chore(deps): update go dependencies#371
Open
red-hat-konflux[bot] wants to merge 1 commit into
Open
Conversation
b57cb92 to
abe73a6
Compare
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
5525b7f to
fb71d28
Compare
daac8d3 to
c268eb5
Compare
7298a1c to
f0d0efc
Compare
Author
|
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.1.50→v0.1.54v1.7.0→v1.11.0v1.27.0→v1.31.0v0.9.0→v1.0.0v1.20.0→v1.24.0v1.21.0→v1.21.1v1.7.1→v1.7.2v1.41.5→v1.41.7v1.32.14→v1.32.17v1.19.14→v1.19.16v1.18.21→v1.18.23v1.4.21→v1.4.23v2.7.21→v2.7.23v1.13.7→v1.13.9v1.13.21→v1.13.23v1.50.4→v1.51.1v1.0.9→v1.0.11v1.30.15→v1.30.17v1.35.19→v1.35.21v1.41.10→v1.42.1v1.24.3→v1.25.1v4.3.0→v5.0.3v3.17.0→v3.18.0v1.9.0→v1.10.1v3.0.4→v4.1.4v0.21.4→v0.21.5v0.3.14→v0.3.15v2.21.0→v2.22.0v1.4.0→v2.3.3v2.28.0→v2.29.0v1.0.1-vault-7→v2.24.0v0.20260406.0→v0.20260512.0v2.3.0→v2.3.1v0.10.0→v0.11.0v2.1.0→v3.0.0v0.67.0→v0.68.0v0.67.0→v0.68.0v0.77.2→v0.79.0v1.27.1→v1.28.0v2.4.4→v3.0.4v3.25.3→v3.26.0v0.49.0→v0.51.0v0.52.0→v0.54.0v0.42.0→v0.44.0v0.41.0→v0.43.0v0.35.0→v0.37.0v0.274.0→v0.279.06f92a3b→3700d416f92a3b→3700d416f92a3b→3700d41v1.80.0→v1.81.0Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
chainguard-dev/sdk (chainguard.dev/sdk)
v0.1.54Compare Source
v0.1.53Compare Source
Full Changelog: chainguard-dev/sdk@v0.1.52...v0.1.53
v0.1.52Compare Source
Full Changelog: chainguard-dev/sdk@v0.1.51...v0.1.52
v0.1.51Compare Source
Full Changelog: chainguard-dev/sdk@v0.1.50...v0.1.51
googleapis/google-cloud-go (cloud.google.com/go/longrunning)
v0.13.0Compare Source
bigquery: UseLegacySQL options for CreateTable and QueryConfig. Use these
options to continue using Legacy SQL after the client switches its default
to Standard SQL.
bigquery: Support for updating dataset labels.
bigquery: Set DatasetIterator.ProjectID to list datasets in a project other
than the client's. DatasetsInProject is no longer needed and is deprecated.
bigtable: Fail ListInstances when any zones fail.
spanner: support decoding of slices of basic types (e.g. []string, []int64,
etc.)
logging/logadmin: UpdateSink no longer creates a sink if it is missing
(actually a change to the underlying service, not the client)
profiler: Service and ServiceVersion replace Target in Config.
v0.12.0Compare Source
pubsub: Subscription.Receive now uses streaming pull.
pubsub: add Client.TopicInProject to access topics in a different project
than the client.
errors: renamed errorreporting. The errors package will be removed shortly.
datastore: improved retry behavior.
bigquery: support updates to dataset metadata, with etags.
bigquery: add etag support to Table.Update (BREAKING: etag argument added).
bigquery: generate all job IDs on the client.
storage: support bucket lifecycle configurations.
v0.11.0Compare Source
Clients for spanner, pubsub and video are now in beta.
New client for DLP.
spanner: performance and testing improvements.
storage: requester-pays buckets are supported.
storage, profiler, bigtable, bigquery: bug fixes and other minor improvements.
pubsub: bug fixes and other minor improvements
v0.10.0Compare Source
pubsub: Subscription.ModifyPushConfig replaced with Subscription.Update.
pubsub: Subscription.Receive now runs concurrently for higher throughput.
vision: cloud.google.com/go/vision is deprecated. Use
cloud.google.com/go/vision/apiv1 instead.
translation: now stable.
trace: several changes to the surface. See the link below.
Code changes required from v0.9.0
pubsub: Replace
with
trace: traceGRPCServerInterceptor will be provided from *trace.Client.
Given an initialized
*trace.Clientnamedtc, instead ofwrite
trace trace.GRPCClientInterceptor will also provided from *trace.Client.
Instead of
write
trace: We removed the deprecated
trace.EnableGRPCTracing. Use the gRPCinterceptor as a dial option as shown below when initializing Cloud package
clients:
AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)
v1.7.2Compare Source
What's Changed
New Contributors
Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.1...v1.7.2
aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)
v1.41.7Compare Source
Module Highlights
github.com/aws/aws-sdk-go-v2/service/ecs: v1.41.7github.com/aws/aws-sdk-go-v2/service/glue: v1.78.0github.com/aws/aws-sdk-go-v2/service/ivschat: v1.12.5github.com/aws/aws-sdk-go-v2/service/rolesanywhere: v1.10.0github.com/aws/aws-sdk-go-v2/service/securityhub: v1.47.2v1.41.6Compare Source
aws/smithy-go (github.com/aws/smithy-go)
v1.25.1Compare Source
General Highlights
Module Highlights
github.com/aws/smithy-go: v1.25.1v1.25.0Compare Source
General Highlights
Module Highlights
github.com/aws/smithy-go: v1.25.0cenkalti/backoff (github.com/cenkalti/backoff/v4)
v5.0.3Compare Source
v5.0.2Compare Source
v5.0.1Compare Source
v5.0.0Compare Source
coreos/go-oidc (github.com/coreos/go-oidc/v3)
v3.18.0Compare Source
What's Changed
Full Changelog: coreos/go-oidc@v3.17.0...v3.18.0
fsnotify/fsnotify (github.com/fsnotify/fsnotify)
v1.10.1Compare Source
Changes and fixes
inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)
v1.10.0Compare Source
This version of fsnotify needs Go 1.23.
Changes and fixes
inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)
go-jose/go-jose (github.com/go-jose/go-jose/v3)
v4.1.4Compare Source
What's Changed
Fixes Panic in JWE decryption. See GHSA-78h2-9frx-2jm8
Full Changelog: go-jose/go-jose@v4.1.3...v4.1.4
v4.1.3Compare Source
This release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop
x/cryptoand no longer have any external dependencies in go-jose outside of the standard library!This release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.
What's Changed
Full Changelog: go-jose/go-jose@v4.1.2...v4.1.3
v4.1.2Compare Source
What's Changed
go-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.
New Contributors
Full Changelog: go-jose/go-jose@v4.1.1...v4.1.2
v4.1.1Compare Source
What's Changed
New Contributors
Full Changelog: go-jose/go-jose@v4.1.0...v4.1.1
v4.1.0Compare Source
What's Changed
signatureAlgorithmsargument by @tgeoghegan in #163New Contributors
Full Changelog: go-jose/go-jose@v4.0.5...v4.1.0
v4.0.5Compare Source
What's Changed
Fixes GHSA-c6gw-w398-hv78
Various other dependency updates, small fixes, and documentation updates in the full changelog
New Contributors
Full Changelog: go-jose/go-jose@v4.0.4...v4.0.5
v4.0.4: Version 4.0.4Compare Source
Fixed
v4.0.3: Version 4.0.3Compare Source
Changed
v4.0.2: Version 4.0.2Compare Source
What's Changed
New Contributors
Full Changelog: go-jose/go-jose@v4.0.1...v4.0.2
v4.0.1: Version 4.0.1Compare Source
Fixed
amounts of memory and CPU when decompressed by
DecryptorDecryptMulti.Those functions now return an error if the decompressed data would exceed
250kB or 10x the compressed size (whichever is larger). Thanks to
Enze Wang@Alioth and Jianjun Chen@Zhongguancun Lab (@zer0yu and @chenjj)
for reporting.
v4.0.0: Version 4.0.0Compare Source
This release makes some breaking changes in order to more thoroughly address the vulnerabilities discussed in Three New Attacks Against JSON Web Tokens, "Sign/encrypt confusion", "Billion hash attack", and "Polyglot token".
Changed
ParseSigned, ParseDetached, jwt.ParseEncrypted, jwt.ParseSigned,
jwt.ParseSignedAndEncrypted (#69, #74)
Added
v3.0.5Compare Source
What's Changed
Fixes GHSA-78h2-9frx-2jm8
We recommend migrating from v3 to v4, and we will stop support v3 in the near future.
Full Changelog: go-jose/go-jose@v3.0.4...v3.0.5
google/go-containerregistry (github.com/google/go-containerregistry)
v0.21.5Compare Source
What's Changed
Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5
googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)
v0.3.15Compare Source
What's Changed
Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.14...v0.3.15
googleapis/gax-go (github.com/googleapis/gax-go/v2)
v2.22.0: v2: v2.22.0Compare Source
v2.22.0 (2026-04-14)
grpc-ecosystem/go-grpc-middleware (github.com/grpc-ecosystem/go-grpc-middleware)
v2.3.3Compare Source
What's Changed
handledmetrics with context labels by @t-bowcock in #810New Contributors
Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.2...v2.3.3
v2.3.2Compare Source
What's Changed
New Contributors
Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.1...v2.3.2
v2.3.1Compare Source
What's Changed
New Contributors
Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.0...v2.3.1
v2.3.0Compare Source
What's Changed
New Contributors
Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.2.0...v2.3.0
v2.2.0Compare Source
What's Changed
New Contributors
Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.1.0...v2.2.0
v2.1.0Compare Source
What's Changed
InitializeMetricssignature to allow use withxds.GRPCServerby @bozaro in #689New Contributors
Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.0.1...v2.1.0
v2.0.1Compare Source
What's Changed
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.