Bump the go-deps group with 8 updates by dependabot[bot] · Pull Request #915 · fluxcd/image-reflector-controller

dependabot · 2026-07-01T21:33:33Z

Bumps the go-deps group with 8 updates:

Package	From	To
github.com/dgraph-io/badger/v4	`4.9.1`	`4.9.2`
github.com/fluxcd/pkg/apis/event	`0.27.0`	`0.28.0`
github.com/fluxcd/pkg/apis/meta	`1.30.0`	`1.31.0`
github.com/fluxcd/pkg/artifact	`0.18.0`	`0.19.0`
github.com/fluxcd/pkg/auth	`0.54.0`	`0.55.0`
github.com/fluxcd/pkg/runtime	`0.110.0`	`0.111.0`
github.com/google/go-containerregistry	`0.21.6`	`0.21.7`
github.com/onsi/gomega	`1.41.0`	`1.42.1`

Updates github.com/dgraph-io/badger/v4 from 4.9.1 to 4.9.2

Release notes

Sourced from github.com/dgraph-io/badger/v4's releases.

v4.9.2

What's Changed

chore(core): remove unused event log by @xqqp in dgraph-io/badger#2257

fix(cd): upload build artifacts to GitHub Release by @matthewmcneely in dgraph-io/badger#2273

fix: Prevent NPE on sync with inmemory DB by @alpe in dgraph-io/badger#2264

perf: skip lsm lookup for expired entries during value log rewrite by @lamb007 in dgraph-io/badger#2269

chore: update jemalloc to 5.3.1 by @solracsf in dgraph-io/badger#2275

fix : read only user should be able to open db on ReadOnly mode by @Naelpuissant in dgraph-io/badger#2268

fix(compaction): clamp baseLevel to >=1 to prevent L0->L0 panic on la… by @shiva-istari in dgraph-io/badger#2296

New Contributors

@xqqp made their first contribution in dgraph-io/badger#2257

@alpe made their first contribution in dgraph-io/badger#2264

@lamb007 made their first contribution in dgraph-io/badger#2269

@Naelpuissant made their first contribution in dgraph-io/badger#2268

@shiva-istari made their first contribution in dgraph-io/badger#2296

Full Changelog: dgraph-io/badger@v4.9.1...v4.9.2

Changelog

Sourced from github.com/dgraph-io/badger/v4's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

Commits

284cea0 fix(compaction): clamp baseLevel to >=1 to prevent L0->L0 panic on la… (#2296)
897f12f fix : read only user should be able to open db on ReadOnly mode (#2268)
ca9e10b enh: compile with jemalloc 5.3.1 (#2275)
7427d56 perf: skip lsm lookup for expired entries during value log rewrite (#2269)
773a835 fix: Prevent NPE on sync with inmemory DB (#2264)
abbb9a5 fix(cd): upload build artifacts to GitHub Release (#2273)
796cb85 chore(core): remove unused event log (#2257)
See full diff in compare view

Updates github.com/fluxcd/pkg/apis/event from 0.27.0 to 0.28.0

Commits

00782ed Merge pull request #917 from fluxcd/test-auth-providers
3976c50 [RFC-0010] Add tests for auth providers
182841a Merge pull request #916 from fluxcd/cache-op-label
1e41450 Introduce operation label for cache event metric
aa3cde9 Merge pull request #909 from fluxcd/auth-azure
9e0e8bc [RFC-0010] Add azure auth library
7eae091 Merge pull request #908 from fluxcd/auth-gcp
9f68942 Merge pull request #907 from fluxcd/auth-aws
bb7cb58 Merge pull request #906 from fluxcd/auth-core
45fbfee [RFC-0010] Add gcp auth library
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.30.0 to 1.31.0

Commits

b98e2b0 Merge pull request #1251 from fluxcd/release-main
2dfcb7c Prepare for release
dd6b016 Merge pull request #1253 from fluxcd/upgrade-k8s-36.2
2d00796 Upgrade kubernetes to 1.36.2
827f6c3 Merge pull request #1249 from fluxcd/upgrade-go-git-providers
be6d462 Upgrade go-git-providers and go-github
023a357 Merge pull request #1248 from fluxcd/label-2.9
7e8856d Add backport label for Flux 2.9
ae10469 Merge pull request #1246 from fluxcd/ks-always-subst
2cd36cb kustomize: add tests for empty vars with strict sub and omitted without
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/artifact from 0.18.0 to 0.19.0

Commits

e32ccc2 Merge pull request #763 from fluxcd/kubernetes-1.30
2b974af Update sigs.k8s.io/controller-tools to v0.15.0
52c1fc5 Update sigs.k8s.io/controller-runtime to v0.18.0
c906252 Update dependencies to Kubernetes 1.30
92c1348 Merge pull request #764 from fluxcd/dependabot/github_actions/ci-e44cfae560
ccb916a build(deps): bump the ci group with 3 updates
6081556 Merge pull request #761 from fluxcd/kustomize-name-prefix-suffix
abf5675 kustomize: Add support for namePrefix and nameSuffix
98d2522 Merge pull request #760 from fluxcd/dependabot/github_actions/ci-8f082d4f6d
efcd824 build(deps): bump docker/setup-buildx-action in the ci group
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/auth from 0.54.0 to 0.55.0

Commits

6ce1a83 Merge pull request #1019 from fluxcd/update-otel
828f74f Prepare release
e7a2b15 Update otel to v1.38.0
d2f54dd Merge pull request #1018 from fluxcd/meta-artifact
9adb480 apis: Add Artifact type to meta package
7201e2c Merge pull request #1017 from fluxcd/kustomize-ignore-components
929f4b4 kustomize: Add ignoreMissingComponents option
a5e02ce Merge pull request #1013 from fluxcd/meta-history
71c0a08 Prepare release
4aaf176 meta: Add History API for tracking reconcile runs in status
See full diff in compare view

Updates github.com/fluxcd/pkg/runtime from 0.110.0 to 0.111.0

Commits

b98e2b0 Merge pull request #1251 from fluxcd/release-main
2dfcb7c Prepare for release
dd6b016 Merge pull request #1253 from fluxcd/upgrade-k8s-36.2
2d00796 Upgrade kubernetes to 1.36.2
827f6c3 Merge pull request #1249 from fluxcd/upgrade-go-git-providers
be6d462 Upgrade go-git-providers and go-github
023a357 Merge pull request #1248 from fluxcd/label-2.9
7e8856d Add backport label for Flux 2.9
ae10469 Merge pull request #1246 from fluxcd/ks-always-subst
2cd36cb kustomize: add tests for empty vars with strict sub and omitted without
Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.6 to 0.21.7

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.7

What's Changed

tarball: return error instead of panicking on missing rootfs.diff_ids by @iahsanGill in google/go-containerregistry#2304

gcrane: honor --platform flag in copy by @iahsanGill in google/go-containerregistry#2307

mutate: verify layer digests in Extract and Time by @momenashrafff in google/go-containerregistry#2303

tarball: close layer readers during Write by @nandbhat in google/go-containerregistry#2308

build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in google/go-containerregistry#2311

build(deps): bump github.com/docker/cli from 29.4.3+incompatible to 29.5.2+incompatible in the go-deps group across 1 directory by @dependabot[bot] in google/go-containerregistry#2312

BUGFIX: Fail with error when read exceeds maximum by @inteon in google/go-containerregistry#2328

build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in google/go-containerregistry#2327

fix(name): anchor loopback registry detection by @rohan-patnaik in google/go-containerregistry#2314

Reject symlinks in OCI layout blobs by @mosskappa in google/go-containerregistry#2306

fix(crane): avoid creating export tar on pull failure by @Haihan-Jiang in google/go-containerregistry#2318

feat(kubernetes): allow ignoring pull secrets by @rohan-patnaik in google/go-containerregistry#2315

fix(name): preserve localhost registry references by @rohan-patnaik in google/go-containerregistry#2316

pkg/registry: export ErrNotFound by @malt3 in google/go-containerregistry#2176

pkg/registry: export RedirectError by @malt3 in google/go-containerregistry#2177

build(deps): bump the go-deps group across 1 directory with 2 updates by @dependabot[bot] in google/go-containerregistry#2343

build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in google/go-containerregistry#2344

fix: prevent SSRF in google.List() pagination by @tufstraka in google/go-containerregistry#2332

internal/gzip: fix goroutine leak in ReadCloserLevel by @amarkdotdev in google/go-containerregistry#2347

fix(transport): apply refreshed bearer token after cross-host redirect by @64johnlee in google/go-containerregistry#2337

build(deps): bump the go-deps group across 3 directories with 4 updates by @dependabot[bot] in google/go-containerregistry#2348

fix(tarball): normalize paths when matching files by @bstoll in google/go-containerregistry#2334

transport: do not re-attach bearer token after cross-host redirect by @evilgensec in google/go-containerregistry#2349

Bump CI go version to 1.26.4 by @Subserial in google/go-containerregistry#2350

New Contributors

@momenashrafff made their first contribution in google/go-containerregistry#2303

@nandbhat made their first contribution in google/go-containerregistry#2308

@inteon made their first contribution in google/go-containerregistry#2328

@rohan-patnaik made their first contribution in google/go-containerregistry#2314

@mosskappa made their first contribution in google/go-containerregistry#2306

@Haihan-Jiang made their first contribution in google/go-containerregistry#2318

@tufstraka made their first contribution in google/go-containerregistry#2332

@amarkdotdev made their first contribution in google/go-containerregistry#2347

@64johnlee made their first contribution in google/go-containerregistry#2337

@bstoll made their first contribution in google/go-containerregistry#2334

Full Changelog: google/go-containerregistry@v0.21.6...v0.21.7

Commits

c68d899 Bump go version to 1.26.4 (#2350)
da61d86 transport: do not re-attach bearer token after cross-host redirect (#2349)
09fe1e5 fix(tarball): normalize paths when matching files (#2334)
5baa399 build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)
97a8a17 fix(transport): apply refreshed bearer token after cross-host redirect (#2337)
e963497 internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)
02649ea fix: prevent SSRF in google.List() pagination (#2332)
7204b40 build(deps): bump the actions group across 1 directory with 2 updates (#2344)
4cfaa93 build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)
6849394 pkg/registry: export RedirectError (#2177)
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.41.0 to 1.42.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

Commits

ced6c1c v1.42.1
2beb9fb v1.42.1 (full)
006cd2c bump al lthe things
35ca084 v1.42.0
d72697b v1.42.0 (full)
1f95d86 add a set of claude skills as a marketplace plugin
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 8 updates: | Package | From | To | | --- | --- | --- | | [github.com/dgraph-io/badger/v4](https://github.com/dgraph-io/badger) | `4.9.1` | `4.9.2` | | [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.27.0` | `0.28.0` | | [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.30.0` | `1.31.0` | | [github.com/fluxcd/pkg/artifact](https://github.com/fluxcd/pkg) | `0.18.0` | `0.19.0` | | [github.com/fluxcd/pkg/auth](https://github.com/fluxcd/pkg) | `0.54.0` | `0.55.0` | | [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.110.0` | `0.111.0` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.6` | `0.21.7` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.41.0` | `1.42.1` | Updates `github.com/dgraph-io/badger/v4` from 4.9.1 to 4.9.2 - [Release notes](https://github.com/dgraph-io/badger/releases) - [Changelog](https://github.com/dgraph-io/badger/blob/main/CHANGELOG.md) - [Commits](dgraph-io/badger@v4.9.1...v4.9.2) Updates `github.com/fluxcd/pkg/apis/event` from 0.27.0 to 0.28.0 - [Commits](fluxcd/pkg@git/v0.27.0...git/v0.28.0) Updates `github.com/fluxcd/pkg/apis/meta` from 1.30.0 to 1.31.0 - [Commits](fluxcd/pkg@apis/meta/v1.30.0...apis/meta/v1.31.0) Updates `github.com/fluxcd/pkg/artifact` from 0.18.0 to 0.19.0 - [Commits](fluxcd/pkg@git/v0.18.0...git/v0.19.0) Updates `github.com/fluxcd/pkg/auth` from 0.54.0 to 0.55.0 - [Commits](fluxcd/pkg@oci/v0.54.0...oci/v0.55.0) Updates `github.com/fluxcd/pkg/runtime` from 0.110.0 to 0.111.0 - [Commits](fluxcd/pkg@runtime/v0.110.0...runtime/v0.111.0) Updates `github.com/google/go-containerregistry` from 0.21.6 to 0.21.7 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.6...v0.21.7) Updates `github.com/onsi/gomega` from 1.41.0 to 1.42.1 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.41.0...v1.42.1) --- updated-dependencies: - dependency-name: github.com/dgraph-io/badger/v4 dependency-version: 4.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/apis/event dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/apis/meta dependency-version: 1.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/artifact dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/auth dependency-version: 0.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/runtime dependency-version: 0.111.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/onsi/gomega dependency-version: 1.42.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency label Jul 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-deps group with 8 updates#915

Bump the go-deps group with 8 updates#915
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-63fee06c67

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026

v4.9.2

What's Changed

New Contributors

Changelog

v0.21.7

What's Changed

New Contributors

v1.42.1

1.42.1

v1.42.0

1.42.0

1.42.1

1.42.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants