chore(deps): Bump the dependencies group across 1 directory with 22 updates #1086

dependabot · 2025-11-10T17:26:27Z

Bumps the dependencies group with 18 updates in the / directory:

Package	From	To
github.com/containerd/containerd	`1.7.24`	`1.7.29`
github.com/go-playground/validator/v10	`10.23.0`	`10.28.0`
github.com/google/go-cmp	`0.6.0`	`0.7.0`
github.com/google/wire	`0.6.0`	`0.7.0`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.24.0`	`2.27.3`
github.com/onsi/gomega	`1.36.0`	`1.38.2`
github.com/opencontainers/image-spec	`1.1.0`	`1.1.1`
github.com/prometheus/client_golang	`1.20.5`	`1.23.2`
github.com/spf13/afero	`1.11.0`	`1.15.0`
github.com/spf13/cobra	`1.8.1`	`1.10.1`
github.com/spf13/viper	`1.19.0`	`1.21.0`
github.com/vishvananda/netlink	`1.3.0`	`1.3.1`
github.com/carlmjohnson/requests	`0.24.3`	`0.25.1`
github.com/containerd/containerd/api	`1.8.0`	`1.10.0`
github.com/containerd/errdefs	`0.3.0`	`1.0.0`
github.com/diskfs/go-diskfs	`1.4.2`	`1.7.0`
github.com/urfave/cli/v2	`2.27.5`	`2.27.7`
sigs.k8s.io/yaml	`1.4.0`	`1.6.0`

Updates github.com/containerd/containerd from 1.7.24 to 1.7.29

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.29

Welcome to the v1.7.29 release of containerd!

The twenty-ninth patch release for containerd 1.7 contains various fixes and updates including security patches.

Security Updates

containerd

GHSA-pwhc-rpq9-4c8w

GHSA-m6hq-p25p-ffr2

runc

GHSA-qw9x-cqr3-wc7r

GHSA-cgrx-mc8f-2prm

GHSA-9493-h29p-rfm2

Highlights

Image Distribution

Update differ to handle zstd media types (#12018)

Runtime

Update runc binary to v1.3.3 (#12480)

Fix lost container logs from quickly closing io (#12375)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan

Akihiro Suda

Phil Estes

Austin Vazquez

Sebastiaan van Stijn

ningmingxiao

Maksym Pavlenko

StepSecurity Bot

wheat2018

Changes

442cb34bd Merge commit from fork

0450f046e Fix directory permissions

e5cb6ddb7 Merge commit from fork

... (truncated)

Commits

442cb34 Merge commit from fork
e5cb6dd Merge commit from fork
9772966 Merge pull request #12486 from dmcgowan/prepare-v1.7.29
1fc2daa Prepare release notes for v1.7.29
93f710a Merge pull request #12480 from k8s-infra-cherrypick-robot/cherry-pick-12475-t...
68d04be Merge pull request #12471 from austinvazquez/1_7_update_ci_go_and_images
3f5f9f8 runc: Update runc binary to v1.3.3
667409f ci: bump Go 1.24.9, 1.25.3
294f8c0 Update GHA runners to use latest images for basic binaries build
cf66b41 Update GHA runners to use latest image for most jobs
Additional commits viewable in compare view

Updates github.com/go-playground/validator/v10 from 10.23.0 to 10.28.0

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.28.0

What's Changed

Update workflow.yml to support 2 most recent major versions by @nodivbyzero in go-playground/validator#1417

Bump actions/checkout from 4 to 5 by @dependabot[bot] in go-playground/validator#1456

Go 1.25 support by @nodivbyzero in go-playground/validator#1459

Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 by @dependabot[bot] in go-playground/validator#1463

Bump golang.org/x/text from 0.22.0 to 0.29.0 by @dependabot[bot] in go-playground/validator#1464

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in go-playground/validator#1465

Bump golang.org/x/crypto from 0.33.0 to 0.42.0 by @dependabot[bot] in go-playground/validator#1467

fix: should panic when define duplicate field param in required_if by @duyquang6 in go-playground/validator#1468

Fixed missing keys from returned errors in map validation by @gelozr in go-playground/validator#1284

Added https_url tag by @ahmedkamalio in go-playground/validator#1461

docs: add description for 'port' validator by @nodivbyzero in go-playground/validator#1435

Add alphaspace validator by @takaaa220 in go-playground/validator#1343

New Contributors

@duyquang6 made their first contribution in go-playground/validator#1468

@gelozr made their first contribution in go-playground/validator#1284

@ahmedkamalio made their first contribution in go-playground/validator#1461

@takaaa220 made their first contribution in go-playground/validator#1343

Full Changelog: go-playground/validator@v10.27.0...v10.28.0

Release 10.27.0

What's Changed

Fix Release version badge on README page by @nodivbyzero in go-playground/validator#1406

fix russian E.164 error message by @prigornitskiy in go-playground/validator#1349

chore: remove unnecessary statement by @qshuai in go-playground/validator#1200

Re-enable several linters by @nodivbyzero in go-playground/validator#1412

add support to tag validateFn by @peczenyj in go-playground/validator#1363

Bump golang.org/x/crypto from 0.33.0 to 0.35.0 in /_examples/validate_fn by @dependabot in go-playground/validator#1418

Bump golang.org/x/net from 0.34.0 to 0.38.0 in /_examples/validate_fn by @dependabot in go-playground/validator#1419

Align required_without with the contract stated in the documentation by @jmfrees in go-playground/validator#1422

Add translation example by @cxlblm in go-playground/validator#1394

doc(errors): mention RegisterTagNameFunc for FieldError.Field by @khan-ajamal in go-playground/validator#1358

Bump golangci/golangci-lint-action from 7 to 8 by @dependabot in go-playground/validator#1425

feat(translation): add en translation for urn_rfc2141 by @ryanmalesic in go-playground/validator#1431

fix: panics when private field is validated by @ykalchevskiy in go-playground/validator#1423

Fix: support validation for map values with struct types by @JunaidIslam2105 in go-playground/validator#1433

Omitzero does not work with slice and map bug by @JunaidIslam2105 in go-playground/validator#1436

Fix: Validator panics when 'nil' is used along with required if for slices and maps by @JunaidIslam2105 in go-playground/validator#1442

docs: typos by @eqsdxr in go-playground/validator#1440

fix: make "file://" fail url validation by @bfabio in go-playground/validator#1444

disable way too aggressive and disagreeable linters by @deankarn in go-playground/validator#1445

use golangci lint file for disables by @deankarn in go-playground/validator#1447

New Contributors

@prigornitskiy made their first contribution in go-playground/validator#1349

@qshuai made their first contribution in go-playground/validator#1200

@peczenyj made their first contribution in go-playground/validator#1363

... (truncated)

Commits

bdc3a7d Add alphaspace validator (#1343)
63594a0 docs: add description for 'port' validator (#1435)
45f3a8e Added https_url tag (#1461)
7a23bca Remove Go version 1.23 from CI workflow
13130d2 Fixed missing keys from returned errors in map validation (#1284)
94e89f0 fix: should panic when define duplicate field param in required_if (#1468)
6905468 Bump golang.org/x/crypto from 0.33.0 to 0.42.0 (#1467)
77ef70e Bump actions/setup-go from 5 to 6 (#1465)
78d05ae Bump golang.org/x/text from 0.22.0 to 0.29.0 (#1464)
34aea1f Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 (#1463)
Additional commits viewable in compare view

Updates github.com/google/go-cmp from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/go-cmp's releases.

v0.7.0

New API:

(#367) Support compare functions with SortSlices and SortMaps

Panic messaging:

(#370) Detect proto.Message types when failing to export a field

Commits

9b12f36 Detect proto.Message types when failing to export a field (#370)
4dd3d63 fix: type 'aribica' => 'arabica' (#368)
391980c Support compare functions with SortSlices and SortMaps (#367)
See full diff in compare view

Updates github.com/google/wire from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/wire's releases.

v0.7.0

This release updates the golang.org/x/tools dependency to fix a build breakage.

Commits

9c25c90 README: add a note that wire is no longer maintained (#434)
5c5c92a all: update the x/tools dependency to fix the build with Go 1.25 (#432)
See full diff in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.24.0 to 2.27.3

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.27.3

What's Changed

refactor(runtime): using reflect.TypeFor by @cuiweixie in grpc-ecosystem/grpc-gateway#5868

fix(runtime): annotate context even if no incoming headers by @boolangery in grpc-ecosystem/grpc-gateway#5887

feat: add Opaque API and Protobuf Editions support by @kop in grpc-ecosystem/grpc-gateway#5723

fix: annotate healthz endpoint handler by @ZY-Ang in grpc-ecosystem/grpc-gateway#5914

expand_slash_patterns=true now converts parameters with hyphens correctly by @goulashify in grpc-ecosystem/grpc-gateway#5938

New Contributors

@cuiweixie made their first contribution in grpc-ecosystem/grpc-gateway#5868

@boolangery made their first contribution in grpc-ecosystem/grpc-gateway#5887

@kop made their first contribution in grpc-ecosystem/grpc-gateway#5723

@ZY-Ang made their first contribution in grpc-ecosystem/grpc-gateway#5914

@goulashify made their first contribution in grpc-ecosystem/grpc-gateway#5938

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.2...v2.27.3

v2.27.2

What's Changed

Fix nested schema definition for body parameter (#3058) by @ilyongcho-moloco in grpc-ecosystem/grpc-gateway#5827

Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3 by @MB175 in grpc-ecosystem/grpc-gateway#5857

New Contributors

@ilyongcho-moloco made their first contribution in grpc-ecosystem/grpc-gateway#5827

@MB175 made their first contribution in grpc-ecosystem/grpc-gateway#5857

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.1...v2.27.2

v2.27.1

What's Changed

fix: Use type name instead of full type declaration by @cabeedelhertz in grpc-ecosystem/grpc-gateway#5679

New Contributors

@cabeedelhertz made their first contribution in grpc-ecosystem/grpc-gateway#5679

Full Changelog: grpc-ecosystem/grpc-gateway@v2.27.0...v2.27.1

v2.27.0

What's Changed

Add docs about Issue #5241 by @WwhdsOne in grpc-ecosystem/grpc-gateway#5309

feat(protoc-gen-openapiv2/template): updateSwaggerObjectFromFieldBeha… by @Ccheers in grpc-ecosystem/grpc-gateway#5278

Update devcontainer by @johanbrandhorst in grpc-ecosystem/grpc-gateway#5336

feat(bazel): surface --preserve_rpc_order in rule def by @lennrt in grpc-ecosystem/grpc-gateway#5348

protoc-gen-openapiv2: Assign user-defined service name as method tag by @Shaxine in grpc-ecosystem/grpc-gateway#5339

Add support for x-go-type flag by @rohitlohar45 in grpc-ecosystem/grpc-gateway#5340

Fix go tool install instructions by @johanbrandhorst in grpc-ecosystem/grpc-gateway#5426

Make GOBIN instructions explicit by @johanbrandhorst in grpc-ecosystem/grpc-gateway#5431

Discard unused body of Unary and ClientStream methods by @paskozdilar in grpc-ecosystem/grpc-gateway#5331

... (truncated)

Commits

ab243ac chore(deps): update googleapis digest to 9070e63 (#5970)
30abf93 fix(deps): update module google.golang.org/protobuf to v1.36.10 (#5969)
b73048f chore(deps): update dependency bazel to v8.4.2 (#5968)
95f123b chore(deps): update googleapis digest to 3990e05 (#5967)
fb9da67 chore(deps): update googleapis digest to 063f9e1 (#5966)
208372a chore(deps): update googleapis digest to e78280f (#5965)
1a315aa fix(deps): update google.golang.org/genproto/googleapis/api digest to 57b25ae...
b862f0b fix(deps): update google.golang.org/genproto/googleapis/rpc digest to 57b25ae...
e6cdbc7 chore(deps): update googleapis digest to eab82ec (#5962)
7fefac0 chore(deps): update googleapis digest to a4ded73 (#5961)
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.36.0 to 1.38.2

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.38.2

1.38.2

roll back to go 1.23.0 [c404969]

v1.38.1

1.38.1

Fixes

Numerous minor fixes and dependency bumps

v1.38.0

1.38.0

Features

gstruct handles extra unexported fields [4ee7ed0]

Fixes

support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]

Fix typo [acd1f55]

Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]

Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]

Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]

Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]

Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]

Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]

Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

v1.37.0

1.37.0

Features

add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

v1.36.3

1.36.3

Maintenance

bump all the things [adb8b49]

chore: replace interface{} with any [7613216]

Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]

remove spurious "toolchain" from go.mod (#819) [a0e85b9]

Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]

Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]

Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]

... (truncated)

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.38.2

roll back to go 1.23.0 [c404969]

1.38.1

Fixes

Numerous minor fixes and dependency bumps

1.38.0

Features

gstruct handles extra unexported fields [4ee7ed0]

Fixes

support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]

Fix typo [acd1f55]

Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]

Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]

Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]

Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]

Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]

Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]

Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

1.37.0

Features

add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

1.36.3

Maintenance

bump all the things [adb8b49]

chore: replace interface{} with any [7613216]

Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]

remove spurious "toolchain" from go.mod (#819) [a0e85b9]

Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]

Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]

Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]

Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]

Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]

Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]

Fix typos (#813) [a1d518b]

... (truncated)

Commits

79b8a75 v1.38.2
c404969 roll back to go 1.23.0
c36e89a v1.38.1
92eaa57 go mod tidy
b9ed3cd deprecate CompileTest*
2a5bf77 fix invalid fmt.Errorf
3e9e385 bump ginkgo
7f37abe Replace gopkg.in/yaml.v3 with go.yaml.in/yaml/v3
69e4761 fix(async_assertion): use correct error in errors.As
95737c0 Bump golang.org/x/net from 0.41.0 to 0.43.0 (#856)
Additional commits viewable in compare view

Updates github.com/opencontainers/image-spec from 1.1.0 to 1.1.1

Release notes

Sourced from github.com/opencontainers/image-spec's releases.

v1.1.1

Vote Passed [+5 -0 nv1] - https://groups.google.com/a/opencontainers.org/g/dev/c/T-olx0jdT18 Release PR : opencontainers/image-spec#1247 Full Changelog: opencontainers/image-spec@v1.1.0...v1.1.1

Commits

147f9c1 Release v1.1.1
fbb4662 Merge pull request #1238 from mkenigs/wording-nit
81e457e Fix grammar nit
92353b0 Merge pull request #1225 from sudo-bmitch/pr-doc-go-version
1a0b9f9 Merge pull request #1230 from sudo-bmitch/pr-layout-extensibility
f272635 Merge pull request #1228 from sudo-bmitch/pr-mixed-digest-algo
e0462ab Merge pull request #1229 from tianon/setup-go
cf536e3 Merge pull request #1227 from sudo-bmitch/pr-rm-project-doc
60acaac Document extensibility of the image layout
4dcf962 Document Go version policy
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.20.5 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

[release-1.23] Upgrade to prometheus/[email protected] by @aknuds1 in prometheus/client_golang#1869

[release-1.23] Cut v1.23.2 by @aknuds1 in prometheus/client_golang#1870

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

[release-1.23] Upgrade to prometheus/common v0.66 by @aknuds1 in prometheus/client_golang#1866

[release-1.23] Cut v1.23.1 by @aknuds1 in prometheus/client_golang#1867

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0 - 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:
import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
[FEATURE] prometheus: Add new CollectorFunc utility #1724

[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738

[FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743

[CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

[BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.

[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

... (truncated)

Commits

8179a56 Cut v1.23.2 (#1870)
4142b59 Merge pull request #1869 from prometheus/arve/upgrade-common
4ff40f0 Cut v1.23.1 (#1867)
989b029 Upgrade to prometheus/common v0.66 (#1866)
e4b2208 Cut v1.23.0 (#1848)
d9492af cut v1.23.0-rc.1 (#1842)
aeae8a0 Cut v1.23.0-rc.0 (#1837)
b157309 Update common Prometheus files (#1832)
a704e28 build(deps): bump the github-actions group with 3 updates (#1826)
c774311 Fix errNotImplemented reference (#1835)
Additional commits viewable in compare view

Updates github.com/spf13/afero from 1.11.0 to 1.15.0

Release notes

Sourced from github.com/spf13/afero's releases.

v1.15.0

What's Changed

Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by @dependabot[bot] in spf13/afero#479

Lint by @sagikazarmark in spf13/afero#492

build(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by @dependabot[bot] in spf13/afero#494

build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @dependabot[bot] in spf13/afero#493

Bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot[bot] in spf13/afero#480

build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot[bot] in spf13/afero#496

support aliyun oss storage with third-party link by @messikiller in spf13/afero#491

build(deps): bump github/codeql-action from 3.28.16 to 3.28.17 by @dependabot[bot] in spf13/afero#497

chore: update x/test by @sagikazarmark in spf13/afero#502

build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot[bot] in spf13/afero#503

build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.1 by @dependabot[bot] in spf13/afero#505

build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot[bot] in spf13/afero#506

fix(gcsfs): update object not exist check logic by @ahkui in spf13/afero#485

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in spf13/afero#508

build(deps): bump github/codeql-action from 3.28.18 to 3.29.4 by @dependabot[bot] in spf13/afero#519

build(deps): bump github/codeql-action from 3.29.4 to 3.29.7 by @dependabot[bot] in spf13/afero#524

build(deps): bump github/codeql-action from 3.29.7 to 3.30.1 by @dependabot[bot] in spf13/afero#537

build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in spf13/afero#536

build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.3 by @dependabot[bot] in spf13/afero#533

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in spf13/afero#527

chore: update deps by @sagikazarmark in spf13/afero#538

fix: spelling errors (excpected -> expected, iself -> itself) by @MarkRosemaker in spf13/afero#523

New Contributors

@messikiller made their first contribution in spf13/afero#491

@ahkui made their first contribution in spf13/afero#485

@MarkRosemaker made their first contribution in spf13/afero#523

Full Changelog: spf13/afero@v1.14.0...v1.15.0

v1.14.0

What's Changed

Split gcsfs and sftpfs into separate modules by @sagikazarmark in spf13/afero#462

Full Changelog: spf13/afero@v1.13.0...v1.14.0

v1.13.0

What's Changed

Bump actions/setup-go from 5.2.0 to 5.3.0 by @dependabot in spf13/afero#446

Bump golangci/golangci-lint-action from 6.1.1 to 6.3.0 by @dependabot in spf13/afero#451

Bump golang.org/x/text from 0.21.0 to 0.22.0 by @dependabot in spf13/afero#452

Bump golang.org/x/oauth2 from 0.25.0 to 0.26.0 by @dependabot in spf13/afero#453

Bump golangci/golangci-lint-action from 6.3.0 to 6.3.3 by @dependabot in spf13/afero#459

Bump golang.org/x/crypto from 0.32.0 to 0.33.0 by @dependabot in spf13/afero#455

Bump golangci/golangci-lint-action from 6.3.3 to 6.5.0 by @dependabot in spf13/afero#460

ci: add Go 1.24 to the test matrix by @sagikazarmark in spf13/afero#461

Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by @dependabot in spf13/afero#473

... (truncated)

Commits

399bb34 Merge pull request #523 from MarkRosemaker/fix-spelling
9b67716 Merge pull request #538 from spf13/deps
f5f4f7b chore: update deps
c245c4f ci: update ci
85c4956 Merge pull request #527 from spf13/dependabot/github_actions/actions/checkout...
41206fd build(deps): bump actions/checkout from 4.2.2 to 5.0.0
a583fad Merge pull request #533 from spf13/dependabot/github_actions/actions/dependen...
673c03e Merge pull request #536 from spf13/dependabot/github_actions/actions/setup-go...
ac849f6 Merge pull request #537 from spf13/dependabot/github_actions/github/codeql-ac...
9596fe8 build(deps): bump github/codeql-action from 3.29.7 to 3.30.1
Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.8.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by

netlify · 2025-11-10T17:26:35Z

✅ Deploy Preview for flintlock-docs canceled.

Name	Link
🔨 Latest commit	`ac352b6`
🔍 Latest deploy log	https://app.netlify.com/projects/flintlock-docs/deploys/69375b77d0b0730008bd1f4b

…pdates Bumps the dependencies group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.24` | `1.7.29` | | [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.23.0` | `10.28.0` | | [github.com/google/go-cmp](https://github.com/google/go-cmp) | `0.6.0` | `0.7.0` | | [github.com/google/wire](https://github.com/google/wire) | `0.6.0` | `0.7.0` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.24.0` | `2.27.3` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.36.0` | `1.38.2` | | [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) | `1.1.0` | `1.1.1` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.23.2` | | [github.com/spf13/afero](https://github.com/spf13/afero) | `1.11.0` | `1.15.0` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.1` | `1.10.1` | | [github.com/spf13/viper](https://github.com/spf13/viper) | `1.19.0` | `1.21.0` | | [github.com/vishvananda/netlink](https://github.com/vishvananda/netlink) | `1.3.0` | `1.3.1` | | [github.com/carlmjohnson/requests](https://github.com/carlmjohnson/requests) | `0.24.3` | `0.25.1` | | [github.com/containerd/containerd/api](https://github.com/containerd/containerd) | `1.8.0` | `1.10.0` | | [github.com/containerd/errdefs](https://github.com/containerd/errdefs) | `0.3.0` | `1.0.0` | | [github.com/diskfs/go-diskfs](https://github.com/diskfs/go-diskfs) | `1.4.2` | `1.7.0` | | [github.com/urfave/cli/v2](https://github.com/urfave/cli) | `2.27.5` | `2.27.7` | | [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) | `1.4.0` | `1.6.0` | Updates `github.com/containerd/containerd` from 1.7.24 to 1.7.29 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.24...v1.7.29) Updates `github.com/go-playground/validator/v10` from 10.23.0 to 10.28.0 - [Release notes](https://github.com/go-playground/validator/releases) - [Commits](go-playground/validator@v10.23.0...v10.28.0) Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.6.0...v0.7.0) Updates `github.com/google/wire` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/google/wire/releases) - [Commits](google/wire@v0.6.0...v0.7.0) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.24.0 to 2.27.3 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml) - [Commits](grpc-ecosystem/grpc-gateway@v2.24.0...v2.27.3) Updates `github.com/onsi/gomega` from 1.36.0 to 1.38.2 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.36.0...v1.38.2) Updates `github.com/opencontainers/image-spec` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/opencontainers/image-spec/releases) - [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md) - [Commits](opencontainers/image-spec@v1.1.0...v1.1.1) Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.23.2 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.20.5...v1.23.2) Updates `github.com/spf13/afero` from 1.11.0 to 1.15.0 - [Release notes](https://github.com/spf13/afero/releases) - [Commits](spf13/afero@v1.11.0...v1.15.0) Updates `github.com/spf13/cobra` from 1.8.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.8.1...v1.10.1) Updates `github.com/spf13/pflag` from 1.0.5 to 1.0.9 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.5...v1.0.9) Updates `github.com/spf13/viper` from 1.19.0 to 1.21.0 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.19.0...v1.21.0) Updates `github.com/vishvananda/netlink` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/vishvananda/netlink/releases) - [Commits](vishvananda/netlink@v1.3.0...v1.3.1) Updates `google.golang.org/grpc` from 1.68.0 to 1.75.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.68.0...v1.75.1) Updates `google.golang.org/protobuf` from 1.35.2 to 1.36.10 Updates `github.com/carlmjohnson/requests` from 0.24.3 to 0.25.1 - [Release notes](https://github.com/carlmjohnson/requests/releases) - [Commits](earthboundkid/requests@v0.24.3...v0.25.1) Updates `github.com/containerd/containerd/api` from 1.8.0 to 1.10.0 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@api/v1.8.0...api/v1.10.0) Updates `github.com/containerd/errdefs` from 0.3.0 to 1.0.0 - [Release notes](https://github.com/containerd/errdefs/releases) - [Commits](containerd/errdefs@v0.3.0...v1.0.0) Updates `github.com/diskfs/go-diskfs` from 1.4.2 to 1.7.0 - [Commits](diskfs/go-diskfs@v1.4.2...v1.7.0) Updates `github.com/onsi/ginkgo/v2` from 2.22.0 to 2.25.1 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.22.0...v2.25.1) Updates `github.com/urfave/cli/v2` from 2.27.5 to 2.27.7 - [Release notes](https://github.com/urfave/cli/releases) - [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md) - [Commits](urfave/cli@v2.27.5...v2.27.7) Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.6.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.4.0...v1.6.0) --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-version: 1.7.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/go-playground/validator/v10 dependency-version: 10.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/google/go-cmp dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/google/wire dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.27.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/onsi/gomega dependency-version: 1.38.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/opencontainers/image-spec dependency-version: 1.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/prometheus/client_golang dependency-version: 1.23.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/spf13/afero dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/spf13/pflag dependency-version: 1.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/spf13/viper dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/vishvananda/netlink dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.75.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: google.golang.org/protobuf dependency-version: 1.36.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/carlmjohnson/requests dependency-version: 0.25.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/containerd/containerd/api dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/containerd/errdefs dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: github.com/diskfs/go-diskfs dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/urfave/cli/v2 dependency-version: 2.27.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: sigs.k8s.io/yaml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added area/dependency Issues or PRs related to dependency changes kind/cleanup Removing things previously overlooked labels Nov 10, 2025

dependabot bot force-pushed the dependabot/go_modules/dependencies-321cdb65b0 branch from c0f9473 to 2d03e7d Compare November 17, 2025 23:16

dependabot bot force-pushed the dependabot/go_modules/dependencies-321cdb65b0 branch from 2d03e7d to 8c8e9cd Compare November 24, 2025 23:35

dependabot bot force-pushed the dependabot/go_modules/dependencies-321cdb65b0 branch from 8c8e9cd to ac352b6 Compare December 8, 2025 23:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump the dependencies group across 1 directory with 22 updates #1086

chore(deps): Bump the dependencies group across 1 directory with 22 updates #1086

Uh oh!

dependabot bot commented on behalf of github Nov 10, 2025 •

edited

Loading

Uh oh!

netlify bot commented Nov 10, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): Bump the dependencies group across 1 directory with 22 updates #1086

Are you sure you want to change the base?

chore(deps): Bump the dependencies group across 1 directory with 22 updates #1086

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

containerd 1.7.29

Security Updates

Highlights

Image Distribution

Runtime

Contributors

Changes

Release 10.28.0

What's Changed

New Contributors

Release 10.27.0

What's Changed

New Contributors

v0.7.0

v0.7.0

v2.27.3

What's Changed

New Contributors

v2.27.2

What's Changed

New Contributors

v2.27.1

What's Changed

New Contributors

v2.27.0

What's Changed

v1.38.2

1.38.2

v1.38.1

1.38.1

Fixes

v1.38.0

1.38.0

Features

Fixes

Maintenance

v1.37.0

1.37.0

Features

v1.36.3

1.36.3

Maintenance

1.38.2

1.38.1

Fixes

1.38.0

Features

Fixes

Maintenance

1.37.0

Features

1.36.3

Maintenance

v1.1.1

v1.23.2 - 2025-09-05

v1.23.1 - 2025-09-04

v1.23.0 - 2025-07-30

1.23.2 / 2025-09-05

1.23.1 / 2025-09-04

1.23.0 / 2025-07-30

1.22.0 / 2025-04-07

1.21.1 / 2025-03-04

1.21.0 / 2025-02-17

v1.15.0

What's Changed

New Contributors

v1.14.0

What's Changed

v1.13.0

What's Changed

v1.10.1

🐛 Fix

v1.10.0

dependabot bot commented on behalf of github Nov 10, 2025 •

edited

Loading

netlify bot commented Nov 10, 2025 •

edited

Loading