Skip to content

build(deps): bump taskcluster from 103.0.1 to 107.0.0 in /tools - #3615

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/tools/taskcluster-107.0.0
Open

build(deps): bump taskcluster from 103.0.1 to 107.0.0 in /tools#3615
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/tools/taskcluster-107.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps taskcluster from 103.0.1 to 107.0.0.

Release notes

Sourced from taskcluster's releases.

v107.0.0

GENERAL

▶ [patch] Upgrades to go1.27.0 and golangci-lint v2.13.1.

Release notes here.

WORKER-DEPLOYERS

▶ [patch] bug 2062170 Pass taskcluster proxy credentials through environment variables instead of named parameters

USERS

▶ [MAJOR] Removed all mentions of the unused queue actions feature.

The actions property is removed from the responses of queue.listProvisioners, queue.getProvisioner, queue.getWorkerType, queue.getWorker, and workerManager.worker, from the corresponding GraphQL types, and from the web UI.

▶ [MAJOR] bug 2062161 Removed the deprecated queue.declareProvisioner and queue.declareWorkerType methods.

▶ [patch] Fixed unsafe handling of inherited JavaScript properties when rendering .taskcluster.yml files through v0 parameters and v1 as_slugid() labels.

▶ [patch] bug 2065461 Prevent the notify service from fetching files and remote URLs referenced in the content of the emails it sends. This also stops the plain text part of those emails from being mangled by the HTML processing.

▶ [patch] bug 2062161 queue.declareWorker now returns a 400 instead of a 500 when passed an empty body

DEVELOPERS

▶ [patch] #8981 UI Clients page switches from GraphQL to direct service calls

▶ [patch] Upgrades to yarn 4.18.0

v106.0.0

USERS

▶ [MAJOR] bug 2064901

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v107.0.0

GENERAL

▶ [patch] Upgrades to go1.27.0 and golangci-lint v2.13.1.

Release notes here.

WORKER-DEPLOYERS

▶ [patch] bug 2062170 Pass taskcluster proxy credentials through environment variables instead of named parameters

USERS

▶ [MAJOR] Removed all mentions of the unused queue actions feature.

The actions property is removed from the responses of queue.listProvisioners, queue.getProvisioner, queue.getWorkerType, queue.getWorker, and workerManager.worker, from the corresponding GraphQL types, and from the web UI.

▶ [MAJOR] bug 2062161 Removed the deprecated queue.declareProvisioner and queue.declareWorkerType methods.

▶ [patch] Fixed unsafe handling of inherited JavaScript properties when rendering .taskcluster.yml files through v0 parameters and v1 as_slugid() labels.

▶ [patch] bug 2065461 Prevent the notify service from fetching files and remote URLs referenced in the content of the emails it sends. This also stops the plain text part of those emails from being mangled by the HTML processing.

▶ [patch] bug 2062161 queue.declareWorker now returns a 400 instead of a 500 when passed an empty body

DEVELOPERS

▶ [patch] #8981 UI Clients page switches from GraphQL to direct service calls

▶ [patch] Upgrades to yarn 4.18.0

v106.0.0

USERS

... (truncated)

Commits
  • 6b2f6f6 v107.0.0
  • 9d59eb5 Merge pull request #9043 from Eijebong/i-hate-emails
  • 99b4e09 Merge pull request #9044 from Eijebong/proxy-through-env
  • 9bae634 Bug 2062170 - Pass proxy credentials from the worker through environment vari...
  • a8138a8 Bug 2065461 - Stop rendering emails through juice's resource inliner
  • fb35bd7 Merge pull request #9041 from taskcluster/matt-boris/go1.27yarn4.18
  • c53c32c feat(github): fix unsafe handling in as_slugid helper (#9042)
  • cca7b51 Merge pull request #9040 from Eijebong/drop-queue-actions
  • a7601f9 Remove the concept of queue actions
  • 8a9695b Merge pull request #9039 from Eijebong/fix-queue-declare
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [taskcluster](https://github.com/taskcluster/taskcluster) from 103.0.1 to 107.0.0.
- [Release notes](https://github.com/taskcluster/taskcluster/releases)
- [Changelog](https://github.com/taskcluster/taskcluster/blob/main/CHANGELOG.md)
- [Commits](taskcluster/taskcluster@v103.0.1...v107.0.0)

---
updated-dependencies:
- dependency-name: taskcluster
  dependency-version: 107.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

tools Common Python tools

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants