Skip to content

chore(deps): bump the go-minor group across 1 directory with 7 updates - #7112

Closed
dependabot[bot] wants to merge 1 commit into
release-1.11from
dependabot/go_modules/release-1.11/go-minor-e08090f64d
Closed

chore(deps): bump the go-minor group across 1 directory with 7 updates#7112
dependabot[bot] wants to merge 1 commit into
release-1.11from
dependabot/go_modules/release-1.11/go-minor-e08090f64d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor group with 7 updates in the / directory:

Package From To
connectrpc.com/grpchealth 1.4.0 1.5.0
github.com/aws/aws-sdk-go-v2/service/ecr 1.62.1 1.63.0
github.com/coreos/go-oidc/v3 3.20.0 3.21.0
github.com/klauspost/compress 1.19.2 1.20.0
gitlab.com/gitlab-org/api/client-go 1.24.0 1.46.0
google.golang.org/api 0.259.0 0.297.0
helm.sh/helm/v3 3.19.5 3.21.4

Updates connectrpc.com/grpchealth from 1.4.0 to 1.5.0

Release notes

Sourced from connectrpc.com/grpchealth's releases.

v1.5.0

What's Changed

Governance

Add @​timostamm as a maintainer in connectrpc/grpchealth-go#80 🎉

Enhancements

Other changes

Full Changelog: connectrpc/grpchealth-go@v1.4.0...v1.5.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.62.1 to 1.63.0

Commits

Updates github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.21.0

What's Changed

New Contributors

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

Commits
  • c914bd3 oidc: ignore JWKs with unsupported key types rather than failing
  • See full diff in compare view

Updates github.com/klauspost/compress from 1.19.2 to 1.20.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.0

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.19.2...v1.20.0

Commits
  • 9d8ccb1 flate: Writer with a preset dictionary emits the dictionary into the output s...
  • f93f23a build(deps): bump the github-actions group with 6 updates (#1200)
  • 42f9d96 xpress: add Microsoft XPRESS (MS-XCA) decompression (#1195)
  • 629c2ea zstd/huff0: break false partial-register dependencies in seqdec/4X decoders (...
  • ba74977 ci: test against go1.27.x, drop go1.24.x (#1198)
  • f5c1529 zstd/huff0: pin avo peephole folds, regenerate arm64 (#1199)
  • 73508b2 s2: arm64 assembly encoders, lowered from the amd64 avo program (#1187)
  • 0e43f04 xxhash: bound input of non-preemptive assembly (#1196)
  • 4005c15 s2: clamp the Go EncodeBetter skip to match the assembly (#1190)
  • dd6de45 gzhttp: limit jitter hash to jitterBuffer bytes (#1192)
  • Additional commits viewable in compare view

Updates gitlab.com/gitlab-org/api/client-go from 1.24.0 to 1.46.0

Changelog

Sourced from gitlab.com/gitlab-org/api/client-go's changelog.

1.46.0

🚀 Features

1.46.0 (2026-03-01)

1.45.0

🚀 Features

🔄 Other Changes

1.45.0 (2026-02-27)

Bug Fixes

  • test: Use epic IID instead of ID in DeleteEpic cleanup. (49dea05)

1.44.0

🚀 Features

  • Implement runner controller instance-level runner scope support (!2765) by Timo Furrer

🔄 Other Changes

1.44.0 (2026-02-26)

1.43.0

🚀 Features

... (truncated)

Commits
  • da7b8a7 chore(release): 1.46.0 [skip ci]
  • 072590b Merge branch 'Update_Urls_and_add-missing' into 'main'
  • 8b63461 Update urls and add missing
  • 0abd5ce chore(release): 1.45.0 [skip ci]
  • 6f5a6da Merge branch 'issue_#2237' into 'main'
  • 06094f9 Add LockMembershipsToSAML support to Application Settings
  • 37ff76b Merge branch 'fforster/epic-cleanup' into 'main'
  • 49dea05 fix(test): Use epic IID instead of ID in DeleteEpic cleanup.
  • 1e294d4 chore(release): 1.44.0 [skip ci]
  • 69b78fe Merge branch 'rc-runner-scopes' into 'main'
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.259.0 to 0.297.0

Release notes

Sourced from google.golang.org/api's releases.

v0.297.0

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

v0.296.0

0.296.0 (2026-08-31)

Features

v0.295.0

0.295.0 (2026-08-28)

Features

v0.294.0

0.294.0 (2026-08-26)

Features

v0.293.0

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

0.296.0 (2026-08-31)

Features

0.295.0 (2026-08-28)

Features

0.294.0 (2026-08-26)

Features

0.293.0 (2026-08-11)

Features

... (truncated)

Commits

Updates helm.sh/helm/v3 from 3.19.5 to 3.21.4

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #32303 by @​mahesh-sadupalli
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #32463 by @​karan-vk
  • [dev-v3 backport] fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158- #32535 by @​scottrigby
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061- #32536 by @​scottrigby
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #32308

Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 813176c51bb5c181dbbd7901298ddcc104cd3417 (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 b6aa8b1d71140347f75ef0b77fac91f28ffe10b3 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 57ce7aeec1eb82422c5c349dfadda20ea3f743fe (Scott Rigby)
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449c76f66e55064ae4503a6e7adae21dcfa9 (Karan V)
  • fix(engine): prevent Files.Lines panic on empty file 955dfab1e6bdd70b5ccd7b932b2d500e9e26566c (Mahesh Sadupalli)

... (truncated)

Commits
  • 813176c chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308)
  • b6aa8b1 [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061
  • 57ce7ae fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158
  • ab71449 fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932
  • 955dfab fix(engine): prevent Files.Lines panic on empty file
  • 1ad6e68 Apply suggestions from code review
  • 037733e fix: drop containerd v1 dep to resolve govulncheck CVEs
  • d3e178b chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33
  • 1259634 chore(deps): bump the k8s-io group with 2 updates
  • b52e276 fixes
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-minor group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [connectrpc.com/grpchealth](https://github.com/connectrpc/grpchealth-go) | `1.4.0` | `1.5.0` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.62.1` | `1.63.0` |
| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.20.0` | `3.21.0` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.19.2` | `1.20.0` |
| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `1.24.0` | `1.46.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.259.0` | `0.297.0` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.5` | `3.21.4` |



Updates `connectrpc.com/grpchealth` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/connectrpc/grpchealth-go/releases)
- [Commits](connectrpc/grpchealth-go@1.4.0...v1.5.0)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/iot/v1.62.1...service/s3/v1.63.0)

Updates `github.com/coreos/go-oidc/v3` from 3.20.0 to 3.21.0
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.20.0...v3.21.0)

Updates `github.com/klauspost/compress` from 1.19.2 to 1.20.0
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.19.2...v1.20.0)

Updates `gitlab.com/gitlab-org/api/client-go` from 1.24.0 to 1.46.0
- [Release notes](https://gitlab.com/gitlab-org/api/client-go/tags)
- [Changelog](https://gitlab.com/gitlab-org/api/client-go/blob/main/CHANGELOG.md)
- [Commits](https://gitlab.com/gitlab-org/api/client-go/compare/v1.24.0...v1.46.0)

Updates `google.golang.org/api` from 0.259.0 to 0.297.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.259.0...v0.297.0)

Updates `helm.sh/helm/v3` from 3.19.5 to 3.21.4
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.19.5...v3.21.4)

---
updated-dependencies:
- dependency-name: connectrpc.com/grpchealth
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: gitlab.com/gitlab-org/api/client-go
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: google.golang.org/api
  dependency-version: 0.297.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.21.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code labels Sep 5, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 5, 2026 16:10
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code labels Sep 5, 2026
@kargo-governance-bot kargo-governance-bot Bot added needs/area Issue or PR needs to be labeled to indicate what parts of the code base are affected needs/kind Issue or PR needs to be labeled to clarify its nature needs/priority Priority has not yet been determined; a good signal that maintainers aren't fully committed labels Sep 5, 2026
@netlify

netlify Bot commented Sep 5, 2026

Copy link
Copy Markdown

Deploy Preview for docs-kargo-io ready!

Name Link
🔨 Latest commit ebde671
🔍 Latest deploy log https://app.netlify.com/projects/docs-kargo-io/deploys/6a9c3f07b41c78000841c4b3
😎 Deploy Preview https://deploy-preview-7112.docs.kargo.io
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@krancour krancour closed this Sep 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/go_modules/release-1.11/go-minor-e08090f64d branch September 5, 2026 16:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code needs/area Issue or PR needs to be labeled to indicate what parts of the code base are affected needs/kind Issue or PR needs to be labeled to clarify its nature needs/priority Priority has not yet been determined; a good signal that maintainers aren't fully committed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant