Skip to content

Bump the go-modules group across 1 directory with 12 updates#772

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-modules-73f6f7b751
Open

Bump the go-modules group across 1 directory with 12 updates#772
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-modules-73f6f7b751

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 20, 2026

Bumps the go-modules group with 8 updates in the / directory:

Package From To
github.com/paketo-buildpacks/packit/v2 2.25.4 2.25.5
github.com/ProtonMail/go-crypto 1.4.0 1.4.1
github.com/anchore/stereoscope 0.1.21 0.1.22
github.com/anchore/syft 1.42.2 1.42.3
github.com/diskfs/go-diskfs 1.7.0 1.8.0
github.com/fatih/color 1.18.0 1.19.0
github.com/google/go-containerregistry 0.21.2 0.21.3
github.com/googleapis/gax-go/v2 2.18.0 2.19.0

Updates github.com/paketo-buildpacks/packit/v2 from 2.25.4 to 2.25.5

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.25.5

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.25.4...v2.25.5

Commits
  • 388f655 Updates go mod version to 1.26.1
  • ec5163e Updating github-config
  • 1ed4352 Structure re-usability for the extension (#754)
  • 1178810 Bump modernc.org/sqlite from 1.46.2 to 1.47.0
  • dc41ad0 Bump modernc.org/sqlite from 1.46.1 to 1.46.2
  • 66b11fa Bump github.com/anchore/syft from 1.42.1 to 1.42.2
  • 0172ef8 Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0
  • f3c1964 Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
  • 82aea99 Bump github.com/anchore/syft from 1.42.0 to 1.42.1
  • e16f8b8 Bump modernc.org/sqlite from 1.46.0 to 1.46.1
  • Additional commits viewable in compare view

Updates github.com/ProtonMail/go-crypto from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.4.1

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.4.0...v1.4.1

Release v1.4.1-proton

This release is v1.4.1 with support for the following non-standardized features:

Commits

Updates github.com/anchore/stereoscope from 0.1.21 to 0.1.22

Release notes

Sourced from github.com/anchore/stereoscope's releases.

v0.1.22

Dependency Updates

(Full Changelog)

Commits
  • 86e8285 chore(deps): update tools to latest versions (#540)
  • b0173ff chore(deps): bump github.com/moby/moby/client from 0.2.2 to 0.3.0 (#542)
  • 5e50dd0 chore(deps): bump google.golang.org/grpc from 1.76.0 to 1.79.3 (#547)
  • 7977ec6 chore(deps): bump github.com/google/go-containerregistry (#541)
  • 19e4473 chore(deps): bump github.com/docker/cli (#543)
  • a8dc17e chore(deps): bump github.com/sylabs/sif/v2 from 2.23.0 to 2.24.0 (#544)
  • See full diff in compare view

Updates github.com/anchore/syft from 1.42.2 to 1.42.3

Release notes

Sourced from github.com/anchore/syft's releases.

v1.42.3

Bug Fixes

  • Missing secondary evidence for .NET dependency in ghcr.io/open-telemetry/demo:2.0.0-accounting image [#4652]

Additional Changes

(Full Changelog)

Commits
  • 860126c chore(deps): update anchore dependencies (#4681)
  • 36639f1 chore(deps): bump github.com/buger/jsonsparser to v1.1.2 (#4680)
  • f32238c chore(deps): bump the go-minor-patch group with 2 updates (#4678)
  • 0c8eef6 chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 (#4675)
  • 4d42f8a chore(deps): bump the go-minor-patch group with 2 updates (#4674)
  • e388511 chore: centralize temp files and prefer streaming IO (#4668)
  • a3dacf5 chore(deps): update tools to latest versions (#4663)
  • cccc9bf chore(deps): bump the go-minor-patch group with 3 updates (#4669)
  • 59f7725 chore(deps): bump github/codeql-action (#4670)
  • 7a6b157 chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#4671)
  • Additional commits viewable in compare view

Updates github.com/diskfs/go-diskfs from 1.7.0 to 1.8.0

Commits

Updates github.com/fatih/color from 1.18.0 to 1.19.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits
  • ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
  • 1205984 Bump actions/setup-go from 5 to 6
  • 5715c20 Merge pull request #269 from UnSubble/main
  • 2f6e200 Merge branch 'main' into main
  • f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
  • 848e633 Merge branch 'main' into main
  • 4c2cd34 Add tests
  • 7f812f0 Bump actions/checkout from 4 to 6
  • b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
  • 239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.2 to 0.21.3

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.3

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.2...v0.21.3

Commits
  • 3888fb8 bump golang to 1.25.7 (#2236)
  • f439624 tarball: detect symlink cycles in extractFileFromTar (#2232)
  • 400c263 mutate: reject path traversal and symlink escape in Extract (#2227)
  • 47eedc9 Bump goreleaser/goreleaser-action in the actions group (#2220)
  • be0a845 Bump the go-deps group across 4 directories with 7 updates (#2233)
  • e916301 migrate to github.com/moby/moby modules (#2228)
  • 8b2478e Adds local file support to the crane index subcommand (#2223)
  • See full diff in compare view

Updates github.com/googleapis/gax-go/v2 from 2.18.0 to 2.19.0

Release notes

Sourced from github.com/googleapis/gax-go/v2's releases.

v2: v2.19.0

v2.19.0 (2026-03-17)

Features

  • update WithLogger to WithLoggerContext. (#478) (1cb70baf)

  • pass logger to downstream via context (#474) (434fa676)

  • add WithClientMetrics CallOption (#479) (76f0284e)

  • add TransportTelemetryData for dynamic transport attributes (#481) (8a7caf00)

  • add ClientMetrics initialization core (#473) (f53618c2)

Bug Fixes

  • lazy initialization and getters for ClientMetrics (#485) (fb6c5f4d)
Commits
  • 06bdf7f chore: create a release (#486)
  • bf56424 chore(all): update all (#484)
  • fb6c5f4 fix(v2): lazy initialization and getters for ClientMetrics (#485)
  • 336f424 build: run linters on all submodules and fix deprecations (#483)
  • a46b2de chore(v2): Improve docs surrounding TransportTelemetryData (#482)
  • 8a7caf0 feat(v2): add TransportTelemetryData for dynamic transport attributes (#481)
  • 76f0284 feat(v2): add WithClientMetrics CallOption (#479)
  • 1cb70ba feat(v2): update WithLogger to WithLoggerContext. (#478)
  • f53618c feat(v2): add ClientMetrics initialization core (#473)
  • ac7fa62 chore(all): update all (#471)
  • Additional commits viewable in compare view

Updates google.golang.org/genproto from 0.0.0-20260217215200-42d3e9bedb6d to 0.0.0-20260316180232-0b37fe3546d5

Commits

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260217215200-42d3e9bedb6d to 0.0.0-20260316180232-0b37fe3546d5

Commits

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260311181403-84a4fc48630c to 0.0.0-20260316180232-0b37fe3546d5

Commits

Updates modernc.org/sqlite from 1.46.2 to 1.47.0

Changelog

Sourced from modernc.org/sqlite's changelog.

Changelog

  • 2026-03-17 v1.47.0: Add CGO-free version of the vector extensions from https://github.com/asg017/sqlite-vec. See vec_test.go for example usage. From the GitHub project page:

    • Important: sqlite-vec is a pre-v1, so expect breaking changes!
    • Store and query float, int8, and binary vectors in vec0 virtual tables
    • Written in pure C, no dependencies, runs anywhere SQLite runs (Linux/MacOS/Windows, in the browser with WASM, Raspberry Pis, etc.)
    • Store non-vector data in metadata, auxiliary, or partition key columns
    • Thanks Zhenghao Zhang!

  • 2026-03-16 v1.46.2: Upgrade to SQLite 3.51.3.

  • 2026-02-17 v1.46.1:

    • Ensure connection state is reset if Tx.Commit fails. Previously, errors like SQLITE_BUSY during COMMIT could leave the underlying connection inside a transaction, causing errors when the connection was reused by the database/sql pool. The driver now detects this state and forces a rollback internally.
    • Fixes [GitHub issue #2](modernc-org/sqlite#2), thanks Edoardo Spadolini!

  • 2026-02-17 v1.46.0:

    • Enable ColumnTypeScanType to report time.Time instead of string for TEXT columns declared as DATE, DATETIME, TIME, or TIMESTAMP via a new _texttotime URI parameter.
    • See [GitHub pull request #1](modernc-org/sqlite#1), thanks devhaozi!

  • 2026-02-09 v1.45.0:

    • Introduce vtab subpackage (modernc.org/sqlite/vtab) exposing Module, Table, Cursor, and IndexInfo API for Go virtual tables.
    • Wire vtab registration into the driver: vtab.RegisterModule installs modules globally and each new connection calls sqlite3_create_module_v2.
    • Implement vtab trampolines for xCreate/xConnect/xBestIndex/xDisconnect/xDestroy/xOpen/xClose/xFilter/xNext/xEof/xColumn/xRowid.
    • Map SQLite’s sqlite3_index_info into vtab.IndexInfo, including constraints, ORDER BY terms, and constraint usage (ArgIndex → xFilter argv[]).
    • Add an in‑repo dummy vtab module and test (module_test.go) that validates registration, basic scanning, and constraint visibility.
    • See [GitLab merge request #90](https://gitlab.com/cznic/sqlite/-/merge_requests/90), thanks Adrian Witas!

  • 2026-01-19 v1.44.3: Resolves [GitLab issue #243](https://gitlab.com/cznic/sqlite/-/issues/243).

  • 2026-01-18 v1.44.2: Upgrade to SQLite 3.51.2.

  • 2026-01-13 v1.44.0: Upgrade to SQLite 3.51.1.

  • 2025-10-10 v1.39.1: Upgrade to SQLite 3.50.4.

  • 2025-06-09 v1.38.0: Upgrade to SQLite 3.50.1.

  • 2025-02-26 v1.36.0: Upgrade to SQLite 3.49.0.

  • 2024-11-16 v1.34.0: Implement ResetSession and IsValid methods in connection

  • 2024-07-22 v1.31.0: Support windows/386.

  • 2024-06-04 v1.30.0: Upgrade to SQLite 3.46.0, release notes at https://sqlite.org/releaselog/3_46_0.html.

  • 2024-02-13 v1.29.0: Upgrade to SQLite 3.45.1, release notes at https://sqlite.org/releaselog/3_45_1.html.

  • 2023-12-14: v1.28.0: Add (*Driver).RegisterConnectionHook,

... (truncated)

Commits
  • b4deaee include Zhenghao Zhang in CHANGELOG, AUTHORS, CONTRIBUTORS, updates !93
  • ba4fc0b add sqlite_vec extension, updates !93
  • 8b9ffba Merge branch 'windows' into 'master'
  • 614a125 Add sqlite-vec support
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-modules group across 1 directory with 12 updates
9c75a01 
Bumps the go-modules group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.25.4` | `2.25.5` |
| [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.4.0` | `1.4.1` |
| [github.com/anchore/stereoscope](https://github.com/anchore/stereoscope) | `0.1.21` | `0.1.22` |
| [github.com/anchore/syft](https://github.com/anchore/syft) | `1.42.2` | `1.42.3` |
| [github.com/diskfs/go-diskfs](https://github.com/diskfs/go-diskfs) | `1.7.0` | `1.8.0` |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.2` | `0.21.3` |
| [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go) | `2.18.0` | `2.19.0` |



Updates `github.com/paketo-buildpacks/packit/v2` from 2.25.4 to 2.25.5
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.25.4...v2.25.5)

Updates `github.com/ProtonMail/go-crypto` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](ProtonMail/go-crypto@v1.4.0...v1.4.1)

Updates `github.com/anchore/stereoscope` from 0.1.21 to 0.1.22
- [Release notes](https://github.com/anchore/stereoscope/releases)
- [Changelog](https://github.com/anchore/stereoscope/blob/main/RELEASE.md)
- [Commits](anchore/stereoscope@v0.1.21...v0.1.22)

Updates `github.com/anchore/syft` from 1.42.2 to 1.42.3
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v1.42.2...v1.42.3)

Updates `github.com/diskfs/go-diskfs` from 1.7.0 to 1.8.0
- [Commits](diskfs/go-diskfs@v1.7.0...v1.8.0)

Updates `github.com/fatih/color` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.18.0...v1.19.0)

Updates `github.com/google/go-containerregistry` from 0.21.2 to 0.21.3
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.2...v0.21.3)

Updates `github.com/googleapis/gax-go/v2` from 2.18.0 to 2.19.0
- [Release notes](https://github.com/googleapis/gax-go/releases)
- [Commits](googleapis/gax-go@v2.18.0...v2.19.0)

Updates `google.golang.org/genproto` from 0.0.0-20260217215200-42d3e9bedb6d to 0.0.0-20260316180232-0b37fe3546d5
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260217215200-42d3e9bedb6d to 0.0.0-20260316180232-0b37fe3546d5
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260311181403-84a4fc48630c to 0.0.0-20260316180232-0b37fe3546d5
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `modernc.org/sqlite` from 1.46.2 to 1.47.0
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.46.2...v1.47.0)

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.25.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-version: 1.4.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/stereoscope
  dependency-version: 0.1.22
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/syft
  dependency-version: 1.42.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/diskfs/go-diskfs
  dependency-version: 1.8.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/fatih/color
  dependency-version: 1.19.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/googleapis/gax-go/v2
  dependency-version: 2.19.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto
  dependency-version: 0.0.0-20260316180232-0b37fe3546d5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260316180232-0b37fe3546d5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260316180232-0b37fe3546d5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: modernc.org/sqlite
  dependency-version: 1.47.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 20, 2026
@dependabot dependabot bot requested review from a team as code owners March 20, 2026 10:44
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 20, 2026
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Mar 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code semver:patch A change requiring a patch version bump

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@paketo-bot