chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #591 · securesign/rekor

red-hat-konflux · 2026-04-20T11:21:40Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
cel.dev/expr	indirect	patch	`v0.25.1` → `v0.25.2`
cloud.google.com/go	indirect	minor	`v0.121.2` → `v0.123.0`
cloud.google.com/go/auth	indirect	minor	`v0.16.2` → `v0.20.0`
cloud.google.com/go/iam	indirect	minor	`v1.5.2` → `v1.11.0`
cloud.google.com/go/kms	indirect	minor	`v1.22.0` → `v1.31.0`
cloud.google.com/go/longrunning	indirect	major	`v0.6.7` → `v1.0.0`
cloud.google.com/go/monitoring	indirect	minor	`v1.24.2` → `v1.29.0`
cloud.google.com/go/profiler	require	minor	`v0.4.3` → `v0.6.0`
cloud.google.com/go/pubsub	require	major	`v1.49.0` → `v2.6.0`
cloud.google.com/go/storage	indirect	minor	`v1.55.0` → `v1.62.1`
filippo.io/edwards25519	indirect	minor	`v1.1.0` → `v1.2.0`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.18.0` → `v1.21.1`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	minor	`v1.10.1` → `v1.13.1`
github.com/Azure/azure-sdk-for-go/sdk/internal	indirect	minor	`v1.11.1` → `v1.12.0`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.4.2` → `v1.7.2`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	indirect	minor	`v1.30.0` → `v1.32.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	indirect	minor	`v0.51.0` → `v0.56.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	indirect	minor	`v0.51.0` → `v0.56.0`
github.com/Masterminds/sprig/v3	indirect	minor	`v3.2.3` → `v3.3.0`
github.com/aws/aws-sdk-go	indirect	patch	`v1.55.6` → `v1.55.8`
github.com/aws/aws-sdk-go-v2	indirect	minor	`v1.36.4` → `v1.41.7`
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	indirect	minor	`v1.6.10` → `v1.7.10`
github.com/aws/aws-sdk-go-v2/config	indirect	minor	`v1.29.16` → `v1.32.17`
github.com/aws/aws-sdk-go-v2/credentials	indirect	minor	`v1.17.69` → `v1.19.16`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	minor	`v1.16.31` → `v1.18.23`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	indirect	minor	`v1.17.77` → `v1.22.18`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	minor	`v1.3.35` → `v1.4.23`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	indirect	minor	`v2.6.35` → `v2.7.23`
github.com/aws/aws-sdk-go-v2/internal/ini	indirect	patch	`v1.8.3` → `v1.8.6`
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	minor	`v1.3.34` → `v1.4.24`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	minor	`v1.12.3` → `v1.13.9`
github.com/aws/aws-sdk-go-v2/service/internal/checksum	indirect	minor	`v1.7.2` → `v1.9.15`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	minor	`v1.12.16` → `v1.13.23`
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	indirect	minor	`v1.18.15` → `v1.19.23`
github.com/aws/aws-sdk-go-v2/service/kms	indirect	minor	`v1.41.0` → `v1.51.1`
github.com/aws/aws-sdk-go-v2/service/s3	indirect	minor	`v1.80.0` → `v1.101.0`
github.com/aws/aws-sdk-go-v2/service/sso	indirect	minor	`v1.25.4` → `v1.30.17`
github.com/aws/aws-sdk-go-v2/service/ssooidc	indirect	minor	`v1.30.2` → `v1.35.21`
github.com/aws/aws-sdk-go-v2/service/sts	indirect	minor	`v1.33.21` → `v1.42.1`
github.com/aws/smithy-go	indirect	minor	`v1.22.3` → `v1.25.1`
github.com/cavaliercoder/go-rpm	require	major	`v0.0.0-20200122174316-8cb9fd9c31a8` → `v1.3.0`
github.com/cenkalti/backoff/v4	indirect	major	`v4.3.0` → `v5.0.3`
github.com/cncf/xds/go	indirect	digest	`ee656c7` → `dba9d58`
github.com/danieljoos/wincred	indirect	patch	`v1.2.2` → `v1.2.3`
github.com/envoyproxy/go-control-plane/envoy	indirect	minor	`v1.36.0` → `v1.37.0`
github.com/envoyproxy/protoc-gen-validate	indirect	patch	`v1.3.0` → `v1.3.3`
github.com/fsnotify/fsnotify	indirect	minor	`v1.9.0` → `v1.10.1`
github.com/fxamacker/cbor/v2	indirect	minor	`v2.7.0` → `v2.9.2`
github.com/go-chi/chi	require	major	`v4.1.2+incompatible` → `v5.2.5`
github.com/go-openapi/analysis	indirect	minor	`v0.23.0` → `v0.25.0`
github.com/go-openapi/errors	indirect	patch	`v0.22.1` → `v0.22.7`
github.com/go-openapi/errors	require	patch	`v0.22.1` → `v0.22.7`
github.com/go-openapi/inflect	indirect	patch	`v0.21.2` → `v0.21.5`
github.com/go-openapi/jsonpointer	indirect	minor	`v0.21.1` → `v0.23.1`
github.com/go-openapi/jsonreference	indirect	patch	`v0.21.0` → `v0.21.5`
github.com/go-openapi/loads	indirect	minor	`v0.22.0` → `v0.23.3`
github.com/go-openapi/loads	require	minor	`v0.22.0` → `v0.23.3`
github.com/go-openapi/runtime	indirect	minor	`v0.28.0` → `v0.29.5`
github.com/go-openapi/runtime	require	minor	`v0.28.0` → `v0.29.5`
github.com/go-openapi/spec	indirect	minor	`v0.21.0` → `v0.22.4`
github.com/go-openapi/spec	require	minor	`v0.21.0` → `v0.22.4`
github.com/go-openapi/strfmt	indirect	minor	`v0.23.0` → `v0.26.2`
github.com/go-openapi/strfmt	require	minor	`v0.23.0` → `v0.26.2`
github.com/go-openapi/swag	indirect	minor	`v0.23.1` → `v0.26.0`
github.com/go-openapi/swag	require	minor	`v0.23.1` → `v0.26.0`
github.com/go-openapi/validate	indirect	minor	`v0.24.0` → `v0.25.2`
github.com/go-openapi/validate	require	minor	`v0.24.0` → `v0.25.2`
github.com/go-swagger/go-swagger	require	minor	`v0.32.3` → `v0.33.2`
github.com/go-viper/mapstructure/v2	indirect	minor	`v2.2.1` → `v2.5.0`
github.com/godbus/dbus/v5	indirect	minor	`v5.1.0` → `v5.2.2`
github.com/golang-jwt/jwt/v5	indirect	minor	`v5.2.2` → `v5.3.1`
github.com/google/go-containerregistry	indirect	minor	`v0.20.3` → `v0.21.5`
github.com/google/pprof	indirect	digest	`c6617b8` → `92041b7`
github.com/google/rpmpack	require	patch	`v0.7.0` → `v0.7.1`
github.com/google/trillian	require	patch	`v1.7.2` → `v1.7.3`
github.com/google/wire	indirect	minor	`v0.6.0` → `v0.7.0`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.6` → `v0.3.15`
github.com/googleapis/gax-go/v2	indirect	minor	`v2.14.2` → `v2.22.0`
github.com/hashicorp/hcl	indirect	major	`v1.0.1-vault-7` → `v2.24.0`
github.com/hashicorp/vault/api	indirect	minor	`v1.22.0` → `v1.23.0`
github.com/in-toto/in-toto-golang	require	minor	`v0.9.0` → `v0.11.0`
github.com/jellydator/ttlcache/v3	indirect	minor	`v3.3.0` → `v3.4.0`
github.com/klauspost/compress	indirect	patch	`v1.18.0` → `v1.18.6`
github.com/letsencrypt/boulder	indirect	minor	`v0.0.0-20240620165639-de9c06129bec` → `v0.20260512.0`
github.com/mailru/easyjson	indirect	patch	`v0.9.0` → `v0.9.2`
github.com/mattn/go-sqlite3	indirect	patch	`v1.14.28` → `v1.14.44`
github.com/oklog/ulid	indirect	major	`v1.3.1` → `v2.1.1`
github.com/pelletier/go-toml/v2	indirect	minor	`v2.2.3` → `v2.3.1`
github.com/prometheus/client_golang	require	minor	`v1.22.0` → `v1.23.2`
github.com/prometheus/common	indirect	minor	`v0.64.0` → `v0.67.5`
github.com/prometheus/procfs	indirect	minor	`v0.16.1` → `v0.20.1`
github.com/redis/go-redis/v9	require	minor	`v9.9.0` → `v9.19.0`
github.com/sagikazarmark/locafero	indirect	minor	`v0.9.0` → `v0.12.0`
github.com/sassoftware/relic/v7	require	major	`v7.6.2` → `v8.2.0`
github.com/secure-systems-lab/go-securesystemslib	require	minor	`v0.9.0` → `v0.11.0`
github.com/sigstore/protobuf-specs	require	minor	`v0.4.2` → `v0.5.1`
github.com/sigstore/sigstore	require	minor	`v1.9.5` → `v1.10.5`
github.com/sigstore/sigstore/pkg/signature/kms/aws	require	minor	`v1.9.4` → `v1.10.5`
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	minor	`v1.9.4` → `v1.10.5`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	minor	`v1.9.4` → `v1.10.5`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	require	minor	`v1.9.4` → `v1.10.5`
github.com/spf13/afero	indirect	minor	`v1.14.0` → `v1.15.0`
github.com/spf13/cast	indirect	minor	`v1.9.0` → `v1.10.0`
github.com/spf13/cobra	require	minor	`v1.9.1` → `v1.10.2`
github.com/spf13/pflag	indirect	patch	`v1.0.6` → `v1.0.10`
github.com/spf13/pflag	require	patch	`v1.0.6` → `v1.0.10`
github.com/spf13/viper	indirect	minor	`v1.20.1` → `v1.21.0`
github.com/spf13/viper	require	minor	`v1.20.1` → `v1.21.0`
github.com/theupdateframework/go-tuf	require	major	`v0.7.0` → `v2.4.1`
github.com/tink-crypto/tink-go-awskms/v2	require	major	`v2.1.0` → `v3.0.0`
github.com/tink-crypto/tink-go/v2	require	minor	`v2.4.0` → `v2.6.0`
github.com/toqueteos/webbrowser	indirect	patch	`v1.2.0` → `v1.2.1`
github.com/ulikunitz/xz	indirect	patch	`v0.5.12` → `v0.5.15`
github.com/zalando/go-keyring	indirect	patch	`v0.2.6` → `v0.2.8`
go (source)	toolchain	minor	`1.24.1` → `1.26.3`
go.mongodb.org/mongo-driver	indirect	major	`v1.17.3` → `v2.6.0`
go.opentelemetry.io/contrib/detectors/gcp	indirect	minor	`v1.39.0` → `v1.43.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.61.0` → `v0.68.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.61.0` → `v0.68.0`
go.opentelemetry.io/otel	indirect	minor	`v1.40.0` → `v1.43.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.40.0` → `v1.43.0`
go.opentelemetry.io/otel/sdk	indirect	minor	`v1.40.0` → `v1.43.0`
go.opentelemetry.io/otel/sdk/metric	indirect	minor	`v1.40.0` → `v1.43.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.40.0` → `v1.43.0`
go.step.sm/crypto	require	minor	`v0.67.0` → `v0.79.0`
go.uber.org/zap	require	minor	`v1.27.0` → `v1.28.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.2` → `v3.0.4`
gocloud.dev	require	minor	`v0.40.0` → `v0.45.0`
golang.org/x/crypto	indirect	minor	`v0.38.0` → `v0.51.0`
golang.org/x/crypto	require	minor	`v0.46.0` → `v0.51.0`
golang.org/x/exp	require	digest	`b6e5de4` → `74f9aab`
golang.org/x/mod	indirect	minor	`v0.24.0` → `v0.36.0`
golang.org/x/mod	require	minor	`v0.30.0` → `v0.36.0`
golang.org/x/net	require	minor	`v0.48.0` → `v0.54.0`
golang.org/x/oauth2	indirect	minor	`v0.34.0` → `v0.36.0`
golang.org/x/sync	indirect	minor	`v0.14.0` → `v0.20.0`
golang.org/x/sync	require	minor	`v0.19.0` → `v0.20.0`
golang.org/x/sys	indirect	minor	`v0.33.0` → `v0.44.0`
golang.org/x/sys	indirect	minor	`v0.40.0` → `v0.44.0`
golang.org/x/term	indirect	minor	`v0.38.0` → `v0.43.0`
golang.org/x/text	indirect	minor	`v0.25.0` → `v0.37.0`
golang.org/x/text	indirect	minor	`v0.32.0` → `v0.37.0`
golang.org/x/time	indirect	minor	`v0.12.0` → `v0.15.0`
golang.org/x/tools	indirect	minor	`v0.33.0` → `v0.45.0`
google.golang.org/api	require	minor	`v0.237.0` → `v0.279.0`
google.golang.org/genproto	indirect	digest	`200df99` → `3700d41`
google.golang.org/genproto/googleapis/api	indirect	digest	`ff82c1b` → `3700d41`
google.golang.org/genproto/googleapis/rpc	require	digest	`ff82c1b` → `3700d41`
google.golang.org/grpc	require	minor	`v1.79.3` → `v1.81.0`
google.golang.org/protobuf	require	patch	`v1.36.10` → `v1.36.11`
gopkg.in/ini.v1	require	patch	`v1.67.0` → `v1.67.2`
gopkg.in/yaml.v2	indirect	major	`v2.4.0` → `v3.0.1`
gopkg.in/yaml.v2	require	major	`v2.4.0` → `v3.0.1`
k8s.io/klog/v2	indirect	minor	`v2.130.1` → `v2.140.0`
sigs.k8s.io/release-utils	require	minor	`v0.11.1` → `v0.12.4`
sigs.k8s.io/yaml	require	minor	`v1.5.0` → `v1.6.0`
software.sslmate.com/src/go-pkcs12	indirect	minor	`v0.5.0` → `v0.7.1`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

google/cel-spec (cel.dev/expr)

`v0.25.2`

Compare Source

What's Changed

Add conformance tests for (string).reverse() by @jnthntatum in #491
Updates to the conformance tests for integer values in %e and %f format directives by @TristonianJones in #495
Add automated BCR publishing on release tags by @mmorel-35 in #498
Add clarification on scoping rules. by @jnthntatum in #506
Networking extension conformance tests by @TristonianJones in #507
Add conformance test cases for null assignability around repeated fields and maps by @l46kok in #510

New Contributors

@mmorel-35 made their first contribution in #498

Full Changelog: google/cel-spec@v0.25.1...v0.25.2

googleapis/google-cloud-go (cloud.google.com/go)

`v0.123.0`

Compare Source

Features

internal/stategen: Populate the latest googleapis commit (#12880) (7b017a0)
librariangen: Implement the build command (#12817) (14734c8)

Bug Fixes

internal/librariangen: Add link to source commit in release notes (#12881) (1c06cc6)
internal/librariangen: Fix CHANGES.md headers (#12849) (baf515d)
internal/librariangen: Remove go mod init/tidy from postprocessor (#12832) (1fe506a)
internal/librariangen: Test for error path with flags (#12830) (f0da7b2)
internal/postprocessor: Add dlp to skip-module-scan-paths (#12857) (45a7d9b)
librariangen: Honor original container contract (#12846) (71c8fd3)
librariangen: Improvements to release-init (#12842) (0db677a)
stategen: Specify an appropriate tag format for google-cloud-go (#12835) (ffcff33)

`v0.122.0`

Compare Source

Features

internal/librariangen: Add release-init command (#12751) (52e84cc)

Bug Fixes

internal/godocfx: Better support for v2 modules (#12797) (4bc8785)
internal/godocfx: Module detection when tidy errors (#12801) (83d46cd)
internal/librariangen: Fix goimports errors (#12765) (83bdaa4)

`v0.121.6`

Compare Source

Bug Fixes

internal/librariangen: Fix Dockerfile permissions for go mod tidy (#12704) (0e70a0b)

`v0.121.5`

Compare Source

Bug Fixes

internal/librariangen: Get README title from service config yaml (#12676) (b3b8f70)
internal/librariangen: Update source_paths to source_roots in generate-request.json (#12691) (2adb6f9)

`v0.121.4`

Compare Source

Bug Fixes

geminidataanalytics: Correct resource reference type for parent field in data_chat_service.proto (98ba6f0)
internal/postprocessor: Add git (#12524) (82030ee)

`v0.121.3`

Compare Source

Documentation

impersonate: Address TODO in impersonate/example_test.go (#12401) (dd096ec)

FiloSottile/edwards25519 (filippo.io/edwards25519)

`v1.2.0`

Compare Source

`v1.1.1`

Compare Source

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.7.2`

Compare Source

What's Changed

Adjust constants used in FMI tests by @Avery-Dunn in #608
Update version to 1.7.1 by @Avery-Dunn in #607
Add MSAL client metadata headers to IMDS managed identity requests by @Copilot in #611
Disable gzip compression #613 by @4gust in #616
Update version.go by @4gust in #617

New Contributors

@Copilot made their first contribution in #611

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.1...v1.7.2

`v1.7.1`: 1.7.1

Compare Source

What's Changed

Add FMI (Federated Managed Identity) Design Specification for MSAL Go by @4gust in #583
Fix bug in refresh token partition check by @Avery-Dunn in #606
Improve instance discovery resiliency and sovereign cloud support by @Avery-Dunn in #604

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.0...v1.7.1

`v1.7.0`: 1.7.0

Compare Source

What's Changed

Add WithPrompt option for AuthCodeURL by @szogoon in #585
Use form_post response mode for interactive authentication by @ashok672 in #596

New Contributors

@szogoon made their first contribution in #585
@ashok672 made their first contribution in #596

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.6.0...v1.7.0

`v1.6.0`

Compare Source

What's Changed

Deprecate ROPC flow by @Ugonnaak1 in #584
Added a cache lookup for AcquireTokenByCredential by @4gust in #590
Fix panic in AcquireTokenSilent for public clients due to nil Credential by @4gust in #581
Adding support for FMI (Federated Managed Identity) by @4gust in #586
Adjust issuer validation to handle cases where instance discovery is not performed by @Avery-Dunn in #591

New Contributors

@Ugonnaak1 made their first contribution in #584

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.5.0...v1.6.0

`v1.5.0`

Compare Source

What's Changed

Bump github.com/golang-jwt/jwt/v5 from 5.0.0 to 5.2.2 by @dependabot[bot] in #563
Added a FIC test by @4gust in #557
Fix CodeQL warning 'Cross-site scripting vulnerability due to user-provided value by @fengga in #566
fix: support both login.partner.microsoftonline.cn and login.chinaclo… by @Achiket123 in #575
Add validation for issuer returned by OIDC endpoint by @Avery-Dunn in #576
#572 - Update spelling of client by @equalsgibson in #573

New Contributors

@dependabot[bot] made their first contribution in #563
@fengga made their first contribution in #566
@Achiket123 made their first contribution in #575
@Avery-Dunn made their first contribution in #576
@equalsgibson made their first contribution in #573

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.4.2...v1.5.0

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

`v0.56.0`: v1.32.0/v0.56.0

What's Changed

Support universe domains in collector exporter client configuration by @dashpole in #1097
Don't pass credentials fetched using FindDefaultCredentials by @dashpole in #1098
googleclientauthextension: support Proxy-Authorization header by @lindeskar in #1105
Improve unit tests for gcp auth extension by @dashpole in #1103
Allow providing a context to create the monitoring client by @dashpole in #1096
Add support for go 1.26 by @dashpole in #1107
chore(deps): update module golang.org/x/crypto to v0.45.0 [security] by @renovate-bot in #1102
Don't allow modifying the default scopes by @dashpole in #1109
Ignore versions in the user agent header when comparing fixtures by @dashpole in #1115
Bump go version to resolve govulncheck failures by @dashpole in #1114
Separate out govulncheck into its own CI job by @dashpole in #1113
Normalize user agents in span attributes as well by @dashpole in #1117
fix(deps): update module google.golang.org/grpc to v1.79.3 [security] by @jefferbrecht in #1131
Prepare for v1.32.0/v0.56.0 by @dashpole in #1132

New Contributors

@lindeskar made their first contribution in #1105
@jefferbrecht made their first contribution in #1131

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.55.0...v0.56.0

`v0.55.0`: v1.31.0/v0.55.0

What's Changed

Add feature gate to allow sending log trace context without a prefix by @dashpole in #1079
[exporter/collector/logs] Support httpRequest.status field as integer or string containing an integer. by @franciscovalentecastro in #1080
Fix CI by @dashpole in #1086
precompile regex from resource filters by @dashpole in #1085
Add region tags in OTLP Trace Sample by @psx95 in #1089
[exporter/collector/logs] Create Int32OrString and Int64OrString to handle integer fields in gcp.http_request. by @franciscovalentecastro in #1091
[chore] Pre-release steps for opentelemetry-operations-go repo release. by @franciscovalentecastro in #1092

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.54.0...v0.55.0

`v0.54.0`: v1.30.0/v0.54.0

What's Changed

Add OTel Logging sample by @psx95 in #1055
Update slog example by @psx95 in #1056
Show structured logging in Go by @psx95 in #1057
log project name when metric requests fail by @dashpole in #1059
Migrate from pkg/translator/prometheus to otlptranslator by @dashpole in #1061
feat: Populate description for gcm.TimeSeries by @bwplotka in #1063
Bump mapstructure dependency manually by @braydonk in #1066
post-release: fix segfault in script when no replace is found by @ridwanmsharif in #1025
Update all dependencies, bump go version by @dashpole in #1069
prepare for v1.30.0/v0.54.0 by @dashpole in #1072

New Contributors

@bwplotka made their first contribution in #1063

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0

`v0.53.0`: v1.29.0/v0.53.0

What's Changed

exporter/metric: add WithMetricClient option by @enocom in #1033
go.mod: use go 1.23 by @braydonk in #1048

New Contributors

@enocom made their first contribution in #1033

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.52.0...v0.53.0

`v0.52.0`: v1.28.0/v0.52.0

What's Changed

chore(deps): update go version from 1.2x.x to 1.23.8 and 1.24.0 to 1.24.2 in go.mod files and tests. by @franciscovalentecastro in #1036
exporter/collector: Add mapping for LogSeverity values set as SeverityText to correct SeverityNumber. by @franciscovalentecastro in #1031
Allow overriding Project ID using env var by @psx95 in #1040
Update dependencies and tooling by @psx95 in #1042
Prepare for v1.28.0/v0.52.0 by @psx95 in #1045

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.51.0...v0.52.0

Masterminds/sprig (github.com/Masterminds/sprig/v3)

`v3.3.0`

Compare Source

What's Changed

Updating the Go versions used in testing by @mattfarina in #405
Change intial to initial. by @chrishalbert in #391
Updating dependencies by @mattfarina in #404
correct value by @jheyduk in #376
Updating location of mergo by @mattfarina in #406
feature: added sha512sum function by @itzik-elayev in #400
docs: Add missing link to url functions by @carlpett in #375
Update doc.go by @chey in #369
Update mathf.md by @zzhu41 in #290
Removing duplicate documentation by @mattfarina in #407
Updating the changelog for the 3.3.0 release by @mattfarina in #408

New Contributors

@chrishalbert made their first contribution in #391
@jheyduk made their first contribution in #376
@itzik-elayev made their first contribution in #400
@carlpett made their first contribution in #375
@chey made their first contribution in #369
@zzhu41 made their first contribution in #290

Full Changelog: Masterminds/sprig@v3.2.3...v3.3.0

aws/aws-sdk-go (github.com/aws/aws-sdk-go)

`v1.55.8`

Compare Source

SDK Features

Mark the module and all packages as deprecated.
- This SDK has entered end-of-support.

`v1.55.7`

Compare Source

===

SDK Bugs

service/s3/s3manager: Abort multipart download if object is modified during download
- Fixes 4986

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

`v1.41.7`

Compare Source

Module Highlights

github.com/aws/aws-sdk-go-v2/service/ecs: v1.41.7
- Documentation: Documentation only update for Amazon ECS.
github.com/aws/aws-sdk-go-v2/service/glue: v1.78.0
- Feature: Adding View related fields to responses of read-only Table APIs.
github.com/aws/aws-sdk-go-v2/service/ivschat: v1.12.5
- Documentation: Doc-only update. Changed "Resources" to "Key Concepts" in docs and updated text.
github.com/aws/aws-sdk-go-v2/service/rolesanywhere: v1.10.0
- Feature: This release increases the limit on the roleArns request parameter for the *Profile APIs that support it. This parameter can now take up to 250 role ARNs.
github.com/aws/aws-sdk-go-v2/service/securityhub: v1.47.2
- Documentation: Documentation updates for AWS Security Hub

`v1.41.6`

Compare Source

`v1.41.5`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.41.5
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/accessanalyzer: v1.45.12
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/account: v1.30.5
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/acm: v1.37.23
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/acmpca: v1.46.12
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/aiops: v1.6.21
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/amp: v1.42.9
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/amplify: v1.38.14
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/amplifybackend: v1.32.20
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder: v1.28.20
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/apigateway: v1.39.1
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi: v1.29.14
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/apigatewayv2: v1.34.1
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/appconfig: v1.43.13
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/appconfigdata: v1.23.22
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/appfabric: v1.16.21
- Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
github.com/aws/aws-sdk-go-v2/service/appflow: [v1.5

red-hat-konflux · 2026-04-20T11:21:42Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

33 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.0` -> `1.26.0`
`go.uber.org/zap`	`v1.27.0` -> `v1.27.1`
`google.golang.org/grpc`	`v1.79.3` -> `v1.81.0`
`google.golang.org/protobuf`	`v1.36.10` -> `v1.36.11`
`cloud.google.com/go/pubsub`	`v1.49.0` -> `v1.50.2`
`github.com/redis/go-redis/v9`	`v9.9.0` -> `v9.10.0`
`github.com/tink-crypto/tink-go/v2`	`v2.4.0` -> `v2.6.0`
`cloud.google.com/go/monitoring`	`v1.24.2` -> `v1.29.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.30.0` -> `v1.31.0`
`github.com/aws/aws-sdk-go`	`v1.55.6` -> `v1.55.8`
`github.com/aws/aws-sdk-go-v2`	`v1.36.4` -> `v1.41.7`
`github.com/aws/aws-sdk-go-v2/config`	`v1.29.16` -> `v1.32.17`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.35` -> `v2.7.23`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.18.15` -> `v1.19.23`
`github.com/aws/aws-sdk-go-v2/service/kms`	`v1.41.0` -> `v1.51.1`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.80.0` -> `v1.101.0`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.25.4` -> `v1.30.17`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.30.2` -> `v1.35.21`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.33.21` -> `v1.42.1`
`github.com/envoyproxy/go-control-plane/envoy`	`v1.36.0` -> `v1.37.0`
`github.com/jellydator/ttlcache/v3`	`v3.3.0` -> `v3.4.0`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.39.0` -> `v1.42.0`
`go.opentelemetry.io/otel`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/metric`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/trace`	`v1.40.0` -> `v1.43.0`
`go.yaml.in/yaml/v2`	`v2.4.2` -> `v2.4.3`
`k8s.io/klog/v2`	`v2.130.1` -> `v2.140.0`
`cloud.google.com/go/storage`	`v1.55.0` -> `v1.62.0`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/godbus/dbus/v5`	`v5.1.0` -> `v5.2.2`
`github.com/googleapis/gax-go/v2`	`v2.14.2` -> `v2.22.0`
`github.com/pelletier/go-toml/v2`	`v2.2.3` -> `v2.2.4`

File name: hack/tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

4 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.6` -> `1.25.0`
`github.com/Masterminds/semver/v3`	`v3.2.1` -> `v3.4.0`
`github.com/Masterminds/sprig/v3`	`v3.2.3` -> `v3.3.0`
`github.com/go-viper/mapstructure/v2`	`v2.2.1` -> `v2.5.0`
`github.com/pelletier/go-toml/v2`	`v2.2.3` -> `v2.2.4`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux · 2026-05-13T03:24:14Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading go1.26.3 (linux/amd64)
go: github.com/cavaliercoder/go-rpm@v1.3.0: parsing go.mod:
	module declares its path as: github.com/cavaliergopher/rpm
	        but was required as: github.com/cavaliercoder/go-rpm

red-hat-konflux Bot added the dependencies label Apr 20, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 28 times, most recently from b0e4f76 to b5b7047 Compare April 26, 2026 06:39

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 28 times, most recently from 51f6bdf to ec3baf6 Compare May 4, 2026 22:37

chore(deps): update go dependencies

f133cc7

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update go dependencies#591

chore(deps): update go dependencies#591
red-hat-konflux[bot] wants to merge 1 commit into
release-1.3from
konflux/mintmaker/release-1.3/go-deps

red-hat-konflux Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented May 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Documentation

What's Changed

New Contributors

v1.7.1: 1.7.1

What's Changed

v1.7.0: 1.7.0

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

v0.56.0: v1.32.0/v0.56.0

What's Changed

New Contributors

v0.55.0: v1.31.0/v0.55.0

What's Changed

v0.54.0: v1.30.0/v0.54.0

What's Changed

New Contributors

v0.53.0: v1.29.0/v0.53.0

What's Changed

New Contributors

v0.52.0: v1.28.0/v0.52.0

What's Changed

What's Changed

New Contributors

SDK Features

SDK Bugs

Module Highlights

General Highlights

Module Highlights

Uh oh!

red-hat-konflux Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

File name: hack/tools/go.mod

Uh oh!

red-hat-konflux Bot commented May 13, 2026

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Apr 20, 2026 •

edited

Loading

`v1.7.1`: 1.7.1

`v1.7.0`: 1.7.0

`v0.56.0`: v1.32.0/v0.56.0

`v0.55.0`: v1.31.0/v0.55.0

`v0.54.0`: v1.30.0/v0.54.0

`v0.53.0`: v1.29.0/v0.53.0

`v0.52.0`: v1.28.0/v0.52.0

red-hat-konflux Bot commented Apr 20, 2026 •

edited

Loading