Skip to content

chore(deps): update go dependencies#678

Open
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.3from
konflux/mintmaker/release-1.3/go-deps
Open

chore(deps): update go dependencies#678
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.3from
konflux/mintmaker/release-1.3/go-deps

Conversation

@red-hat-konflux
Copy link
Copy Markdown

@red-hat-konflux red-hat-konflux Bot commented Apr 21, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
cloud.google.com/go/iam indirect minor v1.9.0 → v1.11.0
cloud.google.com/go/longrunning indirect minor v0.11.0 → v0.13.0
github.com/aws/aws-sdk-go-v2/credentials indirect patch v1.19.14 → v1.19.16
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect patch v1.18.22 → v1.18.23
github.com/aws/aws-sdk-go-v2/internal/configsources indirect patch v1.4.22 → v1.4.23
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect patch v1.13.8 → v1.13.9
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url indirect patch v1.13.22 → v1.13.23
github.com/aws/aws-sdk-go-v2/service/signin indirect patch v1.0.10 → v1.0.11
github.com/buildkite/go-pipeline indirect minor v0.16.0 → v0.17.0
github.com/docker/docker-credential-helpers indirect patch v0.9.6 → v0.9.7
github.com/fsnotify/fsnotify indirect minor v1.9.0 → v1.10.1
github.com/go-openapi/runtime require patch v0.29.4 → v0.29.5
github.com/go-openapi/strfmt require patch v0.26.1 → v0.26.2
github.com/in-toto/in-toto-golang require minor v0.10.0 → v0.11.0
github.com/klauspost/compress indirect patch v1.18.5 → v1.18.6
github.com/letsencrypt/boulder indirect minor v0.20260420.0 → v0.20260504.0
github.com/open-policy-agent/opa require minor v1.15.2 → v1.16.1
github.com/secure-systems-lab/go-securesystemslib require minor v0.10.0 → v0.11.0
github.com/vbatts/tar-split indirect patch v0.12.2 → v0.12.3
go.step.sm/crypto indirect minor v0.77.2 → v0.78.0
golang.org/x/crypto indirect minor v0.50.0 → v0.51.0
golang.org/x/crypto require minor v0.50.0 → v0.51.0
golang.org/x/mod indirect minor v0.35.0 → v0.36.0
golang.org/x/net indirect minor v0.53.0 → v0.54.0
golang.org/x/sys indirect minor v0.43.0 → v0.44.0
golang.org/x/term require minor v0.42.0 → v0.43.0
golang.org/x/text indirect minor v0.36.0 → v0.37.0
golang.org/x/tools indirect minor v0.44.0 → v0.45.0
google.golang.org/api require minor v0.276.0 → v0.278.0
google.golang.org/genproto indirect digest e10c466 → 60b97b3
google.golang.org/genproto/googleapis/api indirect digest e10c466 → 60b97b3
google.golang.org/genproto/googleapis/rpc indirect digest e10c466 → 60b97b3
k8s.io/api require minor v0.35.4 → v0.36.0
k8s.io/apimachinery require minor v0.35.4 → v0.36.0
k8s.io/client-go require minor v0.35.4 → v0.36.0
k8s.io/kube-openapi indirect digest ec9c827 → b540ad9
k8s.io/utils require digest 28399d8 → ff6756f

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/longrunning)

v0.13.0

Compare Source

  • bigquery: UseLegacySQL options for CreateTable and QueryConfig. Use these
    options to continue using Legacy SQL after the client switches its default
    to Standard SQL.

  • bigquery: Support for updating dataset labels.

  • bigquery: Set DatasetIterator.ProjectID to list datasets in a project other
    than the client's. DatasetsInProject is no longer needed and is deprecated.

  • bigtable: Fail ListInstances when any zones fail.

  • spanner: support decoding of slices of basic types (e.g. []string, []int64,
    etc.)

  • logging/logadmin: UpdateSink no longer creates a sink if it is missing
    (actually a change to the underlying service, not the client)

  • profiler: Service and ServiceVersion replace Target in Config.

v0.12.0

Compare Source

  • pubsub: Subscription.Receive now uses streaming pull.

  • pubsub: add Client.TopicInProject to access topics in a different project
    than the client.

  • errors: renamed errorreporting. The errors package will be removed shortly.

  • datastore: improved retry behavior.

  • bigquery: support updates to dataset metadata, with etags.

  • bigquery: add etag support to Table.Update (BREAKING: etag argument added).

  • bigquery: generate all job IDs on the client.

  • storage: support bucket lifecycle configurations.

buildkite/go-pipeline (github.com/buildkite/go-pipeline)

v0.17.0

Compare Source

What's Changed

  • Change the CommandStep and Plugins processing to allow control characters by @​CerealBoy in #​72

Full Changelog: buildkite/go-pipeline@v0.16.0...v0.17.0

docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)

v0.9.7

Compare Source

What's Changed

  • update to go1.26.3
  • ci: update zizmore action to v1.7.1

Full Changelog: docker/docker-credential-helpers@v0.9.6...v0.9.7

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes

  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

go-openapi/runtime (github.com/go-openapi/runtime)

v0.29.5

Compare Source

0.29.5 - 2026-05-04

Full Changelog: go-openapi/runtime@v0.29.4...v0.29.5

10 commits in this release.

Implemented enhancements
Fixed bugs
Documentation
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors

runtime license terms

License

Per-module changes

client-middleware/opentracing (0.29.5)

Fixed bugs
Miscellaneous tasks
Updates
go-openapi/strfmt (github.com/go-openapi/strfmt)

v0.26.2

Compare Source

0.26.2 - 2026-04-29

Full Changelog: go-openapi/strfmt@v0.26.1...v0.26.2

13 commits in this release.

Documentation
Performance
Miscellaneous tasks
Updates
People who contributed to this release

strfmt license terms

License

Per-module changes

enable/mongodb (0.26.2)

Miscellaneous tasks
Updates

internal/testintegration (0.26.2)

Miscellaneous tasks
Updates
  • build(deps): bump the other-dependencies group across 2 directories with 2 updates by @​dependabot[bot] in #​245 ...
  • build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 in the golang-org-dependencies group across 1 directory by @​dependabot[bot] in #​241 ...
  • build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.1 in /internal/testintegration in the other-dependencies group across 1 directory by @​dependabot[bot] in #​240 ...
  • build(deps): bump the go-openapi-dependencies group across 2 directories with 1 update by @​dependabot[bot] in #​238 ...
  • build(deps): bump golang.org/x/net from 0.50.0 to 0.52.0 in the golang-org-dependencies group across 1 directory by @​dependabot[bot] in #​228 ...
in-toto/in-toto-golang (github.com/in-toto/in-toto-golang)

v0.11.0

Compare Source

What's Changed

Full Changelog: in-toto/in-toto-golang@v0.10.0...v0.11.0

klauspost/compress (github.com/klauspost/compress)

v1.18.6

Compare Source

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

letsencrypt/boulder (github.com/letsencrypt/boulder)

v0.20260504.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260428.0...v0.20260504.0

v0.20260428.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260420.0...v0.20260428.0

open-policy-agent/opa (github.com/open-policy-agent/opa)

v1.16.1

Compare Source

This is a patch release addressing a regression in the plugin manager that may cause the service to hang on shutdown (#​8590).

v1.16.0

Compare Source

[!WARNING]

A regression has been found in the plugin manager, which may cause the service to hang on shutdown.
Users are advised to go directly to v1.16.1.

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • New uri.parse and uri.is_valid built-in functions
  • Data API Request/Response Metadata
  • Prometheus metrics exported via OTLP
  • Formatter improvements

NOTE:

In v1.15.x, OPA was dropping logs for bundle downloads, print() calls and other plugin-originated logs.
Users are advised to update, v1.16.0 fixes this bug in (#​8544).

New uri.parse and uri.is_valid built-in functions (#​8263)

Two new built-in functions have been added: uri.parse for parsing a given URI, and uri.is_valid for verifying the structure of a given URI.

uri.parse

Parses a URI and returns an object containing its components according to RFC 3986. Empty components are omitted.

package example

test_uri if {
	uri.parse("https://example.com:8080/api?q=1#top") == {
		"scheme": "https",
		"hostname": "example.com",
		"port": "8080",
		"path": "/api",
		"raw_path": "/api",
		"raw_query": "q=1",
		"fragment": "top",
	}
}
uri.is_valid

Returns true if the input can be parsed as a URI, false otherwise.

package example

deny contains "invalid URI" if {
    not uri.is_valid("http://[invalid")
}

Authored by @​charlieegan3 reported by @​anivar

Data API Request/Response Metadata (#​8570)

Wrapping projects can now attach custom metadata to Data API requests and have evaluation produce response metadata.

Two distinct metadata paths are introduced:

  • Request metadata: parsed from extra top-level keys in the request body, made available to builtins via BuiltinContext.RequestMetadata. Logged in the decision log under Custom["request_metadata"].

  • Response metadata: a separate map (BuiltinContext.ResponseMetadata) that builtins can populate during evaluation. Only included in the API response and decision log if non-empty.

In vanilla OPA, no builtins write response metadata, so responses are unchanged. The request metadata map is only allocated when the request carries extra fields; the response map is one empty map per request.

To avoid conflicts with future OPA top-level keys, callers should use a namespaced key: {"input": {...}, "com.example.opa/md": {...}}.

Request with metadata:

curl -H 'Content-Type: application/json' \
  -d '{"input": {"user": "alice"}, "com.example.opa/metadata": {"corp-id": "acme-42"}}' \
  http://localhost:8181/v1/data/example/allow

Response (response metadata included if, for example, set by a custom builtin):

{
  "decision_id": "04789f85-de5a-477b-8aa5-6d59d7742135",
  "result": true,
  "com.example.opa/response": {
    "snapshot_version": "v3"
  }
}

Decision log entry:

{
  "custom": {
    "request_metadata": {
      "com.example.opa/metadata": {
        "corp-id": "acme-42"
      }
    },
    "response_metadata": {
      "com.example.opa/response": {
        "snapshot_version": "v3"
      }
    }
  },
  "decision_id": "04789f85-de5a-477b-8aa5-6d59d7742135",
  "input": { "user": "alice" },
  "msg": "Decision Log",
  "path": "example/allow",
  "result": true
}

Authored by @​srenatus

Runtime, SDK, Tooling
Compiler, Topdown and Rego
Docs, Website, Ecosystem
Miscellaneous
  • build: Exclude domains that cause false positives (#​8533) (#​8495) authored by @​charlieegan3
  • e2e/cli: Add test for debug print() logging (#​8567) authored by @​srenatus
  • e2e/cli: Start CLI E2E tests (#​8545) authored by @​srenatus
  • github: declare formatted rego as rego (#​8564) authored by @​srenatus
  • Security policy update (#​8479) authored by @​anderseknert
  • Dependency updates; notably:
    • build: bump go 1.26.2 (#​8497) authored by @​sspaink
    • build(deps): bump wasmtime-go from v39.0.1 to v43.0.2
    • build(deps): bump go.opentelemetry.io deps from 1.40.0/0.65.0 to 1.43.0/0.68.0
    • build(deps): bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.3
    • build(deps): bump ithub.com/huandu/go-sqlbuilder from 1.39.1 to 1.40.2
    • build(deps): bump golang.org/x/net from 0.51.0 to 0.53.0
    • build(deps): bump golang.org/x/text from 0.34.0 to 0.36.0
secure-systems-lab/go-securesystemslib (github.com/secure-systems-lab/go-securesystemslib)

v0.11.0

Compare Source

vbatts/tar-split (github.com/vbatts/tar-split)

v0.12.3

Compare Source

image

What's Changed

New Contributors

Full Changelog: vbatts/tar-split@v0.12.2...v0.12.3

smallstep/crypto (go.step.sm/crypto)

v0.78.0

Compare Source

What's Changed

Full Changelog: smallstep/crypto@v0.77.9...v0.78.0

v0.77.9

Compare Source

What's Changed

Full Changelog: smallstep/crypto@v0.77.8...v0.77.9

v0.77.8

Compare Source

What's Changed

Dependencies

Full Changelog: smallstep/crypto@v0.77.2...v0.77.8

v0.77.7

Compare Source

v0.77.6

Compare Source

v0.77.5

Compare Source

v0.77.4

Compare Source

v0.77.3

Compare Source

googleapis/google-api-go-client (google.golang.org/api)

v0.278.0

Compare Source

Features
  • all: Auto-regenerate discovery clients (#​3582)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
Copy link
Copy Markdown
Author

red-hat-konflux Bot commented Apr 21, 2026 •
edited
Loading

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 13 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.6 -> 1.26.0
github.com/go-piv/piv-go/v2 v2.5.0 -> v2.6.0
google.golang.org/protobuf v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
cloud.google.com/go/kms v1.29.0 -> v1.30.0
github.com/aws/aws-sdk-go-v2 v1.41.6 -> v1.41.7
github.com/aws/aws-sdk-go-v2/config v1.32.14 -> v1.32.16
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.22 -> v2.7.23
github.com/aws/aws-sdk-go-v2/service/kms v1.50.4 -> v1.51.0
github.com/aws/aws-sdk-go-v2/service/sso v1.30.15 -> v1.30.17
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.19 -> v1.35.21
github.com/aws/aws-sdk-go-v2/service/sts v1.41.10 -> v1.42.1
github.com/aws/smithy-go v1.25.0 -> v1.25.1
github.com/googleapis/gax-go/v2 v2.21.0 -> v2.22.0
github.com/lestrrat-go/jwx/v3 v3.0.13 -> v3.1.0

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch from b76f64c to 0e365e9 Compare April 22, 2026 22:19
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/aws/aws-sdk-go-v2/credentials to v1.19.15 chore(deps): update go dependencies Apr 22, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 26 times, most recently from 23e4d4a to 242db37 Compare May 1, 2026 06:27
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 15 times, most recently from 08a79ff to 7552776 Compare May 8, 2026 06:40
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 4 times, most recently from 2b38771 to 4eed864 Compare May 9, 2026 07:30
@red-hat-konflux
chore(deps): update go dependencies
370bbc7 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch from 4eed864 to 370bbc7 Compare May 9, 2026 22:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants