Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 4 updates - #794

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-7c05b2f454
Closed

chore(deps): bump the go-dependencies group across 1 directory with 4 updates#794
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-7c05b2f454

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the go-dependencies group with 4 updates in the / directory: github.com/docker/cli, github.com/moby/moby/client, github.com/netresearch/go-cron and github.com/stretchr/testify.

Updates github.com/docker/cli from 29.6.2+incompatible to 29.7.2+incompatible

Commits
  • a7dcaa6 Merge pull request #7151 from vvoland/update-archive
  • 400b45f vendor: github.com/moby/go-archive v0.3.3
  • 38887ec Merge pull request #7145 from winklemad/fix-service-duplicate-removal-panic
  • 904aef7 Merge pull request #7147 from docker/dependabot/github_actions/docker-actions...
  • f08e60e build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml
  • abfd891 Merge pull request #7149 from vvoland/update-docker
  • 519eb45 VERSION: 29.7.2
  • 8717af7 cli/command/service: fix panic when removing duplicate values
  • e9452d6 Merge pull request #7142 from thaJeztah/bump_go_archive_0.3.2
  • a6014a7 vendor: github.com/moby/go-archive v0.3.2
  • Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.5.0 to 0.5.1

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.5.1

0.5.1

Changelog

  • client/pkg/jsonmessage: Display: fix godoc link. moby/moby#53070
  • client: ServiceCreate, ServiceUpdate: fix duplicate and 'unkown' platforms. moby/moby#53012
  • client: ServiceInspect, ContainerCommit: omit optional query args if not set. moby/moby#53010
  • golangci-lint: enable perfsprint linter. moby/moby#53016
Changelog

Sourced from github.com/moby/moby/client's changelog.

0.5.1 (2013-07-30)

  • API: Docker client now sets useragent (RFC 2616)
  • Runtime: Add ps args to docker top
  • Runtime: Add support for container ID files (pidfile like)
  • Runtime: Add container=lxc in default env
  • Runtime: Support networkless containers with docker run -n and docker -d -b=none
  • API: Add /events endpoint
  • Builder: ADD command now understands URLs
  • Builder: CmdAdd and CmdEnv now respect Dockerfile-set ENV variables
  • Hack: Simplify unit tests with helpers
  • Hack: Improve docker.upstart event
  • Hack: Add coverage testing into docker-ci
  • Runtime: Stdout/stderr logs are now stored in the same file as JSON
  • Runtime: Allocate a /16 IP range by default, with fallback to /24. Try 12 ranges instead of 3.
  • Runtime: Change .dockercfg format to json and support multiple auth remote
  • Runtime: Do not override volumes from config
  • Runtime: Fix issue with EXPOSE override
  • Builder: Create directories with 755 instead of 700 within ADD instruction
Commits

Updates github.com/netresearch/go-cron from 0.15.0 to 0.15.1

Changelog

Sourced from github.com/netresearch/go-cron's changelog.

[0.15.1] - 2026-07-28

Documentation-only release. No library code changed; it exists so that pkg.go.dev, which renders the latest tagged version, picks up the corrected day-of-week documentation.

Documentation

  • Day-of-week accepts 7 for Sunday (PR#390): The day-of-week field is now documented as 0-7 rather than 0-6, with an explicit note that Sunday can be written as either 0 or 7. The parser has always normalized 7 to 0 (parser.go), so this corrects the documentation, not the behavior. Updated in doc.go, README, docs/ARCHITECTURE.md, and docs/PROJECT_INDEX.md. Thanks to @​hxl9654 for the contribution!
  • Concurrency model and invariants (PR#385): AGENTS.md now describes which goroutine owns mutable scheduling state, lists the channels that serialize external access, and records the three invariants contributors must preserve (channel-routed mutations, mutex held across channel ops, deep-copied Entry fields).
  • Go Report Card badge removed (PR#391): The service is sunset.

Changed

  • CI: sync with netresearch/.github go-lib templates (PR#384, PR#387, PR#388): Dependabot grouping, labeler and auto-merge-deps configuration realigned with the template; CodeQL gained the merge_group trigger.
Commits
  • 9bf570c docs(changelog): cut v0.15.1 (#392)
  • 6417d4f docs(changelog): cut v0.15.1
  • 41d368a doc: enhance documents, explaining that Sunday can be represented by both 0 a...
  • 2a867d5 Merge branch 'main' into main
  • 944d6f9 doc: enhance documents, explaining that Sunday can be represented by both 0 a...
  • cd20662 chore(docs): drop the sunset Go Report Card badge (#391)
  • 2d94027 chore(docs): drop the sunset Go Report Card badge
  • 2d84b01 chore: sync go-lib template drift (#388)
  • a31ddda chore: sync go-lib template drift (labeler + auto-merge-deps)
  • aaaf1d1 ci(codeql): add merge_group trigger to match template (#387)
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

... (truncated)

Commits
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • d2699be _codegen: modernize
  • a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-dependencies group across 1 directory with 4…
6bba59c 
… updates

Bumps the go-dependencies group with 4 updates in the / directory: [github.com/docker/cli](https://github.com/docker/cli), [github.com/moby/moby/client](https://github.com/moby/moby), [github.com/netresearch/go-cron](https://github.com/netresearch/go-cron) and [github.com/stretchr/testify](https://github.com/stretchr/testify).


Updates `github.com/docker/cli` from 29.6.2+incompatible to 29.7.2+incompatible
- [Commits](docker/cli@v29.6.2...v29.7.2)

Updates `github.com/moby/moby/client` from 0.5.0 to 0.5.1
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.5.1/CHANGELOG.md)
- [Commits](moby/moby@v0.5.0...v0.5.1)

Updates `github.com/netresearch/go-cron` from 0.15.0 to 0.15.1
- [Release notes](https://github.com/netresearch/go-cron/releases)
- [Changelog](https://github.com/netresearch/go-cron/blob/main/CHANGELOG.md)
- [Commits](netresearch/go-cron@v0.15.0...v0.15.1)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.7.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/netresearch/go-cron
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 17, 2026
@dependabot
dependabot Bot requested a review from CybotTM as a code owner August 17, 2026 09:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 17, 2026
@github-actions
github-actions Bot enabled auto-merge August 17, 2026 09:43
@github-actions

github-actions Bot commented Aug 17, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

License Issues

go.mod

PackageVersionLicenseIssue Type
github.com/docker/cli29.7.2+incompatibleNullUnknown License
github.com/moby/moby/client0.5.1NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
gomod/github.com/docker/cli 29.7.2+incompatible UnknownUnknown
gomod/github.com/moby/moby/client 0.5.1 UnknownUnknown
gomod/github.com/netresearch/go-cron 0.15.1 🟢 9.2
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Code-Review🟢 10all changesets reviewed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
CII-Best-Practices🟢 7badge detected: Silver
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases🟢 95 out of the last 5 releases have a total of 9 signed artifacts.
SAST🟢 10SAST tool is run on all commits
Fuzzing🟢 10project is fuzzed
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
CI-Tests🟢 1014 out of 14 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 4 contributing companies or organizations
gomod/github.com/stretchr/testify 1.12.0 🟢 6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 95 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 9
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • go.mod

@sonarqubecloud

sonarqubecloud Bot commented Aug 17, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 24, 2026
auto-merge was automatically disabled August 24, 2026 09:42

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/go_modules/go-dependencies-7c05b2f454 branch August 24, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes
@CybotTM CybotTM Awaiting requested review from CybotTM CybotTM is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants