⚠ This page is served via a proxy. Original site: https://github.com
This service does not collect credentials or authentication data.
Skip to content

Update go modules (main) (patch) #2980

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update go modules (main) (patch) #2980

renovate wants to merge 1 commit into from
+1,512 −97

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
cuelang.org/go v0.11.1 → v0.11.2 age adoption passing confidence
github.com/CycloneDX/cyclonedx-go v0.9.2 → v0.9.3 age adoption passing confidence
github.com/cucumber/godog v0.15.0 → v0.15.1 age adoption passing confidence
github.com/daixiang0/gci v0.13.5 → v0.13.7 age adoption passing confidence
github.com/evanphx/json-patch v5.9.0+incompatible → v5.9.11+incompatible age adoption passing confidence
github.com/evanphx/json-patch/v5 v5.9.0 → v5.9.11 age adoption passing confidence
github.com/gkampitakis/go-snaps v0.5.7 → v0.5.19 age adoption passing confidence
github.com/go-git/go-billy/v5 v5.6.0 → v5.6.2 age adoption passing confidence
github.com/go-git/go-git/v5 v5.13.0 → v5.13.2 age adoption passing confidence
github.com/otiai10/copy v1.14.0 → v1.14.1 age adoption passing confidence
github.com/secure-systems-lab/go-securesystemslib v0.9.0 → v0.9.1 age adoption passing confidence
github.com/sirupsen/logrus v1.9.3 → v1.9.4 age adoption passing confidence
github.com/spdx/tools-golang v0.5.5 → v0.5.7 age adoption passing confidence
github.com/spf13/pflag v1.0.7 → v1.0.10 age adoption passing confidence
github.com/tektoncd/chains v0.22.2 → v0.22.3 age adoption passing confidence
github.com/tektoncd/cli v0.38.0 → v0.38.2 age adoption passing confidence
github.com/tektoncd/cli v0.37.1 → v0.37.2 age adoption passing confidence
github.com/testcontainers/testcontainers-go v0.34.0 → v0.34.1 age adoption passing confidence
gotest.tools/gotestsum v1.12.1 → v1.12.3 age adoption passing confidence
helm.sh/helm/v3 v3.18.5 → v3.18.6 age adoption passing confidence
k8s.io/api v0.34.2 → v0.34.3 age adoption passing confidence
k8s.io/apiextensions-apiserver v0.34.2 → v0.34.3 age adoption passing confidence
k8s.io/apimachinery v0.34.2 → v0.34.3 age adoption passing confidence
k8s.io/client-go v0.34.2 → v0.34.3 age adoption passing confidence
k8s.io/kubernetes v1.34.2 → v1.34.3 age adoption passing confidence

Release Notes

cue-lang/cue (cuelang.org/go)

v0.11.2

Compare Source

This release includes fixes for bugs which were uncovered and resolved in the last few weeks.

Evaluator

CL 1206279 fixes a regression in the old evaluator which could lead to "conflicting value" errors.

cmd/cue

CL 1207330 fixes a regression where cue get go stopped copying some CUE files from Go package directories.

CL 1207402 fixes a regression where cue def --inline-imports could result in invalid CUE which failed to evaluate.

Full list of changes since v0.11.1
CycloneDX/cyclonedx-go (github.com/CycloneDX/cyclonedx-go)

v0.9.3

Compare Source

Changelog

Fixes
Building and Packaging
cucumber/godog (github.com/cucumber/godog)

v0.15.1

Compare Source

Added
Changed
  • Replace deprecated ::set-output - (681 - nodeg)
Fixed
  • fix(errors): fix(errors): Fix expected Step argument count for steps with context.Context (679 - tigh-latte)
  • fix(formatter): On concurrent execution, execute formatter at end of Scenario - (645 - tigh-latte)
  • Pretty printing results now prints the line where the step is declared instead of the line where the handler is declared. (668 - spencerc)
  • Update honnef.co/go/tools/cmd/staticcheck version in Makefile by @​RezaZareiii in #​670
  • fix: verify dogT exists in the context before using it by @​cakoolen in #​692
  • fix: change bang to being in README by @​nahomEagleLion in #​687
  • Mark junit test cases as skipped if no pickle step results available by @​mrsheepuk in #​597
  • Print step declaration line instead of handler declaration line by @​SpencerC in #​668
daixiang0/gci (github.com/daixiang0/gci)

v0.13.7

Compare Source

What's Changed

New Contributors

Full Changelog: daixiang0/gci@v0.13.6...v0.13.7

v0.13.6

Compare Source

What's Changed

Full Changelog: daixiang0/gci@v0.13.5...v0.13.6

evanphx/json-patch (github.com/evanphx/json-patch)

v5.9.11+incompatible

Compare Source

v5.9.10+incompatible

Compare Source

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

v0.5.19

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@0.5.18...v0.5.19

v0.5.18

Compare Source

v0.5.17

Compare Source

v0.5.16

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.15...v0.5.16

v0.5.15

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.14...v0.5.15

v0.5.14

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.13...v0.5.14

v0.5.13

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.12...v0.5.13

v0.5.12

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.11...v0.5.12

v0.5.11

Compare Source

What's Changed
New Contributors

Full Changelog: gkampitakis/go-snaps@v0.5.10...v0.5.11

v0.5.10

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.9...v0.5.10

v0.5.9

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.8...v0.5.9

Kudos to @​orloffv for this issue #​116

v0.5.8

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.7...v0.5.8

go-git/go-billy (github.com/go-git/go-billy/v5)

v5.6.2

Compare Source

What's Changed

New Contributors

Full Changelog: go-git/go-billy@v5.6.1...v5.6.2

v5.6.1

Compare Source

What's Changed

Full Changelog: go-git/go-billy@v5.6.0...v5.6.1

go-git/go-git (github.com/go-git/go-git/v5)

v5.13.2

Compare Source

What's Changed

Full Changelog: go-git/go-git@v5.13.1...v5.13.2

v5.13.1

Compare Source

What's Changed

Full Changelog: go-git/go-git@v5.13.0...v5.13.1

otiai10/copy (github.com/otiai10/copy)

v1.14.1

Compare Source

secure-systems-lab/go-securesystemslib (github.com/secure-systems-lab/go-securesystemslib)

v0.9.1

Compare Source

sirupsen/logrus (github.com/sirupsen/logrus)

v1.9.4

Compare Source

Notable changes

  • go.mod: update minimum supported go version to v1.17 #​1460
  • go.mod: bump up dependencies #​1460
  • Touch-up godoc and add "doc" links.
  • README: fix links, grammar, and update examples.
  • Add GNU/Hurd support #​1364
  • Add WASI wasip1 support #​1388
  • Remove uses of deprecated ioutil package #​1472
  • CI: update actions and golangci-lint #​1459
  • CI: remove appveyor, add macOS #​1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

spdx/tools-golang (github.com/spdx/tools-golang)

v0.5.7

Compare Source

What's Changed

New Contributors

Full Changelog: spdx/tools-golang@v0.5.6...v0.5.7

v0.5.6

Compare Source

What's Changed

New Contributors

Full Changelog: spdx/tools-golang@v0.5.5...v0.5.6

spf13/pflag (github.com/spf13/pflag)

v1.0.10

Compare Source

What's Changed

  • fix deprecation comment for (FlagSet.)ParseErrorsWhitelist by @​thaJeztah in #​447
  • remove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by @​thaJeztah in #​448

New Contributors

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

v1.0.9

Compare Source

What's Changed

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

Compare Source

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

tektoncd/chains (github.com/tektoncd/chains)

v0.22.3: Tekton Chains release v0.22.3 "v0.22.3"

Compare Source

-Docs @​ v0.22.3
-Examples @​ v0.22.3

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/chains/previous/v0.22.3/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677abc5f8010a0a21be4daa53325a217f4df92955848f73f226c6ed054c429fb9f82

Obtain the attestation:

REKOR_UUID=108e9186e8c5677abc5f8010a0a21be4daa53325a217f4df92955848f73f226c6ed054c429fb9f82
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/chains/previous/v0.22.3/release.yaml
REKOR_UUID=108e9186e8c5677abc5f8010a0a21be4daa53325a217f4df92955848f73f226c6ed054c429fb9f82

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.22.3@​sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Fixes
Misc
  • 🔨 Upgrade golang.org/x/crypto to 0.31.0 (#​1269)

Thanks

Thanks to these contributors who contributed to v0.22.3!

Extra shout-out for awesome release notes:

tektoncd/cli (github.com/tektoncd/cli)

v0.38.2

Compare Source

v0.38.2 Release 🎉

This is a bug fix release for CVEs GHSA-w32m-9786-jp63 on golang.org/x/net and GHSA-v778-237x-gjrc on golang.org/x/crypto.

ChangeLog 📋
Misc 🔨
  • Bump golang.org/x/net from 0.30.0 to 0.33.0 #​2473
  • Bump golang.org/x/crypto from 0.28.0 to 0.31.0 #​2447

v0.38.1

Compare Source

v0.38.1 Release 🎉

This is a bug fix release as tkn start was failing with tkn version v0.38.0 release and old(er) pipeline version. This release comes with Pipelines v0.62.3 and Triggers version v0.29.1

ChangeLog 📋
Misc 🔨
  • Bump tektoncd/pipeline to v0.62.3 #​2392
  • Bump github.com/tektoncd/triggers from 0.29.0 to 0.29.1 #​2394
testcontainers/testcontainers-go (github.com/testcontainers/testcontainers-go)

v0.34.1

Compare Source

gotestyourself/gotestsum (gotest.tools/gotestsum)

v1.12.3

Compare Source

What's Changed

New Contributors

Full Changelog: gotestyourself/gotestsum@v1.12.2...v1.12.3

v1.12.2

Compare Source

What's Changed

New Contributors

Full Changelog: gotestyourself/gotestsum@v1.12.1...v1.12.2

helm/helm (helm.sh/helm/v3)

v3.18.6: Helm v3.18.6

Compare Source

Helm v3.18.6 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.6. The common platform binaries are here:

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge October 1, 2025 09:20
@renovate
Copy link
Contributor Author

renovate bot commented Oct 1, 2025 •
edited
Loading

ℹ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 25 additional dependencies were updated

Details:

Package Change
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/ProtonMail/go-crypto v1.1.3 -> v1.1.5
github.com/cyphar/filepath-securejoin v0.3.1 -> v0.3.6
github.com/gkampitakis/ciinfo v0.3.0 -> v0.3.2
github.com/go-openapi/errors v0.22.0 -> v0.22.1
github.com/go-openapi/swag v0.23.0 -> v0.23.1
github.com/google/certificate-transparency-go v1.2.1 -> v1.3.1
github.com/magiconair/properties v1.8.7 -> v1.8.9
github.com/mailru/easyjson v0.7.7 -> v0.9.0
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/term v0.5.0 -> v0.5.2
github.com/pjbgf/sha1cd v0.3.0 -> v0.3.2
github.com/rogpeppe/go-internal v1.13.1 -> v1.13.2-0.20241226121412-a5dc8ff20d0a
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/sigstore/protobuf-specs v0.3.2 -> v0.4.1
github.com/sigstore/timestamp-authority v1.2.2 -> v1.2.4
github.com/spf13/pflag v1.0.6 -> v1.0.7
github.com/tidwall/gjson v1.17.3 -> v1.18.0
golang.org/x/crypto v0.38.0 -> v0.40.0
golang.org/x/net v0.40.0 -> v0.41.0
golang.org/x/sync v0.15.0 -> v0.16.0
golang.org/x/sys v0.33.0 -> v0.34.0
golang.org/x/term v0.32.0 -> v0.33.0
golang.org/x/text v0.25.0 -> v0.27.0
google.golang.org/api v0.215.0 -> v0.228.0
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 32 additional dependencies were updated

Details:

Package Change
cloud.google.com/go v0.116.0 -> v0.118.3
cloud.google.com/go/auth v0.13.0 -> v0.15.0
cloud.google.com/go/auth/oauth2adapt v0.2.6 -> v0.2.8
cloud.google.com/go/iam v1.2.2 -> v1.4.1
cloud.google.com/go/monitoring v1.21.2 -> v1.24.0
cloud.google.com/go/storage v1.49.0 -> v1.50.0
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.48.1 -> v0.49.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.48.1 -> v0.49.0
github.com/aws/aws-sdk-go-v2/service/ecr v1.32.2 -> v1.40.3
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.25.4 -> v1.31.2
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20240826150212-5dc58b6e29f8 -> v0.9.1
github.com/coreos/go-oidc/v3 v3.11.0 -> v3.12.0
github.com/gkampitakis/ciinfo v0.3.0 -> v0.3.2
github.com/go-openapi/errors v0.22.0 -> v0.22.1
github.com/go-openapi/swag v0.23.0 -> v0.23.1
github.com/google/certificate-transparency-go v1.2.1 -> v1.3.1
github.com/google/s2a-go v0.1.8 -> v0.1.9
github.com/googleapis/enterprise-certificate-proxy v0.3.4 -> v0.3.6
github.com/jmespath/go-jmespath v0.4.0 -> v0.4.1-0.20220621161143-b0104c826a24
github.com/mailru/easyjson v0.7.7 -> v0.9.0
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/term v0.5.0 -> v0.5.2
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/sigstore/fulcio v1.6.3 -> v1.6.6
github.com/sigstore/protobuf-specs v0.3.2 -> v0.4.1
github.com/sigstore/timestamp-authority v1.2.2 -> v1.2.4
github.com/tidwall/gjson v1.17.0 -> v1.18.0
go.step.sm/crypto v0.51.2 -> v0.60.0
google.golang.org/api v0.215.0 -> v0.228.0
google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 -> v0.0.0-20250303144028-a0af3efb3deb
sigs.k8s.io/release-utils v0.8.4 -> v0.11.0
File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/tektoncd/triggers v0.29.0 -> v0.29.1

@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 8 times, most recently from 9db40be to 4561648 Compare October 8, 2025 12:52
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 2 times, most recently from e73a45c to ed34230 Compare October 15, 2025 17:07
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 5 times, most recently from 187c7ea to 4a1c342 Compare October 26, 2025 19:33
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch from 4a1c342 to 07e4517 Compare October 27, 2025 16:27
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 6 times, most recently from 8477e06 to 5b4902e Compare November 6, 2025 12:51
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 3 times, most recently from 3276771 to b01d438 Compare November 12, 2025 20:14
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 10 times, most recently from 5441a3d to 06d5ebf Compare December 19, 2025 13:01
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 2 times, most recently from d7db3d3 to e8484f5 Compare December 29, 2025 15:07
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 4 times, most recently from bbb7ca9 to fae2b60 Compare January 6, 2026 14:05
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 5 times, most recently from 7235ae9 to ef30f37 Compare January 15, 2026 10:59
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 5 times, most recently from 9b0618c to 8cfa37c Compare January 22, 2026 20:36
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch from 8cfa37c to 77accb2 Compare January 24, 2026 18:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

main renovate size: XXL

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants