Skip to content

chore(deps): Bump NVIDIA/holodeck from 0.5.0 to 0.5.1 - #921

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/main/NVIDIA/holodeck-0.5.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/main/NVIDIA/holodeck-0.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor

Bumps NVIDIA/holodeck from 0.5.0 to 0.5.1.

Release notes

Sourced from NVIDIA/holodeck's releases.

v0.5.1

Changelog

Changelog

Sourced from NVIDIA/holodeck's changelog.

[v0.5.1] - 2026-10-25

Security

  • fix(build): build releases with the CI Go toolchain, now 1.27.3 (#910): Release binaries were built with Go 1.26.0, because release.yaml installed whatever Go version go.mod's go line named. The v0.5.0 binaries embed go1.26.0 and contain 46 known standard-library vulnerabilities, including GO-2026-6809, the crypto/x509 intermediate-CA block added in go1.27.3 and go1.26.10. Releases now build with the Dockerfile's Go, the same as CI, and the Dockerfile moves to golang:1.27.3-bookworm.

Bug Fixes

  • CI: golangci-lint 2.15.0 and ubuntu-26.04 runner fixes (#908, #909): An unchecked error in a pkg/sshutil test now fails the test with the error message. The docs-check job pins Ruby 4.0, because '3.5' only ever resolved to a preview build that has no ubuntu-26.04 binary.

Dependencies

  • Go module and GitHub Actions bumps (#907): golang.org/x/crypto v0.58.0 (with x/sys v0.49.0, x/text v0.43.0, x/tools v0.51.0), urfave/cli/v3 v3.14.0, onsi/gomega v1.44.0, stretchr/testify v1.12.1, mattn/go-isatty v0.0.24 and github/codeql-action v4.39.1.
Commits
  • 5e5ff28 docs(changelog): add v0.5.1 release notes (#911)
  • d178e6d fix(build): build releases with the CI Go toolchain, now 1.27.3 (#910)
  • 43198c2 chore(deps): dependabot merge train 2026-10-25 (#907)
  • dcd43eb fix(ci): run docs-check on Ruby 4.0 (#909)
  • 980825b fix(sshutil): check the HostKeyCallback error in the flock test (#908)
  • 0412525 chore(brew): bump holodeck cask to v0.5.0 (#899)
  • e745425 chore(brew): bump holodeck formula to v0.5.0 (#898)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [NVIDIA/holodeck](https://github.com/nvidia/holodeck) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/nvidia/holodeck/releases)
- [Changelog](https://github.com/NVIDIA/holodeck/blob/main/CHANGELOG.md)
- [Commits](v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: NVIDIA/holodeck
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Issue/PR Pull about a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 28, 2026
@copy-pr-bot

copy-pr-bot Bot commented Oct 28, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Issue/PR Pull about a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants