Skip to content

build(deps): bump the go-deps group across 1 directory with 11 updates#1779

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-82d485e072
Closed

build(deps): bump the go-deps group across 1 directory with 11 updates#1779
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-82d485e072

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 23, 2025 •
edited
Loading

Bumps the go-deps group with 10 updates in the / directory:

Package From To
github.com/elazarl/goproxy 1.7.0 1.7.2
github.com/fluxcd/pkg/git 0.25.0 0.26.0
github.com/fluxcd/pkg/git/gogit 0.25.0 0.26.0
github.com/minio/minio-go/v7 7.0.87 7.0.91
github.com/notaryproject/notation-core-go 1.2.0 1.3.0
github.com/notaryproject/notation-go 1.3.0 1.3.2
github.com/onsi/gomega 1.36.2 1.37.0
github.com/ory/dockertest/v3 3.11.0 3.12.0
github.com/prometheus/client_golang 1.21.0 1.22.0
github.com/sigstore/sigstore 1.8.15 1.9.3

Updates github.com/elazarl/goproxy from 1.7.0 to 1.7.2

Release notes

Sourced from github.com/elazarl/goproxy's releases.

v1.7.2

What's Changed

  • Avoid breaking changes and port them to the v2 branch instead

Full Changelog: elazarl/goproxy@v1.7.1...v1.7.2

v1.7.1

What's Changed

Full Changelog: elazarl/goproxy@v1.7.0...v1.7.1

Commits
  • 09a5680 Revert "Add next protocols in default TLS configuration (#651)"
  • 948b6ca Revert "Connect related changes - add optional hooks (#504)"
  • 44bab45 Connect related changes - add optional hooks (#504)
  • 0003d27 Add next protocols in default TLS configuration (#651)
  • 591e8ff Merge pull request #646 from elazarl/dependabot/go_modules/golang.org/x/net-0...
  • be1818f Merge pull request #647 from elazarl/dependabot/go_modules/ext/golang.org/x/n...
  • 41dd5c9 Bump golang.org/x/net from 0.34.0 to 0.35.0 in /ext
  • b0ba765 Bump golang.org/x/net from 0.34.0 to 0.35.0
  • 1f65b1b Merge pull request #645 from elazarl/dependabot/go_modules/ext/golang.org/x/t...
  • 3d75816 Bump golang.org/x/text from 0.21.0 to 0.22.0 in /ext
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/git from 0.25.0 to 0.26.0

Commits
  • 877b123 Merge pull request #904 from fluxcd/git-mtls
  • ee8655f Remove duplicate err return
  • 3465f32 Wire ClientCert and ClientKey into gogit client
  • f069943 Add ClientCert and ClientKey to Git auth options
  • 7579486 Merge pull request #910 from fluxcd/renew-certs
  • b890f1b Renew testdata certs
  • f7fc565 Merge pull request #905 from fluxcd/update-sops-action
  • 28f52c0 actions: Update SOPS repository
  • 155709e Merge pull request #891 from fluxcd/fix-impersonator-namespace
  • 8af0b98 Fix: Impersonator namespace was used by both ServiceAccount and KubeConfig
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/git/gogit from 0.25.0 to 0.26.0

Commits
  • 877b123 Merge pull request #904 from fluxcd/git-mtls
  • ee8655f Remove duplicate err return
  • 3465f32 Wire ClientCert and ClientKey into gogit client
  • f069943 Add ClientCert and ClientKey to Git auth options
  • 7579486 Merge pull request #910 from fluxcd/renew-certs
  • b890f1b Renew testdata certs
  • f7fc565 Merge pull request #905 from fluxcd/update-sops-action
  • 28f52c0 actions: Update SOPS repository
  • 155709e Merge pull request #891 from fluxcd/fix-impersonator-namespace
  • 8af0b98 Fix: Impersonator namespace was used by both ServiceAccount and KubeConfig
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.13.2 to 5.16.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.16.0

What's Changed

Full Changelog: go-git/go-git@v5.15.0...v5.16.0

v5.15.0

What's Changed

Full Changelog: go-git/go-git@v5.14.0...v5.15.0

v5.14.0

What's Changed

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/crypto@v0.35.0 which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: go-git/go-git@v5.13.2...v5.14.0

Commits
  • 6d4a5c6 Merge pull request #1515 from pjbgf/regre
  • beedd6b plumbing: transport, Reintroduce SetHostKeyCallback. Fix #1514
  • 763ce2e Merge pull request #1510 from hiddeco/mtls-support
  • 5320e1b plumbing: surface transport configuration errors
  • 9bbc93b plumbing: fix unintended pointer mutation in test
  • f3783f4 plumbing: support mTLS for HTTPS protocol
  • 6f444d3 Merge pull request #1505 from pjbgf/bump
  • 9996069 v5: Bump dependencies
  • 768fda7 Merge pull request #1482 from Javier-varez/add-cert-auth-support-v5.x
  • ba9d693 plumbing: support setting custom host key algorithms along with host key call...
  • Additional commits viewable in compare view

Updates github.com/minio/minio-go/v7 from 7.0.87 to 7.0.91

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

Bugfix v7.0.90

What's Changed

New Contributors

Full Changelog: minio/minio-go@v7.0.89...v7.0.90

Bugfix Release

What's Changed

New Contributors

Full Changelog: minio/minio-go@v7.0.88...v7.0.89

Bugfix Release

What's Changed

New Contributors

Full Changelog: minio/minio-go@v7.0.87...v7.0.88

Commits

Updates github.com/notaryproject/notation-core-go from 1.2.0 to 1.3.0

Release notes

Sourced from github.com/notaryproject/notation-core-go's releases.

v1.3.0

Vote PASSED [+4 -0]: #271

Updates

  • Support of delta CRL during certificate revocation check.
  • Upgraded go version to v1.23.0
  • Error message fix and dependency updates.

What's Changed since v1.2.0

Full Changelog: notaryproject/notation-core-go@v1.2.0...v1.3.0

Commits
  • ef87896 fix: error message of SignatureAuthenticityError (#269)
  • 46726d8 build(deps): bump golang.org/x/crypto from 0.36.0 to 0.37.0 (#267)
  • b85e8f7 build(deps): bump github.com/fxamacker/cbor/v2 from 2.7.0 to 2.8.0 (#265)
  • 4d73532 build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#263)
  • 6a378d5 build(deps): bump golang.org/x/crypto from 0.35.0 to 0.36.0 (#262)
  • ea37e4e fix: use iterator instead of looping through multiple slices (#259)
  • fcf4512 build(deps): bump apache/skywalking-eyes from 0.6.0 to 0.7.0 (#258)
  • 9c4662f build(deps): bump golang.org/x/crypto from 0.32.0 to 0.35.0 (#261)
  • 441bbe8 bump: update go v1.23 (#260)
  • 7510083 feat: delta CRL (#247)
  • See full diff in compare view

Updates github.com/notaryproject/notation-go from 1.3.0 to 1.3.2

Release notes

Sourced from github.com/notaryproject/notation-go's releases.

v1.3.2

Vote PASSED [+5 -0]: #538

Update

  • Error message and dependency updates

What's Changed since notation-go v1.3.1

Full Changelog: notaryproject/notation-go@v1.3.1...v1.3.2

New Contributors

v1.3.1

Vote PASSED [+5 -0]: #517

Bug fix

  • This patch release removes the timestamp check against signing time during authentic timestamp verification due to potential time skew and the unauthenticated nature of signing time field.

What's Changed

Full Changelog: notaryproject/notation-go@v1.3.0...v1.3.1

Commits

Updates github.com/onsi/gomega from 1.36.2 to 1.37.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.37.0

1.37.0

Features

  • add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

v1.36.3

1.36.3

Maintenance

  • bump all the things [adb8b49]
  • chore: replace interface{} with any [7613216]
  • Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
  • remove spurious "toolchain" from go.mod (#819) [a0e85b9]
  • Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
  • Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
  • Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
  • Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
  • Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
  • Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
  • Fix typos (#813) [a1d518b]
Changelog

Sourced from github.com/onsi/gomega's changelog.

1.37.0

Features

  • add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

1.36.3

Maintenance

  • bump all the things [adb8b49]
  • chore: replace interface{} with any [7613216]
  • Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
  • remove spurious "toolchain" from go.mod (#819) [a0e85b9]
  • Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
  • Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
  • Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
  • Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
  • Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
  • Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
  • Fix typos (#813) [a1d518b]
Commits
  • 272fca3 v1.37.0
  • 5666f98 add To/ToNot/NotTo aliases for AsyncAssertion
  • 2251143 v1.36.3
  • adb8b49 bump all the things
  • 7613216 chore: replace interface{} with any
  • 9fe5259 Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822)
  • a0e85b9 remove spurious "toolchain" from go.mod (#819)
  • 604a8b1 Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823)
  • 36fbc84 Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772)
  • ced70d7 Bump github-pages from 231 to 232 in /docs (#778)
  • Additional commits viewable in compare view

Updates github.com/ory/dockertest/v3 from 3.11.0 to 3.12.0

Release notes

Sourced from github.com/ory/dockertest/v3's releases.

v3.12.0

What's Changed

New Contributors

Full Changelog: ory/dockertest@v3.11.0...v3.12.0

Commits

Updates github.com/prometheus/client_golang from 1.21.0 to 1.22.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.22.0 - 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

  • [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.
  • [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.
Commits
  • d50be25 Cut 1.22.0 (#1793)
  • 1043db7 Cut 1.22.0-rc.0 (#1768)
  • e575c9c promhttp: Isolate zstd support and klauspost/compress library use to promhttp...
  • f2276aa Merge pull request #1764 from prometheus/dependabot/github_actions/github-act...
  • 9df772c build(deps): bump peter-evans/create-pull-request
  • a3548c5 Merge pull request #1754 from saswatamcode/exp-eh
  • 60fd2b0 Remove go.work file for now
  • 8f9d0de exp: Add dependabot config
  • c5cf981 Merge pull request #1762 from prometheus/release-1.21
  • 8a42da3 Fix ios build. (#1758)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore from 1.8.15 to 1.9.3

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.9.3

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.2...v1.9.3

v1.9.2

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.1...v1.9.2

v1.9.1

What's Changed

Full Changelog: sigstore/sigstore@v1.9.0...v1.9.1

v1.9.0

What's Changed

Full Changelog: sigstore/sigstore@v1.8.15...v1.9.0

Commits
  • 1e63a21 add proto hash algorithm to registry (#2048)
  • 404e5b5 Bump deps (#2047)
  • 0a5d37c build(deps): Bump the gomod group across 1 directory with 2 updates (#2046)
  • a14c5f0 build(deps): Bump actions/dependency-review-action in the all group (#2044)
  • e842090 pkg/signature: add P384/P521 compatibility algo to algorithm registry (#2037)
  • ac746e0 Update linter to v2 (#2041)

@dependabot
build(deps): bump the go-deps group across 1 directory with 11 updates
dce063b 
Bumps the go-deps group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/elazarl/goproxy](https://github.com/elazarl/goproxy) | `1.7.0` | `1.7.2` |
| [github.com/fluxcd/pkg/git](https://github.com/fluxcd/pkg) | `0.25.0` | `0.26.0` |
| [github.com/fluxcd/pkg/git/gogit](https://github.com/fluxcd/pkg) | `0.25.0` | `0.26.0` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.87` | `7.0.91` |
| [github.com/notaryproject/notation-core-go](https://github.com/notaryproject/notation-core-go) | `1.2.0` | `1.3.0` |
| [github.com/notaryproject/notation-go](https://github.com/notaryproject/notation-go) | `1.3.0` | `1.3.2` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.36.2` | `1.37.0` |
| [github.com/ory/dockertest/v3](https://github.com/ory/dockertest) | `3.11.0` | `3.12.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.21.0` | `1.22.0` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.8.15` | `1.9.3` |



Updates `github.com/elazarl/goproxy` from 1.7.0 to 1.7.2
- [Release notes](https://github.com/elazarl/goproxy/releases)
- [Commits](elazarl/goproxy@v1.7.0...v1.7.2)

Updates `github.com/fluxcd/pkg/git` from 0.25.0 to 0.26.0
- [Commits](fluxcd/pkg@git/v0.25.0...git/v0.26.0)

Updates `github.com/fluxcd/pkg/git/gogit` from 0.25.0 to 0.26.0
- [Commits](fluxcd/pkg@git/v0.25.0...git/v0.26.0)

Updates `github.com/go-git/go-git/v5` from 5.13.2 to 5.16.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.13.2...v5.16.0)

Updates `github.com/minio/minio-go/v7` from 7.0.87 to 7.0.91
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](minio/minio-go@v7.0.87...v7.0.91)

Updates `github.com/notaryproject/notation-core-go` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/notaryproject/notation-core-go/releases)
- [Commits](notaryproject/notation-core-go@v1.2.0...v1.3.0)

Updates `github.com/notaryproject/notation-go` from 1.3.0 to 1.3.2
- [Release notes](https://github.com/notaryproject/notation-go/releases)
- [Changelog](https://github.com/notaryproject/notation-go/blob/main/RELEASE_CHECKLIST.md)
- [Commits](notaryproject/notation-go@v1.3.0...v1.3.2)

Updates `github.com/onsi/gomega` from 1.36.2 to 1.37.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.36.2...v1.37.0)

Updates `github.com/ory/dockertest/v3` from 3.11.0 to 3.12.0
- [Release notes](https://github.com/ory/dockertest/releases)
- [Commits](ory/dockertest@v3.11.0...v3.12.0)

Updates `github.com/prometheus/client_golang` from 1.21.0 to 1.22.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.21.0...v1.22.0)

Updates `github.com/sigstore/sigstore` from 1.8.15 to 1.9.3
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.8.15...v1.9.3)

---
updated-dependencies:
- dependency-name: github.com/elazarl/goproxy
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/git
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/git/gogit
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/minio/minio-go/v7
  dependency-version: 7.0.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/notaryproject/notation-core-go
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/notaryproject/notation-go
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/ory/dockertest/v3
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency label Apr 23, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 23, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 23, 2025
@dependabot dependabot Bot deleted the dependabot/go_modules/go-deps-82d485e072 branch April 23, 2025 05:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants