chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #584 · securesign/rekor

red-hat-konflux · 2026-03-30T10:37:12Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
cel.dev/expr	indirect	patch	`v0.25.1` → `v0.25.2`
cloud.google.com/go/auth	indirect	minor	`v0.19.0` → `v0.22.0`
cloud.google.com/go/iam	require	minor	`v1.7.0` → `v1.12.0`
cloud.google.com/go/kms	indirect	minor	`v1.28.0` → `v1.33.0`
cloud.google.com/go/longrunning	indirect	major	`v0.9.0` → `v1.2.0`
cloud.google.com/go/monitoring	indirect	minor	`v1.24.3` → `v1.30.0`
cloud.google.com/go/pubsub	require	major	`v1.50.2` → `v2.6.1`
cloud.google.com/go/pubsub/v2	require	patch	`v2.6.0` → `v2.6.1`
cloud.google.com/go/storage	indirect	minor	`v1.62.0` → `v1.64.0`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.21.0` → `v1.22.0`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	minor	`v1.13.1` → `v1.14.0`
github.com/Azure/azure-sdk-for-go/sdk/internal	indirect	minor	`v1.11.2` → `v1.12.0`
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys	indirect	minor	`v1.4.0` → `v1.5.0`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.7.0` → `v1.8.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	indirect	minor	`v1.32.0` → `v1.35.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	indirect	minor	`v0.55.0` → `v0.59.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	indirect	minor	`v0.55.0` → `v0.59.0`
github.com/Masterminds/semver/v3	indirect	minor	`v3.4.0` → `v3.5.0`
github.com/aws/aws-sdk-go-v2	indirect	minor	`v1.41.7` → `v1.43.2`	`v1.43.3`
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	indirect	patch	`v1.7.8` → `v1.7.15`	`v1.7.16`
github.com/aws/aws-sdk-go-v2/config	indirect	patch	`v1.32.17` → `v1.32.33`	`v1.32.34`
github.com/aws/aws-sdk-go-v2/credentials	indirect	patch	`v1.19.16` → `v1.19.32`	`v1.19.33`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	patch	`v1.18.23` → `v1.18.33`	`v1.18.34`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	indirect	patch	`v1.22.10` → `v1.22.37`	`v1.22.38`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	patch	`v1.4.23` → `v1.4.33`	`v1.4.34`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	indirect	patch	`v2.7.23` → `v2.7.33`	`v2.7.34`
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	patch	`v1.4.24` → `v1.4.34`	`v1.4.35`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	patch	`v1.13.9` → `v1.13.14`	`v1.13.15`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	patch	`v1.13.23` → `v1.13.33`	`v1.13.34`
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	indirect	patch	`v1.19.21` → `v1.19.34`	`v1.19.35`
github.com/aws/aws-sdk-go-v2/service/s3	indirect	minor	`v1.97.3` → `v1.106.2`	`v1.106.3`
github.com/aws/aws-sdk-go-v2/service/signin	indirect	minor	`v1.0.11` → `v1.5.2`	`v1.5.3`
github.com/aws/aws-sdk-go-v2/service/sso	indirect	minor	`v1.30.17` → `v1.33.2`	`v1.33.3`
github.com/aws/aws-sdk-go-v2/service/ssooidc	indirect	minor	`v1.35.21` → `v1.38.2`	`v1.38.3`
github.com/aws/aws-sdk-go-v2/service/sts	indirect	minor	`v1.42.1` → `v1.45.2`	`v1.45.3`
github.com/aws/smithy-go	indirect	minor	`v1.25.1` → `v1.27.5`	`v1.27.6`
github.com/cavaliercoder/go-rpm	require	major	`v0.0.0-20200122174316-8cb9fd9c31a8` → `v1.3.0`
github.com/cenkalti/backoff/v4	indirect	major	`v4.3.0` → `v7.0.0`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/fsnotify/fsnotify	indirect	minor	`v1.9.0` → `v1.10.1`
github.com/fxamacker/cbor/v2	indirect	patch	`v2.9.0` → `v2.9.2`
github.com/go-chi/chi/v5	require	minor	`v5.2.5` → `v5.3.1`
github.com/go-logr/logr	indirect	patch	`v1.4.3` → `v1.4.4`
github.com/go-openapi/analysis	indirect	patch	`v0.25.0` → `v0.25.5`
github.com/go-openapi/analysis	indirect	patch	`v0.25.2` → `v0.25.5`
github.com/go-openapi/errors	indirect	patch	`v0.22.7` → `v0.22.8`
github.com/go-openapi/inflect	indirect	major	`v0.21.5` → `v1.0.0`
github.com/go-openapi/jsonpointer	indirect	major	`v0.22.5` → `v1.0.0`
github.com/go-openapi/jsonpointer	indirect	major	`v0.23.1` → `v1.0.0`
github.com/go-openapi/jsonreference	indirect	major	`v0.21.5` → `v1.0.0`
github.com/go-openapi/jsonreference	indirect	major	`v0.21.6` → `v1.0.0`
github.com/go-openapi/loads	indirect	minor	`v0.23.3` → `v0.25.0`
github.com/go-openapi/loads	require	minor	`v0.24.0` → `v0.25.0`
github.com/go-openapi/runtime	indirect	minor	`v0.29.3` → `v0.33.0`
github.com/go-openapi/runtime	require	minor	`v0.32.4` → `v0.33.0`
github.com/go-openapi/runtime/server-middleware	indirect	minor	`v0.30.0` → `v0.33.0`
github.com/go-openapi/spec	indirect	patch	`v0.22.4` → `v0.22.9`
github.com/go-openapi/spec	require	patch	`v0.22.6` → `v0.22.9`
github.com/go-openapi/strfmt	indirect	minor	`v0.26.1` → `v0.27.0`
github.com/go-openapi/strfmt	require	minor	`v0.26.4` → `v0.27.0`
github.com/go-openapi/swag	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag	require	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/cmdutils	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/cmdutils	indirect	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/conv	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/conv	require	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/fileutils	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/fileutils	indirect	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/jsonname	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/jsonname	indirect	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/jsonutils	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/jsonutils	indirect	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/loading	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/loading	indirect	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/mangling	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/mangling	indirect	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/netutils	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/netutils	indirect	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/stringutils	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/stringutils	indirect	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/typeutils	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/typeutils	indirect	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/swag/yamlutils	indirect	minor	`v0.25.5` → `v0.28.0`
github.com/go-openapi/swag/yamlutils	indirect	minor	`v0.26.1` → `v0.28.0`
github.com/go-openapi/validate	indirect	minor	`v0.25.2` → `v0.26.1`
github.com/go-openapi/validate	require	patch	`v0.26.0` → `v0.26.1`
github.com/go-sql-driver/mysql	require	minor	`v1.9.3` → `v1.10.0`
github.com/go-swagger/go-swagger	require	minor	`v0.33.2` → `v0.35.3`	`v0.36.1` (+1)
github.com/golang-jwt/jwt/v5	indirect	patch	`v5.3.0` → `v5.3.1`
github.com/google/go-containerregistry	indirect	patch	`v0.21.3` → `v0.21.7`	`v0.21.8`
github.com/googleapis/gax-go/v2	indirect	minor	`v2.22.0` → `v2.23.0`
github.com/grpc-ecosystem/go-grpc-middleware	require	major	`v1.4.0` → `v2.3.3`
github.com/hashicorp/hcl	indirect	major	`v1.0.1-vault-7` → `v2.24.0`
github.com/in-toto/in-toto-golang	require	minor	`v0.9.0` → `v0.11.0`
github.com/jedisct1/go-minisign	require	digest	`d2f9f49` → `a09352b`
github.com/jellydator/ttlcache/v3	indirect	patch	`v3.4.0` → `v3.4.1`
github.com/klauspost/compress	indirect	minor	`v1.18.5` → `v1.19.1`
github.com/mattn/go-sqlite3	indirect	patch	`v1.14.38` → `v1.14.49`
github.com/oklog/ulid/v2	indirect	patch	`v2.1.1` → `v2.1.2`
github.com/pelletier/go-toml/v2	indirect	minor	`v2.2.4` → `v2.4.3`
github.com/planetscale/vtprotobuf	indirect	digest	`ba97887` → `8ae5a48`
github.com/prometheus/client_golang	require	minor	`v1.23.2` → `v1.24.1`
github.com/prometheus/common	indirect	minor	`v0.67.5` → `v0.70.1`
github.com/prometheus/procfs	indirect	minor	`v0.20.1` → `v0.21.1`
github.com/redis/go-redis/v9	require	minor	`v9.20.1` → `v9.21.0`
github.com/rogpeppe/go-internal	indirect	minor	`v1.14.1` → `v1.15.0`
github.com/sassoftware/relic/v7	require	major	`v7.6.2` → `v8.2.0`
github.com/spiffe/go-spiffe/v2	indirect	minor	`v2.6.0` → `v2.8.1`
github.com/theupdateframework/go-tuf	require	major	`v0.7.0` → `v2.4.2`
github.com/tink-crypto/tink-go-gcpkms/v2	require	minor	`v2.2.0` → `v2.3.0`
github.com/tink-crypto/tink-go/v2	require	minor	`v2.6.0` → `v2.7.0`
github.com/ulikunitz/xz	indirect	patch	`v0.5.15` → `v0.5.16`
go.opentelemetry.io/contrib/detectors/gcp	indirect	minor	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.67.0` → `v0.69.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.67.0` → `v0.69.0`
go.step.sm/crypto	require	minor	`v0.77.7` → `v0.87.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.3` → `v3.0.5`
go.yaml.in/yaml/v3	indirect	patch	`v3.0.4` → `v3.0.5`
gocloud.dev	require	minor	`v0.45.0` → `v0.46.0`
golang.org/x/crypto	indirect	minor	`v0.51.0` → `v0.54.0`
golang.org/x/crypto	require	minor	`v0.53.0` → `v0.54.0`
golang.org/x/mod	indirect	minor	`v0.35.0` → `v0.38.0`
golang.org/x/mod	require	minor	`v0.36.0` → `v0.38.0`
golang.org/x/net	indirect	minor	`v0.55.0` → `v0.57.0`
golang.org/x/net	require	minor	`v0.56.0` → `v0.57.0`
golang.org/x/sync	indirect	minor	`v0.20.0` → `v0.22.0`
golang.org/x/sync	require	minor	`v0.21.0` → `v0.22.0`
golang.org/x/sys	indirect	minor	`v0.45.0` → `v0.47.0`
golang.org/x/sys	indirect	minor	`v0.46.0` → `v0.47.0`
golang.org/x/term	indirect	minor	`v0.44.0` → `v0.45.0`
golang.org/x/text	indirect	minor	`v0.37.0` → `v0.40.0`
golang.org/x/text	indirect	minor	`v0.38.0` → `v0.40.0`
golang.org/x/tools	indirect	minor	`v0.44.0` → `v0.48.0`
google.golang.org/api	require	minor	`v0.274.0` → `v0.291.0`
google.golang.org/genproto	indirect	digest	`d00831a` → `8efbd57`
google.golang.org/genproto/googleapis/api	indirect	digest	`afd174a` → `8efbd57`
google.golang.org/genproto/googleapis/rpc	require	digest	`afd174a` → `8efbd57`
google.golang.org/grpc	require	minor	`v1.82.0` → `v1.83.0`
gopkg.in/yaml.v2	indirect	major	`v2.4.0` → `v3.0.1`
gopkg.in/yaml.v2	require	major	`v2.4.0` → `v3.0.1`
software.sslmate.com/src/go-pkcs12	indirect	patch	`v0.7.0` → `v0.7.3`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

cel-expr/cel-spec (cel.dev/expr)

`v0.25.2`

Compare Source

What's Changed

Add conformance tests for (string).reverse() by @jnthntatum in google#491
Updates to the conformance tests for integer values in %e and %f format directives by @TristonianJones in google#495
Add automated BCR publishing on release tags by @mmorel-35 in google#498
Add clarification on scoping rules. by @jnthntatum in google#506
Networking extension conformance tests by @TristonianJones in google#507
Add conformance test cases for null assignability around repeated fields and maps by @l46kok in google#510

New Contributors

@mmorel-35 made their first contribution in google#498

Full Changelog: cel-expr/cel-spec@v0.25.1...v0.25.2

googleapis/google-cloud-go (cloud.google.com/go/auth)

`v0.22.0`

Compare Source

bigtable:
- cbt: Support cells per column limit for row read.
- bttest: Correctly handle empty RowSet.
- Fix ReadModifyWrite operation in emulator.
- Fix API path in GetCluster.
bigquery:
- BEHAVIOR CHANGE: Retry on 503 status code.
- Add dataset.DeleteWithContents.
- Add SchemaUpdateOptions for query jobs.
- Add Timeline to QueryStatistics.
- Add more stats to ExplainQueryStage.
- Support Parquet data format.
datastore:
- Support omitempty for times.
dlp:
- BREAKING CHANGE: Remove v1beta1 client. Please migrate to the v2 client,
  which is now out of beta.
- Add v2 client.
firestore:
- BEHAVIOR CHANGE: Treat set({}, MergeAll) as valid.
iam:
- Support JWT signing via SignJwt callopt.
profiler:
- BEHAVIOR CHANGE: PollForSerialOutput returns an error when context.Done.
- BEHAVIOR CHANGE: Increase the initial backoff to 1 minute.
- Avoid returning empty serial port output.
pubsub:
- BEHAVIOR CHANGE: Don't backoff during next retryable error once stream is healthy.
- BEHAVIOR CHANGE: Don't backoff on EOF.
- pstest: Support Acknowledge and ModifyAckDeadline RPCs.
redis:
- Add v1 beta Redis client.
spanner:
- Support SessionLabels.
speech:
- Add api v1 beta1 client.
storage:
- BEHAVIOR CHANGE: Retry reads when retryable error occurs.
- Fix delete of object in requester-pays bucket.
- Support KMS integration.

`v0.21.0`

Compare Source

bigquery:
- Add OpenCensus tracing.
firestore:
- BREAKING CHANGE: If a document does not exist, return a DocumentSnapshot
  whose Exists method returns false. DocumentRef.Get and Transaction.Get
  return the non-nil DocumentSnapshot in addition to a NotFound error.
  DocumentRef.GetAll and Transaction.GetAll return a non-nil
  DocumentSnapshot instead of nil.
- Add DocumentIterator.Stop. Call Stop whenever you are done with a
  DocumentIterator.
- Added Query.Snapshots and DocumentRef.Snapshots, which provide realtime
  notification of updates. See https://cloud.google.com/firestore/docs/query-data/listen.
- Canceling an RPC now always returns a grpc.Status with codes.Canceled.
spanner:
- Add CommitTimestamp, which supports inserting the commit timestamp of a
  transaction into a column.

`v0.20.0`

Compare Source

bigquery: Support SchemaUpdateOptions for load jobs.
bigtable:
- Add SampleRowKeys.
- cbt: Support union, intersection GCPolicy.
- Retry admin RPCS.
- Add trace spans to retries.
datastore: Add OpenCensus tracing.
firestore:
- Fix queries involving Null and NaN.
- Allow Timestamp protobuffers for time values.
logging: Add a WriteTimeout option.
spanner: Support Batch API.
storage: Add OpenCensus tracing.

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.8.0`

Compare Source

What's Changed

Recover from panics in json.Unmarshal to prevent token-cache crashes (fixes #579) by @4gust in #614
fix(base.go): empty partition key causing external cache miss by @MatteoCalabro-TomTom in #615
Add User Federated Identity Credential (user_fic) grant type support by @Avery-Dunn in #619

New Contributors

@MatteoCalabro-TomTom made their first contribution in #615

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.2...1.8.0

`v1.7.2`

Compare Source

What's Changed

Adjust constants used in FMI tests by @Avery-Dunn in #608
Update version to 1.7.1 by @Avery-Dunn in #607
Add MSAL client metadata headers to IMDS managed identity requests by @Copilot in #611
Disable gzip compression #613 by @4gust in #616
Update version.go by @4gust in #617

New Contributors

@Copilot made their first contribution in #611

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.1...v1.7.2

`v1.7.1`: 1.7.1

Compare Source

What's Changed

Add FMI (Federated Managed Identity) Design Specification for MSAL Go by @4gust in #583
Fix bug in refresh token partition check by @Avery-Dunn in #606
Improve instance discovery resiliency and sovereign cloud support by @Avery-Dunn in #604

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.0...v1.7.1

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

`v0.59.0`

Compare Source

What's Changed

Adds support for resolving OpenTelemetry authentication extensions by @Angelawork in #1181
update golang.org/x/crypto by @braydonk in #1182
Update module google.golang.org/grpc to v1.82.1 [SECURITY] by @renovate-bot in #1184
Prepare release 0.59.0/1.35.0 by @braydonk in #1183

New Contributors

@Angelawork made their first contribution in #1181

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.58.0...v0.59.0

`v0.58.0`: v1.34.0/v0.58.0

Compare Source

What's Changed

googlemanagedprometheus: Add destination_project_quota by @braydonk in #1175
Prepare release v1.34.0/v0.58.0 by @braydonk in #1178

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0...v0.58.0

`v0.57.0`: v1.33.0/v0.57.0

Compare Source

What's Changed

Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] by @renovate-bot in #1146
Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] by @renovate-bot in #1145
Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] by @renovate-bot in #1144
[chore] retry_on_failure is removed from our exporter by @braydonk in #1151
downgrade davecgh/go-spew, pmezard/go-difflib to tagged releases by @thaJeztah in #1152
Update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY] by @renovate-bot in #1149
Update e2e-testing image to fix presubmits by @dashpole in #1155
Update go.opentelemetry.io/collector by @renovate-bot in #1073
Auto comment /gcbrun for dependency updates by @dashpole in #1154
Revert "Auto comment /gcbrun for dependency updates" by @dashpole in #1157
Update module github.com/prometheus/common to v0.67.5 by @renovate-bot in #1156
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0 in /tools by @dependabot[bot] in #1118
Update golang.org/x by @renovate-bot in #1008
Combine dependency bumps by @dashpole in #1158
Update All Dependencies by @renovate-bot in #1161
Update all major dependencies by @dashpole in #1164
Update All Dependencies by @renovate-bot in #1163
Add AGENTS.md by @dashpole in #1165
Fix CodeQL permissions to allow uploading results by @dashpole in #1166
collector: bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 by @dashpole in #1170
Migrate impersonate to use cloud.google.com/go/auth by @dashpole in #1169
fix: Support OTLP event_name field in logs exporter by @putcho01 in #1088
exporter/collector/logs: accept string-typed line in sourceLocation by @alliasgher in #1142
exporter/collector/logs: use parsed httpRequest.protocol instead of hardcoded HTTP/1.1 by @alliasgher in #1143
exporter/trace: sanitize invalid UTF-8 in span fields by @alliasgher in #1141
chore: update E2E tests to use centralized async cleanup 0.22.0 by @aabmass in #1171
Add support for cloud run worker pools by @dashpole in #1112
Prerelease 1.33.0/v0.57.0 by @avilevy18 in #1173

New Contributors

@thaJeztah made their first contribution in #1152
@putcho01 made their first contribution in #1088
@alliasgher made their first contribution in #1142

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.56.0...v0.57.0

`v0.56.0`: v1.32.0/v0.56.0

Compare Source

What's Changed

Support universe domains in collector exporter client configuration by @dashpole in #1097
Don't pass credentials fetched using FindDefaultCredentials by @dashpole in #1098
googleclientauthextension: support Proxy-Authorization header by @lindeskar in #1105
Improve unit tests for gcp auth extension by @dashpole in #1103
Allow providing a context to create the monitoring client by @dashpole in #1096
Add support for go 1.26 by @dashpole in #1107
chore(deps): update module golang.org/x/crypto to v0.45.0 [security] by @renovate-bot in #1102
Don't allow modifying the default scopes by @dashpole in #1109
Ignore versions in the user agent header when comparing fixtures by @dashpole in #1115
Bump go version to resolve govulncheck failures by @dashpole in #1114
Separate out govulncheck into its own CI job by @dashpole in #1113
Normalize user agents in span attributes as well by @dashpole in #1117
fix(deps): update module google.golang.org/grpc to v1.79.3 [security] by @jefferbrecht in #1131
Prepare for v1.32.0/v0.56.0 by @dashpole in #1132

New Contributors

@lindeskar made their first contribution in #1105
@jefferbrecht made their first contribution in #1131

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.55.0...v0.56.0

Masterminds/semver (github.com/Masterminds/semver/v3)

`v3.5.0`

Compare Source

What's Changed

Adding more prerelease tests by @mattfarina in #273
Update constraint error messages by @mattfarina in #278
Fix edge cases by @mattfarina in #279
Adding some checks in by @mattfarina in #280
Updating deps by @mattfarina in #281
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #282
Bump actions/cache from 4.2.3 to 5.0.5 by @dependabot[bot] in #283
Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by @dependabot[bot] in #284
Updating gitignore for devcontainers by @mattfarina in #286
Fixing some quality issues by @mattfarina in #287

New Contributors

@dependabot[bot] made their first contribution in #282

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

`v1.43.2`

Compare Source

`v1.43.1`

Module Highlights

github.com/aws/aws-sdk-go-v2/service/applicationsignals: v1.11.0
- Feature: Application Signals now supports creating Service Level Objectives on service dependencies. Users can now create or update SLOs on discovered service dependencies to monitor their standard application metrics.
github.com/aws/aws-sdk-go-v2/service/codebuild: v1.58.0
- Feature: This release adds support for environment type WINDOWS_SERVER_2022_CONTAINER in ProjectEnvironment
github.com/aws/aws-sdk-go-v2/service/ecr: v1.43.1
- Documentation: Fix for customer issues related to AWS account ID and size limitation for token.
github.com/aws/aws-sdk-go-v2/service/ecs: v1.54.4
- Documentation: This is an Amazon ECS documentation only update to address various tickets.
github.com/aws/aws-sdk-go-v2/service/lexmodelsv2: v1.51.0
- Feature: Release feature of errorlogging for lex bot, customer can config this feature in bot version to generate log for error exception which helps debug
github.com/aws/aws-sdk-go-v2/service/medialive: v1.72.0
- Feature: Added support for SMPTE 2110 inputs when running a channel in a MediaLive Anywhere cluster. This feature enables ingestion of SMPTE 2110-compliant video, audio, and ancillary streams by reading SDP files that AWS Elemental MediaLive can retrieve from a network source.

`v1.43.0`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.41.10
- Bug Fix: Replace usages of deprecated io/ioutil package with io.
github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.58.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ec2: v1.305.0
- Feature: Amazon EC2 now supports self-service cancellation of future-dated Capacity Reservations. A cancellation charge applies based on remaining commitment. Customers can generate a cancellation quote to review charges before confirming.
github.com/aws/aws-sdk-go-v2/service/elasticache: v1.54.0
- Feature: Amazon ElastiCache for Valkey now supports durability. This new capability is enabled through a Multi-AZ transactional log, enabling fast recovery and restart during failures.
github.com/aws/aws-sdk-go-v2/service/georoutes: v1.11.0
- Feature: Added Transit and Intermodal travel modes to CalculateRoutes. Plan routes using public transit (bus, subway, train, ferry) or combine transit with driving, taxi, and rental car segments in a single multi-modal route.
github.com/aws/aws-sdk-go-v2/service/guardduty: v1.79.0
- Feature: Amazon GuardDuty Runtime Monitoring now supports 3 new SensitiveFileModified finding types (Persistence, PrivilegeEscalation, DefenseEvasion) that detect when security-sensitive system files are modified on EC2 instances or containers, indicating potential compromise through file tampering.
github.com/aws/aws-sdk-go-v2/service/iot: v1.75.1
- Documentation: Fleet indexing documentation update
github.com/aws/aws-sdk-go-v2/service/keyspacesstreams: v1.8.0
- Feature: Added iterator description to the GetRecords API response for Amazon Keyspaces Change Data Capture (CDC) streams, enabling consumers to track their current position within the stream.
github.com/aws/aws-sdk-go-v2/service/lambda: v1.92.0
- Feature: Adds configuration for tag propagation to Lambda-managed resources.
github.com/aws/aws-sdk-go-v2/service/lexruntimeservice: v1.30.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/managedblockchain: v1.32.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/marketplacemetering: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mediaconvert: v1.92.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/medialive: v1.98.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mediastore: v1.30.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/migrationhub: v1.32.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mturk: v1.31.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/neptune: v1.45.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/personalizeruntime: v1.34.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/pi: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/pinpoint: v1.40.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/pinpointemail: v1.30.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/polly: v1.58.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ram: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/redshift: v1.63.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/rekognition: v1.52.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi: v1.33.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/route53: v1.63.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/route53domains: v1.36.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/s3: v1.103.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.251.0
- Feature: Amazon SageMaker Job is a new service to help you manage various workloads related to model fine tuning, evaluation etc. Two job categories are supported today, AgentRFT for multi-turn agentic reinforcement fine tuning, and AgentRFTEvaluation for evaluating base model or trained model from AgentRFT.
github.com/aws/aws-sdk-go-v2/service/sagemakerjobruntime: v1.0.0
- Release: New AWS service client module
- Feature: Amazon SageMaker Job Runtime is a new service for managing trajectory data during multi-turn customization jobs. It provides APIs to send inference requests to models during job execution, mark rollouts as complete, and submit reward values for training trajectories.
github.com/aws/aws-sdk-go-v2/service/secretsmanager: v1.42.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/servicecatalog: v1.40.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sfn: v1.42.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/shield: v1.35.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/snowball: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sqs: v1.43.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ssm: v1.69.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sso: v1.31.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/storagegateway: v1.44.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sts: v1.43.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/swf: v1.34.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/transcribe: v1.56.0
- Feature: Release new Language locales including am-ET, es-MX, fa-AF, ht-HT, jv-ID, km-KH, my-MM, sq-AL, ne-NP. The commit shows past locales that have already been release which include cy-gb, ga-ie, gd-gb.
github.com/aws/aws-sdk-go-v2/service/transfer: v1.73.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/waf: v1.31.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/xray: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset

`v1.42.1`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.41.5
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/accessanalyzer: [v1.45.12](service/accessanalyz

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-03-30T20:26:11Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

7 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go/pubsub`	`v1.50.1` -> `v1.50.2`
`cloud.google.com/go/pubsub/v2`	`v2.3.0` -> `v2.5.1`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.97.3` -> `v1.98.0`
`k8s.io/klog/v2`	`v2.130.1` -> `v2.140.0`
`cloud.google.com/go/storage`	`v1.57.2` -> `v1.61.3`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/googleapis/gax-go/v2`	`v2.19.0` -> `v2.20.0`

red-hat-konflux · 2026-04-02T23:37:19Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

28 additional dependencies were updated

Details:

Package	Change
`google.golang.org/grpc`	`v1.79.3` -> `v1.81.0`
`cloud.google.com/go/pubsub`	`v1.50.1` -> `v1.50.2`
`cloud.google.com/go/pubsub/v2`	`v2.3.0` -> `v2.5.1`
`cloud.google.com/go/monitoring`	`v1.24.3` -> `v1.29.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.30.0` -> `v1.31.0`
`github.com/aws/aws-sdk-go-v2`	`v1.41.5` -> `v1.41.7`
`github.com/aws/aws-sdk-go-v2/config`	`v1.32.13` -> `v1.32.17`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.21` -> `v2.7.23`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.19.21` -> `v1.19.23`
`github.com/aws/aws-sdk-go-v2/service/kms`	`v1.50.3` -> `v1.51.1`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.97.3` -> `v1.101.0`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.30.14` -> `v1.30.17`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.35.18` -> `v1.35.21`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.41.10` -> `v1.42.1`
`github.com/aws/smithy-go`	`v1.24.2` -> `v1.25.1`
`github.com/envoyproxy/go-control-plane/envoy`	`v1.36.0` -> `v1.37.0`
`github.com/go-jose/go-jose/v4`	`v4.1.3` -> `v4.1.4`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.39.0` -> `v1.42.0`
`go.opentelemetry.io/otel`	`v1.42.0` -> `v1.43.0`
`go.opentelemetry.io/otel/metric`	`v1.42.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk`	`v1.42.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.42.0` -> `v1.43.0`
`go.opentelemetry.io/otel/trace`	`v1.42.0` -> `v1.43.0`
`k8s.io/klog/v2`	`v2.130.1` -> `v2.140.0`
`cloud.google.com/go/kms`	`v1.26.0` -> `v1.31.0`
`cloud.google.com/go/storage`	`v1.57.2` -> `v1.62.0`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/googleapis/gax-go/v2`	`v2.19.0` -> `v2.22.0`

red-hat-konflux · 2026-05-12T17:05:32Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: github.com/cavaliercoder/go-rpm@v1.3.0: parsing go.mod:
	module declares its path as: github.com/cavaliergopher/rpm
	        but was required as: github.com/cavaliercoder/go-rpm

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Mar 30, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 5f750ec to ba48db1 Compare March 30, 2026 18:46

red-hat-konflux Bot changed the title ~~chore(deps): update module github.com/in-toto/in-toto-golang to v0.10.0~~ chore(deps): update go dependencies Mar 30, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from ba48db1 to 322eb32 Compare March 30, 2026 20:26

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 9 times, most recently from 8619d8a to c2b1a55 Compare April 2, 2026 23:36

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 15 times, most recently from b389c7e to 7e32dfb Compare April 7, 2026 15:26

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 28 times, most recently from 06aeff4 to 73be3c1 Compare April 17, 2026 18:12

chore(deps): update go dependencies

d9f3421

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update go dependencies - #584

chore(deps): update go dependencies#584
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps

red-hat-konflux Bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Apr 2, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented May 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

red-hat-konflux Bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

v1.7.1: 1.7.1

What's Changed

What's Changed

New Contributors

v0.58.0: v1.34.0/v0.58.0

What's Changed

v0.57.0: v1.33.0/v0.57.0

What's Changed

New Contributors

v0.56.0: v1.32.0/v0.56.0

What's Changed

New Contributors

What's Changed

New Contributors

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

Uh oh!

red-hat-konflux Bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

red-hat-konflux Bot commented May 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Mar 30, 2026 •

edited

Loading

`v1.7.1`: 1.7.1

`v0.58.0`: v1.34.0/v0.58.0

`v0.57.0`: v1.33.0/v0.57.0

`v0.56.0`: v1.32.0/v0.56.0

red-hat-konflux Bot commented Mar 30, 2026 •

edited

Loading

red-hat-konflux Bot commented Apr 2, 2026 •

edited

Loading

red-hat-konflux Bot commented May 12, 2026 •

edited

Loading