Bump the go group across 1 directory with 12 updates - #240
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the go group across 1 directory with 12 updates#240dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [chainguard.dev/apko](https://github.com/chainguard-dev/apko) | `1.2.12` | `1.2.29` | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.62.1` | `1.64.0` | | [github.com/chainguard-dev/terraform-infra-common](https://github.com/chainguard-dev/terraform-infra-common) | `1.0.7` | `1.25.2` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.9.0` | `5.9.1` | | [github.com/google/ko](https://github.com/google/ko) | `0.18.1` | `0.19.1` | | [github.com/sethvargo/go-envconfig](https://github.com/sethvargo/go-envconfig) | `1.3.0` | `1.4.3` | Updates `chainguard.dev/apko` from 1.2.12 to 1.2.29 - [Release notes](https://github.com/chainguard-dev/apko/releases) - [Changelog](https://github.com/chainguard-dev/apko/blob/main/NEWS.md) - [Commits](chainguard-dev/apko@v1.2.12...v1.2.29) Updates `cloud.google.com/go/storage` from 1.62.1 to 1.64.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@storage/v1.62.1...compute/v1.64.0) Updates `github.com/chainguard-dev/clog` from 1.8.0 to 1.8.1 - [Release notes](https://github.com/chainguard-dev/clog/releases) - [Commits](chainguard-dev/clog@v1.8.0...v1.8.1) Updates `github.com/chainguard-dev/terraform-infra-common` from 1.0.7 to 1.25.2 - [Release notes](https://github.com/chainguard-dev/terraform-infra-common/releases) - [Commits](chainguard-dev/terraform-infra-common@v1.0.7...v1.25.2) Updates `github.com/go-git/go-billy/v5` from 5.9.0 to 5.9.1 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.9.0...v5.9.1) Updates `github.com/go-git/go-git/v5` from 5.19.0 to 5.19.1 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.19.0...v5.19.1) Updates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.7 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.5...v0.21.7) Updates `github.com/google/ko` from 0.18.1 to 0.19.1 - [Release notes](https://github.com/google/ko/releases) - [Commits](ko-build/ko@v0.18.1...v0.19.1) Updates `github.com/sethvargo/go-envconfig` from 1.3.0 to 1.4.3 - [Release notes](https://github.com/sethvargo/go-envconfig/releases) - [Commits](sethvargo/go-envconfig@v1.3.0...v1.4.3) Updates `golang.org/x/mod` from 0.36.0 to 0.38.0 - [Commits](golang/mod@v0.36.0...v0.38.0) Updates `golang.org/x/sync` from 0.20.0 to 0.22.0 - [Commits](golang/sync@v0.20.0...v0.22.0) Updates `google.golang.org/api` from 0.278.0 to 0.289.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.278.0...v0.289.0) --- updated-dependencies: - dependency-name: chainguard.dev/apko dependency-version: 1.2.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: cloud.google.com/go/storage dependency-version: 1.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/chainguard-dev/clog dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/chainguard-dev/terraform-infra-common dependency-version: 1.25.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/google/ko dependency-version: 0.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/sethvargo/go-envconfig dependency-version: 1.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/mod dependency-version: 0.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/api dependency-version: 0.289.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go group with 6 updates in the / directory:
1.2.121.2.291.62.11.64.01.0.71.25.25.9.05.9.10.18.10.19.11.3.01.4.3Updates
chainguard.dev/apkofrom 1.2.12 to 1.2.29Release notes
Sourced from chainguard.dev/apko's releases.
... (truncated)
Commits
e391590Allow GitHub verified signatures in source policy (#2332)bed83b7build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (#2345)8922bbdbuild(deps): bump chainguard-dev/actions/setup-registry from 1.6.27 to 1.6.28...bee9883build(deps): bump chainguard.dev/sdk from 0.1.138 to 0.1.140 (#2344)9345f17build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in the go_modu...2200a73build(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 (#2333)534ebdcbuild(deps): bump go.step.sm/crypto from 0.84.1 to 0.85.0 (#2334)bb243a9build(deps): bump google.golang.org/api from 0.288.0 to 0.289.0 (#2337)1a98f08build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#2335)31842dfbuild(deps): bump github/codeql-action/init from 4.37.0 to 4.37.1 (#2338)Updates
cloud.google.com/go/storagefrom 1.62.1 to 1.64.0Release notes
Sourced from cloud.google.com/go/storage's releases.
Commits
1a476c1chore: librarian release pull request: 20260521T182442Z (#14627)dd8448bfix(pubsub/v2): manage exactly once spans properly on failure (#14559)b54d7a4feat(firestore): support Transaction ReadTime (#14615)6641db8feat: update API sources and regenerate (#14621)e753126chore: librarian release pull request: 20260519T161341Z (#14617)593f67dchore: update librarian to v0.14.0 (#14619)66c66c5feat(firestore): add Data and DataTo methods to AggregationResult (#14592)0a8d10dfix(datastore): detach rollback context from transaction cancellation (#14602)d52fff4chore(all): update module cloud.google.com/go/longrunning to v1 (main) (#14606)d29f68afeat(storage): read checksums in gRPC partial reads (#14586)Updates
github.com/chainguard-dev/clogfrom 1.8.0 to 1.8.1Release notes
Sourced from github.com/chainguard-dev/clog's releases.
Commits
01a0244fix: convert WARN string for cloud batch (#76)e522bddfix(ci): add persist-credentials: false and zizmor pedantic config (#69)a29ba66Bump step-security/harden-runner from 2.18.0 to 2.19.0 (#67)f2e76c2Bump step-security/harden-runner from 2.15.1 to 2.18.0 (#65)ca1e61dchore(workflows): add actionlint and zizmor action linters [SECINT-75] (#61)0d6447eBump step-security/harden-runner from 2.13.3 to 2.15.1 (#60)Updates
github.com/chainguard-dev/terraform-infra-commonfrom 1.0.7 to 1.25.2Release notes
Sourced from github.com/chainguard-dev/terraform-infra-common's releases.
... (truncated)
Commits
a58e1d2Rewrite local references for exportac2fcc9Export f5d70531c9f7cebe27ccc750918896f47268f44698009ccRewrite local references for export58aca88Export 0dc8cdd4fe1d5a85f2a1b534e53f971856143232dd421e1Rewrite local references for export34b120dExport fd43e1360133db5a374b4c6587d54a200503fc937bbbeaeExport 23b643cb14c79846970078f4e30a7e099a7083f41ce1545Rewrite local references for exportb19406aExport a438b56eff5394e57ea44209dc147913f7447e1edf29c94Rewrite local references for exportUpdates
github.com/go-git/go-billy/v5from 5.9.0 to 5.9.1Release notes
Sourced from github.com/go-git/go-billy/v5's releases.
Commits
19ea4ddMerge pull request #229 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...8923518build: Update module golang.org/x/net to v0.56.0 [SECURITY]306e011Merge pull request #230 from go-git/renovate/releases/v5.x-go-golang.org-x-te...6108d3abuild: Update module golang.org/x/text to v0.39.0 [SECURITY]f135070Merge pull request #216 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...473e72cbuild: Update module golang.org/x/net to v0.55.0 [SECURITY]Updates
github.com/go-git/go-git/v5from 5.19.0 to 5.19.1Release notes
Sourced from github.com/go-git/go-git/v5's releases.
Commits
3c3be60Merge pull request #2137 from go-git/validate-v53fba897plumbing: format/packfile, cap delta chain depth in parsera97d660Merge pull request #2125 from hiddeco/v5/format-input-boundsaeaa125plumbing: format/objfile, require Header before Read1f38e17plumbing: format/packfile, bound inflate sizef7545a0plumbing: format/idxfile, bound nr by file size170b881Merge pull request #2116 from pjbgf/symlink-v57b6d994Merge pull request #2117 from hiddeco/v5/worktree-fs-mkdirall-root-noopf0709b3git: Stop validating symlink target paths776d00fgit: Allow MkdirAll on worktree-root pathsUpdates
github.com/google/go-containerregistryfrom 0.21.5 to 0.21.7Release notes
Sourced from github.com/google/go-containerregistry's releases.
... (truncated)
Commits
c68d899Bump go version to 1.26.4 (#2350)da61d86transport: do not re-attach bearer token after cross-host redirect (#2349)09fe1e5fix(tarball): normalize paths when matching files (#2334)5baa399build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)97a8a17fix(transport): apply refreshed bearer token after cross-host redirect (#2337)e963497internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)02649eafix: prevent SSRF in google.List() pagination (#2332)7204b40build(deps): bump the actions group across 1 directory with 2 updates (#2344)4cfaa93build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)6849394pkg/registry: export RedirectError (#2177)Updates
github.com/google/kofrom 0.18.1 to 0.19.1Release notes
Sourced from github.com/google/ko's releases.
Commits
e388f65fix(e2e): add version context to registry.localhost commentfef0fbdfix(e2e): use registry.localhost instead of registry.locala3c437cbuild(deps): bump the gomod group across 1 directory with 9 updatesf3fc29cbuild(deps): bump github.com/sigstore/rekor from 1.5.1 to 1.5.27570c2dfix: skip yaml encoding when selector filters all documents81d77babuild(deps): bump the github-actions group with 11 updates (#1691)f3e9052Regenerate CLI reference docs for --ldflagsfcfe2aaMake --ldflags override per-build .ko.yaml ldflags1abde8dAdd --ldflags support for go builda7505e3build(deps): bump the github-actions group across 1 directory with 4 updates ...Updates
github.com/sethvargo/go-envconfigfrom 1.3.0 to 1.4.3Release notes
Sourced from github.com/sethvargo/go-envconfig's releases.
Commits
c883e6fDecode structs behind multi-level pointers and reject recursive pointer types...bdd371dDetect recursive struct types in processWith instead of overflowing the stack...f634b99Chain prefixLookuper.Key through a keyed wrapped lookuper (#138)cb11761Cut per-field allocations in Process (#140)e6252c0Modernize for Go 1.25 (#139)5c6903cFix non-terminating unwrap walk in prefixLookuper.Unwrap (#136)Updates
golang.org/x/modfrom 0.36.0 to 0.38.0Commits
792ac16go.mod: update golang.org/x dependenciesfe2ec04all: fix some comments to improve readabilitydeb1dfcgo.mod: update golang.org/x dependencies087f651modfile: use slices.Backward343ee60x/mod: allow for aggressively conslidating requiresUpdates
golang.org/x/syncfrom 0.20.0 to 0.22.0Commits
1eb64d4semaphore: panic on negative weights5071ed6all: fix some comments to improve readabilityUpdates
google.golang.org/apifrom 0.278.0 to 0.289.0Release notes
Sourced from google.golang.org/api's releases.