build(deps): bump the go_modules group across 1 directory with 7 updates#6
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
build(deps): bump the go_modules group across 1 directory with 7 updates#6dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the go_modules group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/docker/compose/v2](https://github.com/docker/compose) | `2.40.0` | `2.40.2` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.41.0` | `0.45.0` | | [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.1.4` | `2.1.5` | | [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) | `3.0.3` | `3.0.4` | | [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux) | `1.12.0` | `1.13.0` | | [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) | `0.48.2` | `0.57.0` | | [github.com/smallstep/certificates](https://github.com/smallstep/certificates) | `0.26.1` | `0.29.0` | Updates `github.com/docker/compose/v2` from 2.40.0 to 2.40.2 - [Release notes](https://github.com/docker/compose/releases) - [Commits](docker/compose@v2.40.0...v2.40.2) Updates `golang.org/x/crypto` from 0.41.0 to 0.45.0 - [Commits](golang/crypto@v0.41.0...v0.45.0) Updates `github.com/containerd/containerd/v2` from 2.1.4 to 2.1.5 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v2.1.4...v2.1.5) Updates `github.com/go-jose/go-jose/v3` from 3.0.3 to 3.0.4 - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](go-jose/go-jose@v3.0.3...v3.0.4) Updates `github.com/opencontainers/selinux` from 1.12.0 to 1.13.0 - [Release notes](https://github.com/opencontainers/selinux/releases) - [Commits](opencontainers/selinux@v1.12.0...v1.13.0) Updates `github.com/quic-go/quic-go` from 0.48.2 to 0.57.0 - [Release notes](https://github.com/quic-go/quic-go/releases) - [Commits](quic-go/quic-go@v0.48.2...v0.57.0) Updates `github.com/smallstep/certificates` from 0.26.1 to 0.29.0 - [Release notes](https://github.com/smallstep/certificates/releases) - [Changelog](https://github.com/smallstep/certificates/blob/master/CHANGELOG.md) - [Commits](smallstep/certificates@v0.26.1...v0.29.0) --- updated-dependencies: - dependency-name: github.com/docker/compose/v2 dependency-version: 2.40.2 dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/containerd/containerd/v2 dependency-version: 2.1.5 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/go-jose/go-jose/v3 dependency-version: 3.0.4 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/opencontainers/selinux dependency-version: 1.13.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/quic-go/quic-go dependency-version: 0.57.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/smallstep/certificates dependency-version: 0.29.0 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go_modules group with 7 updates in the / directory:
2.40.02.40.20.41.00.45.02.1.42.1.53.0.33.0.41.12.01.13.00.48.20.57.00.26.10.29.0Updates
github.com/docker/compose/v2from 2.40.0 to 2.40.2Release notes
Sourced from github.com/docker/compose/v2's releases.
Commits
6007d4cpublish env_file references as opaque hash to prevent paths conflicts69bcb96Enforce compose files from OCI artifact all get into the same target (cache) ...9b4fcceintroduce WithPrompt to configure compose backend to use a plugable UI compon...da5c57ctest digest or canonical reference, not only tag, when checking if an image i...e25265dremove unused code to only rely on api.Servicee19e127fail build if minimal required version of buildx isn't installed585c4dbCompose can't create a tar with adequate uid:gid ownershipbe8c7e6make CTRL+Z a no-op operation on Windows27f59d7Detect failure to access os.TempDir2681ed1mutualize code from injectSecrets / injectConfigsUpdates
golang.org/x/cryptofrom 0.41.0 to 0.45.0Commits
4e0068cgo.mod: update golang.org/x dependenciese79546essh: curb GSSAPI DoS risk by limiting number of specified OIDsf91f7a7ssh/agent: prevent panic on malformed constraint2df4153acme/autocert: let automatic renewal work with short lifetime certsbcf6a84acme: pass context to requestb4f2b62ssh: fix error message on unsupported cipher79ec3a5ssh: allow to bind to a hostname in remote forwarding122a78fgo.mod: update golang.org/x dependenciesc0531f9all: eliminate vet diagnostics0997000all: fix some commentsUpdates
github.com/containerd/containerd/v2from 2.1.4 to 2.1.5Release notes
Sourced from github.com/containerd/containerd/v2's releases.
... (truncated)
Commits
fcd4322Merge pull request #12483 from austinvazquez/prep_2_1_5fc5bdfePrepare release notes for v2.1.5c578c26Update mailmap46a4a03Merge commit from fork239ab87Merge commit from forkac96e84Merge pull request #12478 from k8s-infra-cherrypick-robot/cherry-pick-12475-t...ed7eddaMerge pull request #12470 from austinvazquez/2_1_bump_binaries_job_images3d713d3runc: Update runc binary to v1.3.3de4221cUpdate GHA runners to use latest images for basic binaries build559240fMerge pull request #12467 from austinvazquez/2_1_bump_go_1_24_9Updates
github.com/go-jose/go-jose/v3from 3.0.3 to 3.0.4Release notes
Sourced from github.com/go-jose/go-jose/v3's releases.
Commits
5253038Backport fix 167 to v3 (#174)047dc99CI: Update github actions and go version (#173)0f017e9Revert #26 (ignore unsupported JWKs in Sets) (#131)3e2bbefUnmarshal jwk keys with unsupported key type or algorithm into empty … (#26)Updates
github.com/opencontainers/selinuxfrom 1.12.0 to 1.13.0Release notes
Sourced from github.com/opencontainers/selinux's releases.
Commits
4be9937Merge pull request #237 from cyphar/selinux-safe-procfsc8cfa6fselinux: migrate to pathrs-lite procfs APIf2424d8Merge pull request #236 from kolyshkin/modernize-ci648ce7fci: add go 1.25916cab9ci: bump golangci-lint to v2.5b42e5c8all: format sources with latest gofumpt74393eaMerge pull request #235 from cyphar/fix-keyring-err-check6ec194bkeyring: fix typo in EACCES check879a755Merge pull request #234 from opencontainers/dependabot/github_actions/actions...3c1bd9abuild(deps): bump actions/setup-go from 5 to 6Updates
github.com/quic-go/quic-gofrom 0.48.2 to 0.57.0Release notes
Sourced from github.com/quic-go/quic-go's releases.
... (truncated)
Commits
5b2d212http3: limit size of decompressed headers (#5452)e80b378qlogwriter: use synctest to make tests deterministic (#5454)d43c589README: add nodepass to list of projects (#5448)ca2835ddon’t arm connection timer for connection ID retirement (#5449)e84ebaeackhandler: don’t generate an immediate ACK for the first packet (#5447)d4d168fadd documentation for Conn.NextConnection (#5442)4cdebbehttp3: use QPACK_DECOMPRESSION_FAILED for QPACK errors (#5439)b7886d5update qpack to v0.6.0 (#5434)2fc9705http3: add a benchmark for header parsing (#5435)dafdd6fhttp3: make Transport.MaxResponseBytes an int (#5433)Updates
github.com/smallstep/certificatesfrom 0.26.1 to 0.29.0Release notes
Sourced from github.com/smallstep/certificates's releases.
... (truncated)
Changelog
Sourced from github.com/smallstep/certificates's changelog.
... (truncated)
Commits
992ff69Merge pull request #2491 from smallstep/mariano/update9d79c59Merge branch 'master' into mariano/update8e76e29Disable govulncheck until go 1.25.5 is available in github actions (#2490)1011f5fImprove validation in authorization path48ed3a5Changelog updates for preparing for v0.29.0 (#2488)008e6aeMerge pull request #2487 from smallstep/dependabot/github_actions/softprops/a...895e8c6Bump softprops/action-gh-release from 2.4.2 to 2.5.0930e8fcMerge pull request #2477 from smallstep/dependabot/go_modules/golang.org/x/cr...d753789Bump golang.org/x/crypto from 0.44.0 to 0.45.007fa345Merge pull request #2481 from smallstep/dependabot/go_modules/github.com/newr...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.