Skip to content

Bump the go-modules group across 1 directory with 15 updates#561

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-modules-0df1392e96
Open

Bump the go-modules group across 1 directory with 15 updates#561
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-modules-0df1392e96

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 24, 2026

Bumps the go-modules group with 12 updates in the / directory:

Package From To
github.com/paketo-buildpacks/occam 0.31.1 0.31.3
cloud.google.com/go/auth 0.18.3-0.20260310051336-87cdcc9f7568 0.19.0
github.com/ProtonMail/go-crypto 1.4.0 1.4.1
github.com/anchore/stereoscope 0.1.21 0.1.22
github.com/anchore/syft 1.42.2 1.42.3
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream 1.7.7 1.7.8
github.com/aws/aws-sdk-go-v2/service/s3 1.97.1 1.97.2
github.com/diskfs/go-diskfs 1.7.0 1.8.0
github.com/fatih/color 1.18.0 1.19.0
github.com/klauspost/compress 1.18.4 1.18.5
github.com/olekukonko/ll 0.1.7 0.1.8
github.com/pelletier/go-toml/v2 2.2.4 2.3.0

Updates github.com/paketo-buildpacks/occam from 0.31.1 to 0.31.3

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.31.3

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.31.2...v0.31.3

v0.31.2

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.31.1...v0.31.2

Commits
  • 0a7c1ac chore(deps): updated module github.com/google/go-containerregistry from v0.21...
  • e3a5bde chore(deps): updated module github.com/paketo-buildpacks/packit/v2 from v2.25...
  • 6914d4b Updates go mod version to 1.26.1
  • a2ee454 Fix linter issues (#456)
  • 99c82d2 Updating github-config
  • 0277272 Updating github-config
  • cdd83bd Updating github-config
  • f46bf41 chore(deps): updated module github.com/onsi/gomega from v1.38.3 to v1.39.1 (#...
  • 1c6c42d chore(deps): updated module github.com/docker/docker from v28.5.1+incompatibl...
  • 7162009 chore(deps): updated module github.com/testcontainers/testcontainers-go from ...
  • See full diff in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.25.4 to 2.25.5

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.25.5

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.25.4...v2.25.5

Commits
  • 388f655 Updates go mod version to 1.26.1
  • ec5163e Updating github-config
  • 1ed4352 Structure re-usability for the extension (#754)
  • 1178810 Bump modernc.org/sqlite from 1.46.2 to 1.47.0
  • dc41ad0 Bump modernc.org/sqlite from 1.46.1 to 1.46.2
  • 66b11fa Bump github.com/anchore/syft from 1.42.1 to 1.42.2
  • 0172ef8 Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0
  • f3c1964 Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
  • 82aea99 Bump github.com/anchore/syft from 1.42.0 to 1.42.1
  • e16f8b8 Bump modernc.org/sqlite from 1.46.0 to 1.46.1
  • Additional commits viewable in compare view

Updates cloud.google.com/go/auth from 0.18.3-0.20260310051336-87cdcc9f7568 to 0.19.0

Release notes

Sourced from cloud.google.com/go/auth's releases.

auth: v0.19.0

v0.19.0 (2026-03-23)

Features

  • add OpenTelemetry gRPC and HTTP wrappers for T4 tracing (#14133) (d38abf98)
Changelog

Sourced from cloud.google.com/go/auth's changelog.

v0.19.0

  • bigquery:

    • Support customer-managed encryption keys.

  • bigtable:

    • Improved emulator support.
    • Support GetCluster.

  • datastore:

    • Add general mutations.
    • Support pointer struct fields.
    • Support transaction options.

  • firestore:

    • Add Transaction.GetAll.
    • Support document cursors.

  • logging:

    • Support concurrent RPCs to the service.
    • Support per-entry resources.

  • profiler:

    • Add config options to disable heap and thread profiling.
    • Read the project ID from $GOOGLE_CLOUD_PROJECT when it's set.

  • pubsub:

    • BEHAVIOR CHANGE: Release flow control after ack/nack (instead of after the callback returns).
    • Add SubscriptionInProject.
    • Add OpenCensus instrumentation for streaming pull.

  • storage:

    • Support CORS.

v0.18.0

  • bigquery:

    • Marked stable.
    • Schema inference of nullable fields supported.
    • Added TimePartitioning to QueryConfig.

  • firestore: Data provided to DocumentRef.Set with a Merge option can contain Delete sentinels.

  • logging: Clients can accept parent resources other than projects.

  • pubsub:

    • pubsub/pstest: A lighweight fake for pubsub. Experimental; feedback welcome.
    • Support updating more subscription metadata: AckDeadline,

... (truncated)

Commits

Updates github.com/ProtonMail/go-crypto from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.4.1

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.4.0...v1.4.1

Release v1.4.1-proton

This release is v1.4.1 with support for the following non-standardized features:

Commits

Updates github.com/anchore/stereoscope from 0.1.21 to 0.1.22

Release notes

Sourced from github.com/anchore/stereoscope's releases.

v0.1.22

Dependency Updates

(Full Changelog)

Commits
  • 86e8285 chore(deps): update tools to latest versions (#540)
  • b0173ff chore(deps): bump github.com/moby/moby/client from 0.2.2 to 0.3.0 (#542)
  • 5e50dd0 chore(deps): bump google.golang.org/grpc from 1.76.0 to 1.79.3 (#547)
  • 7977ec6 chore(deps): bump github.com/google/go-containerregistry (#541)
  • 19e4473 chore(deps): bump github.com/docker/cli (#543)
  • a8dc17e chore(deps): bump github.com/sylabs/sif/v2 from 2.23.0 to 2.24.0 (#544)
  • See full diff in compare view

Updates github.com/anchore/syft from 1.42.2 to 1.42.3

Release notes

Sourced from github.com/anchore/syft's releases.

v1.42.3

Bug Fixes

  • Missing secondary evidence for .NET dependency in ghcr.io/open-telemetry/demo:2.0.0-accounting image [#4652]

Additional Changes

(Full Changelog)

Commits
  • 860126c chore(deps): update anchore dependencies (#4681)
  • 36639f1 chore(deps): bump github.com/buger/jsonsparser to v1.1.2 (#4680)
  • f32238c chore(deps): bump the go-minor-patch group with 2 updates (#4678)
  • 0c8eef6 chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 (#4675)
  • 4d42f8a chore(deps): bump the go-minor-patch group with 2 updates (#4674)
  • e388511 chore: centralize temp files and prefer streaming IO (#4668)
  • a3dacf5 chore(deps): update tools to latest versions (#4663)
  • cccc9bf chore(deps): bump the go-minor-patch group with 3 updates (#4669)
  • 59f7725 chore(deps): bump github/codeql-action (#4670)
  • 7a6b157 chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#4671)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.7 to 1.7.8

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.1 to 1.97.2

Commits

Updates github.com/diskfs/go-diskfs from 1.7.0 to 1.8.0

Commits

Updates github.com/fatih/color from 1.18.0 to 1.19.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits
  • ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
  • 1205984 Bump actions/setup-go from 5 to 6
  • 5715c20 Merge pull request #269 from UnSubble/main
  • 2f6e200 Merge branch 'main' into main
  • f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
  • 848e633 Merge branch 'main' into main
  • 4c2cd34 Add tests
  • 7f812f0 Bump actions/checkout from 4 to 6
  • b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
  • 239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.2 to 0.21.3

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.3

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.2...v0.21.3

Commits
  • 3888fb8 bump golang to 1.25.7 (#2236)
  • f439624 tarball: detect symlink cycles in extractFileFromTar (#2232)
  • 400c263 mutate: reject path traversal and symlink escape in Extract (#2227)
  • 47eedc9 Bump goreleaser/goreleaser-action in the actions group (#2220)
  • be0a845 Bump the go-deps group across 4 directories with 7 updates (#2233)
  • e916301 migrate to github.com/moby/moby modules (#2228)
  • 8b2478e Adds local file support to the crane index subcommand (#2223)
  • See full diff in compare view

Updates github.com/klauspost/compress from 1.18.4 to 1.18.5

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.5

What's Changed

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

Commits

Updates github.com/olekukonko/ll from 0.1.7 to 0.1.8

Commits

Updates github.com/pelletier/go-toml/v2 from 2.2.4 to 2.3.0

Release notes

Sourced from github.com/pelletier/go-toml/v2's releases.

v2.3.0

This is the first release built largely with the help of AI coding agents. Highlights include the complete removal of the unsafe package. go-toml is now fully safe Go code, with a geomean overhead of only ~1.4% vs v2.2.4 and zero additional allocations on benchmarks. This release also adds omitzero struct tag support, improves UnmarshalText/Unmarshaler handling for tables and array tables, and fixes several bugs including nil pointer marshaling, leap second handling, and datetime unmarshaling panics.

What's Changed

What's new

Fixed bugs

Documentation

Other changes

New Contributors

Full Changelog: pelletier/go-toml@v2.2.4...v2.3.0

Commits
  • f36a3ec Reduce marshal and unmarshal overhead (#1044)
  • 77f3862 Fix benchmark script replacing internal package imports (#1042)
  • 16b1ef5 Fix parser error pointing to wrong line when last line has no trailing newlin...
  • e14bde7 build(deps): bump docker/login-action from 3 to 4 (#1039)
  • 4b1ff01 build(deps): bump docker/setup-buildx-action from 3 to 4 (#1040)
  • 048a25f Go 1.26 (#1030)
  • b357558 build(deps): bump goreleaser/goreleaser-action from 6 to 7 (#1035)
  • a0be52f build(deps): bump actions/upload-artifact from 6 to 7 (#1036)
  • 316bfc6 Support Unmarshaler interface for tables and array tables (#1027)
  • 2edc61f Fix panic when unmarshaling datetime values to incompatible types (#1028) (#1...
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.79.2 to 1.79.3

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.79.3

Security

  • server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like grpc/authz. Any request with a non-canonical path is now immediately rejected with an Unimplemented error. (#8981)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-modules group across 1 directory with 15 updates
676aaf7 
Bumps the go-modules group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.31.1` | `0.31.3` |
| [cloud.google.com/go/auth](https://github.com/googleapis/google-cloud-go) | `0.18.3-0.20260310051336-87cdcc9f7568` | `0.19.0` |
| [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.4.0` | `1.4.1` |
| [github.com/anchore/stereoscope](https://github.com/anchore/stereoscope) | `0.1.21` | `0.1.22` |
| [github.com/anchore/syft](https://github.com/anchore/syft) | `1.42.2` | `1.42.3` |
| [github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream](https://github.com/aws/aws-sdk-go-v2) | `1.7.7` | `1.7.8` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.97.1` | `1.97.2` |
| [github.com/diskfs/go-diskfs](https://github.com/diskfs/go-diskfs) | `1.7.0` | `1.8.0` |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.4` | `1.18.5` |
| [github.com/olekukonko/ll](https://github.com/olekukonko/ll) | `0.1.7` | `0.1.8` |
| [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.2.4` | `2.3.0` |



Updates `github.com/paketo-buildpacks/occam` from 0.31.1 to 0.31.3
- [Release notes](https://github.com/paketo-buildpacks/occam/releases)
- [Commits](paketo-buildpacks/occam@v0.31.1...v0.31.3)

Updates `github.com/paketo-buildpacks/packit/v2` from 2.25.4 to 2.25.5
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.25.4...v2.25.5)

Updates `cloud.google.com/go/auth` from 0.18.3-0.20260310051336-87cdcc9f7568 to 0.19.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/commits/v0.19.0)

Updates `github.com/ProtonMail/go-crypto` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](ProtonMail/go-crypto@v1.4.0...v1.4.1)

Updates `github.com/anchore/stereoscope` from 0.1.21 to 0.1.22
- [Release notes](https://github.com/anchore/stereoscope/releases)
- [Changelog](https://github.com/anchore/stereoscope/blob/main/RELEASE.md)
- [Commits](anchore/stereoscope@v0.1.21...v0.1.22)

Updates `github.com/anchore/syft` from 1.42.2 to 1.42.3
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v1.42.2...v1.42.3)

Updates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.7.7 to 1.7.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/m2/v1.7.7...service/m2/v1.7.8)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.97.1 to 1.97.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.97.1...service/s3/v1.97.2)

Updates `github.com/diskfs/go-diskfs` from 1.7.0 to 1.8.0
- [Commits](diskfs/go-diskfs@v1.7.0...v1.8.0)

Updates `github.com/fatih/color` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.18.0...v1.19.0)

Updates `github.com/google/go-containerregistry` from 0.21.2 to 0.21.3
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.2...v0.21.3)

Updates `github.com/klauspost/compress` from 1.18.4 to 1.18.5
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.4...v1.18.5)

Updates `github.com/olekukonko/ll` from 0.1.7 to 0.1.8
- [Release notes](https://github.com/olekukonko/ll/releases)
- [Commits](olekukonko/ll@v0.1.7...v0.1.8)

Updates `github.com/pelletier/go-toml/v2` from 2.2.4 to 2.3.0
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Commits](pelletier/go-toml@v2.2.4...v2.3.0)

Updates `google.golang.org/grpc` from 1.79.2 to 1.79.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.2...v1.79.3)

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/occam
  dependency-version: 0.31.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.25.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/auth
  dependency-version: 0.19.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-version: 1.4.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/stereoscope
  dependency-version: 0.1.22
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/syft
  dependency-version: 1.42.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
  dependency-version: 1.7.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.97.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/diskfs/go-diskfs
  dependency-version: 1.8.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/fatih/color
  dependency-version: 1.19.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/olekukonko/ll
  dependency-version: 0.1.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/pelletier/go-toml/v2
  dependency-version: 2.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 24, 2026
@dependabot dependabot bot requested review from a team as code owners March 24, 2026 18:57
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 24, 2026
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Mar 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code semver:patch A change requiring a patch version bump

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@paketo-bot