Changes

🐛 Bug Fixes

• fix: correct decoding logic for GitLab clientSpec to allow overwriting @hebestreit (#5811)

🧰 Maintenance

• deps: Bump Golang version to 1.24.6 @updateclibot[bot] (#5839)
• deps(github/action): bump all dependencies @updateclibot[bot] (#5843)
• deps(github/action): bump all dependencies @updateclibot[bot] (#5838)
• deps(go): bump module golang.org/x/net to v0.43.0 @updateclibot[bot] (#5832)
• deps(go): bump module golang.org/x/mod to v0.27.0 @updateclibot[bot] (#5823)
• chore: replace archived go module github.com/mitchellh/mapstructure @olblak (#5817)
• deps: bump golangci-lint to v2.3.1 @updateclibot[bot] (#5812)
• deps(go): bump module cuelang.org/go to v0.14.0 @updateclibot[bot] (#5798)

Contributors

@hebestreit, @olblak, @updateclibot[bot] and updateclibot[bot]

Changes

🚀 Features

• feat: support multiple yaml keys for 1 target @pkazi (#5696)
• feat: add Dasel v2 support for the JSON plugin @olblak (#5757)

🐛 Bug Fixes

• fix(actions) ensure HTML of change requests is valid (missing closingtag for img) @dduportal (#5743)
• fix: remove linux/aarch64 from temurin e2e test @olblak (#5698)

🧰 Maintenance

• deps(github/action): bump all dependencies @updateclibot[bot] (#5792)
• deps: bump buildkit && sops version @olblak (#5789)
• deps(go): bump module sigs.k8s.io/yaml to v1.6.0 @updateclibot[bot] (#5782)
• deps(go): bump module github.com/drone/go-scm to v1.40.3 @updateclibot[bot] (#5780)
• deps(go): bump module github.com/tomwright/dasel/v2 to v2.8.1 @updateclibot[bot] (#5769)
• chore(deps): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible @dependabot[bot] (#5752)
• deps(go): bump module github.com/yuin/goldmark to v1.7.13 @updateclibot[bot] (#5734)
• deps(github/action): bump all dependencies @updateclibot[bot] (#5728)
• deps: bump golangci-lint to v2.3.0 @updateclibot[bot] (#5697)
• deps(updatecli/policies): bump all policies @updateclibot[bot] (#5707)
• deps(github/action): bump all dependencies @updateclibot[bot] (#5676)
• deps(go): bump module github.com/drone/go-scm to v1.40.2 @updateclibot[bot] (#5666)
• deps(go): bump module github.com/testcontainers/testcontainers-go to v0.38.0 @updateclibot[bot] (#5665)

Contributors

@dduportal, @dependabot[bot], @olblak, @pkazi, @updateclibot[bot], dependabot[bot] and updateclibot[bot]

Changes

🚀 Features

• feat: Allow to customize temporary working branch created by Updatecli @olblak (#5589)

🐛 Bug Fixes

• fix: avoid loading partial when not needed @olblak (#5618)

🧰 Maintenance

• deps: bump golangci-lint to v2.2.2 @updateclibot[bot] (#5619)
• deps(go): bump module golang.org/x/net to v0.42.0 @updateclibot[bot] (#5617)
• deps(go): bump module golang.org/x/mod to v0.26.0 @updateclibot[bot] (#5593)
• deps(go): bump module golang.org/x/text to v0.27.0 @updateclibot[bot] (#5600)
• deps: Bump Golang version to 1.24.5 @updateclibot[bot] (#5579)
• deps(go): bump module github.com/fluxcd/source-controller/api to v1.6.2 @updateclibot[bot] (#5588)
• deps: bump golangci-lint to v2.2.1 @updateclibot[bot] (#5570)
• deps(go): bump module helm.sh/helm/v3 to v3.18.4 @updateclibot[bot] (#5556)

Contributors

@olblak, @updateclibot[bot] and updateclibot[bot]

Changes

🐛 Bug Fixes

• fix: panic when Updatecli manifests doesn't exist @olblak (#5543)

Contributors

@olblak, @updateclibot[bot] and updateclibot[bot]

Changes

Partial manifest:

Partials manifests are named, reusable fragments of an Updatecli manifest, typically used to define repeatable logic for:

• Scms (e.g., Git repository details)
• Sources (e.g., version checks)
• Conditions
• Targets

These fragments are automatically available to pipelines within the same directory, helping keep your main manifests DRY (Don't Repeat Yourself) and maintainable.

A partial file must have a filename that starts with an underscore (_). Updatecli never loads these as standalone manifest files.

IMPORTANT: Partial files are concatenated into the main manifest during execution. If a --- YAML document separator is present, the partial feature will be disabled, as the resulting content would be treated as multiple separate YAML documents.

Semver Version Filter

When an AND group has one constraint with a prerelease but more than one constraint then prereleases will be included. For example, >1.0.0-beta.1 < 2. In the past this would not have included prereleases because each constraint needed to have a prerelease. Now, only one constraint needs to have a prerelease. Note, this does not carry across OR groups. For example, >1.0.0-beta.1 < 2 || > 3. In this case, prereleases will not be included when evaluating against >3

🚀 Features

• feat: add partial manifest @olblak (#5508)

🐛 Bug Fixes

• fix: Branch reset causes initial Github API commit to be lost @MattiasAng (#5486)
• fix(bitbucket): use body parameter on pull request updates @mcwarman (#5457)

🧰 Maintenance

• refactor(autodiscovery): unify discovery spec & reduce boilerplate code & fix terragrunt missing in jsonschema @qianlongzt
• deps(go): bump module github.com/Masterminds/semver/v3 to v3.4.0 @updateclibot[bot] (#5507)
• deps(go): bump module sigs.k8s.io/yaml to v1.5.0 @updateclibot[bot] (#5485)
• deps(go): bump module helm.sh/helm/v3 to v3.18.3 @updateclibot[bot] (#5460)
• deps(go): bump module cuelang.org/go to v0.13.2 @updateclibot[bot] (#5464)

📝 Documentation

• doc: reformat code comment to improve website visualization @olblak (#5436)

Contributors

@MattiasAng, @mcwarman, @olblak, @qianlongzt, @updateclibot[bot] and updateclibot[bot]

Changes

🚀 Features

• Various feature additions for CUE @refi64 (#5352)
• feat(bitbucket): add support for pull request description merging @mcwarman (#5350)

🐛 Bug Fixes

• fix: fix default argocd autodiscovery action title @olblak (#5419)
• fix(reports): update target description to output correctly in markdown @mcwarman (#5309)
• fix: remove duplicate generate schema @qianlongzt (#5299)

🧰 Maintenance

• deps(go): bump module github.com/hashicorp/terraform-registry-address to v0.3.0 @updateclibot[bot] (#5409)
• deps(go): bump module cuelang.org/go to v0.13.1 @updateclibot[bot] (#5400)
• deps(go): bump module golang.org/x/net to v0.41.0 @updateclibot[bot] (#5381)
• deps(go): bump module github.com/fluxcd/source-controller/api to v1.6.0 @updateclibot[bot] (#5380)
• deps(go): bump module github.com/go-git/go-git/v5 to v5.16.2 @updateclibot[bot] (#5373)
• deps(go): bump module helm.sh/helm/v3 to v3.18.2 @updateclibot[bot] (#5362)

Contributors

@mcwarman, @olblak, @qianlongzt, @refi64, @updateclibot[bot] and updateclibot[bot]

Changes

• test(report): switch to testing report Merge instead of FromString @mcwarman (#5216)

🚀 Features

• feat(bitbucket): support pull request updates @mcwarman (#5133)

🐛 Bug Fixes

• fix(reports): ensure latest title and description are used @mcwarman (#5189)
• fix(dockerfile): typo in yaml specification @loispostula (#5137)

🧰 Maintenance

• deps(go): bump module cuelang.org/go to v0.13.0 @updateclibot[bot] (#5280)
• deps(go): bump module gitlab.com/gitlab-org/api/client-go to v0.129.0 @updateclibot[bot] (#5271)
• deps(go): bump module helm.sh/helm/v3 to v3.18.1 @updateclibot[bot] (#5261)
• deps(github/action): bump all dependencies @updateclibot[bot] (#5258)
• deps(go): bump module github.com/zclconf/go-cty to v1.16.3 @updateclibot[bot] (#5249)
• deps(go): bump module github.com/goccy/go-yaml to v1.18.0 @updateclibot[bot] (#5239)
• deps(go): bump module github.com/fluxcd/helm-controller/api to v1.3.0 @updateclibot[bot] (#5217)
• chore: remove Dependabot configuration @olblak (#5175)
• deps(go): bump module github.com/google/go-containerregistry to v0.20.5 @updateclibot[bot] (#5162)
• deps(go): bump module github.com/yuin/goldmark to v1.7.12 @updateclibot[bot] (#5147)
• deps(go): bump module github.com/google/go-containerregistry to v0.20.4 @updateclibot[bot] (#5138)

📝 Documentation

• docs: create jsonschema for bitbucket scm configuration @olblak (#5190)

Contributors

@loispostula, @mcwarman, @olblak, @updateclibot[bot] and updateclibot[bot]

Changes

🚀 Features

• feat(gitlab/mergerequest): configure additional fields during mr creation @alikhil (#5094)
• feat(autodiscovery/cargo): switch cargo update to cargo-upgrade @loispostula (#4793)

🧰 Maintenance

• deps(github/action): bump all dependencies @updateclibot[bot] (#5102)
• deps: bump golangci-lint to v2.1.6 @updateclibot[bot] (#5080)
• deps(go): bump module oras.land/oras-go/v2 to v2.6.0 @updateclibot[bot] (#5078)
• deps: Bump Golang version to 1.24.3 @updateclibot[bot] (#5052)
• deps(go): bump module dario.cat/mergo to v1.0.2 @updateclibot[bot] (#5061)
• deps(go): bump module golang.org/x/oauth2 to v0.30.0 @updateclibot[bot] (#5045)
• deps(go): bump module golang.org/x/net to v0.40.0 @updateclibot[bot] (#5039)

Contributors

@alikhil, @loispostula, @olblak, @updateclibot[bot] and updateclibot[bot]

Changes

🚀 Features

• feat(core): export pipeline report to disk [experimental] @olblak (#4898)
• feat(autodiscovery): Add Nomad integration @olblak (#4957)
• feat(autodiscovery/githubaction): digest should allow handling of main @loispostula (#4959)
• feat(autodiscovery/precommit): add support for digest in precommit autodiscovery @loispostula (#4928)
• feat: add quote/unquote transformers @loispostula (#4870)

🐛 Bug Fixes

• fix: github action e2e test branch @olblak (#4975)
• fix(yaml): improve target change detection logic @omissis (#4864)
• fix(autodiscovery/flux): don't ignore flux helmrelease update when using an actionID @olblak (#4866)

🧰 Maintenance

• deps(go): bump module github.com/drone/go-scm to v1.40.1 @updateclibot[bot] (#5003)
• fix(autodiscovery/githubaction): replace deprecated key hash by hashtag @olblak (#4982)
• deps(go): bump module github.com/yuin/goldmark to v1.7.11 @updateclibot[bot] (#4949)
• deps(github/action): bump all dependencies @updateclibot[bot] (#4938)
• deps(go): bump module github.com/testcontainers/testcontainers-go to v0.37.0 @updateclibot[bot] (#4937)
• deps: bump golangci-lint to v2.1.5 @updateclibot[bot] (#4909)
• deps(go): bump module github.com/beevik/etree to v1.5.1 @updateclibot[bot] (#4914)
• deps(go): bump module github.com/aws/aws-sdk-go to v1.55.7 @updateclibot[bot] (#4905)
• deps: update ubuntu version used in Update release-drafter.yml @olblak (#4888)
• deps(go): bump module github.com/yuin/goldmark to v1.7.10 @updateclibot[bot] (#4853)
• deps(go): bump module github.com/hashicorp/terraform-registry-address to v0.2.5 @updateclibot[bot] (#4844)
• deps(go): bump module github.com/go-git/go-git/v5 to v5.16.0 @updateclibot[bot] (#4836)

Contributors

@loispostula, @olblak, @omissis, @updateclibot[bot] and updateclibot[bot]

Changes

🚀 Features

• feat(autodiscovery): add support for k8s initContainers (#4569) @luilegeant (#4570)

🐛 Bug Fixes

• fix(udash): correctly handle error if udash doesn't exist @olblak (#4767)

🧰 Maintenance

• deps(go): bump module github.com/go-git/go-git/v5 to v5.15.0 @updateclibot[bot] (#4810)
• deps(go): bump module github.com/drone/go-scm to v1.40.0 @updateclibot[bot] (#4802)
• deps(go): bump module helm.sh/helm/v3 to v3.17.3 @updateclibot[bot] (#4791)
• deps: Update ubuntu runner for codeql-analysis.yml @olblak (#4768)
• deps(go): bump module golang.org/x/net to v0.39.0 @updateclibot[bot] (#4757)
• deps(go): bump module golang.org/x/oauth2 to v0.29.0 @updateclibot[bot] (#4747)
• deps(go): bump module cuelang.org/go to v0.12.1 @updateclibot[bot] (#4737)
• deps: Bump Golang version to 1.24.2 @updateclibot[bot] (#4719)
• deps(go): bump module github.com/goccy/go-yaml to v1.17.1 @updateclibot[bot] (#4721)
• deps(github/action): bump all dependencies @updateclibot[bot] (#4718)
• deps: use one PR per golang major update @olblak (#4560)
• deps: automerge golang patch update version @olblak (#4559)
• fix(updatecli): ignore some Go module version update for github.com/hashicorp/hcl/v2 @olblak (#4699)
• deps: bump github.com/minamijoyo/hcledit to v0.2.17 @olblak (#4585)
• deps(go): bump module github.com/zclconf/go-cty to v1.16.2 @updateclibot[bot] (#4668)
• chore(deps): Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 @dependabot[bot] (#4511)
• ci: update to golangci v2 configuration && fix reported linting issues @olblak (#4568)
• deps(github/action): bump all dependencies @updateclibot[bot] (#4555)
• deps: bump golangci-lint to v2.0.2 @updateclibot[bot] (#4550)

📝 Documentation

• doc: add Criteo to ADOPTERS.md @alikhil (#4765)
• doc: add Mbrella ADOPTERS.md @loispostula (#4738)

Contributors

@alikhil, @dependabot[bot], @loispostula, @luilegeant, @olblak, @updateclibot[bot], dependabot[bot] and updateclibot[bot]