Repository navigation
gomod(deps): Bump the go-deps group across 1 directory with 8 updates - #2917
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go-deps group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/anchore/stereoscope](https://github.com/anchore/stereoscope) | `0.3.0` | `0.3.1` | | [github.com/cli/cli/v2](https://github.com/cli/cli) | `2.98.0` | `2.99.0` | | [github.com/cli/go-gh/v2](https://github.com/cli/go-gh) | `2.13.0` | `2.15.0` | | [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) | `2.14.0` | `2.15.0` | | [github.com/gobwas/glob](https://github.com/gobwas/glob) | `0.2.3` | `1.0.0` | | [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.32.2` | `0.33.0` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.42.1` | `1.43.0` | Updates `github.com/anchore/stereoscope` from 0.3.0 to 0.3.1 - [Release notes](https://github.com/anchore/stereoscope/releases) - [Changelog](https://github.com/anchore/stereoscope/blob/main/RELEASE.md) - [Commits](anchore/stereoscope@v0.3.0...v0.3.1) Updates `github.com/cli/cli/v2` from 2.98.0 to 2.99.0 - [Release notes](https://github.com/cli/cli/releases) - [Changelog](https://github.com/cli/cli/blob/trunk/docs/release-process-deep-dive.md) - [Commits](cli/cli@v2.98.0...v2.99.0) Updates `github.com/cli/go-gh/v2` from 2.13.0 to 2.15.0 - [Release notes](https://github.com/cli/go-gh/releases) - [Commits](cli/go-gh@v2.13.0...v2.15.0) Updates `github.com/compose-spec/compose-go/v2` from 2.14.0 to 2.15.0 - [Release notes](https://github.com/compose-spec/compose-go/releases) - [Commits](compose-spec/compose-go@v2.14.0...v2.15.0) Updates `github.com/gobwas/glob` from 0.2.3 to 1.0.0 - [Release notes](https://github.com/gobwas/glob/releases) - [Commits](gobwas/glob@v0.2.3...v1.0.0) Updates `github.com/moby/buildkit` from 0.32.2 to 0.33.0 - [Release notes](https://github.com/moby/buildkit/releases) - [Commits](moby/buildkit@v0.32.2...v0.33.0) Updates `github.com/onsi/gomega` from 1.42.1 to 1.43.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.42.1...v1.43.0) Updates `github.com/tonistiigi/fsutil` from 0.0.0-20260717003753-6d9dc2ebad62 to 0.0.0-20260819142231-83cac42c1c52 - [Commits](https://github.com/tonistiigi/fsutil/commits) --- updated-dependencies: - dependency-name: github.com/anchore/stereoscope dependency-version: 0.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/cli/cli/v2 dependency-version: 2.99.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/cli/go-gh/v2 dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/compose-spec/compose-go/v2 dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/gobwas/glob dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-deps - dependency-name: github.com/moby/buildkit dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/onsi/gomega dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/tonistiigi/fsutil dependency-version: 0.0.0-20260819142231-83cac42c1c52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
requested review from
craciunoiuc and
nderjung
as code owners
September 6, 2026 09:04
dependabot
Bot
added
dependencies
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/go_modules/staging/go-deps-c74c402d04
branch
September 20, 2026 09:04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-deps group with 7 updates in the / directory:
0.3.00.3.12.98.02.99.02.13.02.15.02.14.02.15.00.2.31.0.00.32.20.33.01.42.11.43.0Updates
github.com/anchore/stereoscopefrom 0.3.0 to 0.3.1Release notes
Sourced from github.com/anchore/stereoscope's releases.
... (truncated)
Commits
85f62fdchore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (#672)02c3bdcchore(deps): bump golang.org/x/tools from 0.48.0 to 0.49.0 (#674)85798efchore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#673)467c2d3chore(deps): bump github.com/containerd/containerd/v2 (#671)5052829chore(deps): bump github.com/containerd/platforms from 1.0.0-rc.4 to 1.0.0-rc...3cd14ecfix(image): bind hardlinks to the file they name when indexing a layer (#670)f70c7c3chore(deps): bump github.com/google/go-containerregistry (#668)c5d5b94chore(deps): bump github.com/docker/cli (#669)09c972echore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#667)4d73b65chore(deps): bump github.com/docker/go-connections from 0.8.0 to 0.8.1 (#663)Updates
github.com/cli/cli/v2from 2.98.0 to 2.99.0Release notes
Sourced from github.com/cli/cli/v2's releases.
... (truncated)
Commits
d528f20Merge pull request #14260 from cli/tommaso-moro-support-pi-agent-directorye909b95Merge pull request #14154 from scarletkc/scarletkc/fix-codex-user-skill-patha8460b5Merge pull request #14300 from cli/dependabot/github_actions/codeql-actions-6...35f596dMerge pull request #14301 from cli/dependabot/github_actions/azure/login-3.0.20574bc5Merge pull request #14299 from cli/dependabot/go_modules/google.golang.org/gr...5d0f7d7chore(deps): bump azure/login from 3.0.1 to 3.0.278aaae9chore(deps): bump the codeql-actions group with 3 updates367d30achore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.240b742fMerge pull request #14289 from cli/bagtoad/limit-attachment-batchesf2bf7c3Limit attachment batches to 50 filesUpdates
github.com/cli/go-gh/v2from 2.13.0 to 2.15.0Release notes
Sourced from github.com/cli/go-gh/v2's releases.
Commits
1b0b67cMerge pull request #275 from cli/williammartin-implement-per-host-api-host96a581eAdd guarded release workflow (#288)de1d657Clarify API host authentication behavior50ccff8Apply paired review changesbafadb3Merge pull request #273 from cli/dependabot/go_modules/github.com/henvic/http...b3bff58Merge pull request #282 from cli/dependabot/go_modules/golang.org/x/text-0.41.057c79e4Merge pull request #284 from cli/dependabot/github_actions/codeql-actions-a10...92f04e6Merge pull request #285 from cli/dependabot/go_modules/github.com/stretchr/te...7f9c85cchore(deps): Bump golang.org/x/text from 0.40.0 to 0.41.049d277bchore(deps): Bump github.com/stretchr/testify from 1.11.1 to 1.12.1Updates
github.com/compose-spec/compose-go/v2from 2.14.0 to 2.15.0Release notes
Sourced from github.com/compose-spec/compose-go/v2's releases.
Commits
4ddbf11cli: validate COMPOSE_FILE entries point to actual compose files500d50cfix: merge attributes of repeated variable occurrences in ExtractVariables57f6c16tests: run named table cases as subtests261851bloader/tests: completeness test keeps the conformance matrix exhaustive3843a20loader/tests: link every attribute file to the spec section it locks728b3f2loader/tests: loadsAs expresses expectations as canonical YAMLf8211c4docs: TESTING.md codifies the testing contract95dbfdftest: cover short/long ulimit syntax combinations in override merge5a10b5afix: ignore default .env probe on permission deniedf0442fffix(types): reject unrecognized pull_policy values instead of defaultingUpdates
github.com/gobwas/globfrom 0.2.3 to 1.0.0Release notes
Sourced from github.com/gobwas/glob's releases.
Commits
80c58b0bench.sh: fix the assignment and the benchstat args, ignore *.bench60a7c15readme: clarify**and escaping, make the regexp comparison exactc45ce1cremove parked files (but keep them in git history)dab909eall: split parse.go into parse.go/match.go, polish docs, fix U+FFFD12d7a23globtest: print out matchers tree and pretty syntax errorsae63730shape matchers: switch from <> to () and quote literalsa82038cpattern: String() and Separators() imple9b2193ci: migrate to github actionsc0ec127glob/v1: rewrite the matching enginee7a84e9Fix speed results table formatting.Updates
github.com/moby/buildkitfrom 0.32.2 to 0.33.0Release notes
Sourced from github.com/moby/buildkit's releases.
... (truncated)
Commits
dddd562Merge pull request #7105 from crazy-max/v0.33_picks_v0.33.0-rc23c05040vendor: update moby/policy-helpers to dd6c5499c491ae09dd0solver: avoid mutating exec args for QEMUbd1ac13exporter: raise max attestation size to 80 MiBccfc875dockerfile: update version to 1.27eece108Merge pull request #7080 from tonistiigi/dockerd-test-fix-v0.33d3f86c1test: fix dockerd integration coverageb09f8f1Merge pull request #6944 from rzlink/wcow-secret-mountbb80b2aMerge pull request #7078 from thaJeztah/bump_grpc964cf3dvendor: google.golang.org/grpc v1.83.2Updates
github.com/onsi/gomegafrom 1.42.1 to 1.43.0Release notes
Sourced from github.com/onsi/gomega's releases.
Changelog
Sourced from github.com/onsi/gomega's changelog.
Commits
bc1f21ev1.43.0c814c0ev1.43.0 (full)a89f25dAdd gomock adaptor extension for using Gomega matchers with gomockUpdates
github.com/tonistiigi/fsutilfrom 0.0.0-20260717003753-6d9dc2ebad62 to 0.0.0-20260819142231-83cac42c1c52Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions