Skip to content

chore(deps): bump the go-patch group across 1 directory with 9 updates - #6864

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-patch-ca6569b22b
Open

chore(deps): bump the go-patch group across 1 directory with 9 updates#6864
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-patch-ca6569b22b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-patch group with 6 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go-v2 1.43.2 1.43.6
github.com/aws/aws-sdk-go-v2/config 1.32.33 1.32.37
github.com/aws/aws-sdk-go-v2/service/ecr 1.60.2 1.60.6
github.com/google/go-containerregistry 0.21.7 0.21.9
github.com/klauspost/compress 1.19.1 1.19.2
helm.sh/helm/v3 3.21.3 3.21.4

Updates github.com/aws/aws-sdk-go-v2 from 1.43.2 to 1.43.6

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.33 to 1.32.37

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.32 to 1.19.36

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.60.2 to 1.60.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.45.2 to 1.45.6

Commits

Updates github.com/aws/smithy-go from 1.27.5 to 1.27.8

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.8
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.7
    • Bug Fix: Don't serialize unset JSON documents as nil in structure members.
    • Bug Fix: Fix a deserialization panic around collection members in recursive shape configs.

Release (2026-07-31)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.6
    • Bug Fix: Fix failure to deserialize any @httpPayload struct with a non-string member.
    • Bug Fix: Fix failure to serialize any @httpPayload struct with a nested struct.

Release (2026-07-27)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.5
    • Bug Fix: Fix a performance issue in awsQuery with large response payloads.

... (truncated)

Commits
  • b6ea087 Release 2026-08-14
  • 496caee fix: drain response body before closing in CloseResponseBody (#696)
  • c589db5 Release 2026-08-07
  • 6a87093 pool byte buffers on deserialize + string arena (#693)
  • f391c60 fixup json snaps and deser (#692)
  • 1380d84 feat: move close-body, logger, and service-metadata work out of the middlewar...
  • d35099b fix schema-serde sparse collection deser to not point to the same value (#691)
  • adb847f Release 2026-07-31
  • 96461b2 fix bad http binding deser (#690)
  • 055e50f handle null cbor struct val (#689)
  • See full diff in compare view

Updates github.com/google/go-containerregistry from 0.21.7 to 0.21.9

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.9

What's Changed

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

Commits
  • 7b32099 build(deps): bump the actions group with 3 updates (#2398)
  • 2a4447d fix: remove '.' from unsafe path prefixes (#2400)
  • 43cc3e8 fix: prevent data race on scope refreshes within remote.writer (#2396)
  • 7775aab actions: pin slsa generator version following linter exception (#2395)
  • 2ea098f Bump go version to 1.26.5 (#2388)
  • ec2e586 actions: reformat ALL actions (#2386)
  • ab819b6 actions: fix unformatted action (#2385)
  • eed9a20 actions: update actions to be pinned by hash (#2384)
  • 8a97709 build(deps): bump github.com/moby/moby/client (#2380)
  • d04bf7d tarball: use correct file extension for zstd/uncompressed (#2382)
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.19.1 to 1.19.2

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.2

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.19.1...v1.19.2

Commits
  • c3b3439 zstd: don't clear the registered dictionary when decoding past the window (#1...
  • 9874bc9 fix(zstd): handle zero-literal BuildDict corpus (#1178)
  • 71bb6fd zstd: keep BuildDict recent-offsets positive and loadable (#1184)
  • 3d4dacb zstd: avoid racing MaxDecodedSize write on shared dict litEnc (#1182)
  • 3ceaa81 build(deps): bump the github-actions group with 5 updates (#1185)
  • 72cb4d3 chore: add OpenSSF Scorecard GitHub Action (#1183)
  • 69c9db4 zstd: fix arm64 asm locals overwriting the saved link register (#1176)
  • 117430d zstd: Re-enable unsafe decodeSync memory copies (#1168) (#1171)
  • c73af0c huff0: add arm64 assembly for Decompress4X/1X via avo lowering (#1172)
  • See full diff in compare view

Updates helm.sh/helm/v3 from 3.21.3 to 3.21.4

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #32303 by @​mahesh-sadupalli
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #32463 by @​karan-vk
  • [dev-v3 backport] fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158- #32535 by @​scottrigby
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061- #32536 by @​scottrigby
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #32308

Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 813176c51bb5c181dbbd7901298ddcc104cd3417 (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 b6aa8b1d71140347f75ef0b77fac91f28ffe10b3 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 57ce7aeec1eb82422c5c349dfadda20ea3f743fe (Scott Rigby)
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449c76f66e55064ae4503a6e7adae21dcfa9 (Karan V)
  • fix(engine): prevent Files.Lines panic on empty file 955dfab1e6bdd70b5ccd7b932b2d500e9e26566c (Mahesh Sadupalli)

... (truncated)

Commits
  • 813176c chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308)
  • b6aa8b1 [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061
  • 57ce7ae fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158
  • ab71449 fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932
  • 955dfab fix(engine): prevent Files.Lines panic on empty file
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-patch group across 1 directory with 9 updates
4a2ce94 
Bumps the go-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.2` | `1.43.6` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.33` | `1.32.37` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.60.2` | `1.60.6` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.7` | `0.21.9` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.19.1` | `1.19.2` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.21.3` | `3.21.4` |



Updates `github.com/aws/aws-sdk-go-v2` from 1.43.2 to 1.43.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.43.2...v1.43.6)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.33 to 1.32.37
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.33...config/v1.32.37)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.32 to 1.19.36
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.32...credentials/v1.19.36)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.60.2 to 1.60.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.60.2...service/ecr/v1.60.6)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.45.2 to 1.45.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecr/v1.45.2...service/sts/v1.45.6)

Updates `github.com/aws/smithy-go` from 1.27.5 to 1.27.8
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.27.5...v1.27.8)

Updates `github.com/google/go-containerregistry` from 0.21.7 to 0.21.9
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.7...v0.21.9)

Updates `github.com/klauspost/compress` from 1.19.1 to 1.19.2
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.19.1...v1.19.2)

Updates `helm.sh/helm/v3` from 3.21.3 to 3.21.4
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.21.3...v3.21.4)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.43.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.60.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.45.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-patch
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.27.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-patch
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-patch
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-patch
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code labels Aug 23, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 23, 2026 05:28
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code labels Aug 23, 2026
@netlify

netlify Bot commented Aug 23, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for docs-kargo-io ready!

Name Link
🔨 Latest commit 4a2ce94
🔍 Latest deploy log https://app.netlify.com/projects/docs-kargo-io/deploys/6a8a84f4b29bc80008a33030
😎 Deploy Preview https://deploy-preview-6864.docs.kargo.io
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@kargo-governance-bot kargo-governance-bot Bot added needs/area Issue or PR needs to be labeled to indicate what parts of the code base are affected needs/kind Issue or PR needs to be labeled to clarify its nature needs/priority Priority has not yet been determined; a good signal that maintainers aren't fully committed labels Aug 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code needs/area Issue or PR needs to be labeled to indicate what parts of the code base are affected needs/kind Issue or PR needs to be labeled to clarify its nature needs/priority Priority has not yet been determined; a good signal that maintainers aren't fully committed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants