Skip to content

🌱 Bump the gomod group across 2 directories with 23 updates - #5160

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-d20dd13c79
Closed

🌱 Bump the gomod group across 2 directories with 23 updates#5160
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-d20dd13c79

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 14 updates in the / directory:

Package From To
cloud.google.com/go/bigquery 1.73.1 1.79.0
cloud.google.com/go/pubsub 1.50.1 1.51.0
github.com/bradleyfalzon/ghinstallation/v2 2.17.0 2.19.0
github.com/go-git/go-git/v5 5.19.1 5.19.2
github.com/go-logr/logr 1.4.3 1.4.4
github.com/google/go-containerregistry 0.21.0 0.21.9
github.com/moby/buildkit 0.26.3 0.32.2
github.com/onsi/gomega 1.39.1 1.42.1
go.yaml.in/yaml/v3 3.0.4 3.0.5
gocloud.dev 0.44.0 0.46.0
mvdan.cc/sh/v3 3.12.0 3.13.1
github.com/google/osv-scanner/v2 2.3.2 2.5.0
github.com/onsi/ginkgo/v2 2.28.0 2.32.0
gitlab.com/gitlab-org/api/client-go 1.41.0 1.46.0

Bumps the gomod group with 4 updates in the /tools directory: github.com/onsi/ginkgo/v2, github.com/golangci/golangci-lint/v2, github.com/google/ko and github.com/goreleaser/goreleaser/v2.

Updates cloud.google.com/go/bigquery from 1.73.1 to 1.79.0

Release notes

Sourced from cloud.google.com/go/bigquery's releases.

bigquery: v1.79.0

1.79.0 (2026-07-13)

Features

Commits

Updates cloud.google.com/go/pubsub from 1.50.1 to 1.51.0

Release notes

Sourced from cloud.google.com/go/pubsub's releases.

pubsub: v1.51.0

1.51.0 (2026-07-15)

Features

bigtable: v1.51.0

1.51.0 (2026-07-23)

Features

  • bigtable: Add ChainInterceptors and RetryingVRpc for vRPC pipeline (#20185) (c7a832a)
  • bigtable: Add ClientConfigurationManager (#19986) (3a8f927)
  • bigtable: Add debug tag counter (recordDebugTag / assertDebugTag) (#20114) (3c97590)
  • bigtable: Add lazyPool helper for on-demand session pool opening (#20182) (f6ae3fb)
  • bigtable: Add PeakEwma continuous time-decay latency tracker (#20187) (9d124ef)
  • bigtable: Add PoolSizer for server-driven session pool capacity (#20189) (57ebbeb)
  • bigtable: Add session package with SessionClient + SessionTableAPI interfaces (#20180) (4b82fd2)
  • bigtable: Add Session primitives (AttemptOutcome, vRPC ctx, msgtype) (#20116) (e1011e2)
  • bigtable: Add Session state enum (#19981) (0748972)
  • bigtable: Add SessionThrottler / AdaptiveSessionThrottler for OpenSession pacing (#20184) (02e3c6d)
  • bigtable: Add SessionThrottler / AdaptiveSessionThrottler for OpenSession pacing (#20184) (29be83e)
  • bigtable: Add sessionTracer for per-Session lifecycle + vRPC metrics (#20190) (a466345)
  • bigtable: Enable new auth library and JWT for instance admin client (#20013) (21c4a44)
  • bigtable: Modularize channel priming behind a ChannelPrimer interface (#20027) (5214ab7)
  • bigtable: Modularize Direct Access compatibility check (#19987) (a25e93d)
  • o11y: Regenerate clients for LRO tracing (#20107) (779074e)

Bug Fixes

  • bigtable: Default cluster/zone in toOtelMetricAttrs to avoid Monitoring reject (#20178) (14493f4)
  • bigtable: Eliminate stats-handler MD race in internal/metrics tracer (#20158) (c387066)
Commits
  • 24439fa chore(main): release pubsub 1.51.0 (#20162)
  • baca5e1 chore(main): release pubsublite 1.10.0 (#20135)
  • 07020a7 chore(main): release firestore 1.24.0 (#20132)
  • 6395ba5 feat: update API sources and regenerate (#20159)
  • 198e9fb chore(main): release datastore 1.25.0 (#20143)
  • 994535e chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /agentplatform...
  • 900dd46 feat: new productregistry v1 (#20156)
  • 100358a feat(maps): onboard isochrones v1 api (#20155)
  • 83772f5 fix(spanner): roll back read-write transaction before retrying caller-returne...
  • 1eb96d0 feat: Onboard Vertex Model Garden to GenAI Python SDK: Add list_custom_model_...
  • Additional commits viewable in compare view

Updates github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.19.0

Release notes

Sourced from github.com/bradleyfalzon/ghinstallation/v2's releases.

v2.19.0

What's Changed

Full Changelog: bradleyfalzon/ghinstallation@v2.18.0...v2.19.0

v2.18.0

What's Changed

Full Changelog: bradleyfalzon/ghinstallation@v2.17.0...v2.18.0

Commits
  • c8d44a3 Merge pull request #190 from bradleyfalzon/dependabot/github_actions/actions-...
  • 258bb5f Merge pull request #192 from asvoboda/as/upgrade-88
  • 2e06ce4 Update go-github to v88
  • 7d6dce6 Bump the actions group across 1 directory with 2 updates
  • 749b4c6 Update go-github to v85
  • 1237274 Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0
  • c9c5e67 Bump actions/checkout from 5.0.0 to 6.0.2
  • f5640e5 Update google/go-github to v84
  • 6e26acb drop deprecated go versions
  • 0e0f2d4 fix lints
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.2

What's Changed

Full Changelog: go-git/go-git@v5.19.1...v5.19.2

Commits
  • 3eeb238 Merge pull request #2277 from go-git/checkout-v5
  • 008a78f git: worktree, make the filesystem wrapper a symlink-safe boundary
  • 2263fb5 Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...
  • 77b7625 build: Update module golang.org/x/text to v0.39.0 [SECURITY]
  • 85ea767 Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...
  • 198675a build: Update module golang.org/x/net to v0.56.0 [SECURITY]
  • 4a0e66d Merge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment
  • 3b306ef storage: dotgit, align reference-name safety with refname_is_safe
  • f3d0cc1 storage: dotgit, reject path traversal in reference names
  • 979cfe9 Merge pull request #2262 from joshblum/joshblum/to-slash-v5
  • Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits
  • 96a9aba Fix lint
  • 51c6302 Better implementation of pointer recursion checking
  • c667114 funcr: Handle and test recursive values
  • f7ffadb Add benchmark for pointer args
  • e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
  • 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
  • 0b40896 build(deps): bump github/codeql-action/upload-sarif
  • 77f671b Bump to Go 1.26
  • cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
  • 3832a11 build(deps): bump github/codeql-action/upload-sarif
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.0 to 0.21.9

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.9

What's Changed

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

v0.21.7

What's Changed

... (truncated)

Commits
  • 7b32099 build(deps): bump the actions group with 3 updates (#2398)
  • 2a4447d fix: remove '.' from unsafe path prefixes (#2400)
  • 43cc3e8 fix: prevent data race on scope refreshes within remote.writer (#2396)
  • 7775aab actions: pin slsa generator version following linter exception (#2395)
  • 2ea098f Bump go version to 1.26.5 (#2388)
  • ec2e586 actions: reformat ALL actions (#2386)
  • ab819b6 actions: fix unformatted action (#2385)
  • eed9a20 actions: update actions to be pinned by hash (#2384)
  • 8a97709 build(deps): bump github.com/moby/moby/client (#2380)
  • d04bf7d tarball: use correct file extension for zstd/uncompressed (#2382)
  • Additional commits viewable in compare view

Updates github.com/moby/buildkit from 0.26.3 to 0.32.2

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.32.2

Welcome to the v0.32.2 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax

Notable Changes

  • Revert the v0.32.1 OCI artifact attestation push-order workaround, restoring BuildKit's spec-aligned behavior of allowing referrers to be pushed before their subject manifests. #7016

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.32.1

v0.32.1

Welcome to the v0.32.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax

Notable Changes

  • Fix archive extraction through implied parent directories and absolute symlinks. #7005
  • Fix OCI artifact attestation pushes to registries that strictly validate subject references. #7012

Dependency Changes

  • github.com/moby/go-archive v0.2.1 -> v0.2.0

Previous release can be found at v0.32.0

v0.32.0

Welcome to the v0.32.0 release of buildkit!

... (truncated)

Commits
  • 991535e Merge pull request #7016 from crazy-max/v0.32_backport_7015
  • b4e609f exporter: revert attestation manifest push order
  • f1697c4 Merge pull request #7013 from crazy-max/v0.32-backport-7012
  • c300afc exporter: fix attestation manifest push order
  • 68bcd7d Merge pull request #7006 from crazy-max/v0.32-pick-0.32.1
  • 640eb23 dockerfile: test ADD hardlinks through absolute symlinks
  • c7dc8c8 dockerfile: regression test for ADD archives through absolute symlinks
  • f3b57e4 dockerfile: regression test for ADD archives with implied parents
  • 5f3d92c Revert "vendor: github.com/moby/go-archive v0.2.1"
  • f5d08d5 Merge pull request #6992 from crazy-max/fix-export-finalize-test
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.39.1 to 1.42.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

v1.41.0

No release notes provided.

v1.40.0

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

Commits

Updates go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4

Commits
  • 43b627a Replace gopkg.in/check.v1 with the standard testing library
  • See full diff in compare view

Updates go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5

Commits
  • e16c7af Remove empty go.sum file
  • 6abcd01 Fix unhandled nil-errors in tests
  • 9481db7 Remove suite_test.go and gopkg.in/check.v1
  • 485f5fc Use standard testing library for limit_test.go
  • 3e00046 Use standard testing library for node_test.go
  • f612058 Use standard testing library for decode_test.go
  • 078f958 Use standard testing library encode_test.go
  • 3847ac0 [v3] backport CodeQL workflow
  • 1666663 Revert incorrect gofmt changes
  • 73290cb Retract v3 tags that cannot be installed
  • See full diff in compare view

Updates gocloud.dev from 0.44.0 to 0.46.0

Release notes

Sourced from gocloud.dev's releases.

v0.46.0

BREAKING_CHANGE:

  • blob/s3blob: migrate from deprecated s3/manager to s3/transfermanager by @​vangent in google/go-cloud#3717
    • Only breaking if you're using As to access specific AWS types from the old manager.

What's Changed

all

blob:

runtimevar:

pubsub

docstore

secrets

postgres

New Contributors

Full Changelog: google/go-cloud@v0.45.0...v0.46.0

v0.45.0

What's Changed

... (truncated)

Commits
  • 60f0d74 all: prerelease
  • a1725f0 blob/s3blob: migrate from deprecated s3/manager to s3/transfermanager (#3717)
  • 7eadd65 aws: add AWS IAM Role assumption support (#3716)
  • 054c82e postgres/awspostgres: add IAM authentication support (#3713)
  • 2b85c85 docs: fix Pub/Sub subscribe wording (#3714)
  • b9dee8d build: add top-level permissions restriction to tests workflow (#3711)
  • 45a8cfc docstore: support unwrapping ActionListError for use with errors.Is (#3705)
  • 78b5976 all: support typed errors and errors.Is for error codes (#3708)
  • 595f8b6 all: update another otel dep (#3701)
  • c903aef all: update otel deps (#3699)
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.36.0 to 0.40.0

Commits
  • 724af9c go.mod: update golang.org/x dependencies
  • bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
  • b326f3d go.mod: update golang.org/x dependencies
  • 5ae8e57 unicode/norm: avoid infinite loop on invalid input
  • 0dc94a2 all: fix some comments
  • f4bb632 go.mod: update golang.org/x dependencies
  • 3ef517e go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

Updates mvdan.cc/sh/v3 from 3.12.0 to 3.13.1

Release notes

Sourced from mvdan.cc/sh/v3's releases.

v3.13.1

  • cmd/shfmt
    • Add support for [[zsh]] in EditorConfig files
    • Detect the shell variant from filenames like .zshrc and .bash_profile
    • Fix --apply-ignore when used with explicit args - #1310
  • syntax
    • Revert an accidental change to how array subscripts are formatted - #1314
    • Never join ;; with the previous line when formatting - #1289
    • Fix a bug where $1[foo] was parsed as a subscript in Zsh - #1288
    • Correctly parse $! in double quotes in Zsh - #1298
    • Allow indexing into special parameters in Zsh - #1299
    • Allow parameter expansions with empty names in Zsh - #1280
  • interp
    • Test against Bash 5.3 and fix three new discrepancies
    • Fix a few bugs related to nameref variables
    • Avoid panics when user input encounters unimplemented features

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.26.1 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

v3.13.0

This release introduces support for Zsh in the parser and formatter, which was tracked in issue #120 alongside the label https://github.com/mvdan/sh/labels/zsh. While support is not complete, it should be far enough for many use cases.

This release also drops support for Go 1.24 and includes many other enhancements:

  • cmd/shfmt
    • Exit with a non-zero status when -l prints any filenames
    • shfmt -version is now derived from the git current tag, dropping the -ldflags workaround
  • syntax
    • New nodes types and node fields are introduced alongside LangZsh
    • LangVariant is now a bitset, allowing the use of sets like "Bash-like"
    • Add InteractiveSeq and StmtsSeq iterator methods for Parser
    • Stop exposing the internal buffer in Printer via struct embedding
    • Support the use of brace expansions like declare {a,b}_c=value
    • Fix a bug where POSIX and Bash incorrectly allowed empty command lists
  • interp
    • Add support for shopt -s dotglob and shopt -s extglob
    • Add support for simple uses of !(expr) extended glob patterns
    • Support more builtin flags for declare, type, read
    • Fix various bugs relating to nulls, errors, and arrays
  • expand
    • Add Config.DotGlob and Config.ExtGlob for the interpreter
    • Add Variable.Flags to get the one-character declare flags
    • Do not force env vars on Windows to be uppercase
    • Fix various bugs relating to glob pattern matching
  • Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 4, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 4, 2026 23:29
@dependabot
dependabot Bot requested review from AdamKorcz and spencerschrock and removed request for a team August 4, 2026 23:29
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 4, 2026
@dependabot
dependabot Bot had a problem deploying to integration-test August 4, 2026 23:29 Failure
@dosubot dosubot Bot added the size:XL This PR changes 500-999 lines, ignoring generated files. label Aug 4, 2026
@dosubot

dosubot Bot commented Aug 4, 2026

Copy link
Copy Markdown

📄 Knowledge review

Dosu skipped reviewing this PR because your organization has used its 200 included credits for the month. Your usage will reset on 2026-09-01. To have Dosu review this PR before then, ask your organization admin to upgrade to a pro account.

Leave Feedback Ask Dosu about scorecard Add Dosu to your team

@justaugustus
justaugustus enabled auto-merge (squash) August 5, 2026 00:38
@dependabot
🌱 Bump the gomod group across 2 directories with 23 updates
82f5510 
Bumps the gomod group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) | `1.73.1` | `1.79.0` |
| [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) | `1.50.1` | `1.51.0` |
| [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) | `2.17.0` | `2.19.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.19.1` | `5.19.2` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.3` | `1.4.4` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.0` | `0.21.9` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.26.3` | `0.32.2` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.39.1` | `1.42.1` |
| [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) | `3.0.4` | `3.0.5` |
| [gocloud.dev](https://github.com/google/go-cloud) | `0.44.0` | `0.46.0` |
| [mvdan.cc/sh/v3](https://github.com/mvdan/sh) | `3.12.0` | `3.13.1` |
| [github.com/google/osv-scanner/v2](https://github.com/google/osv-scanner) | `2.3.2` | `2.5.0` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.0` | `2.32.0` |
| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `1.41.0` | `1.46.0` |

Bumps the gomod group with 4 updates in the /tools directory: [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo), [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint), [github.com/google/ko](https://github.com/google/ko) and [github.com/goreleaser/goreleaser/v2](https://github.com/goreleaser/goreleaser).


Updates `cloud.google.com/go/bigquery` from 1.73.1 to 1.79.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@bigquery/v1.73.1...spanner/v1.79.0)

Updates `cloud.google.com/go/pubsub` from 1.50.1 to 1.51.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v1.50.1...pubsub/v1.51.0)

Updates `github.com/bradleyfalzon/ghinstallation/v2` from 2.17.0 to 2.19.0
- [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases)
- [Commits](bradleyfalzon/ghinstallation@v2.17.0...v2.19.0)

Updates `github.com/go-git/go-git/v5` from 5.19.1 to 5.19.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.19.1...v5.19.2)

Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.3...v1.4.4)

Updates `github.com/google/go-containerregistry` from 0.21.0 to 0.21.9
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.0...v0.21.9)

Updates `github.com/moby/buildkit` from 0.26.3 to 0.32.2
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.26.3...v0.32.2)

Updates `github.com/onsi/gomega` from 1.39.1 to 1.42.1
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.39.1...v1.42.1)

Updates `go.yaml.in/yaml/v2` from 2.4.3 to 2.4.4
- [Commits](yaml/go-yaml@v2.4.3...v2.4.4)

Updates `go.yaml.in/yaml/v3` from 3.0.4 to 3.0.5
- [Commits](yaml/go-yaml@v3.0.4...v3.0.5)

Updates `gocloud.dev` from 0.44.0 to 0.46.0
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.44.0...v0.46.0)

Updates `golang.org/x/text` from 0.36.0 to 0.40.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.36.0...v0.40.0)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

Updates `mvdan.cc/sh/v3` from 3.12.0 to 3.13.1
- [Release notes](https://github.com/mvdan/sh/releases)
- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)
- [Commits](mvdan/sh@v3.12.0...v3.13.1)

Updates `github.com/google/osv-scanner/v2` from 2.3.2 to 2.5.0
- [Release notes](https://github.com/google/osv-scanner/releases)
- [Changelog](https://github.com/google/osv-scanner/blob/main/CHANGELOG.md)
- [Commits](google/osv-scanner@v2.3.2...v2.5.0)

Updates `github.com/in-toto/attestation` from 1.1.2 to 1.2.0
- [Release notes](https://github.com/in-toto/attestation/releases)
- [Commits](in-toto/attestation@v1.1.2...v1.2.0)

Updates `github.com/onsi/ginkgo/v2` from 2.28.0 to 2.32.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.32.0)

Updates `gitlab.com/gitlab-org/api/client-go` from 1.41.0 to 1.46.0
- [Release notes](https://gitlab.com/gitlab-org/api/client-go/tags)
- [Changelog](https://gitlab.com/gitlab-org/api/client-go/blob/main/CHANGELOG.md)
- [Commits](https://gitlab.com/gitlab-org/api/client-go/compare/v1.41.0...v1.46.0)

Updates `cloud.google.com/go/storage` from 1.59.0 to 1.62.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@compute/v1.59.0...storage/v1.62.3)

Updates `github.com/go-git/go-billy/v5` from 5.9.0 to 5.9.1
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.9.0...v5.9.1)

Updates `github.com/onsi/ginkgo/v2` from 2.28.0 to 2.32.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.32.0)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

Updates `github.com/onsi/ginkgo/v2` from 2.28.1 to 2.32.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.32.0)

Updates `github.com/golangci/golangci-lint/v2` from 2.10.1 to 2.12.2
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md)
- [Commits](golangci/golangci-lint@v2.10.1...v2.12.2)

Updates `github.com/google/ko` from 0.18.1 to 0.19.1
- [Release notes](https://github.com/google/ko/releases)
- [Commits](ko-build/ko@v0.18.1...v0.19.1)

Updates `github.com/goreleaser/goreleaser/v2` from 2.12.2 to 2.17.1
- [Release notes](https://github.com/goreleaser/goreleaser/releases)
- [Commits](goreleaser/goreleaser@v2.12.2...v2.17.1)

Updates `github.com/onsi/ginkgo/v2` from 2.28.1 to 2.32.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.32.0)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-version: 1.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: cloud.google.com/go/pubsub
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.62.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/bradleyfalzon/ghinstallation/v2
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/golangci/golangci-lint/v2
  dependency-version: 2.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/google/ko
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/google/osv-scanner/v2
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/goreleaser/goreleaser/v2
  dependency-version: 2.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/in-toto/attestation
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.42.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: gitlab.com/gitlab-org/api/client-go
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: gocloud.dev
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/text
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12-0.20260120151049-f2248ac996af
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12-0.20260120151049-f2248ac996af
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12-0.20260120151049-f2248ac996af
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: mvdan.cc/sh/v3
  dependency-version: 3.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/gomod-d20dd13c79 branch from 747109b to 82f5510 Compare August 10, 2026 08:27
@dependabot
dependabot Bot had a problem deploying to integration-test August 10, 2026 08:27 Failure
@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 17, 2026
auto-merge was automatically disabled August 17, 2026 08:25

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/go_modules/gomod-d20dd13c79 branch August 17, 2026 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@spencerschrock spencerschrock Awaiting requested review from spencerschrock spencerschrock is a code owner automatically assigned from ossf/scorecard-maintainers
@AdamKorcz AdamKorcz Awaiting requested review from AdamKorcz AdamKorcz is a code owner automatically assigned from ossf/scorecard-maintainers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size:XL This PR changes 500-999 lines, ignoring generated files.

Projects

OpenSSF Scorecard
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants