chore(deps/tools): bump the go-minor group across 1 directory with 7 updates by dependabot[bot] · Pull Request #6424 · akuity/kargo

dependabot · 2026-06-07T05:23:36Z

Bumps the go-minor group with 5 updates in the /hack/tools directory:

Package	From	To
github.com/bufbuild/buf	`1.61.0`	`1.70.0`
github.com/go-swagger/go-swagger	`0.33.2`	`0.34.1`
github.com/golangci/golangci-lint/v2	`2.10.1`	`2.12.2`
github.com/oapi-codegen/oapi-codegen/v2	`2.6.0`	`2.7.1`
helm.sh/helm/v3	`3.19.5`	`3.21.0`

Updates github.com/bufbuild/buf from 1.61.0 to 1.70.0

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.70.0

Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.

Fix LSP textDocument/documentSymbol marking every symbol as deprecated.

Add error for when a dependency is added to buf.yaml and is missing from buf.lock.

Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.

Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

v1.69.0

Increase check plugin WASM memory limits to 1GiB.

Fix LSP stale diagnostics persisting after a file is closed or deleted.

Fix handling of unprefixed newlines in block comments.

Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".

Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

v1.68.4

Fix duplicated extension tags across imports from compiler.

v1.68.3

Fix buf format error handling for edition 2024.

v1.68.2

Fix build failures for modules with a vendored descriptor.proto.

Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.

Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.

Add --debug-address flag to buf lsp serve to provide debug and profile support.

v1.68.1

Revert the use of the new compiler report format and properly ungate Editions 2024 features.

Fix absolute imports (leading-dot) marked unused in diagnostics.

v1.68.0

This release ports buf to our new Protobuf compiler, already used to power the Buf LSP. It uses a query-driven frontend and a new AST and intermediate representation, designed from the ground up to bring several improvements:

Better diagnostics. The new compiler produces rich, structured diagnostic reports with precise source locations. It also catches issues that protoc misses, such as duplicate repeated modifiers.

Editions 2024 support. Full support for Protobuf Editions 2024.

Faster and more memory efficient. Designed for large workspaces, the new compiler uses less memory and compiles faster than the previous implementation.

This is a seamless upgrade for buf users: no changes are required, the output has been automatically updated to a new, richer diagnostics report.

Use new compiler for build process and support Editions 2024 features.

Add LSP document links for buf.yaml deps, buf.gen.yaml remote plugins and input modules, buf.policy.yaml name and BSR plugins, and buf.lock dep names, making each a clickable link to its BSR page.

Add LSP code lenses for buf.yaml files to update all dependencies (buf.dep.updateAll) or check for available updates (buf.dep.checkUpdates).

Improve shell completions for buf flags with fixed value sets and file/directory arguments.

Add buf curl URL path shell completions (service and method names) via server reflection, --schema, or the local buf module.

Add support for Edition 2024 syntax to buf format.

Fix buf generate --clean deleting files from nested plugin output directories.

... (truncated)

Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.70.0] - 2026-05-25

Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.

Fix LSP textDocument/documentSymbol marking every symbol as deprecated.

Add error for when a dependency is added to buf.yaml and is missing from buf.lock.

Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.

Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

[v1.69.0] - 2026-04-29

Increase check plugin WASM memory limits to 1GiB.

Fix LSP stale diagnostics persisting after a file is closed or deleted.

Fix handling of unprefixed newlines in block comments.

Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".

Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

[v1.68.4] - 2026-04-22

Fix duplicated extension tags across imports from compiler.

[v1.68.3] - 2026-04-20

Fix buf format error handling for edition 2024.

[v1.68.2] - 2026-04-17

Fix build failures for modules with a vendored descriptor.proto.

Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.

Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.

Add --debug-address flag to buf lsp serve to provide debug and profile support.

[v1.68.1] - 2026-04-14

Revert the use of the new compiler report format and properly ungate Editions 2024 features.

Fix absolute imports (leading-dot) marked unused in diagnostics.

[v1.68.0] - 2026-04-14

Use new compiler for build process and support Editions 2024 features.

Add LSP document links for buf.yaml deps, buf.gen.yaml remote plugins and input modules, buf.policy.yaml name and BSR plugins, and buf.lock dep names, making each a clickable link to its BSR page.

Add LSP code lenses for buf.yaml files to update all dependencies (buf.dep.updateAll) or check for available updates (buf.dep.checkUpdates).

Improve shell completions for buf flags with fixed value sets and file/directory arguments.

Add buf curl URL path shell completions (service and method names) via server reflection, --schema, or the local buf module.

Add support for Edition 2024 syntax to buf format.

Fix buf generate --clean deleting files from nested plugin output directories.

[v1.67.0] - 2026-04-01

... (truncated)

Commits

4f657db Release v1.70.0 (#4556)
f278fa0 Bump buf.build/gen/go/bufbuild/registry/connectrpc/go from 1.19.2-20260507063...
977b89b Make upgrade (#4555)
88dfb34 Lint MessageRules.oneof in PROTOVALIDATE check (#4540)
e96239e Filter out GIT_WORK_TREE from cloner environment variables (#4549)
d0e7d39 Add env override test cases to git package (#4550)
3747817 Bump actions/create-github-app-token from 3.1.1 to 3.2.0 (#4544)
9eddb9c Make upgrade (#4548)
d460060 Update README.md (#4547)
2dae477 Fix LSP documentSymbol marking every symbol as deprecated (#4531)
Additional commits viewable in compare view

Updates github.com/go-swagger/go-swagger from 0.33.2 to 0.34.1

Release notes

Sourced from github.com/go-swagger/go-swagger's releases.

v0.34.1

go-swagger release 0.34.1

Released on 2026 Jun 05

0.34.1 - 2026-06-05

Fixed regression on initialisms (codegen)

Full Changelog: go-swagger/go-swagger@v0.34.0...v0.34.1

7 commits in this release.

Fixed bugs

fix(codegen): fixed regression from v0.34.0 : initialisms skipped by @fredbi in #3360 ...

Miscellaneous tasks

fix(ci): fixed release announcement to discord by @fredbi in #3354 ...

ci: fixed event by @fredbi ...

ci: repair release by @fredbi in #3353 ...

Updates

chore(deps): bump the development-dependencies group with 3 updates by @dependabot[bot] in #3359 ...

chore(deps): bump golang from 91eda97 to f23e8b2 in the development-dependencies group across 1 directory by @dependabot[bot] in #3356 ...

chore(deps): bump the development-dependencies group with 2 updates by @dependabot[bot] in #3355 ...

People who contributed to this release

@fredbi

go-swagger license terms

[![License][license-badge]][license-url]

... (truncated)

Commits

e5c5fec fix(codegen): fixed regression from v0.34.0 : initialisms skipped (#3360)
65d6af0 chore(deps): bump the development-dependencies group with 3 updates
b1dfdf0 chore(deps): bump golang
340826c chore(deps): bump the development-dependencies group with 2 updates
d9244f5 fix(ci): fixed release announcement to discord (#3354)
ba881e3 ci: fixed event
70b7c21 ci: repair release (#3353)
9b15dfe doc: announcements before cutting v0.34.0 (#3352)
4068f65 feat(client): added method to configure client-side custom producers/consumer...
747db03 test: fix fake flaky test reporting (#3350)
Additional commits viewable in compare view

Updates github.com/golangci/golangci-lint/v2 from 2.10.1 to 2.12.2

Release notes

Sourced from github.com/golangci/golangci-lint/v2's releases.

v2.12.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

0b01827ae79a0cb92002b4b39867d133cef4c05c build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 in /pkg/golinters/ginkgolinter/testdata in the linter-testdata group across 1 directory (#6559)

1a0697fc84d7f1376c8d8b1ebe20d9331c3d221f build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1 (#6548)

f11cfe0f968601fb4cf40c704ca18e97b49282dd build(deps): bump github.com/ryancurrah/gomodguard/v2 from 2.1.0 to 2.1.3 (#6549)

fb2c2411a7e6b05778c097c971e4017d2a6ef5c9 build(deps): bump github.com/shirou/gopsutil/v4 from 4.26.3 to 4.26.4 (#6547)

9a10710cd9d198dbda7ebdf39f7be4c659bc20c9 build(deps): bump github.com/uudashr/iface from 1.4.1 to 1.4.2 (#6557)

81e8f81bbb341152bb21dc516981cb4c30712088 gomodguard: fix blocked configuration (#6561)

v2.12.1

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

[!IMPORTANT] If you are using the install script from the master branch: https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh This branch is not used anymore, we are using main.

We recommend using https://golangci-lint.run/install.sh as URL to install golangci-lint.

https://golangci-lint.run/docs/welcome/install/local/#binaries

35b2189782a6a059489289257e6523550167cb64 fix: install.sh script (#6539)

3a006ab284f52a5aac0a7daa77ae683e43fb7b69 gomodguard: fix panic with migration suggestion (#6542)

v2.12.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint/v2's changelog.

v2.12.2

Released on 2026-05-06

Linters bug fixes

gomodguard_v2: fix blocked configuration

gomodguard_v2: from 2.1.0 to 2.1.3

iface: from 1.4.1 to 1.4.2

v2.12.1

Released on 2026-05-01

Linters bug fixes

gomodguard_v2: fix panic with migration suggestion

Misc.

fix install.sh script (if you are still using an URL based on the branch master, please update to use https://golangci-lint.run/install.sh)

v2.12.0

Released on 2026-05-01

New linters

Add clickhouselint linter https://github.com/ClickHouse/clickhouse-go-linter

Linters new features or changes

dupl: from f665c8d69b32 to c99c5cf5c202 (extended detection)

funcorder: from 0.5.0 to 0.6.0 (new option: function)

goconst: add an option to ignore strings from tests

goconst: from 1.8.2 to 1.10.0 (extended detection)

gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)

gosec: from 619ce2117e08 to 2.26.1 (new checks: G124, G708, G709, G710)

govet: add inline analyzer

makezero: from 2.1.0 to 2.2.1 (support slice type aliases)

paralleltest: expose checkcleanup option

sloglint: from 0.11.1 to 0.12.0 (new options: allowed-keys, custom-funcs)

wsl_v5: from 5.6.0 to 5.8.0 (new option: cuddle-max-statements; new checks: after-decl, after-defer, after-expr, after-go, cuddle-group)

Linters bug fixes

forbidigo: from 2.3.0 to 2.3.1

godot: from 1.5.4 to 1.5.6

govet-modernize: from 0.43.0 to 0.44.0

ireturn: from 0.4.0 to 0.4.1

rowserrcheck: from 1.1.1 to c5f79b8

Misc.

Decrease cache entropy

Embed the JSON schema in the binary

Filter env vars when cloning the repository with the custom command

v2.11.4

Released on 2026-03-22

... (truncated)

Commits

c0d3ddc chore: prepare release
41f8dfb dev: keep only JSONSchema (#6564)
81e8f81 gomodguard: fix blocked configuration (#6561)
9a10710 build(deps): bump github.com/uudashr/iface from 1.4.1 to 1.4.2 (#6557)
0b01827 build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 in /pkg/gol...
18bc4bf docs: update GitHub Action assets (#6554)
54a04eb dev: update Hugo (#6553)
0e8093b docs: update documentation assets (#6552)
b665704 dev: workaround for post-release trigger (#6551)
006d012 dev: update documentation theme (#6550)
Additional commits viewable in compare view

Updates github.com/oapi-codegen/oapi-codegen/v2 from 2.6.0 to 2.7.1

Release notes

Sourced from github.com/oapi-codegen/oapi-codegen/v2's releases.

Security fix for Go code injection

This is a security fix for a code injection vulnerability in v2.7.0, please see:

GHSA-rjwr-m7qx-3fjr

[!NOTE] A vulnerability like this requires that it is missed in code review and that you then call the malicious method.

Using an init() function could be enough to not require a direct call to the code, and instead rely on you importing the package, but either way, code review should be performed before any oapi-codegen generated code is executed.

We strongly recommend all users to be reviewing changes to their generated code before they execute anything within it, to protect against supply chain attacks or malicious injected code.

This is also why we recommend oapi-codegen generated code is committed to source control.

We're more strict about escaping strings passed into the OpenAPI specification, so that people can't inject Go code into generated code.

The problem was that it was possible to craft a description for server URL's which would emit arbitrary Go code, so if an attacker controlled your specification, they could inject Go code into your generated code which could do something malicious.

v2.7.0: Squashing bugs, many bugs (and adding some features)

Many improvements and even more bug fixes

This v2.7.0 release of oapi-codegen contains quite a bit of internal refactoring, focused on our most historically fragile code paths, which relate to the aggregate types (allOf/anyOf/oneOf), $ref to external specs, enums, and the spec traversal logic missing quite a few leaf nodes where models should have been generated, but were skipped.

The biggest changes are explicitly described in the sections below, and the full list of commits is at the bottom.

Thank you to all contributors, we've been going through all past PR's and updating them and merging where we can, and thanks to all our users for reporting issues that you hit.

I've (@mromaszewicz) used a lot of LLM help here to scrub through old issues and do some deep internal refactoring to address common problem areas. I intend to continue doing this, since the conditional generation logic is getting quite complicated. When I originally released oapi-codegen, the use case was much simpler, all the models were under #/components/schemas, and all the references to them were in the requests, responses, etc. I never imagine how many things would be external references or unions, and how many complex OpenAPI specifications people would be generating code for. The initial design was never flexible enough to handle that, so ongoing bug fixes are getting increasingly complex due to edge cases. This version has a lot of internal changes you won't see as a user, but the way we handle type generation internally is unifying lots of copy/paste re-implementations into reusable code for consistency. Most of these changes can be done transparently, but some can't, so, onto the changes:

Code generation changes which might require some changes on your end

This release contains three changes, all very narrow in scope, which will require some manual adjustment of your own code. We've decided that these are small enough and uncommon enough not to require opt-in, which causes internal complexity. It's always a judgment call with these. If we got it wrong, we're happy to revisit it in a maintenance release.

Strict-server external response refs require strict-server generation in both packages (#2357)

If your strict-server spec uses an external $ref to a components/responses/... defined in another spec, that other spec must also be generated with strict-server: true. Add it to the source spec's config and regenerate:
# config for the spec being $ref'd
generate:
  models: true
  strict-server: true   # now required when imported by a strict-server spec
This restores the v2.0.0 behavior that lets you cast response models across package boundaries — the standard pattern for sharing error models (e.g. a common 400) across services. PR #1387 had silently changed the embedded type from N400JSONResponse to the bare externalRef0.N400, so the local and external response structs no longer had matching types and casts stopped compiling.

Many more anonymous inner schemas are now hoisted into top level schemas

... (truncated)

Commits

19c6282 Improve string escaping and add tests (#2396)
b363ca5 refactor(codegen): better Swagger compression, modern naming (#1909)
08b3018 Route server enums through general enums codegen (#2358)
fbc8e0d revert external-ref carve-out in strict-server response embedding (#2010) (#2...
7517e09 respect output file path on gofmt failure (#2356)
9643421 fix example codegen (#2354)
036a54b per-operation middleware in Echo (#2353)
3338f93 Strict server: gate no-content response headers on nullable/optional (#2351)
218effe Synchronize strict servers (#2350)
81b9d95 Overhaul anonymous schema hoisting (#2348)
Additional commits viewable in compare view

Updates golang.org/x/tools from 0.42.0 to 0.45.0

Commits

2aabba0 go.mod: update golang.org/x dependencies
ef989b3 go/types/internal/play: show Info.Instances[Ident]
21d44f2 go/analysis/passes/inline: document skipping of TestF->F calls
ec83c21 go/analysis/passes/modernize: minmax: only remove exact userdefined
5625353 go/analysis/passes/modernize: improve value variable name generation
15a3bd5 gopls/internal/analysis/errorsastype: imporove example clarity
cd57ef8 go/packages: include dependency errors when CompiledGoFiles is missing
053fdbc go/analysis/passes/modernize: minmax: fix pure operands only
bf84681 go/analysis/passes/errorsas: add example of invalid errors.As use
23921d1 gopls: add errorsastype analyzer
Additional commits viewable in compare view

Updates helm.sh/helm/v3 from 3.19.5 to 3.21.0

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.

[!WARNING] Helm v3 is approaching end-of-life. Please update to Helm v4.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:

for questions and just to hang out

for discussing PRs, code, and bugs

Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom

Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Kubernetes client libraries to v1.36

notable changes here

Installation and Upgrading

Download Helm v3.21.0. The common platform binaries are here:

MacOS amd64 (checksum / 8bc0c1f85f8738cc3cda4a2cc73047145bcdcb1f4d9cdcc29073037bfb22fa2e)

MacOS arm64 (checksum / 68bfbdc022c543a2a022597b20298216877e98abe6e4a345d3ecf114d79cae5f)

Linux amd64 (checksum / 0093eb572e3d2380f094df162ddb525e219249de88957afe24cfbb19632acd36)

Linux arm (checksum / d310ac387324538a37192e8e13628eb1def2596bbac6b6481ae20d8d5e3532bd)

Linux arm64 (checksum / 8de5a0c9a47431e59fd560e91e0779c8cf9316c383da7efb84128a4c339ecb2d)

Linux i386 (checksum / fc85f14c9ce7e6a48a2b19a97edbc5529ed7aa2bc10f3d2c241e1c2ef12ccd22)

Linux ppc64le (checksum / e2dced0f903acda417f879012c7e09ca461000e26a04e8f7a1cfe0dcf495f62c)

Linux s390x (checksum / a176d7460a615b8df5b1a58ecf09fcc731c7733ca4cf10116cf198575b0371b5)

Linux riscv64 (checksum / 4935c95c55bc5c3357143698a87185e17a39de9b6148dfd6cce0fc11859dbfeb)

Windows amd64 (checksum / 3ea6b8383e6c0b7ce45d06a5746313b8e9225edd88d42f4f64582ff3792d7b55)

Windows arm64 (checksum / 90d8c87e07267e6c71e678c9e33dd11cc121789c823ccc380de9d1dd521c8cba)

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

3.21.1 will contain only bug fixes.

3.22.0 is the next feature release for Kubernetes v1.37

Changelog

[v3] Bump to version v3.21 e0878d41b711792be60777fd65ad23a101e6b85f (George Jenkins)

fix: upgrade opentelemetry packages to patch CVEs 13d5fc4ae0e7222e1af8796ff4fa467b52208471 (Terry Howe)

fix: Chart dot-name path bug 2552884e3bc1b763c3901c5ea7240b59ef6791f1 (George Jenkins)

fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6 (Terry Howe)

add image index test b0dfec5af4d7f642d8dea3b9058856541fe5017c (Pedro Tôrres)

... (truncated)

Commits

e0878d4 [v3] Bump to version v3.21
4d4902c Merge pull request #32041 from TerryHowe/fix/upgrade-otel-cves
13d5fc4 fix: upgrade opentelemetry packages to patch CVEs
a60cb79 Merge commit from fork
d3bc853 Merge pull request #32026 from gjenkins8/gjenkins/code_action_pin_v3
2552884 fix: Chart dot-name path bug
ec05dd5 fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow
6d809b2 Merge pull request #31883 from t0rr3sp3dr0/pedrotorres/backport-31776-to-v3
b0dfec5 add image index test
e629995 fix pulling charts from OCI indices
Additional commits viewable in compare view

Updates k8s.io/code-generator from 0.34.3 to 0.35.1

Commits

cf6ffee Update dependencies to v0.35.1 tag
840eca3 Merge remote-tracking branch 'origin/master' into release-1.35
f82ba68 Bump golang.org/x/crypto to v0.45.0
6c03715 Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix
ca37a69 vendor: update vendor and license metadata after replacing BeTrue usage in cs...
fda29a2 Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...
8740cd1 Update vendored dependencies
1bd8803 Merge pull request #135123 from yongruilin/fix-ratcheting
6affd9b run update-codegen.sh
539cfc4 fix(validation-gen): Correct ratcheting for uncorrelated old values
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the go-minor group with 5 updates in the /hack/tools directory: | Package | From | To | | --- | --- | --- | | [github.com/bufbuild/buf](https://github.com/bufbuild/buf) | `1.61.0` | `1.70.0` | | [github.com/go-swagger/go-swagger](https://github.com/go-swagger/go-swagger) | `0.33.2` | `0.34.1` | | [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint) | `2.10.1` | `2.12.2` | | [github.com/oapi-codegen/oapi-codegen/v2](https://github.com/oapi-codegen/oapi-codegen) | `2.6.0` | `2.7.1` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.5` | `3.21.0` | Updates `github.com/bufbuild/buf` from 1.61.0 to 1.70.0 - [Release notes](https://github.com/bufbuild/buf/releases) - [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md) - [Commits](bufbuild/buf@v1.61.0...v1.70.0) Updates `github.com/go-swagger/go-swagger` from 0.33.2 to 0.34.1 - [Release notes](https://github.com/go-swagger/go-swagger/releases) - [Commits](go-swagger/go-swagger@v0.33.2...v0.34.1) Updates `github.com/golangci/golangci-lint/v2` from 2.10.1 to 2.12.2 - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md) - [Commits](golangci/golangci-lint@v2.10.1...v2.12.2) Updates `github.com/oapi-codegen/oapi-codegen/v2` from 2.6.0 to 2.7.1 - [Release notes](https://github.com/oapi-codegen/oapi-codegen/releases) - [Commits](oapi-codegen/oapi-codegen@v2.6.0...v2.7.1) Updates `golang.org/x/tools` from 0.42.0 to 0.45.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.42.0...v0.45.0) Updates `helm.sh/helm/v3` from 3.19.5 to 3.21.0 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.19.5...v3.21.0) Updates `k8s.io/code-generator` from 0.34.3 to 0.35.1 - [Commits](kubernetes/code-generator@v0.34.3...v0.35.1) --- updated-dependencies: - dependency-name: github.com/bufbuild/buf dependency-version: 1.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/go-swagger/go-swagger dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/golangci/golangci-lint/v2 dependency-version: 2.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/oapi-codegen/oapi-codegen/v2 dependency-version: 2.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: golang.org/x/tools dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: helm.sh/helm/v3 dependency-version: 3.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: k8s.io/code-generator dependency-version: 0.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com>

netlify · 2026-06-07T05:23:48Z

✅ Deploy Preview for docs-kargo-io ready!

Name	Link
🔨 Latest commit	`a717885`
🔍 Latest deploy log	https://app.netlify.com/projects/docs-kargo-io/deploys/6a25005cf1b3730008548e96
😎 Deploy Preview	https://deploy-preview-6424.docs.kargo.io
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

dependabot Bot added dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code labels Jun 7, 2026

dependabot Bot requested a review from a team as a code owner June 7, 2026 05:23

dependabot Bot added dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code labels Jun 7, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps/tools): bump the go-minor group across 1 directory with 7 updates#6424

chore(deps/tools): bump the go-minor group across 1 directory with 7 updates#6424
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/hack/tools/go-minor-daec8183fb

dependabot Bot commented on behalf of github Jun 7, 2026

Uh oh!

netlify Bot commented Jun 7, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 7, 2026

v1.70.0

v1.69.0

v1.68.4

v1.68.3

v1.68.2

v1.68.1

v1.68.0

[v1.70.0] - 2026-05-25

[v1.69.0] - 2026-04-29

[v1.68.4] - 2026-04-22

[v1.68.3] - 2026-04-20

[v1.68.2] - 2026-04-17

[v1.68.1] - 2026-04-14

[v1.68.0] - 2026-04-14

[v1.67.0] - 2026-04-01

v0.34.1

0.34.1 - 2026-06-05

Fixed bugs

Miscellaneous tasks

Updates

People who contributed to this release

v2.12.2

Changelog

v2.12.1

Changelog

v2.12.0

v2.12.2

v2.12.1

v2.12.0

v2.11.4

Security fix for Go code injection

v2.7.0: Squashing bugs, many bugs (and adding some features)

Many improvements and even more bug fixes

Code generation changes which might require some changes on your end

Strict-server external response refs require strict-server generation in both packages (#2357)

Many more anonymous inner schemas are now hoisted into top level schemas

Notable Changes

Installation and Upgrading

What's Next

Changelog

Uh oh!

netlify Bot commented Jun 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for docs-kargo-io ready!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

netlify Bot commented Jun 7, 2026 •

edited

Loading