Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps taskcluster from 88.0.2 to 95.1.4.

Release notes

Sourced from taskcluster's releases.

v95.1.4

GENERAL

▶ [patch] Upgrades to Node.js v24.13.0 [SECURITY].

Can read more about this release here.

USERS

▶ [patch] Fixes TypeError in web-server when no oauth2 clients are configured.

v95.1.3

GENERAL

▶ [patch] Upgrades goreleaser tool to latest version to fix broken release. Release v95.1.2 did not publish, so its changelog will be effective for v95.1.3.

v95.1.1

WORKER-DEPLOYERS

▶ [patch] bug 2006698 Fixes worker-manager killing zombie workers when queue data is missing. For long running tasks that took longer than queueInactivityTimeout to finish was a high risk of getting claim-expired because w-m incorrectly assumed worker is not doing anything (missing queue information)

v95.1.0

USERS

▶ [minor] Queue service allows changing the priority of unresolved tasks. Two new endpoints are being introduced:

  • queue.changeTaskPriority
  • queue.changeTaskGroupPriority

This is the implementation of the RFC190

v95.0.3

GENERAL

▶ [patch] Notify Service: upgrades to use @aws-sdk/client-sesv2 with the latest version of nodemailer to resolve some security vulnerabilities.

▶ [patch] Upgrades CI Decision task to use Taskgraph v18.0.3.

▶ [patch] Upgrades to Node.js v24.12.0.

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v95.1.4

GENERAL

▶ [patch] Upgrades to Node.js v24.13.0 [SECURITY].

Can read more about this release here.

USERS

▶ [patch] Fixes TypeError in web-server when no oauth2 clients are configured.

v95.1.3

GENERAL

▶ [patch] Upgrades goreleaser tool to latest version to fix broken release. Release v95.1.2 did not publish, so its changelog will be effective for v95.1.3.

v95.1.2

WORKER-DEPLOYERS

▶ [patch] Fix a worker panic when the garbage collector runs twice with no task in between if d2g is enabled

DEVELOPERS

▶ [patch] bug 2010096 The taskcluster signin command shell-escapes the credentials it receives before outputting them.

Automated Package Updates

  • build(deps): bump github.com/sigstore/cosign/v2 from 2.4.1 to 2.6.2 (963109aa38)

v95.1.1

WORKER-DEPLOYERS

▶ [patch] bug 2006698 Fixes worker-manager killing zombie workers when queue data is missing. For long running tasks that took longer than queueInactivityTimeout to finish was a high risk of getting claim-expired because w-m incorrectly assumed worker is not doing anything (missing queue information)

... (truncated)

Commits
  • 84aa162 v95.1.4
  • 93f0001 Merge pull request #8203 from taskcluster/feat/login-strategies-ui
  • 16ac32b feat(web): Fix TypeError when no clients registered
  • a413861 Merge pull request #8196 from taskcluster/matt-boris/node24.13.0
  • f95ac3f Merge pull request #8202 from taskcluster/browserslist-update
  • be553ac build: update Browserslist db
  • 005b7f6 build(deps): upgrade to nodejs 24.13.0
  • 300ac23 v95.1.3
  • fc2cdd1 Merge pull request #8201 from taskcluster/matt-boris/addGoreleaserToCI
  • 16b1e42 Merge branch 'main' into matt-boris/addGoreleaserToCI
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [taskcluster](https://github.com/taskcluster/taskcluster) from 88.0.2 to 95.1.4.
- [Release notes](https://github.com/taskcluster/taskcluster/releases)
- [Changelog](https://github.com/taskcluster/taskcluster/blob/main/CHANGELOG.md)
- [Commits](taskcluster/taskcluster@v88.0.2...v95.1.4)

---
updated-dependencies:
- dependency-name: taskcluster
  dependency-version: 95.1.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the report Python tool to upload reports label Jan 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

report Python tool to upload reports

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant