[crossplane-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
charm.land/lipgloss/v2	v2.0.6 → v2.1.0
github.com/getkin/kin-openapi	v0.152.0 → v0.153.0
github.com/kubernetes-sigs/kro	v0.9.4 → v0.10.0
github.com/moby/moby/api	v1.56.1 → v1.57.0
github.com/moby/moby/client	v0.6.2 → v0.6.3
golang.org/x/mod	v0.42.0 → v0.43.0
golang.org/x/sync	v0.24.0 → v0.25.0
golang.org/x/sys	v0.49.0 → v0.50.0
golang.org/x/text	v0.43.0 → v0.44.0

---

Release Notes

charmbracelet/lipgloss (charm.land/lipgloss/v2)

v2.1.0

Compare Source

New table parameter and many fixes

Hi all! This release gives tables a new feature. They can now size themselves to their content and still respect a maximum width. It also comes with a big batch of fixes, many of them from first-time contributors. Let's go!

Fit Content on tables

Until now, setting Width on a table meant it would always stretch to fill that width, even if it only had three short words in it. Now there's FitContent():

t := table.
	Width(72).
    FitContent().
    Headers("LANGUAGE", "FORMAL", "INFORMAL").
    Rows(rows...)

With FitContent, the table renders at the width its content actually needs. Width becomes a ceiling, if the content is wider than that, the table is held to the maximum and wraps like before.

Perfect for sidebars, popups, and anywhere a table shouldn't go far. Thanks, @​pete-woods!

Darker Darks, Lighter Lights

Lip Gloss now decides whether a color is dark using CIELAB lightness instead of HSL. In simple words, it now judges dark and light the way your eyes do, so saturated blues and purples are no longer mistaken for light colors. LightDark and friends will pick the right side more often. Thanks, @​janearc!

Full-Fidelity RGB

RGBColor channels are now 16 bits, so colors survive the round trip through color.Color without losing precision. Thanks, @​MokiMeow!

Faster Wrapping

Wrap now sizes its buffer up front and copies bytes in runs instead of one at a time. Thanks, @​taciturnaxolotl!

That's all for now,
Charm XX 💫

Changelog

New!

• 6a419c6: feat: add FitContent property to table renderer (#​697) (@​pete-woods)

Fixed

• e3f0511: fix(color): expand RGBColor channels to 16 bits (#​757) (@​MokiMeow)
• 092b7f4: fix(compat): honor NO_COLOR in init-time background query (#​692) (@​jadb)
• 19f011f: fix(luminance): detect dark colors by Lab, not HSL (#​752) (@​janearc)
• 8c6bfaf: fix(table): prevent panic when YOffset is set to a negative value (#​727) (@​bunlongheng)
• 03215bc: fix(tree): handle nil values (#​738) (@​Charlie-Wang-03)
• 4da0bdd: fix(tree): stop swapping Offset start and end (#​676) (@​c-tonneslan)
• 2a70d4e: fix: alphabet enumerator producing non-letters for large lists (#​715) (@​winklemad)
• ce49a2a: fix: don't mangle embedded ANSI when styling spaces (#​708) (@​larrasket)
• 0599726: fix: infinite loop with zero-width characters (#​670) (@​Spuxy)
• 4b8c667: fix: store bool props in a 64-bit field (#​732) (@​QuentinouLeTwist)
• 3ab3b5f: fix: terminate margin background on each line (#​711) (@​c-tonneslan)
• 0f0a984: fix: unset underline style rule (#​686) (@​abnormal749)

Other stuff

• 6860635: Fix order of calling w.Close in Wrap (#​689) (@​neomantra)
• 4a8c4de: Inline: replace newlines with a space, not empty string (#​665) (@​MukundaKatta)
• 77047a8: ci: sync dependabot config (#​728) (@​charmcli)
• c7d9f35: perf(wrap): forward bytes in runs instead of one at a time (@​taciturnaxolotl)
• 868e8b5: perf(wrap): size the buffer in Wrap up front (@​taciturnaxolotl)
• ff16a4e: v2.1.0 (@​andrinoff)

---

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

getkin/kin-openapi (github.com/getkin/kin-openapi)

v0.153.0

Compare Source

What's Changed

• Add fuzz targets by @​fenollp in #​1373
• openapi3: set the failing schema on JSON Schema 2020-12 validation errors by @​frodeaa in #​1378
• openapi3filter: parse number values as decimal only by @​LuisFigueroaG in #​1366
• Seed fuzzing using APIs-guru corpus, covering the YAML path + fix some crashes by @​fenollp in #​1380
• openapi3filter: decode query, path, header and cookie params with typeless const/enum schemas by @​Yi-111-a in #​1368
• openapi2conv: handle some nil derefs by @​reuvenharrison in #​1384
• ci: a minimize budget the minimizer can finish in by @​reuvenharrison in #​1385
• openapi3: return a typed error for a disallowed external $ref by @​reuvenharrison in #​1370
• openapi3: reject a multipleOf of zero or less in Schema.Validate by @​LuisFigueroaG in #​1379
• openapi3filter: treat a handler that writes no status as a 200 in Validator.Middleware by @​LuisFigueroaG in #​1389
• deps: update oasdiff/yaml to v0.1.3 by @​reuvenharrison in #​1387
• openapi3: validate the pattern of a schema without type in Schema.Validate by @​LuisFigueroaG in #​1398
• openapi3: set maxLength in Schema.WithMaxLengthDecodedBase64 by @​LuisFigueroaG in #​1401
• openapi2conv: FromV3 no longer turns a binary header into a form field by @​fenollp in #​1403
• openapi3: internalize webhook references by @​KashifManzer in #​1408
• openapi2conv: keep required and format on a converted form field by @​reuvenharrison in #​1405
• openapi2conv: escape a base path converted to a server of its own by @​reuvenharrison in #​1404
• internal: add nodeindex (decoding YAML natively 1/3) by @​reuvenharrison in #​1382
• openapi3: UnmarshalYAML for the types (decoding YAML natively 2/3) by @​reuvenharrison in #​1383
• openapi3: keep component content when internalizing a ref to a file by @​akasakariko in #​1409
• Fuzzing harder by @​fenollp in #​1411
• openapi3filter: test deepObject array index limits by @​connabyss in #​1412
• openapi3: scope whole-file schema fragments to their document by @​Aryangupta-05 in #​1413
• openapi3: compare FuzzLoadFromData's validation errors by message by @​fenollp in #​1417
• openapi3: internalize refs under the 3.1 subschema keywords by @​fenollp in #​1418
• openapi3: an extension next to a $ref reaches the schema it resolves to by @​reuvenharrison in #​1400
• openapi3: DefaultRefNameResolver stops stripping extensions at the last dot by @​Yi-111-a in #​1419
• openapi3: isolate reference sibling constraints by @​subotac in #​1406
• openapi3: reject impossible days and offsets in the date and date-time formats by @​LuisFigueroaG in #​1407
• openapi3: stop InternalizeRefs prefix trimming at the filesystem root by @​Yi-111-a in #​1421
• openapi3: resolve refs under a header's content by @​JayOfTheKeyboard in #​1424
• openapi3filter: reject an empty query value instead of filling in the default by @​fyousfi-ionos in #​1427
• openapi3: reuse root components when internalizing refs by @​ZXLyyds100 in #​1425
• openapi3filter: read OpenAPI 3.1 contentMediaType data without a registered decoder by @​nk-batman21 in #​1388
• openapi3: validate the callbacks of an operation by @​fenollp in #​1429
• fuzzing: add ./fetch-fuzz-crashers.sh [--days N] by @​fenollp in #​1428
• openapi3: internalize the refs next to a $ref in OpenAPI 3.1 by @​fenollp in #​1430
• openapi3: internalize the examples of parameters and headers by @​fenollp in #​1431
• openapi2, openapi3: skip the json decode when data cannot be json, wrap both errors by @​fenollp in #​1432
• openapi3: switch the loader to the native decode (decoding YAML natively 3/3) by @​reuvenharrison in #​1238
• openapi3: cut the cost of building the types from the nodes by @​reuvenharrison in #​1433

New Contributors

• @​frodeaa made their first contribution in #​1378
• @​KashifManzer made their first contribution in #​1408
• @​akasakariko made their first contribution in #​1409
• @​connabyss made their first contribution in #​1412
• @​Aryangupta-05 made their first contribution in #​1413
• @​subotac made their first contribution in #​1406
• @​JayOfTheKeyboard made their first contribution in #​1424
• @​fyousfi-ionos made their first contribution in #​1427
• @​ZXLyyds100 made their first contribution in #​1425
• @​nk-batman21 made their first contribution in #​1388

Full Changelog: getkin/kin-openapi@v0.152.0...v0.153.0

kubernetes-sigs/kro (github.com/kubernetes-sigs/kro)

v0.10.0

Compare Source

What's Changed

• RGD on Graph — unifying the composition engine (Implementation of KREP-024) by @​jakobmoellerdev in #​1355
• fix(graphengine): type dynamic-GVK collections as list(dyn), not any by @​cheeseandcereal in #​1414
• fix(graphengine): fail closed on malformed external-collection selectors by @​cheeseandcereal in #​1405
• fix(graphengine): report patch field conflicts as FieldManagerConflict; reject readyWhen on patch nodes by @​cheeseandcereal in #​1415
• feat: add plural form next to shortnames and categories as override option by @​Skarlso in #​1417
• Let new resource kinds work without restarting kro by @​cheeseandcereal in #​1424
• Retry collection member updates after transient API rejections by @​cheeseandcereal in #​1425
• Preserve CEL timestamp typing when publishing RGD schema values by @​cheeseandcereal in #​1427
• chore(fix): encode long instance-names and refactor node-id hashing by @​Skarlso in #​1392
• Keep conditional RGD children while their inputs are unready by @​cheeseandcereal in #​1426
• Keep inventory projection from suppressing wanted children by @​cheeseandcereal in #​1431
• docs: document the Graph API and restructure concepts for v0.10.0 by @​cheeseandcereal in #​1402
• Reject schema-only RGD duplicate identities before adopting objects by @​cheeseandcereal in #​1428
• chore: remove always true boolean value check by @​Skarlso in #​1438
• fix(graphengine): restore progressive object and array status by @​cheeseandcereal in #​1441
• fix(crd): Fail closed on schema changes by @​tomasaschan in #​1430
• docs: cut v0.10.0-rc.0 without promoting latest by @​cheeseandcereal in #​1443
• chore: fix the codegen checker by @​Skarlso in #​1446
• fix: surface tolerated collection update failed rejections for RGDs by @​NicholasBlaskey in #​1444
• perf(dag): Optimize cycle detection by only searching a subgraph by @​jneisener in #​1449
• feat(crd): Forward comparison options for versions by @​tomasaschan in #​1450
• Handle null feature gates when rendering aggregation RBAC by @​cheeseandcereal in #​1453
• Reject duplicate rendered identities in patch collections by @​cheeseandcereal in #​1454
• test: Guard status schemas for indexed array objects by @​cheeseandcereal in #​1455
• Test that valid author conditions survive sibling errors by @​cheeseandcereal in #​1456
• chore(deps): bump the npm-version-updates group across 2 directories with 10 updates by @​dependabot[bot] in #​1451
• Move environment shutdown guards into the unit-test tree by @​cheeseandcereal in #​1457
• chore(docs): add example for checksum/config annotation for auto restarting after configmap changes by @​FalcoSuessgott in #​1452
• docs: improve example for stable ordering on lists built from maps by @​omus in #​1439
• fix(graphengine): error on includeWhen that can never resolve by @​michaelhtm in #​1448
• KREP-009: Versioning support in kro by @​jakobmoellerdev in #​1461
• feat: make the watch cache-sync timeout configurable by @​NicholasBlaskey in #​1463
• Remove stale instance status fields after upgrading kro by @​cheeseandcereal in #​1458
• Prune completed instance templates while another resource is unresolved by @​cheeseandcereal in #​1460
• chore: add cheeseandcereal, NicholasBlaskey, Skarlso to kro-reviewers by @​jlbutler in #​1473
• chore(deps): bump the npm-security-updates group across 1 directory with 2 updates by @​dependabot[bot] in #​1433
• chore(deps-dev): bump the npm-version-updates group across 1 directory with 2 updates by @​dependabot[bot] in #​1469
• chore(deps): bump the actions-version-updates group across 1 directory with 2 updates by @​dependabot[bot] in #​1472
• chore(deps): bump the npm-security-updates group across 2 directories with 10 updates by @​dependabot[bot] in #​1478
• chore(deps): bump the npm-version-updates group across 1 directory with 4 updates by @​dependabot[bot] in #​1477
• chore(deps): bump the npm-security-updates group across 1 directory with 3 updates by @​dependabot[bot] in #​1479
• docs: fix broken concepts link in README by @​mohsin0a in #​1485
• chore(deps): bump vscode-languageclient from 10.1.2 to 11.0.0 in /tools/lsp/client by @​dependabot[bot] in #​1483
• Restore optional boolean conditions for RGDs by @​cheeseandcereal in #​1459
• feat: implement deletion policy per resource by @​Skarlso in #​1445
• Fix Graph cleanup after partial apply failures by @​cheeseandcereal in #​1491
• feat(schema): Constrain generated instance names by @​tomasaschan in #​1447
• Keep Graph patch target tracking stable during incomplete apply by @​cheeseandcereal in #​1490
• fix(cli): add --feature-gates flag to the kro CLI by @​kumudhanrajan18 in #​1496
• Nest instance name validation under metadata.validation by @​tomasaschan in #​1500
• chore(deps): refresh/bump dependencies by @​cheeseandcereal in #​1503
• fix(graph): commit watch set on hard apply failure to stop informer churn and hot loop by @​NicholasBlaskey in #​1465
• Fix Graph cleanup when child UIDs are missing by @​cheeseandcereal in #​1492
• chore(deps): bump Go to 1.27.3 by @​cheeseandcereal in #​1505

New Contributors

• @​jneisener made their first contribution in #​1449
• @​FalcoSuessgott made their first contribution in #​1452
• @​mohsin0a made their first contribution in #​1485
• @​kumudhanrajan18 made their first contribution in #​1496

Full Changelog: kubernetes-sigs/kro@v0.9.4...v0.10.0

moby/moby (github.com/moby/moby/api)

v1.57.0

1.57.0

Engine API specification moves to OpenAPI 3.2

[!WARNING]
The Engine API specification now uses OpenAPI 3.2 as its source format, in api/openapi.yaml.
A Swagger 2.0 specification generated from it is still published for existing tooling, in api/swagger.yaml.
For the transition, this release also includes a Swagger 2.0 copy pinned to API v1.57, in api/docs/v1.57-swagger.yaml.
Future API versions won't get a per-version Swagger 2.0 copy, so update tooling that depends on these files to use the OpenAPI 3.2 specifications. moby/moby#53630

Changelog

• GET /events: Container die events now include a restarting attribute, set to "true" when the container is about to restart, either from its restart policy or from a manual restart. moby/moby#50908
  The attribute is omitted when the container won't restart, including during daemon shutdown.
  It announces the restart but doesn't guarantee it, because the restart can still be cancelled or fail.
• Fix the ImageManifestSummary.ImageData schema, which listed UnpackedSize as required even though that field doesn't exist. The unpacked size is reported in Size.Unpacked. moby/moby#53750
• Migrate the Engine API specification from Swagger 2.0 to OpenAPI 3.2. moby/moby#53630

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[crossplane-renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
go.yaml.in/yaml/v4	v4.0.0-rc.6 -> v4.0.0

[crossplane-renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
go: downloading go1.27.0 (linux/amd64)
go: downloading golang.org/x/mod v0.43.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20261104224025-d1e00e9f33ab
go: downloading github.com/kubernetes-sigs/kro v0.10.0
go: downloading k8s.io/utils v0.0.0-20261023123148-ca04ba58ecab
go: downloading github.com/moby/moby/client v0.6.3
go: downloading github.com/moby/moby/api v1.57.0
go: downloading github.com/getkin/kin-openapi v0.153.0
go: downloading charm.land/lipgloss/v2 v2.1.0
go: downloading go.yaml.in/yaml/v2 v2.4.5
go: downloading go.yaml.in/yaml/v3 v3.0.6
go: downloading golang.org/x/term v0.47.0
go: downloading sigs.k8s.io/json v0.0.0-20260909141634-11ed52e25bc5
go: downloading github.com/onsi/ginkgo/v2 v2.34.0
go: downloading github.com/onsi/gomega v1.44.0
go: downloading github.com/go-openapi/swag v0.29.2
go: downloading github.com/fxamacker/cbor/v2 v2.10.0
go: downloading github.com/emicklei/go-restful/v3 v3.14.0
go: downloading github.com/go-openapi/jsonreference v1.0.3
go: downloading golang.org/x/crypto v0.58.0
go: downloading github.com/go-openapi/jsonpointer v1.0.2
go: downloading go.yaml.in/yaml/v4 v4.0.0
go: downloading golang.org/x/time v0.16.0
go: downloading golang.org/x/oauth2 v0.37.0
go: downloading github.com/klauspost/compress v1.20.1
go: downloading github.com/go-openapi/swag/cmdutils v0.29.2
go: downloading github.com/go-openapi/swag/conv v0.29.2
go: downloading github.com/go-openapi/swag/fileutils v0.29.2
go: downloading github.com/go-openapi/swag/jsonutils v0.29.2
go: downloading github.com/go-openapi/swag/loading v0.29.2
go: downloading github.com/go-openapi/swag/mangling v0.29.2
go: downloading github.com/go-openapi/swag/netutils v0.29.2
go: downloading github.com/go-openapi/swag/stringutils v0.29.2
go: downloading github.com/go-openapi/swag/typeutils v0.29.2
go: downloading github.com/go-openapi/swag/yamlutils v0.29.2
go: downloading github.com/go-openapi/testify/v2 v2.8.0
go: downloading github.com/prometheus/client_golang v1.25.0
go: downloading go.opentelemetry.io/otel/sdk v1.45.0
go: downloading go.opentelemetry.io/otel/sdk/metric v1.45.0
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20261104224025-d1e00e9f33ab
go: downloading github.com/prometheus/procfs v0.23.0
go: downloading github.com/prometheus/common v0.73.1
go: downloading golang.org/x/exp v0.0.0-20261014143641-f0251eb4aa3e
go: downloading github.com/go-openapi/testify/enable/yaml/v2 v2.7.0
go: downloading github.com/go-openapi/swag/jsonutils/fixtures_test v0.29.2
go: downloading github.com/mattn/go-colorable v0.1.16
go: downloading github.com/pandatix/go-abnf v0.5.5
go: downloading github.com/go-openapi/swag/pools v0.29.2
go: downloading github.com/google/pprof v0.0.0-20261105003125-4bf881d7fb0b
ERROR: could not determine hash for 'root' in nix/vendor-hashes.nix (restored previous value)

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
ERROR: could not determine hash for 'root' in nix/vendor-hashes.nix (restored previous value)

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
ERROR: could not determine hash for 'root' in nix/vendor-hashes.nix (restored previous value)

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
ERROR: could not determine hash for 'root' in nix/vendor-hashes.nix (restored previous value)

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
ERROR: could not determine hash for 'root' in nix/vendor-hashes.nix (restored previous value)

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
ERROR: could not determine hash for 'root' in nix/vendor-hashes.nix (restored previous value)

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
ERROR: could not determine hash for 'root' in nix/vendor-hashes.nix (restored previous value)

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
ERROR: could not determine hash for 'root' in nix/vendor-hashes.nix (restored previous value)

File name: go.mod

Command failed: crossplane-nix run .#tidy
warning: Git tree '/tmp/renovate/repos/github/crossplane/cli' is dirty
ERROR: could not determine hash for 'root' in nix/vendor-hashes.nix (restored previous value)