[dependabot]

Bumps the go-dependencies group with 3 updates in the / directory: github.com/compose-spec/compose-go/v2, go.yaml.in/yaml/v4 and golang.org/x/term.

Updates github.com/compose-spec/compose-go/v2 from 2.14.0 to 2.16.2

Release notes

Sourced from github.com/compose-spec/compose-go/v2's releases.

v2.16.2

What's Changed

• types: resolve the environment of pre_start hooks by @​ndeloof in compose-spec/compose-go#938
• types: resolve the labels of pre_start hooks by @​glours in compose-spec/compose-go#939
• chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @​dependabot[bot] in compose-spec/compose-go#941
• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @​dependabot[bot] in compose-spec/compose-go#940
• types: add use_service_name_alias to service networks by @​glours in compose-spec/compose-go#943
• feat: add the umask service attribute by @​ndeloof in compose-spec/compose-go#942

Full Changelog: compose-spec/compose-go@v2.16.1...v2.16.2

v2.16.1

What's Changed

• override: fix two merge regressions introduced in v2.15.0 by @​glours in compose-spec/compose-go#937

Full Changelog: compose-spec/compose-go@v2.16.0...v2.16.1

v2.16.0

⚠️ Breaking change (Go API)

types.ServiceConfig now embeds types.ContainerSpec and types.WorkloadSpec, shared with the new jobs element and pre_start init containers. Field access is unchanged (svc.Image), but struct literals must now set moved fields through the embedded structs, and code walking ServiceConfig with reflection will see these two embedded structs instead of a flat list of fields:

types.ServiceConfig{Name: "web", ContainerSpec: types.ContainerSpec{Image: "nginx"}}

ServiceConfig.PreStart is now a []types.PreStartHook (was []types.ServiceHook), which embeds a full ContainerSpec; Image and PerReplica are no longer fields of ServiceHook.

The order of keys in the YAML and JSON produced for a service also changes (service-level keys first, then container-level, then workload-level ones). The content is the same, but expected files compared as text need to be regenerated.

What's Changed

• loader: detect unsupported compose-file attributes by @​glours in compose-spec/compose-go#927
• fix(transform): honor ignoreParseError in ssh and ulimits parsers by @​glours in compose-spec/compose-go#928
• Jobs by @​ndeloof in compose-spec/compose-go#866
• fix: type=image volume source is always a docker image reference by @​ndeloof in compose-spec/compose-go#929
• fix: an explicit working dir must survive a remote resource loader by @​ndeloof in compose-spec/compose-go#930
• fix: reject non-mapping entries under networks and models by @​glours in compose-spec/compose-go#932
• fix: allow disabled services as build additional contexts by @​Shubham-Padkonde in compose-spec/compose-go#931
• loader: promote x-* extensions adopted by the specification by @​ndeloof in compose-spec/compose-go#935

New Contributors

• @​Shubham-Padkonde made their first contribution in compose-spec/compose-go#931

Full Changelog: compose-spec/compose-go@v2.15.0...v2.16.0

v2.15.0

What's Changed

• Bump actions/stale from 10.4.0 to 11.0.0 by @​dependabot[bot] in compose-spec/compose-go#905

... (truncated)

Commits

• ddbe099 feat: add the umask service attribute
• 5515644 types: add ServiceNameAliasEnabled helper on ServiceNetworkConfig
• 3aaa230 types: add use_service_name_alias to service networks
• 79c7069 chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2
• 08a1af1 chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2
• bd828ea types: resolve the labels of pre_start hooks
• c53b350 types: resolve the environment of pre_start hooks
• 32d8d5d override: share the by-key compaction and reject null ipam config items
• 7ed4d72 override: pin the merge of KEY=VALUE entries that are not interpolated
• be0aa2f override: compact repeated keys and keep empty lists in KEY=VALUE merge
• Additional commits viewable in compare view

Updates go.yaml.in/yaml/v4 from 4.0.0-rc.6 to 4.0.0

Release notes

Sourced from go.yaml.in/yaml/v4's releases.

go-yaml v4.0.0

go-yaml v4.0.0 is the first stable release of the v4 series, maintained by the YAML organization. It adds configurable loading and dumping, public plugin interfaces, structured errors, and a CLI for inspecting YAML processing. The classic APIs remain supported, so applications can adopt v4 incrementally.

Getting started

Install the release:

go get go.yaml.in/yaml/v4@v4.0.0

Use this import path in your Go code:

import "go.yaml.in/yaml/v4"

For an existing v3 application, start by updating imports, reviewing custom unmarshalers, and running your tests. You can continue using Unmarshal, Marshal, NewDecoder, and NewEncoder. The v2 and v3 APIs remain frozen, with security fixes only; new features and routine bug fixes are developed in v4.

Why add Load and Dump?

Applications need different YAML policies: strict configuration validation, particular output layouts, or custom anchor handling. The new Load and Dump functions and streaming Loader and Dumper accept functional options and plugins for those choices. They use YAML's load/dump terminology and are recommended for new code.

The classic entry points keep compatibility settings rather than changing formatting and error presentation for every existing caller. Moving to the new API is an explicit choice to use v4 defaults, with presets available when you want older settings. Classic APIs remain supported.

For example, load a configuration with strict field checking, then choose its output indentation:

package main
import (
"fmt"
</tr></table>

... (truncated)

Commits

• f2f9563 Add a target for GitHub release drafts
• f154859 Add release notes for go-yaml v4.0.0
• dcd0fa5 Prepare documentation for the v4 release
• abc9fb0 Remove deprecated Limit plugin API
• 3fefab0 Compare YTS JSON numbers as float64
• 2141fcc Restore default limits for Node.Decode
• 57eefb4 Document legacy encoder indentation behavior
• 2dc529e Restore dead-code elimination in error formatting
• 2ac821e Bump the actions group with 3 updates
• 24e7908 Fix Alias-Data review findings
• Additional commits viewable in compare view

Updates golang.org/x/term from 0.45.0 to 0.47.0

Commits

• 0851034 go.mod: update golang.org/x dependencies
• 6226200 go.mod: update golang.org/x dependencies
• 7c2fb74 term: process bytes returned with a read error
• 3963fce all: upgrade go directive to at least 1.26.0 [generated]
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions