[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/alitto/pond/v2	v2.7.2 → v2.7.3
github.com/gabriel-vasile/mimetype	v1.4.15 → v1.4.16
github.com/go-jose/go-jose/v4	v4.1.5 → v4.1.6
github.com/theopenlane/riverboat	v0.14.6 → v0.14.7

---

Release Notes

alitto/pond (github.com/alitto/pond/v2)

v2.7.3

Compare Source

What's Changed

• fix(pool): recover subpool workers after runtime.Goexit by @​zhechen-cs in #​148
• fix(pool): synchronize waiting task count snapshots by @​zhechen-cs in #​149

New Contributors

• @​zhechen-cs made their first contribution in #​148

Full Changelog: alitto/pond@v2.7.2...v2.7.3

gabriel-vasile/mimetype (github.com/gabriel-vasile/mimetype)

v1.4.16: improve CDF detection

Compare Source

What's Changed

• readme: add badge for tests passing by @​gabriel-vasile in #​835
• all: refactor to remove duplicated functions by @​gabriel-vasile in #​834
• cdf: traverse tree instead of linear when inspecting cdf directories by @​gabriel-vasile in #​837
• go.mod: updagrade go version by @​gabriel-vasile in #​842
• actions: update versions by @​gabriel-vasile in #​843
• Detect MP3s whose ID3v2 tag is larger than 10MB by @​AshSgDe29071999 in #​840
• Add an example for storing MIME types in configuration by @​Sinkleberg in #​849

New Contributors

• @​AshSgDe29071999 made their first contribution in #​840
• @​Sinkleberg made their first contribution in #​849

Full Changelog: gabriel-vasile/mimetype@v1.4.15...v1.4.16

go-jose/go-jose (github.com/go-jose/go-jose/v4)

v4.1.6

Compare Source

Fixed Security Issues

This release contains a fix for GHSA-mgcc-cww5-fp2q

Breaking Changes

The fix for GHSA-mgcc-cww5-fp2q involves capping the size of the RSA modulus of keys accepted by JWK parsing. This limit is 4096 bits. If you need this to be higher, set MaxRSAModulusBits before performing any JWK parsing.

Changed

• Reject mismatched JWE CEK lengths by @​akshithg in #​266
• Add a tests containerfile and threat model by @​mcpherrinm in #​300
• Fix error message for future issued tokens by @​inahga in #​303

Full Changelog: go-jose/go-jose@v4.1.5...v4.1.6

theopenlane/riverboat (github.com/theopenlane/riverboat)

v0.14.7

Compare Source

What's Changed

Other Changes

• Bump corejobs to 0.3.4 by @​adelowo in #​328

Full Changelog: theopenlane/riverboat@v0.14.6...v0.14.7

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 11 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
github.com/cloudflare/cloudflare-go/v7	v7.11.0 -> v7.13.0
github.com/riverqueue/river	v0.47.0 -> v0.49.0
github.com/riverqueue/river/riverdriver/riverpgxv5	v0.47.0 -> v0.49.0
github.com/riverqueue/river/rivertype	v0.47.0 -> v0.49.0
github.com/hhrutter/tiff	v1.0.6 -> v1.0.7
github.com/jackc/puddle/v2	v2.2.2 -> v2.2.3
github.com/mattn/go-runewidth	v0.0.28 -> v0.0.31
github.com/riverqueue/river/riverdriver	v0.47.0 -> v0.49.0
github.com/riverqueue/river/rivershared	v0.47.0 -> v0.49.0
github.com/tidwall/gjson	v1.19.0 -> v1.20.0
golang.org/x/image	v0.45.0 -> v0.47.0