Bump the gomod group across 1 directory with 18 updates - #4386
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the gomod group across 1 directory with 18 updates#4386dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the gomod group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) | `0.74.0` | `0.82.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.18` | `1.32.31` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.57.2` | `1.60.0` | | [github.com/buildpacks/pack](https://github.com/buildpacks/pack) | `0.40.6` | `0.40.8` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.6` | `0.21.7` | | [github.com/pivotal/kpack](https://github.com/pivotal/kpack) | `0.17.1` | `0.18.0` | | [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) | `3.0.4` | `3.0.5` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.36.1` | `0.36.3` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.1` | `0.36.3` | | [k8s.io/metrics](https://github.com/kubernetes/metrics) | `0.36.1` | `0.36.3` | | [k8s.io/pod-security-admission](https://github.com/kubernetes/pod-security-admission) | `0.36.1` | `0.36.3` | | [sigs.k8s.io/gateway-api](https://github.com/kubernetes-sigs/gateway-api) | `1.5.1` | `1.6.1` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.36.1` | `0.36.3` | Updates `code.cloudfoundry.org/bytefmt` from 0.74.0 to 0.82.0 - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](cloudfoundry/bytefmt@v0.74.0...v0.82.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.18 to 1.32.31 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.18...config/v1.32.31) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.57.2 to 1.60.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ssm/v1.57.2...service/s3/v1.60.0) Updates `github.com/buildpacks/pack` from 0.40.6 to 0.40.8 - [Release notes](https://github.com/buildpacks/pack/releases) - [Changelog](https://github.com/buildpacks/pack/blob/main/RELEASE.md) - [Commits](buildpacks/pack@v0.40.6...v0.40.8) Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4 - [Release notes](https://github.com/go-logr/logr/releases) - [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md) - [Commits](go-logr/logr@v1.4.3...v1.4.4) Updates `github.com/google/go-containerregistry` from 0.21.6 to 0.21.7 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.6...v0.21.7) Updates `github.com/onsi/ginkgo/v2` from 2.29.0 to 2.32.0 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.29.0...v2.32.0) Updates `github.com/onsi/gomega` from 1.41.0 to 1.42.1 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.41.0...v1.42.1) Updates `github.com/pivotal/kpack` from 0.17.1 to 0.18.0 - [Release notes](https://github.com/pivotal/kpack/releases) - [Changelog](https://github.com/buildpacks-community/kpack/blob/main/RELEASE.md) - [Commits](buildpacks-community/kpack@v0.17.1...v0.18.0) Updates `go.yaml.in/yaml/v3` from 3.0.4 to 3.0.5 - [Commits](yaml/go-yaml@v3.0.4...v3.0.5) Updates `golang.org/x/text` from 0.37.0 to 0.40.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.37.0...v0.40.0) Updates `k8s.io/api` from 0.36.1 to 0.36.3 - [Commits](kubernetes/api@v0.36.1...v0.36.3) Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.3 - [Commits](kubernetes/apimachinery@v0.36.1...v0.36.3) Updates `k8s.io/client-go` from 0.36.1 to 0.36.3 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.36.1...v0.36.3) Updates `k8s.io/metrics` from 0.36.1 to 0.36.3 - [Commits](kubernetes/metrics@v0.36.1...v0.36.3) Updates `k8s.io/pod-security-admission` from 0.36.1 to 0.36.3 - [Commits](kubernetes/pod-security-admission@v0.36.1...v0.36.3) Updates `sigs.k8s.io/gateway-api` from 1.5.1 to 1.6.1 - [Release notes](https://github.com/kubernetes-sigs/gateway-api/releases) - [Changelog](https://github.com/kubernetes-sigs/gateway-api/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/gateway-api@v1.5.1...v1.6.1) Updates `k8s.io/apiextensions-apiserver` from 0.36.1 to 0.36.3 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.36.1...v0.36.3) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.82.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/buildpacks/pack dependency-version: 0.40.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/go-logr/logr dependency-version: 1.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/onsi/ginkgo/v2 dependency-version: 2.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/onsi/gomega dependency-version: 1.42.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/pivotal/kpack dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: go.yaml.in/yaml/v3 dependency-version: 3.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: golang.org/x/text dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: k8s.io/api dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/apimachinery dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/client-go dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/metrics dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/pod-security-admission dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: sigs.k8s.io/gateway-api dependency-version: 1.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the gomod group with 13 updates in the / directory:
0.74.00.82.01.32.181.32.311.57.21.60.00.40.60.40.80.21.60.21.70.17.10.18.03.0.43.0.50.36.10.36.30.36.10.36.30.36.10.36.30.36.10.36.31.5.11.6.10.36.10.36.3Updates
code.cloudfoundry.org/bytefmtfrom 0.74.0 to 0.82.0Commits
b26de5fUpdate go.mod dependenciesdc375ddUpdate go.mod dependencies6c23e9dUpdate go.mod dependenciescfb6b77Update go.mod dependencies2b2ca24Update go.mod dependenciesdfc8352Update go.mod dependenciesb8e3c6dUpdate go.mod dependenciesUpdates
github.com/aws/aws-sdk-go-v2/configfrom 1.32.18 to 1.32.31Commits
4fef345Release 2026-07-216275419Regenerated Clientsf859830Update API model278591dAdd an option to clients to disable clock skew (#3483)d132ac7Fix Clock Skew according to internal specification (#3472)03519c9Release 2026-07-20dda3efbRegenerated Clients348cec0Update API modelf4fd272Release 2026-07-178e4cbc8Regenerated ClientsUpdates
github.com/aws/aws-sdk-go-v2/service/ecrfrom 1.57.2 to 1.60.0Commits
4d36126Release 2024-08-205ba784cRegenerated Clientsd447ea1Update API model33d4eabRemove deprecated codestar service (#2754)6fe0e9bRelease 2024-08-193c84b64Regenerated Clientsc78cc2eUpdate endpoints model72a29e1Update API modelc8a8274Release 2024-08-16ebfdc50Regenerated ClientsUpdates
github.com/buildpacks/packfrom 0.40.6 to 0.40.8Release notes
Sourced from github.com/buildpacks/pack's releases.
... (truncated)
Commits
3253355build(deps): bump Go to 1.25.12 and safe x/* deps to fix CVEs (#2653)a469ae3build(deps): bump safe go-dependencies (kaniko, tcell, gomega, x/mod) (#2647)02d2e69Add license scan report and status (#2638)2df3b8cchore: suppress unreachable docker daemon CVEs in grype config (#2644)7f2f74ebuild(deps): bump Go directive to 1.25.11 for stdlib security fixes (#2642)5185a57build(deps): bump x/crypto, x/net, and go-git for security fixes (#2641)e0e21cdfix(buildpack): fix malformed yank PR template body (#2631)e7ca39achore: remove direct dependency on github.com/docker/docker (#2617)a7f39caSuggestheroku/builder:26instead ofheroku/builder:24(#2611)Updates
github.com/go-logr/logrfrom 1.4.3 to 1.4.4Release notes
Sourced from github.com/go-logr/logr's releases.
Commits
96a9abaFix lint51c6302Better implementation of pointer recursion checkingc667114funcr: Handle and test recursive valuesf7ffadbAdd benchmark for pointer argse2a3c8efuncr: bound slog.Group nesting depth to prevent stack overflow2886d2bbuild(deps): bump actions/setup-go from 6.5.0 to 7.0.00b40896build(deps): bump github/codeql-action/upload-sarif77f671bBump to Go 1.26cce283fbuild(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.03832a11build(deps): bump github/codeql-action/upload-sarifUpdates
github.com/google/go-containerregistryfrom 0.21.6 to 0.21.7Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
c68d899Bump go version to 1.26.4 (#2350)da61d86transport: do not re-attach bearer token after cross-host redirect (#2349)09fe1e5fix(tarball): normalize paths when matching files (#2334)5baa399build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)97a8a17fix(transport): apply refreshed bearer token after cross-host redirect (#2337)e963497internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)02649eafix: prevent SSRF in google.List() pagination (#2332)7204b40build(deps): bump the actions group across 1 directory with 2 updates (#2344)4cfaa93build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)6849394pkg/registry: export RedirectError (#2177)Updates
github.com/onsi/ginkgo/v2from 2.29.0 to 2.32.0Release notes
Sourced from github.com/onsi/ginkgo/v2's releases.
Changelog
Sourced from github.com/onsi/ginkgo/v2's changelog.
Commits
9ff1646v2.32.00491f2aMake -fd exclusive of -p/-procs and -randomize-all334f74arespect SilenceSkips in fd mode, add test21047ceNo need for a new method.7d281e1Break out to two methods.5313727More integration, fewer changes.b83f524Fewer new methods.73c59dffeat: add -fd flag for RSpec-style documentation output76a2074feat: add --sleep-on-failure to pause a failed spec before teardown3c7bde4v2.31.0Updates
github.com/onsi/gomegafrom 1.41.0 to 1.42.1Release notes
Sourced from github.com/onsi/gomega's releases.
Changelog
Sourced from github.com/onsi/gomega's changelog.
Commits
ced6c1cv1.42.12beb9fbv1.42.1 (full)006cd2cbump al lthe things35ca084v1.42.0d72697bv1.42.0 (full)1f95d86add a set of claude skills as a marketplace pluginUpdates
github.com/pivotal/kpackfrom 0.17.1 to 0.18.0Release notes
Sourced from github.com/pivotal/kpack's releases.
Commits
cfa94cafix: resolve images for the current architecture in the registry client (#1951)7245b65feat: Support running kpack on arm64 clusters (#1949)bfa95d7reimplement subpath filtering experiment (#1944)c50f129build: publish genuine multi-arch (amd64+arm64) images via ko-direct build (#...d9fc433Reject SecretKeyRef in Build/Image env validation (#1945)6be46dfDocument the shallow clone resolver feature flag (#1943)a4eb48fImplement subPath filtering (#1936)156854aUpdate codegen (#1939)5e37296Bump dependencies (#1931)c236024Bump github.com/secure-systems-lab/go-securesystemslib from 0.9.0 to 0.9.1 (#...Updates
go.yaml.in/yaml/v3from 3.0.4 to 3.0.5Commits
e16c7afRemove empty go.sum file6abcd01Fix unhandled nil-errors in tests9481db7Remove suite_test.go and gopkg.in/check.v1485f5fcUse standard testing library for limit_test.go3e00046Use standard testing library for node_test.gof612058Use standard testing library for decode_test.go078f958Use standard testing library encode_test.go3847ac0[v3] backport CodeQL workflow1666663Revert incorrect gofmt changes73290cbRetract v3 tags that cannot be installedUpdates
golang.org/x/textfrom 0.37.0 to 0.40.0Commits
724af9cgo.mod: update golang.org/x dependenciesbf5b9d6internal/export/idna: always treat Punycode encoding pure ASCII as an errorb326f3dgo.mod: update golang.org/x dependencies5ae8e57unicode/norm: avoid infinite loop on invalid input0dc94a2all: fix some commentsf4bb632go.mod: update golang.org/x dependenciesUpdates
k8s.io/apifrom 0.36.1 to 0.36.3Commits
3fde3c4Update dependencies to v0.36.3 tag53c47b9Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert1831886Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3Updates
k8s.io/apimachineryfrom 0.36.1 to 0.36.3Commits
40bf4b2Update dependencies to v0.36.3 tag34d46beMerge pull request #140296 from jpbetz/cherry-pick-smd-306-revert66a3724Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.32ec982dMerge pull request #139508lalitc375/automated-cherry-pick-of-#1394806a88102Fix wrong marking of errorsUpdates
k8s.io/client-gofrom 0.36.1 to 0.36.3Commits
44a8af2Update dependencies to v0.36.3 tagf501adaMerge pull request #140296 from jpbetz/cherry-pick-smd-306-reverta43e1d7Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3Updates
k8s.io/metricsfrom 0.36.1 to 0.36.3Commits
f1e88ffUpdate dependencies to v0.36.3 tag109dd7aMerge pull request #140296 from jpbetz/cherry-pick-smd-306-revert3f46b26Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3Updates
k8s.io/pod-security-admissionfrom 0.36.1 to 0.36.3Commits
be7583bUpdate dependencies to v0.36.3 tag77a614eMerge pull request #140296 from jpbetz/cherry-pick-smd-306-reverta0a42a0Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3Updates
sigs.k8s.io/gateway-apifrom 1.5.1 to 1.6.1Release notes
Sourced from sigs.k8s.io/gateway-api's releases.
... (truncated)
Changelog
Sourced from sigs.k8s.io/gateway-api's changelog.
... (truncated)
Commits
8bb74dfupdate vap (#5073)852914dchore: Prep for v1.6.1 release (#5070)258e731fix: honor L4 route timeout YAML overrides (#5067)5b4813bfix: apply missing conformance timeout defaults (#5066)6a8b590[release-1.6] conformance: fix cleanup of stale objects (#5065)cb70397conformance: wait for TCP and UDP weighted routes to accept traffic (#5064)b72d941fix: stop verifying reports on release branches (#5062)ef67bf9fix: change broken airlock link (#5056)ee6cc1cfix: only migrate deprecated status code if not already migrate (#5051)cc27d5etests: Change port used in TCPRouteMultipleRoutesAttachment (#5053)Updates
k8s.io/apiextensions-apiserverfrom 0.36.1 to 0.36.3Commits
2e78d6fUpdate dependencies to v0.36.3 tag4b2f007Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revertc8a9346Add e2e test for setting maps and slices to null via SSAb387965Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions