Skip to content

Update go modules (main) (patch) #2980

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update go modules (main) (patch) #2980

renovate wants to merge 1 commit into from
+1,497 −92

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
cuelang.org/go v0.11.1 → v0.11.2 age adoption passing confidence
github.com/CycloneDX/cyclonedx-go v0.9.2 → v0.9.3 age adoption passing confidence
github.com/cucumber/godog v0.15.0 → v0.15.1 age adoption passing confidence
github.com/daixiang0/gci v0.13.5 → v0.13.7 age adoption passing confidence
github.com/evanphx/json-patch v5.9.0+incompatible → v5.9.11+incompatible age adoption passing confidence
github.com/evanphx/json-patch/v5 v5.9.0 → v5.9.11 age adoption passing confidence
github.com/gkampitakis/go-snaps v0.5.7 → v0.5.19 age adoption passing confidence
github.com/go-git/go-billy/v5 v5.6.0 → v5.6.2 age adoption passing confidence
github.com/otiai10/copy v1.14.0 → v1.14.1 age adoption passing confidence
github.com/secure-systems-lab/go-securesystemslib v0.9.0 → v0.9.1 age adoption passing confidence
github.com/sirupsen/logrus v1.9.3 → v1.9.4 age adoption passing confidence
github.com/spdx/tools-golang v0.5.5 → v0.5.7 age adoption passing confidence
github.com/tektoncd/chains v0.22.2 → v0.22.3 age adoption passing confidence
github.com/tektoncd/cli v0.38.0 → v0.38.2 age adoption passing confidence
github.com/tektoncd/cli v0.37.1 → v0.37.2 age adoption passing confidence
github.com/testcontainers/testcontainers-go v0.34.0 → v0.34.1 age adoption passing confidence
gotest.tools/gotestsum v1.12.1 → v1.12.3 age adoption passing confidence
helm.sh/helm/v3 v3.18.5 → v3.18.6 age adoption passing confidence
k8s.io/api v0.34.2 → v0.34.3 age adoption passing confidence
k8s.io/apiextensions-apiserver v0.34.2 → v0.34.3 age adoption passing confidence
k8s.io/apimachinery v0.34.2 → v0.34.3 age adoption passing confidence
k8s.io/client-go v0.34.2 → v0.34.3 age adoption passing confidence
k8s.io/kubernetes v1.34.2 → v1.34.4 age adoption passing confidence

Release Notes

cue-lang/cue (cuelang.org/go)

v0.11.2

Compare Source

This release includes fixes for bugs which were uncovered and resolved in the last few weeks.

Evaluator

CL 1206279 fixes a regression in the old evaluator which could lead to "conflicting value" errors.

cmd/cue

CL 1207330 fixes a regression where cue get go stopped copying some CUE files from Go package directories.

CL 1207402 fixes a regression where cue def --inline-imports could result in invalid CUE which failed to evaluate.

Full list of changes since v0.11.1
CycloneDX/cyclonedx-go (github.com/CycloneDX/cyclonedx-go)

v0.9.3

Compare Source

Changelog

Fixes
Building and Packaging
cucumber/godog (github.com/cucumber/godog)

v0.15.1

Compare Source

Added
Changed
  • Replace deprecated ::set-output - (681 - nodeg)
Fixed
  • fix(errors): fix(errors): Fix expected Step argument count for steps with context.Context (679 - tigh-latte)
  • fix(formatter): On concurrent execution, execute formatter at end of Scenario - (645 - tigh-latte)
  • Pretty printing results now prints the line where the step is declared instead of the line where the handler is declared. (668 - spencerc)
  • Update honnef.co/go/tools/cmd/staticcheck version in Makefile by @​RezaZareiii in #​670
  • fix: verify dogT exists in the context before using it by @​cakoolen in #​692
  • fix: change bang to being in README by @​nahomEagleLion in #​687
  • Mark junit test cases as skipped if no pickle step results available by @​mrsheepuk in #​597
  • Print step declaration line instead of handler declaration line by @​SpencerC in #​668
daixiang0/gci (github.com/daixiang0/gci)

v0.13.7

Compare Source

What's Changed

New Contributors

Full Changelog: daixiang0/gci@v0.13.6...v0.13.7

v0.13.6

Compare Source

What's Changed

Full Changelog: daixiang0/gci@v0.13.5...v0.13.6

evanphx/json-patch (github.com/evanphx/json-patch)

v5.9.11+incompatible

Compare Source

v5.9.10+incompatible

Compare Source

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

v0.5.19

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@0.5.18...v0.5.19

v0.5.18

Compare Source

v0.5.17

Compare Source

v0.5.16

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.15...v0.5.16

v0.5.15

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.14...v0.5.15

v0.5.14

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.13...v0.5.14

v0.5.13

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.12...v0.5.13

v0.5.12

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.11...v0.5.12

v0.5.11

Compare Source

What's Changed
New Contributors

Full Changelog: gkampitakis/go-snaps@v0.5.10...v0.5.11

v0.5.10

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.9...v0.5.10

v0.5.9

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.8...v0.5.9

Kudos to @​orloffv for this issue #​116

v0.5.8

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.7...v0.5.8

go-git/go-billy (github.com/go-git/go-billy/v5)

v5.6.2

Compare Source

What's Changed

New Contributors

Full Changelog: go-git/go-billy@v5.6.1...v5.6.2

v5.6.1

Compare Source

What's Changed

Full Changelog: go-git/go-billy@v5.6.0...v5.6.1

otiai10/copy (github.com/otiai10/copy)

v1.14.1

Compare Source

secure-systems-lab/go-securesystemslib (github.com/secure-systems-lab/go-securesystemslib)

v0.9.1

Compare Source

sirupsen/logrus (github.com/sirupsen/logrus)

v1.9.4

Compare Source

Notable changes

  • go.mod: update minimum supported go version to v1.17 #​1460
  • go.mod: bump up dependencies #​1460
  • Touch-up godoc and add "doc" links.
  • README: fix links, grammar, and update examples.
  • Add GNU/Hurd support #​1364
  • Add WASI wasip1 support #​1388
  • Remove uses of deprecated ioutil package #​1472
  • CI: update actions and golangci-lint #​1459
  • CI: remove appveyor, add macOS #​1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

spdx/tools-golang (github.com/spdx/tools-golang)

v0.5.7

Compare Source

What's Changed

New Contributors

Full Changelog: spdx/tools-golang@v0.5.6...v0.5.7

v0.5.6

Compare Source

What's Changed

New Contributors

Full Changelog: spdx/tools-golang@v0.5.5...v0.5.6

tektoncd/chains (github.com/tektoncd/chains)

v0.22.3: Tekton Chains release v0.22.3 "v0.22.3"

Compare Source

-Docs @​ v0.22.3
-Examples @​ v0.22.3

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/chains/previous/v0.22.3/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677abc5f8010a0a21be4daa53325a217f4df92955848f73f226c6ed054c429fb9f82

Obtain the attestation:

REKOR_UUID=108e9186e8c5677abc5f8010a0a21be4daa53325a217f4df92955848f73f226c6ed054c429fb9f82
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/chains/previous/v0.22.3/release.yaml
REKOR_UUID=108e9186e8c5677abc5f8010a0a21be4daa53325a217f4df92955848f73f226c6ed054c429fb9f82

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.22.3@​sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Fixes
Misc
  • 🔨 Upgrade golang.org/x/crypto to 0.31.0 (#​1269)

Thanks

Thanks to these contributors who contributed to v0.22.3!

Extra shout-out for awesome release notes:

tektoncd/cli (github.com/tektoncd/cli)

v0.38.2

Compare Source

v0.38.2 Release 🎉

This is a bug fix release for CVEs GHSA-w32m-9786-jp63 on golang.org/x/net and GHSA-v778-237x-gjrc on golang.org/x/crypto.

ChangeLog 📋
Misc 🔨
  • Bump golang.org/x/net from 0.30.0 to 0.33.0 #​2473
  • Bump golang.org/x/crypto from 0.28.0 to 0.31.0 #​2447

v0.38.1

Compare Source

v0.38.1 Release 🎉

This is a bug fix release as tkn start was failing with tkn version v0.38.0 release and old(er) pipeline version. This release comes with Pipelines v0.62.3 and Triggers version v0.29.1

ChangeLog 📋
Misc 🔨
  • Bump tektoncd/pipeline to v0.62.3 #​2392
  • Bump github.com/tektoncd/triggers from 0.29.0 to 0.29.1 #​2394
testcontainers/testcontainers-go (github.com/testcontainers/testcontainers-go)

v0.34.1

Compare Source

gotestyourself/gotestsum (gotest.tools/gotestsum)

v1.12.3

Compare Source

What's Changed

New Contributors

Full Changelog: gotestyourself/gotestsum@v1.12.2...v1.12.3

v1.12.2

Compare Source

What's Changed

New Contributors

Full Changelog: gotestyourself/gotestsum@v1.12.1...v1.12.2

helm/helm (helm.sh/helm/v3)

v3.18.6: Helm v3.18.6

Compare Source

Helm v3.18.6 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.6. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

  • fix(helm-lint): fmt b76a950 (Isaiah Lewis)
  • fix(helm-lint): Add TLSClientConfig b79a421 (Isaiah Lewis)
  • fix(helm-lint): Add HTTP/HTTPS URL support for json schema references b9180e6 (Isaiah Lewis)
kubernetes/api (k8s.io/api)

v0.34.3

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.34.3

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.34.3

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.34.3

Compare Source

kubernetes/kubernetes (k8s.io/kubernetes)

v1.34.4

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

v1.34.3: Kubernetes v1.34.3

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge October 1, 2025 09:20
@renovate
Copy link
Contributor Author

renovate bot commented Oct 1, 2025 •
edited
Loading

ℹ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 25 additional dependencies were updated

Details:

Package Change
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/ProtonMail/go-crypto v1.1.3 -> v1.1.5
github.com/cyphar/filepath-securejoin v0.3.1 -> v0.3.6
github.com/gkampitakis/ciinfo v0.3.0 -> v0.3.2
github.com/go-openapi/errors v0.22.0 -> v0.22.1
github.com/go-openapi/swag v0.23.0 -> v0.23.1
github.com/google/certificate-transparency-go v1.2.1 -> v1.3.1
github.com/magiconair/properties v1.8.7 -> v1.8.9
github.com/mailru/easyjson v0.7.7 -> v0.9.0
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/term v0.5.0 -> v0.5.2
github.com/pjbgf/sha1cd v0.3.0 -> v0.3.2
github.com/rogpeppe/go-internal v1.13.1 -> v1.13.2-0.20241226121412-a5dc8ff20d0a
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/sigstore/protobuf-specs v0.3.2 -> v0.4.1
github.com/sigstore/timestamp-authority v1.2.2 -> v1.2.4
github.com/spf13/pflag v1.0.6 -> v1.0.7
github.com/tidwall/gjson v1.17.3 -> v1.18.0
golang.org/x/crypto v0.38.0 -> v0.40.0
golang.org/x/net v0.40.0 -> v0.41.0
golang.org/x/sync v0.15.0 -> v0.16.0
golang.org/x/sys v0.33.0 -> v0.34.0
golang.org/x/term v0.32.0 -> v0.33.0
golang.org/x/text v0.25.0 -> v0.27.0
google.golang.org/api v0.215.0 -> v0.228.0
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 32 additional dependencies were updated

Details:

Package Change
cloud.google.com/go v0.116.0 -> v0.118.3
cloud.google.com/go/auth v0.13.0 -> v0.15.0
cloud.google.com/go/auth/oauth2adapt v0.2.6 -> v0.2.8
cloud.google.com/go/iam v1.2.2 -> v1.4.1
cloud.google.com/go/monitoring v1.21.2 -> v1.24.0
cloud.google.com/go/storage v1.49.0 -> v1.50.0
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.48.1 -> v0.49.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.48.1 -> v0.49.0
github.com/aws/aws-sdk-go-v2/service/ecr v1.32.2 -> v1.40.3
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.25.4 -> v1.31.2
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20240826150212-5dc58b6e29f8 -> v0.9.1
github.com/coreos/go-oidc/v3 v3.11.0 -> v3.12.0
github.com/gkampitakis/ciinfo v0.3.0 -> v0.3.2
github.com/go-openapi/errors v0.22.0 -> v0.22.1
github.com/go-openapi/swag v0.23.0 -> v0.23.1
github.com/google/certificate-transparency-go v1.2.1 -> v1.3.1
github.com/google/s2a-go v0.1.8 -> v0.1.9
github.com/googleapis/enterprise-certificate-proxy v0.3.4 -> v0.3.6
github.com/jmespath/go-jmespath v0.4.0 -> v0.4.1-0.20220621161143-b0104c826a24
github.com/mailru/easyjson v0.7.7 -> v0.9.0
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/term v0.5.0 -> v0.5.2
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/sigstore/fulcio v1.6.3 -> v1.6.6
github.com/sigstore/protobuf-specs v0.3.2 -> v0.4.1
github.com/sigstore/timestamp-authority v1.2.2 -> v1.2.4
github.com/tidwall/gjson v1.17.0 -> v1.18.0
go.step.sm/crypto v0.51.2 -> v0.60.0
google.golang.org/api v0.215.0 -> v0.228.0
google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 -> v0.0.0-20250303144028-a0af3efb3deb
sigs.k8s.io/release-utils v0.8.4 -> v0.11.0
File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/tektoncd/triggers v0.29.0 -> v0.29.1

@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 8 times, most recently from 9db40be to 4561648 Compare October 8, 2025 12:52
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 2 times, most recently from e73a45c to ed34230 Compare October 15, 2025 17:07
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 5 times, most recently from 187c7ea to 4a1c342 Compare October 26, 2025 19:33
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch from 4a1c342 to 07e4517 Compare October 27, 2025 16:27
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 6 times, most recently from 8477e06 to 5b4902e Compare November 6, 2025 12:51
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 3 times, most recently from 3276771 to b01d438 Compare November 12, 2025 20:14
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 5 times, most recently from 7235ae9 to ef30f37 Compare January 15, 2026 10:59
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 7 times, most recently from 77accb2 to b2459ce Compare January 26, 2026 17:53
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 7 times, most recently from d0f4357 to ad209dc Compare February 2, 2026 14:05
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 7 times, most recently from bcbc099 to 2f6b709 Compare February 10, 2026 11:32
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch from 2f6b709 to 2605e88 Compare February 10, 2026 20:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

main renovate size: XXL

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants