chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #591 · securesign/rekor

red-hat-konflux · 2026-04-20T11:21:40Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
cloud.google.com/go/auth	indirect	minor	`v0.16.2` → `v0.20.0`
cloud.google.com/go/iam	indirect	minor	`v1.5.2` → `v1.10.0`
cloud.google.com/go/kms	indirect	minor	`v1.22.0` → `v1.23.2`
cloud.google.com/go/longrunning	indirect	minor	`v0.6.7` → `v0.12.0`
cloud.google.com/go/profiler	require	minor	`v0.4.3` → `v0.6.0`
filippo.io/edwards25519	indirect	minor	`v1.1.0` → `v1.2.0`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	minor	`v1.10.1` → `v1.13.1`
github.com/Azure/azure-sdk-for-go/sdk/internal	indirect	minor	`v1.11.1` → `v1.12.0`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.4.2` → `v1.7.1`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	indirect	minor	`v0.51.0` → `v0.56.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	indirect	minor	`v0.51.0` → `v0.56.0`
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	indirect	minor	`v1.6.10` → `v1.7.10`
github.com/aws/aws-sdk-go-v2/credentials	indirect	minor	`v1.17.69` → `v1.19.16`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	minor	`v1.16.31` → `v1.18.23`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	indirect	minor	`v1.17.77` → `v1.22.18`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	minor	`v1.3.35` → `v1.4.23`
github.com/aws/aws-sdk-go-v2/internal/ini	indirect	patch	`v1.8.3` → `v1.8.6`
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	minor	`v1.3.34` → `v1.4.24`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	minor	`v1.12.3` → `v1.13.9`
github.com/aws/aws-sdk-go-v2/service/internal/checksum	indirect	minor	`v1.7.2` → `v1.9.15`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	minor	`v1.12.16` → `v1.13.23`
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	indirect	minor	`v1.18.15` → `v1.19.23`
github.com/aws/smithy-go	indirect	minor	`v1.22.3` → `v1.23.2`
github.com/cncf/xds/go	indirect	digest	`ee656c7` → `dba9d58`
github.com/danieljoos/wincred	indirect	patch	`v1.2.2` → `v1.2.3`
github.com/envoyproxy/protoc-gen-validate	indirect	patch	`v1.3.0` → `v1.3.3`
github.com/fsnotify/fsnotify	indirect	minor	`v1.9.0` → `v1.10.1`
github.com/go-openapi/analysis	indirect	minor	`v0.23.0` → `v0.25.0`
github.com/go-openapi/errors	indirect	patch	`v0.22.1` → `v0.22.7`
github.com/go-openapi/errors	require	patch	`v0.22.1` → `v0.22.7`
github.com/go-openapi/inflect	indirect	patch	`v0.21.2` → `v0.21.5`
github.com/go-openapi/jsonpointer	indirect	minor	`v0.21.1` → `v0.23.1`
github.com/go-openapi/jsonreference	indirect	patch	`v0.21.0` → `v0.21.5`
github.com/go-openapi/loads	indirect	minor	`v0.22.0` → `v0.23.3`
github.com/go-openapi/loads	require	minor	`v0.22.0` → `v0.23.3`
github.com/go-openapi/runtime	indirect	minor	`v0.28.0` → `v0.29.5`
github.com/go-openapi/runtime	require	minor	`v0.28.0` → `v0.29.5`
github.com/go-openapi/spec	indirect	minor	`v0.21.0` → `v0.22.4`
github.com/go-openapi/spec	require	minor	`v0.21.0` → `v0.22.4`
github.com/go-openapi/strfmt	indirect	minor	`v0.23.0` → `v0.26.2`
github.com/go-openapi/strfmt	require	minor	`v0.23.0` → `v0.26.2`
github.com/go-openapi/swag	indirect	minor	`v0.23.1` → `v0.26.0`
github.com/go-openapi/swag	require	minor	`v0.23.1` → `v0.26.0`
github.com/go-openapi/validate	indirect	minor	`v0.24.0` → `v0.25.2`
github.com/go-openapi/validate	require	minor	`v0.24.0` → `v0.25.2`
github.com/go-sql-driver/mysql	require	minor	`v1.9.2` → `v1.10.0`
github.com/go-swagger/go-swagger	require	minor	`v0.32.3` → `v0.33.2`
github.com/google/go-containerregistry	indirect	minor	`v0.20.3` → `v0.21.5`
github.com/google/pprof	indirect	digest	`c6617b8` → `92041b7`
github.com/google/rpmpack	require	patch	`v0.7.0` → `v0.7.1`
github.com/google/trillian	require	patch	`v1.7.2` → `v1.7.3`
github.com/google/wire	indirect	minor	`v0.6.0` → `v0.7.0`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.6` → `v0.3.15`
github.com/hashicorp/vault/api	indirect	minor	`v1.22.0` → `v1.23.0`
github.com/in-toto/in-toto-golang	require	minor	`v0.9.0` → `v0.11.0`
github.com/klauspost/compress	indirect	patch	`v1.18.0` → `v1.18.6`
github.com/letsencrypt/boulder	indirect	minor	`v0.0.0-20240620165639-de9c06129bec` → `v0.20260504.0`
github.com/mailru/easyjson	indirect	patch	`v0.9.0` → `v0.9.2`
github.com/mattn/go-sqlite3	indirect	patch	`v1.14.28` → `v1.14.44`
github.com/prometheus/client_golang	require	minor	`v1.22.0` → `v1.23.2`
github.com/prometheus/common	indirect	minor	`v0.64.0` → `v0.67.5`
github.com/prometheus/procfs	indirect	minor	`v0.16.1` → `v0.20.1`
github.com/sagikazarmark/locafero	indirect	minor	`v0.9.0` → `v0.12.0`
github.com/secure-systems-lab/go-securesystemslib	require	minor	`v0.9.0` → `v0.11.0`
github.com/sigstore/protobuf-specs	require	minor	`v0.4.2` → `v0.5.1`
github.com/sigstore/sigstore	require	minor	`v1.9.5` → `v1.10.5`
github.com/sigstore/sigstore/pkg/signature/kms/aws	require	minor	`v1.9.4` → `v1.10.5`
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	minor	`v1.9.4` → `v1.10.5`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	minor	`v1.9.4` → `v1.10.5`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	require	minor	`v1.9.4` → `v1.10.5`
github.com/spf13/cast	indirect	minor	`v1.9.0` → `v1.10.0`
github.com/spf13/cobra	require	minor	`v1.9.1` → `v1.10.2`
github.com/spf13/pflag	indirect	patch	`v1.0.6` → `v1.0.10`
github.com/spf13/pflag	require	patch	`v1.0.6` → `v1.0.10`
github.com/toqueteos/webbrowser	indirect	patch	`v1.2.0` → `v1.2.1`
github.com/ulikunitz/xz	indirect	patch	`v0.5.12` → `v0.5.15`
github.com/zalando/go-keyring	indirect	patch	`v0.2.6` → `v0.2.8`
go.mongodb.org/mongo-driver	indirect	patch	`v1.17.3` → `v1.17.9`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.61.0` → `v0.68.0`
go.step.sm/crypto	require	minor	`v0.67.0` → `v0.78.0`
gocloud.dev	require	minor	`v0.40.0` → `v0.45.0`
golang.org/x/crypto	indirect	minor	`v0.38.0` → `v0.50.0`
golang.org/x/crypto	require	minor	`v0.46.0` → `v0.50.0`
golang.org/x/exp	require	digest	`b6e5de4` → `746e56f`
golang.org/x/mod	indirect	minor	`v0.24.0` → `v0.35.0`
golang.org/x/mod	require	minor	`v0.30.0` → `v0.35.0`
golang.org/x/net	require	minor	`v0.48.0` → `v0.53.0`
golang.org/x/oauth2	indirect	minor	`v0.34.0` → `v0.36.0`
golang.org/x/sync	indirect	minor	`v0.14.0` → `v0.20.0`
golang.org/x/sync	require	minor	`v0.19.0` → `v0.20.0`
golang.org/x/sys	indirect	minor	`v0.33.0` → `v0.43.0`
golang.org/x/sys	indirect	minor	`v0.40.0` → `v0.43.0`
golang.org/x/term	indirect	minor	`v0.38.0` → `v0.42.0`
golang.org/x/text	indirect	minor	`v0.25.0` → `v0.36.0`
golang.org/x/text	indirect	minor	`v0.32.0` → `v0.36.0`
golang.org/x/time	indirect	minor	`v0.12.0` → `v0.15.0`
golang.org/x/tools	indirect	minor	`v0.33.0` → `v0.44.0`
google.golang.org/api	require	minor	`v0.237.0` → `v0.278.0`
google.golang.org/genproto	indirect	digest	`200df99` → `60b97b3`
google.golang.org/genproto/googleapis/rpc	require	digest	`ff82c1b` → `60b97b3`
sigs.k8s.io/release-utils	require	minor	`v0.11.1` → `v0.12.4`
sigs.k8s.io/yaml	require	minor	`v1.5.0` → `v1.6.0`
software.sslmate.com/src/go-pkcs12	indirect	minor	`v0.5.0` → `v0.7.1`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

`v0.20.0`

Compare Source

bigquery: Support SchemaUpdateOptions for load jobs.
bigtable:
- Add SampleRowKeys.
- cbt: Support union, intersection GCPolicy.
- Retry admin RPCS.
- Add trace spans to retries.
datastore: Add OpenCensus tracing.
firestore:
- Fix queries involving Null and NaN.
- Allow Timestamp protobuffers for time values.
logging: Add a WriteTimeout option.
spanner: Support Batch API.
storage: Add OpenCensus tracing.

`v0.19.0`

bigquery:
- Support customer-managed encryption keys.
bigtable:
- Improved emulator support.
- Support GetCluster.
datastore:
- Add general mutations.
- Support pointer struct fields.
- Support transaction options.
firestore:
- Add Transaction.GetAll.
- Support document cursors.
logging:
- Support concurrent RPCs to the service.
- Support per-entry resources.
profiler:
- Add config options to disable heap and thread profiling.
- Read the project ID from $GOOGLE_CLOUD_PROJECT when it's set.
pubsub:
- BEHAVIOR CHANGE: Release flow control after ack/nack (instead of after the
  callback returns).
- Add SubscriptionInProject.
- Add OpenCensus instrumentation for streaming pull.
storage:
- Support CORS.

`v0.18.0`

Compare Source

bigquery:
- Marked stable.
- Schema inference of nullable fields supported.
- Added TimePartitioning to QueryConfig.
firestore: Data provided to DocumentRef.Set with a Merge option can contain
Delete sentinels.
logging: Clients can accept parent resources other than projects.
pubsub:
- pubsub/pstest: A lighweight fake for pubsub. Experimental; feedback welcome.
- Support updating more subscription metadata: AckDeadline,
  RetainAckedMessages and RetentionDuration.
oslogin/apiv1beta: New client for the Cloud OS Login API.
rpcreplay: A package for recording and replaying gRPC traffic.
spanner:
- Add a ReadWithOptions that supports a row limit, as well as an index.
- Support query plan and execution statistics.
- Added OpenCensus support.
storage: Clarify checksum validation for gzipped files (it is not validated
when the file is served uncompressed).

`v0.17.0`

firestore BREAKING CHANGES:
- Remove UpdateMap and UpdateStruct; rename UpdatePaths to Update.
  Change
  docref.UpdateMap(ctx, map[string]interface{}{"a.b", 1})
  to
  docref.Update(ctx, []firestore.Update{{Path: "a.b", Value: 1}})
  
  Change
  docref.UpdateStruct(ctx, []string{"Field"}, aStruct)
  to
  docref.Update(ctx, []firestore.Update{{Path: "Field", Value: aStruct.Field}})
- Rename MergePaths to Merge; require args to be FieldPaths
- A value stored as an integer can be read into a floating-point field, and vice versa.
bigtable/cmd/cbt:
- Support deleting a column.
- Add regex option for row read.
spanner: Mark stable.
storage:
- Add Reader.ContentEncoding method.
- Fix handling of SignedURL headers.
bigquery:
- If Uploader.Put is called with no rows, it returns nil without making a
  call.
- Schema inference supports the "nullable" option in struct tags for
  non-required fields.
- TimePartitioning supports "Field".

FiloSottile/edwards25519 (filippo.io/edwards25519)

`v1.2.0`

Compare Source

`v1.1.1`

Compare Source

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.7.1`: 1.7.1

Compare Source

What's Changed

Add FMI (Federated Managed Identity) Design Specification for MSAL Go by @4gust in #583
Fix bug in refresh token partition check by @Avery-Dunn in #606
Improve instance discovery resiliency and sovereign cloud support by @Avery-Dunn in #604

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.0...v1.7.1

`v1.7.0`: 1.7.0

Compare Source

What's Changed

Add WithPrompt option for AuthCodeURL by @szogoon in #585
Use form_post response mode for interactive authentication by @ashok672 in #596

New Contributors

@szogoon made their first contribution in #585
@ashok672 made their first contribution in #596

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.6.0...v1.7.0

`v1.6.0`

Compare Source

What's Changed

Deprecate ROPC flow by @Ugonnaak1 in #584
Added a cache lookup for AcquireTokenByCredential by @4gust in #590
Fix panic in AcquireTokenSilent for public clients due to nil Credential by @4gust in #581
Adding support for FMI (Federated Managed Identity) by @4gust in #586
Adjust issuer validation to handle cases where instance discovery is not performed by @Avery-Dunn in #591

New Contributors

@Ugonnaak1 made their first contribution in #584

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.5.0...v1.6.0

`v1.5.0`

Compare Source

What's Changed

Bump github.com/golang-jwt/jwt/v5 from 5.0.0 to 5.2.2 by @dependabot[bot] in #563
Added a FIC test by @4gust in #557
Fix CodeQL warning 'Cross-site scripting vulnerability due to user-provided value by @fengga in #566
fix: support both login.partner.microsoftonline.cn and login.chinaclo… by @Achiket123 in #575
Add validation for issuer returned by OIDC endpoint by @Avery-Dunn in #576
#572 - Update spelling of client by @equalsgibson in #573

New Contributors

@dependabot[bot] made their first contribution in #563
@fengga made their first contribution in #566
@Achiket123 made their first contribution in #575
@Avery-Dunn made their first contribution in #576
@equalsgibson made their first contribution in #573

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.4.2...v1.5.0

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

`v0.56.0`: v1.32.0/v0.56.0

Compare Source

What's Changed

Support universe domains in collector exporter client configuration by @dashpole in #1097
Don't pass credentials fetched using FindDefaultCredentials by @dashpole in #1098
googleclientauthextension: support Proxy-Authorization header by @lindeskar in #1105
Improve unit tests for gcp auth extension by @dashpole in #1103
Allow providing a context to create the monitoring client by @dashpole in #1096
Add support for go 1.26 by @dashpole in #1107
chore(deps): update module golang.org/x/crypto to v0.45.0 [security] by @renovate-bot in #1102
Don't allow modifying the default scopes by @dashpole in #1109
Ignore versions in the user agent header when comparing fixtures by @dashpole in #1115
Bump go version to resolve govulncheck failures by @dashpole in #1114
Separate out govulncheck into its own CI job by @dashpole in #1113
Normalize user agents in span attributes as well by @dashpole in #1117
fix(deps): update module google.golang.org/grpc to v1.79.3 [security] by @jefferbrecht in #1131
Prepare for v1.32.0/v0.56.0 by @dashpole in #1132

New Contributors

@lindeskar made their first contribution in #1105
@jefferbrecht made their first contribution in #1131

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.55.0...v0.56.0

`v0.55.0`: v1.31.0/v0.55.0

Compare Source

What's Changed

Add feature gate to allow sending log trace context without a prefix by @dashpole in #1079
[exporter/collector/logs] Support httpRequest.status field as integer or string containing an integer. by @franciscovalentecastro in #1080
Fix CI by @dashpole in #1086
precompile regex from resource filters by @dashpole in #1085
Add region tags in OTLP Trace Sample by @psx95 in #1089
[exporter/collector/logs] Create Int32OrString and Int64OrString to handle integer fields in gcp.http_request. by @franciscovalentecastro in #1091
[chore] Pre-release steps for opentelemetry-operations-go repo release. by @franciscovalentecastro in #1092

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.54.0...v0.55.0

`v0.54.0`: v1.30.0/v0.54.0

Compare Source

What's Changed

Add OTel Logging sample by @psx95 in #1055
Update slog example by @psx95 in #1056
Show structured logging in Go by @psx95 in #1057
log project name when metric requests fail by @dashpole in #1059
Migrate from pkg/translator/prometheus to otlptranslator by @dashpole in #1061
feat: Populate description for gcm.TimeSeries by @bwplotka in #1063
Bump mapstructure dependency manually by @braydonk in #1066
post-release: fix segfault in script when no replace is found by @ridwanmsharif in #1025
Update all dependencies, bump go version by @dashpole in #1069
prepare for v1.30.0/v0.54.0 by @dashpole in #1072

New Contributors

@bwplotka made their first contribution in #1063

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0

`v0.53.0`: v1.29.0/v0.53.0

Compare Source

What's Changed

exporter/metric: add WithMetricClient option by @enocom in #1033
go.mod: use go 1.23 by @braydonk in #1048

New Contributors

@enocom made their first contribution in #1033

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.52.0...v0.53.0

`v0.52.0`: v1.28.0/v0.52.0

Compare Source

What's Changed

chore(deps): update go version from 1.2x.x to 1.23.8 and 1.24.0 to 1.24.2 in go.mod files and tests. by @franciscovalentecastro in #1036
exporter/collector: Add mapping for LogSeverity values set as SeverityText to correct SeverityNumber. by @franciscovalentecastro in #1031
Allow overriding Project ID using env var by @psx95 in #1040
Update dependencies and tooling by @psx95 in #1042
Prepare for v1.28.0/v0.52.0 by @psx95 in #1045

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.51.0...v0.52.0

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream)

`v1.7.2`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/service/amp: v1.34.0
- Feature: Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus
github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.39.0
- Feature: With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded.
github.com/aws/aws-sdk-go-v2/service/dsql: v1.5.0
- Feature: Features: support for customer managed encryption keys
github.com/aws/aws-sdk-go-v2/service/glue: v1.113.0
- Feature: This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning
github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.7.2
- Bug Fix: Handle checksum for unseekable body with 0 content length

`v1.7.1`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/service/acm: v1.32.0
- Feature: Add support for file-based HTTP domain control validation, available through Amazon CloudFront.
github.com/aws/aws-sdk-go-v2/service/cloudfront: v1.46.0
- Feature: Add distribution tenant, connection group, and multi-tenant distribution APIs to the CloudFront SDK.
github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.43.1
- Documentation: Doc only update for GSI descriptions.
github.com/aws/aws-sdk-go-v2/service/imagebuilder: v1.42.0
- Feature: Add integration with SSM Parameter Store to Image Builder.
github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.7.1
- Bug Fix: Don't emit warnings about lack of checksum validation for non-200 responses.

`v1.7.0`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/service/ec2: v1.209.0
- Feature: This release adds the GroupLongName field to the response of the DescribeAvailabilityZones API.
github.com/aws/aws-sdk-go-v2/service/ecr: v1.43.0
- Feature: This release adds Amazon ECR to Amazon ECR pull through cache rules support.
github.com/aws/aws-sdk-go-v2/service/ecs: v1.54.2
- Documentation: This is a documentation only update for Amazon ECS to address various tickets.
github.com/aws/aws-sdk-go-v2/service/inspector2: v1.36.0
- Feature: Adding componentArn to network reachability details
github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.7.0
- Feature: Add extra check during output checksum validation so the validation skip warning would not be logged if object is not fetched from s3
github.com/aws/aws-sdk-go-v2/service/medialive: v1.71.0
- Feature: Add an enum option DISABLED for Output Locking Mode under Global Configuration.

aws/smithy-go (github.com/aws/smithy-go)

`v1.23.2`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.23.2
- Bug Fix: Adjust the initial sizes of each middleware phase to avoid some unnecessary reallocation.
- Bug Fix: Avoid unnecessary allocation overhead from the metrics system when not in use.

`v1.23.1`

Compare Source

`v1.23.0`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.23.0
- Feature: Sort map keys in JSON Document types.

`v1.22.5`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.22.5
- Feature: Add HTTP interceptors.

`v1.22.4`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.22.4
- Bug Fix: Fix CBOR serd empty check for string and enum fields
- Bug Fix: Fix HTTP metrics data race.
- Bug Fix: Replace usages of deprecated ioutil package.

danieljoos/wincred (github.com/danieljoos/wincred)

`v1.2.3`

Compare Source

What's Changed

Test newer Go versions by @danieljoos in #63
gha: update go matrix; add go1.23, stable and oldstable by @thaJeztah in #77
Bump github.com/stretchr/testify from 1.9.0 to 1.11.1 by @dependabot[bot] in #74
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #71
fix unsafe uintptr usage to be GC-safe on go1.25 by @thaJeztah in #78
Bump actions/setup-go from 5 to 6 by @dependabot[bot] in #75
Bump codecov/codecov-action from 4 to 5 by @dependabot[bot] in #69

New Contributors

@thaJeztah made their first contribution in #77

Full Changelog: danieljoos/wincred@v1.2.2...v1.2.3

envoyproxy/protoc-gen-validate (github.com/envoyproxy/protoc-gen-validate)

`v1.3.3`

Compare Source

One more release attempt to get Python published on PyPI. 😄

What's Changed

Update Python 3.9 references to 3.10 by @stefanvanburen in bufbuild#1370

Full Changelog: bufbuild/protoc-gen-validate@v1.3.2...v1.3.3

`v1.3.2`

Compare Source

Fixing the v1.3.1 release, which was fixing the v1.3.0 release 😄.

What's Changed

Attempt to fix release by @stefanvanburen in bufbuild#1368

Full Changelog: bufbuild/protoc-gen-validate@v1.3.1...v1.3.2

`v1.3.1`

Compare Source

This is a release to get out Python support for 3.13, which failed to publish to PyPI in v1.3.0.

What's Changed

Bump the java group across 1 directory with 4 updates by @dependabot[bot] in bufbuild#1332
Bump actions/checkout from 5 to 6 in the github-actions group by @dependabot[bot] in bufbuild#1330
Fix Java deployment by @pkwarren in bufbuild#1335
Update settings.xml to use SONATYPE_USERNAME env var by @pkwarren in bufbuild#1336
Run deployment with release profile by @pkwarren in bufbuild#1337
Remove maven settings.xml file by @pkwarren in bufbuild#1338
Bump the java group in /java with 2 updates by @dependabot[bot] in bufbuild#1334
Bump the github-actions group with 2 updates by @dependabot[bot] in bufbuild#1341
Bump the java group in /java with 2 updates by @dependabot[bot] in bufbuild#1340
Bump the go-tests group in /tests with 2 updates by @dependabot[bot] in bufbuild#1339
Bump the java group across 1 directory with 2 updates by @dependabot[bot] in bufbuild#1343
Support for latest setuptools by @matejsp in bufbuild#1345
Replace deprecated java_proto_library from rules_java by @mmorel-35 in bufbuild#1349
Bump golang.org/x/net from 0.48.0 to 0.49.0 in /tests in the go-tests group by @dependabot[bot] in bufbuild#1350
Bump the java group across 1 directory with 4 updates by @dependabot[bot] in bufbuild#1351
Bump wheel from 0.45.1 to 0.46.2 by @dependabot[bot] in bufbuild#1352
Update go and deps by @rodaine in bufbuild#1355
Update python and deps by @rodaine in bufbuild#1354
Bump the java group in /java with 2 updates by @dependabot[bot] in bufbuild#1356
Bump the python-root group across 1 directory with 4 updates by @dependabot[bot] in bufbuild#1357

Full Changelog: bufbuild/protoc-gen-validate@v1.3.0...v1.3.1

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.10.1`

Compare Source

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)

`v1.10.0`

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

go-openapi/analysis (github.com/go-openapi/analysis)

`v0.25.0`

Compare Source

0.25.0 - 2026-03-17

Added diff package migrated from go-swagger

Full Changelog: go-openapi/analysis@v0.24.3...v0.25.0

70 commits in this release.

Implemented enhancements

feat(diff): introducing warning compatibility level by @schafle ...

Fixed bugs

fix(diff): fixed diff status on added required property by @fredbi ...
fix: 1) adds supports for Diff to report on changed extension values #2984 and 2) detects request param extension changes #2983 ...
fix(diff): swagger diff is not working for certain cases by @schafle ...
fix diff tests by @casualjim ...
fixes ##2831, circular dependency issue ...
Fixed panic for ref combinations by @wjase ...
fix(diff): fixed diff status on added required property by @fredbi ...
fix: 1) adds supports for Diff to report on changed extension values #2984 and 2) detects request param extension changes #2983 ...
fix: diff result has no URL, when there is an object type array field in the schema by @EarthSoar ...
fix(diff): swagger diff is not working for certain cases by @schafle ...
fix diff tests by @casualjim ...
fixes ##2831, circular dependency issue ...
Fixed panic for ref combinations by @wjase ...

Refactor

refactored diff CLI and associated tests by @fredbi ...
refactor: fix misspells by @nrnrk ...
refactored diff CLI and associated tests by @fredbi ...

Documentation

doc: update discord link by @fredbi in #176 ...
doc: updated contributors file by @bot-go-openapi[bot] in #175 ...

Code quality

chore: relinted the diff package by @fredbi ...
151 add a diff sub command (#1961) by @wjase ...
test: migrated from stretchr/testify to go-openapi/testify/v2 (#3285) by @fredbi ...
Relinted & refactored package cmd by @fredbi ...
chore: updated linting config & relinted (partially) by @fredbi ...
remov

red-hat-konflux · 2026-04-20T11:21:42Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

34 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.0` -> `1.26.0`
`go.uber.org/zap`	`v1.27.0` -> `v1.27.1`
`google.golang.org/grpc`	`v1.79.3` -> `v1.80.0`
`google.golang.org/protobuf`	`v1.36.10` -> `v1.36.11`
`cloud.google.com/go/pubsub`	`v1.49.0` -> `v1.50.2`
`github.com/redis/go-redis/v9`	`v9.9.0` -> `v9.10.0`
`github.com/tink-crypto/tink-go/v2`	`v2.4.0` -> `v2.6.0`
`cloud.google.com/go/monitoring`	`v1.24.2` -> `v1.28.0`
`github.com/Azure/azure-sdk-for-go/sdk/azcore`	`v1.18.0` -> `v1.21.1`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.30.0` -> `v1.31.0`
`github.com/aws/aws-sdk-go`	`v1.55.6` -> `v1.55.8`
`github.com/aws/aws-sdk-go-v2`	`v1.36.4` -> `v1.41.7`
`github.com/aws/aws-sdk-go-v2/config`	`v1.29.16` -> `v1.32.17`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.35` -> `v2.7.23`
`github.com/aws/aws-sdk-go-v2/service/kms`	`v1.41.0` -> `v1.51.0`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.80.0` -> `v1.101.0`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.25.4` -> `v1.30.17`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.30.2` -> `v1.35.21`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.33.21` -> `v1.42.1`
`github.com/jellydator/ttlcache/v3`	`v3.3.0` -> `v3.4.0`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.61.0` -> `v0.67.0`
`go.opentelemetry.io/otel`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/metric`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.40.0` -> `v1.43.0`
`go.opentelemetry.io/otel/trace`	`v1.40.0` -> `v1.43.0`
`go.yaml.in/yaml/v2`	`v2.4.2` -> `v2.4.3`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20251202230838-ff82c1b0f217` -> `v0.0.0-20260427160629-7cedc36a6bc4`
`k8s.io/klog/v2`	`v2.130.1` -> `v2.140.0`
`cloud.google.com/go`	`v0.121.2` -> `v0.123.0`
`cloud.google.com/go/storage`	`v1.55.0` -> `v1.62.0`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/godbus/dbus/v5`	`v5.1.0` -> `v5.2.2`
`github.com/googleapis/gax-go/v2`	`v2.14.2` -> `v2.22.0`
`github.com/spf13/afero`	`v1.14.0` -> `v1.15.0`

File name: hack/tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

5 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.6` -> `1.25.0`
`github.com/Masterminds/semver/v3`	`v3.2.1` -> `v3.4.0`
`github.com/Masterminds/sprig/v3`	`v3.2.3` -> `v3.3.0`
`github.com/go-viper/mapstructure/v2`	`v2.2.1` -> `v2.5.0`
`github.com/pelletier/go-toml/v2`	`v2.2.3` -> `v2.2.4`
`github.com/spf13/afero`	`v1.14.0` -> `v1.15.0`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Apr 20, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 28 times, most recently from b0e4f76 to b5b7047 Compare April 26, 2026 06:39

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 29 times, most recently from 51f6bdf to ec3baf6 Compare May 4, 2026 22:37

chore(deps): update go dependencies

fe84c3d

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update go dependencies#591

chore(deps): update go dependencies#591
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.3from
konflux/mintmaker/release-1.3/go-deps

red-hat-konflux Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.7.1: 1.7.1

What's Changed

v1.7.0: 1.7.0

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

v0.56.0: v1.32.0/v0.56.0

What's Changed

New Contributors

v0.55.0: v1.31.0/v0.55.0

What's Changed

v0.54.0: v1.30.0/v0.54.0

What's Changed

New Contributors

v0.53.0: v1.29.0/v0.53.0

What's Changed

New Contributors

v0.52.0: v1.28.0/v0.52.0

What's Changed

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

Changes and fixes

Changes and fixes

0.25.0 - 2026-03-17

Implemented enhancements

Fixed bugs

Refactor

Documentation

Code quality

Uh oh!

red-hat-konflux Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

File name: hack/tools/go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Apr 20, 2026 •

edited

Loading

`v1.7.1`: 1.7.1

`v1.7.0`: 1.7.0

`v0.56.0`: v1.32.0/v0.56.0

`v0.55.0`: v1.31.0/v0.55.0

`v0.54.0`: v1.30.0/v0.54.0

`v0.53.0`: v1.29.0/v0.53.0

`v0.52.0`: v1.28.0/v0.52.0

red-hat-konflux Bot commented Apr 20, 2026 •

edited

Loading