Skip to content

build(deps): bump the gomod group across 1 directory with 2 updates#2589

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-4e588ec355
Closed

build(deps): bump the gomod group across 1 directory with 2 updates#2589
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-4e588ec355

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 2 updates in the / directory: chainguard.dev/apko and golang.org/x/text.

Updates chainguard.dev/apko from 1.2.20 to 1.2.22

Release notes

Sourced from chainguard.dev/apko's releases.

Release v1.2.22

Changelog

  • 463cab44ae3454c02406d55c259e36f4ebfcc1f7 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.24 to 1.6.26 (#2313)
  • 59d7f49ccdf5b333cd3be875a3563fae1b14d354 build(deps): bump chainguard.dev/sdk from 0.1.74 to 0.1.94 (#2309)
  • 74c49209db70fe6b488ffc17c2be95a529cfbb79 build(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.0 (#2314)
  • 8165fd40c5dfad902122385ae6a78beb257ba3aa build(deps): bump go.step.sm/crypto from 0.83.0 to 0.84.1 (#2301)
  • 6fb33c44faab2f3b6155b5190ae389ceaf60a298 build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#2312)
  • d7dc9ca44ed085c9a2ae59cc23af8b06b5d6254a build(deps): bump google.golang.org/api from 0.285.0 to 0.286.0 (#2298)
  • 891d27560c80f61cca2fd27e20408ca7e921b67d build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 (#2308)
  • f9189c2afb477dd0f7ecab00f3751f0888553c4b build(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (#2295)

Release v1.2.21

Changelog

  • 403a40e1ee97f924e9448f947100fb314ac820fb fix(ldso-cache): Order cache entries to match ld.so's search (#2311)
Commits
  • f9189c2 build(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (#2295)
  • d7dc9ca build(deps): bump google.golang.org/api from 0.285.0 to 0.286.0 (#2298)
  • 8165fd4 build(deps): bump go.step.sm/crypto from 0.83.0 to 0.84.1 (#2301)
  • 891d275 build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 (#2308)
  • 59d7f49 build(deps): bump chainguard.dev/sdk from 0.1.74 to 0.1.94 (#2309)
  • 6fb33c4 build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#2312)
  • 463cab4 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.24 to 1.6.26...
  • 74c4920 build(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.0 (#2314)
  • 403a40e fix(ldso-cache): Order cache entries to match ld.so's search (#2311)
  • See full diff in compare view

Updates golang.org/x/text from 0.38.0 to 0.39.0

Commits
  • b326f3d go.mod: update golang.org/x dependencies
  • 5ae8e57 unicode/norm: avoid infinite loop on invalid input
  • 0dc94a2 all: fix some comments
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 2 updates in the / directory: [chainguard.dev/apko](https://github.com/chainguard-dev/apko) and [golang.org/x/text](https://github.com/golang/text).


Updates `chainguard.dev/apko` from 1.2.20 to 1.2.22
- [Release notes](https://github.com/chainguard-dev/apko/releases)
- [Changelog](https://github.com/chainguard-dev/apko/blob/main/NEWS.md)
- [Commits](chainguard-dev/apko@v1.2.20...v1.2.22)

Updates `golang.org/x/text` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.38.0...v0.39.0)

---
updated-dependencies:
- dependency-name: chainguard.dev/apko
  dependency-version: 1.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: golang.org/x/text
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 7, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 8, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/gomod-4e588ec355 branch July 8, 2026 15:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants