Skip to content

fix(deps): update all non-major dependencies#50

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#50
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Apr 21, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change OpenSSF Age Confidence
delve minor 1.24.11.26.0 OpenSSF Scorecard age confidence
github.com/aquasecurity/trivy require minor v0.61.1v0.69.1 OpenSSF Scorecard age confidence
github.com/containerd/containerd require patch v1.7.27v1.7.30 OpenSSF Scorecard age confidence
github.com/docker/go-connections require minor v0.5.0v0.6.0 OpenSSF Scorecard age confidence
github.com/google/go-containerregistry require minor v0.20.3v0.21.1 OpenSSF Scorecard age confidence
github.com/samber/lo require minor v1.49.1v1.52.0 OpenSSF Scorecard age confidence
github.com/sirupsen/logrus require patch v1.9.3v1.9.4 OpenSSF Scorecard age confidence
github.com/stretchr/testify require minor v1.10.0v1.11.1 OpenSSF Scorecard age confidence
go (source) toolchain minor 1.24.21.26.0 OpenSSF Scorecard age confidence
go minor 1.24.01.26.0 age confidence
golang.org/x/sync require minor v0.13.0v0.19.0 age confidence
gopls (source) minor 0.18.10.21.1 OpenSSF Scorecard age confidence

Release Notes

go-delve/delve (delve)

v1.26.0

Added
Fixed
Changed

v1.25.2

Added
Fixed
Changed

v1.25.1

Added
Fixed
Changed

v1.25.0

Added
Fixed
Changed

v1.24.2

Added
Fixed
Changed
aquasecurity/trivy (github.com/aquasecurity/trivy)

v0.69.1

Compare Source

Changelog

  • 123888b release: v0.69.1 [release/v0.69] (#​10145)
  • 29d3b06 ci: add composite action for Go setup [backport: release/v0.69] (#​10150)
  • 3b30cc7 fix(misconf): apply check aliases when filtering results via .trivyignore [backport: release/v0.69] (#​10143)
  • a8e279b chore(deps): bump to alpine:3.23.3 and go-1.25.6 to fix CVEs [backport: release/v0.69] (#​10135)

v0.69.0

Compare Source

👉 Trivy v0.69.0 release notes (click here)

⬇️ Download Trivy

🐳 New Docker Install option

  • docker pull get.trivy.dev/image/trivy:0.69.0

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0690-2026-01-30

v0.68.2

Compare Source

Changelog

v0.68.1

Compare Source

👉 Trivy v0.68.1 release notes (click here)

[!NOTE]
v0.68.0 was skipped due to issues with the release.

⬇️ Download Trivy

🐳 Docker Install

  • docker pull get.trivy.dev/image/trivy:0.68.1

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0680-2025-12-02

v0.68.0

Compare Source

v0.67.2

Compare Source

Changelog

  • 60c57ad release: v0.67.2 [release/v0.67] (#​9639)
  • f3ee80c fix: Use fetch-level: 1 to check out trivy-repo in the release workflow [backport: release/v0.67] (#​9638)

v0.67.1

Compare Source

Changelog

  • cbed239 release: v0.67.1 [release/v0.67] (#​9614)
  • 1a84093 fix: restore compatibility for google.protobuf.Value [backport: release/v0.67] (#​9631)
  • 3bc1490 fix: using SrcVersion instead of Version for echo detector [backport: release/v0.67] (#​9629)
  • 542eee7 fix: add buildInfo for BlobInfo in rpc package [backport: release/v0.67] (#​9615)
  • f65dd05 fix(vex): don't use reused BOM [backport: release/v0.67] (#​9612)

v0.67.0

Compare Source

👉 Trivy v0.67.0 release notes (click here)
⬇️ Download Trivy
🐳 New Docker Install option
  • docker pull get.trivy.dev/image/trivy:0.67.0
Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0670-2025-09-30

v0.66.0

Compare Source

👉 Trivy v.66.0 release notes (click here)
⬇️ Download Trivy
Full changelog

v0.65.0

Compare Source

👉 Trivy v.65.0 release notes (click here)
⬇️ Download Trivy
Full changelog

v0.64.1

Compare Source

Changelog
  • 86ee3c1 release: v0.64.1 [release/v0.64] (#​9122)
  • 4e12722 fix(misconf): skip rewriting expr if attr is nil [backport: release/v0.64] (#​9127)
  • 9a7d384 fix(cli): Add more non-sensitive flags to telemetry [backport: release/v0.64] (#​9124)
  • 53adfba fix(rootio): check full version to detect root.io packages [backport: release/v0.64] (#​9120)
  • 8cf1bf9 fix(alma): parse epochs from rpmqa file [backport: release/v0.64] (#​9119)

v0.64.0

Compare Source

👉 Trivy v.64.0 release notes (click here)
⬇️ Download Trivy
Full changelog

v0.63.0

Compare Source

👉 Trivy v.63.0 release notes (click here)

⬇️ Download Trivy

Full changelog

v0.62.1

Compare Source

Changelog
  • c75ed21 release: v0.62.1 [release/v0.62] (#​8825)
  • aafebeb chore(deps): bump the common group across 1 directory with 10 updates [backport: release/v0.62] (#​8831)
  • 99485cf fix(misconf): check if for-each is known when expanding dyn block [backport: release/v0.62] (#​8826)
  • b4fc9e8 fix(redhat): trim invalid suffix from content_sets in manifest parsing [backport: release/v0.62] (#​8824)

v0.62.0

Compare Source

⚡Release highlights and summary⚡

👉 https://redirect.github.com/aquasecurity/trivy/discussions/8801

Changelog

https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md#0620-2025-04-30

containerd/containerd (github.com/containerd/containerd)

v1.7.30: containerd 1.7.30

Compare Source

Welcome to the v1.7.30 release of containerd!

The thirtieth patch release for containerd 1.7 contains various fixes
and updates.

Highlights
Container Runtime Interface (CRI)
  • Fix NRI dropping requested CDI devices silently (#​12650)
  • Redact all query parameters in CRI error logs (#​12551)
Runtime

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Derek McGowan
  • Akihiro Suda
  • Austin Vazquez
  • Mike Brown
  • Wei Fu
  • Andrey Noskov
  • CrazyMax
  • Davanum Srinivas
  • Jin Dong
  • Krisztian Litkey
  • Maksym Pavlenko
  • Paweł Gronowski
  • Phil Estes
  • Samuel Karp
Changes
26 commits

  • Prepare release notes for v1.7.30 (#​12652)
    • 3d0ca6d2e Prepare release notes for v1.7.30
  • Fix NRI dropping requested CDI devices silently (#​12650)
    • 0bc74f47e cri,nri: don't drop requested CDI devices silently.
  • script/setup/install-cni: install CNI plugins v1.9.0 (#​12660)
    • 7db16b562 script/setup/install-cni: install CNI plugins v1.9.0
  • go.mod: golang.org/x/crypto v0.45.0 (drop support for Go 1.23) (#​12640)
  • ci: bump Go 1.24.11, 1.25.5 (#​12627)
  • Update runc binary to v1.3.4 (#​12619)
    • 34b89a574 runc: Update runc binary to v1.3.4
  • ci: update CIFuzz actions to support Ubuntu 24.04 (#​12635)
    • 6e0dd8956 ci: update CIFuzz actions to support Ubuntu 24.04
  • build(deps): bump github.com/opencontainers/selinux (#​12591)
    • 3eea2a4af build(deps): bump github.com/opencontainers/selinux
  • remove sha256-simd (#​12576)
  • .github: skip 5 critest cases for window-2022 (#​12586)
    • ce2d3a67f .github: skip 5 critest cases in window CI pipeline
  • Redact all query parameters in CRI error logs (#​12551)
    • 65271ea89 fix: redact all query parameters in CRI error logs

Dependency Changes
  • github.com/cyphar/filepath-securejoin v0.5.1 new
  • github.com/opencontainers/selinux v1.11.0 -> v1.13.1
  • golang.org/x/crypto v0.40.0 -> v0.45.0
  • golang.org/x/mod v0.26.0 -> v0.29.0
  • golang.org/x/net v0.42.0 -> v0.47.0
  • golang.org/x/sync v0.16.0 -> v0.18.0
  • golang.org/x/sys v0.34.0 -> v0.38.0
  • golang.org/x/term v0.33.0 -> v0.37.0
  • golang.org/x/text v0.27.0 -> v0.31.0

Previous release can be found at v1.7.29

v1.7.29: containerd 1.7.29

Compare Source

Welcome to the v1.7.29 release of containerd!

The twenty-ninth patch release for containerd 1.7 contains various fixes
and updates including security patches.

Security Updates
Highlights
Image Distribution
  • Update differ to handle zstd media types (#​12018)
Runtime
  • Update runc binary to v1.3.3 (#​12480)
  • Fix lost container logs from quickly closing io (#​12375)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Derek McGowan
  • Akihiro Suda
  • Phil Estes
  • Austin Vazquez
  • Sebastiaan van Stijn
  • ningmingxiao
  • Maksym Pavlenko
  • StepSecurity Bot
  • wheat2018
Changes
38 commits

  • 442cb34bd Merge commit from fork
  • 0450f046e Fix directory permissions
  • e5cb6ddb7 Merge commit from fork
  • c575d1b5f fix goroutine leak of container Attach
  • Prepare release notes for v1.7.29 (#​12486)
    • 1fc2daaf3 Prepare release notes for v1.7.29
  • Update runc binary to v1.3.3 (#​12480)
    • 3f5f9f872 runc: Update runc binary to v1.3.3
  • Update GHA images and bump Go 1.24.9; 1.25.3 (#​12471)
    • 667409fb6 ci: bump Go 1.24.9, 1.25.3
    • 294f8c027 Update GHA runners to use latest images for basic binaries build
    • cf66b4141 Update GHA runners to use latest image for most jobs
    • fa3e6fa18 pkg/epoch: extract parsing SOURCE_DATE_EPOCH to a function
    • ac334bffc pkg/epoch: fix tests on macOS
    • d04b8721f pkg/epoch: replace some fmt.Sprintfs with strconv
  • CI: update Fedora to 43 (#​12450)
  • CI: skip ubuntu-24.04-arm on private repos (#​12429)
    • cf99a012d CI: skip ubuntu-24.04-arm on private repos
  • runc:Update runc binary to v1.3.1 (#​12276)
    • 4c77b8d07 runc:Update runc binary to v1.3.1
  • Fix lost container logs from quickly closing io (#​12375)
    • d30024db2 bugfix:fix container logs lost because io close too quickly
  • ci: bump Go 1.24.8 (#​12362)
    • f4b3d96f3 ci: bump Go 1.24.8
    • 334fd8e4b update golangci-lint to v1.64.2
    • 8a67abc4c Drop inactivated linter exportloopref
    • e4dbf08f0 build(deps): bump golangci/golangci-lint-action from 6.3.2 to 6.5.0
    • d7db2ba06 build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.2
    • d7182888f build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0
    • 4be6c7e3b build(deps): bump actions/cache from 4.1.2 to 4.2.0
    • a2e097e86 build(deps): bump actions/checkout from 4.2.1 to 4.2.2
    • 6de404d11 build(deps): bump actions/cache from 4.1.1 to 4.1.2
    • 038a25584 [StepSecurity] ci: Harden GitHub Actions
  • Update differ to handle zstd media types (#​12018)
    • eaeb4b6ac Update differ to handle zstd media types
  • ci: bump Go 1.23.12, 1.24.6 (#​12188)

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.7.28

v1.7.28: containerd 1.7.28

Compare Source

Welcome to the v1.7.28 release of containerd!

The twenty-eighth patch release for containerd 1.7 contains various fixes
and updates.

Highlights
Image Distribution
  • Refresh OAuth tokens when they expire during registry operations (#​11721)
  • Set default differ for the default unpack config of transfer service (#​11689)
Runtime
  • Update runc binary to v1.3.0 (#​11800)
  • Remove invalid error log when stopping container after containerd restart (#​11620)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Akhil Mohan
  • Akihiro Suda
  • Austin Vazquez
  • Maksym Pavlenko
  • Phil Estes
  • Derek McGowan
  • Kirtana Ashok
  • Henry Wang
  • Iain Macdonald
  • Jin Dong
  • Swagat Bora
  • Wei Fu
  • Yang Yang
  • madraceee
Changes
57 commits

  • Prepare release notes for v1.7.28 (#​12134)
    • b01b809f8 Prepare release notes for v1.7.28
  • ci: bump Go 1.23.11, 1.24.5 (#​12117)
  • Backport windows test fixes (#​12121)
    • 3c06bcc4d Fix intermittent test failures on Windows CIs
    • c6c0c6854 Remove WS2025 from CIs due to regression
  • ci: use fedora 39 archive (#​12123)
    • 6d7e021cf ci: use fedora/39-cloud-base image from archive
  • update runners to ubuntu 24.04 (#​11802)
    • c362e18cc CI: install OVMF for Vagrant
    • 1d99bec21 CI: fix "Unable to find a source package for vagrant" error
    • dafa3c48d add debian sources for ubuntu-24
    • b03301d85 partial: enable ubuntu 24 runners
    • 13fbc5f97 update release runners to ubuntu 24.04
  • go.mod: golang.org/x/* latest (#​12096)
  • Remove additional fuzzers from instrumentation repo (#​12099)
    • 5fef123ba Remove additional fuzzers from CI
  • backport windows runner and golang toolchain updates (#​11972)
    • a35978f5a ci: bump golang [1.23.10, 1.24.4] in build and release
    • df035aa3e ci: bump golang [1.23.9, 1.24.3] in build and release
    • 2a6d9fc71 use go1.23.8 as the default go version
    • 15d4d6eba update to go 1.24.2, 1.23.8
    • 1613a3b1a Enable CIs to run on WS2022 and WS2025
  • test: added runc v1 tests using vagrant (#​11896)
    • 60e73122c test: added runc v1 tests using vagrant
  • Revert "disable portmap test in ubuntu-22 to make CI happy" (#​11803)
    • 10e1b515e Revert "Disable port mapping tests in CRI-in-UserNS"
    • [7a680e884](ht

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Apr 21, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 6d6c811 to 1b4b54d Compare April 26, 2025 21:51
@renovate renovate bot changed the title fix(deps): update module github.com/aquasecurity/trivy to v0.61.1 fix(deps): update all non-major dependencies Apr 26, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 359229c to 91dea37 Compare May 6, 2025 10:30
@renovate
Copy link
Contributor Author

renovate bot commented May 6, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 128 additional dependencies were updated

Details:

Package Change
github.com/docker/docker v27.5.1+incompatible -> v28.5.2+incompatible
github.com/sirupsen/logrus v1.9.3 -> v1.9.4-0.20230606125235-dd1b4c2e81af
cel.dev/expr v0.19.0 -> v0.24.0
cloud.google.com/go v0.116.0 -> v0.121.6
cloud.google.com/go/auth v0.14.0 -> v0.17.0
cloud.google.com/go/auth/oauth2adapt v0.2.7 -> v0.2.8
cloud.google.com/go/compute/metadata v0.6.0 -> v0.9.0
cloud.google.com/go/iam v1.2.2 -> v1.5.3
cloud.google.com/go/monitoring v1.21.2 -> v1.24.2
cloud.google.com/go/storage v1.49.0 -> v1.56.0
dario.cat/mergo v1.0.1 -> v1.0.2
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.17.0 -> v1.20.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.2 -> v1.13.1
github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 -> v1.11.2
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/AzureAD/microsoft-authentication-library-for-go v1.3.3 -> v1.6.0
github.com/BurntSushi/toml v1.4.0 -> v1.5.0
github.com/CycloneDX/cyclonedx-go v0.9.2 -> v0.9.3
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.25.0 -> v1.29.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.48.1 -> v0.53.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.48.1 -> v0.53.0
github.com/Masterminds/semver/v3 v3.3.0 -> v3.4.0
github.com/Microsoft/hcsshim v0.12.9 -> v0.14.0-rc.1
github.com/ProtonMail/go-crypto v1.1.5 -> v1.3.0
github.com/aquasecurity/go-npm-version v0.0.1 -> v0.0.2
github.com/aquasecurity/trivy-checks v1.8.1 -> v1.11.3-0.20250604022615-9a7efa7c9169
github.com/aquasecurity/trivy-db v0.0.0-20250227071930-8bd8a9b89e2d -> v0.0.0-20250929072116-eba1ced2340a
github.com/aws/aws-sdk-go-v2 v1.36.3 -> v1.40.0
github.com/aws/aws-sdk-go-v2/config v1.29.9 -> v1.32.0
github.com/aws/aws-sdk-go-v2/credentials v1.17.62 -> v1.19.0
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 -> v1.18.14
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 -> v1.4.14
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 -> v2.7.14
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 -> v1.8.4
github.com/aws/aws-sdk-go-v2/service/ecr v1.42.1 -> v1.53.1
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 -> v1.13.3
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 -> v1.13.14
github.com/aws/aws-sdk-go-v2/service/s3 v1.78.1 -> v1.92.0
github.com/bmatcuk/doublestar/v4 v4.8.1 -> v4.9.1
github.com/cloudflare/circl v1.6.0 -> v1.6.1
github.com/cncf/xds/go v0.0.0-20240905190251-b4127c9b8d78 -> v0.0.0-20250501225837-2ac532fd4443
github.com/containerd/cgroups/v3 v3.0.3 -> v3.1.0
github.com/containerd/containerd/api v1.8.0 -> v1.10.0
github.com/containerd/containerd/v2 v2.0.4 -> v2.2.0
github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
github.com/containerd/stargz-snapshotter/estargz v0.16.3 -> v0.18.1
github.com/cyphar/filepath-securejoin v0.4.1 -> v0.6.0
github.com/dlclark/regexp2 v1.4.0 -> v1.11.0
github.com/docker/cli v27.5.0+incompatible -> v29.0.3+incompatible
github.com/docker/docker-credential-helpers v0.8.2 -> v0.9.3
github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0
github.com/envoyproxy/go-control-plane v0.13.1 -> v0.13.4
github.com/envoyproxy/protoc-gen-validate v1.1.0 -> v1.2.1
github.com/evanphx/json-patch v5.9.0+incompatible -> v5.9.11+incompatible
github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0
github.com/go-git/go-git/v5 v5.14.0 -> v5.16.3
github.com/go-logr/logr v1.4.2 -> v1.4.3
github.com/go-openapi/jsonpointer v0.21.0 -> v0.22.1
github.com/go-openapi/jsonreference v0.21.0 -> v0.21.3
github.com/go-openapi/swag v0.23.0 -> v0.25.1
github.com/golang-jwt/jwt/v5 v5.2.2 -> v5.3.0
github.com/google/btree v1.1.2 -> v1.1.3
github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49 -> v0.7.0
github.com/googleapis/enterprise-certificate-proxy v0.3.4 -> v0.3.6
github.com/googleapis/gax-go/v2 v2.14.1 -> v2.15.0
github.com/gorilla/websocket v1.5.0 -> v1.5.4-0.20250319132907-e064f32e3674
github.com/hashicorp/go-getter v1.7.8 -> v1.8.3
github.com/hashicorp/hcl/v2 v2.23.0 -> v2.24.0
github.com/klauspost/compress v1.17.11 -> v1.18.1
github.com/moby/buildkit v0.18.2 -> v0.26.2
github.com/moby/sys/user v0.3.0 -> v0.4.0
github.com/moby/term v0.5.0 -> v0.5.2
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/oklog/ulid/v2 v2.1.0 -> v2.1.1
github.com/open-policy-agent/opa v1.2.0 -> v1.10.1
github.com/opencontainers/runtime-spec v1.2.0 -> v1.2.1
github.com/opencontainers/selinux v1.11.1 -> v1.13.0
github.com/prometheus/client_golang v1.21.0 -> v1.23.2
github.com/prometheus/client_model v0.6.1 -> v0.6.2
github.com/prometheus/common v0.62.0 -> v0.66.1
github.com/prometheus/procfs v0.15.1 -> v0.17.0
github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 -> v0.0.0-20250401214520-65e299d6c5c9
github.com/rubenv/sql-migrate v1.7.1 -> v1.8.0
github.com/samber/oops v1.15.0 -> v1.18.1
github.com/secure-systems-lab/go-securesystemslib v0.9.0 -> v0.9.1
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/spf13/cast v1.7.1 -> v1.10.0
github.com/spf13/cobra v1.9.1 -> v1.10.1
github.com/spf13/pflag v1.0.6 -> v1.0.10
github.com/tchap/go-patricia/v2 v2.3.2 -> v2.3.3
github.com/tonistiigi/go-csvvalue v0.0.0-20240710180619-ddb21b71c0b4 -> v0.0.0-20240814133006-030d3b2625d0
github.com/ulikunitz/xz v0.5.12 -> v0.5.15
github.com/zclconf/go-cty v1.16.2 -> v1.17.0
go.etcd.io/bbolt v1.4.0 -> v1.4.3
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/detectors/gcp v1.32.0 -> v1.36.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 -> v0.61.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 -> v0.63.0
go.opentelemetry.io/otel v1.34.0 -> v1.38.0
go.opentelemetry.io/otel/metric v1.34.0 -> v1.38.0
golang.org/x/crypto v0.36.0 -> v0.45.0
golang.org/x/mod v0.24.0 -> v0.30.0
golang.org/x/net v0.37.0 -> v0.47.0
golang.org/x/oauth2 v0.26.0 -> v0.33.0
golang.org/x/sys v0.31.0 -> v0.38.0
golang.org/x/term v0.30.0 -> v0.37.0
golang.org/x/text v0.23.0 -> v0.31.0
google.golang.org/api v0.218.0 -> v0.254.0
google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 -> v0.0.0-20250603155806-513f23925822
google.golang.org/genproto/googleapis/api v0.0.0-20250115164207-1a7da9e5054f -> v0.0.0-20250825161204-c5933d9347a5
google.golang.org/genproto/googleapis/rpc v0.0.0-20250115164207-1a7da9e5054f -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/grpc v1.70.0 -> v1.76.0
google.golang.org/protobuf v1.36.5 -> v1.36.10
gotest.tools/v3 v3.5.0 -> v3.5.2
helm.sh/helm/v3 v3.17.2 -> v3.19.2
k8s.io/api v0.32.3 -> v0.34.2
k8s.io/apiextensions-apiserver v0.32.2 -> v0.34.0
k8s.io/apimachinery v0.32.3 -> v0.34.2
k8s.io/apiserver v0.32.2 -> v0.34.0
k8s.io/cli-runtime v0.32.3 -> v0.34.0
k8s.io/client-go v0.32.3 -> v0.34.1
k8s.io/component-base v0.32.3 -> v0.34.0
k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f -> v0.0.0-20250710124328-f3f2b991d03b
k8s.io/kubectl v0.32.3 -> v0.34.0
k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 -> v0.0.0-20250604170112-4c0f3b243397
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 -> v0.0.0-20241014173422-cfa47c3a1cc8
sigs.k8s.io/kustomize/api v0.18.0 -> v0.20.1
sigs.k8s.io/yaml v1.4.0 -> v1.6.0

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from c0ca513 to 48188c0 Compare May 7, 2025 22:49
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 3f0c4c1 to 3c59f8f Compare May 22, 2025 21:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from ad08047 to 2dbd594 Compare June 5, 2025 14:08
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from f39a77b to 0f84cdb Compare June 11, 2025 16:54
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 7fa159e to 75767a2 Compare June 19, 2025 16:44
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 75767a2 to ce78366 Compare June 23, 2025 23:58
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from f3d5f9e to 42c4b83 Compare July 3, 2025 20:30
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 0de4e44 to 51ed69f Compare July 9, 2025 19:47
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from be6c9d7 to 0e759a5 Compare July 26, 2025 04:37
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0e759a5 to daf3e13 Compare August 4, 2025 22:08
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 858707a to 9b05f90 Compare October 15, 2025 18:32
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 83dc792 to 07bd125 Compare November 8, 2025 13:39
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from a18deef to 094e394 Compare November 25, 2025 01:12
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from e58f74c to ead3f22 Compare December 3, 2025 10:56
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from ead3f22 to ce3e9a7 Compare December 8, 2025 12:57
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from ce3e9a7 to 7fe13f6 Compare December 15, 2025 14:37
@renovate
Copy link
Contributor Author

renovate bot commented Dec 15, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 132 additional dependencies were updated

Details:

Package Change
github.com/docker/docker v27.5.1+incompatible -> v28.5.2+incompatible
cel.dev/expr v0.19.0 -> v0.24.0
cloud.google.com/go v0.116.0 -> v0.121.6
cloud.google.com/go/auth v0.14.0 -> v0.18.0
cloud.google.com/go/auth/oauth2adapt v0.2.7 -> v0.2.8
cloud.google.com/go/compute/metadata v0.6.0 -> v0.9.0
cloud.google.com/go/iam v1.2.2 -> v1.5.3
cloud.google.com/go/monitoring v1.21.2 -> v1.24.3
cloud.google.com/go/storage v1.49.0 -> v1.57.1
dario.cat/mergo v1.0.1 -> v1.0.2
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.17.0 -> v1.20.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.2 -> v1.13.1
github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 -> v1.11.2
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/AzureAD/microsoft-authentication-library-for-go v1.3.3 -> v1.6.0
github.com/BurntSushi/toml v1.4.0 -> v1.5.0
github.com/CycloneDX/cyclonedx-go v0.9.2 -> v0.9.3
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.25.0 -> v1.30.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.48.1 -> v0.54.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.48.1 -> v0.54.0
github.com/Masterminds/semver/v3 v3.3.0 -> v3.4.0
github.com/Microsoft/hcsshim v0.12.9 -> v0.14.0-rc.1
github.com/ProtonMail/go-crypto v1.1.5 -> v1.3.0
github.com/aquasecurity/go-npm-version v0.0.1 -> v0.0.2
github.com/aquasecurity/trivy-checks v1.8.1 -> v1.12.2-0.20251219190323-79d27547baf5
github.com/aquasecurity/trivy-db v0.0.0-20250227071930-8bd8a9b89e2d -> v0.0.0-20251222105351-a833f47f8f0d
github.com/aws/aws-sdk-go-v2 v1.36.3 -> v1.41.0
github.com/aws/aws-sdk-go-v2/config v1.29.9 -> v1.32.5
github.com/aws/aws-sdk-go-v2/credentials v1.17.62 -> v1.19.5
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 -> v1.18.16
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 -> v1.4.16
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 -> v2.7.16
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 -> v1.8.4
github.com/aws/aws-sdk-go-v2/service/ecr v1.42.1 -> v1.53.1
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 -> v1.13.4
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 -> v1.13.16
github.com/aws/aws-sdk-go-v2/service/s3 v1.78.1 -> v1.92.0
github.com/bmatcuk/doublestar/v4 v4.8.1 -> v4.9.1
github.com/cloudflare/circl v1.6.0 -> v1.6.1
github.com/cncf/xds/go v0.0.0-20240905190251-b4127c9b8d78 -> v0.0.0-20251022180443-0feb69152e9f
github.com/containerd/cgroups/v3 v3.0.3 -> v3.1.0
github.com/containerd/containerd/api v1.8.0 -> v1.10.0
github.com/containerd/containerd/v2 v2.0.4 -> v2.2.0
github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
github.com/containerd/stargz-snapshotter/estargz v0.16.3 -> v0.18.2
github.com/cyphar/filepath-securejoin v0.4.1 -> v0.6.0
github.com/dlclark/regexp2 v1.4.0 -> v1.11.0
github.com/docker/cli v27.5.0+incompatible -> v29.2.1+incompatible
github.com/docker/docker-credential-helpers v0.8.2 -> v0.9.3
github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0
github.com/envoyproxy/go-control-plane v0.13.1 -> v0.13.5-0.20251024222203-75eaa193e329
github.com/envoyproxy/protoc-gen-validate v1.1.0 -> v1.2.1
github.com/evanphx/json-patch v5.9.0+incompatible -> v5.9.11+incompatible
github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0
github.com/go-git/go-git/v5 v5.14.0 -> v5.16.4
github.com/go-logr/logr v1.4.2 -> v1.4.3
github.com/go-openapi/jsonpointer v0.21.0 -> v0.22.4
github.com/go-openapi/jsonreference v0.21.0 -> v0.21.4
github.com/go-openapi/swag v0.23.0 -> v0.25.4
github.com/golang-jwt/jwt/v5 v5.2.2 -> v5.3.0
github.com/google/btree v1.1.2 -> v1.1.3
github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49 -> v0.7.0
github.com/googleapis/enterprise-certificate-proxy v0.3.4 -> v0.3.9
github.com/googleapis/gax-go/v2 v2.14.1 -> v2.16.0
github.com/gorilla/websocket v1.5.0 -> v1.5.4-0.20250319132907-e064f32e3674
github.com/hashicorp/go-getter v1.7.8 -> v1.8.3
github.com/hashicorp/go-version v1.7.0 -> v1.8.0
github.com/hashicorp/hcl/v2 v2.23.0 -> v2.24.0
github.com/klauspost/compress v1.17.11 -> v1.18.4
github.com/mailru/easyjson v0.7.7 -> v0.9.0
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/buildkit v0.18.2 -> v0.26.2
github.com/moby/sys/user v0.3.0 -> v0.4.0
github.com/moby/term v0.5.0 -> v0.5.2
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/oklog/ulid/v2 v2.1.0 -> v2.1.1
github.com/open-policy-agent/opa v1.2.0 -> v1.11.0
github.com/opencontainers/runtime-spec v1.2.0 -> v1.2.1
github.com/opencontainers/selinux v1.11.1 -> v1.13.1
github.com/owenrumney/squealer v1.2.11 -> v1.2.12
github.com/prometheus/client_golang v1.21.0 -> v1.23.2
github.com/prometheus/client_model v0.6.1 -> v0.6.2
github.com/prometheus/common v0.62.0 -> v0.67.4
github.com/prometheus/procfs v0.15.1 -> v0.17.0
github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 -> v0.0.0-20250401214520-65e299d6c5c9
github.com/rubenv/sql-migrate v1.7.1 -> v1.8.0
github.com/samber/oops v1.15.0 -> v1.18.1
github.com/secure-systems-lab/go-securesystemslib v0.9.0 -> v0.10.0
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/spf13/cast v1.7.1 -> v1.10.0
github.com/spf13/cobra v1.9.1 -> v1.10.2
github.com/spf13/pflag v1.0.6 -> v1.0.10
github.com/tchap/go-patricia/v2 v2.3.2 -> v2.3.3
github.com/tonistiigi/go-csvvalue v0.0.0-20240710180619-ddb21b71c0b4 -> v0.0.0-20240814133006-030d3b2625d0
github.com/ulikunitz/xz v0.5.12 -> v0.5.15
github.com/zclconf/go-cty v1.16.2 -> v1.17.0
go.etcd.io/bbolt v1.4.0 -> v1.4.3
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/detectors/gcp v1.32.0 -> v1.38.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 -> v0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0 -> v0.63.0
go.opentelemetry.io/otel v1.34.0 -> v1.38.0
go.opentelemetry.io/otel/metric v1.34.0 -> v1.38.0
go.uber.org/zap v1.27.0 -> v1.27.1
golang.org/x/crypto v0.36.0 -> v0.48.0
golang.org/x/mod v0.24.0 -> v0.33.0
golang.org/x/net v0.37.0 -> v0.50.0
golang.org/x/oauth2 v0.26.0 -> v0.35.0
golang.org/x/sys v0.31.0 -> v0.41.0
golang.org/x/term v0.30.0 -> v0.40.0
google.golang.org/api v0.218.0 -> v0.260.0
google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/api v0.0.0-20250115164207-1a7da9e5054f -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/rpc v0.0.0-20250115164207-1a7da9e5054f -> v0.0.0-20251222181119-0a764e51fe1b
google.golang.org/grpc v1.70.0 -> v1.78.0
google.golang.org/protobuf v1.36.5 -> v1.36.11
gotest.tools/v3 v3.5.0 -> v3.5.2
helm.sh/helm/v3 v3.17.2 -> v3.19.2
k8s.io/api v0.32.3 -> v0.34.2
k8s.io/apiextensions-apiserver v0.32.2 -> v0.34.0
k8s.io/apimachinery v0.32.3 -> v0.34.2
k8s.io/apiserver v0.32.2 -> v0.34.0
k8s.io/cli-runtime v0.32.3 -> v0.34.0
k8s.io/client-go v0.32.3 -> v0.34.1
k8s.io/component-base v0.32.3 -> v0.34.0
k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f -> v0.0.0-20250710124328-f3f2b991d03b
k8s.io/kubectl v0.32.3 -> v0.34.0
k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 -> v0.0.0-20250820121507-0af2bda4dd1d
mvdan.cc/sh/v3 v3.11.0 -> v3.12.0
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 -> v0.0.0-20241014173422-cfa47c3a1cc8
sigs.k8s.io/kustomize/api v0.18.0 -> v0.20.1
sigs.k8s.io/yaml v1.4.0 -> v1.6.0

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from faeb36c to 93ea791 Compare December 18, 2025 02:36
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 93ea791 to c201cde Compare December 23, 2025 13:43
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from c201cde to 1904ab3 Compare January 8, 2026 00:29
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from ff12392 to 5ee81cc Compare January 15, 2026 21:17
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from e33d221 to b731a93 Compare February 5, 2026 13:59
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 41cd3a7 to 3a49fc1 Compare February 16, 2026 09:52
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from cc45ba4 to fde8856 Compare February 24, 2026 22:13
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from fde8856 to 69219e2 Compare February 26, 2026 02:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants