Skip to content

chore(deps): bump the gomodupdates group across 1 directory with 4 updates#1459

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomodupdates-b53cfc4acf
Closed

chore(deps): bump the gomodupdates group across 1 directory with 4 updates#1459
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomodupdates-b53cfc4acf

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Bumps the gomodupdates group with 4 updates in the / directory: github.com/cert-manager/cert-manager, github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring, github.com/rs/zerolog and go.mondoo.com/mql/v13.

Updates github.com/cert-manager/cert-manager from 1.20.0 to 1.20.1

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.20.1 fixes an issue for OpenShift users that has to do with the finalizer RBAC, bumps gRPC to address a reported non-affecting vulnerability, and fixes a duplicate parentRef bug when both issuer config and annotations are present (Gateway API).

Bug or Regression

  • Fixed duplicate parentRef bug when both issuer config and annotations are present. (#8658, @​hjoshi123)
  • Add missing issuer finalizer RBAC to the order controller to support owner references. This was preventing OpenShift users from being able to upgrade to v1.20.0. (#8655, @​erikgb)
  • Bump google.golang.org/grpc to fix vulnerability reported by scanners. This isn't a vulnerability that affects cert-manager, but we are bumping it because it is reported by scanners. (#8657, @​erikgb)
Commits
  • dc96863 Merge pull request #8658 from cert-manager-bot/cherry-pick-8619-to-release-1.20
  • 7e66079 removing duplicate parentRefs
  • 75f90e4 Merge pull request #8657 from erikgb/fix-grpc-vuln
  • f27364c Update module google.golang.org/grpc to v1.79.3 [security] (release-1.20)
  • 5c1ce14 Merge pull request #8655 from cert-manager-bot/cherry-pick-8654-to-release-1.20
  • 038260f Fix RBAC to support clusters with OwnerReferencesPermissionEnforcement enabled
  • See full diff in compare view

Updates github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.90.0 to 0.90.1

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.90.1 / 2026-03-25

  • [BUGFIX] Fix Probe ignoring HTTP client settings in scrape configuration. #8461
Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.90.1 / 2026-03-25

  • [BUGFIX] Fix Probe ignoring HTTP client settings in scrape configuration. #8461
Commits

Updates github.com/rs/zerolog from 1.34.0 to 1.35.0

Commits
  • 1396655 Bump CI Go matrix minimum from 1.21 to 1.23
  • 4b65a2f Bump actions/cache from 4 to 5 (#741)
  • b835796 Bump actions/setup-go from 5 to 6 (#742)
  • 134caf8 Added sanitization of journald keys (#751)
  • e133b6a Added variadic StrsV, ObjectsV, and StringersV (#752)
  • 82017d8 Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 (#753)
  • 2f5b8a9 fix: UpdateContext skips Nop and zero-value loggers (#754)
  • d64c9a7 Add slog.Handler implementation for zerolog (#755)
  • a0d61dc fix: return dict to Event pool (#749)
  • f6fbd33 Test coverage improvements (#748)
  • Additional commits viewable in compare view

Updates go.mondoo.com/mql/v13 from 13.2.0 to 13.3.0

Release notes

Sourced from go.mondoo.com/mql/v13's releases.

v13.3.0

What's Changed

... (truncated)

Commits
  • 8b6941c 🎉 os-13.5.2 (#7070)
  • a76891e 🐛 Reject non-KMS ARNs in initAwsKmsKey to prevent misleading warnings (#7072)
  • 61255f6 🧹 Drop all debug logs for missing resource id logs. (#7074)
  • dc89acd 🧹 Skip permissions.json write when only timestamp changed (#7071)
  • b0bccb5 ⚡ Lazy-load Azure network, AKS, IAM, and Redis sub-resources (#7014)
  • 11986b1 🧹 Refactor Azure discovery to generic ARM listing and add API trace policy (#...
  • 9dff60f Bump azure/login from 2.3.0 to 3.0.0 (#7063)
  • 7b4042f Bump dawidd6/action-download-artifact from 16 to 19 (#7064)
  • 24e4293 🧹 Update deps for mql and providers 20260330 (#7065)
  • 978ba0d 🐛 Silence noisy log for missing python package dirs (#7069)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 1, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 1, 2026

Test Results

0 tests   0 ✅  0s ⏱️
0 suites  0 💤
0 files    0 ❌

Results for commit 94eb711.

♻️ This comment has been updated with latest results.

…dates

Bumps the gomodupdates group with 4 updates in the / directory: [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager), [github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring](https://github.com/prometheus-operator/prometheus-operator), [github.com/rs/zerolog](https://github.com/rs/zerolog) and [go.mondoo.com/mql/v13](https://github.com/mondoohq/cnquery).


Updates `github.com/cert-manager/cert-manager` from 1.20.0 to 1.20.1
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](cert-manager/cert-manager@v1.20.0...v1.20.1)

Updates `github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring` from 0.90.0 to 0.90.1
- [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases)
- [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md)
- [Commits](prometheus-operator/prometheus-operator@v0.90.0...v0.90.1)

Updates `github.com/rs/zerolog` from 1.34.0 to 1.35.0
- [Commits](rs/zerolog@v1.34.0...v1.35.0)

Updates `go.mondoo.com/mql/v13` from 13.2.0 to 13.3.0
- [Release notes](https://github.com/mondoohq/cnquery/releases)
- [Commits](mondoohq/mql@v13.2.0...v13.3.0)

---
updated-dependencies:
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomodupdates
- dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring
  dependency-version: 0.90.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomodupdates
- dependency-name: github.com/rs/zerolog
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: go.mondoo.com/mql/v13
  dependency-version: 13.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/gomodupdates-b53cfc4acf branch from 9996adc to 94eb711 Compare April 1, 2026 12:06
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 7, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 7, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/gomodupdates-b53cfc4acf branch April 7, 2026 08:53
@github-actions github-actions Bot locked and limited conversation to collaborators Apr 7, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants