Update Go Dependencies by red-hat-konflux[bot] · Pull Request #443 · securesign/fulcio

red-hat-konflux · 2026-10-03T02:00:00Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
chainguard.dev/go-grpc-kit	require	minor	`v0.18.0` → `v0.20.0`
chainguard.dev/sdk	require	patch	`v0.1.103` → `v0.1.370`	`v0.1.374` (+3)
cloud.google.com/go/auth	indirect	minor	`v0.22.0` → `v0.24.1`
cloud.google.com/go/auth/oauth2adapt	indirect	minor	`v0.2.8` → `v0.3.0`
cloud.google.com/go/compute/metadata	indirect	minor	`v0.9.0` → `v0.10.0`
cloud.google.com/go/iam	indirect	minor	`v1.12.0` → `v1.14.0`
cloud.google.com/go/kms	indirect	minor	`v1.33.0` → `v1.35.0`
cloud.google.com/go/longrunning	indirect	major	`v0.8.0` → `v1.3.0`
cloud.google.com/go/longrunning	indirect	minor	`v1.2.0` → `v1.3.0`
cloud.google.com/go/security	require	minor	`v1.26.0` → `v1.28.0`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.22.0` → `v1.23.3`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	patch	`v1.14.0` → `v1.14.1`	`v1.15.0`
github.com/Azure/azure-sdk-for-go/sdk/internal	indirect	minor	`v1.12.0` → `v1.13.0`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.7.2` → `v1.10.1`
github.com/ThalesGroup/crypto11	require	patch	`v1.6.4` → `v1.6.8`
github.com/aws/aws-sdk-go-v2	indirect	minor	`v1.43.0` → `v1.47.3`
github.com/aws/aws-sdk-go-v2/config	indirect	minor	`v1.32.31` → `v1.33.9`
github.com/aws/aws-sdk-go-v2/credentials	indirect	minor	`v1.19.30` → `v1.20.9`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	minor	`v1.18.31` → `v1.20.3`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	minor	`v1.4.31` → `v1.5.6`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	indirect	minor	`v2.7.31` → `v2.8.6`
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	minor	`v1.4.32` → `v1.5.6`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	patch	`v1.13.13` → `v1.13.21`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	minor	`v1.13.31` → `v1.14.6`
github.com/aws/aws-sdk-go-v2/service/kms	indirect	minor	`v1.55.0` → `v1.61.4`
github.com/aws/aws-sdk-go-v2/service/signin	indirect	minor	`v1.5.0` → `v1.10.4`
github.com/aws/aws-sdk-go-v2/service/sso	indirect	minor	`v1.33.0` → `v1.38.4`
github.com/aws/aws-sdk-go-v2/service/ssooidc	indirect	minor	`v1.38.0` → `v1.43.4`
github.com/aws/aws-sdk-go-v2/service/sts	indirect	minor	`v1.45.0` → `v1.51.4`
github.com/aws/smithy-go	indirect	minor	`v1.27.4` → `v1.28.5`
github.com/bmatcuk/doublestar/v4	indirect	minor	`v4.9.1` → `v4.10.3`
github.com/cenkalti/backoff/v4	indirect	major	`v4.3.0` → `v7.0.1`
github.com/cenkalti/backoff/v5	indirect	major	`v5.0.3` → `v7.0.1`
github.com/clipperhouse/uax29/v2	indirect	minor	`v2.2.0` → `v2.7.0`
github.com/coreos/go-oidc/v3	require	minor	`v3.20.0` → `v3.21.0`
github.com/go-jose/go-jose/v4	require	patch	`v4.1.4` → `v4.1.5`	`v4.1.6`
github.com/google/go-containerregistry	indirect	minor	`v0.21.7` → `v0.22.1`
github.com/google/s2a-go	indirect	patch	`v0.1.9` → `v0.1.11`
github.com/googleapis/api-linter/v2	indirect	minor	`v2.0.0` → `v2.4.0`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.19` → `v0.3.23`
github.com/googleapis/gax-go/v2	indirect	minor	`v2.23.0` → `v2.26.2`
github.com/grpc-ecosystem/go-grpc-middleware	require	major	`v1.4.0` → `v2.3.4`
github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus	indirect	patch	`v1.1.0` → `v1.1.1`
github.com/grpc-ecosystem/go-grpc-middleware/v2	indirect	patch	`v2.3.3` → `v2.3.4`
github.com/grpc-ecosystem/grpc-gateway/v2	indirect	minor	`v2.27.3` → `v2.31.0`	`v2.32.0`
github.com/grpc-ecosystem/grpc-gateway/v2	require	minor	`v2.29.0` → `v2.31.0`	`v2.32.0`
github.com/hashicorp/hcl	indirect	major	`v1.0.1-vault-7` → `v2.25.0`
github.com/letsencrypt/boulder	indirect	minor	`v0.20260720.0` → `v0.20261006.0`	`v0.20261013.0`
github.com/magiconair/properties	require	minor	`v1.8.10` → `v1.18.12`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.21` → `v0.0.31`
github.com/olekukonko/tablewriter	indirect	major	`v0.0.5` → `v1.1.5`
github.com/prometheus/client_golang	require	minor	`v1.24.1` → `v1.25.0`
github.com/prometheus/client_model	require	patch	`v0.6.2` → `v0.6.3`
github.com/prometheus/common	require	minor	`v0.70.1` → `v0.72.1`
github.com/prometheus/procfs	indirect	minor	`v0.21.1` → `v0.22.0`
github.com/rogpeppe/go-internal	indirect	minor	`v1.14.1` → `v1.16.0`
github.com/secure-systems-lab/go-securesystemslib	indirect	patch	`v0.11.0` → `v0.11.1`
github.com/shopspring/decimal	indirect	minor	`v1.4.0` → `v1.5.0`
github.com/sigstore/protobuf-specs	require	patch	`v0.5.1` → `v0.5.2`
github.com/sigstore/sigstore	require	minor	`v1.10.8` → `v1.11.0`	`v1.11.1`
github.com/sigstore/sigstore/pkg/signature/kms/aws	require	minor	`v1.10.8` → `v1.11.0`	`v1.11.1`
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	minor	`v1.10.8` → `v1.11.0`	`v1.11.1`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	minor	`v1.10.8` → `v1.11.0`	`v1.11.1`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	require	minor	`v1.10.8` → `v1.11.0`	`v1.11.1`
github.com/spiffe/go-spiffe/v2	require	minor	`v2.8.1` → `v2.9.0`
github.com/stretchr/testify	require	minor	`v1.11.1` → `v1.12.1`
github.com/tink-crypto/tink-go-gcpkms/v2	require	minor	`v2.3.0` → `v2.4.0`
github.com/tink-crypto/tink-go/v2	require	minor	`v2.7.0` → `v2.8.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.69.0` → `v0.72.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.69.0` → `v0.72.0`
go.opentelemetry.io/otel	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/sdk	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/proto/otlp	indirect	patch	`v1.11.0` → `v1.11.1`
go.yaml.in/yaml/v3	indirect	patch	`v3.0.4` → `v3.0.5`
go.yaml.in/yaml/v3	require	patch	`v3.0.4` → `v3.0.5`
goa.design/goa/v3	require	minor	`v3.28.0` → `v3.34.0`
golang.org/x/crypto	indirect	minor	`v0.56.0` → `v0.58.0`
golang.org/x/net	indirect	minor	`v0.55.0` → `v0.61.0`
golang.org/x/net	indirect	minor	`v0.58.0` → `v0.61.0`
golang.org/x/oauth2	indirect	minor	`v0.36.0` → `v0.37.0`
golang.org/x/sync	indirect	minor	`v0.20.0` → `v0.24.0`
golang.org/x/sync	indirect	minor	`v0.22.0` → `v0.24.0`
golang.org/x/sys	indirect	minor	`v0.45.0` → `v0.49.0`
golang.org/x/sys	indirect	minor	`v0.47.0` → `v0.49.0`
golang.org/x/term	indirect	minor	`v0.45.0` → `v0.47.0`
golang.org/x/text	indirect	minor	`v0.37.0` → `v0.43.0`
golang.org/x/text	indirect	minor	`v0.41.0` → `v0.43.0`
golang.org/x/time	indirect	minor	`v0.15.0` → `v0.16.0`
google.golang.org/api	require	minor	`v0.290.0` → `v0.301.0`	`v0.304.0` (+2)
google.golang.org/grpc	indirect	minor	`v1.79.3` → `v1.84.0`
google.golang.org/grpc	require	minor	`v1.83.2` → `v1.84.0`
google.golang.org/grpc/cmd/protoc-gen-go-grpc	indirect	patch	`v1.6.1` → `v1.6.2`
google.golang.org/protobuf	indirect	patch	`v1.36.11` → `v1.36.12`
google.golang.org/protobuf	require	patch	`v1.36.12-0.20260120151049-f2248ac996af` → `v1.36.12`
sigs.k8s.io/release-utils	require	patch	`v0.12.4` → `v0.12.5`

Release Notes

chainguard-dev/go-grpc-kit (chainguard.dev/go-grpc-kit)

`v0.20.0`

Compare Source

What's Changed

metrics: record gRPC client transport delays by @kevinmdavis in #659

New Contributors

@kevinmdavis made their first contribution in #659

Full Changelog: chainguard-dev/go-grpc-kit@v0.19.0...v0.20.0

`v0.19.0`

Compare Source

What's Changed

build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #635
build(deps): bump the actions group with 7 updates by @dependabot[bot] in #634
build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 by @dependabot[bot] in #636
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #640
build(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 by @dependabot[bot] in #639
build(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the actions group by @dependabot[bot] in #638
build(deps): bump google.golang.org/api from 0.288.0 to 0.289.0 by @dependabot[bot] in #637
build(deps): bump the actions group with 8 updates by @dependabot[bot] in #643
build(deps): bump google.golang.org/api from 0.289.0 to 0.290.0 by @dependabot[bot] in #642
build(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 in the prom group by @dependabot[bot] in #641
build(deps): bump the actions group with 8 updates by @dependabot[bot] in #646
build(deps): bump the actions group with 8 updates by @dependabot[bot] in #650
build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @dependabot[bot] in #644
build(deps): bump google.golang.org/api from 0.290.0 to 0.292.0 by @dependabot[bot] in #649
build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.29.0 to 2.30.0 in the grpc group across 1 directory by @dependabot[bot] in #648
build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 in the otel group across 1 directory by @dependabot[bot] in #651
fix(metrics): normalize executable-derived gRPC client IDs by @nskaggs in #658
build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 by @dependabot[bot] in #657
build(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 by @dependabot[bot] in #656
build(deps): bump the actions group with 7 updates by @dependabot[bot] in #655
build(deps): bump google.golang.org/api from 0.292.0 to 0.295.0 by @dependabot[bot] in #654

New Contributors

@nskaggs made their first contribution in #658

Full Changelog: chainguard-dev/go-grpc-kit@v0.18.0...v0.19.0

chainguard-dev/sdk (chainguard.dev/sdk)

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-10-03T02:00:03Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module chainguard.dev/sdk@v0.1.370 requires go >= 1.27.0; switching to go1.27.2
go: downloading go1.27.2 (linux/amd64)
go: github.com/ThalesGroup/crypto11@v1.6.8: parsing go.mod:
	module declares its path as: github.com/eclipse-keypont/crypto11
	        but was required as: github.com/ThalesGroup/crypto11

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Oct 3, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 11 times, most recently from da669ff to b87f862 Compare October 10, 2026 07:39

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 7 times, most recently from 296042b to f066427 Compare October 14, 2026 05:44

Update Go Dependencies

2346803

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from f066427 to 2346803 Compare October 15, 2026 02:23

Navigation Menu

Repository navigation

Update Go Dependencies - #443

Update Go Dependencies#443
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps

red-hat-konflux Bot commented Oct 3, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Oct 3, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented Oct 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

red-hat-konflux Bot commented Oct 3, 2026 •

edited

Loading