerd/stargz-snapshotter/estargz v0.16.3 -> v0.17.0
github.com/containernetworking/plugins v1.7.1 -> v1.8.0
github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
github.com/docker/cli v28.4.0 -> v28.5.0
github.com/fatih/color v1.18.0 new
github.com/go-logr/logr v1.4.2 -> v1.4.3
github.com/gofrs/flock v0.12.1 -> v0.13.0
github.com/golang-jwt/jwt/v5 v5.2.2 -> v5.3.0
github.com/golang/groupcache 41bb18b -> 2c02b82
github.com/google/pprof 27863c8 -> f64d9cf
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 -> v2.27.2
github.com/hanwen/go-fuse/v2 v2.6.3 -> v2.8.0
github.com/hashicorp/go-retryablehttp v0.7.7 -> v0.7.8
github.com/hiddeco/sshsig v0.2.0 new
github.com/klauspost/compress v1.18.0 -> v1.18.1
github.com/mattn/go-colorable v0.1.14 new
github.com/moby/policy-helpers bcaa71c new
github.com/moby/sys/capability v0.4.0 new
github.com/opencontainers/runtime-tools 2e043c6 -> 0ea5ed0
github.com/prometheus/client_golang v1.22.0 -> v1.23.2
github.com/prometheus/client_model v0.6.1 -> v0.6.2
github.com/prometheus/common v0.62.0 -> v0.66.1
github.com/prometheus/procfs v0.15.1 -> v0.16.1
github.com/secure-systems-lab/go-securesystemslib v0.6.0 -> v0.9.1
github.com/stretchr/testify v1.10.0 -> v1.11.1
github.com/vbatts/tar-split v0.12.1 -> v0.12.2
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.61.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 -> v0.61.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 -> v0.61.0
go.opentelemetry.io/otel v1.35.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.35.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 -> v1.38.0
go.opentelemetry.io/otel/metric v1.35.0 -> v1.38.0
go.opentelemetry.io/otel/sdk v1.35.0 -> v1.38.0
go.opentelemetry.io/otel/sdk/metric v1.35.0 -> v1.38.0
go.opentelemetry.io/otel/trace v1.35.0 -> v1.38.0
go.opentelemetry.io/proto/otlp v1.5.0 -> v1.7.1
go.yaml.in/yaml/v2 v2.4.2 new
golang.org/x/crypto v0.37.0 -> v0.42.0
golang.org/x/exp 7e4ce0a -> df92998
golang.org/x/mod v0.24.0 -> v0.29.0
golang.org/x/net v0.39.0 -> v0.44.0
golang.org/x/sync v0.16.0 -> v0.17.0
golang.org/x/sys v0.33.0 -> v0.37.0
golang.org/x/text v0.24.0 -> v0.29.0
golang.org/x/time v0.11.0 -> v0.14.0
google.golang.org/genproto/googleapis/api 56aae31 -> c5933d9
google.golang.org/genproto/googleapis/rpc 56aae31 -> c5933d9
google.golang.org/grpc v1.72.2 -> v1.76.0
google.golang.org/protobuf v1.36.9 -> v1.36.10
sigs.k8s.io/yaml v1.4.0 -> v1.6.0

Previous release can be found at v0.25.2

`v0.25.2`

Compare Source

Welcome to the v0.25.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

CrazyMax
Tõnis Tiigi

Notable Changes

Update Runc to v1.3.3 #6332

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.25.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [buildkit](https://github.com/moby/buildkit) | minor | `0.25.1` -> `0.26.0` | --- ### Release Notes <details> <summary>moby/buildkit (buildkit)</summary> ### [`v0.26.0`](https://github.com/moby/buildkit/releases/tag/v0.26.0) [Compare Source](https://github.com/moby/buildkit/compare/v0.25.2...v0.26.0-rc1) buildkit 0.26.0 Welcome to the v0.26.0 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Tõnis Tiigi - CrazyMax - Akihiro Suda - Sebastiaan van Stijn - Jonathan A. Sternberg - Brian Goff - Dawei Wei - Alberto Garcia Hierro - Damon Holden - David Karlsson - Justin Chadwell - Mikhail Dmitrichenko - bpascard ##### Notable Changes - Change how file checksum is calculated when wildcards and include/exclude patterns are involved to better align with how they are calculated in the non-wildcard path. [#6238](https://github.com/moby/buildkit/issues/6238) - LLB Copy operation now allows specifying required paths to be included in the copy. [#6229](https://github.com/moby/buildkit/issues/6229) - Fixed race condition between cache and snapshot for the Git source. [#6281](https://github.com/moby/buildkit/issues/6281) - Fixed race condition in HTTP cache key digest computation that could cause duplicate requests and digest mismatch errors. [#6292](https://github.com/moby/buildkit/issues/6292) - Runc container runtime has been updated to v1.3.3. [#6331](https://github.com/moby/buildkit/issues/6331) - Source metadata requests via `ResolveSourceMeta`, previously available for image sources, can now be performed for Git sources. This can be used to resolve Git commit and tag checksums and also to access the raw commit and tag objects for further verification. [#6283](https://github.com/moby/buildkit/issues/6283) - Source metadata requests via `ResolveSourceMeta`, previously available for image sources, can now be performed for HTTP sources. This can be used to access artifact checksums, last-modified time etc. [#6285](https://github.com/moby/buildkit/issues/6285) - Git sources can now perform verification of GPG or SSH signatures on commits and tags. Enable git signature checks via source policy. [#6300](https://github.com/moby/buildkit/issues/6300) [#6344](https://github.com/moby/buildkit/issues/6344) - `contentutil` package now supports moving referrer objects when using `CopyChain` function. [#6336](https://github.com/moby/buildkit/issues/6336) - Fix fetch by commit for git source when tags change or branch names are updated. [#6259](https://github.com/moby/buildkit/issues/6259) - Fix http connection leak when resolving metadata from http source on non-2xx HTTP status codes. [#6313](https://github.com/moby/buildkit/issues/6313) - A new type of source policies has been added that supports making policy decisions on the client side via session tunnel. [#6276](https://github.com/moby/buildkit/issues/6276) - Add buildkit capability for detecting if source policy decisions can be made via session tunnel. [#6345](https://github.com/moby/buildkit/issues/6345) - Avoid intermediate type wrappers for custom fields in provenance. [#6275](https://github.com/moby/buildkit/issues/6275) - Add raw commit/tag object access when resolving git source metadata. [#6298](https://github.com/moby/buildkit/issues/6298) - Move image source resolver away from the `ResolveImageConfig` type to `ResolveSourceMetadata`. [#6330](https://github.com/moby/buildkit/issues/6330) # probably not needed for changelog - Fix inline cache used with multiple exporters. [#6263](https://github.com/moby/buildkit/issues/6263) - Fix handling multiple inline cache exporters configured for single build. [#6272](https://github.com/moby/buildkit/issues/6272) - Fix handling of annotated Git tags. The pin of the annotated tag should be the SHA of the tag and not the commit it is pointing to. [#6251](https://github.com/moby/buildkit/issues/6251) - Fix source policy attributes validation when multiple rules use the same identifier. [#6342](https://github.com/moby/buildkit/issues/6342) ##### Dependency Changes - **github.com/Azure/azure-sdk-for-go/sdk/azcore** v1.16.0 -> v1.18.2 - **github.com/Azure/azure-sdk-for-go/sdk/azidentity** v1.8.0 -> v1.11.0 - **github.com/Azure/azure-sdk-for-go/sdk/internal** v1.10.0 -> v1.11.2 - **github.com/AzureAD/microsoft-authentication-library-for-go** v1.3.2 -> v1.4.2 - **github.com/Microsoft/hcsshim** v0.13.0 -> v0.14.0-rc.1 - **github.com/ProtonMail/go-crypto** v1.3.0 ***new*** - **github.com/aws/aws-sdk-go-v2** v1.30.3 -> v1.38.1 - **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream** v1.6.3 -> v1.7.0 - **github.com/aws/aws-sdk-go-v2/config** v1.27.27 -> v1.31.3 - **github.com/aws/aws-sdk-go-v2/credentials** v1.17.27 -> v1.18.7 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.16.11 -> v1.18.4 - **github.com/aws/aws-sdk-go-v2/feature/s3/manager** v1.17.8 -> v1.17.10 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.3.15 -> v1.4.4 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.6.15 -> v2.7.4 - **github.com/aws/aws-sdk-go-v2/internal/ini** v1.8.0 -> v1.8.3 - **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.3.15 -> v1.4.4 - **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.11.3 -> v1.13.0 - **github.com/aws/aws-sdk-go-v2/service/internal/checksum** v1.3.17 -> v1.8.4 - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.11.17 -> v1.13.4 - **github.com/aws/aws-sdk-go-v2/service/internal/s3shared** v1.17.15 -> v1.19.4 - **github.com/aws/aws-sdk-go-v2/service/s3** v1.58.2 -> v1.87.1 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.22.4 -> v1.28.2 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.26.4 -> v1.34.0 - **github.com/aws/aws-sdk-go-v2/service/sts** v1.30.3 -> v1.38.0 - **github.com/aws/smithy-go** v1.20.3 -> v1.22.5 - **github.com/cenkalti/backoff/v5** v5.0.3 ***new*** - **github.com/cloudflare/circl** v1.6.0 ***new*** - **github.com/containerd/cgroups/v3** v3.0.5 -> v3.1.0 - **github.com/containerd/containerd/api** v1.9.0 -> v1.10.0 - **github.com/containerd/containerd/v2** v2.1.4 -> v2.2.0 - **github.com/containerd/go-cni** v1.1.12 -> v1.1.13 - **github.com/containerd/nydus-snapshotter** v0.15.2 -> v0.15.4 - **github.com/containerd/platforms** v1.0.0-rc.1 -> v1.0.0-rc.2 - **github.com/containerd/stargz-snapshotter** v0.16.3 -> v0.17.0 - **github.com/containerd/stargz-snapshotter/estargz** v0.16.3 -> v0.17.0 - **github.com/containernetworking/plugins** v1.7.1 -> v1.8.0 - **github.com/coreos/go-systemd/v22** v22.5.0 -> v22.6.0 - **github.com/docker/cli** v28.4.0 -> v28.5.0 - **github.com/fatih/color** v1.18.0 ***new*** - **github.com/go-logr/logr** v1.4.2 -> v1.4.3 - **github.com/gofrs/flock** v0.12.1 -> v0.13.0 - **github.com/golang-jwt/jwt/v5** v5.2.2 -> v5.3.0 - **github.com/golang/groupcache** [`41bb18b`](https://github.com/moby/buildkit/commit/41bb18bfe9da) -> [`2c02b82`](https://github.com/moby/buildkit/commit/2c02b8208cf8) - **github.com/google/pprof** [`27863c8`](https://github.com/moby/buildkit/commit/27863c87afa6) -> [`f64d9cf`](https://github.com/moby/buildkit/commit/f64d9cf942d6) - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.26.1 -> v2.27.2 - **github.com/hanwen/go-fuse/v2** v2.6.3 -> v2.8.0 - **github.com/hashicorp/go-retryablehttp** v0.7.7 -> v0.7.8 - **github.com/hiddeco/sshsig** v0.2.0 ***new*** - **github.com/klauspost/compress** v1.18.0 -> v1.18.1 - **github.com/mattn/go-colorable** v0.1.14 ***new*** - **github.com/moby/policy-helpers** [`bcaa71c`](https://github.com/moby/buildkit/commit/bcaa71c99f14) ***new*** - **github.com/moby/sys/capability** v0.4.0 ***new*** - **github.com/opencontainers/runtime-tools** [`2e043c6`](https://github.com/moby/buildkit/commit/2e043c6bd626) -> [`0ea5ed0`](https://github.com/moby/buildkit/commit/0ea5ed0382a2) - **github.com/prometheus/client\_golang** v1.22.0 -> v1.23.2 - **github.com/prometheus/client\_model** v0.6.1 -> v0.6.2 - **github.com/prometheus/common** v0.62.0 -> v0.66.1 - **github.com/prometheus/procfs** v0.15.1 -> v0.16.1 - **github.com/secure-systems-lab/go-securesystemslib** v0.6.0 -> v0.9.1 - **github.com/stretchr/testify** v1.10.0 -> v1.11.1 - **github.com/vbatts/tar-split** v0.12.1 -> v0.12.2 - **go.opentelemetry.io/auto/sdk** v1.1.0 -> v1.2.1 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.60.0 -> v0.61.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.60.0 -> v0.61.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.60.0 -> v0.61.0 - **go.opentelemetry.io/otel** v1.35.0 -> v1.38.0 - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc** v1.35.0 -> v1.38.0 - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp** v1.35.0 -> v1.38.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.35.0 -> v1.38.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.35.0 -> v1.38.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.35.0 -> v1.38.0 - **go.opentelemetry.io/otel/metric** v1.35.0 -> v1.38.0 - **go.opentelemetry.io/otel/sdk** v1.35.0 -> v1.38.0 - **go.opentelemetry.io/otel/sdk/metric** v1.35.0 -> v1.38.0 - **go.opentelemetry.io/otel/trace** v1.35.0 -> v1.38.0 - **go.opentelemetry.io/proto/otlp** v1.5.0 -> v1.7.1 - **go.yaml.in/yaml/v2** v2.4.2 ***new*** - **golang.org/x/crypto** v0.37.0 -> v0.42.0 - **golang.org/x/exp** [`7e4ce0a`](https://github.com/moby/buildkit/commit/7e4ce0ab07d0) -> [`df92998`](https://github.com/moby/buildkit/commit/df9299821621) - **golang.org/x/mod** v0.24.0 -> v0.29.0 - **golang.org/x/net** v0.39.0 -> v0.44.0 - **golang.org/x/sync** v0.16.0 -> v0.17.0 - **golang.org/x/sys** v0.33.0 -> v0.37.0 - **golang.org/x/text** v0.24.0 -> v0.29.0 - **golang.org/x/time** v0.11.0 -> v0.14.0 - **google.golang.org/genproto/googleapis/api** [`56aae31`](https://github.com/moby/buildkit/commit/56aae31c358a) -> [`c5933d9`](https://github.com/moby/buildkit/commit/c5933d9347a5) - **google.golang.org/genproto/googleapis/rpc** [`56aae31`](https://github.com/moby/buildkit/commit/56aae31c358a) -> [`c5933d9`](https://github.com/moby/buildkit/commit/c5933d9347a5) - **google.golang.org/grpc** v1.72.2 -> v1.76.0 - **google.golang.org/protobuf** v1.36.9 -> v1.36.10 - **sigs.k8s.io/yaml** v1.4.0 -> v1.6.0 Previous release can be found at [v0.25.2](https://github.com/moby/buildkit/releases/tag/v0.25.2) ### [`v0.25.2`](https://github.com/moby/buildkit/releases/tag/v0.25.2) [Compare Source](https://github.com/moby/buildkit/compare/v0.25.1...v0.25.2) Welcome to the v0.25.2 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - CrazyMax - Tõnis Tiigi ##### Notable Changes - Update Runc to v1.3.3 [#6332](https://github.com/moby/buildkit/issues/6332) ##### Dependency Changes This release has no dependency changes Previous release can be found at [v0.25.1](https://github.com/moby/buildkit/releases/tag/v0.25.1) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).