Skip to content

build(deps): bump dependencies#3132

Merged
k8s-ci-robot merged 1 commit intomainfrom
dependabot/go_modules/google.golang.org/grpc-1.80.0
May 5, 2026
Merged

build(deps): bump dependencies#3132
k8s-ci-robot merged 1 commit intomainfrom
dependabot/go_modules/google.golang.org/grpc-1.80.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 2, 2026

What type of PR is this?

/kind cleanup

What this PR does / why we need it:

Bump dependencies:

  • actions/download-artifact v8.0.0 -> v8.0.1
  • actions/setup-go v6.3.0 -> v6.4.0
  • actions/upload-artifact v7.0.0 -> v7.0.1
  • cachix/cachix-action v16 -> v17
  • crate-ci/typos v1.44.0 -> v1.45.2
  • docker/build-push-action v6.19.2 -> v7.1.0
  • docker/login-action v4.0.0 -> v4.1.0
  • docker/setup-buildx-action v3.12.0 -> v4.0.0
  • sigstore/cosign-installer v4.0.0 -> v4.1.1
  • softprops/action-gh-release v2.5.0 -> v3.0.0
  • ubi8/go-toolset b83390c -> 04558ab
  • ubi9/ubi-minimal 83006d5 -> 8d0a8fb
  • github.com/go-jose/go-jose/v4 v4.1.3 -> v4.1.4
  • github.com/google/go-containerregistry v0.21.3 -> v0.21.4
  • github.com/maxbrunsfeld/counterfeiter/v6 v6.12.1 -> v6.12.2
  • github.com/opencontainers/runc v1.4.1 -> v1.4.2
  • github.com/sigstore/cosign/v2 v2.6.2 -> v2.6.3
  • github.com/sigstore/timestamp-authority/v2 v2.0.5 -> v2.0.6
  • go.opentelemetry.io/otel/sdk v1.41.0 -> v1.43.0
  • go.podman.io/common v0.67.0 -> v0.67.1
  • golang.org/x/mod v0.34.0 -> v0.35.0
  • google.golang.org/grpc v1.79.3 -> v1.80.0
  • operator-sdk v1.37.0 -> v1.42.2
  • opm v1.65.0

Updates baseprofile names for runc v1.4.2 and crun v1.26
from cri-o/packaging. Release v0.10.1.

Which issue(s) this PR fixes:

None

Does this PR have test?

N/A

Special notes for your reviewer:

Does this PR introduce a user-facing change?

NONE

@dependabot dependabot Bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Apr 2, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Apr 2, 2026
@saschagrunert saschagrunert force-pushed the dependabot/go_modules/google.golang.org/grpc-1.80.0 branch from 8f0a0f4 to 5d23462 Compare April 2, 2026 06:50
@k8s-ci-robot k8s-ci-robot added lgtm "Looks good to me", indicates that a PR is ready to be merged. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels Apr 2, 2026
@saschagrunert saschagrunert changed the title build(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0 build(deps): bump dependencies May 5, 2026
@saschagrunert saschagrunert force-pushed the dependabot/go_modules/google.golang.org/grpc-1.80.0 branch from 5d23462 to a50b225 Compare May 5, 2026 06:18
@k8s-ci-robot k8s-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed lgtm "Looks good to me", indicates that a PR is ready to be merged. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. labels May 5, 2026
@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 5, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dependabot[bot], saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@saschagrunert saschagrunert mentioned this pull request May 5, 2026
8 tasks
@saschagrunert saschagrunert force-pushed the dependabot/go_modules/google.golang.org/grpc-1.80.0 branch from a50b225 to c3b9af5 Compare May 5, 2026 06:28
@k8s-ci-robot k8s-ci-robot removed the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 5, 2026
@saschagrunert
Copy link
Copy Markdown
Member

/lgtm

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 5, 2026
@saschagrunert saschagrunert force-pushed the dependabot/go_modules/google.golang.org/grpc-1.80.0 branch from c3b9af5 to 1a961ba Compare May 5, 2026 06:35
@k8s-ci-robot k8s-ci-robot removed the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 5, 2026
@saschagrunert
Copy link
Copy Markdown
Member

/lgtm

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 5, 2026
Bumps:
- actions/download-artifact v8.0.0 -> v8.0.1
- actions/setup-go v6.3.0 -> v6.4.0
- actions/upload-artifact v7.0.0 -> v7.0.1
- cachix/cachix-action v16 -> v17
- crate-ci/typos v1.44.0 -> v1.45.2
- docker/build-push-action v6.19.2 -> v7.1.0
- docker/login-action v4.0.0 -> v4.1.0
- docker/setup-buildx-action v3.12.0 -> v4.0.0
- sigstore/cosign-installer v4.0.0 -> v4.1.1
- softprops/action-gh-release v2.5.0 -> v3.0.0
- ubi8/go-toolset b83390c -> 04558ab
- ubi9/ubi-minimal 83006d5 -> 8d0a8fb
- github.com/go-jose/go-jose/v4 v4.1.3 -> v4.1.4
- github.com/google/go-containerregistry v0.21.3 -> v0.21.4
- github.com/maxbrunsfeld/counterfeiter/v6 v6.12.1 -> v6.12.2
- github.com/opencontainers/runc v1.4.1 -> v1.4.2
- github.com/sigstore/cosign/v2 v2.6.2 -> v2.6.3
- github.com/sigstore/timestamp-authority/v2 v2.0.5 -> v2.0.6
- go.opentelemetry.io/otel/sdk v1.41.0 -> v1.43.0
- go.podman.io/common v0.67.0 -> v0.67.1
- golang.org/x/mod v0.34.0 -> v0.35.0
- google.golang.org/grpc v1.79.3 -> v1.80.0
- operator-sdk v1.37.0 -> v1.42.2
- opm v1.65.0

Updates baseprofile names for runc v1.4.2 and crun v1.26
from cri-o/packaging. Release v0.10.1.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
@saschagrunert saschagrunert force-pushed the dependabot/go_modules/google.golang.org/grpc-1.80.0 branch from 1a961ba to cdc5305 Compare May 5, 2026 06:44
@k8s-ci-robot k8s-ci-robot removed the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 5, 2026
@saschagrunert
Copy link
Copy Markdown
Member

/lgtm

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 5, 2026
@k8s-ci-robot k8s-ci-robot merged commit a1329f8 into main May 5, 2026
40 of 43 checks passed
@k8s-ci-robot k8s-ci-robot deleted the dependabot/go_modules/google.golang.org/grpc-1.80.0 branch May 5, 2026 07:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants