Skip to content

chore(deps): update go dependencies (main) - autoclosed#360

Closed
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main-main/go-deps
Closed

chore(deps): update go dependencies (main) - autoclosed#360
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main-main/go-deps

Conversation

@red-hat-konflux
Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
cloud.google.com/go/auth indirect minor v0.19.0v0.20.0
cloud.google.com/go/iam indirect minor v1.6.0v1.11.0
cloud.google.com/go/longrunning indirect major v0.8.0v1.0.0
cloud.google.com/go/security require minor v1.19.2v1.24.0
github.com/Azure/azure-sdk-for-go/sdk/azcore indirect patch v1.21.0v1.21.1
github.com/Azure/azure-sdk-for-go/sdk/internal indirect minor v1.11.2v1.12.0
github.com/AzureAD/microsoft-authentication-library-for-go indirect patch v1.7.0v1.7.2
github.com/Masterminds/semver/v3 indirect minor v3.4.0v3.5.0
github.com/aws/aws-sdk-go indirect patch v1.55.7v1.55.8
github.com/aws/aws-sdk-go-v2 indirect patch v1.41.5v1.41.7
github.com/aws/aws-sdk-go-v2/config indirect patch v1.32.12v1.32.17
github.com/aws/aws-sdk-go-v2/credentials indirect patch v1.19.13v1.19.16
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect patch v1.18.21v1.18.23
github.com/aws/aws-sdk-go-v2/internal/configsources indirect patch v1.4.21v1.4.23
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 indirect patch v2.7.21v2.7.23
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect patch v1.13.7v1.13.9
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url indirect patch v1.13.21v1.13.23
github.com/aws/aws-sdk-go-v2/service/kms indirect minor v1.50.3v1.51.1
github.com/aws/aws-sdk-go-v2/service/signin indirect patch v1.0.9v1.0.11
github.com/aws/aws-sdk-go-v2/service/sso indirect patch v1.30.14v1.30.17
github.com/aws/aws-sdk-go-v2/service/ssooidc indirect patch v1.35.18v1.35.21
github.com/aws/aws-sdk-go-v2/service/sts indirect minor v1.41.10v1.42.1
github.com/aws/smithy-go indirect minor v1.24.2v1.25.1
github.com/cenkalti/backoff/v4 indirect major v4.3.0v5.0.3
github.com/fsnotify/fsnotify indirect minor v1.9.0v1.10.1
github.com/go-chi/chi require major v4.1.2+incompatiblev5.2.5
github.com/go-jose/go-jose/v4 indirect patch v4.1.3v4.1.4
github.com/go-openapi/jsonpointer indirect minor v0.22.5v0.23.1
github.com/go-openapi/runtime indirect minor v0.29.3v0.30.0
github.com/go-openapi/runtime require minor v0.29.3v0.30.0
github.com/go-openapi/strfmt indirect patch v0.26.1v0.26.2
github.com/go-openapi/strfmt require patch v0.26.1v0.26.2
github.com/go-openapi/swag indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag require minor v0.25.5v0.26.0
github.com/go-openapi/swag/cmdutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/conv indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/fileutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/jsonname indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/jsonutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/loading indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/mangling indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/netutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/stringutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/typeutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/yamlutils indirect minor v0.25.5v0.26.0
github.com/go-playground/validator/v10 require patch v10.30.1v10.30.2
github.com/golang-jwt/jwt/v5 indirect patch v5.3.0v5.3.1
github.com/google/go-containerregistry indirect patch v0.21.3v0.21.5
github.com/googleapis/enterprise-certificate-proxy indirect patch v0.3.14v0.3.15
github.com/googleapis/gax-go/v2 indirect minor v2.19.0v2.22.0
github.com/hashicorp/hcl indirect major v1.0.1-vault-7v2.24.0
github.com/letsencrypt/boulder indirect minor v0.20260324.0v0.20260512.0
github.com/pelletier/go-toml/v2 indirect minor v2.2.4v2.3.1
github.com/secure-systems-lab/go-securesystemslib indirect minor v0.10.0v0.11.0
github.com/sigstore/protobuf-specs indirect patch v0.5.0v0.5.1
github.com/sigstore/sigstore require patch v1.10.5v1.10.6
github.com/sigstore/sigstore/pkg/signature/kms/aws require patch v1.10.5v1.10.6
github.com/sigstore/sigstore/pkg/signature/kms/azure require patch v1.10.5v1.10.6
github.com/sigstore/sigstore/pkg/signature/kms/gcp require patch v1.10.5v1.10.6
github.com/sigstore/sigstore/pkg/signature/kms/hashivault require patch v1.10.5v1.10.6
github.com/tink-crypto/tink-go-awskms/v2 require major v2.1.0v3.0.0
github.com/tink-crypto/tink-go-hcvault/v2 require minor v2.4.0v2.5.0
github.com/urfave/negroni require major v1.0.0v3.1.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.67.0v0.68.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.67.0v0.68.0
go.opentelemetry.io/otel indirect minor v1.42.0v1.43.0
go.opentelemetry.io/otel/metric indirect minor v1.42.0v1.43.0
go.opentelemetry.io/otel/trace indirect minor v1.42.0v1.43.0
go.step.sm/crypto require minor v0.77.1v0.81.0
go.uber.org/zap require minor v1.27.1v1.28.0
go.yaml.in/yaml/v2 indirect major v2.4.3v3.0.4
golang.org/x/crypto indirect minor v0.49.0v0.51.0
golang.org/x/mod indirect minor v0.34.0v0.36.0
golang.org/x/net indirect minor v0.52.0v0.54.0
golang.org/x/net require minor v0.52.0v0.54.0
golang.org/x/sys indirect minor v0.42.0v0.44.0
golang.org/x/term indirect minor v0.41.0v0.43.0
golang.org/x/text indirect minor v0.35.0v0.37.0
golang.org/x/tools indirect minor v0.43.0v0.45.0
google.golang.org/api indirect minor v0.273.0v0.279.0
google.golang.org/genproto indirect digest d00831a3700d41
google.golang.org/genproto/googleapis/api indirect digest d00831a3700d41
google.golang.org/genproto/googleapis/rpc indirect digest d00831a3700d41
google.golang.org/grpc indirect minor v1.79.3v1.81.1
gopkg.in/yaml.v2 indirect major v2.4.0v3.0.1
sigs.k8s.io/release-utils require patch v0.12.3v0.12.4

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.20.0

Compare Source

  • bigquery: Support SchemaUpdateOptions for load jobs.

  • bigtable:

    • Add SampleRowKeys.
    • cbt: Support union, intersection GCPolicy.
    • Retry admin RPCS.
    • Add trace spans to retries.
  • datastore: Add OpenCensus tracing.

  • firestore:

    • Fix queries involving Null and NaN.
    • Allow Timestamp protobuffers for time values.
  • logging: Add a WriteTimeout option.

  • spanner: Support Batch API.

  • storage: Add OpenCensus tracing.

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

v1.7.2

Compare Source

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.1...v1.7.2

v1.7.1: 1.7.1

Compare Source

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.0...v1.7.1

Masterminds/semver (github.com/Masterminds/semver/v3)

v3.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

aws/aws-sdk-go (github.com/aws/aws-sdk-go)

v1.55.8

Compare Source

SDK Features
  • Mark the module and all packages as deprecated.
    • This SDK has entered end-of-support.
aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

v1.41.7

Compare Source

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/ecs: v1.41.7
    • Documentation: Documentation only update for Amazon ECS.
  • github.com/aws/aws-sdk-go-v2/service/glue: v1.78.0
    • Feature: Adding View related fields to responses of read-only Table APIs.
  • github.com/aws/aws-sdk-go-v2/service/ivschat: v1.12.5
    • Documentation: Doc-only update. Changed "Resources" to "Key Concepts" in docs and updated text.
  • github.com/aws/aws-sdk-go-v2/service/rolesanywhere: v1.10.0
    • Feature: This release increases the limit on the roleArns request parameter for the *Profile APIs that support it. This parameter can now take up to 250 role ARNs.
  • github.com/aws/aws-sdk-go-v2/service/securityhub: v1.47.2
    • Documentation: Documentation updates for AWS Security Hub

v1.41.6

Compare Source

aws/smithy-go (github.com/aws/smithy-go)

v1.25.1

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.25.1
    • Bug Fix: Fixed a memory leak in the LRU cache implementation used by some AWS services.

v1.25.0

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.25.0
    • Feature: Add support for endpointBdd trait

v1.24.3

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.24.3
    • Bug Fix: Add additional sigv4 configuration.
  • github.com/aws/smithy-go/aws-http-auth: v1.1.3
    • Bug Fix: Add additional sigv4 configuration.
cenkalti/backoff (github.com/cenkalti/backoff/v4)

v5.0.3

Compare Source

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes
  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes
  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

go-chi/chi (github.com/go-chi/chi)

v5.2.5

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.2.3...v5.2.5

v5.2.4

Compare Source

v5.2.3

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.2.2...v5.2.3

v5.2.2

Compare Source

What's Changed

Security fix

  • Fixes GHSA-vrw8-fxc6-2r93 - "Host Header Injection Leads to Open Redirect in RedirectSlashes" commit
    • a lower-severity Open Redirect that can't be exploited in browser or email client, as it requires manipulation of a Host header
    • reported by Anuraag Baishya, @​anuraagbaishya. Thank you!

New Contributors

Full Changelog: go-chi/chi@v5.2.1...v5.2.2

v5.2.1

Compare Source

⚠️ Chi supports Go 1.20+

Starting this release, we will now support the four most recent major versions of Go. See #​963 for related discussion.

What's Changed

Full Changelog: go-chi/chi@v5.2.0...v5.2.1

v5.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.1.0...v5.2.0

v5.1.0

Compare Source

What's Changed

  • middleware: add Discard method to WrapResponseWriter by @​patrislav in #​926
    • Adds Discard() method to the middleware.WrapResponseWriter interface. This is technically an API breaking change. However after some discussion at #​926 (comment), we decided to move forward, and release as minor version, as we don't expect anyone to rely on this interface / implement it externally.

New Contributors

Full Changelog: go-chi/chi@v5.0.14...v5.1.0

v5.0.14

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.0.12...v5.0.14

v5.0.13

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.0.12...v5.0.13

v5.0.12

Compare Source

v5.0.11

Compare Source

v5.0.10

Compare Source

v5.0.9

Compare Source

v5.0.8

Compare Source

v5.0.7

Compare Source

v5.0.6

Compare Source

v5.0.5

Compare Source

v5.0.4

Compare Source

v5.0.3

Compare Source

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

v4.1.3

Compare Source

go-jose/go-jose (github.com/go-jose/go-jose/v4)

v4.1.4

Compare Source

What's Changed

Fixes Panic in JWE decryption. See GHSA-78h2-9frx-2jm8

Full Changelog: go-jose/go-jose@v4.1.3...v4.1.4

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.23.1

Compare Source

0.23.1 - 2026-04-18

Full Changelog: go-openapi/jsonpointer@v0.23.0...v0.23.1

5 commits in this release.


Fixed bugs
  • fix(offset): in Offset method, fixed index of value of array element. by @​fredbi in #​128 ...
Documentation
Updates

People who contributed to this release

jsonpointer license terms

License

v0.23.0

Compare Source

0.23.0 - 2026-04-15

Support for known limitations

Full Changelog: go-openapi/jsonpointer@v0.22.5...v0.23.0

16 commits in this release.


Implemented enhancements
Fixed bugs
Documentation
Miscellaneous tasks
Updates

People who contributed to this release

New Contributors

jsonpointer license terms

License

go-openapi/runtime (github.com/go-openapi/runtime)

v0.30.0

Compare Source

0.30.0 - 2026-05-13

Long awaited fixes and additions

  • Fixed most long standing issues.

  • Added standalone middleware module (swagger UI, serve spec).

  • Improved content negotiation.

  • Context-aware request submission

Full Changelog: go-openapi/runtime@v0.29.5...v0.30.0

33 commits in this release.


Implemented enhancements
  • feat(client): honor context cancellation in multipart upload goroutine by @​fredbi ...
  • feat(client): introduce SubmitContext by @​fredbi ...
  • feat: extract media type match validation to separate package by @​fredbi ...
  • feat(mediatype): typed media-type and symmetric Accept negotiation by @​fredbi ...
Fixed bugs

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
Copy link
Copy Markdown
Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.7 -> 1.26.0
cloud.google.com/go/kms v1.26.0 -> v1.31.0

@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go dependencies (main) chore(deps): update go dependencies (main) - autoclosed May 15, 2026
@red-hat-konflux red-hat-konflux Bot closed this May 15, 2026
@red-hat-konflux red-hat-konflux Bot deleted the konflux/mintmaker/main-main/go-deps branch May 15, 2026 14:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants