Repository navigation
gomod(deps): Bump the go-deps group across 1 directory with 20 updates - #2928
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go-deps group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/anchore/stereoscope](https://github.com/anchore/stereoscope) | `0.3.0` | `0.3.2` | | [github.com/cli/cli/v2](https://github.com/cli/cli) | `2.98.0` | `2.101.0` | | [github.com/cli/go-gh/v2](https://github.com/cli/go-gh) | `2.13.0` | `2.16.1` | | [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) | `2.14.0` | `2.15.0` | | [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.3.4` | `2.3.5` | | [github.com/containerd/log](https://github.com/containerd/log) | `0.1.0` | `0.2.0` | | [github.com/docker/cli](https://github.com/docker/cli) | `29.7.2+incompatible` | `29.8.0+incompatible` | | [github.com/gobwas/glob](https://github.com/gobwas/glob) | `0.2.3` | `1.0.0` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.22.0` | `0.22.1` | | [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords) | `1.0.14` | `1.0.15` | | [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.32.2` | `0.33.0` | | [github.com/moby/moby/api](https://github.com/moby/moby) | `1.55.0` | `1.56.0` | | [github.com/moby/moby/client](https://github.com/moby/moby) | `0.5.1` | `0.6.0` | | [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.32.1` | `2.32.2` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.42.1` | `1.43.0` | | [github.com/tonistiigi/fsutil](https://github.com/tonistiigi/fsutil) | `0.0.0-20260717003753-6d9dc2ebad62` | `0.0.0-20260819142231-83cac42c1c52` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.45.0` | `0.46.0` | Updates `github.com/anchore/stereoscope` from 0.3.0 to 0.3.2 - [Release notes](https://github.com/anchore/stereoscope/releases) - [Changelog](https://github.com/anchore/stereoscope/blob/main/RELEASE.md) - [Commits](anchore/stereoscope@v0.3.0...v0.3.2) Updates `github.com/cli/cli/v2` from 2.98.0 to 2.101.0 - [Release notes](https://github.com/cli/cli/releases) - [Changelog](https://github.com/cli/cli/blob/trunk/docs/release-process-deep-dive.md) - [Commits](cli/cli@v2.98.0...v2.101.0) Updates `github.com/cli/go-gh/v2` from 2.13.0 to 2.16.1 - [Release notes](https://github.com/cli/go-gh/releases) - [Commits](cli/go-gh@v2.13.0...v2.16.1) Updates `github.com/compose-spec/compose-go/v2` from 2.14.0 to 2.15.0 - [Release notes](https://github.com/compose-spec/compose-go/releases) - [Commits](compose-spec/compose-go@v2.14.0...v2.15.0) Updates `github.com/containerd/containerd/v2` from 2.3.4 to 2.3.5 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v2.3.4...v2.3.5) Updates `github.com/containerd/log` from 0.1.0 to 0.2.0 - [Release notes](https://github.com/containerd/log/releases) - [Commits](containerd/log@v0.1.0...v0.2.0) Updates `github.com/docker/cli` from 29.7.2+incompatible to 29.8.0+incompatible - [Commits](docker/cli@v29.7.2...v29.8.0) Updates `github.com/gobwas/glob` from 0.2.3 to 1.0.0 - [Release notes](https://github.com/gobwas/glob/releases) - [Commits](gobwas/glob@v0.2.3...v1.0.0) Updates `github.com/google/go-containerregistry` from 0.22.0 to 0.22.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.22.0...v0.22.1) Updates `github.com/mattn/go-shellwords` from 1.0.14 to 1.0.15 - [Release notes](https://github.com/mattn/go-shellwords/releases) - [Commits](mattn/go-shellwords@v1.0.14...v1.0.15) Updates `github.com/moby/buildkit` from 0.32.2 to 0.33.0 - [Release notes](https://github.com/moby/buildkit/releases) - [Commits](moby/buildkit@v0.32.2...v0.33.0) Updates `github.com/moby/moby/api` from 1.55.0 to 1.56.0 - [Release notes](https://github.com/moby/moby/releases) - [Commits](moby/moby@api/v1.55.0...api/v1.56.0) Updates `github.com/moby/moby/client` from 0.5.1 to 0.6.0 - [Release notes](https://github.com/moby/moby/releases) - [Changelog](https://github.com/moby/moby/blob/v0.6.0/CHANGELOG.md) - [Commits](moby/moby@v0.5.1...v0.6.0) Updates `github.com/onsi/ginkgo/v2` from 2.32.1 to 2.32.2 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.32.1...v2.32.2) Updates `github.com/onsi/gomega` from 1.42.1 to 1.43.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.42.1...v1.43.0) Updates `github.com/tonistiigi/fsutil` from 0.0.0-20260717003753-6d9dc2ebad62 to 0.0.0-20260819142231-83cac42c1c52 - [Commits](https://github.com/tonistiigi/fsutil/commits) Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0 - [Commits](golang/oauth2@v0.36.0...v0.37.0) Updates `golang.org/x/sync` from 0.22.0 to 0.23.0 - [Commits](golang/sync@v0.22.0...v0.23.0) Updates `golang.org/x/sys` from 0.47.0 to 0.48.0 - [Commits](golang/sys@v0.47.0...v0.48.0) Updates `golang.org/x/term` from 0.45.0 to 0.46.0 - [Commits](golang/term@v0.45.0...v0.46.0) --- updated-dependencies: - dependency-name: github.com/anchore/stereoscope dependency-version: 0.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/cli/cli/v2 dependency-version: 2.101.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/cli/go-gh/v2 dependency-version: 2.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/compose-spec/compose-go/v2 dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/containerd/containerd/v2 dependency-version: 2.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/containerd/log dependency-version: 0.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/docker/cli dependency-version: 29.8.0+incompatible dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/gobwas/glob dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-deps - dependency-name: github.com/google/go-containerregistry dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/mattn/go-shellwords dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/moby/buildkit dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/moby/moby/api dependency-version: 1.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/moby/moby/client dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.32.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/onsi/gomega dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/tonistiigi/fsutil dependency-version: 0.0.0-20260819142231-83cac42c1c52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: golang.org/x/oauth2 dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sync dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/term dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
requested review from
craciunoiuc and
nderjung
as code owners
September 20, 2026 09:05
dependabot
Bot
added
dependencies
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/go_modules/staging/go-deps-3fd577657b
branch
September 27, 2026 09:03
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-deps group with 20 updates in the / directory:
0.3.00.3.22.98.02.101.02.13.02.16.12.14.02.15.02.3.42.3.50.1.00.2.029.7.2+incompatible29.8.0+incompatible0.2.31.0.00.22.00.22.11.0.141.0.150.32.20.33.01.55.01.56.00.5.10.6.02.32.12.32.21.42.11.43.00.0.0-20260717003753-6d9dc2ebad620.0.0-20260819142231-83cac42c1c520.36.00.37.00.22.00.23.00.47.00.48.00.45.00.46.0Updates
github.com/anchore/stereoscopefrom 0.3.0 to 0.3.2Release notes
Sourced from github.com/anchore/stereoscope's releases.
... (truncated)
Commits
cb6de87Fix: whiteout marker correctness (#696)db5362aFix: read cancellation should wait for workers (#693)1f355bdFix: clear opaque whiteouts by real path, not through symlinks (#694)a22e5aefix: populate OCI platform metadata & do not ignore platform option for singl...7d54621fix: continue file tree searches after link cycles (#666)ef9a9a3perf: overlap layer fetch and indexing in Image.Read (#681)4e5b774chore(deps): update tool versions (#692)4f188afchore(deps): bump github.com/moby/moby/client from 0.5.1 to 0.6.0 (#688)52cbac6chore(deps): bump golang.org/x/crypto from 0.55.0 to 0.56.0 (#691)e7889dbchore(deps): bump github.com/docker/cli (#690)Updates
github.com/cli/cli/v2from 2.98.0 to 2.101.0Release notes
Sourced from github.com/cli/cli/v2's releases.
... (truncated)
Commits
0cf1092Merge pull request #14462 from cli/revert-14437-williammartin-apple-codesign-...189706bRevert "Use internal Apple codesign action (#14437)"9eb4db2Merge pull request #14461 from cli/bump-go-ghadeb51eTest explicit default repository resolution (#14460)e09f1b1Bump github.com/cli/go-gh/v2 to v2.16.1be35276Add repo default network acceptance testcac0dd7Merge pull request #14443 from cli/dependabot/go_modules/golang.org/x/crypto-...0baa362Merge pull request #14444 from cli/dependabot/go_modules/golang.org/x/text-0....28a47f4chore(deps): bump golang.org/x/text from 0.41.0 to 0.42.0e4dc241chore(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0Updates
github.com/cli/go-gh/v2from 2.13.0 to 2.16.1Release notes
Sourced from github.com/cli/go-gh/v2's releases.
Commits
37aa5bbfix(repository): honor resolved remote (#290)01be116Merge pull request #263 from baiyuxi930826/fix/atomic-api-cache-store3707f4dharden cache publication across platformsd8f2f73fix(api): make HTTP response cache writes atomicc9808f2Merge pull request #289 from cli/williammartin-relax-api-host-authd53df0dMerge pull request #287 from cli/dependabot/github_actions/codeql-actions-f1b...494d231chore(deps): Bump the codeql-actions group across 1 directory with 2 updatesfbd0ed5Trust canonical host alongside API host1b0b67cMerge pull request #275 from cli/williammartin-implement-per-host-api-host96a581eAdd guarded release workflow (#288)Updates
github.com/compose-spec/compose-go/v2from 2.14.0 to 2.15.0Release notes
Sourced from github.com/compose-spec/compose-go/v2's releases.
Commits
4ddbf11cli: validate COMPOSE_FILE entries point to actual compose files500d50cfix: merge attributes of repeated variable occurrences in ExtractVariables57f6c16tests: run named table cases as subtests261851bloader/tests: completeness test keeps the conformance matrix exhaustive3843a20loader/tests: link every attribute file to the spec section it locks728b3f2loader/tests: loadsAs expresses expectations as canonical YAMLf8211c4docs: TESTING.md codifies the testing contract95dbfdftest: cover short/long ulimit syntax combinations in override merge5a10b5afix: ignore default .env probe on permission deniedf0442fffix(types): reject unrecognized pull_policy values instead of defaultingUpdates
github.com/containerd/containerd/v2from 2.3.4 to 2.3.5Release notes
Sourced from github.com/containerd/containerd/v2's releases.
... (truncated)
Commits
1294c24Merge pull request #14092 from samuelkarp/prepare-release-2.3.5db68d72Prepare release notes for v2.3.5be419b0Merge commit from fork84ea25bMerge commit from fork5db0399Merge pull request #14094 from k8s-infra-cherrypick-robot/cherry-pick-14085-t...9f6be86Fix data races and a deadlock in the byte stream helpers9ec55f0cri: cancel ExecSync IO drain on context cancellationc535779archive: skip redundant opaque whiteout walks3684f86Merge pull request #14063 from k8s-infra-cherrypick-robot/cherry-pick-14057-t...7459b1fMerge pull request #14062 from k8s-infra-cherrypick-robot/cherry-pick-14012-t...Updates
github.com/containerd/logfrom 0.1.0 to 0.2.0Release notes
Sourced from github.com/containerd/log's releases.
Commits
8b5d653Merge pull request #25 from thaJeztah/integrate_tracing_improve65e60caotel: add option to set span error status9c0b6a4otel: add option to configure log level6fcf9c1Merge pull request #28 from thaJeztah/handle_nil_contexts2b5e7c3otel: avoid span lookup for entries without context4ec26d0Merge pull request #24 from thaJeztah/integrate_tracingdd120bdMerge pull request #21 from thaJeztah/rewrite_slogdd21ae6Merge pull request #27 from thaJeztah/bump_logrus18f2de6log: accept slog-compatible levels in SetLevelc474254slog: improve bridge test coverageUpdates
github.com/docker/clifrom 29.7.2+incompatible to 29.8.0+incompatibleCommits
88096efMerge pull request #7288 from thaJeztah/bump_josec50ce17vendor: github.com/go-jose/go-jose/v4 v4.1.5cec24c7Merge pull request #7285 from vvoland/update-dockerd5ea3bdvendor: github.com/moby/moby/client v0.6.07cf09bavendor: github.com/moby/moby/api v1.56.06239084Merge pull request #7108 from zhangyoufu/umask45a3e0be2e/container: Skip umask test until engine support79dd1f4Merge pull request #7284 from thaJeztah/trust_bump32bfe54cmd/docker-trust: update dependenciesd703697cmd/docker-trust: fix testsUpdates
github.com/gobwas/globfrom 0.2.3 to 1.0.0Release notes
Sourced from github.com/gobwas/glob's releases.
Commits
80c58b0bench.sh: fix the assignment and the benchstat args, ignore *.bench60a7c15readme: clarify**and escaping, make the regexp comparison exactc45ce1cremove parked files (but keep them in git history)dab909eall: split parse.go into parse.go/match.go, polish docs, fix U+FFFD12d7a23globtest: print out matchers tree and pretty syntax errorsae63730shape matchers: switch from <> to () and quote literalsa82038cpattern: String() and Separators() imple9b2193ci: migrate to github actionsc0ec127glob/v1: rewrite the matching enginee7a84e9Fix speed results table formatting.Updates
github.com/google/go-containerregistryfrom 0.22.0 to 0.22.1Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
8a72a42remote: copy manifest annotations to referrers fallback tag descriptors (#2441)5765c35build(deps): bump the go-deps group across 2 directories with 3 updates (#2439)969402ffix(mutate): make Time layer updates lazy (#2429)25c682eflatten: preserve config and layer media types when flattening (#2438)79af990remote: add SSRF redirect protection to writer-side HTTP clients (#2432)4b9b3c7fix(release): honor declared Go toolchain (#2435)e033b9cfix(build): install binaries to /ko-app and add to PATH (#2424) (#2436)8bd7902name: return a helpful error when a reference contains a URL scheme (#2431)163134dvalidate: support index attestation manifests and empty configs (#2414)44f7ea3fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml (#2434)Updates
github.com/mattn/go-shellwordsfrom 1.0.14 to 1.0.15Release notes
Sourced from github.com/mattn/go-shellwords's releases.
Commits
f40666aMerge pull request #77 from vitalivo/fix/comments-after-empty-quotesf7c60eeKeep hash characters following empty quotes as word contentUpdates
github.com/moby/buildkitfrom 0.32.2 to 0.33.0Release notes
Sourced from github.com/moby/buildkit's releases.