Build(deps): bump the go group across 1 directory with 48 updates - #8
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Build(deps): bump the go group across 1 directory with 48 updates#8dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.6` | `0.21.7` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.6` | `1.19.0` | | [github.com/lestrrat-go/jwx/v2](https://github.com/lestrrat-go/jwx) | `2.1.6` | `2.1.7` | | [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `1.2.1` | `1.2.2` | | [github.com/spiffe/go-spiffe/v2](https://github.com/spiffe/go-spiffe) | `2.7.0` | `2.8.1` | | [go.step.sm/crypto](https://github.com/smallstep/crypto) | `0.81.0` | `0.84.1` | | [github.com/anchore/go-struct-converter](https://github.com/anchore/go-struct-converter) | `0.1.0` | `0.2.1` | | [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.17.0` | `3.20.0` | | [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.9.3` | `0.9.8` | | [github.com/go-openapi/analysis](https://github.com/go-openapi/analysis) | `0.25.2` | `0.25.3` | | [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.23.1` | `1.0.0` | | [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `0.21.6` | `1.0.0` | | [github.com/go-openapi/runtime/server-middleware](https://github.com/go-openapi/runtime) | `0.30.0` | `0.32.4` | | [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid) | `2.3.0` | `2.4.0` | | [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.3.1` | `2.4.3` | | [github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority) | `2.1.2` | `2.1.3` | | [go.yaml.in/yaml/v4](https://github.com/yaml/go-yaml) | `4.0.0-rc.4` | `4.0.0-rc.6` | Updates `github.com/google/go-containerregistry` from 0.21.6 to 0.21.7 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.6...v0.21.7) Updates `github.com/klauspost/compress` from 1.18.6 to 1.19.0 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.6...v1.19.0) Updates `github.com/lestrrat-go/jwx/v2` from 2.1.6 to 2.1.7 - [Release notes](https://github.com/lestrrat-go/jwx/releases) - [Changelog](https://github.com/lestrrat-go/jwx/blob/v2.1.7/Changes) - [Commits](lestrrat-go/jwx@v2.1.6...v2.1.7) Updates `github.com/sigstore/sigstore-go` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/sigstore/sigstore-go/releases) - [Commits](sigstore/sigstore-go@v1.2.1...v1.2.2) Updates `github.com/spiffe/go-spiffe/v2` from 2.7.0 to 2.8.1 - [Release notes](https://github.com/spiffe/go-spiffe/releases) - [Changelog](https://github.com/spiffe/go-spiffe/blob/main/CHANGELOG.md) - [Commits](spiffe/go-spiffe@v2.7.0...v2.8.1) Updates `go.step.sm/crypto` from 0.81.0 to 0.84.1 - [Release notes](https://github.com/smallstep/crypto/releases) - [Commits](smallstep/crypto@v0.81.0...v0.84.1) Updates `golang.org/x/sync` from 0.20.0 to 0.21.0 - [Commits](golang/sync@v0.20.0...v0.21.0) Updates `golang.org/x/sys` from 0.45.0 to 0.46.0 - [Commits](golang/sys@v0.45.0...v0.46.0) Updates `golang.org/x/term` from 0.43.0 to 0.44.0 - [Commits](golang/term@v0.43.0...v0.44.0) Updates `github.com/anchore/go-struct-converter` from 0.1.0 to 0.2.1 - [Release notes](https://github.com/anchore/go-struct-converter/releases) - [Commits](anchore/go-struct-converter@v0.1.0...v0.2.1) Updates `github.com/coreos/go-oidc/v3` from 3.17.0 to 3.20.0 - [Release notes](https://github.com/coreos/go-oidc/releases) - [Commits](coreos/go-oidc@v3.17.0...v3.20.0) Updates `github.com/docker/cli` from 29.4.3+incompatible to 29.5.3+incompatible - [Commits](docker/cli@v29.4.3...v29.5.3) Updates `github.com/docker/docker-credential-helpers` from 0.9.3 to 0.9.8 - [Release notes](https://github.com/docker/docker-credential-helpers/releases) - [Commits](docker/docker-credential-helpers@v0.9.3...v0.9.8) Updates `github.com/go-openapi/analysis` from 0.25.2 to 0.25.3 - [Release notes](https://github.com/go-openapi/analysis/releases) - [Commits](go-openapi/analysis@v0.25.2...v0.25.3) Updates `github.com/go-openapi/errors` from 0.22.7 to 0.22.8 - [Release notes](https://github.com/go-openapi/errors/releases) - [Commits](go-openapi/errors@v0.22.7...v0.22.8) Updates `github.com/go-openapi/jsonpointer` from 0.23.1 to 1.0.0 - [Release notes](https://github.com/go-openapi/jsonpointer/releases) - [Commits](go-openapi/jsonpointer@v0.23.1...v1.0.0) Updates `github.com/go-openapi/jsonreference` from 0.21.6 to 1.0.0 - [Release notes](https://github.com/go-openapi/jsonreference/releases) - [Commits](go-openapi/jsonreference@v0.21.6...v1.0.0) Updates `github.com/go-openapi/loads` from 0.23.3 to 0.24.0 - [Release notes](https://github.com/go-openapi/loads/releases) - [Commits](go-openapi/loads@v0.23.3...v0.24.0) Updates `github.com/go-openapi/runtime` from 0.32.3 to 0.32.4 - [Release notes](https://github.com/go-openapi/runtime/releases) - [Commits](go-openapi/runtime@v0.32.3...v0.32.4) Updates `github.com/go-openapi/runtime/server-middleware` from 0.30.0 to 0.32.4 - [Release notes](https://github.com/go-openapi/runtime/releases) - [Commits](go-openapi/runtime@v0.30.0...v0.32.4) Updates `github.com/go-openapi/spec` from 0.22.5 to 0.22.6 - [Release notes](https://github.com/go-openapi/spec/releases) - [Commits](go-openapi/spec@v0.22.5...v0.22.6) Updates `github.com/go-openapi/strfmt` from 0.26.3 to 0.26.4 - [Release notes](https://github.com/go-openapi/strfmt/releases) - [Commits](go-openapi/strfmt@v0.26.3...v0.26.4) Updates `github.com/go-openapi/swag` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/cmdutils` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/conv` from 0.26.0 to 0.27.0 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.27.0) Updates `github.com/go-openapi/swag/fileutils` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/jsonname` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/jsonutils` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/loading` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/mangling` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/netutils` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/stringutils` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/swag/typeutils` from 0.26.0 to 0.27.0 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.27.0) Updates `github.com/go-openapi/swag/yamlutils` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.26.0...v0.26.1) Updates `github.com/go-openapi/validate` from 0.25.3 to 0.26.0 - [Release notes](https://github.com/go-openapi/validate/releases) - [Commits](go-openapi/validate@v0.25.3...v0.26.0) Updates `github.com/klauspost/cpuid/v2` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/klauspost/cpuid/releases) - [Commits](klauspost/cpuid@v2.3.0...v2.4.0) Updates `github.com/pelletier/go-toml/v2` from 2.3.1 to 2.4.3 - [Release notes](https://github.com/pelletier/go-toml/releases) - [Commits](pelletier/go-toml@v2.3.1...v2.4.3) Updates `github.com/sigstore/rekor` from 1.5.2 to 1.5.3 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.5.2...v1.5.3) Updates `github.com/sigstore/rekor-tiles/v2` from 2.2.2-0.20260601073857-5d098a2b6443 to 2.3.0 - [Release notes](https://github.com/sigstore/rekor-tiles/releases) - [Changelog](https://github.com/sigstore/rekor-tiles/blob/main/RELEASE.md) - [Commits](https://github.com/sigstore/rekor-tiles/commits/v2.3.0) Updates `github.com/sigstore/timestamp-authority/v2` from 2.1.2 to 2.1.3 - [Release notes](https://github.com/sigstore/timestamp-authority/releases) - [Changelog](https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md) - [Commits](sigstore/timestamp-authority@v2.1.2...v2.1.3) Updates `github.com/theupdateframework/go-tuf/v2` from 2.4.2-0.20260407074541-7e8f69f906ef to 2.4.2 - [Release notes](https://github.com/theupdateframework/go-tuf/releases) - [Commits](https://github.com/theupdateframework/go-tuf/commits/v2.4.2) Updates `go.yaml.in/yaml/v4` from 4.0.0-rc.4 to 4.0.0-rc.6 - [Commits](yaml/go-yaml@v4.0.0-rc.4...v4.0.0-rc.6) Updates `golang.org/x/crypto` from 0.52.0 to 0.53.0 - [Commits](golang/crypto@v0.52.0...v0.53.0) Updates `golang.org/x/mod` from 0.36.0 to 0.37.0 - [Commits](golang/mod@v0.36.0...v0.37.0) Updates `golang.org/x/net` from 0.55.0 to 0.56.0 - [Commits](golang/net@v0.55.0...v0.56.0) Updates `golang.org/x/text` from 0.37.0 to 0.38.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.37.0...v0.38.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260523011958-0a33c5d7ca68 to 0.0.0-20260610212136-7ab31c22f7ad - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.81.1 to 1.82.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.82.0) --- updated-dependencies: - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/klauspost/compress dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/lestrrat-go/jwx/v2 dependency-version: 2.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/sigstore/sigstore-go dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/spiffe/go-spiffe/v2 dependency-version: 2.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: go.step.sm/crypto dependency-version: 0.84.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sync dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sys dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/term dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/anchore/go-struct-converter dependency-version: 0.2.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/coreos/go-oidc/v3 dependency-version: 3.20.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/docker/cli dependency-version: 29.5.3+incompatible dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/docker/docker-credential-helpers dependency-version: 0.9.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/analysis dependency-version: 0.25.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/errors dependency-version: 0.22.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/jsonpointer dependency-version: 1.0.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: go - dependency-name: github.com/go-openapi/jsonreference dependency-version: 1.0.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: go - dependency-name: github.com/go-openapi/loads dependency-version: 0.24.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/runtime dependency-version: 0.32.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/runtime/server-middleware dependency-version: 0.32.4 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/spec dependency-version: 0.22.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/strfmt dependency-version: 0.26.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/cmdutils dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/conv dependency-version: 0.27.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/swag/fileutils dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/jsonname dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/jsonutils dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/loading dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/mangling dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/netutils dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/stringutils dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/typeutils dependency-version: 0.27.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-openapi/swag/yamlutils dependency-version: 0.26.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/validate dependency-version: 0.26.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/klauspost/cpuid/v2 dependency-version: 2.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/pelletier/go-toml/v2 dependency-version: 2.4.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/sigstore/rekor dependency-version: 1.5.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/sigstore/rekor-tiles/v2 dependency-version: 2.3.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/sigstore/timestamp-authority/v2 dependency-version: 2.1.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/theupdateframework/go-tuf/v2 dependency-version: 2.4.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: go.yaml.in/yaml/v4 dependency-version: 4.0.0-rc.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/crypto dependency-version: 0.53.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/mod dependency-version: 0.37.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/net dependency-version: 0.56.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/text dependency-version: 0.38.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20260610212136-7ab31c22f7ad dependency-type: indirect update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.82.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go group with 17 updates in the / directory:
0.21.60.21.71.18.61.19.02.1.62.1.71.2.11.2.22.7.02.8.10.81.00.84.10.1.00.2.13.17.03.20.00.9.30.9.80.25.20.25.30.23.11.0.00.21.61.0.00.30.00.32.42.3.02.4.02.3.12.4.32.1.22.1.34.0.0-rc.44.0.0-rc.6Updates
github.com/google/go-containerregistryfrom 0.21.6 to 0.21.7Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
c68d899Bump go version to 1.26.4 (#2350)da61d86transport: do not re-attach bearer token after cross-host redirect (#2349)09fe1e5fix(tarball): normalize paths when matching files (#2334)5baa399build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)97a8a17fix(transport): apply refreshed bearer token after cross-host redirect (#2337)e963497internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)02649eafix: prevent SSRF in google.List() pagination (#2332)7204b40build(deps): bump the actions group across 1 directory with 2 updates (#2344)4cfaa93build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)6849394pkg/registry: export RedirectError (#2177)Updates
github.com/klauspost/compressfrom 1.18.6 to 1.19.0Release notes
Sourced from github.com/klauspost/compress's releases.
Commits
f0953f9flate: fix buffer formatting in tests (#1165)ab2e3cczstd: Add arm64 decoder asm (#1160)bb2723dMerge commit from fork539243bs2sx: Clean symlink targets (#1163)bd9228cApply go fix and check in CI (#1158)4cc176czstd: Add true concurrent stream encoding (#1136)4705fcbbuild(deps): bump the github-actions group with 3 updates (#1157)e9c2e56huff0: Allow building table from oversized histogram. (#1156)ecdb779huff0: Allow building tables from histogram. (#1155)38efa45zip: add NameDecoder callback for legacy encoding rewrite (#1150)Updates
github.com/lestrrat-go/jwx/v2from 2.1.6 to 2.1.7Changelog
Sourced from github.com/lestrrat-go/jwx/v2's changelog.
Commits
f818e26Merge branch 'develop/v2' into v215997a7release v2.1.74b065d7build(deps): bump actions/cache from 6.0.0 to 6.1.0 (#2237)1da7d9bbuild(deps): bump actions/setup-go from 6.4.0 to 6.5.0 (#2229)acff097build(deps): bump actions/cache from 5 to 6 (#2228)4e33541build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2225)11d9ac0build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 (#2191)3314202build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#2183)5b7fe02build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#2178)273a5e4build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#2177)Updates
github.com/sigstore/sigstore-gofrom 1.2.1 to 1.2.2Release notes
Sourced from github.com/sigstore/sigstore-go's releases.
Commits
55aa624Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#655)2eb9560Bump the minor-patch group across 1 directory with 2 updates (#656)cbf26e4Support Verification in sigstore/cosign with X.509 Certificate Chain (#581)8a3361cBump go-tuf to v2.4.2 (#652)d6ec891Bump the minor-patch group across 2 directories with 7 updates (#651)945a0aaBump actions/setup-go from 6.4.0 to 6.5.0 (#650)13a15e1Bump actions/checkout from 6.0.3 to 7.0.0 (#648)c95d7f4Update workflows to use Actions network firewall (#646)a2a84a6Update cert identity verify functions to ensure some criteria is specified (#...Updates
github.com/spiffe/go-spiffe/v2from 2.7.0 to 2.8.1Release notes
Sourced from github.com/spiffe/go-spiffe/v2's releases.
Changelog
Sourced from github.com/spiffe/go-spiffe/v2's changelog.
Commits
e9973f6v2.8.1 changelog (#396)bbc6dc1Add wit-svid to marshaled WIT bundle keys (#395)dbebcf8v2.8.0 changelog (#394)f685b2dAdd Broker API (#388)Updates
go.step.sm/cryptofrom 0.81.0 to 0.84.1Release notes
Sourced from go.step.sm/crypto's releases.
... (truncated)
Commits
5939e29Merge pull request #1030 from smallstep/diego/eff-232-cng-key-containers-not-...dc133ebMerge branch 'master' into diego/eff-232-cng-key-containers-not-deleted-for-s...fd2c8a0Merge pull request #1062 from smallstep/josh/capi-fix-dwkeyspec520ec32Update comment re: 'LEGACY_KEY_SPEC_NONE'884a66fMerge remote-tracking branch 'origin/master' into diego/eff-232-cng-key-conta...855a7d1tpmkms: document why SearchKeys can fail2af46dbUse correct CNG-key value for 'dwKeySpec' when setting key provider infod2bf23cMerge pull request #1060 from smallstep/dependabot/go_modules/modernc.org/sql...297be12chore(deps): Bump modernc.org/sqlite from 1.52.0 to 1.53.0d40d13fMerge pull request #1061 from smallstep/dependabot/go_modules/google.golang.o...Updates
golang.org/x/syncfrom 0.20.0 to 0.21.0Commits
5071ed6all: fix some comments to improve readabilityUpdates
golang.org/x/sysfrom 0.45.0 to 0.46.0Commits
d58dcfaunix: add GPIO constants and structsUpdates
golang.org/x/termfrom 0.43.0 to 0.44.0Commits
3b43943go.mod: update golang.org/x dependenciesUpdates
github.com/anchore/go-struct-converterfrom 0.1.0 to 0.2.1Release notes
Sourced from github.com/anchore/go-struct-converter's releases.
Commits
c274fe9Update go-make to v0.8.0 (#35)8f9774crefactor release pipeline: TAG_TOKEN, skip-checks gate, go-make bump, dependa...755ace6chore(deps): bump the actions-minor-patch group across 1 directory with 5 upd...45a5adechore(deps): bump github.com/anchore/go-make (#30)b2e86dbchore(deps): bump the actions-minor-patch group across 1 directory with 4 upd...e9652e6chore(deps): bump the actions-minor-patch group across 1 directory with 5 upd...d9d0f7cchore(deps): bump the actions-minor-patch group across 1 directory with 2 upd...02dc725correct contents permissions for version check (#27)3558822bump go-make and fix release permissions (#26)fcfb36duse released shared workflow (#25)Updates
github.com/coreos/go-oidc/v3from 3.17.0 to 3.20.0Release notes
Sourced from github.com/coreos/go-oidc/v3's releases.
Commits
75dfa5coidc: add constants for "email" and "profile" scopesa89f046oidc: add API for determining when issuer URLs mismatch6a69b6dreadme: update README and docsf9049c9oidc: ignore JWKs with unknown signing algorithms rather than failing2f178e0SECURITY.md: add a security policy and point to project-level reportingb3bc7daoidc: improve documentation for APIs0db9053oidc: modernize with new Go APIs4204f0boidc: add support for validating back-channel logout tokensf77e01cfix: Key refresh should set no-cache to get most up to date keysda6b3bfbuild(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4Updates
github.com/docker/clifrom 29.4.3+incompatible to 29.5.3+incompatibleCommits
d1c06efMerge pull request #7022 from mickael-docker/docs-request-field7dd053bMerge pull request #7003 from thaJeztah/logs_links37c3d31Merge pull request #7024 from thaJeztah/add_zizmor45f10f2Merge pull request #7025 from vvoland/update-gob458dc9update to go1.26.41953194gha: apply zizmor fixesac0419egha: add zizmor workflow1aa0416docs: recommend default deny and clarify requesturi field3a85952Merge pull request #7020 from thaJeztah/full_semver8d3fbdfMerge pull request #7019 from thaJeztah/dependabot_labelsUpdates
github.com/docker/docker-credential-helpersfrom 0.9.3 to 0.9.8Release notes
Sourced from github.com/docker/docker-credential-helpers's releases.
... (truncated)
Commits
4f6bc8aMerge pull request #433 from thaJeztah/wincred_inlineb0820e3Merge pull request #441 from docker/dependabot/github_actions/actions/checkou...f84e991Merge pull request #445 from thaJeztah/bump_go_1.26.465d1391update to go1.26.4d21de35Merge pull request #444 from docker/dependabot/github_actions/crazy-max/dot-g...c6ca626build(deps): bump actions/checkout from 6.0.2 to 6.0.31d2dd3dMerge pull request #440 from docker/dependabot/github_actions/docker/setup-qe...3a54b5cMerge pull request #439 from docker/dependabot/github_actions/docker/bake-act...b68f2ecMerge pull request #438 from docker/dependabot/github_actions/docker/setup-bu...6107240build(deps): bump crazy-max/.github/.github/workflows/zizmor.ymlUpdates
github.com/go-openapi/analysisfrom 0.25.2 to 0.25.3Release notes
Sourced from github.com/go-openapi/analysis's releases.
... (truncated)
Commits
d522a30chore(deps): Bump actions/setup-go