Bump taskcluster from 88.0.2 to 90.0.5

[dependabot]

Bumps taskcluster from 88.0.2 to 90.0.5.

Release notes

Sourced from taskcluster's releases.

v90.0.5

GENERAL

▶ [patch] Upgrades to Node.js v22.20.0, go1.25.2 [SECURITY], yarn 4.10.3, and golangci-lint 4.5.0.

USERS

▶ [patch] #8004 D2G: always pulls named docker images to fetch latest tag.

Automated Package Updates

• build(deps): bump taskcluster from 88.0.5 to 90.0.4 in /taskcluster (ef55684a67)
• build(deps): bump taskcluster-taskgraph in /taskcluster (e77e96731f)
• build(deps): bump the client-rust-deps group (ef66adc8d6)
• build(deps): bump pyyaml in /taskcluster in the python-deps group (e107bc2cd5)
• build(deps): bump the go-deps group with 9 updates (a42d2e1b63)
• build(deps-dev): bump the client-web-node-deps group (a800bf4397)
• build(deps): bump the client-node-deps group (d828bb8ffd)
• build(deps): bump actions/checkout from 4 to 5 (0a6c085f71)
• build(deps): bump actions/setup-go from 5 to 6 (5b7aa019ff)

v90.0.4

USERS

▶ [patch] bug 1990389 D2G: add stderr logging if any docker commands fail within the task feature.

▶ [patch] #7974 D2G: fixes docker: invalid env file (env.list): bufio.Scanner: token too long error when providing the docker run command an --env-file that contains a line longer than 64KiB. D2G now passes the variable directly to the run command with -e <envVarName>=<envVarValue> to work around this constraint.

▶ [patch] D2G: removes exit codes 125, 128 from payload.onExitStatus.retry array, as docker pulls now happen outside of the payload being run (inside the D2G task feature startup).

v90.0.3

USERS

▶ [patch] #7969 D2G: fixes issue with loading the docker image artifact if the image already exists with a separate ID, causing the following output to be improperly parsed by D2G: The image <imageName> already exists, renaming the old one with ID <sha> to empty string.

v90.0.2

USERS

▶ [patch] #7967

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v90.0.5

GENERAL

▶ [patch] Upgrades to Node.js v22.20.0, go1.25.2 [SECURITY], yarn 4.10.3, and golangci-lint 4.5.0.

USERS

▶ [patch] #8004 D2G: always pulls named docker images to fetch latest tag.

Automated Package Updates

• build(deps): bump taskcluster from 88.0.5 to 90.0.4 in /taskcluster (ef55684a67)
• build(deps): bump taskcluster-taskgraph in /taskcluster (e77e96731f)
• build(deps): bump the client-rust-deps group (ef66adc8d6)
• build(deps): bump pyyaml in /taskcluster in the python-deps group (e107bc2cd5)
• build(deps): bump the go-deps group with 9 updates (a42d2e1b63)
• build(deps-dev): bump the client-web-node-deps group (a800bf4397)
• build(deps): bump the client-node-deps group (d828bb8ffd)
• build(deps): bump actions/checkout from 4 to 5 (0a6c085f71)
• build(deps): bump actions/setup-go from 5 to 6 (5b7aa019ff)

v90.0.4

USERS

▶ [patch] bug 1990389 D2G: add stderr logging if any docker commands fail within the task feature.

▶ [patch] #7974 D2G: fixes docker: invalid env file (env.list): bufio.Scanner: token too long error when providing the docker run command an --env-file that contains a line longer than 64KiB. D2G now passes the variable directly to the run command with -e <envVarName>=<envVarValue> to work around this constraint.

▶ [patch] D2G: removes exit codes 125, 128 from payload.onExitStatus.retry array, as docker pulls now happen outside of the payload being run (inside the D2G task feature startup).

v90.0.3

USERS

▶ [patch] #7969 D2G: fixes issue with loading the docker image artifact if the image already exists with a separate ID, causing the following output to be improperly parsed by D2G: The image <imageName> already exists, renaming the old one with ID <sha> to empty string.

v90.0.2

... (truncated)

Commits

• 6c7a9f0 v90.0.5
• 92139f9 Merge pull request #8006 from taskcluster/matt-boris/d2gBypassImageCacheForNa...
• e733492 Merge pull request #8007 from taskcluster/matt-boris/node22.20.0go1.25.2
• f32cbfc fix(tests): remove root cert that's no longer available
• 62ac28c build(deps): upgrade to node 22.20.0 and go1.25.2 [SECURITY]
• 4af811b fix(d2g): always pull named docker images
• beb8e07 Merge pull request #7987 from taskcluster/dependabot/npm_and_yarn/clients/cli...
• 052c6d5 Merge pull request #7985 from taskcluster/dependabot/npm_and_yarn/clients/cli...
• b35a625 Merge pull request #7993 from taskcluster/dependabot/pip/taskcluster/taskclus...
• 445bc53 Merge pull request #7989 from taskcluster/dependabot/go_modules/go-deps-c1635...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #484.