fix(deps): update all dependencies by renovate[bot] · Pull Request #289 · aperturerobotics/bifrost

renovate · 2026-03-18T19:25:37Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-go	action	minor	`v6.3.0` → `v6.4.0`
github.com/aperturerobotics/common	require	patch	`v0.32.0` → `v0.32.3`
github.com/aperturerobotics/controllerbus	require	patch	`v0.53.0` → `v0.53.1`
github.com/aperturerobotics/go-websocket	require	digest	`c5f8823` → `74dbfb8`
github.com/aperturerobotics/starpc	require	patch	`v0.49.1` → `v0.49.3`
github.com/aperturerobotics/util	require	patch	`v1.33.0` → `v1.33.1`
github.com/klauspost/compress	require	patch	`v1.18.4` → `v1.18.5`
github.com/mr-tron/base58	require	minor	`v1.2.0` → `v1.3.0`
github.com/pion/webrtc/v4	require	patch	`v4.2.9` → `v4.2.11`
github.com/sasha-s/go-deadlock	require	patch	`v0.3.8` → `v0.3.9`
github/codeql-action	action	minor	`v4.33.0` → `v4.35.2`
golang.org/x/crypto	require	minor	`v0.49.0` → `v0.50.0`
typescript (source)	devDependencies	major	`^5.8.3` → `^6.0.0`

Release Notes

actions/setup-go (actions/setup-go)

`v6.4.0`

Compare Source

What's Changed

Enhancement

Add go-download-base-url input for custom Go distributions by @gdams in #721

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #727

Documentation update

Rearrange README.md, add advanced-usage.md by @priyagupta108 in #724
Fix Microsoft build of Go link by @gdams in #734

New Contributors

@gdams made their first contribution in #721

Full Changelog: actions/setup-go@v6...v6.4.0

aperturerobotics/common (github.com/aperturerobotics/common)

aperturerobotics/controllerbus (github.com/aperturerobotics/controllerbus)

`v0.53.1`

Compare Source

aperturerobotics/starpc (github.com/aperturerobotics/starpc)

`v0.49.3`

Compare Source

Full Changelog: aperturerobotics/starpc@v0.49.2...v0.49.3

`v0.49.2`

Compare Source

Full Changelog: aperturerobotics/starpc@v0.49.1...v0.49.2

aperturerobotics/util (github.com/aperturerobotics/util)

`v1.33.1`

Compare Source

klauspost/compress (github.com/klauspost/compress)

`v1.18.5`

Compare Source

What's Changed

zstd: Fix crash when changing encoder dictionary with same ID by @klauspost in #1135
zstd: Default to full zero frames by @klauspost in #1134
flate: Clean up histogram order by @klauspost in #1133

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

mr-tron/base58 (github.com/mr-tron/base58)

`v1.3.0`: x10 speedup

Compare Source

What's Changed

More tests and nits by @ribasushi in #17
Big refactoring with speed up to x10.

Previous version:

cpu: Apple M4
BenchmarkTrivialBase58Encoding
BenchmarkTrivialBase58Encoding-10       	  704328	      1554 ns/op
BenchmarkFastBase58Encoding
BenchmarkFastBase58Encoding-10          	 1000000	      1065 ns/op
BenchmarkTrivialBase58Decoding
BenchmarkTrivialBase58Decoding-10       	 1541754	       767.0 ns/op
BenchmarkFastBase58Decoding
BenchmarkFastBase58Decoding-10          	 4358894	       278.3 ns/op
BenchmarkTrivialBase58Encoding32
BenchmarkTrivialBase58Encoding32-10     	  729949	      1627 ns/op
BenchmarkFastBase58Encoding32
BenchmarkFastBase58Encoding32-10        	 1000000	      1118 ns/op
BenchmarkTrivialBase58Encoding36
BenchmarkTrivialBase58Encoding36-10     	  608595	      1813 ns/op
BenchmarkFastBase58Encoding36
BenchmarkFastBase58Encoding36-10        	  893626	      1275 ns/op
BenchmarkTrivialBase58Encoding64
BenchmarkTrivialBase58Encoding64-10     	  284566	      4028 ns/op
BenchmarkFastBase58Encoding64
BenchmarkFastBase58Encoding64-10        	  279295	      3955 ns/op
BenchmarkTrivialBase58Encoding256
BenchmarkTrivialBase58Encoding256-10    	   33140	     35533 ns/op
BenchmarkFastBase58Encoding256
BenchmarkFastBase58Encoding256-10       	   17833	     67081 ns/op
BenchmarkTrivialBase58Decoding32
BenchmarkTrivialBase58Decoding32-10     	 1512828	       875.7 ns/op
BenchmarkFastBase58Decoding32
BenchmarkFastBase58Decoding32-10        	 4247128	       341.9 ns/op
BenchmarkTrivialBase58Decoding36
BenchmarkTrivialBase58Decoding36-10     	 1319317	       880.9 ns/op
BenchmarkFastBase58Decoding36
BenchmarkFastBase58Decoding36-10        	 3449229	       366.6 ns/op
BenchmarkTrivialBase58Decoding64
BenchmarkTrivialBase58Decoding64-10     	  663181	      1636 ns/op
BenchmarkFastBase58Decoding64
BenchmarkFastBase58Decoding64-10        	 1327443	       903.0 ns/op
BenchmarkTrivialBase58Decoding256
BenchmarkTrivialBase58Decoding256-10    	  153183	      7469 ns/op
BenchmarkFastBase58Decoding256
BenchmarkFastBase58Decoding256-10       	   93289	     12428 ns/op

New version:

cpu: Apple M4
BenchmarkTrivialBase58Encoding
BenchmarkTrivialBase58Encoding-10       	  712528	      1539 ns/op
BenchmarkFastBase58Encoding
BenchmarkFastBase58Encoding-10          	 6090552	       193.7 ns/op
BenchmarkTrivialBase58Decoding
BenchmarkTrivialBase58Decoding-10       	 1539550	       767.5 ns/op
BenchmarkFastBase58Decoding
BenchmarkFastBase58Decoding-10          	18001034	        64.68 ns/op
BenchmarkTrivialBase58Encoding32
BenchmarkTrivialBase58Encoding32-10     	  632319	      1664 ns/op
BenchmarkFastBase58Encoding32
BenchmarkFastBase58Encoding32-10        	 6023108	       195.3 ns/op
BenchmarkTrivialBase58Encoding36
BenchmarkTrivialBase58Encoding36-10     	  575576	      1799 ns/op
BenchmarkFastBase58Encoding36
BenchmarkFastBase58Encoding36-10        	 4596517	       242.7 ns/op
BenchmarkTrivialBase58Encoding64
BenchmarkTrivialBase58Encoding64-10     	  308518	      3802 ns/op
BenchmarkFastBase58Encoding64
BenchmarkFastBase58Encoding64-10        	 1829064	       662.5 ns/op
BenchmarkTrivialBase58Encoding256
BenchmarkTrivialBase58Encoding256-10    	   33804	     35967 ns/op
BenchmarkFastBase58Encoding256
BenchmarkFastBase58Encoding256-10       	  125356	      9546 ns/op
BenchmarkTrivialBase58Decoding32
BenchmarkTrivialBase58Decoding32-10     	 1489977	       780.0 ns/op
BenchmarkFastBase58Decoding32
BenchmarkFastBase58Decoding32-10        	18067844	        66.52 ns/op
BenchmarkTrivialBase58Decoding36
BenchmarkTrivialBase58Decoding36-10     	 1245730	       867.8 ns/op
BenchmarkFastBase58Decoding36
BenchmarkFastBase58Decoding36-10        	15569721	        77.47 ns/op
BenchmarkTrivialBase58Decoding64
BenchmarkTrivialBase58Decoding64-10     	  609102	      1654 ns/op
BenchmarkFastBase58Decoding64
BenchmarkFastBase58Decoding64-10        	 9637953	       130.8 ns/op
BenchmarkTrivialBase58Decoding256
BenchmarkTrivialBase58Decoding256-10    	  163030	      7345 ns/op
BenchmarkFastBase58Decoding256
BenchmarkFastBase58Decoding256-10       	 1918304	       629.3 ns/op
PASS

pion/webrtc (github.com/pion/webrtc/v4)

`v4.2.11`

Compare Source

Changelog

f3879ae sctp: implement SNAP / sctp-init (#3327)

`v4.2.10`

Compare Source

Changelog

fc0a368 Add WithRenominationNominationAttribute
1f19122 Added SettingEngine option to set RemoteIPFilter
653ed36 Update module github.com/pion/sctp to v1.9.4 (#3394)
d0fd56a Update module github.com/pion/ice/v4 to v4.2.2 (#3398)
b409f21 Migrate to SCTP options API
87b7c3e Update dependency @roamhq/wrtc to ^0.10.0 (#3393)
c36cb6e Added SettingEngine option to set DTLS ALPN
d0bc062 Apply modernize and lint upgrades
cfbbdc1 Update CI configs to v0.12.1
4812b63 Include missing RID in InboundRTPStreamStats
e99ff7e Include stripping metadata and frame duration
43ff05e Correct MIME Type for RTX Stream Codec
aa3b95c Add Stats() to ICETransport and SCTPTransport
a20e2b4 Fix NACKs sent to RTX track

sasha-s/go-deadlock (github.com/sasha-s/go-deadlock)

`v0.3.9`

Compare Source

Reduce allocations from callers (#54), add new unit tests, and fix existing -race unit test failures

github/codeql-action (github/codeql-action)

`v4.35.2`

Compare Source

The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
Update default CodeQL bundle version to 2.25.2. #3823

`v4.35.1`

Compare Source

Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

`v4.35.0`

Compare Source

Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767
Update default CodeQL bundle version to 2.25.1. #3773

`v4.34.1`

Compare Source

Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

`v4.34.0`

Compare Source

Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569
We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584
Update default CodeQL bundle version to 2.25.0. #3585

microsoft/TypeScript (typescript)

`v6.0.2`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-03-18T19:27:06Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
golang/github.com/pion/webrtc/v4@v4.2.9 ⏵ v4.2.11	⁺¹
golang/golang.org/x/crypto@v0.49.0 ⏵ v0.50.0	⁺¹
golang/github.com/aperturerobotics/go-websocket@v1.8.15-0.20260228132212-c5f88237fdf8 ⏵ v1.8.15-0.20260329113544-74dbfb8f11c6	⁺¹
npm/typescript@5.9.3 ⏵ 6.0.2	⁺¹	⁺¹
golang/github.com/klauspost/compress@v1.18.4 ⏵ v1.18.5	⁺¹
golang/github.com/aperturerobotics/util@v1.33.0 ⏵ v1.33.1	^-1
golang/github.com/aperturerobotics/common@v0.32.0 ⏵ v0.32.3
golang/github.com/aperturerobotics/starpc@v0.49.1 ⏵ v0.49.3	⁺¹
golang/github.com/aperturerobotics/controllerbus@v0.53.0 ⏵ v0.53.1	⁺¹
golang/github.com/sasha-s/go-deadlock@v0.3.8 ⏵ v0.3.9	⁺¹
golang/github.com/mr-tron/base58@v1.2.0 ⏵ v1.3.0	⁺¹

View full report

renovate · 2026-03-25T20:59:10Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

7 additional dependencies were updated

Details:

Package	Change
`github.com/aperturerobotics/go-protoc-wasi`	`v0.0.0-20260219012250-c573f70e4509` -> `v0.0.0-20260329113540-600516012db3`
`github.com/aperturerobotics/go-protoc-gen-prost`	`v0.0.0-20260219012250-e75aa9f430a2` -> `v0.0.0-20260329113538-218ccd8f20e0`
`github.com/pion/ice/v4`	`v4.2.1` -> `v4.2.2`
`github.com/pion/sctp`	`v1.9.2` -> `v1.9.4`
`golang.org/x/mod`	`v0.34.0` -> `v0.35.0`
`golang.org/x/net`	`v0.51.0` -> `v0.52.0`
`golang.org/x/sys`	`v0.42.0` -> `v0.43.0`

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/all branch from 40c5bff to d918b34 Compare March 20, 2026 13:23

renovate bot changed the title ~~fix(deps): update module github.com/sasha-s/go-deadlock to v0.3.9~~ fix(deps): update all dependencies Mar 20, 2026

renovate bot force-pushed the renovate/all branch 5 times, most recently from b46eda4 to 3046cf4 Compare March 25, 2026 20:59

renovate bot force-pushed the renovate/all branch 11 times, most recently from 8c69891 to 8564d49 Compare April 2, 2026 08:44

renovate bot force-pushed the renovate/all branch 3 times, most recently from 695a537 to f8558b2 Compare April 9, 2026 18:47

renovate bot force-pushed the renovate/all branch 3 times, most recently from 9cd0b63 to 859ddeb Compare April 15, 2026 14:41

fix(deps): update all dependencies

a956eec

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/all branch from 859ddeb to a956eec Compare April 16, 2026 08:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all dependencies#289

fix(deps): update all dependencies#289
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/all

renovate bot commented Mar 18, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Mar 18, 2026 •

edited

Loading

Uh oh!

renovate bot commented Mar 25, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

What's Changed

v1.3.0: x10 speedup

What's Changed

Changelog

Changelog

Configuration

Uh oh!

socket-security bot commented Mar 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate bot commented Mar 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

renovate bot commented Mar 18, 2026 •

edited

Loading

`v1.3.0`: x10 speedup

socket-security bot commented Mar 18, 2026 •

edited

Loading

renovate bot commented Mar 25, 2026 •

edited

Loading