4258 Commits
Author SHA1 Message Date
Julio López e8daf1138b refactor(server): remove tls.Config.VerifyPeerCertificate (#5637)
Remove `tls.Config.VerifyPeerCertificate`.
Instead rely on `VerifyConnection` to avoid double validation.

nit: leverage `EnsureType` in tests.

Ref:
- #5540
- #5610
- #5628
2026-09-10 15:47:06 -07:00
Andreas Sommer 35a69db92a fix(providers): wait for ssh process to exit to avoid leaving zombie processes (#5558) 2026-09-10 14:29:20 -07:00
Vetea edcd1171a4 fix(cli): mark snapshot verify --parallel as deprecated and no-op (#5552)
`--parallel` has had no effect on `snapshot verify` since #1921, which
merged the tree-walk and file-verification parallelism into the single
`VerifierOptions.Parallelism` field and wired it to `--file-parallelism`.
`verifyCommandParallel` has had no reader since then: the flag parses,
advertises a default of 8, and is silently discarded.

The Consistency documentation page still recommends `--parallel=10` in
four places, so users following it believe they are tuning something.

Follow the existing convention in this file for `--all-sources`: hide the
flag, label it as having no effect, and log a deprecation message when it
is passed. Dropping `Default("8")` lets the zero value distinguish an
explicit `--parallel` from an absent one, and stops the help text from
advertising a default that does nothing. The flag still parses, so
existing scripts and cron jobs keep working.

Restoring a separate tree-walk parallelism knob would be the alternative
fix, but that changes the public `snapshotfs.VerifierOptions` surface.
2026-09-10 14:07:07 -07:00
Julio López 6a0646aa68 fix(testing): avoid clobbering storage used for t.Cleanup (#5636)
- Followup #5635
2026-09-10 09:18:23 -07:00
Julio López c861a2974f fix(testing): prevent panic in Azure versioned storage test (#5635)
avoids clobbering the reference to the storage (interface) used during t.Cleanup

cleanups:
- add length check for returned timestamps
- cleanupTestDataAndClose() helper
- storagePrefixForTest() helper
- cancel() context after creating store as in other tests.
2026-09-10 07:44:58 -07:00
Julio López be0b677859 build(infra): avoid persisting credentials in actions/checkout (#5633) 2026-09-09 20:43:36 -07:00
John Costa b16302dca9 fix(cli): reject negative values for --parallel flags (#5484)
The --parallel flag was declared with kingpin .IntVar on 12 commands,
which accepted negative values and led to a panic at runtime (e.g.
`snapshot migrate --parallel=-1`).

Declare the --parallel family as uint so kingpin rejects negative input
at parse time.
The uint->int conversion the callee APIs need is done through a small
helper .

Add CLI test that asserts the rejection message (a bare failure check passed
even without the fix since the commands also fail with no repository connected).
Parse via ParseFloat like kingpin's built-in int flag so the only behavior
change is rejecting negatives.
2026-09-09 20:07:17 -07:00
Aditya Raj Singh 2602713af4 fix(cli): report invalid log levels for maintenance runs (#5586)
- Fixes #4008
2026-09-09 16:30:06 -07:00
Kopia Builder [bot] 7659f849a1 feat(ui): upgraded htmlui to the latest version (#5630) 2026-09-08 21:09:29 -07:00
dependabot[bot] 03e3946ad2 build(deps-dev): bump electron (#5631)
Bumps the kopia-ui-npm-dependencies group in /app with 1 update: [electron](https://github.com/electron/electron).


Updates `electron` from 44.0.0 to 44.1.1
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](https://github.com/electron/electron/compare/v44.0.0...v44.1.1)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 44.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: kopia-ui-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-08 20:24:23 -07:00
afa3e6bd28 build(deps): bump nanoid from 3.3.16 to 3.3.18 in /site in the npm_and_yarn group across 1 directory (#5629)
* build(deps): bump nanoid

Bumps the npm_and_yarn group with 1 update in the /site directory: [nanoid](https://github.com/ai/nanoid).


Updates `nanoid` from 3.3.16 to 3.3.18
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/3.3.18/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.3.16...3.3.18)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 3.3.18
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump app js-yaml to 4.3.2

Co-authored-by: julio-lopez <1953782+julio-lopez@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: julio-lopez <1953782+julio-lopez@users.noreply.github.com>
2026-09-09 01:35:19 +00:00
Julio López 848085632d refactor(general): propagate TLSConfigTrustingSingleCertificate error (#5628)
Improves failure mode by explicitly making returning an error when the
provided cert fingerprint is invalid.  The previously existing behavior
of creating a transport that fails all connection verification, is often
hard to troubleshoot.

Improve bad fingerprint test cases.
2026-09-07 20:19:23 -07:00
Julio López 82495e54b5 refactor(testing): use ContextForCleanup() in t.Cleanup() (#5627) 2026-09-06 22:48:33 -07:00
Julio López ccab22df30 refactor(repository): cleanup content ID internal const definitions (#5617)
- nit: use maxContenIDSize instead of maxIDLength+1
- nit: rename const to `maxIDDataLength`
- nit: group const definitions
- simplify and tighten id length assertions
2026-09-06 16:49:54 -07:00
Julio López 16895e1ac6 refactor(server): avoid indenting JSON payload in responses (#5625) 2026-09-06 15:34:09 -07:00
Julio López fdf0159a17 refactor(general): cleanup various nits (#5618)
- use struct field initialization idiom
- clarify error message
- directly use s.rootctx in server request processing
- refactor: use require in e2e ACL test
- inline constant definition
- modernize with `strings.Cut`
- modernize with slices.Backward
- simplify timeFormat initialization
- refactor testing: check `Scanner.Err()` in testenv
- remove spurious parenthesis
- trueStr and falseStr consts
- use inheritPolicyString
- use const in cache info
- "bytes" const in ui task counters
- use common consts in gettool
2026-09-06 15:08:49 -07:00
dependabot[bot] f3a4083c98 build(deps): bump github.com/gofrs/flock from 0.13.0 to 0.13.1 (#5622)
Bumps [github.com/gofrs/flock](https://github.com/gofrs/flock) from 0.13.0 to 0.13.1.
- [Release notes](https://github.com/gofrs/flock/releases)
- [Commits](https://github.com/gofrs/flock/compare/v0.13.0...v0.13.1)

---
updated-dependencies:
- dependency-name: github.com/gofrs/flock
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-06 14:53:43 -07:00
dependabot[bot] 36f34250f1 build(deps): bump the telemetry-dependencies group with 2 updates (#5620)
Bumps the telemetry-dependencies group with 2 updates: [github.com/prometheus/client_model](https://github.com/prometheus/client_model) and [github.com/prometheus/common](https://github.com/prometheus/common).


Updates `github.com/prometheus/client_model` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](https://github.com/prometheus/client_model/compare/v0.6.2...v0.6.3)

Updates `github.com/prometheus/common` from 0.70.1 to 0.71.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/common/compare/v0.70.1...v0.71.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: telemetry-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: telemetry-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-06 14:50:46 -07:00
dependabot[bot] 4c689e6715 build(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (#5621)
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.19.2 to 1.20.0.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](https://github.com/klauspost/compress/compare/v1.19.2...v1.20.0)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-06 14:49:46 -07:00
dependabot[bot] ed1a4480d5 build(deps): bump the common-golang-dependencies group with 4 updates (#5619)
Bumps the common-golang-dependencies group with 4 updates: [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go), [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go), [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).


Updates `cloud.google.com/go/storage` from 1.65.0 to 1.66.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/compute/v1.65.0...compute/v1.66.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.23.0 to 1.23.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.23.0...sdk/azcore/v1.23.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.14.0...sdk/azidentity/v1.14.1)

Updates `google.golang.org/api` from 0.293.0 to 0.297.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.293.0...v0.297.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common-golang-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common-golang-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.297.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-06 14:48:33 -07:00
Julio López dbc4b46052 refactor(repository): make index v1 key length check consistent (#5615)
This makes the index-build-time keyLength check consistent with
the corresponding index read check. This is also consistent with
the checks performed in index v2.

Ref:

- #5247
- [automated review comment](https://github.com/kopia/kopia/pull/5247/changes/BASE..7522595ee2a7869ae9c780e092a188fa5a875610#r3927619716)
2026-09-05 14:48:44 -07:00
Kopia Builder [bot] 6d8670bdb0 feat(ui): upgraded htmlui to the latest version (#5614) 2026-09-05 20:01:08 +00:00
dependabot[bot] 69079390f7 build(deps-dev): bump @xmldom/xmldom from 0.8.13 to 0.8.15 in /app (#5605)
Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom) from 0.8.13 to 0.8.15.
- [Release notes](https://github.com/xmldom/xmldom/releases)
- [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xmldom/xmldom/compare/0.8.13...0.8.15)

---
updated-dependencies:
- dependency-name: "@xmldom/xmldom"
  dependency-version: 0.8.15
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-05 20:00:14 +00:00
dependabot[bot] b32b2e0772 build(deps): bump github.com/chromedp/chromedp from 0.14.2 to 0.16.0 (#5512)
Bumps [github.com/chromedp/chromedp](https://github.com/chromedp/chromedp) from 0.14.2 to 0.16.0.
- [Release notes](https://github.com/chromedp/chromedp/releases)
- [Commits](https://github.com/chromedp/chromedp/compare/v0.14.2...v0.16.0)

---
updated-dependencies:
- dependency-name: github.com/chromedp/chromedp
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-05 12:35:06 -07:00
ashmrtn 4ceee29c7d test(server): Add tests for TLS verification (#5610)
Add hash size check
Better error reporting by checking the hash size prior to attempting
validation.

Check bad fingerprint hash values

E2E client test for TLS checking
Use a server/client flow to check that TLS certs are checked if the
connection is resumed.
2026-09-03 13:01:16 -07:00
Julio López 8450362efc build(deps): upgrade golang.or/x/crypto to 0.56.0 (#5607)
- upgrade golang.or/x/crypto to 0.56.0
- re-enables govulncheck
2026-09-03 13:00:09 -07:00
Hsukqi Lee bbea8db152 docs(site): add Windows kopiaignore path guidance (#5609)
Explain that Windows users should use forward slashes in kopiaignore path rules.

Assisted-by: OpenCode:gpt-5.6-sol
Signed-off-by: Hsukqi Lee <team@tsinbei.com>
2026-09-03 12:44:43 -07:00
Julio López f4b581e998 build(deps): upgrade Go to 1.26.1 (#5245)
Upgrade Go to 1.26.1

Address new linter warnings:
- modernize with `new`
- modernize with Type.Fields()
2026-09-03 12:31:34 -07:00
Julio López 9473eef9d1 build(deps-dev): upgrade golangci-lint to v2.11.4 (#5247)
Fixes for new linter warnings:
- fix: add //nolint annotations where it makes sense
- fix: remove no-longer necessary linter annotations
- fix linter: add or remove new lines
- fix linter: use Fprintf instead of WriteString
- fix: check for overflow in conversion to uint8 / byte
2026-09-03 12:12:20 -07:00
Julio López 7de9f36a73 refactor(server): validate cert on re-connection (#5540)
Will remove deprecated API
2026-09-02 22:56:31 -07:00
Julio López bfe4ecf686 chore(ci): temporarily disable govulncheck to unblock CI (#5606) 2026-09-02 19:53:07 -07:00
dependabot[bot] 77c425c11e build(deps): bump fast-uri from 3.1.5 to 3.1.7 in /app (#5604)
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.5 to 3.1.7.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.7)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-02 19:24:53 -07:00
Julio López 959644ca28 chore(ci): update GH Copilot instructions (#5602) 2026-09-01 22:07:21 -07:00
7141524148 build(deps): bump the kopia-ui-npm-dependencies group in /app with 3 updates (#5600)
* build(deps): bump the kopia-ui-npm-dependencies group

Bumps the kopia-ui-npm-dependencies group in /app with 3 updates: [uuid](https://github.com/uuidjs/uuid), [concurrently](https://github.com/open-cli-tools/concurrently) and [electron](https://github.com/electron/electron).


Updates `uuid` from 14.0.1 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v14.0.1...v14.0.2)

Updates `concurrently` from 10.0.4 to 10.0.5
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](https://github.com/open-cli-tools/concurrently/compare/v10.0.4...v10.0.5)

Updates `electron` from 43.3.0 to 44.0.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](https://github.com/electron/electron/compare/v43.3.0...v44.0.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kopia-ui-npm-dependencies
- dependency-name: concurrently
  dependency-version: 10.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: kopia-ui-npm-dependencies
- dependency-name: electron
  dependency-version: 44.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: kopia-ui-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(ci): retain Electron armv7 build support

Co-authored-by: julio-lopez <1953782+julio-lopez@users.noreply.github.com>

* build: drop Linux ARMv7 support

Co-authored-by: julio-lopez <1953782+julio-lopez@users.noreply.github.com>

* revert: allow installing node for armv7l

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: julio-lopez <1953782+julio-lopez@users.noreply.github.com>
2026-09-02 04:49:05 +00:00
dependabot[bot] 48a144be1a build(deps): bump dawidd6/action-homebrew-bump-formula from 7 to 8 (#5537)
Bumps [dawidd6/action-homebrew-bump-formula](https://github.com/dawidd6/action-homebrew-bump-formula) from 7 to 8.
- [Release notes](https://github.com/dawidd6/action-homebrew-bump-formula/releases)
- [Commits](https://github.com/dawidd6/action-homebrew-bump-formula/compare/1446dca236b0440c6f02723a3f14f13be2c04ab0...a0e064e08103c01870c6d1b05168d1b726aab119)

---
updated-dependencies:
- dependency-name: dawidd6/action-homebrew-bump-formula
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-01 21:04:37 -07:00
Kopia Builder [bot] 41e2bc42cd feat(ui): upgraded htmlui to the latest version (#5599) 2026-09-01 17:24:07 -07:00
dependabot[bot] d1836fd6cd build(deps-dev): bump browserslist (#5601)
Bumps the npm_and_yarn group with 1 update in the /site directory: [browserslist](https://github.com/browserslist/browserslist).


Updates `browserslist` from 4.28.1 to 4.28.8
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](https://github.com/browserslist/browserslist/compare/4.28.1...4.28.8)

---
updated-dependencies:
- dependency-name: browserslist
  dependency-version: 4.28.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-02 00:12:13 +00:00
dependabot[bot] 3668d0e4bf build(deps): bump github/codeql-action/upload-sarif (#5597)
Bumps the github-actions group with 1 update: [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/upload-sarif` from 4.37.7 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...cdf488f595d80d6e07e03d4674febd5ab45fa938)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-02 00:05:37 +00:00
dependabot[bot] 554605a9de build(deps): bump docker/setup-buildx-action in the docker group (#5598)
Bumps the docker group with 1 update: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action).


Updates `docker/setup-buildx-action` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...37fe631027851001ddb9b187196cc803df7f5f0e)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-01 16:47:25 -07:00
dependabot[bot] f837e011ac build(deps): bump the telemetry-dependencies group across 1 directory with 4 updates (#5593)
Bumps the telemetry-dependencies group with 2 updates in the / directory: [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go).


Updates `go.opentelemetry.io/otel` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.45.0...v1.46.0)

Updates `go.opentelemetry.io/otel/trace` from 1.45.0 to 1.46.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.45.0...v1.46.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: telemetry-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: telemetry-dependencies
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: telemetry-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: telemetry-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-31 22:38:46 +00:00
dependabot[bot] 92fc5f41c3 build(deps): bump google.golang.org/grpc (#5592)
Bumps the common-golang-dependencies group with 1 update: [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `google.golang.org/grpc` from 1.83.1 to 1.83.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.83.1...v1.83.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common-golang-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-31 22:05:47 +00:00
dependabot[bot] a4602657a2 build(deps): bump github.com/klauspost/reedsolomon from 1.14.1 to 1.14.2 (#5578)
Bumps [github.com/klauspost/reedsolomon](https://github.com/klauspost/reedsolomon) from 1.14.1 to 1.14.2.
- [Release notes](https://github.com/klauspost/reedsolomon/releases)
- [Commits](https://github.com/klauspost/reedsolomon/compare/v1.14.1...v1.14.2)

---
updated-dependencies:
- dependency-name: github.com/klauspost/reedsolomon
  dependency-version: 1.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 17:36:23 -07:00
dependabot[bot] cb58a198ad build(deps): bump the common-golang-dependencies group with 3 updates (#5577)
Bumps the common-golang-dependencies group with 3 updates: [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go), [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `cloud.google.com/go/storage` from 1.64.0 to 1.65.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/compute/v1.64.0...compute/v1.65.0)

Updates `github.com/minio/minio-go/v7` from 7.2.1 to 7.3.0
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](https://github.com/minio/minio-go/compare/v7.2.1...v7.3.0)

Updates `google.golang.org/grpc` from 1.83.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.83.0...v1.83.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang-dependencies
- dependency-name: github.com/minio/minio-go/v7
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common-golang-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 17:33:53 -07:00
Julio López d9d21fe870 fix(repository): increment attempt to correctly log index write retries (#5575) 2026-08-24 17:09:24 -07:00
Julio López 4ebb2be6c5 build(deps): upgrade Go to 1.25.14 (#5576) 2026-08-21 14:46:03 -07:00
dependabot[bot] 5f9fe81ec4 build(deps): bump github/codeql-action/upload-sarif (#5570)
Bumps the github-actions group with 1 update: [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/upload-sarif` from 4.37.3 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 20:44:19 -07:00
dependabot[bot] f215988f26 build(deps-dev): bump the kopia-ui-npm-dependencies group (#5567)
Bumps the kopia-ui-npm-dependencies group in /app with 4 updates: [@playwright/test](https://github.com/microsoft/playwright), [electron](https://github.com/electron/electron), [playwright](https://github.com/microsoft/playwright) and [playwright-core](https://github.com/microsoft/playwright).


Updates `@playwright/test` from 1.62.0 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.62.0...v1.62.1)

Updates `electron` from 43.2.0 to 43.3.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](https://github.com/electron/electron/compare/v43.2.0...v43.3.0)

Updates `playwright` from 1.62.0 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.62.0...v1.62.1)

Updates `playwright-core` from 1.62.0 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](https://github.com/microsoft/playwright/compare/v1.62.0...v1.62.1)

---
updated-dependencies:
- dependency-name: "@playwright/test"
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: kopia-ui-npm-dependencies
- dependency-name: electron
  dependency-version: 43.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: kopia-ui-npm-dependencies
- dependency-name: playwright
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: kopia-ui-npm-dependencies
- dependency-name: playwright-core
  dependency-version: 1.62.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: kopia-ui-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 03:35:37 +00:00
dependabot[bot] 80a31c578f build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#5569)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.11.1 to 1.12.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.11.1...v1.12.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 20:24:02 -07:00
dependabot[bot] 318aac1f1c build(deps): bump the common-golang-dependencies group with 7 updates (#5568)
Bumps the common-golang-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.22.0` | `1.23.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.54.0` | `0.55.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.38.0` | `0.40.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.57.0` | `0.58.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.40.0` | `0.41.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.292.0` | `0.293.0` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |


Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.22.0 to 1.23.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.22.0...sdk/azcore/v1.23.0)

Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0
- [Commits](https://github.com/golang/crypto/compare/v0.54.0...v0.55.0)

Updates `golang.org/x/mod` from 0.38.0 to 0.40.0
- [Commits](https://github.com/golang/mod/compare/v0.38.0...v0.40.0)

Updates `golang.org/x/net` from 0.57.0 to 0.58.0
- [Commits](https://github.com/golang/net/compare/v0.57.0...v0.58.0)

Updates `golang.org/x/text` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.40.0...v0.41.0)

Updates `google.golang.org/api` from 0.292.0 to 0.293.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.292.0...v0.293.0)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang-dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang-dependencies
- dependency-name: golang.org/x/mod
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.293.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common-golang-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common-golang-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 20:22:49 -07:00
Julio López e73a5a03c3 fix(infra): use a string value in dependabot.yml entry (#5566) 2026-08-17 17:24:45 -07:00