fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/docker/compose/v5	v5.4.0 → v5.5.0
github.com/stretchr/testify	v1.12.0 → v1.12.1

---

Release Notes

docker/compose (github.com/docker/compose/v5)

v5.5.0

Compare Source

What's Changed

ℹ️ This release overhauls image digest reconciliation to prevent unnecessary container recreation.
Existing containers may be recreated the first time you run compose up after upgrading, as image digests are re-evaluated using the new logic.

compose pull now honors pull_policy refresh windows (daily, weekly, every_N).

✨ Improvements

• New image digest reconciliation process by @​glours & @​ndeloof #​14011 #​14041

🐛 Fixes

• Fix(bridge): skip pulling default image references for build-only ser… by @​ericwyles in #​14010
• Fix(watch): stop pruning every dangling image of the project by @​glours in #​14012
• Fix(config): resolve service environment when computing --hash by @​glours in #​14002
• Fix(watch): skip unreadable directories instead of failing the watch by @​Endika in #​13992
• Fix: ignore one-off container events in up monitor by @​brano-osif in #​14038
• Fix(bridge): validate arguments of bridge subcommands by @​glours in #​14003
• Fix(images): tolerate containers whose image record is gone by @​ndeloof in #​14028

🔧 Internal

• Test: Set stop_signal to SIGTERM in nginx-based services by @​ricardobranco777 in #​13881
• Chore: inline needlessly extracted single-use helpers by @​ndeloof in #​14048
• Add ENGINE column driven by label by @​nicksieger in #​13959

⚙️ Dependencies

• Build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 by @​dependabot[bot] in #​13999
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4 by @​dependabot[bot] in #​14009
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.5 by @​dependabot[bot] in #​14019
• Build(deps): bump github.com/moby/buildkit from 0.32.1 to 0.32.2 by @​dependabot[bot] in #​14033
• Build(deps): bump github.com/docker/buildx from 0.36.0 to 0.36.1 by @​dependabot[bot] in #​14034
• Build(deps): bump docker/github-builder/.github/workflows/bake.yml from 1.15.0 to 1.16.0 in the docker-actions group by @​dependabot[bot] in #​14035
• Build(deps): bump github.com/moby/go-archive from 0.3.2 to 0.3.3 by @​dependabot[bot] in #​14043
• Build(deps): bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6 by @​dependabot[bot] in #​14022
• Build(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.2+incompatible by @​dependabot[bot] in #​14042
• Build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @​dependabot[bot] in #​14008
• Bump golang to version 1.26.6 by @​glours in #​14045

New Contributors

• @​ericwyles made their first contribution in #​14010
• @​Endika made their first contribution in #​13992
• @​brano-osif made their first contribution in #​14038

Full Changelog: docker/compose@v5.4.0...v5.5.0

stretchr/testify (github.com/stretchr/testify)

v1.12.1

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in #​1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in #​1772

New Contributors

• @​harryzcy made their first contribution in #​1935
• @​boekkooi-impossiblecloud made their first contribution in #​1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in #​1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in #​1772

New Contributors

• @​harryzcy made their first contribution in #​1935
• @​boekkooi-impossiblecloud made their first contribution in #​1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
github.com/docker/buildx	v0.36.0 -> v0.36.1
github.com/moby/buildkit	v0.32.1 -> v0.32.2
github.com/moby/go-archive	v0.3.2 -> v0.3.3
go.yaml.in/yaml/v3	v3.0.4 -> v3.0.5
google.golang.org/grpc	v1.82.1 -> v1.83.0