chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #663 · securesign/rekor

red-hat-konflux · 2026-07-17T18:19:52Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
cloud.google.com/go/iam	require	minor	`v1.11.0` → `v1.12.0`
cloud.google.com/go/kms	indirect	minor	`v1.31.0` → `v1.33.0`
cloud.google.com/go/monitoring	indirect	minor	`v1.29.0` → `v1.30.0`
cloud.google.com/go/pubsub	require	major	`v1.50.2` → `v2.6.1`
cloud.google.com/go/pubsub/v2	require	minor	`v2.5.1` → `v2.6.1`
cloud.google.com/go/storage	indirect	minor	`v1.62.0` → `v1.64.0`
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys	indirect	minor	`v1.4.0` → `v1.5.0`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.7.2` → `v1.8.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	indirect	minor	`v1.32.0` → `v1.35.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	indirect	minor	`v0.56.0` → `v0.59.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	indirect	minor	`v0.56.0` → `v0.59.0`
github.com/Masterminds/semver/v3	indirect	minor	`v3.4.0` → `v3.5.0`
github.com/aws/aws-sdk-go-v2	indirect	minor	`v1.42.1` → `v1.43.2`	`v1.43.3`
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	indirect	patch	`v1.7.10` → `v1.7.15`	`v1.7.16`
github.com/aws/aws-sdk-go-v2/config	indirect	patch	`v1.32.30` → `v1.32.33`	`v1.32.34`
github.com/aws/aws-sdk-go-v2/credentials	indirect	patch	`v1.19.29` → `v1.19.32`	`v1.19.33`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	patch	`v1.18.30` → `v1.18.33`	`v1.18.34`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	indirect	patch	`v1.22.18` → `v1.22.37`	`v1.22.38`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	patch	`v1.4.30` → `v1.4.33`	`v1.4.34`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	indirect	patch	`v2.7.30` → `v2.7.33`	`v2.7.34`
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	patch	`v1.4.31` → `v1.4.34`	`v1.4.35`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	patch	`v1.13.13` → `v1.13.14`	`v1.13.15`
github.com/aws/aws-sdk-go-v2/service/internal/checksum	indirect	patch	`v1.9.15` → `v1.9.26`	`v1.9.27`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	patch	`v1.13.30` → `v1.13.33`	`v1.13.34`
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	indirect	patch	`v1.19.23` → `v1.19.34`	`v1.19.35`
github.com/aws/aws-sdk-go-v2/service/s3	indirect	minor	`v1.101.0` → `v1.106.2`	`v1.106.3`
github.com/aws/aws-sdk-go-v2/service/signin	indirect	minor	`v1.4.1` → `v1.5.2`	`v1.5.3`
github.com/aws/aws-sdk-go-v2/service/sso	indirect	minor	`v1.32.1` → `v1.33.2`	`v1.33.3`
github.com/aws/aws-sdk-go-v2/service/ssooidc	indirect	minor	`v1.37.1` → `v1.38.2`	`v1.38.3`
github.com/aws/aws-sdk-go-v2/service/sts	indirect	minor	`v1.44.1` → `v1.45.2`	`v1.45.3`
github.com/aws/smithy-go	indirect	patch	`v1.27.3` → `v1.27.5`	`v1.27.6`
github.com/cenkalti/backoff/v4	indirect	major	`v4.3.0` → `v7.0.0`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/fxamacker/cbor/v2	indirect	patch	`v2.9.0` → `v2.9.2`
github.com/go-logr/logr	indirect	patch	`v1.4.3` → `v1.4.4`
github.com/go-openapi/analysis	indirect	patch	`v0.25.0` → `v0.25.5`
github.com/go-openapi/errors	indirect	patch	`v0.22.7` → `v0.22.8`
github.com/go-openapi/inflect	indirect	major	`v0.21.5` → `v1.0.0`
github.com/go-openapi/jsonpointer	indirect	major	`v0.23.1` → `v1.0.0`
github.com/go-openapi/jsonreference	indirect	major	`v0.21.5` → `v1.0.0`
github.com/go-openapi/loads	indirect	minor	`v0.23.3` → `v0.25.0`
github.com/go-openapi/loads	require	minor	`v0.23.3` → `v0.25.0`
github.com/go-openapi/runtime	indirect	minor	`v0.29.5` → `v0.33.0`
github.com/go-openapi/runtime	require	minor	`v0.29.5` → `v0.33.0`
github.com/go-openapi/spec	indirect	patch	`v0.22.4` → `v0.22.9`
github.com/go-openapi/spec	require	patch	`v0.22.4` → `v0.22.9`
github.com/go-openapi/strfmt	indirect	minor	`v0.26.2` → `v0.27.0`
github.com/go-openapi/strfmt	require	minor	`v0.26.4` → `v0.27.0`
github.com/go-openapi/swag	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag	require	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/cmdutils	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/conv	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/conv	require	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/fileutils	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/jsonname	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/jsonutils	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/loading	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/mangling	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/netutils	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/stringutils	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/typeutils	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/swag/yamlutils	indirect	minor	`v0.26.0` → `v0.28.0`
github.com/go-openapi/validate	indirect	minor	`v0.25.2` → `v0.26.1`
github.com/go-openapi/validate	require	minor	`v0.25.2` → `v0.26.1`
github.com/go-swagger/go-swagger	require	minor	`v0.33.2` → `v0.35.3`	`v0.36.1` (+1)
github.com/google/go-containerregistry	indirect	patch	`v0.21.5` → `v0.21.7`	`v0.21.8`
github.com/grpc-ecosystem/go-grpc-middleware	require	major	`v1.4.0` → `v2.3.3`
github.com/hashicorp/hcl	indirect	major	`v1.0.1-vault-7` → `v2.24.0`
github.com/jedisct1/go-minisign	require	digest	`d2f9f49` → `a09352b`
github.com/klauspost/compress	indirect	minor	`v1.18.6` → `v1.19.1`
github.com/mattn/go-sqlite3	indirect	patch	`v1.14.44` → `v1.14.49`
github.com/oklog/ulid/v2	indirect	patch	`v2.1.1` → `v2.1.2`
github.com/pelletier/go-toml/v2	indirect	minor	`v2.2.4` → `v2.4.3`
github.com/planetscale/vtprotobuf	indirect	digest	`ba97887` → `8ae5a48`
github.com/prometheus/client_golang	require	minor	`v1.23.2` → `v1.24.1`
github.com/prometheus/common	indirect	patch	`v0.70.0` → `v0.70.1`
github.com/redis/go-redis/v9	require	minor	`v9.14.1` → `v9.21.0`
github.com/rogpeppe/go-internal	indirect	minor	`v1.14.1` → `v1.15.0`
github.com/sassoftware/relic/v7	require	major	`v7.6.2` → `v8.2.0`
github.com/sigstore/sigstore	require	patch	`v1.10.5` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/aws	require	patch	`v1.10.5` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	patch	`v1.10.5` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	patch	`v1.10.5` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	require	patch	`v1.10.5` → `v1.10.8`
github.com/spiffe/go-spiffe/v2	indirect	minor	`v2.6.0` → `v2.8.1`
github.com/theupdateframework/go-tuf	require	major	`v0.7.0` → `v2.4.2`
github.com/tink-crypto/tink-go-awskms/v2	require	major	`v2.1.0` → `v3.0.0`
github.com/tink-crypto/tink-go-gcpkms/v2	require	minor	`v2.2.0` → `v2.3.0`
github.com/tink-crypto/tink-go/v2	require	minor	`v2.6.0` → `v2.7.0`
github.com/ulikunitz/xz	indirect	patch	`v0.5.15` → `v0.5.16`
go.opentelemetry.io/contrib/detectors/gcp	indirect	minor	`v1.43.0` → `v1.44.0`
go.step.sm/crypto	require	minor	`v0.79.0` → `v0.87.0`
go.uber.org/zap	require	minor	`v1.27.1` → `v1.28.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.4` → `v3.0.5`
go.yaml.in/yaml/v3	indirect	patch	`v3.0.4` → `v3.0.5`
gocloud.dev	require	minor	`v0.45.0` → `v0.46.0`
golang.org/x/crypto	indirect	minor	`v0.53.0` → `v0.54.0`
golang.org/x/mod	indirect	minor	`v0.36.0` → `v0.38.0`
golang.org/x/net	indirect	minor	`v0.55.0` → `v0.57.0`
golang.org/x/sync	indirect	minor	`v0.21.0` → `v0.22.0`
golang.org/x/sys	indirect	minor	`v0.46.0` → `v0.47.0`
golang.org/x/text	indirect	minor	`v0.38.0` → `v0.40.0`
golang.org/x/tools	indirect	minor	`v0.45.0` → `v0.48.0`
google.golang.org/api	require	minor	`v0.287.1` → `v0.291.0`
google.golang.org/genproto	indirect	digest	`3700d41` → `8efbd57`
google.golang.org/genproto/googleapis/api	indirect	digest	`925bb5d` → `8efbd57`
google.golang.org/genproto/googleapis/rpc	require	digest	`925bb5d` → `8efbd57`
google.golang.org/grpc	require	minor	`v1.82.0` → `v1.83.0`
gopkg.in/ini.v1	require	patch	`v1.67.0` → `v1.67.3`
gopkg.in/yaml.v2	indirect	major	`v2.4.0` → `v3.0.1`
gopkg.in/yaml.v2	require	major	`v2.4.0` → `v3.0.1`
software.sslmate.com/src/go-pkcs12	indirect	patch	`v0.7.1` → `v0.7.3`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.8.0`

Compare Source

What's Changed

Recover from panics in json.Unmarshal to prevent token-cache crashes (fixes #579) by @4gust in #614
fix(base.go): empty partition key causing external cache miss by @MatteoCalabro-TomTom in #615
Add User Federated Identity Credential (user_fic) grant type support by @Avery-Dunn in #619

New Contributors

@MatteoCalabro-TomTom made their first contribution in #615

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.2...1.8.0

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

`v0.59.0`

Compare Source

What's Changed

Adds support for resolving OpenTelemetry authentication extensions by @Angelawork in #1181
update golang.org/x/crypto by @braydonk in #1182
Update module google.golang.org/grpc to v1.82.1 [SECURITY] by @renovate-bot in #1184
Prepare release 0.59.0/1.35.0 by @braydonk in #1183

New Contributors

@Angelawork made their first contribution in #1181

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.58.0...v0.59.0

`v0.58.0`: v1.34.0/v0.58.0

Compare Source

What's Changed

googlemanagedprometheus: Add destination_project_quota by @braydonk in #1175
Prepare release v1.34.0/v0.58.0 by @braydonk in #1178

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0...v0.58.0

`v0.57.0`: v1.33.0/v0.57.0

Compare Source

What's Changed

Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] by @renovate-bot in #1146
Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] by @renovate-bot in #1145
Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] by @renovate-bot in #1144
[chore] retry_on_failure is removed from our exporter by @braydonk in #1151
downgrade davecgh/go-spew, pmezard/go-difflib to tagged releases by @thaJeztah in #1152
Update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY] by @renovate-bot in #1149
Update e2e-testing image to fix presubmits by @dashpole in #1155
Update go.opentelemetry.io/collector by @renovate-bot in #1073
Auto comment /gcbrun for dependency updates by @dashpole in #1154
Revert "Auto comment /gcbrun for dependency updates" by @dashpole in #1157
Update module github.com/prometheus/common to v0.67.5 by @renovate-bot in #1156
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0 in /tools by @dependabot[bot] in #1118
Update golang.org/x by @renovate-bot in #1008
Combine dependency bumps by @dashpole in #1158
Update All Dependencies by @renovate-bot in #1161
Update all major dependencies by @dashpole in #1164
Update All Dependencies by @renovate-bot in #1163
Add AGENTS.md by @dashpole in #1165
Fix CodeQL permissions to allow uploading results by @dashpole in #1166
collector: bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 by @dashpole in #1170
Migrate impersonate to use cloud.google.com/go/auth by @dashpole in #1169
fix: Support OTLP event_name field in logs exporter by @putcho01 in #1088
exporter/collector/logs: accept string-typed line in sourceLocation by @alliasgher in #1142
exporter/collector/logs: use parsed httpRequest.protocol instead of hardcoded HTTP/1.1 by @alliasgher in #1143
exporter/trace: sanitize invalid UTF-8 in span fields by @alliasgher in #1141
chore: update E2E tests to use centralized async cleanup 0.22.0 by @aabmass in #1171
Add support for cloud run worker pools by @dashpole in #1112
Prerelease 1.33.0/v0.57.0 by @avilevy18 in #1173

New Contributors

@thaJeztah made their first contribution in #1152
@putcho01 made their first contribution in #1088
@alliasgher made their first contribution in #1142

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.56.0...v0.57.0

Masterminds/semver (github.com/Masterminds/semver/v3)

`v3.5.0`

Compare Source

What's Changed

Adding more prerelease tests by @mattfarina in #273
Update constraint error messages by @mattfarina in #278
Fix edge cases by @mattfarina in #279
Adding some checks in by @mattfarina in #280
Updating deps by @mattfarina in #281
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #282
Bump actions/cache from 4.2.3 to 5.0.5 by @dependabot[bot] in #283
Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by @dependabot[bot] in #284
Updating gitignore for devcontainers by @mattfarina in #286
Fixing some quality issues by @mattfarina in #287

New Contributors

@dependabot[bot] made their first contribution in #282

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

`v1.43.2`

Compare Source

`v1.43.1`

Module Highlights

github.com/aws/aws-sdk-go-v2/service/applicationsignals: v1.11.0
- Feature: Application Signals now supports creating Service Level Objectives on service dependencies. Users can now create or update SLOs on discovered service dependencies to monitor their standard application metrics.
github.com/aws/aws-sdk-go-v2/service/codebuild: v1.58.0
- Feature: This release adds support for environment type WINDOWS_SERVER_2022_CONTAINER in ProjectEnvironment
github.com/aws/aws-sdk-go-v2/service/ecr: v1.43.1
- Documentation: Fix for customer issues related to AWS account ID and size limitation for token.
github.com/aws/aws-sdk-go-v2/service/ecs: v1.54.4
- Documentation: This is an Amazon ECS documentation only update to address various tickets.
github.com/aws/aws-sdk-go-v2/service/lexmodelsv2: v1.51.0
- Feature: Release feature of errorlogging for lex bot, customer can config this feature in bot version to generate log for error exception which helps debug
github.com/aws/aws-sdk-go-v2/service/medialive: v1.72.0
- Feature: Added support for SMPTE 2110 inputs when running a channel in a MediaLive Anywhere cluster. This feature enables ingestion of SMPTE 2110-compliant video, audio, and ancillary streams by reading SDP files that AWS Elemental MediaLive can retrieve from a network source.

`v1.43.0`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.41.10
- Bug Fix: Replace usages of deprecated io/ioutil package with io.
github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.58.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ec2: v1.305.0
- Feature: Amazon EC2 now supports self-service cancellation of future-dated Capacity Reservations. A cancellation charge applies based on remaining commitment. Customers can generate a cancellation quote to review charges before confirming.
github.com/aws/aws-sdk-go-v2/service/elasticache: v1.54.0
- Feature: Amazon ElastiCache for Valkey now supports durability. This new capability is enabled through a Multi-AZ transactional log, enabling fast recovery and restart during failures.
github.com/aws/aws-sdk-go-v2/service/georoutes: v1.11.0
- Feature: Added Transit and Intermodal travel modes to CalculateRoutes. Plan routes using public transit (bus, subway, train, ferry) or combine transit with driving, taxi, and rental car segments in a single multi-modal route.
github.com/aws/aws-sdk-go-v2/service/guardduty: v1.79.0
- Feature: Amazon GuardDuty Runtime Monitoring now supports 3 new SensitiveFileModified finding types (Persistence, PrivilegeEscalation, DefenseEvasion) that detect when security-sensitive system files are modified on EC2 instances or containers, indicating potential compromise through file tampering.
github.com/aws/aws-sdk-go-v2/service/iot: v1.75.1
- Documentation: Fleet indexing documentation update
github.com/aws/aws-sdk-go-v2/service/keyspacesstreams: v1.8.0
- Feature: Added iterator description to the GetRecords API response for Amazon Keyspaces Change Data Capture (CDC) streams, enabling consumers to track their current position within the stream.
github.com/aws/aws-sdk-go-v2/service/lambda: v1.92.0
- Feature: Adds configuration for tag propagation to Lambda-managed resources.
github.com/aws/aws-sdk-go-v2/service/lexruntimeservice: v1.30.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/managedblockchain: v1.32.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/marketplacemetering: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mediaconvert: v1.92.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/medialive: v1.98.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mediastore: v1.30.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/migrationhub: v1.32.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mturk: v1.31.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/neptune: v1.45.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/personalizeruntime: v1.34.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/pi: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/pinpoint: v1.40.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/pinpointemail: v1.30.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/polly: v1.58.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ram: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/redshift: v1.63.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/rekognition: v1.52.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi: v1.33.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/route53: v1.63.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/route53domains: v1.36.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/s3: v1.103.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.251.0
- Feature: Amazon SageMaker Job is a new service to help you manage various workloads related to model fine tuning, evaluation etc. Two job categories are supported today, AgentRFT for multi-turn agentic reinforcement fine tuning, and AgentRFTEvaluation for evaluating base model or trained model from AgentRFT.
github.com/aws/aws-sdk-go-v2/service/sagemakerjobruntime: v1.0.0
- Release: New AWS service client module
- Feature: Amazon SageMaker Job Runtime is a new service for managing trajectory data during multi-turn customization jobs. It provides APIs to send inference requests to models during job execution, mark rollouts as complete, and submit reward values for training trajectories.
github.com/aws/aws-sdk-go-v2/service/secretsmanager: v1.42.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/servicecatalog: v1.40.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sfn: v1.42.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/shield: v1.35.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/snowball: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sqs: v1.43.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ssm: v1.69.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sso: v1.31.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/storagegateway: v1.44.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sts: v1.43.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/swf: v1.34.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/transcribe: v1.56.0
- Feature: Release new Language locales including am-ET, es-MX, fa-AF, ht-HT, jv-ID, km-KH, my-MM, sq-AL, ne-NP. The commit shows past locales that have already been release which include cy-gb, ga-ie, gd-gb.
github.com/aws/aws-sdk-go-v2/service/transfer: v1.73.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/waf: v1.31.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/xray: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset

aws/smithy-go (github.com/aws/smithy-go)

`v1.27.5`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.5
- Bug Fix: Fix a performance issue in awsQuery with large response payloads.

`v1.27.4`

Compare Source

cenkalti/backoff (github.com/cenkalti/backoff/v4)

felixge/httpsnoop (github.com/felixge/httpsnoop)

`v1.1.0`

Compare Source

fxamacker/cbor (github.com/fxamacker/cbor/v2)

`v2.9.2`

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed

Reject encoding indefinite-length map with odd item count by @fxamacker in #764
Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @fxamacker in #765
Make TagSet.Remove a no-op when contentType is nil by @fxamacker in #766
Refactor indefinite-length encoding and improve chunk validation during encoding by @fxamacker in #767
Add more tests, fix a nit in unreachable panic message, update docs & ci by @fxamacker in #768

CI / GitHub Actions and Docs

🔎 Details...

Bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #760
Bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #761
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #763
Update README for v2.9.2 release by @fxamacker in #769

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

`v2.9.1`

Compare Source

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the `keyasint` feature

These changes only affect Go struct fields tagged with keyasint:

[Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #757)
[Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #757)
[Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #757)

🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

[Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #753)
[Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #753)
[Encoding] Reject encoding nil inside indefinite-length strings (PR #750)
[Diagnostic] Accept valid U+FFFD replacement character (PR #753)

What's Changed

🆕 Add TimeMode encoding option TimeRFC3339NanoUTC by @fxamacker in #688
Use actual negative zero in tests by @makew0rld in #708
Reject encoding nil inside CBOR indefinite-length string by @fxamacker in #750
Refactor and add tests by @fxamacker in #752
Small bugfixes, defensive checks, and improvements by @fxamacker in #753
Refactor parseMapToStruct(), getDecodingStructType(), getEncodingStructType(), and field struct by @fxamacker in #754
Fix several issues related to keyasint tag option by @fxamacker in #757

CI / GitHub Actions and Docs

🔎 Details...

Bump github/codeql-action from 3.29.2 to 3.29.4 by @dependabot[bot] in #690
Bump github/codeql-action from 3.29.4 to 3.29.5 by @dependabot[bot] in #691
Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #696
Bump github/codeql-action from 3.29.7 to 3.29.9 by @dependabot[bot] in #697
Bump github/codeql-action from 3.29.9 to 3.29.11 by @dependabot[bot] in #700
Bump github/codeql-action from 3.29.11 to 3.30.0 by @dependabot[bot] in #702
Bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #703
Bump github/codeql-action from 3.30.0 to 3.30.3 by @dependabot[bot] in #706
Bump github/codeql-action from 3.30.3 to 3.30.4 by @dependabot[bot] in #710
Bump github/codeql-action from 3.30.4 to 3.30.6 by @dependabot[bot] in #712
Bump github/codeql-action from 3.30.6 to 4.30.7 by @dependabot[bot] in #713
Bump github/codeql-action from 4.30.7 to 4.30.8 by @dependabot[bot] in #716
Bump github/codeql-action from 4.30.8 to 4.30.9 by @dependabot[bot] in #718
Bump github/codeql-action from 4.30.9 to 4.31.2 by @dependabot[bot] in #720
Bump github/codeql-action from 4.31.2 to 4.31.3 by @dependabot[bot] in #721
Bump github/codeql-action from 4.31.3 to 4.31.4 by @dependabot[bot] in #724
Bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #725
Bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in #726
Bump github/codeql-action from 4.31.4 to 4.31.5 by @dependabot[bot] in #727
Bump github/codeql-action from 4.31.5 to 4.31.6 by @dependabot[bot] in #728
Bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #729
Bump github/codeql-action from 4.31.6 to 4.31.8 by @dependabot[bot] in #732
Bump github/codeql-action from 4.31.8 to 4.31.9 by @dependabot[bot] in #733
Bump github/codeql-action from 4.31.9 to 4.31.10 by @dependabot[bot] in #738
Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #739
Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #740
Bump github/codeql-action from 4.31.10 to 4.32.0 by @dependabot[bot] in #742
Bump github/codeql-action from 4.32.0 to 4.32.3 by @dependabot[bot] in #745
Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #746
Bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #747
Bump github/codeql-action from 4.32.4 to 4.32.6 by @dependabot[bot] in #748
Bump github/codeql-action from 4.32.6 to 4.34.0 by @dependabot[bot] in #749
Bump github/codeql-action from 4.34.0 to 4.34.1 by @dependabot[bot] in #751
Update README status section by @fxamacker in #758

New Contributors

@makew0rld made their first contributihttps://github.com/fxamacker/cbor/pull/708ll/708

Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1

go-logr/logr (github.com/go-logr/logr)

`v1.4.4`

Compare Source

What's Changed

drop +build tags by @pohly in [#401](https://redirect.github.com/go-logr/logr/

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-07-17T18:19:55Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go mod tidy
go: downloading github.com/sassoftware/relic/v8 v8.2.0
go: downloading github.com/theupdateframework/go-tuf/v2 v2.4.2
go: downloading cloud.google.com/go/pubsub v1.50.2
go: downloading github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.3
go: downloading github.com/tink-crypto/tink-go-awskms/v3 v3.0.0
go: downloading github.com/go-openapi/testify/v2 v2.6.0
go: downloading github.com/lib/pq v1.12.0
go: downloading github.com/mattn/go-sqlite3 v1.14.49
go: downloading github.com/bsm/ginkgo/v2 v2.12.0
go: downloading github.com/bsm/gomega v1.27.10
go: downloading github.com/hashicorp/go-hclog v1.6.3
go: downloading k8s.io/api v0.35.3
go: downloading github.com/ProtonMail/go-crypto v1.0.0
go: downloading github.com/go-openapi/testify/enable/yaml/v2 v2.6.0
go: downloading github.com/onsi/ginkgo v1.16.5
go: downloading github.com/onsi/gomega v1.25.0
go: downloading github.com/codahale/rfc6979 v0.0.0-20141003034818-6a90f24967eb
go: downloading gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
go: downloading github.com/go-openapi/swag/jsonutils/fixtures_test v0.28.0
go: downloading github.com/zeebo/xxh3 v1.1.0
go: downloading github.com/frankban/quicktest v1.14.6
go: downloading github.com/fatih/color v1.18.0
go: downloading github.com/mattn/go-colorable v0.1.14
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache v0.4.0
go: downloading github.com/Azure/azure-sdk-for-go v68.0.0+incompatible
go: downloading github.com/go-test/deep v1.1.1
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.44.0
go: downloading github.com/google/go-replayers/grpcreplay v1.3.0
go: downloading github.com/google/go-replayers/httpreplay v1.2.0
go: downloading github.com/golang/protobuf v1.5.4
go: downloading github.com/kr/pretty v0.3.1
go: downloading github.com/klauspost/cpuid/v2 v2.2.10
go: downloading go.opentelemetry.io/otel/metric/x v0.66.0
go: downloading github.com/cloudflare/circl v1.3.8
go: downloading github.com/nxadm/tail v1.4.11
go: downloading k8s.io/apimachinery v0.35.3
go: downloading github.com/c2sp/wycheproof v0.0.0-20260105152342-fca0d3ba9f12
go: downloading github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/cloudmock v0.59.0
go: downloading github.com/kr/text v0.2.0
go: downloading github.com/rogpeppe/go-internal v1.15.0
go: downloading github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8
go: downloading gonum.org/v1/gonum v0.17.0
go: downloading gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
go: downloading sigs.k8s.io/randfill v1.0.0
go: downloading k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.0
go: downloading github.com/envoyproxy/go-control-plane v0.14.0
go: downloading cloud.google.com/go/logging v1.19.0
go: downloading cloud.google.com/go/trace v1.16.0
go: downloading github.com/google/martian/v3 v3.3.3
go: downloading github.com/stretchr/objx v0.5.2
go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/envoyproxy/go-control-plane/ratelimit v0.1.0
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
go: downloading github.com/AzureAD/microsoft-authentication-extensions-for-go/cache v0.1.1
go: downloading github.com/keybase/go-keychain v0.0.1
go: downloading go.einride.tech/aip v0.83.0
go: finding module for package github.com/theupdateframework/go-tuf/v2/pkg/keys
go: finding module for package github.com/theupdateframework/go-tuf/v2/data
go: finding module for package github.com/theupdateframework/go-tuf/v2/verify
go: finding module for package cloud.google.com/go/pubsub/v2/v2
go: downloading cloud.google.com/go/pubsub v1.51.0
go: finding module for package github.com/grpc-ecosystem/go-grpc-middleware/v2/retry
go: finding module for package github.com/theupdateframework/go-tuf/v2/pkg/deprecated/set_ecdsa
go: finding module for package github.com/theupdateframework/go-tuf/v2
go: github.com/sigstore/rekor/pkg/pki/tuf imports
	github.com/theupdateframework/go-tuf/v2/data: module github.com/theupdateframework/go-tuf/v2@latest found (v2.4.2), but does not contain package github.com/theupdateframework/go-tuf/v2/data
go: github.com/sigstore/rekor/pkg/pki/tuf imports
	github.com/theupdateframework/go-tuf/v2/pkg/keys: module github.com/theupdateframework/go-tuf/v2@latest found (v2.4.2), but does not contain package github.com/theupdateframework/go-tuf/v2/pkg/keys
go: github.com/sigstore/rekor/pkg/pki/tuf imports
	github.com/theupdateframework/go-tuf/v2/verify: module github.com/theupdateframework/go-tuf/v2@latest found (v2.4.2), but does not contain package github.com/theupdateframework/go-tuf/v2/verify
go: github.com/sigstore/rekor/pkg/pubsub/gcp imports
	cloud.google.com/go/pubsub/v2/v2: module cloud.google.com/go/pubsub/v2@latest found (v2.6.1), but does not contain package cloud.google.com/go/pubsub/v2/v2
go: github.com/sigstore/rekor/pkg/signer imports
	github.com/grpc-ecosystem/go-grpc-middleware/v2/retry: module github.com/grpc-ecosystem/go-grpc-middleware/v2@latest found (v2.3.3), but does not contain package github.com/grpc-ecosystem/go-grpc-middleware/v2/retry
go: github.com/sigstore/rekor/pkg/types/tuf/v0.0.1 imports
	github.com/theupdateframework/go-tuf/v2/pkg/deprecated/set_ecdsa: module github.com/theupdateframework/go-tuf/v2@latest found (v2.4.2), but does not contain package github.com/theupdateframework/go-tuf/v2/pkg/deprecated/set_ecdsa
go: github.com/sigstore/rekor/pkg/pki/tuf tested by
	github.com/sigstore/rekor/pkg/pki/tuf.test imports
	github.com/theupdateframework/go-tuf/v2: module github.com/theupdateframework/go-tuf/v2@latest found (v2.4.2), but does not contain package github.com/theupdateframework/go-tuf/v2

sampras343 · 2026-07-17T18:42:52Z

This only has breaking changes.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Jul 17, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 27 times, most recently from 5f1b1e6 to 5312294 Compare July 22, 2026 17:14

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 29 times, most recently from f431bda to d07ffc5 Compare July 30, 2026 02:40

chore(deps): update go dependencies

bef4c68

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update go dependencies - #663

chore(deps): update go dependencies#663
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/go-deps

red-hat-konflux Bot commented Jul 17, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Jul 17, 2026 •

edited

Loading

Uh oh!

sampras343 commented Jul 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

red-hat-konflux Bot commented Jul 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

v0.58.0: v1.34.0/v0.58.0

What's Changed

v0.57.0: v1.33.0/v0.57.0

What's Changed

New Contributors

What's Changed

New Contributors

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

What's Changed

CI / GitHub Actions and Docs

🐞 Bug fixes related to the keyasint feature

🐞 Other bug fixes and defensive checks

What's Changed

CI / GitHub Actions and Docs

New Contributors

What's Changed

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Jul 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

sampras343 commented Jul 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

red-hat-konflux Bot commented Jul 17, 2026 •

edited

Loading

`v0.58.0`: v1.34.0/v0.58.0

`v0.57.0`: v1.33.0/v0.57.0

🐞 Bug fixes related to the `keyasint` feature

red-hat-konflux Bot commented Jul 17, 2026 •

edited

Loading