Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 24, 2025

Bumps the go-modules group with 10 updates in the / directory:

Package From To
github.com/paketo-buildpacks/occam 0.30.1 0.30.2
github.com/anchore/syft 1.34.2 1.36.0
github.com/aws/aws-sdk-go-v2 1.39.3 1.39.4
github.com/aws/aws-sdk-go-v2/config 1.31.13 1.31.15
github.com/aws/aws-sdk-go-v2/internal/v4a 1.4.10 1.4.11
github.com/aws/aws-sdk-go-v2/service/internal/checksum 1.9.1 1.9.2
github.com/aws/aws-sdk-go-v2/service/internal/s3shared 1.19.10 1.19.11
github.com/aws/aws-sdk-go-v2/service/s3 1.88.5 1.88.7
github.com/klauspost/compress 1.18.0 1.18.1
google.golang.org/api 0.252.0 0.253.0

Updates github.com/paketo-buildpacks/occam from 0.30.1 to 0.30.2

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.30.2

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.30.1...v0.30.2

Commits
  • 4325ba8 chore(deps): updated module github.com/docker/docker from v28.4.0+incompatibl...
  • ca18701 chore(deps): updated module github.com/paketo-buildpacks/packit/v2 from v2.25...
  • 9cb6d44 fix: always setting the cache volumes (#437)
  • 8a84072 Updating github-config
  • See full diff in compare view

Updates github.com/anchore/syft from 1.34.2 to 1.36.0

Release notes

Sourced from github.com/anchore/syft's releases.

v1.36.0

Added Features

Bug Fixes

(Full Changelog)

Commits
  • 8be4639 chore(deps): update tools to latest versions (#4302)
  • 44b7b09 chore(deps): bump github.com/github/go-spdx/v2 from 2.3.3 to 2.3.4 (#4301)
  • 675075e chore(deps): bump github/codeql-action from 4.30.8 to 4.30.9 (#4299)
  • 31b2c4c support universal (fat) mach-o binary files (#4278)
  • 07029ea chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4296)
  • f4de1e8 chore(deps): bump anchore/sbom-action from 0.20.7 to 0.20.8 (#4297)
  • 538b4a2 convert posix path back to windows (#4285)
  • fc74b07 Remove duplicate image source providers (#4289)
  • 6627c52 chore(deps): bump anchore/sbom-action from 0.20.6 to 0.20.7 (#4293)
  • c0f32e1 feat: add option to fetch remote licenses for pnpm-lock.yaml files (#4286)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.39.3 to 1.39.4

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.31.13 to 1.31.15

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.18.17 to 1.18.19

Commits
  • 390cf19 Release 2023-03-21
  • c37c72a Regenerated Clients
  • d1e5193 Update endpoints model
  • 2506101 Update API model
  • c93b5cc Merge pull request #2051 from aws/add100ContinueCustomization
  • c01aac6 Keep one changelog for PR
  • 3780faa Keep one changelog for PR
  • b94b5b7 Merge remote-tracking branch 'origin/add100ContinueCustomization' into add100...
  • 6174ff2 Change some variable name and use operation shape id to represent operation s...
  • 83491fc add changelog to last commit
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.10 to 1.18.11

Commits

Updates github.com/aws/aws-sdk-go-v2/internal/configsources from 1.4.10 to 1.4.11

Commits

Updates github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 from 2.7.10 to 2.7.11

Commits

Updates github.com/aws/aws-sdk-go-v2/internal/v4a from 1.4.10 to 1.4.11

Commits

Updates github.com/aws/aws-sdk-go-v2/service/internal/checksum from 1.9.1 to 1.9.2

Commits

Updates github.com/aws/aws-sdk-go-v2/service/internal/presigned-url from 1.13.10 to 1.13.11

Commits

Updates github.com/aws/aws-sdk-go-v2/service/internal/s3shared from 1.19.10 to 1.19.11

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.88.5 to 1.88.7

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.29.7 to 1.29.8

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.35.2 to 1.35.3

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.38.7 to 1.38.9

Commits

Updates github.com/github/go-spdx/v2 from 2.3.3 to 2.3.4

Release notes

Sourced from github.com/github/go-spdx/v2's releases.

Release v2.3.4

What's Changed

  • update licenses
  • bump dependencies

Full Changelog: github/go-spdx@v2.3.3...v2.3.4

Commits
  • 3ea60cf Merge pull request #109 from github/auto-update-licenses
  • 108cb58 Add updated license files
  • 9e5ecc4 Merge pull request #116 from github/dependabot/github_actions/actions/setup-go-6
  • ff1cc1c Merge branch 'main' into dependabot/github_actions/actions/setup-go-6
  • b3240be Merge pull request #114 from github/dependabot/github_actions/actions/checkout-5
  • d4dc9f2 Bump actions/setup-go from 5 to 6
  • f63665b Bump actions/checkout from 4 to 5
  • 7a705d1 Merge pull request #110 from github/elr/update-gomod
  • a9ed7b0 minor dependency update trigger autosubmission
  • 936b224 Merge pull request #107 from github/elr/limit-pr-autogen
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.0 to 1.18.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.1

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

Commits

Updates google.golang.org/api from 0.252.0 to 0.253.0

Release notes

Sourced from google.golang.org/api's releases.

v0.253.0

0.253.0 (2025-10-22)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.253.0 (2025-10-22)

Features

Commits

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20251002232023-7c0ddcbb5797 to 0.0.0-20251014184007-4626949a642f

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.30.1` | `0.30.2` |
| [github.com/anchore/syft](https://github.com/anchore/syft) | `1.34.2` | `1.36.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.39.3` | `1.39.4` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.31.13` | `1.31.15` |
| [github.com/aws/aws-sdk-go-v2/internal/v4a](https://github.com/aws/aws-sdk-go-v2) | `1.4.10` | `1.4.11` |
| [github.com/aws/aws-sdk-go-v2/service/internal/checksum](https://github.com/aws/aws-sdk-go-v2) | `1.9.1` | `1.9.2` |
| [github.com/aws/aws-sdk-go-v2/service/internal/s3shared](https://github.com/aws/aws-sdk-go-v2) | `1.19.10` | `1.19.11` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.88.5` | `1.88.7` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.0` | `1.18.1` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.252.0` | `0.253.0` |



Updates `github.com/paketo-buildpacks/occam` from 0.30.1 to 0.30.2
- [Release notes](https://github.com/paketo-buildpacks/occam/releases)
- [Commits](paketo-buildpacks/occam@v0.30.1...v0.30.2)

Updates `github.com/anchore/syft` from 1.34.2 to 1.36.0
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/.goreleaser.yaml)
- [Commits](anchore/syft@v1.34.2...v1.36.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.39.3 to 1.39.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.39.3...v1.39.4)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.31.13 to 1.31.15
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.31.13...config/v1.31.15)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.18.17 to 1.18.19
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.18.17...config/v1.18.19)

Updates `github.com/aws/aws-sdk-go-v2/feature/ec2/imds` from 1.18.10 to 1.18.11
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.18.10...config/v1.18.11)

Updates `github.com/aws/aws-sdk-go-v2/internal/configsources` from 1.4.10 to 1.4.11
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/m2/v1.4.10...internal/v4a/v1.4.11)

Updates `github.com/aws/aws-sdk-go-v2/internal/endpoints/v2` from 2.7.10 to 2.7.11
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@internal/endpoints/v2.7.10...internal/endpoints/v2.7.11)

Updates `github.com/aws/aws-sdk-go-v2/internal/v4a` from 1.4.10 to 1.4.11
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/m2/v1.4.10...internal/v4a/v1.4.11)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/checksum` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.9.1...v1.9.2)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/presigned-url` from 1.13.10 to 1.13.11
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/mq/v1.13.10...service/mq/v1.13.11)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/s3shared` from 1.19.10 to 1.19.11
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/sqs/v1.19.10...service/sqs/v1.19.11)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.88.5 to 1.88.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.88.5...service/s3/v1.88.7)

Updates `github.com/aws/aws-sdk-go-v2/service/sso` from 1.29.7 to 1.29.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.29.7...config/v1.29.8)

Updates `github.com/aws/aws-sdk-go-v2/service/ssooidc` from 1.35.2 to 1.35.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/pi/v1.35.2...service/pi/v1.35.3)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.38.7 to 1.38.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/sts/v1.38.7...service/iam/v1.38.9)

Updates `github.com/github/go-spdx/v2` from 2.3.3 to 2.3.4
- [Release notes](https://github.com/github/go-spdx/releases)
- [Commits](github/go-spdx@v2.3.3...v2.3.4)

Updates `github.com/klauspost/compress` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.18.0...v1.18.1)

Updates `google.golang.org/api` from 0.252.0 to 0.253.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.252.0...v0.253.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20251002232023-7c0ddcbb5797 to 0.0.0-20251014184007-4626949a642f
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/occam
  dependency-version: 0.30.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/syft
  dependency-version: 1.36.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.39.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.31.15
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.18.19
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
  dependency-version: 1.18.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/internal/configsources
  dependency-version: 1.4.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
  dependency-version: 2.7.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/internal/v4a
  dependency-version: 1.4.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/checksum
  dependency-version: 1.9.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
  dependency-version: 1.13.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/s3shared
  dependency-version: 1.19.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.88.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sso
  dependency-version: 1.29.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ssooidc
  dependency-version: 1.35.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.38.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/github/go-spdx/v2
  dependency-version: 2.3.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/api
  dependency-version: 0.253.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20251014184007-4626949a642f
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 24, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 24, 2025 06:18
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 24, 2025
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Oct 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code semver:patch A change requiring a patch version bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant