Build(deps): bump the go group across 1 directory with 49 updates - #10
Open
dependabot[bot] wants to merge 1 commit into
Open
Build(deps): bump the go group across 1 directory with 49 updates#10dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.6` | `0.21.7` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.6` | `1.19.1` | | [github.com/lestrrat-go/jwx/v2](https://github.com/lestrrat-go/jwx) | `2.1.6` | `2.1.7` | | [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `1.2.1` | `1.2.2` | | [github.com/spiffe/go-spiffe/v2](https://github.com/spiffe/go-spiffe) | `2.7.0` | `2.8.1` | | [go.step.sm/crypto](https://github.com/smallstep/crypto) | `0.81.0` | `0.85.0` | | [github.com/anchore/go-struct-converter](https://github.com/anchore/go-struct-converter) | `0.1.0` | `0.2.1` | | [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.17.0` | `3.20.0` | | [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.9.3` | `0.9.8` | | [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.3` | `1.4.4` | | [github.com/go-openapi/analysis](https://github.com/go-openapi/analysis) | `0.25.2` | `0.25.4` | | [github.com/go-openapi/runtime/server-middleware](https://github.com/go-openapi/runtime) | `0.30.0` | `0.32.5` | | [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid) | `2.3.0` | `2.4.0` | | [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.3.1` | `2.4.3` | | [github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority) | `2.1.2` | `2.1.3` | | [go.yaml.in/yaml/v4](https://github.com/yaml/go-yaml) | `4.0.0-rc.4` | `4.0.0-rc.6` | Updates `github.com/google/go-containerregistry` from 0.21.6 to 0.21.7 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.6...v0.21.7) Updates `github.com/klauspost/compress` from 1.18.6 to 1.19.1 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.6...v1.19.1) Updates `github.com/lestrrat-go/jwx/v2` from 2.1.6 to 2.1.7 - [Release notes](https://github.com/lestrrat-go/jwx/releases) - [Changelog](https://github.com/lestrrat-go/jwx/blob/v2.1.7/Changes) - [Commits](lestrrat-go/jwx@v2.1.6...v2.1.7) Updates `github.com/sigstore/sigstore-go` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/sigstore/sigstore-go/releases) - [Commits](sigstore/sigstore-go@v1.2.1...v1.2.2) Updates `github.com/spiffe/go-spiffe/v2` from 2.7.0 to 2.8.1 - [Release notes](https://github.com/spiffe/go-spiffe/releases) - [Changelog](https://github.com/spiffe/go-spiffe/blob/main/CHANGELOG.md) - [Commits](spiffe/go-spiffe@v2.7.0...v2.8.1) Updates `go.step.sm/crypto` from 0.81.0 to 0.85.0 - [Release notes](https://github.com/smallstep/crypto/releases) - [Commits](smallstep/crypto@v0.81.0...v0.85.0) Updates `golang.org/x/sync` from 0.20.0 to 0.21.0 - [Commits](golang/sync@v0.20.0...v0.21.0) Updates `golang.org/x/sys` from 0.45.0 to 0.46.0 - [Commits](golang/sys@v0.45.0...v0.46.0) Updates `golang.org/x/term` from 0.43.0 to 0.44.0 - [Commits](golang/term@v0.43.0...v0.44.0) Updates `github.com/anchore/go-struct-converter` from 0.1.0 to 0.2.1 - [Release notes](https://github.com/anchore/go-struct-converter/releases) - [Commits](anchore/go-struct-converter@v0.1.0...v0.2.1) Updates `github.com/coreos/go-oidc/v3` from 3.17.0 to 3.20.0 - [Release notes](https://github.com/coreos/go-oidc/releases) - [Commits](coreos/go-oidc@v3.17.0...v3.20.0) Updates `github.com/docker/cli` from 29.4.3+incompatible to 29.5.3+incompatible - [Commits](docker/cli@v29.4.3...v29.5.3) Updates `github.com/docker/docker-credential-helpers` from 0.9.3 to 0.9.8 - [Release notes](https://github.com/docker/docker-credential-helpers/releases) - [Commits](docker/docker-credential-helpers@v0.9.3...v0.9.8) Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4 - [Release notes](https://github.com/go-logr/logr/releases) - [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md) - [Commits](go-logr/logr@v1.4.3...v1.4.4) Updates `github.com/go-openapi/analysis` from 0.25.2 to 0.25.4 - [Release notes](https://github.com/go-openapi/analysis/releases) - [Commits](go-openapi/analysis@v0.25.2...v0.25.4) Updates `github.com/go-openapi/errors` from 0.22.7 to 0.22.8 - [Release notes](https://github.com/go-openapi/errors/releases) - [Commits](go-openapi/errors@v0.22.7...v0.22.8) Updates `github.com/go-openapi/jsonpointer` from 0.23.1 to 1.0.0 - [Release notes](https://github.com/go-openapi/jsonpointer/releases) - [Commits](go-openapi/jsonpointer@v0.23.1...v1.0.0) Updates `github.com/go-openapi/jsonreference` from 0.21.6 to 1.0.0 - [Release notes](https://github.com/go-openapi/jsonreference/releases) - [Commits](go-openapi/jsonreference@v0.21.6...v1.0.0) Updates `github.com/go-openapi/loads` from 0.23.3 to 0.24.0 - [Release notes](https://github.com/go-openapi/loads/releases) - [Commits](go-openapi/loads@v0.23.3...v0.24.0) Updates `github.com/go-openapi/runtime` from 0.32.3 to 0.32.4 - [Release notes](https://github.com/go-openapi/runtime/releases) - [Commits](go-openapi/runtime@v0.32.3...v0.32.4) Updates `github.com/go-openapi/runtime/server-middleware` from 0.30.0 to 0.32.5 - [Release notes](https://github.com/go-openapi/runtime/releases) - [Commits](go-openapi/runtime@v0.30.0...v0.32.5) Updates `github.com/go-openapi/spec` from 0.22.5 to 0.22.8 - [Release notes](https://github.com/go-openapi/spec/releases) - [Commits](go-openapi/spec@v0.22.5...v0.22.8) Updates `github.com/go-openapi/strfmt` from 0.26.3 to 0.27.0 - [Release notes](https://github.com/go-openapi/strfmt/releases) - [Commits](go-openapi/strfmt@v0.26.3...v0.27.0) Updates `github.com/go-openapi/swag` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/cmdutils` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/conv` from 0.26.0 to 0.27.3 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.27.3) Updates `github.com/go-openapi/swag/fileutils` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/jsonname` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/jsonutils` from 0.26.0 to 0.27.3 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.27.3) Updates `github.com/go-openapi/swag/loading` from 0.26.0 to 0.27.3 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.27.3) Updates `github.com/go-openapi/swag/mangling` from 0.26.0 to 0.27.3 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.27.3) Updates `github.com/go-openapi/swag/netutils` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/stringutils` from 0.26.0 to 0.27.3 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.27.3) Updates `github.com/go-openapi/swag/typeutils` from 0.26.0 to 0.27.3 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.27.3) Updates `github.com/go-openapi/swag/yamlutils` from 0.26.0 to 0.27.3 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.27.3) Updates `github.com/go-openapi/validate` from 0.25.3 to 0.26.0 - [Release notes](https://github.com/go-openapi/validate/releases) - [Commits](go-openapi/validate@v0.25.3...v0.26.0) Updates `github.com/klauspost/cpuid/v2` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/klauspost/cpuid/releases) - [Commits](klauspost/cpuid@v2.3.0...v2.4.0) Updates `github.com/pelletier/go-toml/v2` from 2.3.1 to 2.4.3 - [Release notes](https://github.com/pelletier/go-toml/releases) - [Commits](pelletier/go-toml@v2.3.1...v2.4.3) Updates `github.com/sigstore/rekor` from 1.5.2 to 1.5.3 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.5.2...v1.5.3) Updates `github.com/sigstore/rekor-tiles/v2` from 2.2.2-0.20260601073857-5d098a2b6443 to 2.3.0 - [Release notes](https://github.com/sigstore/rekor-tiles/releases) - [Changelog](https://github.com/sigstore/rekor-tiles/blob/main/RELEASE.md) - [Commits](https://github.com/sigstore/rekor-tiles/commits/v2.3.0) Updates `github.com/sigstore/timestamp-authority/v2` from 2.1.2 to 2.1.3 - [Release notes](https://github.com/sigstore/timestamp-authority/releases) - [Changelog](https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md) - [Commits](sigstore/timestamp-authority@v2.1.2...v2.1.3) Updates `github.com/theupdateframework/go-tuf/v2` from 2.4.2-0.20260407074541-7e8f69f906ef to 2.4.2 - [Release notes](https://github.com/theupdateframework/go-tuf/releases) - [Commits](https://github.com/theupdateframework/go-tuf/commits/v2.4.2) Updates `go.yaml.in/yaml/v4` from 4.0.0-rc.4 to 4.0.0-rc.6 - [Commits](yaml/go-yaml@v4.0.0-rc.4...v4.0.0-rc.6) Updates `golang.org/x/crypto` from 0.52.0 to 0.54.0 - [Commits](golang/crypto@v0.52.0...v0.54.0) Updates `golang.org/x/mod` from 0.36.0 to 0.37.0 - [Commits](golang/mod@v0.36.0...v0.37.0) Updates `golang.org/x/net` from 0.55.0 to 0.57.0 - [Commits](golang/net@v0.55.0...v0.57.0) Updates `golang.org/x/text` from 0.37.0 to 0.40.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.37.0...v0.40.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260523011958-0a33c5d7ca68 to 0.0.0-20260630182238-925bb5da69e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.81.1 to 1.82.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.82.0) --- updated-dependencies: - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/klauspost/compress dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/lestrrat-go/jwx/v2 dependency-version: 2.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/sigstore/sigstore-go dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/spiffe/go-spiffe/v2 dependency-version: 2.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: go.step.sm/crypto dependency-version: 0.85.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sync dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sys dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/term dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/anchore/go-struct-converter dependency-version: 0.2.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/coreos/go-oidc/v3 dependency-version: 3.20.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/docker/cli dependency-version: 29.5.3+incompatible dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/docker/docker-credential-helpers dependency-version: 0.9.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-logr/logr dependency-version: 1.4.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/analysis dependency-version: 0.25.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/errors dependency-version: 0.22.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/jsonpointer dependency-version: 1.0.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: go - dependency-name: github.com/go-openapi/jsonreference dependency-version: 1.0.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: go - dependency-name: github.com/go-openapi/loads dependency-version: 0.24.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/runtime dependency-version: 0.32.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/runtime/server-middleware dependency-version: 0.32.5 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/spec dependency-version: 0.22.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/strfmt dependency-version: 0.27.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/swag dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/cmdutils dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/conv dependency-version: 0.27.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/swag/fileutils dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/jsonname dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/jsonutils dependency-version: 0.27.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/swag/loading dependency-version: 0.27.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/swag/mangling dependency-version: 0.27.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/swag/netutils dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/stringutils dependency-version: 0.27.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/swag/typeutils dependency-version: 0.27.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/swag/yamlutils dependency-version: 0.27.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/validate dependency-version: 0.26.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/klauspost/cpuid/v2 dependency-version: 2.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/pelletier/go-toml/v2 dependency-version: 2.4.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/sigstore/rekor dependency-version: 1.5.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/sigstore/rekor-tiles/v2 dependency-version: 2.3.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/sigstore/timestamp-authority/v2 dependency-version: 2.1.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/theupdateframework/go-tuf/v2 dependency-version: 2.4.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: go.yaml.in/yaml/v4 dependency-version: 4.0.0-rc.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/mod dependency-version: 0.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/net dependency-version: 0.57.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/text dependency-version: 0.40.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260630182238-925bb5da69e7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.82.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go group with 16 updates in the / directory:
0.21.60.21.71.18.61.19.12.1.62.1.71.2.11.2.22.7.02.8.10.81.00.85.00.1.00.2.13.17.03.20.00.9.30.9.81.4.31.4.40.25.20.25.40.30.00.32.52.3.02.4.02.3.12.4.32.1.22.1.34.0.0-rc.44.0.0-rc.6Updates
github.com/google/go-containerregistryfrom 0.21.6 to 0.21.7Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
c68d899Bump go version to 1.26.4 (#2350)da61d86transport: do not re-attach bearer token after cross-host redirect (#2349)09fe1e5fix(tarball): normalize paths when matching files (#2334)5baa399build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)97a8a17fix(transport): apply refreshed bearer token after cross-host redirect (#2337)e963497internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)02649eafix: prevent SSRF in google.List() pagination (#2332)7204b40build(deps): bump the actions group across 1 directory with 2 updates (#2344)4cfaa93build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)6849394pkg/registry: export RedirectError (#2177)Updates
github.com/klauspost/compressfrom 1.18.6 to 1.19.1Release notes
Sourced from github.com/klauspost/compress's releases.
Commits
2602f4aUpdate changelog for version 1.19.0983acecadd defensive checks9960386zstd: Validate SnappyConverter literal copies (#1170)e29d4d3flate: usePeekinstead ofReadBytefor thebufio.Readerdecode path (#...c0bbc84zstd: bump avo pin, regenerate arm64 asm (#1167)efdb6edbuild(deps): bump the github-actions group with 6 updates (#1166)f0953f9flate: fix buffer formatting in tests (#1165)ab2e3cczstd: Add arm64 decoder asm (#1160)bb2723dMerge commit from fork539243bs2sx: Clean symlink targets (#1163)Updates
github.com/lestrrat-go/jwx/v2from 2.1.6 to 2.1.7Changelog
Sourced from github.com/lestrrat-go/jwx/v2's changelog.
Commits
f818e26Merge branch 'develop/v2' into v215997a7release v2.1.74b065d7build(deps): bump actions/cache from 6.0.0 to 6.1.0 (#2237)1da7d9bbuild(deps): bump actions/setup-go from 6.4.0 to 6.5.0 (#2229)acff097build(deps): bump actions/cache from 5 to 6 (#2228)4e33541build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2225)11d9ac0build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 (#2191)3314202build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#2183)5b7fe02build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#2178)273a5e4build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#2177)Updates
github.com/sigstore/sigstore-gofrom 1.2.1 to 1.2.2Release notes
Sourced from github.com/sigstore/sigstore-go's releases.
Commits
55aa624Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#655)2eb9560Bump the minor-patch group across 1 directory with 2 updates (#656)cbf26e4Support Verification in sigstore/cosign with X.509 Certificate Chain (#581)8a3361cBump go-tuf to v2.4.2 (#652)d6ec891Bump the minor-patch group across 2 directories with 7 updates (#651)945a0aaBump actions/setup-go from 6.4.0 to 6.5.0 (#650)13a15e1Bump actions/checkout from 6.0.3 to 7.0.0 (#648)c95d7f4Update workflows to use Actions network firewall (#646)a2a84a6Update cert identity verify functions to ensure some criteria is specified (#...Updates
github.com/spiffe/go-spiffe/v2from 2.7.0 to 2.8.1Release notes
Sourced from github.com/spiffe/go-spiffe/v2's releases.
Changelog
Sourced from github.com/spiffe/go-spiffe/v2's changelog.
Commits
e9973f6v2.8.1 changelog (#396)bbc6dc1Add wit-svid to marshaled WIT bundle keys (#395)dbebcf8v2.8.0 changelog (#394)f685b2dAdd Broker API (#388)Updates
go.step.sm/cryptofrom 0.81.0 to 0.85.0Release notes
Sourced from go.step.sm/crypto's releases.
... (truncated)
Commits
2f2da33Merge pull request #1067 from smallstep/dependabot/go_modules/github.com/aws/...4ac554fchore(deps): Bump github.com/aws/aws-sdk-go-v2/config939e80eMerge pull request #1065 from smallstep/dependabot/go_modules/github.com/aws/...0b81964chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms913ffc2Merge pull request #1068 from smallstep/dependabot/go_modules/google.golang.o...9bddd4achore(deps): Bump google.golang.org/api from 0.286.0 to 0.288.0b9dd702Merge pull request #1070 from smallstep/diego/eff-89-dirstore-cache-optiona5902cbMerge pull request #1066 from smallstep/dependabot/go_modules/google.golang.o...5e46a2fMerge pull request #1069 from smallstep/dependabot/go_modules/github.com/Thal...eec0a45tpmkms: build TPM options in one placeUpdates
golang.org/x/syncfrom 0.20.0 to 0.21.0Commits
5071ed6all: fix some comments to improve readabilityUpdates
golang.org/x/sysfrom 0.45.0 to 0.46.0Commits
d58dcfaunix: add GPIO constants and structsUpdates
golang.org/x/termfrom 0.43.0 to 0.44.0Commits
3b43943go.mod: update golang.org/x dependenciesUpdates
github.com/anchore/go-struct-converterfrom 0.1.0 to 0.2.1Release notes
Sourced from github.com/anchore/go-struct-converter's releases.
Commits
c274fe9Update go-make to v0.8.0 (#35)8f9774crefactor release pipeline: TAG_TOKEN, skip-checks gate, go-make bump, dependa...755ace6chore(deps): bump the actions-minor-patch group across 1 directory with 5 upd...45a5adechore(deps): bump github.com/anchore/go-make (#30)b2e86dbchore(deps): bump the actions-minor-patch group across 1 directory with 4 upd...e9652e6chore(deps): bump the actions-minor-patch group across 1 directory with 5 upd...d9d0f7cchore(deps): bump the actions-minor-patch group across 1 directory with 2 upd...02dc725correct contents permissions for version check (#27)3558822bump go-make and fix release permissions (#26)fcfb36duse released shared workflow (#25)Updates
github.com/coreos/go-oidc/v3from 3.17.0 to 3.20.0Release notes
Sourced from github.com/coreos/go-oidc/v3's releases.
Commits
75dfa5coidc: add constants for "email" and "profile" scopesa89f046oidc: add API for determining when issuer URLs mismatch6a69b6dreadme: update README and docsf9049c9oidc: ignore JWKs with unknown signing algorithms rather than failing2f178e0SECURITY.md: add a security policy and point to project-level reportingb3bc7daoidc: improve documentation for APIs0db9053oidc: modernize with new Go APIs4204f0boidc: add support for validating back-channel logout tokensf77e01cfix: Key refresh should set no-cache to get most up to date keysda6b3bfbuild(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4Updates
github.com/docker/clifrom 29.4.3+incompatible to 29.5.3+incompatibleCommits
d1c06efMerge pull request #7022 from mickael-docker/docs-request-field7dd053bMerge pull request #7003 from thaJeztah/logs_links37c3d31Merge pull request #7024 from thaJeztah/add_zizmor45f10f2Merge pull request #7025 from vvoland/update-gob458dc9update to go1.26.41953194gha: apply zizmor fixesac0419egha: add zizmor workflow1aa0416docs: recommend default deny and clarify requesturi field3a85952Merge pull request #7020 from thaJeztah/full_semver8d3fbdfMerge pull request #7019 from thaJeztah/dependabot_labelsUpdates
github.com/docker/docker-credential-helpersfrom 0.9.3 to 0.9.8Release notes
Sourced from github.com/docker/docker-credential-helpers's releases.
... (truncated)
Commits
4f6bc8aMerge pull request #433 from thaJeztah/wincred_inlineb0820e3Merge pull request #441 from docker/dependabot/github_actions/actions/checkou...f84e991Merge pull request #445 from thaJeztah/bump_go_1.26.465d1391update to go1.26.4d21de35Merge pull request #444 from docker/dependabot/github_actions/crazy-max/dot-g...c6ca626build(deps): bump actions/checkout from 6.0.2 to 6.0.31d2dd3dMerge pull request #440 from docker/dependabot/github_actions/docker/setup-qe...3a54b5cMerge pull request #439 from docker/dependabot/github_actions/docker/bake-act...b68f2ecMerge pull request #438 from docker/dependabot/github_actions/docker/setup-bu...6107240build(deps): bump crazy-max/.github/.github/workflows/zizmor.ymlUpdates
github.com/go-logr/logrfrom 1.4.3 to 1.4.4Release notes
Sourced from github.com/go-logr/logr's releases.
Commits
96a9abaFix lint51c6302Better implementation of pointer recursion checkingc667114funcr: Handle and test recursive valuesf7ffadbAdd benchmark for pointer argse2a3c8efuncr: bound slog.Group nesting depth to prevent stack overflow2886d2bbuild(deps): bump actions/setup-go from 6.5.0 to 7.0.00b40896build(deps): bump github/codeql-action/upload-sarif77f671bBump to Go 1.26cce283fbuild(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.03832a11build(deps): bump github/codeql-action/upload-sarifUpdates
github.com/go-openapi/analysisfrom 0.25.2 to 0.25.4Release notes
Sourced from github.com/go-openapi/analysis's releases.