Repository navigation
gomod(deps): Bump the go-deps group across 1 directory with 23 updates - #2934
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go-deps group with 23 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/anchore/stereoscope](https://github.com/anchore/stereoscope) | `0.3.0` | `0.3.2` | | [github.com/cli/cli/v2](https://github.com/cli/cli) | `2.98.0` | `2.101.0` | | [github.com/cli/go-gh/v2](https://github.com/cli/go-gh) | `2.13.0` | `2.16.1` | | [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go) | `2.14.0` | `2.15.0` | | [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.3.4` | `2.3.5` | | [github.com/containerd/log](https://github.com/containerd/log) | `0.1.0` | `0.2.0` | | [github.com/containerd/nerdctl/v2](https://github.com/containerd/nerdctl) | `2.3.5` | `2.4.0` | | [github.com/docker/cli](https://github.com/docker/cli) | `29.7.2+incompatible` | `29.8.1+incompatible` | | [github.com/dustin/go-humanize](https://github.com/dustin/go-humanize) | `1.0.1` | `1.1.0` | | [github.com/gobwas/glob](https://github.com/gobwas/glob) | `0.2.3` | `1.0.0` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.22.0` | `0.22.1` | | [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords) | `1.0.14` | `1.0.15` | | [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.32.2` | `0.33.0` | | [github.com/moby/moby/api](https://github.com/moby/moby) | `1.55.0` | `1.56.0` | | [github.com/moby/moby/client](https://github.com/moby/moby) | `0.5.1` | `0.6.0` | | [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.32.1` | `2.33.0` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.42.1` | `1.43.1` | | [github.com/tonistiigi/fsutil](https://github.com/tonistiigi/fsutil) | `0.0.0-20260717003753-6d9dc2ebad62` | `0.0.0-20260819142231-83cac42c1c52` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.45.0` | `0.46.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.84.0` | Updates `github.com/anchore/stereoscope` from 0.3.0 to 0.3.2 - [Release notes](https://github.com/anchore/stereoscope/releases) - [Changelog](https://github.com/anchore/stereoscope/blob/main/RELEASE.md) - [Commits](anchore/stereoscope@v0.3.0...v0.3.2) Updates `github.com/cli/cli/v2` from 2.98.0 to 2.101.0 - [Release notes](https://github.com/cli/cli/releases) - [Changelog](https://github.com/cli/cli/blob/trunk/docs/release-process-deep-dive.md) - [Commits](cli/cli@v2.98.0...v2.101.0) Updates `github.com/cli/go-gh/v2` from 2.13.0 to 2.16.1 - [Release notes](https://github.com/cli/go-gh/releases) - [Commits](cli/go-gh@v2.13.0...v2.16.1) Updates `github.com/compose-spec/compose-go/v2` from 2.14.0 to 2.15.0 - [Release notes](https://github.com/compose-spec/compose-go/releases) - [Commits](compose-spec/compose-go@v2.14.0...v2.15.0) Updates `github.com/containerd/containerd/v2` from 2.3.4 to 2.3.5 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v2.3.4...v2.3.5) Updates `github.com/containerd/log` from 0.1.0 to 0.2.0 - [Release notes](https://github.com/containerd/log/releases) - [Commits](containerd/log@v0.1.0...v0.2.0) Updates `github.com/containerd/nerdctl/v2` from 2.3.5 to 2.4.0 - [Release notes](https://github.com/containerd/nerdctl/releases) - [Commits](containerd/nerdctl@v2.3.5...v2.4.0) Updates `github.com/docker/cli` from 29.7.2+incompatible to 29.8.1+incompatible - [Commits](docker/cli@v29.7.2...v29.8.1) Updates `github.com/dustin/go-humanize` from 1.0.1 to 1.1.0 - [Commits](dustin/go-humanize@v1.0.1...v1.1.0) Updates `github.com/gobwas/glob` from 0.2.3 to 1.0.0 - [Release notes](https://github.com/gobwas/glob/releases) - [Commits](gobwas/glob@v0.2.3...v1.0.0) Updates `github.com/google/go-containerregistry` from 0.22.0 to 0.22.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.22.0...v0.22.1) Updates `github.com/mattn/go-shellwords` from 1.0.14 to 1.0.15 - [Release notes](https://github.com/mattn/go-shellwords/releases) - [Commits](mattn/go-shellwords@v1.0.14...v1.0.15) Updates `github.com/moby/buildkit` from 0.32.2 to 0.33.0 - [Release notes](https://github.com/moby/buildkit/releases) - [Commits](moby/buildkit@v0.32.2...v0.33.0) Updates `github.com/moby/moby/api` from 1.55.0 to 1.56.0 - [Release notes](https://github.com/moby/moby/releases) - [Commits](moby/moby@api/v1.55.0...api/v1.56.0) Updates `github.com/moby/moby/client` from 0.5.1 to 0.6.0 - [Release notes](https://github.com/moby/moby/releases) - [Changelog](https://github.com/moby/moby/blob/v0.6.0/CHANGELOG.md) - [Commits](moby/moby@v0.5.1...v0.6.0) Updates `github.com/onsi/ginkgo/v2` from 2.32.1 to 2.33.0 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.32.1...v2.33.0) Updates `github.com/onsi/gomega` from 1.42.1 to 1.43.1 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.42.1...v1.43.1) Updates `github.com/tonistiigi/fsutil` from 0.0.0-20260717003753-6d9dc2ebad62 to 0.0.0-20260819142231-83cac42c1c52 - [Commits](https://github.com/tonistiigi/fsutil/commits) Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0 - [Commits](golang/oauth2@v0.36.0...v0.37.0) Updates `golang.org/x/sync` from 0.22.0 to 0.23.0 - [Commits](golang/sync@v0.22.0...v0.23.0) Updates `golang.org/x/sys` from 0.47.0 to 0.48.0 - [Commits](golang/sys@v0.47.0...v0.48.0) Updates `golang.org/x/term` from 0.45.0 to 0.46.0 - [Commits](golang/term@v0.45.0...v0.46.0) Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.2...v1.84.0) --- updated-dependencies: - dependency-name: github.com/anchore/stereoscope dependency-version: 0.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/cli/cli/v2 dependency-version: 2.101.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/cli/go-gh/v2 dependency-version: 2.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/compose-spec/compose-go/v2 dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/containerd/containerd/v2 dependency-version: 2.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/containerd/log dependency-version: 0.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/containerd/nerdctl/v2 dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/docker/cli dependency-version: 29.8.1+incompatible dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/dustin/go-humanize dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/gobwas/glob dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-deps - dependency-name: github.com/google/go-containerregistry dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/mattn/go-shellwords dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/moby/buildkit dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/moby/moby/api dependency-version: 1.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/moby/moby/client dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/onsi/gomega dependency-version: 1.43.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/tonistiigi/fsutil dependency-version: 0.0.0-20260819142231-83cac42c1c52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: golang.org/x/oauth2 dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sync dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/term dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/grpc dependency-version: 1.84.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
requested review from
craciunoiuc and
nderjung
as code owners
September 27, 2026 09:04
dependabot
Bot
added
dependencies
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/go_modules/staging/go-deps-afdf4278c5
branch
October 4, 2026 09:03
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-deps group with 23 updates in the / directory:
0.3.00.3.22.98.02.101.02.13.02.16.12.14.02.15.02.3.42.3.50.1.00.2.02.3.52.4.029.7.2+incompatible29.8.1+incompatible1.0.11.1.00.2.31.0.00.22.00.22.11.0.141.0.150.32.20.33.01.55.01.56.00.5.10.6.02.32.12.33.01.42.11.43.10.0.0-20260717003753-6d9dc2ebad620.0.0-20260819142231-83cac42c1c520.36.00.37.00.22.00.23.00.47.00.48.00.45.00.46.01.83.21.84.0Updates
github.com/anchore/stereoscopefrom 0.3.0 to 0.3.2Release notes
Sourced from github.com/anchore/stereoscope's releases.
... (truncated)
Commits
cb6de87Fix: whiteout marker correctness (#696)db5362aFix: read cancellation should wait for workers (#693)1f355bdFix: clear opaque whiteouts by real path, not through symlinks (#694)a22e5aefix: populate OCI platform metadata & do not ignore platform option for singl...7d54621fix: continue file tree searches after link cycles (#666)ef9a9a3perf: overlap layer fetch and indexing in Image.Read (#681)4e5b774chore(deps): update tool versions (#692)4f188afchore(deps): bump github.com/moby/moby/client from 0.5.1 to 0.6.0 (#688)52cbac6chore(deps): bump golang.org/x/crypto from 0.55.0 to 0.56.0 (#691)e7889dbchore(deps): bump github.com/docker/cli (#690)Updates
github.com/cli/cli/v2from 2.98.0 to 2.101.0Release notes
Sourced from github.com/cli/cli/v2's releases.
... (truncated)
Commits
0cf1092Merge pull request #14462 from cli/revert-14437-williammartin-apple-codesign-...189706bRevert "Use internal Apple codesign action (#14437)"9eb4db2Merge pull request #14461 from cli/bump-go-ghadeb51eTest explicit default repository resolution (#14460)e09f1b1Bump github.com/cli/go-gh/v2 to v2.16.1be35276Add repo default network acceptance testcac0dd7Merge pull request #14443 from cli/dependabot/go_modules/golang.org/x/crypto-...0baa362Merge pull request #14444 from cli/dependabot/go_modules/golang.org/x/text-0....28a47f4chore(deps): bump golang.org/x/text from 0.41.0 to 0.42.0e4dc241chore(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0Updates
github.com/cli/go-gh/v2from 2.13.0 to 2.16.1Release notes
Sourced from github.com/cli/go-gh/v2's releases.
Commits
37aa5bbfix(repository): honor resolved remote (#290)01be116Merge pull request #263 from baiyuxi930826/fix/atomic-api-cache-store3707f4dharden cache publication across platformsd8f2f73fix(api): make HTTP response cache writes atomicc9808f2Merge pull request #289 from cli/williammartin-relax-api-host-authd53df0dMerge pull request #287 from cli/dependabot/github_actions/codeql-actions-f1b...494d231chore(deps): Bump the codeql-actions group across 1 directory with 2 updatesfbd0ed5Trust canonical host alongside API host1b0b67cMerge pull request #275 from cli/williammartin-implement-per-host-api-host96a581eAdd guarded release workflow (#288)Updates
github.com/compose-spec/compose-go/v2from 2.14.0 to 2.15.0Release notes
Sourced from github.com/compose-spec/compose-go/v2's releases.
Commits
4ddbf11cli: validate COMPOSE_FILE entries point to actual compose files500d50cfix: merge attributes of repeated variable occurrences in ExtractVariables57f6c16tests: run named table cases as subtests261851bloader/tests: completeness test keeps the conformance matrix exhaustive3843a20loader/tests: link every attribute file to the spec section it locks728b3f2loader/tests: loadsAs expresses expectations as canonical YAMLf8211c4docs: TESTING.md codifies the testing contract95dbfdftest: cover short/long ulimit syntax combinations in override merge5a10b5afix: ignore default .env probe on permission deniedf0442fffix(types): reject unrecognized pull_policy values instead of defaultingUpdates
github.com/containerd/containerd/v2from 2.3.4 to 2.3.5Release notes
Sourced from github.com/containerd/containerd/v2's releases.
... (truncated)
Commits
1294c24Merge pull request #14092 from samuelkarp/prepare-release-2.3.5db68d72Prepare release notes for v2.3.5be419b0Merge commit from fork84ea25bMerge commit from fork5db0399Merge pull request #14094 from k8s-infra-cherrypick-robot/cherry-pick-14085-t...9f6be86Fix data races and a deadlock in the byte stream helpers9ec55f0cri: cancel ExecSync IO drain on context cancellationc535779archive: skip redundant opaque whiteout walks3684f86Merge pull request #14063 from k8s-infra-cherrypick-robot/cherry-pick-14057-t...7459b1fMerge pull request #14062 from k8s-infra-cherrypick-robot/cherry-pick-14012-t...Updates
github.com/containerd/logfrom 0.1.0 to 0.2.0Release notes
Sourced from github.com/containerd/log's releases.
Commits
8b5d653Merge pull request #25 from thaJeztah/integrate_tracing_improve65e60caotel: add option to set span error status9c0b6a4otel: add option to configure log level6fcf9c1Merge pull request #28 from thaJeztah/handle_nil_contexts2b5e7c3otel: avoid span lookup for entries without context4ec26d0Merge pull request #24 from thaJeztah/integrate_tracingdd120bdMerge pull request #21 from thaJeztah/rewrite_slogdd21ae6Merge pull request #27 from thaJeztah/bump_logrus18f2de6log: accept slog-compatible levels in SetLevelc474254slog: improve bridge test coverageUpdates
github.com/containerd/nerdctl/v2from 2.3.5 to 2.4.0Release notes
Sourced from github.com/containerd/nerdctl/v2's releases.
... (truncated)
Commits
bbc533cMerge pull request #5224 from AkihiroSuda/dev08ed575Merge pull request #5223 from immanuwell/fix/top-container-states4504226update RootlessKit (3.2.0)34a85c2go.mod: github.com/rootless-containers/rootlesskit/v3 v3.2.08d7f340fix(top): handle stopped and paused containersdf23ce0Merge pull request #5221 from containerd/dependabot/github_actions/docker/set...279d929Merge pull request #5219 from containerd/dependabot/github_actions/docker/bui...9508dceMerge pull request #5220 from containerd/dependabot/github_actions/docker/set...1e7cfd9Merge pull request #5222 from containerd/dependabot/go_modules/docker-cea57ad793a7e1d20build(deps): bump the docker group with 2 updatesUpdates
github.com/docker/clifrom 29.7.2+incompatible to 29.8.1+incompatibleCommits
4a63305Merge pull request #7297 from docker/dependabot/github_actions/docker-actions...87ff477Merge pull request #7307 from thaJeztah/ci_ubuntu_2604101ffc0ci: update to Ubuntu 26.04 runners32ff1e7build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.ymld146e67Merge pull request #7290 from vvoland/port-templateac976d9Merge pull request #7296 from keeltrace/keeltrace/history-timezone-test48baf6cMerge pull request #7306 from thaJeztah/bump_x_deps47a06aaMerge pull request #7293 from thaJeztah/bump_uax291bf3eb6Merge pull request #7295 from thaJeztah/bump_userns60dffc9vendor: golang.org/x/net v0.59.0Updates
github.com/dustin/go-humanizefrom 1.0.1 to 1.1.0Commits
40736daFix #105528b6f7Fix #852ccb40fFix #1030509d5bfeat: add ParseComma and ParseCommaf with doc comments and epsilon test0a173b2Increase big coverageca34c61Bump actions/setup-go from 6.1.0 to 6.3.0da71bb0Bump actions/checkout from 5.0.1 to 6.0.2d02cffbsi: accept the Greek letter mu as an alias for µ in ParseSI0f3681dRound off coverage of biged94053Increase bytes parsing coverageUpdates
github.com/gobwas/globfrom 0.2.3 to 1.0.0Release notes
Sourced from github.com/gobwas/glob's releases.
Commits
80c58b0bench.sh: fix the assignment and the benchstat args, ignore *.bench60a7c15readme: clarify**and escaping, make the regexp comparison exactc45ce1cremove parked files (but keep them in git history)dab909eall: split parse.go into parse.go/match.go, polish docs, fix U+FFFD12d7a23globtest: print out matchers tree and pretty syntax errorsae63730shape matchers: switch from <> to () and quote literalsa82038cpattern: String() and Separators() imple9b2193ci: migrate to github actionsc0ec127glob/v1: rewrite the matching enginee7a84e9Fix speed results table formatting.Description has been truncated