Skip to content

chore(deps): update go dependencies #223

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
red-hat-konflux wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update go dependencies #223

red-hat-konflux wants to merge 1 commit into from
+68 −68

Conversation

@red-hat-konflux
Copy link

@red-hat-konflux red-hat-konflux bot commented Jul 13, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
cloud.google.com/go indirect minor v0.121.3 -> v0.123.0
cloud.google.com/go/auth indirect minor v0.17.0 -> v0.18.0
cloud.google.com/go/iam indirect patch v1.5.2 -> v1.5.3
cloud.google.com/go/longrunning indirect minor v0.6.7 -> v0.8.0
github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider indirect minor v0.18.1 -> v0.20.0
github.com/AliyunContainerService/ack-ram-tool/pkg/ecsmetadata indirect patch v0.0.9 -> v0.0.10
github.com/ThalesIgnite/crypto11 indirect minor v1.2.5 -> v1.6.0
github.com/alibabacloud-go/tea indirect minor v1.3.9 -> v1.4.0
github.com/aliyun/credentials-go indirect patch v1.4.6 -> v1.4.10
github.com/aws/aws-sdk-go-v2/credentials indirect patch v1.19.5 -> v1.19.7
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect patch v1.18.16 -> v1.18.17
github.com/aws/aws-sdk-go-v2/internal/configsources indirect patch v1.4.16 -> v1.4.17
github.com/aws/aws-sdk-go-v2/service/signin indirect patch v1.0.4 -> v1.0.5
github.com/awslabs/amazon-ecr-credential-helper/ecr-login indirect minor v0.9.1 -> v0.11.0
github.com/buildkite/go-pipeline indirect minor v0.14.0 -> v0.16.0
github.com/buildkite/roko indirect minor v1.3.1 -> v1.4.0
github.com/cloudflare/circl indirect patch v1.6.1 -> v1.6.2
github.com/cyphar/filepath-securejoin indirect minor v0.4.1 -> v0.6.1
github.com/digitorus/pkcs7 indirect digest 3a137a8 -> ffadbf3
github.com/docker/docker-credential-helpers indirect patch v0.9.3 -> v0.9.5
github.com/go-openapi/analysis indirect minor v0.23.0 -> v0.24.2
github.com/go-openapi/errors indirect patch v0.22.1 -> v0.22.6
github.com/go-openapi/jsonpointer indirect minor v0.21.1 -> v0.22.4
github.com/go-openapi/jsonreference indirect patch v0.21.0 -> v0.21.4
github.com/go-openapi/loads indirect minor v0.22.0 -> v0.23.2
github.com/go-openapi/runtime require minor v0.28.0 -> v0.29.2
github.com/go-openapi/spec indirect minor v0.21.0 -> v0.22.3
github.com/go-openapi/strfmt require minor v0.23.0 -> v0.25.0
github.com/go-openapi/swag require minor v0.23.1 -> v0.25.4
github.com/go-openapi/validate indirect minor v0.24.0 -> v0.25.1
github.com/google/gnostic-models indirect patch v0.7.0 -> v0.7.1
github.com/google/go-querystring indirect minor v1.1.0 -> v1.2.0
github.com/googleapis/enterprise-certificate-proxy indirect patch v0.3.7 -> v0.3.9
github.com/kevinburke/ssh_config indirect minor v1.2.0 -> v1.4.0
github.com/klauspost/compress indirect patch v1.18.1 -> v1.18.2
github.com/mailru/easyjson indirect patch v0.9.0 -> v0.9.1
github.com/pjbgf/sha1cd indirect minor v0.3.2 -> v0.5.0
github.com/sagikazarmark/locafero indirect minor v0.9.0 -> v0.12.0
github.com/secure-systems-lab/go-securesystemslib require minor v0.9.1 -> v0.10.0
github.com/sigstore/rekor require minor v1.3.10 -> v1.4.3
github.com/sigstore/timestamp-authority indirect patch v1.2.8 -> v1.2.9
github.com/skeema/knownhosts indirect patch v1.3.1 -> v1.3.2
github.com/spf13/afero indirect minor v1.14.0 -> v1.15.0
github.com/spf13/cast indirect minor v1.9.2 -> v1.10.0
github.com/spf13/viper indirect minor v1.20.1 -> v1.21.0
gitlab.com/gitlab-org/api/client-go indirect minor v0.133.0 -> v0.161.1
go.mongodb.org/mongo-driver indirect patch v1.17.4 -> v1.17.6
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.63.0 -> v0.64.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.63.0 -> v0.64.0
golang.org/x/exp indirect digest b7579e2 -> 944ab1f
golang.org/x/mod indirect minor v0.30.0 -> v0.32.0
golang.org/x/oauth2 require minor v0.33.0 -> v0.34.0
golang.org/x/term indirect minor v0.38.0 -> v0.39.0
golang.org/x/text indirect minor v0.32.0 -> v0.33.0
google.golang.org/api indirect minor v0.257.0 -> v0.259.0
google.golang.org/genproto indirect digest 513f239 -> 0a764e5
google.golang.org/genproto/googleapis/api indirect digest 3a174f9 -> 0a764e5
google.golang.org/genproto/googleapis/rpc indirect digest 97cd9d5 -> 0a764e5
k8s.io/api indirect minor v0.32.3 -> v0.35.0
k8s.io/apimachinery indirect minor v0.32.3 -> v0.35.0
k8s.io/client-go indirect minor v0.32.3 -> v0.35.0
k8s.io/kube-openapi indirect digest 9bd5c66 -> 4e65d59
k8s.io/utils indirect digest 0af2bda -> 914a6e7
sigs.k8s.io/json indirect digest cfa47c3 -> 2d32026
sigs.k8s.io/yaml indirect minor v1.5.0 -> v1.6.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

googleapis/google-cloud-go (cloud.google.com/go)

v0.123.0

Compare Source

Features
Bug Fixes

v0.122.0

Compare Source

Features
Bug Fixes

v0.121.6

Compare Source

Bug Fixes
  • internal/librariangen: Fix Dockerfile permissions for go mod tidy (#​12704) (0e70a0b)

v0.121.5

Compare Source

Bug Fixes
  • internal/librariangen: Get README title from service config yaml (#​12676) (b3b8f70)
  • internal/librariangen: Update source_paths to source_roots in generate-request.json (#​12691) (2adb6f9)

v0.121.4

Compare Source

Bug Fixes
  • geminidataanalytics: Correct resource reference type for parent field in data_chat_service.proto (98ba6f0)
  • internal/postprocessor: Add git (#​12524) (82030ee)
AliyunContainerService/ack-ram-tool (github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider)

v0.19.0

Compare Source

Changelog

中国大陆地区下载地址：

ThalesIgnite/crypto11 (github.com/ThalesIgnite/crypto11)

v1.6.0

Compare Source

What's Changed

Full Changelog: ThalesGroup/crypto11@v1.5.0...v1.6.0

v1.5.0

Compare Source

What's Changed

Full Changelog: ThalesGroup/crypto11@v1.4.1...v1.5.0

v1.4.1

Compare Source

What's Changed

New Contributors

Full Changelog: ThalesGroup/crypto11@v1.4.0...v1.4.1

v1.4.0

Compare Source

What's Changed

New Contributors

Full Changelog: ThalesGroup/crypto11@v1.3.0...v1.4.0

v1.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: ThalesGroup/crypto11@v1.2.1...v1.3.0

alibabacloud-go/tea (github.com/alibabacloud-go/tea)

v1.4.0

Compare Source

What's Changed

Full Changelog: alibabacloud-go/tea@v1.3.14...v1.4.0

v1.3.14

Compare Source

Full Changelog: alibabacloud-go/tea@v1.3.13...v1.3.14

v1.3.13

Compare Source

v1.3.12

Compare Source

v1.3.11

Compare Source

v1.3.10

Compare Source

  • add ctx
aliyun/credentials-go (github.com/aliyun/credentials-go)

v1.4.10

Compare Source

What's Changed

New Contributors

Full Changelog: aliyun/credentials-go@v1.4.9...v1.4.10

v1.4.9

Compare Source

What's Changed

New Contributors

Full Changelog: aliyun/credentials-go@v1.4.8...v1.4.9

v1.4.8

Compare Source

What's Changed

Full Changelog: aliyun/credentials-go@v1.4.7...v1.4.8

v1.4.7

Compare Source

What's Changed

Full Changelog: aliyun/credentials-go@v1.4.6...v1.4.7

awslabs/amazon-ecr-credential-helper (github.com/awslabs/amazon-ecr-credential-helper/ecr-login)

v0.11.0: Amazon ECR Credential Helper - Release v0.11.0

Compare Source

  • Add support for AWS EUSC partition (#​1034).
  • Upgrade dependencies.

Assets

v0.10.1: Amazon ECR Credential Helper - Release v0.10.1

Compare Source

  • Drop golang 1.22 support.
  • Upgrade dependencies.

Assets

v0.10.0: Amazon ECR Credential Helper - Release v0.10.0

Compare Source

  • Enhancement - Updated ECR pattern for ECR dual-stack endpoints for IPv6 support. (#​967)

Assets

buildkite/go-pipeline (github.com/buildkite/go-pipeline)

v0.16.0

Compare Source

What's Changed

Full Changelog: buildkite/go-pipeline@v0.15.0...v0.16.0

v0.15.0

Compare Source

[!WARNING]
The API for verifying step signatures has been changed. Instead of constructing a CommandStepWithInvariants and using Verify directly, use the new function VerifyStep.

What's Changed

Full Changelog: buildkite/go-pipeline@v0.14.0...v0.15.0

buildkite/roko (github.com/buildkite/roko)

v1.4.0

Compare Source

What's Changed

Full Changelog: buildkite/roko@v1.3.1...v1.4.0

cloudflare/circl (github.com/cloudflare/circl)

v1.6.2: CIRCL v1.6.2

Compare Source

CIRCL v1.6.2

  • New SLH-DSA, improvements in ML-DSA for arm64.
  • Tested compilation on WASM.

What's Changed

New Contributors

Full Changelog: cloudflare/circl@v1.6.1...v1.6.2

cyphar/filepath-securejoin (github.com/cyphar/filepath-securejoin)

v0.6.1

This is our first release of github.com/cyphar/filepath-securejoin,
containing a full implementation with a coverage of 93.5% (the only missing
cases are the error cases, which are hard to mocktest at the moment).

v0.6.0

This is our first release of github.com/cyphar/filepath-securejoin,
containing a full implementation with a coverage of 93.5% (the only missing
cases are the error cases, which are hard to mocktest at the moment).

v0.5.2

This is our first release of github.com/cyphar/filepath-securejoin,
containing a full implementation with a coverage of 93.5% (the only missing
cases are the error cases, which are hard to mocktest at the moment).

v0.5.1

This is our first release of github.com/cyphar/filepath-securejoin,
containing a full implementation with a coverage of 93.5% (the only missing
cases are the error cases, which are hard to mocktest at the moment).

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@sourcery-ai
Copy link

sourcery-ai bot commented Jul 13, 2025 •
edited
Loading

Reviewer's Guide

This PR centralizes dependency maintenance by updating various Go modules in go.mod to their latest patch, minor, and digest versions, replacing long pseudo-versions with concise commit hashes.

File-Level Changes

Change Details Files
Bump required dependencies
  • Upgrade sigstore/fulcio from v1.6.6 to v1.7.1
  • Upgrade sigstore/protobuf-specs from v0.4.3 to v0.5.0
  • Upgrade golang.org/x/crypto from v0.39.0 to v0.40.0
 go.mod
Refresh indirect dependencies to latest versions
  • Bump azure-sdk-for-go/sdk/azcore to v1.18.1
  • Update ThalesIgnite/crypto11 to v1.4.1
  • Upgrade google/go-containerregistry to v0.20.6
  • Update pjbgf/sha1cd to v0.4.0
  • Bump gitlab-org/api/client-go to v0.134.0
  • Upgrade google.golang.org/api to v0.241.0
  • Bump k8s.io/* modules from v0.32.x to v0.33.2
 go.mod
Shorten digest and pseudo-version pins
  • Replace go-git/gcfg pseudo-version with commit dd6e852
  • Shorten golang.org/x/exp and google.golang.org/genproto references
  • Update k8s.io/kube-openapi digest to f3f2b991d03b
 go.mod
Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 2 times, most recently from 0c88ff3 to 130af9d Compare July 27, 2025 07:18
@red-hat-konflux red-hat-konflux bot changed the title Update Go Dependencies chore(deps): update go dependencies Jul 27, 2025
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from 130af9d to 099e577 Compare August 3, 2025 05:23
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 2 times, most recently from 994283d to dea60c9 Compare August 10, 2025 16:26
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 2 times, most recently from f5e91af to 6f11a8e Compare August 17, 2025 12:30
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from 00a1782 to f742cd1 Compare August 31, 2025 08:49
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from a08f142 to f23b67f Compare September 7, 2025 16:45
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from f23b67f to 5a9a359 Compare September 14, 2025 08:38
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 11 times, most recently from cb36412 to 4cdd656 Compare September 26, 2025 12:32
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 8 times, most recently from 6c9f724 to c3504de Compare January 6, 2026 13:30
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 20 times, most recently from 07fdda6 to 36f44ec Compare January 10, 2026 06:01
@red-hat-konflux
chore(deps): update go dependencies
ad1533f 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from 36f44ec to ad1533f Compare January 10, 2026 09:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants