Skip to content

Bump the go-modules group with 10 updates#716

Merged
paketo-bot merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-ce872fbf1a
May 1, 2026
Merged

Bump the go-modules group with 10 updates#716
paketo-bot merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-ce872fbf1a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps the go-modules group with 10 updates:

Package From To
cloud.google.com/go/iam 1.9.0 1.10.0
cloud.google.com/go/monitoring 1.27.0 1.28.0
github.com/Masterminds/semver/v3 3.4.0 3.5.0
github.com/containerd/containerd/v2 2.2.3 2.3.0
github.com/docker/cli 29.4.1+incompatible 29.4.2+incompatible
github.com/gookit/color 1.6.0 1.6.1
github.com/klauspost/compress 1.18.5 1.18.6
github.com/pjbgf/sha1cd 0.5.0 0.6.0
github.com/shirou/gopsutil/v4 4.26.3 4.26.4
google.golang.org/protobuf 1.36.11 1.36.12-0.20260120151049-f2248ac996af

Updates cloud.google.com/go/iam from 1.9.0 to 1.10.0

Release notes

Sourced from cloud.google.com/go/iam's releases.

gkemulticloud: v1.10.0

v1.10.0 (2026-04-30)

iam: v1.10.0

v1.10.0 (2026-04-30)

shopping: v1.10.0

v1.10.0 (2026-04-30)

Changelog

Sourced from cloud.google.com/go/iam's changelog.

1.10.0 (2022-11-03)

Features

  • documentai: rewrite signatures in terms of new location (3c4b2b3)
Commits
  • 9a44b31 chore: librarian release pull request: 20260409T070606Z (#14406)
  • 18a3318 feat: Make AgentEngine APIs public
  • db45f2d feat(bigtable): enable bigtable conn pool by default (#14319)
  • 124ffd3 feat(vertexai): Add AgentEngine Memories Revisions module
  • e247d48 chore: onboard new library appoptimize (#14393)
  • ece84ab chore: update librarian to v0.10.1-0.20260408193841-095ea7e727aa (#14392)
  • ecf9783 chore: librarian release pull request: 20260408T191440Z (#14390)
  • 70b47d2 chore: librarian release pull request: 20260408T190447Z (#14389)
  • 95c53a6 chore(bigquery): bump api to v0.275.0 and unskip bq tracing tests (#14333)
  • df22e9e fix(storage): add retry logic for "http2: client connection lost" (#14385)
  • Additional commits viewable in compare view

Updates cloud.google.com/go/monitoring from 1.27.0 to 1.28.0

Release notes

Sourced from cloud.google.com/go/monitoring's releases.

monitoring: v1.28.0

v1.28.0 (2026-04-30)

Changelog

Sourced from cloud.google.com/go/monitoring's changelog.

1.28.0 (2024-05-01)

Features

  • documentai: A new message FoundationModelTuningOptions is added (1d757c6)
  • documentai: Support Chunk header and footer in Doc AI external proto (1d757c6)

Bug Fixes

  • documentai: Bump x/net to v0.24.0 (ba31ed5)
Commits
  • 9a44b31 chore: librarian release pull request: 20260409T070606Z (#14406)
  • 18a3318 feat: Make AgentEngine APIs public
  • db45f2d feat(bigtable): enable bigtable conn pool by default (#14319)
  • 124ffd3 feat(vertexai): Add AgentEngine Memories Revisions module
  • e247d48 chore: onboard new library appoptimize (#14393)
  • ece84ab chore: update librarian to v0.10.1-0.20260408193841-095ea7e727aa (#14392)
  • ecf9783 chore: librarian release pull request: 20260408T191440Z (#14390)
  • 70b47d2 chore: librarian release pull request: 20260408T190447Z (#14389)
  • 95c53a6 chore(bigquery): bump api to v0.275.0 and unskip bq tracing tests (#14333)
  • df22e9e fix(storage): add retry logic for "http2: client connection lost" (#14385)
  • Additional commits viewable in compare view

Updates github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.5.0

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

Changelog

Commits
  • 8b89c86 Merge pull request #287 from mattfarina/fix-da-issues
  • 29d51d0 Fixing some quality issues
  • 87f651d Merge pull request #286 from mattfarina/update-devcontainer
  • 158a685 Updating gitignore for devcontainers
  • 7e83c08 Merge pull request #284 from Masterminds/dependabot/github_actions/golangci/g...
  • 697e27f Merge pull request #283 from Masterminds/dependabot/github_actions/actions/ca...
  • 1591f8e Merge pull request #282 from Masterminds/dependabot/github_actions/github/cod...
  • 3f5ff17 Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0
  • 04baa33 Bump actions/cache from 4.2.3 to 5.0.5
  • 45939fe Bump github/codeql-action from 4.35.1 to 4.35.2
  • Additional commits viewable in compare view

Updates github.com/containerd/containerd/v2 from 2.2.3 to 2.3.0

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.3.0

Welcome to the v2.3.0 release of containerd!

The third minor release of containerd 2.x focuses on continued stability alongside new features and improvements. This is the third time-based release for containerd.

Starting with containerd 2.3, the project has moved to release cadence aligned with the Kubernetes release schedule, with new minor releases about every 4 months. The containerd 2.3 release is also the first annual LTS (Long Term Stable) release under this new schedule, with support planned for at least two years. Direct upgrades between sequential LTS releases (e.g., 1.7 to 2.3) will be tested and supported.

Highlights

  • Add transfer types for container filesystem copy (#13165)
  • Add option to inject trace ID to logs (#13117)
  • Propagate OpenTelemetry traces in outgoing RPCs from plugin clients (#13113)
  • Update plugin config migration to run on load (#12608)
  • Update sandbox API to include spec field (#12840)

Container Runtime Interface (CRI)

  • Allow containers to use user namespaces with host networking (#12518)
  • Wire UpdatePodSandboxResources to Sandbox API (#13118)
  • Unpack images with per-layer labels for specific runtime (#12835)
  • Populate ImageId field in container status (#12787)
  • Set annotations parameter in CreateSandbox request (#12566)
  • Add background stats collector to calculate UsageNanoCores for containers and pod sandboxes (#12629)

Image Distribution

  • Support zstd-wrapped EROFS layers (#13185)
  • Add os.features support for EROFS native container images (#13091)
  • Add EROFS layer media type (#12567)

Image Storage

  • Add dmverity support to the erofs snapshotter (#12502)
  • Use fsmount API to avoid PAGE_SIZE limit for erofs (#12783)

Node Resource Interface (NRI)

  • Pass container user (uid, gids) to plugins (#12769)
  • Pass seccomp policy to plugins (#12768)
  • Pass any POSIX rlimits to plugins (#12765)
  • Pass extended container status to NRI. (#12770)
  • Pass injected CDI devices to plugins (#12767)
  • Pass linux sysctl to plugins (#12766)
  • Use dedicated RPC calls for all pod and container life-cycle events via the NRI wire protocol (containerd/nri#274)
  • Add basic metrics collection for the NRI framework (containerd/nri#277)

... (truncated)

Changelog

Sourced from github.com/containerd/containerd/v2's changelog.

Versioning and Release

This document details the versioning and release plan for containerd. Stability is a top goal for this project, and we hope that this document and the processes it entails will help to achieve that. It covers the release process, versioning numbering, backporting, API stability and support horizons.

If you rely on containerd, it would be good to spend time understanding the areas of the API that are and are not supported and how they impact your project in the future.

This document will be considered a living document. Supported timelines, backport targets and API stability guarantees will be updated here as they change.

If there is something that you require or this document leaves out, please reach out by filing an issue.

Releases

Releases of containerd will be versioned using dotted triples, similar to Semantic Version. For the purposes of this document, we will refer to the respective components of this triple as <major>.<minor>.<patch>. The version number may have additional information, such as alpha, beta and release candidate qualifications. Such releases will be considered "pre-releases".

Major and Minor Releases

Major and minor releases of containerd will be made from main. Releases of containerd will be marked with GPG signed tags and announced at https://github.com/containerd/containerd/releases. The tag will be of the format v<major>.<minor>.<patch> and should be made with the command git tag -s v<major>.<minor>.<patch>.

After a minor release, a branch will be created, with the format release/<major>.<minor> from the minor tag. All further patch releases will be done from that branch. For example, once we release v1.0.0, a branch release/1.0 will be created from that tag. All future patch releases will be done against that branch.

Release Cadence

Since containerd v2.3 in April 2026, minor releases are provided on a time basis with a cadence of 4 months. New minor releases are scheduled for April, August, and December of each year. This cadence is synchronized with the Kubernetes release schedule to ensure that new features in containerd can be smoothly adopted by new Kubernetes releases.

The maintainers will maintain a roadmap and milestones for each release, however,

... (truncated)

Commits
  • 2976f38 Merge pull request #13325 from dmcgowan/prepare-v2.3.0
  • 77eeb2d Prepare release notes for v2.3.0
  • c55ada3 Update api to v1.11.0
  • ebf4404 Update release document
  • f49640e Merge pull request #13321 from dmcgowan/remove-erofs-fsmerge-threshold
  • e3d5fe8 Merge pull request #13322 from dmcgowan/prepare-api-v1.11.0
  • ee17fa1 Merge pull request #13317 from fuweid/fix-merge-issue
  • b7f8c35 erofs: remove fsmerge threshold from snapshotter
  • 8f2fce4 Prepare release notes for v1.11.0
  • ce2955c Merge pull request #13319 from mxpv/depr
  • Additional commits viewable in compare view

Updates github.com/docker/cli from 29.4.1+incompatible to 29.4.2+incompatible

Commits

Updates github.com/gookit/color from 1.6.0 to 1.6.1

Release notes

Sourced from github.com/gookit/color's releases.

v1.6.1

Change Log

Fixed

Other

Commits
  • d232e11 ci(release): remove Go version matrix and simplify build steps in release action
  • 1245572 fix(convert): incorrect conversion between integer types
  • 2bb27a5 fix(detect): should enable VTP on windows CMD,PWSH
  • e58a899 fix: re-apply color after nested reset in RenderString (#119)
  • de1e243 Add 'stable' to Go version matrix and update action
  • ed1b9cc build(deps): bump actions/checkout from 5 to 6 (#115)
  • 2e18426 build(deps): bump github/codeql-action from 3 to 4 (#113)
  • See full diff in compare view

Updates github.com/klauspost/compress from 1.18.5 to 1.18.6

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.6

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

Commits

Updates github.com/pjbgf/sha1cd from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/pjbgf/sha1cd's releases.

v0.6.0

What's Changed

Full Changelog: pjbgf/sha1cd@v0.5.0...v0.6.0

Commits
  • f90af0d Merge pull request #206 from pjbgf/drop-self-registration
  • 6ff015a Remove self-registration via crypto.RegisterHash
  • ba31b91 Merge pull request #205 from pjbgf/performance
  • 2f0cc80 Enable entire
  • 11223cf perf(amd64): Replace LOADCS extract chain with shuffle+store
  • 21916d9 perf: Pass collision-detection arrays by pointer
  • 5470964 Merge pull request #201 from pjbgf/dependabot/github_actions/actions/setup-go...
  • d7b3b63 build(deps): Bump actions/setup-go from 5.5.0 to 6.1.0
  • 8750e70 Merge pull request #202 from pjbgf/dependabot/docker/golang-1.25
  • 3bed41f Merge pull request #203 from pjbgf/dependabot/github_actions/github/codeql-ac...
  • Additional commits viewable in compare view

Updates github.com/shirou/gopsutil/v4 from 4.26.3 to 4.26.4

Commits
  • 71a5d14 Merge pull request #2083 from pgimalac/pgimalac/aix-proto-counters
  • f74105d net/aix: implement ProtoCounters by parsing netstat -s
  • 5661255 Merge pull request #2081 from shirou/fix/windows_use_get_active_processor_gro...
  • ddec60e [cpu][windows]: fix percpu stats on Windows hosts with multiple processor groups
  • 2f3645f Merge pull request #2079 from pgimalac/pgimalac/getconf-no-bootinfo
  • b693c36 Merge pull request #2077 from fraggerfox/fix-netbsd-stats
  • 25fe401 Make the netbsd tests run only under NetBSD.
  • 94fdb3e Use getconf KERNEL_BITMODE instead of LONG_BIT
  • 94503b2 Use getconf instead of bootinfo on AIX to get kernel architecture
  • 08db87b Add tests for NetBSD's net implementation.
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-modules group with 10 updates
b7a8a74 
Bumps the go-modules group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/iam](https://github.com/googleapis/google-cloud-go) | `1.9.0` | `1.10.0` |
| [cloud.google.com/go/monitoring](https://github.com/googleapis/google-cloud-go) | `1.27.0` | `1.28.0` |
| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.4.0` | `3.5.0` |
| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.2.3` | `2.3.0` |
| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.1+incompatible` | `29.4.2+incompatible` |
| [github.com/gookit/color](https://github.com/gookit/color) | `1.6.0` | `1.6.1` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.5` | `1.18.6` |
| [github.com/pjbgf/sha1cd](https://github.com/pjbgf/sha1cd) | `0.5.0` | `0.6.0` |
| [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.26.3` | `4.26.4` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12-0.20260120151049-f2248ac996af` |


Updates `cloud.google.com/go/iam` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@ids/v1.9.0...iot/v1.10.0)

Updates `cloud.google.com/go/monitoring` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@dlp/v1.27.0...kms/v1.28.0)

Updates `github.com/Masterminds/semver/v3` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](Masterminds/semver@v3.4.0...v3.5.0)

Updates `github.com/containerd/containerd/v2` from 2.2.3 to 2.3.0
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.2.3...v2.3.0)

Updates `github.com/docker/cli` from 29.4.1+incompatible to 29.4.2+incompatible
- [Commits](docker/cli@v29.4.1...v29.4.2)

Updates `github.com/gookit/color` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/gookit/color/releases)
- [Commits](gookit/color@v1.6.0...v1.6.1)

Updates `github.com/klauspost/compress` from 1.18.5 to 1.18.6
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.5...v1.18.6)

Updates `github.com/pjbgf/sha1cd` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/pjbgf/sha1cd/releases)
- [Commits](pjbgf/sha1cd@v0.5.0...v0.6.0)

Updates `github.com/shirou/gopsutil/v4` from 4.26.3 to 4.26.4
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.26.3...v4.26.4)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

---
updated-dependencies:
- dependency-name: cloud.google.com/go/iam
  dependency-version: 1.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/monitoring
  dependency-version: 1.28.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Masterminds/semver/v3
  dependency-version: 3.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/docker/cli
  dependency-version: 29.4.2+incompatible
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/gookit/color
  dependency-version: 1.6.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/pjbgf/sha1cd
  dependency-version: 0.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12-0.20260120151049-f2248ac996af
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 1, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 1, 2026 16:30
@dependabot dependabot Bot added the go Pull requests that update go code label May 1, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 1, 2026 16:30
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label May 1, 2026
@paketo-bot paketo-bot merged commit ccc3102 into main May 1, 2026
11 of 12 checks passed
@paketo-bot paketo-bot deleted the dependabot/go_modules/go-modules-ce872fbf1a branch May 1, 2026 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@paketo-bot-reviewer paketo-bot-reviewer paketo-bot-reviewer approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code semver:patch A change requiring a patch version bump

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@paketo-bot-reviewer @paketo-bot