chore(deps): update go dependencies

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
chainguard.dev/sdk	require	patch	v0.1.53 → v0.1.54
github.com/aws/aws-sdk-go-v2/credentials	indirect	patch	v1.19.13 → v1.19.15
github.com/letsencrypt/boulder	indirect	minor	v0.20260420.0 → v0.20260428.0
github.com/secure-systems-lab/go-securesystemslib	indirect	minor	v0.10.0 → v0.11.0
go.step.sm/crypto	require	patch	v0.77.2 → v0.77.9
google.golang.org/genproto	indirect	digest	e10c466 → 7cedc36
google.golang.org/genproto/googleapis/api	indirect	digest	e10c466 → 7cedc36
google.golang.org/genproto/googleapis/api	require	digest	e10c466 → 7cedc36
google.golang.org/genproto/googleapis/rpc	indirect	digest	e10c466 → 7cedc36

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

chainguard-dev/sdk (chainguard.dev/sdk)

v0.1.54

Compare Source

letsencrypt/boulder (github.com/letsencrypt/boulder)

v0.20260428.0

Compare Source

What's Changed

• Supply authz ID in CAA rechecks by @​aarongable in #​8730
• Update go.mod to go1.26 by @​aarongable in #​8727
• db: remove IsNoRows by @​jsha in #​8733
• db: remove MockSQLExecutor by @​jsha in #​8731
• Add gauges for CRL size in bytes and num entries by @​aarongable in #​8720
• ca: rand.Read is infallible by @​jsha in #​8736
• sa: deprecate parallelismPerRPC by @​jsha in #​8728
• sa: check for sql.ErrNoRows on Get() by @​jsha in #​8732

Full Changelog: letsencrypt/boulder@v0.20260420.0...v0.20260428.0

secure-systems-lab/go-securesystemslib (github.com/secure-systems-lab/go-securesystemslib)

v0.11.0

Compare Source

smallstep/crypto (go.step.sm/crypto)

v0.77.9

Compare Source

What's Changed

• Retract v0.77.3 - v0.77.7 by @​hslatman in #​1011

Full Changelog: smallstep/crypto@v0.77.8...v0.77.9

v0.77.8

Compare Source

What's Changed

Dependencies

• chore(deps): Bump modernc.org/sqlite from 1.47.0 to 1.48.0 by @​dependabot[bot] in #​988
• chore(deps): Bump google.golang.org/api from 0.272.0 to 0.273.0 by @​dependabot[bot] in #​990
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.50.3 to 1.50.4 by @​dependabot[bot] in #​989
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.12 to 1.32.13 by @​dependabot[bot] in #​987
• chore(deps): Bump github.com/googleapis/gax-go/v2 from 2.19.0 to 2.21.0 by @​dependabot[bot] in #​995
• chore(deps): Bump google.golang.org/api from 0.273.0 to 0.274.0 by @​dependabot[bot] in #​993
• chore(deps): Bump cloud.google.com/go/kms from 1.26.0 to 1.27.0 by @​dependabot[bot] in #​994
• chore(deps): Bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5 by @​dependabot[bot] in #​991
• chore(deps): Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @​dependabot[bot] in #​992
• chore(deps): Bump modernc.org/sqlite from 1.48.0 to 1.48.2 by @​dependabot[bot] in #​1000
• chore(deps): Bump golang.org/x/term from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​999
• chore(deps): Bump cloud.google.com/go/kms from 1.27.0 to 1.28.0 by @​dependabot[bot] in #​998
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.13 to 1.32.14 by @​dependabot[bot] in #​997
• chore(deps): Bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @​dependabot[bot] in #​996
• chore(deps): Bump golang.org/x/net from 0.52.0 to 0.53.0 by @​dependabot[bot] in #​1002
• chore(deps): Bump github.com/googleapis/gax-go/v2 from 2.21.0 to 2.22.0 by @​dependabot[bot] in #​1005
• chore(deps): Bump modernc.org/sqlite from 1.48.2 to 1.49.1 by @​dependabot[bot] in #​1003
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.50.4 to 1.50.5 by @​dependabot[bot] in #​1001
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.50.5 to 1.51.0 by @​dependabot[bot] in #​1010
• chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 by @​dependabot[bot] in #​1009
• chore(deps): Bump google.golang.org/api from 0.274.0 to 0.276.0 by @​dependabot[bot] in #​1008
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.14 to 1.32.16 by @​dependabot[bot] in #​1007
• chore(deps): Bump github.com/go-piv/piv-go/v2 from 2.5.0 to 2.6.0 by @​dependabot[bot] in #​1004

Full Changelog: smallstep/crypto@v0.77.2...v0.77.8

v0.77.7

Compare Source

v0.77.6

Compare Source

v0.77.5

Compare Source

v0.77.4

Compare Source

v0.77.3

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 8 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.7 -> 1.26.0
github.com/coreos/go-oidc/v3	v3.17.0 -> v3.18.0
github.com/aws/aws-sdk-go-v2/config	v1.32.12 -> v1.32.16
github.com/aws/aws-sdk-go-v2/service/kms	v1.50.3 -> v1.51.0
github.com/aws/aws-sdk-go-v2/service/sso	v1.30.14 -> v1.30.16
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.35.18 -> v1.35.20
github.com/aws/aws-sdk-go-v2/service/sts	v1.41.10 -> v1.42.0
github.com/go-jose/go-jose/v3	v3.0.4 -> v3.0.5
github.com/googleapis/gax-go/v2	v2.21.0 -> v2.22.0

[red-hat-konflux]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.