Skip to content

chore(deps): update go dependencies#371

Open
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.3from
konflux/mintmaker/release-1.3/go-deps
Open

chore(deps): update go dependencies#371
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.3from
konflux/mintmaker/release-1.3/go-deps

Conversation

@red-hat-konflux
Copy link
Copy Markdown

@red-hat-konflux red-hat-konflux Bot commented Apr 7, 2026 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
chainguard.dev/sdk require patch v0.1.50 → v0.1.54
cloud.google.com/go/iam indirect minor v1.7.0 → v1.11.0
cloud.google.com/go/longrunning indirect minor v0.9.0 → v0.13.0
cloud.google.com/go/security require minor v1.20.0 → v1.23.0
github.com/Azure/azure-sdk-for-go/sdk/azcore indirect patch v1.21.0 → v1.21.1
github.com/aws/aws-sdk-go-v2/credentials indirect patch v1.19.14 → v1.19.16
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect patch v1.18.21 → v1.18.23
github.com/aws/aws-sdk-go-v2/internal/configsources indirect patch v1.4.21 → v1.4.23
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect patch v1.13.7 → v1.13.9
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url indirect patch v1.13.21 → v1.13.23
github.com/aws/aws-sdk-go-v2/service/signin indirect patch v1.0.9 → v1.0.11
github.com/fsnotify/fsnotify require minor v1.9.0 → v1.10.1
github.com/google/go-containerregistry indirect patch v0.21.4 → v0.21.5
github.com/googleapis/enterprise-certificate-proxy indirect patch v0.3.14 → v0.3.15
github.com/letsencrypt/boulder indirect minor v0.20260406.0 → v0.20260504.0
github.com/secure-systems-lab/go-securesystemslib indirect minor v0.10.0 → v0.11.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.67.0 → v0.68.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.67.0 → v0.68.0
go.step.sm/crypto require minor v0.77.2 → v0.78.0
golang.org/x/crypto indirect minor v0.49.0 → v0.51.0
golang.org/x/net indirect minor v0.52.0 → v0.54.0
golang.org/x/sys indirect minor v0.42.0 → v0.44.0
golang.org/x/term indirect minor v0.41.0 → v0.43.0
golang.org/x/text indirect minor v0.35.0 → v0.37.0
google.golang.org/api require minor v0.274.0 → v0.278.0
google.golang.org/genproto indirect digest 6f92a3b → 60b97b3
google.golang.org/genproto/googleapis/api require digest 6f92a3b → 60b97b3
google.golang.org/genproto/googleapis/rpc indirect digest 6f92a3b → 60b97b3

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

chainguard-dev/sdk (chainguard.dev/sdk)

v0.1.54

Compare Source

v0.1.53

Compare Source

Full Changelog: chainguard-dev/sdk@v0.1.52...v0.1.53

v0.1.52

Compare Source

Full Changelog: chainguard-dev/sdk@v0.1.51...v0.1.52

v0.1.51

Compare Source

Full Changelog: chainguard-dev/sdk@v0.1.50...v0.1.51

googleapis/google-cloud-go (cloud.google.com/go/longrunning)

v0.13.0

Compare Source

  • bigquery: UseLegacySQL options for CreateTable and QueryConfig. Use these
    options to continue using Legacy SQL after the client switches its default
    to Standard SQL.

  • bigquery: Support for updating dataset labels.

  • bigquery: Set DatasetIterator.ProjectID to list datasets in a project other
    than the client's. DatasetsInProject is no longer needed and is deprecated.

  • bigtable: Fail ListInstances when any zones fail.

  • spanner: support decoding of slices of basic types (e.g. []string, []int64,
    etc.)

  • logging/logadmin: UpdateSink no longer creates a sink if it is missing
    (actually a change to the underlying service, not the client)

  • profiler: Service and ServiceVersion replace Target in Config.

v0.12.0

Compare Source

  • pubsub: Subscription.Receive now uses streaming pull.

  • pubsub: add Client.TopicInProject to access topics in a different project
    than the client.

  • errors: renamed errorreporting. The errors package will be removed shortly.

  • datastore: improved retry behavior.

  • bigquery: support updates to dataset metadata, with etags.

  • bigquery: add etag support to Table.Update (BREAKING: etag argument added).

  • bigquery: generate all job IDs on the client.

  • storage: support bucket lifecycle configurations.

v0.11.0

Compare Source

  • Clients for spanner, pubsub and video are now in beta.

  • New client for DLP.

  • spanner: performance and testing improvements.

  • storage: requester-pays buckets are supported.

  • storage, profiler, bigtable, bigquery: bug fixes and other minor improvements.

  • pubsub: bug fixes and other minor improvements

v0.10.0

Compare Source

  • pubsub: Subscription.ModifyPushConfig replaced with Subscription.Update.

  • pubsub: Subscription.Receive now runs concurrently for higher throughput.

  • vision: cloud.google.com/go/vision is deprecated. Use
    cloud.google.com/go/vision/apiv1 instead.

  • translation: now stable.

  • trace: several changes to the surface. See the link below.

Code changes required from v0.9.0

  • pubsub: Replace

    sub.ModifyPushConfig(ctx, pubsub.PushConfig{Endpoint: "https://example.com/push"})

    with

    sub.Update(ctx, pubsub.SubscriptionConfigToUpdate{
    PushConfig: &pubsub.PushConfig{Endpoint: "https://example.com/push"},
})

  • trace: traceGRPCServerInterceptor will be provided from *trace.Client.
    Given an initialized *trace.Client named tc, instead of

    s := grpc.NewServer(grpc.UnaryInterceptor(trace.GRPCServerInterceptor(tc)))

    write

    s := grpc.NewServer(grpc.UnaryInterceptor(tc.GRPCServerInterceptor()))

  • trace trace.GRPCClientInterceptor will also provided from *trace.Client.
    Instead of

    conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(trace.GRPCClientInterceptor()))

    write

    conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor()))

  • trace: We removed the deprecated trace.EnableGRPCTracing. Use the gRPC
    interceptor as a dial option as shown below when initializing Cloud package
    clients:

    c, err := pubsub.NewClient(ctx, "project-id", option.WithGRPCDialOption(grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor())))
if err != nil {
    ...
}
fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes

  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

google/go-containerregistry (github.com/google/go-containerregistry)

v0.21.5

Compare Source

What's Changed

Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5

googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)

v0.3.15

Compare Source

What's Changed

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.14...v0.3.15

letsencrypt/boulder (github.com/letsencrypt/boulder)

v0.20260504.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260428.0...v0.20260504.0

v0.20260428.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260420.0...v0.20260428.0

v0.20260420.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260413.0...v0.20260420.0

v0.20260413.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260406.0...v0.20260413.0

secure-systems-lab/go-securesystemslib (github.com/secure-systems-lab/go-securesystemslib)

v0.11.0

Compare Source

smallstep/crypto (go.step.sm/crypto)

v0.78.0

Compare Source

What's Changed

Full Changelog: smallstep/crypto@v0.77.9...v0.78.0

v0.77.9

Compare Source

What's Changed

Full Changelog: smallstep/crypto@v0.77.8...v0.77.9

v0.77.8

Compare Source

What's Changed

Dependencies

Full Changelog: smallstep/crypto@v0.77.2...v0.77.8

v0.77.7

Compare Source

v0.77.6

Compare Source

v0.77.5

Compare Source

v0.77.4

Compare Source

v0.77.3

Compare Source

googleapis/google-api-go-client (google.golang.org/api)

v0.278.0

Compare Source

Features

v0.277.0

Compare Source

Features
Bug Fixes

v0.276.0

Compare Source

Features

v0.275.0

Compare Source

Features

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 8 times, most recently from b57cb92 to abe73a6 Compare April 13, 2026 22:56
@red-hat-konflux
Copy link
Copy Markdown
Author

red-hat-konflux Bot commented Apr 13, 2026 •
edited
Loading

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 13 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.6 -> 1.26.0
github.com/coreos/go-oidc/v3 v3.17.0 -> v3.18.0
cloud.google.com/go/kms v1.27.0 -> v1.30.0
github.com/aws/aws-sdk-go-v2 v1.41.5 -> v1.41.7
github.com/aws/aws-sdk-go-v2/config v1.32.14 -> v1.32.16
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21 -> v2.7.23
github.com/aws/aws-sdk-go-v2/service/kms v1.50.4 -> v1.51.0
github.com/aws/aws-sdk-go-v2/service/sso v1.30.15 -> v1.30.17
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.19 -> v1.35.21
github.com/aws/aws-sdk-go-v2/service/sts v1.41.10 -> v1.42.1
github.com/aws/smithy-go v1.24.3 -> v1.25.1
github.com/go-jose/go-jose/v3 v3.0.4 -> v3.0.5
github.com/googleapis/gax-go/v2 v2.21.0 -> v2.22.0
golang.org/x/sys v0.42.0 -> v0.44.0

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 20 times, most recently from 5525b7f to fb71d28 Compare April 20, 2026 22:20
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 22 times, most recently from 93cc3e4 to daac8d3 Compare April 30, 2026 22:40
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 7 times, most recently from 7298a1c to f0d0efc Compare May 3, 2026 02:38
@red-hat-konflux
chore(deps): update go dependencies
20da3fe 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants