Changelogs on

v0.120.0

Wed, 05 Aug 2026 12:13:06 +0000

(github-actions[bot]) released this 2026-08-05 12:13:06 +0000 UTC - v0.120.0

Description

Changes

⚠ Security

fix: file target does not confine writes to the working directory @ihopenre-eng (GHSA-hj4x-hm4v-7wpw)
fix: Credential-bearing URLs written to console @ihopenre-eng (GHSA-gc47-hwcc-8qp4)

🚀 Features

feat(core): add function to validate manifest @olblak (#9721)
feat(core): Add flag to enable/disable report @olblak (#9715)
feat(csv/json/toml): add Dasel v3 support @olblak (#9704)
feat(gitcommit): add Git commit source resource @ihopenre-eng (#9609)
feat: add opt-in singleBranch option to speed up git scm checkout @kuisathaverat (#9590)

🐛 Bug Fixes

fix(autodiscovery/dockercompose): skip images whose tag is not a version @jouve (#9760)
fix: flux OCIRepository autodiscovery with digest @rowan-walsh (#9744)
fix(autodiscovery/updatecli): correctly use relative file path @olblak (#9759)
fix(terragrunt): support source including git username @dexner-jambit (#9731)
fix: updatecli pipeline prepare --clean @olblak (#9716)
fix: add username/password auth to helm/argocd autodiscovery @itsteddyyo (#9706)
fix: guard against short paths in changelog GitHub URL redirect @AruneshDwivedi (#9688)
Fix YAML quoted scalar reads @ahfoysal (#9385)
fix: don't use action info to generate report ID @olblak (#9612)

🧰 Maintenance

deps(go): bump module github.com/go-git/go-git/v5 to v5.19.2 @updateclibot[bot] (#9816)
deps(go): bump module github.com/getsops/sops/v3 to v3.13.3 @updateclibot[bot] (#9809)
deps(go): bump module github.com/drone/go-scm to v1.42.13 @updateclibot[bot] (#9805)
deps(go): bump module github.com/hashicorp/terraform-registry-address to v0.5.0 @updateclibot[bot] (#9799)
chore(ci): upgrade uv version @updateclibot[bot] (#9783)
deps(go): bump module github.com/moby/buildkit to v0.32.0 @updateclibot[bot] (#9780)
deps(go): bump module go.yaml.in/yaml/v3 to v3.0.5 @updateclibot[bot] (#9771)
deps(go): bump module github.com/google/go-containerregistry to v0.21.8 @updateclibot[bot] (#9770)
deps(go): bump module github.com/fluxcd/helm-controller/api to v1.6.3 @updateclibot[bot] (#9755)
deps(go): bump module github.com/yuin/goldmark to v1.8.5 @updateclibot[bot] (#9752)
chore: various cleanup @olblak (#9757)
chore(dockerfile): upgrade node version @updateclibot[bot] (#9741)
chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 in the go_modules group across 1 directory @dependabot[bot] (#9722)
deps(go): bump module github.com/testcontainers/testcontainers-go to v0.43.0 @updateclibot[bot] (#9687)
deps(go): bump module github.com/fluxcd/helm-controller/api to v1.6.2 @updateclibot[bot] (#9677)
deps(go): bump module github.com/moby/buildkit to v0.31.2 @updateclibot[bot] (#9674)
deps(go): bump module github.com/zclconf/go-cty to v1.19.0 @updateclibot[bot] (#9671)
deps(go): bump module cuelang.org/go to v0.17.1 @updateclibot[bot] (#9663)
deps(go): bump module github.com/fluxcd/source-controller/api to v1.9.3 @updateclibot[bot] (#9636)
deps(updatecli/policies): bump all policies @updateclibot[bot] (#9637)
deps(go): bump module github.com/jferrl/go-githubauth to v1.7.0 @updateclibot[bot] (#9625)
deps(go): bump module github.com/beevik/etree to v1.7.0 @updateclibot[bot] (#9601)
deps(go): bump module github.com/drone/go-scm to v1.42.10 @updateclibot[bot] (#9602)
deps(go): bump module github.com/yuin/goldmark to v1.8.4 @updateclibot[bot] (#9605)
fix(shell): function typo @olblak (#9608)
chore(dockerfile): upgrade node version @updateclibot[bot] (#9591)
deps(github/action): bump all dependencies @updateclibot[bot] (#9565)
deps(go): bump module oras.land/oras-go/v2 to v2.6.2 @updateclibot[bot] (#9583)
deps(go): bump module github.com/google/go-containerregistry to v0.21.7 @updateclibot[bot] (#9585)
deps(golang): Bump minor version for github.com/shurcooL module @updateclibot[bot] (#9587)
deps(golang): Bump minor version for github.com/aws module @updateclibot[bot] (#9588)
deps(golang): Bump minor version for go.opentelemetry.io module @updateclibot[bot] (#9589)
chore(ci): upgrade uv version @updateclibot[bot] (#9562)
fix: golang dependencies update @olblak (#9560)
deps(go): bump module github.com/getsops/sops/v3 to v3.13.2 @updateclibot[bot] (#9559)
deps(go): bump module helm.sh/helm/v3 to v3.21.3 @updateclibot[bot] (#9558)

📝 Documentation

doc: update contributing.adoc @olblak (#9758)
chore: various cleanup @olblak (#9757)
doc: update pyproject documentation @olblak (#9736)
chore: cleanup autodiscovery spec comment @olblak (#9699)

Contributors

@AruneshDwivedi, @ahfoysal, @dependabot[bot], @dexner-jambit, @ihopenre-eng, @itsteddyyo, @jouve, @kuisathaverat, @olblak, @rowan-walsh, @updateclibot[bot], dependabot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

v0.119.0

Thu, 09 Jul 2026 15:50:20 +0000

(github-actions[bot]) released this 2026-07-09 15:50:20 +0000 UTC - v0.119.0

Description

Changes

🚀 Features

feat(systemd): add resource plugin for systemd unit files @ScMofeoluwa (#8970)
feat: support cooldown for Golang module @olblak (#8966)

🐛 Bug Fixes

Fix cleanup action for already merged pull requests @perlan (#9133)
fix: correctly init report name and config @olblak (#9283)
fix(terraform): include registry hostname in autodiscovery manifest @Pankaj-Gupta25 (#9281)
fix(pyproject): track uv.lock relative to target workdir @nguyeda (#9266)

🧰 Maintenance

deps: automate updatecli version update in gha workflow @olblak (#9470)
chore(ci): upgrade uv version @updateclibot[bot] (#9394)
chore(dockerfile): upgrade node version @updateclibot[bot] (#9392)
deps: fix default golang update @olblak (#9391)
chore(ci): add repo parameter to issue creation command @olblak (#9380)
chore: remove peter-evans/create-issue-from-file gha @olblak (#9379)
chore: remove Go Report Card badge from README @olblak (#9377)
chore(ci): upgrade uv version @updateclibot[bot] (#9374)
chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in the go_modules group across 1 directory @dependabot[bot] (#9233)
chore: refactor Updatecli compose workflow @olblak (#9368)
deps(go): bump module github.com/aws/aws-sdk-go-v2/credentials to v1.19.26 @updateclibot[bot] (#9329)
chore(ci): upgrade uv version @updateclibot[bot] (#9285)
deps(updatecli/policies): bump all policies @updateclibot[bot] (#9287)
chore(dockerfile): upgrade node version @updateclibot[bot] (#9284)
deps(go): bump module go.opentelemetry.io/otel/sdk to v1.44.0 @updateclibot[bot] (#9269)
deps(go): bump module golang.org/x/mod to v0.37.0 @updateclibot[bot] (#9273)
deps(go): bump module github.com/aws/smithy-go to v1.27.2 @updateclibot[bot] (#9279)
deps(go): bump module github.com/aws/aws-sdk-go-v2/credentials to v1.19.24 @updateclibot[bot] (#9277)
deps(go): bump module gopkg.in/ini.v1 to v1.67.3 @updateclibot[bot] (#9248)
deps(go): bump module helm.sh/helm/v3 to v3.21.2 @updateclibot[bot] (#9231)
deps(go): bump module github.com/drone/go-scm to v1.42.7 @updateclibot[bot] (#9212)
chore(ci): upgrade uv version @updateclibot[bot] (#9180)
deps(go): bump module go.opentelemetry.io/otel/trace to v1.44.0 @updateclibot[bot] (#9169)
deps(go): bump module golang.org/x/net to v0.56.0 @updateclibot[bot] (#9158)
deps(go): bump module github.com/aws/aws-sdk-go-v2/config to v1.32.24 @updateclibot[bot] (#9146)
deps: Bump Golang version to 1.26.4 @updateclibot[bot] (#9116)

Contributors

@Pankaj-Gupta25, @ScMofeoluwa, @dependabot[bot], @nguyeda, @olblak, @perlan, @updateclibot[bot], dependabot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

v0.118.0

Tue, 02 Jun 2026 18:57:07 +0000

(github-actions[bot]) released this 2026-06-02 18:57:07 +0000 UTC - v0.118.0

Description

Changes

🚀 Features

feat: add disable changelog flag and env var @omer-cengel (#8969)

🐛 Bug Fixes

fix: skip version check for generator commands @ambikeesshh (#9064)
chore: don't show version diff if newer @olblak (#9000)

🧰 Maintenance

deps(go): bump module github.com/fluxcd/helm-controller/api to v1.5.5 @updateclibot[bot] (#9093)
chore(ci): upgrade uv version @updateclibot[bot] (#9046)
chore(dockerfile): upgrade node version @updateclibot[bot] (#9009)
deps(go): bump module github.com/drone/go-scm to v1.42.3 @updateclibot[bot] (#8990)
deps(go): bump module github.com/fluxcd/source-controller/api to v1.8.5 @updateclibot[bot] (#8994)
chore: add govulncheck GitHub Action workflow @olblak (#9007)
deps(go): bump module github.com/google/go-containerregistry to v0.21.6 @updateclibot[bot] (#8995)
deps(go): bump module github.com/tetratelabs/wazero to v1.12.0 @updateclibot[bot] (#9002)
chore: updatecli docs handle different exit code @olblak (#9001)

Contributors

@ambikeesshh, @olblak, @omer-cengel, @updateclibot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

v0.117.1

Fri, 29 May 2026 07:38:56 +0000

(github-actions[bot]) released this 2026-05-29 07:38:56 +0000 UTC - v0.117.1

Description

Warning

Warning this release introduces a regression that break cli autocompletion.
More information on #9028
Fixed in v0.118.0

v0.117.0

Fri, 15 May 2026 07:34:23 +0000

(github-actions[bot]) released this 2026-05-15 07:34:23 +0000 UTC - v0.117.0

Description

Warning

Warning this release introduces a regression that break cli autocompletion.
More information on #9028
Fixed in v0.118.0

v0.116.3

Mon, 20 Apr 2026 09:15:35 +0000

(github-actions[bot]) released this 2026-04-20 09:15:35 +0000 UTC - v0.116.3

Description

Changes

🐛 Bug Fixes

fix(cache): include SCM identity in source cache key @loispostula (#8523)

🧰 Maintenance

deps(go): bump module github.com/aws/aws-sdk-go-v2 to v1.41.6 @updateclibot[bot] (#8517)
deps(go): bump module github.com/aws/aws-sdk-go-v2/credentials to v1.19.15 @updateclibot[bot] (#8516)
deps: Updatecli version used by GitHub action @olblak (#8509)

Contributors

@loispostula, @olblak, @updateclibot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

v0.116.2

Sun, 19 Apr 2026 07:17:21 +0000

(github-actions[bot]) released this 2026-04-19 07:17:21 +0000 UTC - v0.116.2

Description

Changes

🐛 Bug Fixes

fix: graph report content @olblak (#8482)
fix: propagate npmrcpath to lockfile shell targets @nickzerjeski (#8407)
fix: changelog dockerimage nil pointer @olblak (#8473)
fix: do not generate empty argocd pipeline using autodiscovery @olblak (#8472)

🧰 Maintenance

chore(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 in the go_modules group across 1 directory @dependabot[bot] (#8506)
install typos gha action v1.45.1 @updateclibot[bot] (#8471)
chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in the go_modules group across 1 directory @dependabot[bot] (#8497)
chore(dockerfile): upgrade node version @updateclibot[bot] (#8489)
deps(go): bump module github.com/aws/aws-sdk-go-v2/config to v1.32.15 @updateclibot[bot] (#8486)
chore(ci): upgrade uv version @updateclibot[bot] (#8478)
fix: update devcontainer updatecli pipeline @olblak (#8475)
deps(golang): update minor dependencies @olblak (#8474)
install Zizmor gha action v0.5.3 @updateclibot[bot] (#8434)
deps(go): bump module github.com/getsops/sops/v3 to v3.12.2 @updateclibot[bot] (#8431)
chore: cleanup updatecli configuration @olblak (#8432)
github action configuration tidy up @olblak (#8433)
deps: Bump Golang version to 1.26.2 @updateclibot[bot] (#8372)
deps(github/action): bump all dependencies @updateclibot[bot] (#8370)
deps(github/action): bump all dependencies @updateclibot[bot] (#8338)

Contributors

@dependabot[bot], @nickzerjeski, @olblak, @updateclibot[bot], dependabot[bot], updateclibot[bot] and updatecli

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

v0.116.1

Sun, 12 Apr 2026 18:04:07 +0000

(github-actions[bot]) released this 2026-04-12 18:04:07 +0000 UTC - v0.116.1

Description

Changes

🧰 Bug

fix(pyproject): use uv lock instead of uv add to preserve pyproject.toml#8340 @loispostula (#8340)

🧰 Maintenance

deps(go): bump module github.com/aws/aws-sdk-go-v2 to v1.41.5 @updateclibot[bot] (#8331)
deps(go): bump module helm.sh/helm/v3 to v3.20.2 @updateclibot[bot] (#8336)
deps(go): bump module code.gitea.io/sdk/gitea to v0.24.1 @updateclibot[bot] (#8317)
deps(go): bump module github.com/go-git/go-git/v5 to v5.17.2 @updateclibot[bot] (#8329)
Update Bluesky username in goreleaser configuration @olblak

Contributors

@loispostula, @olblak @updateclibot[bot] and updateclibot[bot]

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

v0.116.0

Fri, 10 Apr 2026 09:35:35 +0000

(github-actions[bot]) released this 2026-04-10 09:35:35 +0000 UTC - v0.116.0

Description

Changes

🚀 Features

feat: source caching @loispostula (#8291)
feat: golang module support pseudo version @olblak (#8293)
feat(github): add client-side pull request merge option @LeC-D (#8204)
feat: add PyPI resource and pyproject autodiscovery plugins @loispostula (#8155)
feat(telemetry): add OpenTelemetry tracing for pipeline execution @loispostula (#8055)
feat: allow to filter compose policies based on policy id @olblak (#8246)
feat(version): add pep440 version kind @loispostula (#8245)

🐛 Bug Fixes

fix(yaml): compare decoded scalar values to avoid rewriting folded blocks @loispostula (#8296)
fix(github): nil-check token source to avoid panic when no token configured @loispostula (#8298)

🧰 Maintenance

install Zizmor gha action v0.5.2 @updateclibot[bot] (#8294)
deps(github/action): bump all dependencies @updateclibot[bot] (#8206)
deps(updatecli/policies): bump all policies @updateclibot[bot] (#8205)
deps(updatecli/policies): bump all policies @updateclibot[bot] (#8179)

Contributors

@LeC-D, @loispostula, @olblak, @updateclibot[bot] and updateclibot[bot]

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.

v0.115.0

Wed, 25 Mar 2026 20:46:12 +0000

(github-actions[bot]) released this 2026-03-25 20:46:12 +0000 UTC - v0.115.0

Description

Changes

🚀 Features

feat(compose): add include parameter to compose file @olblak (#8120)
feat(autodiscovery): by default enable gha digest @olblak (#8074)
fix(github): allow GitHub client creation without a token for unauthenticated access @railgun-0402 (#8054)
fix(file): don't output binary file content @AdeshDeshmukh (#7874)
feat(flux): support multiple yaml documents @olblak (#8056)
Dockerfile: Add ability to leave unset or empty value alone @Vlatombe (#7870)
feat(compose): support inline values @olblak (#7868)
feat(autodiscovery): align matching rule validation across all plugins @railgun-0402 (#7867)
feat(tmp): add --unique-tmp-dir flag to support parallel execution @railgun-0402 (#7864)
feat(scm): add gitlabsearch SCM plugin @railgun-0402 (#7843)

🐛 Bug Fixes

fix(json): disable HTML escaping when writing JSON files @loispostula (#8090)
When the Adoptium API advertises a MostRecentFeatureRelease (e.g. 26) @loispostula (#8075)
fix(gitlabsearch): add missing depth parameter @olblak (#7934)
fix(githubsearch): add missing depth parameter support @olblak (#7933)
fix(helm): Remove validation check for helm chart name @varad-kadam (#7873)
fix(dockercompose): add compose*.y*ml to defaultFilePattern @qianlongzt (#7845)
fix(autodiscovery/argocd): correctly handle multiple documents @olblak (#7848)
fix(autodiscovery/kubernetes): handle multiple yaml document @olblak (#7846)

🧰 Maintenance

chore: update typos action to version v1.44.0 @olblak (#8108)
chore: improve various gha pipeline @olblak (#8076)
deps(go): bump module helm.sh/helm/v3 to v3.20.1 @updateclibot[bot] (#8079)
refactor(httpclient): centralize HTTP client creation and harden transport @loispostula (#8072)
deps(go): bump module github.com/fluxcd/source-controller/api to v1.8.1 @updateclibot[bot] (#8068)
chore(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 in the go_modules group across 1 directory @dependabot[bot] (#8070)
chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in the go_modules group across 1 directory @dependabot[bot] (#8036)
deps: Bump Golang version to 1.26.1 @updateclibot[bot] (#8002)
deps(go): bump module github.com/fluxcd/helm-controller/api to v1.5.2 @updateclibot[bot] (#7988)
install Zizmor gha action v0.5.2 @updateclibot[bot] (#7986)
deps(go): bump module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.289.1 @updateclibot[bot] (#7976)
deps(go): bump module github.com/getsops/sops/v3 to v3.12.1 @updateclibot[bot] (#7963)
deps(go): bump module github.com/aws/aws-sdk-go-v2/config to v1.32.11 @updateclibot[bot] (#7956)
chore(dockerfile): upgrade node version @updateclibot[bot] (#7819)
vi : github action workflow typo @olblak (#7876)
deps: Bump updatecli version @olblak (#7875)
chore(deps): bump github.com/docker/cli from 28.5.0+incompatible to 29.2.0+incompatible in the go_modules group across 1 directory @dependabot[bot] (#7869)
Add GitHub Actions workflow for zizmor security analysis @olblak (#7865)
deps(go): bump module github.com/aws/smithy-go to v1.24.2 @updateclibot[bot] (#7858)
deps(go): bump module github.com/fluxcd/source-controller/api to v1.8.0 @updateclibot[bot] (#7850)
deps(go): bump module golang.org/x/net to v0.51.0 @updateclibot[bot] (#7857)
deps(go): bump module gitlab.com/gitlab-org/api/client-go to v1.45.0 @updateclibot[bot] (#7854)
deps(go): bump module github.com/go-git/go-git/v5 to v5.17.0 @updateclibot[bot] (#7852)
deps(go): bump module github.com/drone/go-scm to v1.42.0 @updateclibot[bot] (#7823)
chore(deps): bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0 in the go_modules group across 1 directory @dependabot[bot] (#7847)
chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in the go_modules group across 1 directory @dependabot[bot] (#7842)
deps(go): bump module github.com/zclconf/go-cty to v1.18.0 @updateclibot[bot] (#7830)
deps(go): bump module github.com/aws/smithy-go to v1.24.1 @updateclibot[bot] (#7832)

📝 Documentation

Update sponsorship section in release-drafter.yaml @olblak (#8121)

Contributors

@AdeshDeshmukh, @Vlatombe, @dependabot[bot], @loispostula, @olblak, @qianlongzt, @railgun-0402, @updateclibot[bot], @varad-kadam, dependabot[bot] and updateclibot[bot]

Sponsors

If Updatecli is useful to you, please consider sponsoring it.
Your support helps maintain and improve this project.