Skip to content

chore(deps): update go dependencies#370

Open
red-hat-konflux[bot] wants to merge 1 commit intomainfrom
konflux/mintmaker/main/go-deps
Open

chore(deps): update go dependencies#370
red-hat-konflux[bot] wants to merge 1 commit intomainfrom
konflux/mintmaker/main/go-deps

Conversation

@red-hat-konflux
Copy link
Copy Markdown

@red-hat-konflux red-hat-konflux Bot commented Mar 30, 2026

This PR contains the following updates:

Package Type Update Change
chainguard.dev/sdk require patch v0.1.52v0.1.54
cloud.google.com/go/auth indirect minor v0.19.0v0.20.0
cloud.google.com/go/iam indirect minor v1.6.0v1.11.0
cloud.google.com/go/longrunning indirect minor v0.8.0v0.13.0
cloud.google.com/go/security require minor v1.19.2v1.23.0
github.com/Azure/azure-sdk-for-go/sdk/azcore indirect patch v1.21.0v1.21.1
github.com/Azure/azure-sdk-for-go/sdk/internal indirect minor v1.11.2v1.12.0
github.com/AzureAD/microsoft-authentication-library-for-go indirect patch v1.7.0v1.7.1
github.com/aws/aws-sdk-go-v2/credentials indirect patch v1.19.13v1.19.16
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect patch v1.18.21v1.18.23
github.com/aws/aws-sdk-go-v2/internal/configsources indirect patch v1.4.21v1.4.23
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect patch v1.13.7v1.13.9
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url indirect patch v1.13.21v1.13.23
github.com/aws/aws-sdk-go-v2/service/signin indirect patch v1.0.9v1.0.11
github.com/fsnotify/fsnotify require minor v1.9.0v1.10.1
github.com/google/go-containerregistry indirect patch v0.21.3v0.21.5
github.com/googleapis/enterprise-certificate-proxy indirect patch v0.3.14v0.3.15
github.com/letsencrypt/boulder indirect minor v0.20260324.0v0.20260504.0
github.com/mattn/go-runewidth indirect patch v0.0.21v0.0.23
github.com/secure-systems-lab/go-securesystemslib indirect minor v0.10.0v0.11.0
github.com/sigstore/protobuf-specs require patch v0.5.0v0.5.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.67.0v0.68.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.67.0v0.68.0
go.step.sm/crypto require minor v0.77.1v0.78.0
golang.org/x/crypto indirect minor v0.49.0v0.51.0
golang.org/x/net indirect minor v0.52.0v0.54.0
golang.org/x/sys indirect minor v0.42.0v0.44.0
golang.org/x/term indirect minor v0.41.0v0.43.0
golang.org/x/text indirect minor v0.35.0v0.37.0
google.golang.org/api require minor v0.273.0v0.278.0
google.golang.org/genproto indirect digest d00831a60b97b3
google.golang.org/genproto/googleapis/api indirect digest d00831a60b97b3
google.golang.org/genproto/googleapis/api require digest d00831a60b97b3
google.golang.org/genproto/googleapis/rpc indirect digest d00831a60b97b3
sigs.k8s.io/release-utils require patch v0.12.3v0.12.4

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

chainguard-dev/sdk (chainguard.dev/sdk)

v0.1.54

Compare Source

v0.1.53

Compare Source

Full Changelog: chainguard-dev/sdk@v0.1.52...v0.1.53

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.20.0

Compare Source

  • bigquery: Support SchemaUpdateOptions for load jobs.

  • bigtable:

    • Add SampleRowKeys.
    • cbt: Support union, intersection GCPolicy.
    • Retry admin RPCS.
    • Add trace spans to retries.
  • datastore: Add OpenCensus tracing.

  • firestore:

    • Fix queries involving Null and NaN.
    • Allow Timestamp protobuffers for time values.
  • logging: Add a WriteTimeout option.

  • spanner: Support Batch API.

  • storage: Add OpenCensus tracing.

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

v1.7.1: 1.7.1

Compare Source

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.0...v1.7.1

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes
  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes
  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

google/go-containerregistry (github.com/google/go-containerregistry)

v0.21.5

Compare Source

What's Changed

Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5

v0.21.4

Compare Source

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.3...v0.21.4

googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)

v0.3.15

Compare Source

What's Changed

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.14...v0.3.15

letsencrypt/boulder (github.com/letsencrypt/boulder)

v0.20260504.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260428.0...v0.20260504.0

v0.20260428.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260420.0...v0.20260428.0

v0.20260420.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260413.0...v0.20260420.0

v0.20260413.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260406.0...v0.20260413.0

v0.20260406.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260331.0...v0.20260406.0

v0.20260331.0

Compare Source

What's Changed

New Contributors

Full Changelog: letsencrypt/boulder@v0.20260324.0...v0.20260331.0

mattn/go-runewidth (github.com/mattn/go-runewidth)

v0.0.23

Compare Source

v0.0.22

Compare Source

secure-systems-lab/go-securesystemslib (github.com/secure-systems-lab/go-securesystemslib)

v0.11.0

Compare Source

sigstore/protobuf-specs (github.com/sigstore/protobuf-specs)

v0.5.1

Compare Source

  • Add ML-DSA-44 algorithm identifier (#​860)
smallstep/crypto (go.step.sm/crypto)

v0.78.0

Compare Source

What's Changed

Full Changelog: smallstep/crypto@v0.77.9...v0.78.0

v0.77.9

Compare Source

What's Changed

Full Changelog: smallstep/crypto@v0.77.8...v0.77.9

v0.77.8

Compare Source

What's Changed

Dependencies

Full Changelog: smallstep/crypto@v0.77.2...v0.77.8

v0.77.7

Compare Source

v0.77.6

Compare Source

v0.77.5

Compare Source

v0.77.4

Compare Source

v0.77.3

Compare Source

v0.77.2

Compare Source

googleapis/google-api-go-client (google.golang.org/api)

v0.278.0

Compare Source

Features

v0.277.0

Compare Source

Features
Bug Fixes

v0.276.0

Compare Source

Features

v0.275.0

Compare Source

Features

v0.274.0

Compare Source

Features

v0.273.1

Compare Source

Bug Fixes
kubernetes-sigs/release-utils (sigs.k8s.io/release-utils)

v0.12.4

Compare Source

Changes by Kind

Bug
  • Fix shared default options mutation across http agents. NewAgent() previously returned agents all pointing to the same options struct, so calling any With*() method on one agent would mutate all agents. (#​182, @​saschagrunert) [SIG Release]
Feature
  • The http.Agent now supports setting custom clients with WithClient() (#​169, @​puerco) [SIG Release]
Other (Cleanup or Flake)

Dependencies

Added
  • github.com/cespare/xxhash/v2: v2.3.0
Changed
Removed

Nothing has changed.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go dependencies to d5a96ad chore(deps): update go dependencies Mar 31, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 7 times, most recently from 65b0879 to dae0ecf Compare April 2, 2026 18:53
@red-hat-konflux
Copy link
Copy Markdown
Author

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/googleapis/gax-go/v2 v2.19.0 -> v2.20.0

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from dae0ecf to 94ce3dc Compare April 2, 2026 23:59
@red-hat-konflux
Copy link
Copy Markdown
Author

red-hat-konflux Bot commented Apr 2, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 19 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.7 -> 1.26.0
github.com/coreos/go-oidc/v3 v3.17.0 -> v3.18.0
github.com/go-jose/go-jose/v4 v4.1.3 -> v4.1.4
google.golang.org/grpc v1.79.3 -> v1.80.0
cloud.google.com/go/kms v1.26.0 -> v1.30.0
github.com/aws/aws-sdk-go-v2 v1.41.5 -> v1.41.7
github.com/aws/aws-sdk-go-v2/config v1.32.12 -> v1.32.16
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21 -> v2.7.23
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 -> v1.13.23
github.com/aws/aws-sdk-go-v2/service/kms v1.50.3 -> v1.51.0
github.com/aws/aws-sdk-go-v2/service/sso v1.30.14 -> v1.30.17
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.18 -> v1.35.21
github.com/aws/aws-sdk-go-v2/service/sts v1.41.10 -> v1.42.1
github.com/aws/smithy-go v1.24.2 -> v1.25.1
github.com/go-jose/go-jose/v3 v3.0.4 -> v3.0.5
github.com/googleapis/gax-go/v2 v2.19.0 -> v2.22.0
go.opentelemetry.io/otel v1.42.0 -> v1.43.0
go.opentelemetry.io/otel/metric v1.42.0 -> v1.43.0
go.opentelemetry.io/otel/sdk v1.42.0 -> v1.43.0
go.opentelemetry.io/otel/trace v1.42.0 -> v1.43.0
File name: hack/tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
google.golang.org/grpc v1.79.3 -> v1.80.0

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 18 times, most recently from b529537 to 4f52300 Compare April 8, 2026 06:41
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 26 times, most recently from ccbb1ee to 22519e2 Compare April 20, 2026 02:21
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 3 times, most recently from 5ab5acd to 196c4df Compare April 20, 2026 22:20
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants