fix(deps): update module github.com/devsy-org/devsy to v1.20.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/devsy-org/devsy	v1.19.0 → v1.20.0

---

Release Notes

devsy-org/devsy (github.com/devsy-org/devsy)

v1.20.0

Compare Source

Devsy v1.20.0

Devsy v1.20.0 focuses on workspace visibility, runtime reliability, secrets management, SSH and tunnel stability.

Highlights

Better workspace launch visibility

• Added operation progress and machine diagnostics (#​1243)
• Added a persistent workspace operation journal (#​1248)
• Added richer workspace status messaging in the desktop app (#​1255)
• Added a workspace launch activity timeline (#​1324)
• Completed launch progress reporting and improved launch dialog layout (#​1345)

Stronger secrets and environment handling

• Added context-scoped managed environment attachments (#​1266)
• Added stored-secret attachment support for desktop workspaces (#​1272)
• Inject attached environment secrets into terminal sessions (#​1320)
• Isolated managed environment values and added secret protection (#​1356)
• Restored legacy secret backend ownership recovery (#​1250)
• Added compensation for managed-value deletion failures (#​1298)
• Fixed workspace environment composition to respect target precedence (#​1297)
• Improved test isolation around secret backend recovery (#​1259)

More reliable SSH, tunnels, and remote operations

• Added a managed transport SSH dialer (#​1284)
• Bounded SSH tunnel client handshake timeouts (#​1254)
• Bounded container SSH-server startup silence (#​1257)
• Bounded Dev Container setup SSH startup silence (#​1335)
• Fixed parsing of Host and Match SSH configuration sections (#​1277)
• Preserved underlying CLI errors across container tunnels (#​1319)
• Hardened Windows task cancellation and SSH tunnel lifecycle behavior (#​1283)
• Expanded SSH host insertion boundary coverage (#​1329)
• Stabilized delayed SSH bootstrap coverage (#​1338)
• Improved tunnel shutdown testing after context cancellation (#​1256)

Desktop experience

• Simplified the settings layout (#​1249)
• Removed broken settings section navigation (#​1251)
• Improved provider update feedback (#​1258)
• Added tray workspace actions, startup settings, and notification levels (#​1262)
• Fixed tray navigation so workspace and settings actions open the correct views (#​1321)
• Start local terminals in the user's home directory (#​1316)
• Kept workspace status pills at their intended width (#​1252)
• Simplified compact workspace status rendering (#​1269)
• Preserved concurrent mock task state in desktop tests (#​1290)

Runtime, providers, and workspace architecture

• Separated runtime capabilities from image capabilities in the driver architecture (#​1339)
• Published the Devsy runtime protocol guide (#​1351)
• Synchronized MicroSandbox workspace permissions (#​1240)
• Scoped MicroSandbox runtime version checks to provisioning (#​1325)
• Fixed Docker CLI discovery propagation (#​1245)
• Narrowed config.yaml provider locking scope (#​1299)
• Refactored agent workspace status lifecycle handling (#​1289)
• Simplified workspace-up preparation (#​1291)
• Persisted Dev Container profile selection (#​1271)
• Added warnings for legacy Dev Container selection drift (#​1296)
• Added platform coverage for ownership, versions, and remote-command framing (#​1310)
• Added characterization coverage for the existing Pro start command ahead of further refactoring (#​1311)

Podman and CI reliability

• Preserved Dev Container variables in Podman build metadata (#​1244)
• Hardened rootful Podman test shards against daemon stalls (#​1247)
• Added bounded Podman bootstrap and runtime recovery (#​1346)
• Shared the Windows Podman bootstrap deadline across bootstrap operations (#​1354)
• Hardened Windows Podman bootstrap timeouts (#​1358)
• Removed the need for Podman helper containers during agent delivery (#​1361)
• Separated unit tests from GoReleaser builds (#​1332)

Logging and diagnostics

• Completed the logging and status UX migration (#​1221)
• Added configurable default log levels (#​1267)
• Isolated SSH diagnostic logs from shell output (#​1317)
• Kept GPG agent probe diagnostics out of terminal sessions (#​1318)
• Corrected VS Code settings log formatting (#​1315)
• Stabilized forwarded GPG socket polling tests (#​1264)

Installation, quality, and tooling

• Added a curl installation script with documentation and tests (#​1246)
• Addressed verified audit findings (#​1263)
• Added Biome formatting enforcement for the desktop app (#​1309)
• Enabled Biome linting for the desktop app (#​1352)
• Normalized dashes and ellipses across the project (#​1300)
• Updated the CLA Assistant GitHub Action to v2.6.2 (#​1313)

Full changelog

v1.19.0...v1.20.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 83 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.26.6 -> 1.26.8
al.essio.dev/pkg/shellescape	v1.6.0 -> v1.6.1
filippo.io/age	v1.3.1 -> v1.3.2
github.com/Azure/azure-sdk-for-go/sdk/azcore	v1.22.0 -> v1.23.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity	v1.14.0 -> v1.14.1
github.com/AzureAD/microsoft-authentication-library-for-go	v1.7.2 -> v1.8.0
github.com/aws/aws-sdk-go-v2	v1.43.0 -> v1.43.8
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	v1.7.14 -> v1.7.18
github.com/aws/aws-sdk-go-v2/config	v1.32.31 -> v1.32.39
github.com/aws/aws-sdk-go-v2/credentials	v1.19.30 -> v1.19.38
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.31 -> v1.18.39
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.31 -> v1.4.39
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.31 -> v2.7.39
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.4.32 -> v1.4.40
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.13 -> v1.13.18
github.com/aws/aws-sdk-go-v2/service/internal/checksum	v1.9.24 -> v1.9.28
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.31 -> v1.13.39
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	v1.19.32 -> v1.19.36
github.com/aws/aws-sdk-go-v2/service/s3	v1.106.0 -> v1.106.5
github.com/aws/aws-sdk-go-v2/service/signin	v1.5.0 -> v1.5.8
github.com/aws/aws-sdk-go-v2/service/sso	v1.33.0 -> v1.33.8
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.38.0 -> v1.38.8
github.com/aws/aws-sdk-go-v2/service/sts	v1.45.0 -> v1.45.8
github.com/aws/smithy-go	v1.27.4 -> v1.27.10
github.com/compose-spec/compose-go/v2	v2.14.0 -> v2.15.0
github.com/containerd/containerd/v2	v2.3.3 -> v2.3.4
github.com/containerd/platforms	v1.0.0-rc.4 -> v1.0.0-rc.5
github.com/devsy-org/apiserver	v1.5.3 -> v1.5.4
github.com/docker/docker-credential-helpers	v0.9.8 -> v0.9.9
github.com/fxamacker/cbor/v2	v2.9.0 -> v2.9.1
github.com/go-openapi/jsonpointer	v0.23.1 -> v1.0.0
github.com/go-openapi/jsonreference	v0.21.6 -> v1.0.0
github.com/go-openapi/swag	v0.26.1 -> v0.27.1
github.com/go-openapi/swag/cmdutils	v0.26.1 -> v0.27.1
github.com/go-openapi/swag/conv	v0.27.0 -> v0.27.1
github.com/go-openapi/swag/fileutils	v0.26.1 -> v0.27.1
github.com/go-openapi/swag/jsonutils	v0.26.1 -> v0.27.1
github.com/go-openapi/swag/loading	v0.26.1 -> v0.27.1
github.com/go-openapi/swag/mangling	v0.26.1 -> v0.27.1
github.com/go-openapi/swag/netutils	v0.26.1 -> v0.27.1
github.com/go-openapi/swag/stringutils	v0.26.1 -> v0.27.1
github.com/go-openapi/swag/typeutils	v0.27.0 -> v0.27.1
github.com/go-openapi/swag/yamlutils	v0.26.1 -> v0.27.1
github.com/gofrs/flock	v0.13.0 -> v0.13.1
github.com/google/cel-go	v0.27.0 -> v0.29.2
github.com/google/go-containerregistry	v0.21.9 -> v0.22.1
github.com/klauspost/compress	v1.19.1 -> v1.19.2
github.com/moby/buildkit	v0.32.2 -> v0.33.0
github.com/prometheus/client_golang	v1.23.2 -> v1.24.1
github.com/prometheus/common	v0.69.0 -> v0.70.1
github.com/prometheus/procfs	v0.20.1 -> v0.21.1
github.com/shirou/gopsutil/v4	v4.26.7 -> v4.26.8
github.com/sirupsen/logrus	v1.9.4 -> v1.10.1
github.com/tonistiigi/fsutil	v0.0.0-20260717003753-6d9dc2ebad62 -> v0.0.0-20260819142231-83cac42c1c52
go.etcd.io/etcd/api/v3	v3.6.8 -> v3.7.0
go.etcd.io/etcd/client/pkg/v3	v3.6.8 -> v3.7.0
go.etcd.io/etcd/client/v3	v3.6.8 -> v3.7.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	v0.69.0 -> v0.70.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace	v0.69.0 -> v0.70.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.69.0 -> v0.70.0
go.opentelemetry.io/otel	v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/metric	v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/sdk	v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/sdk/metric	v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/trace	v1.44.0 -> v1.45.0
go.opentelemetry.io/proto/otlp	v1.10.0 -> v1.11.0
google.golang.org/genproto/googleapis/api	v0.0.0-20260720171339-e059f2f05d78 -> v0.0.0-20260803160001-6ac0973c030d
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260720171339-e059f2f05d78 -> v0.0.0-20260803160001-6ac0973c030d
google.golang.org/grpc	v1.83.0 -> v1.83.2
google.golang.org/protobuf	v1.36.12-0.20260120151049-f2248ac996af -> v1.36.12
k8s.io/api	v0.36.3 -> v0.37.1
k8s.io/apimachinery	v0.36.3 -> v0.37.1
k8s.io/apiserver	v0.36.3 -> v0.37.1
k8s.io/client-go	v0.36.3 -> v0.37.1
k8s.io/component-base	v0.36.3 -> v0.37.1
k8s.io/kube-openapi	v0.0.0-20260624041617-8f3fa4921821 -> v0.0.0-20260721132016-d427ff9ee9ad
k8s.io/metrics	v0.36.3 -> v0.37.0
k8s.io/streaming	v0.36.3 -> v0.37.1
mvdan.cc/sh/v3	v3.13.1 -> v3.14.0
sigs.k8s.io/apiserver-network-proxy/konnectivity-client	v0.34.0 -> v0.36.0
sigs.k8s.io/structured-merge-diff/v6	v6.3.3 -> v6.4.2
tailscale.com	v1.102.2 -> v1.102.3