Skip to content

Bump the go-modules group across 1 directory with 9 updates#675

Merged
paketo-bot merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-a673c6bf90
May 21, 2025
Merged

Bump the go-modules group across 1 directory with 9 updates#675
paketo-bot merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-a673c6bf90

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 21, 2025

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 6 updates in the / directory:

Package From To
github.com/paketo-buildpacks/packit/v2 2.17.0 2.19.0
dario.cat/mergo 1.0.1 1.0.2
github.com/google/go-containerregistry 0.20.3 0.20.4
go.opentelemetry.io/proto/otlp 1.5.0 1.6.0
golang.org/x/crypto 0.37.0 0.38.0
golang.org/x/net 0.39.0 0.40.0

Updates github.com/paketo-buildpacks/packit/v2 from 2.17.0 to 2.19.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.19.0

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.18.0...v2.19.0

v2.18.0

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.17.0...v2.18.0

Commits
  • dc86e8d Downgrade docker and stereoscope
  • aa5bc77 Bump github.com/anchore/stereoscope
  • f3fa74a Use upstream syft (#639)
  • 7e884aa Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  • f3ac27a Bump golang.org/x/net from 0.37.0 to 0.38.0
  • See full diff in compare view

Updates dario.cat/mergo from 1.0.1 to 1.0.2

Release notes

Sourced from dario.cat/mergo's releases.

v1.0.2

What's Changed

  • Drops gopkg.in/yaml.v3, only used for loading fixtures. Thanks @​trim21 for bringing to my attention (#262) that this library is no longer maintained.

Full Changelog: darccio/mergo@v1.0.1...v1.0.2

Commits
  • 7b33b2b refactor: migrate from YAML to JSON for test data and update related functions
  • 229a214 chore(.well-known): add funding manifest URLs file
  • 6be20c6 chore(SECURITY.md): update supported versions to reflect current versioning
  • 9007623 chore(README) : remove kubernetes from the list of users
  • 2b1eb9c Update FUNDING.yml
  • 2ceb994 Create FUNDING.json
  • See full diff in compare view

Updates github.com/google/go-containerregistry from 0.20.3 to 0.20.4

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.4

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.4

Commits

Updates go.opentelemetry.io/proto/otlp from 1.5.0 to 1.6.0

Release notes

Sourced from go.opentelemetry.io/proto/otlp's releases.

v1.6.0

Overview

Generated Go code for the v1.6.0 version of the OTLP

OTLP Changelog

Added

  • resource: Add EntityRef. #635
  • general: add specs for empty telemetry envelopes. #622

Changed

  • logs: Stabilize event_name field in LogRecord message. #643
  • profiles: Move the lookup tables to ProfilesData. #644
  • profiles: Move default sample_type from the string table to sample_type. #620
  • general: remove comment on each service about keeping the RPC alive #637
  • metrics: clarify when bucket_counts array may be empty #619

Full Changelog: open-telemetry/opentelemetry-proto@v1.5.0...v1.6.0

What's Changed

... (truncated)

Commits
  • ed3d8b9 Release v1.6.0 (#304)
  • 54306df fix(deps): update module go.opentelemetry.io/build-tools/multimod to v0.23.1 ...
  • 757fdc7 chore(deps): update otel/build-protobuf docker tag to v0.25.0 (#308)
  • d2c0ede Use renovate-friendly def of Docker image (#305)
  • 7c54435 fix(deps): update module go.opentelemetry.io/build-tools/multimod to v0.23.0 ...
  • 225af11 chore(deps): update google.golang.org/genproto/googleapis/rpc digest to 10db9...
  • 0a64f54 chore(deps): update google.golang.org/genproto/googleapis/api digest to 10db9...
  • 293531b chore(deps): update github/codeql-action action to v3.28.16 (#298)
  • 3ed1d3d chore(deps): update google.golang.org/genproto/googleapis/rpc digest to 7b384...
  • 9dd37fe chore(deps): update google.golang.org/genproto/googleapis/api digest to 7b384...
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.37.0 to 0.38.0

Commits
  • aae6e61 go.mod: update golang.org/x dependencies
  • 9c1aa6a ssh/test: reset the random source before capturing a recording
  • 8819902 ssh/test: enable Diffie-Hellman key exchange algorithms
  • 3f311e4 acme: return error from pre-authorization when unsupported
  • 1f7c62c ssh/test: skip unsupported tests on js/wasm
  • a5f8048 acme/autocert: use standard functions to pick the cache directory
  • 958cde8 Revert "chacha20: add loong64 SIMD implementation"
  • 51f005c Revert "salsa20: add loong64 SIMD implementation"
  • 7c35866 Revert "argon2: add loong64 SIMD implementation"
  • 0091fc8 Revert "blake2s: add loong64 SIMD implementation"
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.39.0 to 0.40.0

Commits
  • 7d6e62a go.mod: update golang.org/x dependencies
  • ea0c1d9 internal/timeseries: use built-in max/min to simplify the code
  • 3e7a445 quic: skip packet numbers for optimistic ack defense
  • 3f563d3 quic: use an enum for sentPacket state
  • a3b6e77 quic: don't re-lose packets when discarding keys
  • 22500a6 quic: decode packet numbers >255 in tests
  • dd0b200 quic: remove go1.21 build constraint
  • See full diff in compare view

Updates golang.org/x/sync from 0.13.0 to 0.14.0

Commits

Updates golang.org/x/sys from 0.32.0 to 0.33.0

Commits
  • 3d9a6b8 windows: add WSADuplicateSocket
  • c0a9559 cpu: add crypto extensions detection for riscv64
  • 8e9e046 windows: add virtual key codes and console input consts
  • 7138967 windows: fix slicing of NTUnicodeString values
  • 6a85559 windows: fix dangling pointers in (*SECURITY_DESCRIPTOR).ToAbsolute
  • See full diff in compare view

Updates golang.org/x/text from 0.24.0 to 0.25.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-modules group across 1 directory with 9 updates
c902994 
Bumps the go-modules group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.17.0` | `2.19.0` |
| [dario.cat/mergo](https://github.com/imdario/mergo) | `1.0.1` | `1.0.2` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.3` | `0.20.4` |
| [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.5.0` | `1.6.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.37.0` | `0.38.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.39.0` | `0.40.0` |



Updates `github.com/paketo-buildpacks/packit/v2` from 2.17.0 to 2.19.0
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.17.0...v2.19.0)

Updates `dario.cat/mergo` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/imdario/mergo/releases)
- [Commits](darccio/mergo@v1.0.1...v1.0.2)

Updates `github.com/google/go-containerregistry` from 0.20.3 to 0.20.4
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.20.3...v0.20.4)

Updates `go.opentelemetry.io/proto/otlp` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.5.0...v1.6.0)

Updates `golang.org/x/crypto` from 0.37.0 to 0.38.0
- [Commits](golang/crypto@v0.37.0...v0.38.0)

Updates `golang.org/x/net` from 0.39.0 to 0.40.0
- [Commits](golang/net@v0.39.0...v0.40.0)

Updates `golang.org/x/sync` from 0.13.0 to 0.14.0
- [Commits](golang/sync@v0.13.0...v0.14.0)

Updates `golang.org/x/sys` from 0.32.0 to 0.33.0
- [Commits](golang/sys@v0.32.0...v0.33.0)

Updates `golang.org/x/text` from 0.24.0 to 0.25.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: dario.cat/mergo
  dependency-version: 1.0.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.20.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.40.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sync
  dependency-version: 0.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.33.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-version: 0.25.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 21, 2025
@dependabot dependabot Bot requested a review from a team as a code owner May 21, 2025 02:10
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 21, 2025
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label May 21, 2025
@paketo-bot paketo-bot merged commit 276f5a0 into main May 21, 2025
11 of 12 checks passed
@paketo-bot paketo-bot deleted the dependabot/go_modules/go-modules-a673c6bf90 branch May 21, 2025 02:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@paketo-bot-reviewer paketo-bot-reviewer paketo-bot-reviewer approved these changes

@mhdawson mhdawson Awaiting requested review from mhdawson mhdawson is a code owner automatically assigned from paketo-buildpacks/nodejs-maintainers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code semver:patch A change requiring a patch version bump

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@paketo-bot-reviewer @paketo-bot