Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 21, 2025

Bumps the go-modules group with 32 updates in the / directory:

Package From To
github.com/paketo-buildpacks/occam 0.30.0 0.30.1
github.com/paketo-buildpacks/packit/v2 2.25.0 2.25.2
cloud.google.com/go/auth 0.16.5 0.17.0
cloud.google.com/go/iam 1.5.2 1.5.3
cloud.google.com/go/monitoring 1.24.2 1.24.3
github.com/CycloneDX/cyclonedx-go 0.9.2 0.9.3
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp 1.29.0 1.30.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric 0.53.0 0.54.0
github.com/anchore/go-struct-converter 0.0.0-20221221214134-65614c61201e 0.1.0
github.com/anchore/syft 1.33.0 1.34.2
github.com/aws/aws-sdk-go-v2 1.39.1 1.39.3
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream 1.7.1 1.7.2
github.com/aws/aws-sdk-go-v2/config 1.31.10 1.31.13
github.com/aws/aws-sdk-go-v2/internal/v4a 1.4.8 1.4.10
github.com/aws/aws-sdk-go-v2/service/internal/checksum 1.8.8 1.9.1
github.com/aws/aws-sdk-go-v2/service/internal/s3shared 1.19.8 1.19.10
github.com/aws/aws-sdk-go-v2/service/s3 1.88.2 1.88.5
github.com/charmbracelet/x/ansi 0.10.1 0.10.2
github.com/containerd/stargz-snapshotter/estargz 0.17.0 0.18.0
github.com/cyphar/filepath-securejoin 0.4.1 0.5.0
github.com/docker/docker-credential-helpers 0.9.3 0.9.4
github.com/envoyproxy/go-control-plane/envoy 1.32.4 1.35.0
github.com/github/go-spdx/v2 2.3.3 2.3.4
github.com/go-jose/go-jose/v4 4.1.2 4.1.3
github.com/klauspost/compress 1.18.0 1.18.1
github.com/olekukonko/ll 0.1.1 0.1.2
github.com/shirou/gopsutil/v4 4.25.8 4.25.9
github.com/skeema/knownhosts 1.3.1 1.3.2
golang.org/x/oauth2 0.31.0 0.32.0
golang.org/x/time 0.13.0 0.14.0
google.golang.org/api 0.249.0 0.252.0
google.golang.org/grpc 1.75.1 1.76.0

Updates github.com/paketo-buildpacks/occam from 0.30.0 to 0.30.1

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.30.1

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.30.0...v0.30.1

Commits
  • 3b96b24 chore(deps): updated module github.com/docker/docker from v28.3.3+incompatibl...
  • f005efe chore(deps): updated module github.com/paketo-buildpacks/packit/v2 from v2.24...
  • e7da996 Add support for registry extension images (#433)
  • aa947da chore(deps): updated module github.com/testcontainers/testcontainers-go from ...
  • b9a7a83 Updating github-config
  • See full diff in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.25.0 to 2.25.2

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.25.2

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.25.1...v2.25.2

v2.25.1

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.25.0...v2.25.1

Commits

Updates cloud.google.com/go/auth from 0.16.5 to 0.17.0

Release notes

Sourced from cloud.google.com/go/auth's releases.

auth 0.17.0

0.17.0 (2025-10-02)

Features

  • add trust boundary support for external accounts (#12864) (a67a146)

  • Add trust boundary support for service accounts and impersonation (HTTP/gRPC) (#11870) (5c2b665)

Changelog

Sourced from cloud.google.com/go/auth's changelog.

v0.17.0

  • firestore BREAKING CHANGES:
    • Remove UpdateMap and UpdateStruct; rename UpdatePaths to Update. Change docref.UpdateMap(ctx, map[string]interface{}{"a.b", 1}) to docref.Update(ctx, []firestore.Update{{Path: "a.b", Value: 1}})

      Change docref.UpdateStruct(ctx, []string{"Field"}, aStruct) to docref.Update(ctx, []firestore.Update{{Path: "Field", Value: aStruct.Field}})

    • Rename MergePaths to Merge; require args to be FieldPaths

    • A value stored as an integer can be read into a floating-point field, and vice versa.

  • bigtable/cmd/cbt:
    • Support deleting a column.
    • Add regex option for row read.
  • spanner: Mark stable.
  • storage:
    • Add Reader.ContentEncoding method.
    • Fix handling of SignedURL headers.
  • bigquery:
    • If Uploader.Put is called with no rows, it returns nil without making a call.
    • Schema inference supports the "nullable" option in struct tags for non-required fields.
    • TimePartitioning supports "Field".

v0.16.0

  • Other bigquery changes:

    • JobIterator.Next returns *Job; removed JobInfo (BREAKING CHANGE).
    • UseStandardSQL is deprecated; set UseLegacySQL to true if you need Legacy SQL.
    • Uploader.Put will generate a random insert ID if you do not provide one.
    • Support time partitioning for load jobs.
    • Support dry-run queries.
    • A Job remembers its last retrieved status.
    • Support retrieving job configuration.
    • Support labels for jobs and tables.
    • Support dataset access lists.
    • Improve support for external data sources, including data from Bigtable and Google Sheets, and tables with external data.
    • Support updating a table's view configuration.
    • Fix uploading civil times with nanoseconds.
  • storage:

    • Support PubSub notifications.

... (truncated)

Commits
  • 050b16d all: update version and README
  • def6812 storage: fix SignedURL integration test
  • ff434d4 all: make tests pass with go1.10beta1
  • ad7ff91 storage: add header sanitisation for SignedURL.
  • b97d364 internal/fields: fix test to match next Go version
  • 6856ba4 bigquery: support inference of nullable fields
  • 5fa930e bigquery: support time-partitioning field
  • 9cfa4d0 bigtable: link to the cbt installation instructions in the cbt docs
  • 3051b91 datatransfer: move into bigquery dir
  • 5733118 firestore: remove UpdateMap and UpdateStruct
  • Additional commits viewable in compare view

Updates cloud.google.com/go/iam from 1.5.2 to 1.5.3

Release notes

Sourced from cloud.google.com/go/iam's releases.

iam: v1.5.3

1.5.3 (2025-10-08)

Bug Fixes

  • iam: Upgrade gRPC service registration func (9dd3adf)
Commits

Updates cloud.google.com/go/monitoring from 1.24.2 to 1.24.3

Release notes

Sourced from cloud.google.com/go/monitoring's releases.

monitoring: v1.24.3

1.24.3 (2025-10-08)

Bug Fixes

  • monitoring: Upgrade gRPC service registration func (9dd3adf)
Commits

Updates github.com/CycloneDX/cyclonedx-go from 0.9.2 to 0.9.3

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.9.3

Changelog

Fixes

  • 6636ce32f8b15a5104fda6636937e91d62d647e7: fix: .component.data was not a slice as per CycloneDX schema #242 (@​madpah)
  • 3e0f245f7b936eb38e16d0518a2a0020c0d69223: fix: add missing properties (@​rdghe)

Building and Packaging

  • 24c8c33dd36390754b63f9ab056b2bf62b1eb70f: build(deps): bump actions/setup-go from 5.2.0 to 5.4.0 (@​dependabot[bot])
  • 5fcf097fbdcedb6832989d0a74195f0698b48de8: build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 (@​dependabot[bot])
  • edea8aedbc8467a478ac4b11d587c9bdff68f0dd: build(deps): bump apache/skywalking-eyes from 0.6.0 to 0.7.0 (@​dependabot[bot])
  • f32eebc413c71327df4fd6f264aa9f22e6e8cce1: build(deps): bump gitpod/workspace-go from 4702df2 to 8985eb7 (@​dependabot[bot])
  • 7fdaa7fc2b0fe25ff5eb17d57bede84131415674: build(deps): bump gitpod/workspace-go from 6932342 to 4702df2 (@​dependabot[bot])
  • d62ea3cd450cbd3aebcbf9a50c8d12b2e4187b13: build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 (@​dependabot[bot])
  • 4709461dea7961fbd824e433b3c68217ff856122: build(deps): bump goreleaser/goreleaser-action from 6.1.0 to 6.3.0 (@​dependabot[bot])
Commits
  • 72e4629 Merge pull request #243 from madpah/fix/component-data-schema
  • 6636ce3 fix: .component.data was not a slice as per CycloneDX schema #242
  • a39bf6b Merge pull request #232 from CycloneDX/dependabot/github_actions/actions/setu...
  • cff8cd5 Merge pull request #233 from CycloneDX/dependabot/docker/gitpod/workspace-go-...
  • 6a93b76 Merge pull request #234 from rdghe/fix/add-missing-properties
  • 3e0f245 fix: add missing properties
  • f32eebc build(deps): bump gitpod/workspace-go from 4702df2 to 8985eb7
  • 5fcf097 build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
  • 75427c8 Merge pull request #222 from CycloneDX/dependabot/docker/gitpod/workspace-go-...
  • 551624d Merge pull request #217 from CycloneDX/dependabot/github_actions/apache/skywa...
  • Additional commits viewable in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp from 1.29.0 to 1.30.0

Release notes

Sourced from github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp's releases.

v1.5.1 and v0.29.1

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.5.0...v1.5.1

v1.5.0 and v0.29.0

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.4.0...v1.5.0

v1.4.0 and v0.28.0

What's Changed

... (truncated)

Commits

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric from 0.53.0 to 0.54.0

Commits

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping from 0.53.0 to 0.54.0

Commits

Updates github.com/anchore/go-struct-converter from 0.0.0-20221221214134-65614c61201e to 0.1.0

Release notes

Sourced from github.com/anchore/go-struct-converter's releases.

v0.1.0

Initial version that has been in use in tools-golang

Commits

Updates github.com/anchore/syft from 1.33.0 to 1.34.2

Release notes

Sourced from github.com/anchore/syft's releases.

v1.34.2

Bug Fixes

(Full Changelog)

v1.34.1

Added Features

Bug Fixes

(Full Changelog)

Commits
  • 0c98a36 chore(deps): update tools to latest versions (#4291)
  • 4343d04 fix: panic during java archive maven resolution (#4290)
  • 065ac13 Extract zip archive with multiple entries (#4283)
  • e9a8bc5 chore: update to use old configuration on new cosign (#4287)
  • 6d790ec chore(deps): update anchore dependencies (#4282)
  • 1d5bcc5 chore(deps): bump github.com/mholt/archives from 0.1.3 to 0.1.5 (#4280)
  • d22914b add docs to configs (#4281)
  • 760bd9a feat: Pom xml only archive parser (#4272)
  • 2d1ada1 fix: enhance setup.py parser to handle unquoted dependencies (#4255)
  • 8ffe15c chore(deps): bump golang.org/x/tools from 0.37.0 to 0.38.0 (#4265)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.39.1 to 1.39.3

Commits

Updates github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.1 to 1.7.2

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.31.10 to 1.31.13

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.18.14 to 1.18.17

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.8 to 1.18.10

Commits

Updates github.com/aws/aws-sdk-go-v2/internal/configsources from 1.4.8 to 1.4.10

Commits

Bumps the go-modules group with 32 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.30.0` | `0.30.1` |
| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.25.0` | `2.25.2` |
| [cloud.google.com/go/auth](https://github.com/googleapis/google-cloud-go) | `0.16.5` | `0.17.0` |
| [cloud.google.com/go/iam](https://github.com/googleapis/google-cloud-go) | `1.5.2` | `1.5.3` |
| [cloud.google.com/go/monitoring](https://github.com/googleapis/google-cloud-go) | `1.24.2` | `1.24.3` |
| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.9.2` | `0.9.3` |
| [github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `1.29.0` | `1.30.0` |
| [github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `0.53.0` | `0.54.0` |
| [github.com/anchore/go-struct-converter](https://github.com/anchore/go-struct-converter) | `0.0.0-20221221214134-65614c61201e` | `0.1.0` |
| [github.com/anchore/syft](https://github.com/anchore/syft) | `1.33.0` | `1.34.2` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.39.1` | `1.39.3` |
| [github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream](https://github.com/aws/aws-sdk-go-v2) | `1.7.1` | `1.7.2` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.31.10` | `1.31.13` |
| [github.com/aws/aws-sdk-go-v2/internal/v4a](https://github.com/aws/aws-sdk-go-v2) | `1.4.8` | `1.4.10` |
| [github.com/aws/aws-sdk-go-v2/service/internal/checksum](https://github.com/aws/aws-sdk-go-v2) | `1.8.8` | `1.9.1` |
| [github.com/aws/aws-sdk-go-v2/service/internal/s3shared](https://github.com/aws/aws-sdk-go-v2) | `1.19.8` | `1.19.10` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.88.2` | `1.88.5` |
| [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) | `0.10.1` | `0.10.2` |
| [github.com/containerd/stargz-snapshotter/estargz](https://github.com/containerd/stargz-snapshotter) | `0.17.0` | `0.18.0` |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.4.1` | `0.5.0` |
| [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.9.3` | `0.9.4` |
| [github.com/envoyproxy/go-control-plane/envoy](https://github.com/envoyproxy/go-control-plane) | `1.32.4` | `1.35.0` |
| [github.com/github/go-spdx/v2](https://github.com/github/go-spdx) | `2.3.3` | `2.3.4` |
| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.2` | `4.1.3` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.0` | `1.18.1` |
| [github.com/olekukonko/ll](https://github.com/olekukonko/ll) | `0.1.1` | `0.1.2` |
| [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.25.8` | `4.25.9` |
| [github.com/skeema/knownhosts](https://github.com/skeema/knownhosts) | `1.3.1` | `1.3.2` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.31.0` | `0.32.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.13.0` | `0.14.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.249.0` | `0.252.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.1` | `1.76.0` |



Updates `github.com/paketo-buildpacks/occam` from 0.30.0 to 0.30.1
- [Release notes](https://github.com/paketo-buildpacks/occam/releases)
- [Commits](paketo-buildpacks/occam@v0.30.0...v0.30.1)

Updates `github.com/paketo-buildpacks/packit/v2` from 2.25.0 to 2.25.2
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.25.0...v2.25.2)

Updates `cloud.google.com/go/auth` from 0.16.5 to 0.17.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@auth/v0.16.5...v0.17.0)

Updates `cloud.google.com/go/iam` from 1.5.2 to 1.5.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@iam/v1.5.2...iam/v1.5.3)

Updates `cloud.google.com/go/monitoring` from 1.24.2 to 1.24.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@monitoring/v1.24.2...monitoring/v1.24.3)

Updates `github.com/CycloneDX/cyclonedx-go` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml)
- [Commits](CycloneDX/cyclonedx-go@v0.9.2...v0.9.3)

Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-go@detectors/gcp/v1.29.0...detectors/gcp/v1.30.0)

Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric` from 0.53.0 to 0.54.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0)

Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping` from 0.53.0 to 0.54.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0)

Updates `github.com/anchore/go-struct-converter` from 0.0.0-20221221214134-65614c61201e to 0.1.0
- [Release notes](https://github.com/anchore/go-struct-converter/releases)
- [Commits](https://github.com/anchore/go-struct-converter/commits/v0.1.0)

Updates `github.com/anchore/syft` from 1.33.0 to 1.34.2
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/.goreleaser.yaml)
- [Commits](anchore/syft@v1.33.0...v1.34.2)

Updates `github.com/aws/aws-sdk-go-v2` from 1.39.1 to 1.39.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.39.1...v1.39.3)

Updates `github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.7.1...service/mq/v1.7.2)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.31.10 to 1.31.13
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.31.10...config/v1.31.13)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.18.14 to 1.18.17
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.18.14...config/v1.18.17)

Updates `github.com/aws/aws-sdk-go-v2/feature/ec2/imds` from 1.18.8 to 1.18.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.18.8...config/v1.18.10)

Updates `github.com/aws/aws-sdk-go-v2/internal/configsources` from 1.4.8 to 1.4.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/m2/v1.4.8...service/m2/v1.4.10)

Updates `github.com/aws/aws-sdk-go-v2/internal/endpoints/v2` from 2.7.8 to 2.7.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@internal/endpoints/v2.7.8...internal/endpoints/v2.7.10)

Updates `github.com/aws/aws-sdk-go-v2/internal/ini` from 1.8.3 to 1.8.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.8.3...service/tnb/v1.8.4)

Updates `github.com/aws/aws-sdk-go-v2/internal/v4a` from 1.4.8 to 1.4.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/m2/v1.4.8...service/m2/v1.4.10)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding` from 1.13.1 to 1.13.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.13.1...service/m2/v1.13.2)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/checksum` from 1.8.8 to 1.9.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/tnb/v1.8.8...v1.9.1)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/presigned-url` from 1.13.8 to 1.13.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/mq/v1.13.8...service/mq/v1.13.10)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/s3shared` from 1.19.8 to 1.19.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/m2/v1.19.8...service/sqs/v1.19.10)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.88.2 to 1.88.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.88.2...service/s3/v1.88.5)

Updates `github.com/aws/aws-sdk-go-v2/service/sso` from 1.29.4 to 1.29.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.29.4...config/v1.29.7)

Updates `github.com/aws/aws-sdk-go-v2/service/ssooidc` from 1.35.0 to 1.35.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.35.0...service/pi/v1.35.2)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.38.5 to 1.38.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.38.5...service/sts/v1.38.7)

Updates `github.com/aws/smithy-go` from 1.23.0 to 1.23.1
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.23.0...v1.23.1)

Updates `github.com/charmbracelet/x/ansi` from 0.10.1 to 0.10.2
- [Commits](charmbracelet/x@ansi/v0.10.1...ansi/v0.10.2)

Updates `github.com/containerd/stargz-snapshotter/estargz` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.17.0...v0.18.0)

Updates `github.com/cyphar/filepath-securejoin` from 0.4.1 to 0.5.0
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.4.1...v0.5.0)

Updates `github.com/docker/cli` from 28.4.0+incompatible to 28.5.1+incompatible
- [Commits](docker/cli@v28.4.0...v28.5.1)

Updates `github.com/docker/docker-credential-helpers` from 0.9.3 to 0.9.4
- [Release notes](https://github.com/docker/docker-credential-helpers/releases)
- [Commits](docker/docker-credential-helpers@v0.9.3...v0.9.4)

Updates `github.com/envoyproxy/go-control-plane/envoy` from 1.32.4 to 1.35.0
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@envoy/v1.32.4...envoy/v1.35.0)

Updates `github.com/github/go-spdx/v2` from 2.3.3 to 2.3.4
- [Release notes](https://github.com/github/go-spdx/releases)
- [Commits](github/go-spdx@v2.3.3...v2.3.4)

Updates `github.com/go-git/go-git/v5` from 5.16.2 to 5.16.3
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.16.2...v5.16.3)

Updates `github.com/go-jose/go-jose/v4` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.2...v4.1.3)

Updates `github.com/gohugoio/hashstructure` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/gohugoio/hashstructure/releases)
- [Commits](gohugoio/hashstructure@v0.5.0...v0.6.0)

Updates `github.com/hashicorp/go-getter` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](hashicorp/go-getter@v1.8.1...v1.8.2)

Updates `github.com/klauspost/compress` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.18.0...v1.18.1)

Updates `github.com/mattn/go-runewidth` from 0.0.16 to 0.0.17
- [Commits](mattn/go-runewidth@v0.0.16...v0.0.17)

Updates `github.com/mholt/archives` from 0.1.4 to 0.1.5
- [Release notes](https://github.com/mholt/archives/releases)
- [Commits](mholt/archives@v0.1.4...v0.1.5)

Updates `github.com/nwaples/rardecode/v2` from 2.1.1 to 2.2.0
- [Commits](nwaples/rardecode@v2.1.1...v2.2.0)

Updates `github.com/olekukonko/ll` from 0.1.1 to 0.1.2
- [Commits](olekukonko/ll@v0.1.1...v0.1.2)

Updates `github.com/shirou/gopsutil/v4` from 4.25.8 to 4.25.9
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.25.8...v4.25.9)

Updates `github.com/skeema/knownhosts` from 1.3.1 to 1.3.2
- [Commits](skeema/knownhosts@v1.3.1...v1.3.2)

Updates `github.com/vbatts/tar-split` from 0.12.1 to 0.12.2
- [Release notes](https://github.com/vbatts/tar-split/releases)
- [Commits](vbatts/tar-split@v0.12.1...v0.12.2)

Updates `golang.org/x/crypto` from 0.42.0 to 0.43.0
- [Commits](golang/crypto@v0.42.0...v0.43.0)

Updates `golang.org/x/mod` from 0.28.0 to 0.29.0
- [Commits](golang/mod@v0.28.0...v0.29.0)

Updates `golang.org/x/net` from 0.44.0 to 0.46.0
- [Commits](golang/net@v0.44.0...v0.46.0)

Updates `golang.org/x/oauth2` from 0.31.0 to 0.32.0
- [Commits](golang/oauth2@v0.31.0...v0.32.0)

Updates `golang.org/x/sys` from 0.36.0 to 0.37.0
- [Commits](golang/sys@v0.36.0...v0.37.0)

Updates `golang.org/x/term` from 0.35.0 to 0.36.0
- [Commits](golang/term@v0.35.0...v0.36.0)

Updates `golang.org/x/text` from 0.29.0 to 0.30.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.29.0...v0.30.0)

Updates `golang.org/x/time` from 0.13.0 to 0.14.0
- [Commits](golang/time@v0.13.0...v0.14.0)

Updates `golang.org/x/tools` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.37.0...v0.38.0)

Updates `google.golang.org/api` from 0.249.0 to 0.252.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.249.0...v0.252.0)

Updates `google.golang.org/genproto` from 0.0.0-20250603155806-513f23925822 to 0.0.0-20250922171735-9219d122eba9
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250818200422-3122310a409c to 0.0.0-20250922171735-9219d122eba9
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250825161204-c5933d9347a5 to 0.0.0-20251002232023-7c0ddcbb5797
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.75.1...v1.76.0)

Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10

Updates `modernc.org/libc` from 1.66.9 to 1.66.10
- [Commits](https://gitlab.com/cznic/libc/compare/v1.66.9...v1.66.10)

Updates `modernc.org/sqlite` from 1.39.0 to 1.39.1
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.39.0...v1.39.1)

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/occam
  dependency-version: 0.30.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/auth
  dependency-version: 0.17.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/iam
  dependency-version: 1.5.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/monitoring
  dependency-version: 1.24.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-version: 0.9.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp
  dependency-version: 1.30.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric
  dependency-version: 0.54.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping
  dependency-version: 0.54.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/anchore/go-struct-converter
  dependency-version: 0.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/anchore/syft
  dependency-version: 1.34.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.39.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
  dependency-version: 1.7.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.31.13
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.18.17
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
  dependency-version: 1.18.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/internal/configsources
  dependency-version: 1.4.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
  dependency-version: 2.7.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/internal/ini
  dependency-version: 1.8.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/internal/v4a
  dependency-version: 1.4.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding
  dependency-version: 1.13.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/checksum
  dependency-version: 1.9.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
  dependency-version: 1.13.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/s3shared
  dependency-version: 1.19.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.88.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sso
  dependency-version: 1.29.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ssooidc
  dependency-version: 1.35.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.38.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.23.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/charmbracelet/x/ansi
  dependency-version: 0.10.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/containerd/stargz-snapshotter/estargz
  dependency-version: 0.18.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-version: 0.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/docker/cli
  dependency-version: 28.5.1+incompatible
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/docker/docker-credential-helpers
  dependency-version: 0.9.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/envoyproxy/go-control-plane/envoy
  dependency-version: 1.35.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/github/go-spdx/v2
  dependency-version: 2.3.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.16.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/gohugoio/hashstructure
  dependency-version: 0.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/mattn/go-runewidth
  dependency-version: 0.0.17
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/mholt/archives
  dependency-version: 0.1.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/nwaples/rardecode/v2
  dependency-version: 2.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/olekukonko/ll
  dependency-version: 0.1.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.25.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/skeema/knownhosts
  dependency-version: 1.3.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/vbatts/tar-split
  dependency-version: 0.12.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-version: 0.29.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.46.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/term
  dependency-version: 0.36.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-version: 0.30.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/time
  dependency-version: 0.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools
  dependency-version: 0.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/api
  dependency-version: 0.252.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto
  dependency-version: 0.0.0-20250922171735-9219d122eba9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20250922171735-9219d122eba9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20251002232023-7c0ddcbb5797
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.76.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: modernc.org/libc
  dependency-version: 1.66.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: modernc.org/sqlite
  dependency-version: 1.39.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 21, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 21, 2025 20:25
@dependabot dependabot bot requested review from mhdawson and pacostas October 21, 2025 20:25
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 21, 2025
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Oct 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code semver:patch A change requiring a patch version bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant