Skip to content

🌱 Bump the gomod group across 2 directories with 24 updates - #5184

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-cce1a8bdc8
Open

🌱 Bump the gomod group across 2 directories with 24 updates#5184
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-cce1a8bdc8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 15 updates in the / directory:

Package From To
cloud.google.com/go/bigquery 1.73.1 1.80.0
cloud.google.com/go/pubsub 1.50.1 1.51.0
github.com/bradleyfalzon/ghinstallation/v2 2.17.0 2.19.0
github.com/go-git/go-git/v5 5.19.1 5.19.2
github.com/go-logr/logr 1.4.3 1.4.4
github.com/google/go-containerregistry 0.21.0 0.21.9
github.com/moby/buildkit 0.26.3 0.32.2
github.com/onsi/gomega 1.39.1 1.42.1
github.com/sirupsen/logrus 1.9.4 1.10.0
go.yaml.in/yaml/v3 3.0.4 3.0.5
gocloud.dev 0.44.0 0.46.0
mvdan.cc/sh/v3 3.12.0 3.13.1
github.com/google/osv-scanner/v2 2.3.2 2.5.0
github.com/onsi/ginkgo/v2 2.28.0 2.32.1
gitlab.com/gitlab-org/api/client-go 1.41.0 1.46.0

Bumps the gomod group with 5 updates in the /tools directory:

Package From To
google.golang.org/protobuf 1.36.11 1.36.12
github.com/onsi/ginkgo/v2 2.28.1 2.32.1
github.com/golangci/golangci-lint/v2 2.10.1 2.12.2
github.com/google/ko 0.18.1 0.19.1
github.com/goreleaser/goreleaser/v2 2.12.2 2.17.1

Updates cloud.google.com/go/bigquery from 1.73.1 to 1.80.0

Release notes

Sourced from cloud.google.com/go/bigquery's releases.

bigquery: v1.80.0

1.80.0 (2026-08-13)

Features

bigquery: v1.79.1

1.79.1 (2026-08-07)

Bug Fixes

  • bigquery: Preserve SourceJob and QueryID when Storage API used (#20314) (8fc01f2)

bigquery: v1.79.0

1.79.0 (2026-07-13)

Features

Commits

Updates cloud.google.com/go/pubsub from 1.50.1 to 1.51.0

Release notes

Sourced from cloud.google.com/go/pubsub's releases.

pubsub: v1.51.0

1.51.0 (2026-07-15)

Features

bigtable: v1.51.0

1.51.0 (2026-07-23)

Features

  • bigtable: Add ChainInterceptors and RetryingVRpc for vRPC pipeline (#20185) (c7a832a)
  • bigtable: Add ClientConfigurationManager (#19986) (3a8f927)
  • bigtable: Add debug tag counter (recordDebugTag / assertDebugTag) (#20114) (3c97590)
  • bigtable: Add lazyPool helper for on-demand session pool opening (#20182) (f6ae3fb)
  • bigtable: Add PeakEwma continuous time-decay latency tracker (#20187) (9d124ef)
  • bigtable: Add PoolSizer for server-driven session pool capacity (#20189) (57ebbeb)
  • bigtable: Add session package with SessionClient + SessionTableAPI interfaces (#20180) (4b82fd2)
  • bigtable: Add Session primitives (AttemptOutcome, vRPC ctx, msgtype) (#20116) (e1011e2)
  • bigtable: Add Session state enum (#19981) (0748972)
  • bigtable: Add SessionThrottler / AdaptiveSessionThrottler for OpenSession pacing (#20184) (02e3c6d)
  • bigtable: Add SessionThrottler / AdaptiveSessionThrottler for OpenSession pacing (#20184) (29be83e)
  • bigtable: Add sessionTracer for per-Session lifecycle + vRPC metrics (#20190) (a466345)
  • bigtable: Enable new auth library and JWT for instance admin client (#20013) (21c4a44)
  • bigtable: Modularize channel priming behind a ChannelPrimer interface (#20027) (5214ab7)
  • bigtable: Modularize Direct Access compatibility check (#19987) (a25e93d)
  • o11y: Regenerate clients for LRO tracing (#20107) (779074e)

Bug Fixes

  • bigtable: Default cluster/zone in toOtelMetricAttrs to avoid Monitoring reject (#20178) (14493f4)
  • bigtable: Eliminate stats-handler MD race in internal/metrics tracer (#20158) (c387066)
Commits
  • 24439fa chore(main): release pubsub 1.51.0 (#20162)
  • baca5e1 chore(main): release pubsublite 1.10.0 (#20135)
  • 07020a7 chore(main): release firestore 1.24.0 (#20132)
  • 6395ba5 feat: update API sources and regenerate (#20159)
  • 198e9fb chore(main): release datastore 1.25.0 (#20143)
  • 994535e chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /agentplatform...
  • 900dd46 feat: new productregistry v1 (#20156)
  • 100358a feat(maps): onboard isochrones v1 api (#20155)
  • 83772f5 fix(spanner): roll back read-write transaction before retrying caller-returne...
  • 1eb96d0 feat: Onboard Vertex Model Garden to GenAI Python SDK: Add list_custom_model_...
  • Additional commits viewable in compare view

Updates github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.19.0

Release notes

Sourced from github.com/bradleyfalzon/ghinstallation/v2's releases.

v2.19.0

What's Changed

Full Changelog: bradleyfalzon/ghinstallation@v2.18.0...v2.19.0

v2.18.0

What's Changed

Full Changelog: bradleyfalzon/ghinstallation@v2.17.0...v2.18.0

Commits
  • c8d44a3 Merge pull request #190 from bradleyfalzon/dependabot/github_actions/actions-...
  • 258bb5f Merge pull request #192 from asvoboda/as/upgrade-88
  • 2e06ce4 Update go-github to v88
  • 7d6dce6 Bump the actions group across 1 directory with 2 updates
  • 749b4c6 Update go-github to v85
  • 1237274 Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0
  • c9c5e67 Bump actions/checkout from 5.0.0 to 6.0.2
  • f5640e5 Update google/go-github to v84
  • 6e26acb drop deprecated go versions
  • 0e0f2d4 fix lints
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.2

What's Changed

Full Changelog: go-git/go-git@v5.19.1...v5.19.2

Commits
  • 3eeb238 Merge pull request #2277 from go-git/checkout-v5
  • 008a78f git: worktree, make the filesystem wrapper a symlink-safe boundary
  • 2263fb5 Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...
  • 77b7625 build: Update module golang.org/x/text to v0.39.0 [SECURITY]
  • 85ea767 Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...
  • 198675a build: Update module golang.org/x/net to v0.56.0 [SECURITY]
  • 4a0e66d Merge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment
  • 3b306ef storage: dotgit, align reference-name safety with refname_is_safe
  • f3d0cc1 storage: dotgit, reject path traversal in reference names
  • 979cfe9 Merge pull request #2262 from joshblum/joshblum/to-slash-v5
  • Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits
  • 96a9aba Fix lint
  • 51c6302 Better implementation of pointer recursion checking
  • c667114 funcr: Handle and test recursive values
  • f7ffadb Add benchmark for pointer args
  • e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
  • 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
  • 0b40896 build(deps): bump github/codeql-action/upload-sarif
  • 77f671b Bump to Go 1.26
  • cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
  • 3832a11 build(deps): bump github/codeql-action/upload-sarif
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.0 to 0.21.9

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.9

What's Changed

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

v0.21.7

What's Changed

... (truncated)

Commits
  • 7b32099 build(deps): bump the actions group with 3 updates (#2398)
  • 2a4447d fix: remove '.' from unsafe path prefixes (#2400)
  • 43cc3e8 fix: prevent data race on scope refreshes within remote.writer (#2396)
  • 7775aab actions: pin slsa generator version following linter exception (#2395)
  • 2ea098f Bump go version to 1.26.5 (#2388)
  • ec2e586 actions: reformat ALL actions (#2386)
  • ab819b6 actions: fix unformatted action (#2385)
  • eed9a20 actions: update actions to be pinned by hash (#2384)
  • 8a97709 build(deps): bump github.com/moby/moby/client (#2380)
  • d04bf7d tarball: use correct file extension for zstd/uncompressed (#2382)
  • Additional commits viewable in compare view

Updates github.com/moby/buildkit from 0.26.3 to 0.32.2

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.32.2

Welcome to the v0.32.2 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax

Notable Changes

  • Revert the v0.32.1 OCI artifact attestation push-order workaround, restoring BuildKit's spec-aligned behavior of allowing referrers to be pushed before their subject manifests. #7016

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.32.1

v0.32.1

Welcome to the v0.32.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax

Notable Changes

  • Fix archive extraction through implied parent directories and absolute symlinks. #7005
  • Fix OCI artifact attestation pushes to registries that strictly validate subject references. #7012

Dependency Changes

  • github.com/moby/go-archive v0.2.1 -> v0.2.0

Previous release can be found at v0.32.0

v0.32.0

Welcome to the v0.32.0 release of buildkit!

... (truncated)

Commits
  • 991535e Merge pull request #7016 from crazy-max/v0.32_backport_7015
  • b4e609f exporter: revert attestation manifest push order
  • f1697c4 Merge pull request #7013 from crazy-max/v0.32-backport-7012
  • c300afc exporter: fix attestation manifest push order
  • 68bcd7d Merge pull request #7006 from crazy-max/v0.32-pick-0.32.1
  • 640eb23 dockerfile: test ADD hardlinks through absolute symlinks
  • c7dc8c8 dockerfile: regression test for ADD archives through absolute symlinks
  • f3b57e4 dockerfile: regression test for ADD archives with implied parents
  • 5f3d92c Revert "vendor: github.com/moby/go-archive v0.2.1"
  • f5d08d5 Merge pull request #6992 from crazy-max/fix-export-finalize-test
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.39.1 to 1.42.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

v1.41.0

No release notes provided.

v1.40.0

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

Commits

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.0

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

  • ~17% lower geomean runtime across the benchmark suite
  • ~27% higher geomean formatter throughput
  • Common enabled logging paths are ~30–44% faster
  • WithError is ~40% faster
  • Chained fields are ~46% faster
  • TextFormatter paths are up to ~40% faster
  • Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

  • Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
  • Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

JSONFormatter itself remains largely unchanged in runtime performance, with small allocation reductions.

🔄 log/slog interoperability

v1.10 adds bidirectional interoperability between Logrus and Go's log/slog:

  • A Logrus slog hook can forward existing Logrus entries to an slog logger.
  • hooks/slog.NewHandler implements slog.Handler, allowing log/slog records to use an existing Logrus logger and its hooks, formatter, and output.
  • The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information.
  • Caller reporting is configured per handler, without requiring Logrus's logger-wide ReportCaller option.
  • Custom slog levels can be mapped to Logrus levels.
  • The hook and handler can be combined, providing a practical path for incrementally migrating from Logrus to log/slog without requiring an all-at-once transition.

This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites can start using an slog backend, while new slog code can continue using an established Logrus setup.

🔒 Concurrency & Correctness

  • Fix reentrant logging deadlocks, including logging from within MarshalJSON or formatter code.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel, contrary to their documented behavior.
  • Eliminate race conditions in entry and formatter paths.
  • Improve locking boundaries around formatters and hooks.

➕ Added

  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching behavior on other platforms.
  • Entry.Caller can now be set explicitly and is preserved across derived entries. When caller reporting is enabled, Logrus only detects and populates caller information when none was provided, allowing custom caller detection and wrapper-aware logging without adding additional caller configuration APIs.
  • Add minimal, composable logging interfaces for each log level, allowing consumers to depend on narrower interfaces and making logging implementations easier to substitute or adapt.
  • Expand CI verification to include TinyGo and every cross-compile target reported by go tool dist list, improving coverage across alternative toolchains and platforms.

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.0

Fixes:

  • Fix reentrant logging deadlocks in formatter paths.
  • Fix race conditions in formatter and entry handling.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.
  • Improve concurrency safety around formatter and hook access.

Features:

  • Add slog hook for forwarding Logrus entries to log/slog.
  • Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.
  • Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.
  • Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

  • Raise minimum supported Go version to 1.23.
  • TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.
  • TextFormatter now uses distinct dimmed colors for debug and trace output.
  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.
  • Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.
  • Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used directly.

Performance:

  • Significantly improve TextFormatter performance and reduce allocations.
  • Optimize common Entry and Logger hot paths.
  • Reduce allocations in caller reporting.
  • ~17% lower geomean runtime and ~27% higher formatter throughput overall.
  • Common enabled logging paths are ~30–44% faster.
  • TextFormatter paths are up to ~40% faster, with allocation counts reduced by 25–74% across the measured formatter cases.
Commits
  • 457e372 Merge pull request #1573 from thaJeztah/update_colors
  • 6b6a3a6 formatter: differentiate debug and trace colors
  • 8ebae73 Merge pull request #1572 from thaJeztah/update_logs
  • f156a33 docs: clarify formatter field handling
  • 84cedf9 Merge pull request #1571 from thaJeztah/slog_hookopts
  • a3e1580 hooks/slog: add HookOptions
  • e5b377a Merge pull request #1570 from thaJeztah/slog_leveler
  • 30a5487 hooks/slog: add level adapters
  • 0cee61e Merge pull request #1569 from thaJeztah/slog_noleveler
  • 4069973 hooks/slog: use concrete slog.Level for hook level mapping
  • Additional commits viewable in compare view

Updates go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4

Commits
  • 43b627a Replace gopkg.in/check.v1 with the standard testing library
  • See full diff in compare view

Updates go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5

Commits
  • e16c7af Remove empty go.sum file
  • 6abcd01 Fix unhandled nil-errors in tests
  • 9481db7 Remove suite_test.go and gopkg.in/check.v1
  • 485f5fc Use standard testing library for limit_test.go
  • 3e00046 Use standard testing library for node_test.go
  • f612058 Use standard testing library for decode_test.go
  • 078f958 Use standard testing library encode_test.go
  • 3847ac0 [v3] backport CodeQL workflow
  • 1666663 Revert incorrect gofmt changes
  • 73290cb Retract v3 tags that cannot be installed
  • See full diff in compare view

Updates gocloud.dev from 0.44.0 to 0.46.0

Release notes

Sourced from gocloud.dev's releases.

v0.46.0

BREAKING_CHANGE:

  • blob/s3blob: migrate from deprecated s3/manager to s3/transfermanager by @​vangent in google/go-cloud#3717
    • Only breaking if you're using As to access specific AWS types from the old manager.

What's Changed

all

blob:

runtimevar:

pubsub

docstore

secrets

postgres

New Contributors

@dependabot
🌱 Bump the gomod group across 2 directories with 24 updates
dfcf64d 
Bumps the gomod group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) | `1.73.1` | `1.80.0` |
| [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) | `1.50.1` | `1.51.0` |
| [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) | `2.17.0` | `2.19.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.19.1` | `5.19.2` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.3` | `1.4.4` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.0` | `0.21.9` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.26.3` | `0.32.2` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.39.1` | `1.42.1` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.0` |
| [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) | `3.0.4` | `3.0.5` |
| [gocloud.dev](https://github.com/google/go-cloud) | `0.44.0` | `0.46.0` |
| [mvdan.cc/sh/v3](https://github.com/mvdan/sh) | `3.12.0` | `3.13.1` |
| [github.com/google/osv-scanner/v2](https://github.com/google/osv-scanner) | `2.3.2` | `2.5.0` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.0` | `2.32.1` |
| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `1.41.0` | `1.46.0` |

Bumps the gomod group with 5 updates in the /tools directory:

| Package | From | To |
| --- | --- | --- |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.1` | `2.32.1` |
| [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint) | `2.10.1` | `2.12.2` |
| [github.com/google/ko](https://github.com/google/ko) | `0.18.1` | `0.19.1` |
| [github.com/goreleaser/goreleaser/v2](https://github.com/goreleaser/goreleaser) | `2.12.2` | `2.17.1` |



Updates `cloud.google.com/go/bigquery` from 1.73.1 to 1.80.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@bigquery/v1.73.1...spanner/v1.80.0)

Updates `cloud.google.com/go/pubsub` from 1.50.1 to 1.51.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v1.50.1...pubsub/v1.51.0)

Updates `github.com/bradleyfalzon/ghinstallation/v2` from 2.17.0 to 2.19.0
- [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases)
- [Commits](bradleyfalzon/ghinstallation@v2.17.0...v2.19.0)

Updates `github.com/go-git/go-git/v5` from 5.19.1 to 5.19.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.19.1...v5.19.2)

Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.3...v1.4.4)

Updates `github.com/google/go-containerregistry` from 0.21.0 to 0.21.9
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.0...v0.21.9)

Updates `github.com/moby/buildkit` from 0.26.3 to 0.32.2
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.26.3...v0.32.2)

Updates `github.com/onsi/gomega` from 1.39.1 to 1.42.1
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.39.1...v1.42.1)

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.0
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.4...v1.10.0)

Updates `go.yaml.in/yaml/v2` from 2.4.3 to 2.4.4
- [Commits](yaml/go-yaml@v2.4.3...v2.4.4)

Updates `go.yaml.in/yaml/v3` from 3.0.4 to 3.0.5
- [Commits](yaml/go-yaml@v3.0.4...v3.0.5)

Updates `gocloud.dev` from 0.44.0 to 0.46.0
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.44.0...v0.46.0)

Updates `golang.org/x/text` from 0.36.0 to 0.40.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.36.0...v0.40.0)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

Updates `mvdan.cc/sh/v3` from 3.12.0 to 3.13.1
- [Release notes](https://github.com/mvdan/sh/releases)
- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)
- [Commits](mvdan/sh@v3.12.0...v3.13.1)

Updates `github.com/google/osv-scanner/v2` from 2.3.2 to 2.5.0
- [Release notes](https://github.com/google/osv-scanner/releases)
- [Changelog](https://github.com/google/osv-scanner/blob/main/CHANGELOG.md)
- [Commits](google/osv-scanner@v2.3.2...v2.5.0)

Updates `github.com/in-toto/attestation` from 1.1.2 to 1.2.0
- [Release notes](https://github.com/in-toto/attestation/releases)
- [Commits](in-toto/attestation@v1.1.2...v1.2.0)

Updates `github.com/onsi/ginkgo/v2` from 2.28.0 to 2.32.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.32.1)

Updates `gitlab.com/gitlab-org/api/client-go` from 1.41.0 to 1.46.0
- [Release notes](https://gitlab.com/gitlab-org/api/client-go/tags)
- [Changelog](https://gitlab.com/gitlab-org/api/client-go/blob/main/CHANGELOG.md)
- [Commits](https://gitlab.com/gitlab-org/api/client-go/compare/v1.41.0...v1.46.0)

Updates `cloud.google.com/go/storage` from 1.59.0 to 1.62.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@compute/v1.59.0...storage/v1.62.3)

Updates `github.com/go-git/go-billy/v5` from 5.9.0 to 5.9.1
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.9.0...v5.9.1)

Updates `github.com/onsi/ginkgo/v2` from 2.28.0 to 2.32.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.32.1)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `github.com/onsi/ginkgo/v2` from 2.28.1 to 2.32.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.32.1)

Updates `github.com/golangci/golangci-lint/v2` from 2.10.1 to 2.12.2
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md)
- [Commits](golangci/golangci-lint@v2.10.1...v2.12.2)

Updates `github.com/google/ko` from 0.18.1 to 0.19.1
- [Release notes](https://github.com/google/ko/releases)
- [Commits](ko-build/ko@v0.18.1...v0.19.1)

Updates `github.com/goreleaser/goreleaser/v2` from 2.12.2 to 2.17.1
- [Release notes](https://github.com/goreleaser/goreleaser/releases)
- [Commits](goreleaser/goreleaser@v2.12.2...v2.17.1)

Updates `github.com/onsi/ginkgo/v2` from 2.28.1 to 2.32.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.32.1)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: cloud.google.com/go/pubsub
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/bradleyfalzon/ghinstallation/v2
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.42.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: gocloud.dev
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/text
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12-0.20260120151049-f2248ac996af
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: mvdan.cc/sh/v3
  dependency-version: 3.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/google/osv-scanner/v2
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/in-toto/attestation
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: gitlab.com/gitlab-org/api/client-go
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.62.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12-0.20260120151049-f2248ac996af
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/golangci/golangci-lint/v2
  dependency-version: 2.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/google/ko
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/goreleaser/goreleaser/v2
  dependency-version: 2.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 17, 2026 08:27
@dependabot
dependabot Bot requested review from jeffmendoza and spencerschrock and removed request for a team August 17, 2026 08:27
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 17, 2026
@dosubot dosubot Bot added the size:XL This PR changes 500-999 lines, ignoring generated files. label Aug 17, 2026
@dependabot
dependabot Bot had a problem deploying to integration-test August 17, 2026 08:27 Failure
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jeffmendoza jeffmendoza Awaiting requested review from jeffmendoza jeffmendoza is a code owner automatically assigned from ossf/scorecard-maintainers
@spencerschrock spencerschrock Awaiting requested review from spencerschrock spencerschrock is a code owner automatically assigned from ossf/scorecard-maintainers

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size:XL This PR changes 500-999 lines, ignoring generated files.

Projects

OpenSSF Scorecard
Status: No status

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants