chore(deps): bump the go group with 5 updates by dependabot[bot] · Pull Request #1418 · open-component-model/ocm

dependabot · 2025-04-20T08:17:21Z

Bumps the go group with 5 updates:

Package	From	To
github.com/containers/image/v5	`5.34.3`	`5.35.0`
github.com/cyberphone/json-canonicalization	`0.0.0-20231217050601-ba74d44ecf5f`	`0.0.0-20241213102144-19d51d7fe467`
github.com/docker/cli	`27.5.1+incompatible`	`28.0.4+incompatible`
github.com/docker/docker	`27.5.1+incompatible`	`28.0.4+incompatible`
github.com/go-git/go-git/v5	`5.15.0`	`5.16.0`

Updates github.com/containers/image/v5 from 5.34.3 to 5.35.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.35.0

What's Changed

Bump c/storage to v1.57.1, c/image to v5.34.0, then to v5.35.0-dev by @TomSweeneyRedHat in containers/image#2700

Update module github.com/vbatts/tar-split to v0.12.1 by @renovate in containers/image#2699

Update dependency containers/automation_images to v20250131 by @renovate in containers/image#2703

Update module golang.org/x/oauth2 to v0.26.0 by @renovate in containers/image#2705

Update module golang.org/x/sync to v0.11.0 by @renovate in containers/image#2706

Update module golang.org/x/sys to v0.30.0 by @renovate in containers/image#2707

Update module golang.org/x/term to v0.29.0 by @renovate in containers/image#2708

Add docker media types in OCI formats by @brbayes-msft in containers/image#2695

use new ReflinkOrCopy() from c/storage by @Luap99 in containers/image#2714

Update module golang.org/x/crypto to v0.33.0 by @renovate in containers/image#2712

Update module github.com/vbauerster/mpb/v8 to v8.9.2 by @renovate in containers/image#2711

Update module github.com/sigstore/rekor to v1.3.9 by @renovate in containers/image#2697

Update dependency golangci/golangci-lint to v1.64.3 by @renovate in containers/image#2715

Update dependency golangci/golangci-lint to v1.64.4 by @renovate in containers/image#2716

Update module github.com/sigstore/sigstore to v1.8.14 by @renovate in containers/image#2720

Update dependency golangci/golangci-lint to v1.64.5 by @renovate in containers/image#2719

policy.json BYOPKI signature verification API by @QiWang19 in containers/image#2579

Update module github.com/klauspost/compress to v1.18.0 by @renovate in containers/image#2722

Update module github.com/sigstore/sigstore to v1.8.15 by @renovate in containers/image#2723

Small cleanups + one bug fix by @mtrmac in containers/image#2718

oci/layout: add GetLocalBlobPath() by @Luap99 in containers/image#2728

Update module github.com/docker/docker to v28 by @renovate in containers/image#2727

Update module github.com/docker/cli to v28 by @renovate in containers/image#2726

OCPBUGS-51217: CVE-2025-27144: Bump go-jose to v4.0.5 by @sherine-k in containers/image#2738

Update module github.com/vbauerster/mpb/v8 to v8.9.3 by @renovate in containers/image#2735

Update module github.com/go-jose/go-jose/v3 to v3.0.4 [SECURITY] by @renovate in containers/image#2739

Update module github.com/docker/docker to v28.0.1+incompatible by @renovate in containers/image#2737

Update module github.com/docker/cli to v28.0.1+incompatible by @renovate in containers/image#2736

feat: add DestinationTimestamp to copy options by @aeijdenberg in containers/image#2730

fix(deps): update module github.com/docker/docker-credential-helpers to v0.9.1 by @renovate in containers/image#2740

Fix omitempty for PKI struct by @QiWang19 in containers/image#2746

fix: handle error on Close() of writable objects by @aeijdenberg in containers/image#2731

fix(deps): update github.com/containers/storage digest to 700b765 by @renovate in containers/image#2748

fix(deps): update github.com/cyberphone/json-canonicalization digest to 19d51d7 by @renovate in containers/image#2749

chore(deps): update dependency golangci/golangci-lint to v1.64.6 by @renovate in containers/image#2751

Merge back v5.34.1 into main by @Luap99 in containers/image#2755

fix(deps): update module github.com/opencontainers/image-spec to v1.1.1 by @renovate in containers/image#2752

Microoptimize an API use per gopls modernize by @mtrmac in containers/image#2732

Misc small nits to CI and build by @kolyshkin in containers/image#2573

fix(deps): update module github.com/docker/docker-credential-helpers to v0.9.2 by @renovate in containers/image#2757

fix: typo err and grammar err by @warjiang in containers/image#2758

Update c/storage after containers/storage#2276 by @mtrmac in containers/image#2769

Improve handling and documentation of various transport reference corner cases by @mtrmac in containers/image#2767

Migrate from github.com/xeipuuv/gojsonschema to github.com/santhosh-tekuri/jsonschema/v5 by @mtrmac in containers/image#2756

Don't silently ignore errors determining size in TryReuseBlob by @mtrmac in containers/image#2709

Add proxy for dockerClient by @warjiang in containers/image#2764

chore(deps): update dependency golangci/golangci-lint to v1.64.7 by @renovate in containers/image#2773

Update to Go 1.23 by @mtrmac in containers/image#2774

... (truncated)

Commits

617c288 Bump to c/image v5.35.0
1b83b3a Bump to c/storage v1.58.0
4279b17 Merge pull request #2826 from containers/renovate/golangci-golangci-lint-2.x
1d14076 chore(deps): update dependency golangci/golangci-lint to v2.1.1
12c8495 Merge pull request #2824 from containers/renovate/github.com-sigstore-rekor-1.x
010f504 fix(deps): update module github.com/sigstore/rekor to v1.3.10
9b83c49 Merge pull request #2823 from Luap99/github
a4b363d .github: check_cirrus_cron work around github bug
37150b4 .github: remove cirrus rerun action
6116c41 Merge pull request #2822 from containers/renovate/github.com-sigstore-sigstor...
Additional commits viewable in compare view

Updates github.com/cyberphone/json-canonicalization from 0.0.0-20231217050601-ba74d44ecf5f to 0.0.0-20241213102144-19d51d7fe467

Commits

See full diff in compare view

Updates github.com/docker/cli from 27.5.1+incompatible to 28.0.4+incompatible

Commits

b8034c0 Merge pull request #5962 from thaJeztah/bump_docker_28.0.3
3e699a3 Merge pull request #5964 from vvoland/fix-auth-regressionq
f596202 Revert "cli/command: remove uses of GetAuthConfigKey, ParseRepositoryInfo"
ee2f787 cli/config: update link to current version
d8432cd vendor: github.com/docker/docker v28.0.3
2b0631f Merge pull request #5941 from thaJeztah/TestUserTerminatedError_handle_errs
84828b0 Merge pull request #5960 from vvoland/vendor-docker
b5ca7e8 vendor: github.com/docker/docker v28.0.3-dev (330857ad0ffb)
cfaaeb0 Merge pull request #5957 from vvoland/stdout-trunc
5a8120c container/run: Fix TestRunAttachTermination
Additional commits viewable in compare view

Updates github.com/docker/docker from 27.5.1+incompatible to 28.0.4+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v28.0.4

28.0.4

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 28.0.4 milestone

moby/moby, 28.0.4 milestone

Bug fixes and enhancements

Fix a regression causing docker pull/push to fail when interacting with a private repository. docker/cli#5964

v28.0.3

28.0.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 28.0.3 milestone

moby/moby, 28.0.3 milestone

Bug fixes and enhancements

Fix docker run truncating the STDOUT/STDERR prematurely when the container exits before the data is consumed. docker/cli#5957

Packaging updates

Update BuildKit to v0.20.2. moby/moby#49698

Update runc to v1.2.6 (static packages only). moby/moby#49682

Update containerd to v1.7.26. docker/containerd-packaging#409

v28.0.2

28.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 28.0.2 milestone

moby/moby, 28.0.2 milestone

Bug fixes and enhancements

Fix CLI-specific attributes (docker.cli.*) being unintentionally passed to downstream OTel services. docker/cli#5842

Fix an issue where user-specified OTEL_RESOURCE_ATTRIBUTES were being overridden by CLI's internal telemetry attributes. The CLI now properly merges user-specified attributes with internal ones, allowing both to coexist. docker/cli#5842

Fix daemon failing to start on Windows when a container created before v28.0.0 was present. moby/moby#49626

Fix possible error on docker buildx prune with the --min-free-space. moby/moby#49623

Fix spurious io: read/write on closed pipe error in the daemon log when closing container. moby/moby#49590

Fix the Docker daemon failing too early if the containerd socket isn't immediately available. moby/moby#49603

Mask Linux thermal interrupt info in a container's /proc and /sys by default. moby/moby#49560

Update contrib/check-config.sh to check for more kernel modules related to iptables. moby/moby#49622

containerd image store: Fix integer overflow in User ID handling passed via --user. moby/moby#49652

containerd image store: Fix spurious reference for unknown type: application/vnd.in-toto+json warning being logged to the daemon's log. moby/moby#49652

... (truncated)

Commits

6430e49 Merge pull request #49700 from vvoland/missing-buildtags
cc90726 Add missing go1.22 build constraints
330857a Merge pull request #49698 from jsternberg/buildkit-0.20.2
2fce935 vendor: github.com/moby/buildkit v0.20.2
ecb03c4 Merge pull request #49691 from thaJeztah/bump_selinux
accda31 Merge pull request #49562 from thaJeztah/switch_cgroups
6a0f71c Merge pull request #49686 from thaJeztah/attach_nits
e2011af Merge pull request #49692 from thaJeztah/rm_aliases
3e957c6 remove some redundant import-aliases
4db84b1 switch to github.com/opencontainers/cgroups
Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.15.0 to 5.16.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.16.0

What's Changed

[v5] plumbing: support mTLS for HTTPS protocol by @hiddeco in go-git/go-git#1510

v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix #1514 by @pjbgf in go-git/go-git#1515

Full Changelog: go-git/go-git@v5.15.0...v5.16.0

Commits

6d4a5c6 Merge pull request #1515 from pjbgf/regre
beedd6b plumbing: transport, Reintroduce SetHostKeyCallback. Fix #1514
763ce2e Merge pull request #1510 from hiddeco/mtls-support
5320e1b plumbing: surface transport configuration errors
9bbc93b plumbing: fix unintended pointer mutation in test
f3783f4 plumbing: support mTLS for HTTPS protocol
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 5 updates: | Package | From | To | | --- | --- | --- | | [github.com/containers/image/v5](https://github.com/containers/image) | `5.34.3` | `5.35.0` | | [github.com/cyberphone/json-canonicalization](https://github.com/cyberphone/json-canonicalization) | `0.0.0-20231217050601-ba74d44ecf5f` | `0.0.0-20241213102144-19d51d7fe467` | | [github.com/docker/cli](https://github.com/docker/cli) | `27.5.1+incompatible` | `28.0.4+incompatible` | | [github.com/docker/docker](https://github.com/docker/docker) | `27.5.1+incompatible` | `28.0.4+incompatible` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.15.0` | `5.16.0` | Updates `github.com/containers/image/v5` from 5.34.3 to 5.35.0 - [Release notes](https://github.com/containers/image/releases) - [Commits](containers/image@v5.34.3...v5.35.0) Updates `github.com/cyberphone/json-canonicalization` from 0.0.0-20231217050601-ba74d44ecf5f to 0.0.0-20241213102144-19d51d7fe467 - [Release notes](https://github.com/cyberphone/json-canonicalization/releases) - [Commits](https://github.com/cyberphone/json-canonicalization/commits) Updates `github.com/docker/cli` from 27.5.1+incompatible to 28.0.4+incompatible - [Commits](docker/cli@v27.5.1...v28.0.4) Updates `github.com/docker/docker` from 27.5.1+incompatible to 28.0.4+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v27.5.1...v28.0.4) Updates `github.com/go-git/go-git/v5` from 5.15.0 to 5.16.0 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.15.0...v5.16.0) --- updated-dependencies: - dependency-name: github.com/containers/image/v5 dependency-version: 5.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/cyberphone/json-canonicalization dependency-version: 0.0.0-20241213102144-19d51d7fe467 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/docker/cli dependency-version: 28.0.4+incompatible dependency-type: direct:production update-type: version-update:semver-major dependency-group: go - dependency-name: github.com/docker/docker dependency-version: 28.0.4+incompatible dependency-type: direct:production update-type: version-update:semver-major dependency-group: go - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Apr 20, 2025

dependabot Bot requested a review from a team as a code owner April 20, 2025 08:17

This was referenced Apr 20, 2025

chore(deps): bump github.com/docker/docker from 27.5.1+incompatible to 28.0.4+incompatible #1391

Closed

chore(deps): bump github.com/docker/cli from 27.5.1+incompatible to 28.0.4+incompatible #1392

Closed

github-actions Bot added the size/s Small label Apr 20, 2025

hilmarf added 2 commits April 23, 2025 12:11

fix lint issues with deprecation

31e842e

make format

d1dec40

github-actions Bot added the component/ocm-cli OCM Command Line Interface label Apr 23, 2025

Merge branch 'main' into dependabot/go_modules/go-88ac666fab

1a08783

hilmarf enabled auto-merge (squash) April 23, 2025 10:13

hilmarf approved these changes Apr 23, 2025

View reviewed changes

github-actions Bot added size/m Medium and removed size/s Small labels Apr 23, 2025

Skarlso approved these changes Apr 23, 2025

View reviewed changes

hilmarf merged commit 1245fc4 into main Apr 23, 2025
26 checks passed

hilmarf deleted the dependabot/go_modules/go-88ac666fab branch April 23, 2025 10:29

ocmbot Bot added this to the 2025-Q2 milestone Apr 23, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the go group with 5 updates#1418

chore(deps): bump the go group with 5 updates#1418
hilmarf merged 4 commits into
mainfrom
dependabot/go_modules/go-88ac666fab

dependabot Bot commented on behalf of github Apr 20, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Apr 20, 2025

v5.35.0

What's Changed

v28.0.4

28.0.4

Bug fixes and enhancements

v28.0.3

28.0.3

Bug fixes and enhancements

Packaging updates

v28.0.2

28.0.2

Bug fixes and enhancements

v5.16.0

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants