Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps taskcluster from 88.0.2 to 90.0.5.

Release notes

Sourced from taskcluster's releases.

v90.0.5

GENERAL

▶ [patch] Upgrades to Node.js v22.20.0, go1.25.2 [SECURITY], yarn 4.10.3, and golangci-lint 4.5.0.

USERS

▶ [patch] #8004 D2G: always pulls named docker images to fetch latest tag.

Automated Package Updates

  • build(deps): bump taskcluster from 88.0.5 to 90.0.4 in /taskcluster (ef55684a67)
  • build(deps): bump taskcluster-taskgraph in /taskcluster (e77e96731f)
  • build(deps): bump the client-rust-deps group (ef66adc8d6)
  • build(deps): bump pyyaml in /taskcluster in the python-deps group (e107bc2cd5)
  • build(deps): bump the go-deps group with 9 updates (a42d2e1b63)
  • build(deps-dev): bump the client-web-node-deps group (a800bf4397)
  • build(deps): bump the client-node-deps group (d828bb8ffd)
  • build(deps): bump actions/checkout from 4 to 5 (0a6c085f71)
  • build(deps): bump actions/setup-go from 5 to 6 (5b7aa019ff)

v90.0.4

USERS

▶ [patch] bug 1990389 D2G: add stderr logging if any docker commands fail within the task feature.

▶ [patch] #7974 D2G: fixes docker: invalid env file (env.list): bufio.Scanner: token too long error when providing the docker run command an --env-file that contains a line longer than 64KiB. D2G now passes the variable directly to the run command with -e <envVarName>=<envVarValue> to work around this constraint.

▶ [patch] D2G: removes exit codes 125, 128 from payload.onExitStatus.retry array, as docker pulls now happen outside of the payload being run (inside the D2G task feature startup).

v90.0.3

USERS

▶ [patch] #7969 D2G: fixes issue with loading the docker image artifact if the image already exists with a separate ID, causing the following output to be improperly parsed by D2G: The image <imageName> already exists, renaming the old one with ID <sha> to empty string.

v90.0.2

USERS

▶ [patch] #7967

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v90.0.5

GENERAL

▶ [patch] Upgrades to Node.js v22.20.0, go1.25.2 [SECURITY], yarn 4.10.3, and golangci-lint 4.5.0.

USERS

▶ [patch] #8004 D2G: always pulls named docker images to fetch latest tag.

Automated Package Updates

  • build(deps): bump taskcluster from 88.0.5 to 90.0.4 in /taskcluster (ef55684a67)
  • build(deps): bump taskcluster-taskgraph in /taskcluster (e77e96731f)
  • build(deps): bump the client-rust-deps group (ef66adc8d6)
  • build(deps): bump pyyaml in /taskcluster in the python-deps group (e107bc2cd5)
  • build(deps): bump the go-deps group with 9 updates (a42d2e1b63)
  • build(deps-dev): bump the client-web-node-deps group (a800bf4397)
  • build(deps): bump the client-node-deps group (d828bb8ffd)
  • build(deps): bump actions/checkout from 4 to 5 (0a6c085f71)
  • build(deps): bump actions/setup-go from 5 to 6 (5b7aa019ff)

v90.0.4

USERS

▶ [patch] bug 1990389 D2G: add stderr logging if any docker commands fail within the task feature.

▶ [patch] #7974 D2G: fixes docker: invalid env file (env.list): bufio.Scanner: token too long error when providing the docker run command an --env-file that contains a line longer than 64KiB. D2G now passes the variable directly to the run command with -e <envVarName>=<envVarValue> to work around this constraint.

▶ [patch] D2G: removes exit codes 125, 128 from payload.onExitStatus.retry array, as docker pulls now happen outside of the payload being run (inside the D2G task feature startup).

v90.0.3

USERS

▶ [patch] #7969 D2G: fixes issue with loading the docker image artifact if the image already exists with a separate ID, causing the following output to be improperly parsed by D2G: The image <imageName> already exists, renaming the old one with ID <sha> to empty string.

v90.0.2

... (truncated)

Commits
  • 6c7a9f0 v90.0.5
  • 92139f9 Merge pull request #8006 from taskcluster/matt-boris/d2gBypassImageCacheForNa...
  • e733492 Merge pull request #8007 from taskcluster/matt-boris/node22.20.0go1.25.2
  • f32cbfc fix(tests): remove root cert that's no longer available
  • 62ac28c build(deps): upgrade to node 22.20.0 and go1.25.2 [SECURITY]
  • 4af811b fix(d2g): always pull named docker images
  • beb8e07 Merge pull request #7987 from taskcluster/dependabot/npm_and_yarn/clients/cli...
  • 052c6d5 Merge pull request #7985 from taskcluster/dependabot/npm_and_yarn/clients/cli...
  • b35a625 Merge pull request #7993 from taskcluster/dependabot/pip/taskcluster/taskclus...
  • 445bc53 Merge pull request #7989 from taskcluster/dependabot/go_modules/go-deps-c1635...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [taskcluster](https://github.com/taskcluster/taskcluster) from 88.0.2 to 90.0.5.
- [Release notes](https://github.com/taskcluster/taskcluster/releases)
- [Changelog](https://github.com/taskcluster/taskcluster/blob/main/CHANGELOG.md)
- [Commits](taskcluster/taskcluster@v88.0.2...v90.0.5)

---
updated-dependencies:
- dependency-name: taskcluster
  dependency-version: 90.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 20, 2025

Superseded by #2821.

@dependabot dependabot bot closed this Oct 20, 2025
@dependabot dependabot bot deleted the dependabot/pip/tools/taskcluster-90.0.5 branch October 20, 2025 15:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

tools Common Python tools

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant