🌱 Bump the gomod group across 2 directories with 9 updates #4901

dependabot · 2026-01-08T16:57:00Z

Bumps the gomod group with 6 updates in the / directory:

Package	From	To
github.com/moby/buildkit	`0.26.2`	`0.26.3`
github.com/onsi/gomega	`1.38.3`	`1.39.0`
go.yaml.in/yaml/v2	`2.4.2`	`2.4.3`
google.golang.org/protobuf	`1.36.10`	`1.36.11`
github.com/onsi/ginkgo/v2	`2.27.3`	`2.27.4`
gitlab.com/gitlab-org/api/client-go	`1.7.0`	`1.11.0`

Bumps the gomod group with 5 updates in the /tools directory:

Package	From	To
google.golang.org/protobuf	`1.36.10`	`1.36.11`
github.com/onsi/ginkgo/v2	`2.27.3`	`2.27.4`
github.com/golangci/golangci-lint/v2	`2.7.2`	`2.8.0`
github.com/google/ko	`0.18.0`	`0.18.1`
github.com/goreleaser/goreleaser/v2	`2.13.1`	`2.13.2`

Updates github.com/moby/buildkit from 0.26.2 to 0.26.3

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.26.3

Welcome to the v0.26.3 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

Sebastiaan van Stijn

Jonathan A. Sternberg

Tõnis Tiigi

Notable Changes

Fix session policy metadata resolution for git attributes and image attestations #6383

Dependency Changes

github.com/containernetworking/plugins v1.8.0 -> v1.9.0

Previous release can be found at v0.26.2

Commits

c70e8e6 Merge pull request #6423 from jsternberg/v0.26.3-picks
92d657f Dockerfile: update download URL for nydus snapshotter
281567c docs: update nydus repository URLs
99eb71e build(deps): bump github.com/containernetworking/plugins
25463ff policy: fix metadata resolve via sessionpolicy for git and attestations
See full diff in compare view

Updates github.com/onsi/gomega from 1.38.3 to 1.39.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.39.0

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

Commits

49561ad v1.39.0
8f7f425 document MatchErrorStrictly
bae643d add matcher relecting errors.Is behavior
See full diff in compare view

Updates go.yaml.in/yaml/v2 from 2.4.2 to 2.4.3

Commits

3b57511 Retract v2 tags that cannot be installed
See full diff in compare view

Updates google.golang.org/protobuf from 1.36.10 to 1.36.11

Updates github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.27.4

2.27.4

Fixes

CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.27.4

Fixes

CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

Commits

867ce95 v2.27.4
59bc751 CurrentTreeConstructionNodeReport: fix for nested container nodes
See full diff in compare view

Updates gitlab.com/gitlab-org/api/client-go from 1.7.0 to 1.11.0

Release notes

Sourced from gitlab.com/gitlab-org/api/client-go's releases.

v1.11.0

1.11.0

🚀 Features

feat(groups): add support for merge related settings (!2625) by Zubeen

🐛 Bug Fixes

fix(api): typo in ms teams slug (!2643) by aishahsofea

🔄 Other Changes

chore(deps): update module golang.org/x/text to v0.32.0 (!2642) by GitLab Dependency Bot

chore(deps): update module golang.org/x/sys to v0.39.0 (!2641) by GitLab Dependency Bot

chore(deps): update module github.com/godbus/dbus/v5 to v5.2.2 (!2637) by GitLab Dependency Bot

chore(deps): update module github.com/google/go-querystring to v1.2.0 (!2638) by GitLab Dependency Bot

1.11.0 (2026-01-05)

Bug Fixes

api: typo in ms teams slug (1ed6c95)

Features

groups: add support for merge related settings (cb8412f)

v1.10.0

1.10.0

🚀 Features

feat: implement Runner Controller API (!2634) by Duo Developer

🔄 Other Changes

chore(deps): update module github.com/godbus/dbus/v5 to v5.2.1 (!2635) by GitLab Dependency Bot

1.10.0 (2025-12-19)

Features

... (truncated)

Changelog

Sourced from gitlab.com/gitlab-org/api/client-go's changelog.

1.11.0

🚀 Features

feat(groups): add support for merge related settings (!2625) by Zubeen

🐛 Bug Fixes

fix(api): typo in ms teams slug (!2643) by aishahsofea

🔄 Other Changes

chore(deps): update module golang.org/x/text to v0.32.0 (!2642) by GitLab Dependency Bot

chore(deps): update module golang.org/x/sys to v0.39.0 (!2641) by GitLab Dependency Bot

chore(deps): update module github.com/godbus/dbus/v5 to v5.2.2 (!2637) by GitLab Dependency Bot

chore(deps): update module github.com/google/go-querystring to v1.2.0 (!2638) by GitLab Dependency Bot

1.11.0 (2026-01-05)

Bug Fixes

api: typo in ms teams slug (1ed6c95)

Features

groups: add support for merge related settings (cb8412f)

1.10.0

🚀 Features

feat: implement Runner Controller API (!2634) by Duo Developer

🔄 Other Changes

chore(deps): update module github.com/godbus/dbus/v5 to v5.2.1 (!2635) by GitLab Dependency Bot

1.10.0 (2025-12-19)

Features

implement Runner Controller API (66f19f4)

... (truncated)

Commits

47db54d chore(release): 1.11.0 [skip ci]
bda199f Merge branch 'ms-teams-bug' into 'main'
1ed6c95 fix(api): typo in ms teams slug
c3983a2 Merge branch 'mergeSettings' into 'main'
cb8412f feat(groups): add support for merge related settings
546c3d7 Merge branch 'renovate/golang.org-x-text-0.x' into 'main'
e5cd9a4 chore(deps): update module golang.org/x/text to v0.32.0
19d243a Merge branch 'renovate/golang.org-x-sys-0.x' into 'main'
2a70b45 chore(deps): update module golang.org/x/sys to v0.39.0
f8829b7 Merge branch 'renovate/github.com-godbus-dbus-v5-5.x' into 'main'
Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.27.4

2.27.4

Fixes

CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.27.4

Fixes

CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

Commits

867ce95 v2.27.4
59bc751 CurrentTreeConstructionNodeReport: fix for nested container nodes
See full diff in compare view

Updates google.golang.org/protobuf from 1.36.10 to 1.36.11

Updates github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.27.4

2.27.4

Fixes

CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.27.4

Fixes

CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

Commits

867ce95 v2.27.4
59bc751 CurrentTreeConstructionNodeReport: fix for nested container nodes
See full diff in compare view

Updates github.com/golangci/golangci-lint/v2 from 2.7.2 to 2.8.0

Release notes

Sourced from github.com/golangci/golangci-lint/v2's releases.

v2.8.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

6a55b8ba828f05d3ce1e04d94040d833909fe428 build(deps): bump codeberg.org/polyfloyd/go-errorlint from 1.8.0 to 1.9.0 (#6284)

57d155c1730ab410db72eebb89eaece3e3f82162 build(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 (#6276)

0d43769b688aceaf451c7f088cc8b3870edbc830 build(deps): bump github.com/MirrexOne/unqueryvet from 1.3.0 to 1.4.0 (#6299)

6c532812bf9b3f1f3e8a624e535679ceb9c92497 build(deps): bump github.com/alecthomas/chroma/v2 from 2.20.0 to 2.21.1 (#6278)

2f5fe9701f996074adba5c12e453084fd2034d65 build(deps): bump github.com/alexkohler/prealloc from 1.0.0 to 1.0.1 (#6289)

496ae4438af468a5d5f46664c33b74e5ea95f5dd build(deps): bump github.com/ghostiam/protogetter from 0.3.17 to 0.3.18 (#6277)

e2fbe0a10c0e26bc9332abbe1c739bf13210c974 build(deps): bump github.com/go-critic/go-critic from 0.14.2 to 0.14.3 (#6300)

3cebab943dcd6b78925df4144485fe2d15d6f09a build(deps): bump github.com/godoc-lint/godoc-lint from 0.10.2 to 0.11.1 (#6282)

7a6a90c9cd09c19af2f48acf9898ec46541f0a9e build(deps): bump github.com/golangci/golines from 0.0.0-20250217134842-442fd0091d95 to 0.14.0 (#6279)

b388efe7efa29cc7f7ff53b959aaf538ec88103e build(deps): bump github.com/ldez/gomoddirectives from 0.7.1 to 0.8.0 (#6241)

3eae3e942f1867e1a1e8890bfdb452550fafd6ae build(deps): bump github.com/securego/gosec/v2 from 2.22.11-0.20251204091113-daccba6b93d7 to 2.22.11 (#6258)

e45bbde33d8df48b3f4145f71363bc99dd7816bf build(deps): bump github.com/shirou/gopsutil/v4 from 4.25.11 to 4.25.12 (#6290)

0e8e7fd4b7d99cb0ad66b1e58f289b8bcb33cb01 build(deps): bump golang.org/x/mod from 0.30.0 to 0.31.0 (#6253)

42866832c90c17df5128fb2d567c956ff14b0b07 build(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 in /scripts/gen_github_action_config in the scripts group (#6247)

7d53213a6a6a65f45cb5ab81ab7806308c8b99a0 build(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 (#6255)

9756d45c3d33e6ec3ee4eed55c2c52230645b0b9 build(deps): bump golang.org/x/sys from 0.38.0 to 0.39.0 (#6254)

54af8f39f3e0c1b57bd7532c8f9c11873ef5fdfb build(deps): bump golang.org/x/tools from 0.39.0 to 0.40.0 (#6252)

df2b36f71128bee5e394ea1cad350645682967ae build(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 in the github-actions group (#6248)

6441d5c9806ead5e137dddc084c1225c4c233c7b build(deps): bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#6270)

efa78522955caaa57642cc13ce83caca63ca7319 build(deps): bump the linter-testdata group across 5 directories with 8 updates (#6286)

246bc086df2dcdad895b087dbdb4bdc90adb6ab2 revive: add missing enable-default-rules setting (#6288)

2135d9a37b11c34f76b2d12695b19ef2574bd676 revive: fix suggested fixes (#6295)

Changelog

Sourced from github.com/golangci/golangci-lint/v2's changelog.

v2.8.0

Released on 2026-01-07

Linters new features or changes

godoc-lint: from 0.10.2 to 0.11.1 (new rule: require-stdlib-doclink)

golines: from 442fd0091d95 to 0.14.0

gomoddirectives: from 0.7.1 to 0.8.0

gosec: from daccba6b93d7 to 2.22.11 (new rule: G116)

modernize: from 0.39.0 to 0.40.0 (new analyzers: stringscut, unsafefuncs)

prealloc: from 1.0.0 to 1.0.1 (message changes)

unqueryvet: from 1.3.0 to 1.4.0 (new options: check-aliased-wildcard, check-string-concat, check-format-strings, check-string-builder, check-subqueries, ignored-functions, sql-builders)

Linters bug fixes

go-critic: from 0.14.2 to 0.14.3

go-errorlint: from 1.8.0 to 1.9.0

govet: from 0.39.0 to 0.40.0

protogetter: from 0.3.17 to 0.3.18

revive: add missing enable-default-rules setting

Documentation

docs: split installation page

Commits

e2e4002 chore: prepare release
2135d9a revive: fix suggested fixes (#6295)
e2fbe0a build(deps): bump github.com/go-critic/go-critic from 0.14.2 to 0.14.3 (#6300)
0d43769 build(deps): bump github.com/MirrexOne/unqueryvet from 1.3.0 to 1.4.0 (#6299)
e45bbde build(deps): bump github.com/shirou/gopsutil/v4 from 4.25.11 to 4.25.12 (#6290)
2f5fe97 build(deps): bump github.com/alexkohler/prealloc from 1.0.0 to 1.0.1 (#6289)
246bc08 revive: add missing enable-default-rules setting (#6288)
efa7852 build(deps): bump the linter-testdata group across 5 directories with 8 updat...
3cebab9 build(deps): bump github.com/godoc-lint/godoc-lint from 0.10.2 to 0.11.1 (#6282)
6a55b8b build(deps): bump codeberg.org/polyfloyd/go-errorlint from 1.8.0 to 1.9.0 (#6...
Additional commits viewable in compare view

Updates github.com/google/ko from 0.18.0 to 0.18.1

Release notes

Sourced from github.com/google/ko's releases.

v0.18.1

What's Changed

update labelsNode to match new labels interface in kube 1.34 by @ecordell in ko-build/ko#1584

Other

build(deps): bump k8s.io/apimachinery from 0.33.0 to 0.33.1 by @dependabot[bot] in ko-build/ko#1513

Revert "drop -m flag" to fix empty SBOM generation in v0.18.0 by @0xiso in ko-build/ko#1514

build(deps): bump github.com/google/go-containerregistry from 0.20.4-0.20250225234217-098045d5e61f to 0.20.4 by @dependabot[bot] in ko-build/ko#1516

build(deps): bump sigs.k8s.io/kind from 0.27.0 to 0.29.0 by @dependabot[bot] in ko-build/ko#1517

build(deps): bump github.com/google/go-containerregistry from 0.20.4 to 0.20.5 by @dependabot[bot] in ko-build/ko#1518

Update ko version used in CI by @maboehm in ko-build/ko#1501

build(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 by @dependabot[bot] in ko-build/ko#1522

build(deps): bump golang.org/x/tools from 0.33.0 to 0.34.0 by @dependabot[bot] in ko-build/ko#1521

build(deps): bump github.com/google/go-containerregistry from 0.20.5 to 0.20.6 by @dependabot[bot] in ko-build/ko#1527

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabot[bot] in ko-build/ko#1529

build(deps): bump github.com/sigstore/cosign/v2 from 2.5.0 to 2.5.1 by @dependabot[bot] in ko-build/ko#1530

build(deps): bump github.com/sigstore/cosign/v2 from 2.5.1 to 2.5.2 by @dependabot[bot] in ko-build/ko#1531

build(deps): bump k8s.io/apimachinery from 0.33.1 to 0.33.2 by @dependabot[bot] in ko-build/ko#1532

build(deps): bump github.com/docker/docker from 28.2.2+incompatible to 28.3.0+incompatible by @dependabot[bot] in ko-build/ko#1533

build(deps): bump github.com/docker/docker from 28.3.0+incompatible to 28.3.1+incompatible by @dependabot[bot] in ko-build/ko#1535

build(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by @dependabot[bot] in ko-build/ko#1537

build(deps): bump github.com/docker/docker from 28.3.1+incompatible to 28.3.2+incompatible by @dependabot[bot] in ko-build/ko#1538

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in ko-build/ko#1540

build(deps): bump k8s.io/apimachinery from 0.33.2 to 0.33.3 by @dependabot[bot] in ko-build/ko#1541

build(deps): bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.5.3 by @dependabot[bot] in ko-build/ko#1542

bump cosign and rekor to HEAD to fix cve for go-chi/chi dep by @cpanato in ko-build/ko#1547

build(deps): bump golang.org/x/tools from 0.34.0 to 0.36.0 by @dependabot[bot] in ko-build/ko#1546

build(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible by @dependabot[bot] in ko-build/ko#1544

build(deps): bump k8s.io/apimachinery from 0.33.3 to 0.33.4 by @dependabot[bot] in ko-build/ko#1549

build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in ko-build/ko#1551

build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @dependabot[bot] in ko-build/ko#1553

build(deps): bump sigs.k8s.io/kind from 0.29.0 to 0.30.0 by @dependabot[bot] in ko-build/ko#1552

build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @dependabot[bot] in ko-build/ko#1555

build(deps): bump github.com/docker/docker from 28.3.3+incompatible to 28.4.0+incompatible by @dependabot[bot] in ko-build/ko#1556

build(deps): bump golang.org/x/tools from 0.36.0 to 0.37.0 by @dependabot[bot] in ko-build/ko#1561

Update go-chi by @gcemaj in ko-build/ko#1567

build(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 by @dependabot[bot] in ko-build/ko#1559

build(deps): bump github.com/docker/docker from 28.4.0+incompatible to 28.5.0+incompatible by @dependabot[bot] in ko-build/ko#1570

build(deps): bump golang.org/x/tools from 0.37.0 to 0.38.0 by @dependabot[bot] in ko-build/ko#1573

build(deps): bump github.com/docker/docker from 28.5.0+incompatible to 28.5.1+incompatible by @dependabot[bot] in ko-build/ko#1572

Split stdout and stderr when running go env by @DrJosh9000 in ko-build/ko#1574

build(deps): bump github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible by @dependabot[bot] in ko-build/ko#1575

build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 by @dependabot[bot] in ko-build/ko#1576

build(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login from 0.10.1 to 0.11.0 by @dependabot[bot] in ko-build/ko#1577

build(deps): bump golang.org/x/tools from 0.38.0 to 0.39.0 by @dependabot[bot] in ko-build/ko#1579

build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @dependabot[bot] in ko-build/ko#1581

build(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 by @dependabot[bot] in ko-build/ko#1582

... (truncated)

Commits

7f1ced6 bump govulncheck action go version
f644f24 don't bump go-yit all the way
321f652 bump lint action + tool
b9b24bc update deps
8fa7b39 update labelsNode to match new labels interface in kube 1.34
2bb8879 build(deps): bump golang.org/x/tools from 0.39.0 to 0.40.0 (#1585)
ba4f980 build(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 (#1586)
ffcf003 build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 (#1583)
6508cef Merge pull request #1582 from ko-build/dependabot/go_modules/github.com/googl...
c4d1c9b build(deps): bump github.com/google/go-containerregistry
Additional commits viewable in compare view

Updates github.com/goreleaser/goreleaser/v2 from 2.13.1 to 2.13.2

Release notes

Sourced from github.com/goreleaser/goreleaser/v2's releases.

v2.13.2

Announcement

Read the official announcement: Announcing GoReleaser v2.13.

Changelog

Bug fixes

60acec88cc82c56fcab8bb2c16a2fd4588051a22: fix(mcp): always use current schema url (#6300) (@tjhop)

5b21af93b21288a443dbf07a31aa0f9ab9a99525: fix(deps): move to go.yaml.in/yaml (#6298) (@caarlos0)

83e39243fa09663a7405ec6dcab66bec5af36ca4: fix(deps): update fang, log, lipgloss (#6312) (@caarlos0)

e91e18452d00ffc8ffb578df005f3274d340f660: fix(deps): update go-github, add one more test (#6294) (@caarlos0)

2731dca113c7cb36616453ace7379313fee9dced: fix(deps): use quill fork (#6310) (@caarlos0)

660ec296d05557e8977dd989fdbd3f116e7531aa: fix(nix): use stdenvNoCC.hostPlatform.system instead of deprecated system parameter (#6316) (@djvcom)

7f181b2c28b0611b22d5c8feefbced256d170e02: fix: build with latest cosign (#6293) (@caarlos0)

16e3bba54c58bc7e0bafea9c19fafc55aeb2a1e4: fix: lint (@caarlos0)

621a88ba69fac32fa7d14e671681ec3df74a8a48: fix: run script (#6290) (@caarlos0)

Documentation updates

998b0555631ccf7823ffcbd0ed5a415d52806a91: docs(deps): bump mkdocs-material from 9.7.0 to 9.7.1 in /www in the docs group (#6302) (@dependabot[bot])

d63e5ff1e7a2a1a38e4b711ef7335bd061fc314d: docs: fix formatting (@caarlos0)

0e9a86307c515f9f6cd1acac7b2b087b4975228a: docs: fix typo in notarize.md regarding certificate export (#6306) (@meysam81)

Other work

196a161b7a4ee36f2da26dc913e2c7da9620acfc: chore: svu.yaml (@caarlos0)

df4fc115e5a7e76494941baac43803fc05e2667c: ci(deps): bump the actions group with 7 updates (#6304) (@dependabot[bot])

14d27aeb6325603a87f5e6f70fa68da2f4ffb080: ci(deps): bump the actions group with 8 updates (#6297) (@dependabot[bot])

Full Changelog: goreleaser/goreleaser@v2.13.1...v2.13.2

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them? You can sponsor, get a Pro License or contribute with code.

Where to go next?

Find examples and commented usage of all options in our website.

Reach out on Discord and Twitter!

Commits

bde54b4 chore: auto-update generated files
d63e5ff docs: fix formatting
336c461 docs: update
d19723e chore(deps): update 2 dependencies (#6318)
856512f chore(deps): update quill
ba2c5e5 test: fix testpkg
196a161 chore: svu.yaml
660ec29 fix(nix): use stdenvNoCC.hostPlatform.system instead of deprecated system par...
179d039 chore(deps): update 6 dependencies
83e3924 fix(deps): update fang, log, lipgloss (#6312)
Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.27.4

2.27.4

Fixes

CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.27.4

Fixes

CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

Commits

867ce95 v2.27.4
59bc751 CurrentTreeConstructionNodeReport: fix for nested container nodes
See full diff in compare view

Updates google.golang.org/protobuf from 1.36.10 to 1.36.11

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
gitlab.com/gitlab-org/api/client-go	[>= 0.118.a, < 0.119]
gitlab.com/gitlab-org/api/client-go	[>= 0.117.a, < 0.118]

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @spencerschrock.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.26.2` | `0.26.3` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.38.3` | `1.39.0` | | [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.2` | `2.4.3` | | google.golang.org/protobuf | `1.36.10` | `1.36.11` | | [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.27.3` | `2.27.4` | | [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `1.7.0` | `1.11.0` | Bumps the gomod group with 5 updates in the /tools directory: | Package | From | To | | --- | --- | --- | | google.golang.org/protobuf | `1.36.10` | `1.36.11` | | [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.27.3` | `2.27.4` | | [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint) | `2.7.2` | `2.8.0` | | [github.com/google/ko](https://github.com/google/ko) | `0.18.0` | `0.18.1` | | [github.com/goreleaser/goreleaser/v2](https://github.com/goreleaser/goreleaser) | `2.13.1` | `2.13.2` | Updates `github.com/moby/buildkit` from 0.26.2 to 0.26.3 - [Release notes](https://github.com/moby/buildkit/releases) - [Commits](moby/buildkit@v0.26.2...v0.26.3) Updates `github.com/onsi/gomega` from 1.38.3 to 1.39.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.38.3...v1.39.0) Updates `go.yaml.in/yaml/v2` from 2.4.2 to 2.4.3 - [Commits](yaml/go-yaml@v2.4.2...v2.4.3) Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11 Updates `github.com/onsi/ginkgo/v2` from 2.27.3 to 2.27.4 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.27.3...v2.27.4) Updates `gitlab.com/gitlab-org/api/client-go` from 1.7.0 to 1.11.0 - [Release notes](https://gitlab.com/gitlab-org/api/client-go/tags) - [Changelog](https://gitlab.com/gitlab-org/api/client-go/blob/main/CHANGELOG.md) - [Commits](https://gitlab.com/gitlab-org/api/client-go/compare/v1.7.0...v1.11.0) Updates `github.com/onsi/ginkgo/v2` from 2.27.3 to 2.27.4 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.27.3...v2.27.4) Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11 Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11 Updates `github.com/onsi/ginkgo/v2` from 2.27.3 to 2.27.4 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.27.3...v2.27.4) Updates `github.com/golangci/golangci-lint/v2` from 2.7.2 to 2.8.0 - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md) - [Commits](golangci/golangci-lint@v2.7.2...v2.8.0) Updates `github.com/google/ko` from 0.18.0 to 0.18.1 - [Release notes](https://github.com/google/ko/releases) - [Commits](ko-build/ko@v0.18.0...v0.18.1) Updates `github.com/goreleaser/goreleaser/v2` from 2.13.1 to 2.13.2 - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Commits](goreleaser/goreleaser@v2.13.1...v2.13.2) Updates `github.com/onsi/ginkgo/v2` from 2.27.3 to 2.27.4 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.27.3...v2.27.4) Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11 --- updated-dependencies: - dependency-name: github.com/moby/buildkit dependency-version: 0.26.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/onsi/gomega dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: go.yaml.in/yaml/v2 dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.27.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: gitlab.com/gitlab-org/api/client-go dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.27.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.27.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/golangci/golangci-lint/v2 dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/google/ko dependency-version: 0.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/goreleaser/goreleaser/v2 dependency-version: 2.13.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.27.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: Spencer Schrock <sschrock@google.com>

spencerschrock

@dependabot squash and merge

dependabot · 2026-01-08T17:54:36Z

Beginning January 27, 2026, Dependabot will no longer support the @dependabot squash and merge command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 8, 2026

dependabot bot requested a review from a team as a code owner January 8, 2026 16:57

dependabot bot requested review from justaugustus and raghavkaul and removed request for a team January 8, 2026 16:57

github-project-automation bot added this to OpenSSF Scorecard Jan 8, 2026

dependabot bot temporarily deployed to integration-test January 8, 2026 16:57 Inactive

dependabot bot temporarily deployed to gitlab January 8, 2026 16:57 Inactive

dosubot bot added the size:L This PR changes 100-499 lines, ignoring generated files. label Jan 8, 2026

downgrade github.com/charmbracelet/x/ansi to fix diamond dependency

5f8bafe

Signed-off-by: Spencer Schrock <sschrock@google.com>

spencerschrock temporarily deployed to integration-test January 8, 2026 17:47 — with GitHub Actions Inactive

spencerschrock temporarily deployed to gitlab January 8, 2026 17:47 — with GitHub Actions Inactive

spencerschrock approved these changes Jan 8, 2026

View reviewed changes

dependabot bot merged commit 79b923e into main Jan 8, 2026
38 checks passed

dependabot bot deleted the dependabot/go_modules/gomod-1252e58a54 branch January 8, 2026 17:59

github-project-automation bot moved this to Done in OpenSSF Scorecard Jan 8, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

🌱 Bump the gomod group across 2 directories with 9 updates #4901

🌱 Bump the gomod group across 2 directories with 9 updates #4901

Uh oh!

dependabot bot commented on behalf of github Jan 8, 2026 •

edited

Loading

Uh oh!

spencerschrock left a comment

Uh oh!

dependabot bot commented on behalf of github Jan 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

🌱 Bump the gomod group across 2 directories with 9 updates #4901

🌱 Bump the gomod group across 2 directories with 9 updates #4901

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.26.3

Contributors

Notable Changes

Dependency Changes

v1.39.0

1.39.0

Features

1.39.0

Features

v2.27.4

2.27.4

Fixes

2.27.4

Fixes

v1.11.0

1.11.0

🚀 Features

🐛 Bug Fixes

🔄 Other Changes

1.11.0 (2026-01-05)

Bug Fixes

Features

v1.10.0

1.10.0

🚀 Features

🔄 Other Changes

1.10.0 (2025-12-19)

Features

1.11.0

🚀 Features

🐛 Bug Fixes

🔄 Other Changes

1.11.0 (2026-01-05)

Bug Fixes

Features

1.10.0

🚀 Features

🔄 Other Changes

1.10.0 (2025-12-19)

Features

v2.27.4

2.27.4

Fixes

2.27.4

Fixes

v2.27.4

2.27.4

Fixes

2.27.4

Fixes

v2.8.0

Changelog

v2.8.0

v0.18.1

What's Changed

v2.13.2

Announcement

Changelog

Bug fixes

Documentation updates

Other work

Helping out

Where to go next?

v2.27.4

2.27.4

Fixes

2.27.4

Fixes

Uh oh!

spencerschrock left a comment

Choose a reason for hiding this comment

Uh oh!

dependabot bot commented on behalf of github Jan 8, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 8, 2026 •

edited

Loading