build(deps): bump the all group across 1 directory with 28 updates #219
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the all group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | cuelang.org/go | `0.11.1` | `0.13.0` | | [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.9.0` | `0.9.2` | | [github.com/docker/docker](https://github.com/docker/docker) | `27.5.0+incompatible` | `28.2.2+incompatible` | | [github.com/enterprise-contract/enterprise-contract-controller/api](https://github.com/enterprise-contract/enterprise-contract-controller) | `0.1.79` | `0.1.106` | | [github.com/evanphx/json-patch](https://github.com/evanphx/json-patch) | `5.9.0+incompatible` | `5.9.11+incompatible` | | [github.com/gkampitakis/go-snaps](https://github.com/gkampitakis/go-snaps) | `0.5.7` | `0.5.12` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.2` | `5.16.0` | | [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.2` | `1.4.3` | | [github.com/open-policy-agent/conftest](https://github.com/open-policy-agent/conftest) | `0.55.0` | `0.61.0` | | [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.4.1` | `2.5.0` | | [github.com/tektoncd/pipeline](https://github.com/tektoncd/pipeline) | `0.63.0` | `1.0.0` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.34.1-0.20241204123437-72be13940122` | `0.37.0` | | [github.com/testcontainers/testcontainers-go/modules/registry](https://github.com/testcontainers/testcontainers-go) | `0.34.0` | `0.37.0` | | [oras.land/oras-go/v2](https://github.com/oras-project/oras-go) | `2.5.0` | `2.6.0` | Updates `cuelang.org/go` from 0.11.1 to 0.13.0 Updates `github.com/CycloneDX/cyclonedx-go` from 0.9.0 to 0.9.2 - [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml) - [Commits](CycloneDX/cyclonedx-go@v0.9.0...v0.9.2) Updates `github.com/docker/docker` from 27.5.0+incompatible to 28.2.2+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v27.5.0...v28.2.2) Updates `github.com/enterprise-contract/enterprise-contract-controller/api` from 0.1.79 to 0.1.106 - [Release notes](https://github.com/enterprise-contract/enterprise-contract-controller/releases) - [Commits](enterprise-contract/enterprise-contract-controller@api/v0.1.79...api/v0.1.106) Updates `github.com/evanphx/json-patch` from 5.9.0+incompatible to 5.9.11+incompatible - [Release notes](https://github.com/evanphx/json-patch/releases) - [Commits](evanphx/json-patch@v5.9.0...v5.9.11) Updates `github.com/gkampitakis/go-snaps` from 0.5.7 to 0.5.12 - [Release notes](https://github.com/gkampitakis/go-snaps/releases) - [Commits](gkampitakis/go-snaps@v0.5.7...v0.5.12) Updates `github.com/go-git/go-git/v5` from 5.13.2 to 5.16.0 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.13.2...v5.16.0) Updates `github.com/go-logr/logr` from 1.4.2 to 1.4.3 - [Release notes](https://github.com/go-logr/logr/releases) - [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md) - [Commits](go-logr/logr@v1.4.2...v1.4.3) Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.6.0...v0.7.0) Updates `github.com/open-policy-agent/conftest` from 0.55.0 to 0.61.0 - [Release notes](https://github.com/open-policy-agent/conftest/releases) - [Changelog](https://github.com/open-policy-agent/conftest/blob/master/.goreleaser.yml) - [Commits](open-policy-agent/conftest@v0.55.0...v0.61.0) Updates `github.com/open-policy-agent/opa` from 0.70.0 to 1.5.0 - [Release notes](https://github.com/open-policy-agent/opa/releases) - [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md) - [Commits](open-policy-agent/opa@v0.70.0...v1.5.0) Updates `github.com/sigstore/cosign/v2` from 2.4.1 to 2.5.0 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v2.4.1...v2.5.0) Updates `github.com/sigstore/sigstore` from 1.8.9 to 1.9.1 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.9...v1.9.1) Updates `github.com/spf13/afero` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/spf13/afero/releases) - [Commits](spf13/afero@v1.11.0...v1.12.0) Updates `github.com/spf13/cobra` from 1.8.1 to 1.9.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.8.1...v1.9.1) Updates `github.com/spf13/pflag` from 1.0.5 to 1.0.6 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.5...v1.0.6) Updates `github.com/spf13/viper` from 1.19.0 to 1.20.1 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.19.0...v1.20.1) Updates `github.com/tektoncd/pipeline` from 0.63.0 to 1.0.0 - [Release notes](https://github.com/tektoncd/pipeline/releases) - [Changelog](https://github.com/tektoncd/pipeline/blob/main/releases.md) - [Commits](tektoncd/pipeline@v0.63.0...v1.0.0) Updates `github.com/testcontainers/testcontainers-go` from 0.34.1-0.20241204123437-72be13940122 to 0.37.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](https://github.com/testcontainers/testcontainers-go/commits/v0.37.0) Updates `github.com/testcontainers/testcontainers-go/modules/registry` from 0.34.0 to 0.37.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.34.0...v0.37.0) Updates `golang.org/x/exp` from 0.0.0-20240909161429-701f63a606c0 to 0.0.0-20250408133849-7e4ce0ab07d0 - [Commits](https://github.com/golang/exp/commits) Updates `golang.org/x/net` from 0.34.0 to 0.39.0 - [Commits](golang/net@v0.34.0...v0.39.0) Updates `golang.org/x/sync` from 0.10.0 to 0.14.0 - [Commits](golang/sync@v0.10.0...v0.14.0) Updates `k8s.io/apiextensions-apiserver` from 0.31.0 to 0.32.1 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.31.0...v0.32.1) Updates `k8s.io/apimachinery` from 0.31.0 to 0.32.4 - [Commits](kubernetes/apimachinery@v0.31.0...v0.32.4) Updates `k8s.io/client-go` from 0.31.0 to 0.32.3 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.31.0...v0.32.3) Updates `k8s.io/kube-openapi` from 0.0.0-20240903163716-9e1beecbcb38 to 0.0.0-20241212222426-2c72e554b1e7 - [Commits](https://github.com/kubernetes/kube-openapi/commits) Updates `oras.land/oras-go/v2` from 2.5.0 to 2.6.0 - [Release notes](https://github.com/oras-project/oras-go/releases) - [Commits](oras-project/oras-go@v2.5.0...v2.6.0) --- updated-dependencies: - dependency-name: cuelang.org/go dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/CycloneDX/cyclonedx-go dependency-version: 0.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/docker/docker dependency-version: 28.2.2+incompatible dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: github.com/enterprise-contract/enterprise-contract-controller/api dependency-version: 0.1.106 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/evanphx/json-patch dependency-version: 5.9.11+incompatible dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/gkampitakis/go-snaps dependency-version: 0.5.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/go-logr/logr dependency-version: 1.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/google/go-cmp dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/open-policy-agent/conftest dependency-version: 0.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/open-policy-agent/opa dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: github.com/sigstore/cosign/v2 dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/sigstore dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/spf13/afero dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/spf13/cobra dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/spf13/pflag dependency-version: 1.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/spf13/viper dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/tektoncd/pipeline dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: github.com/testcontainers/testcontainers-go dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/testcontainers/testcontainers-go/modules/registry dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/exp dependency-version: 0.0.0-20250408133849-7e4ce0ab07d0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: golang.org/x/net dependency-version: 0.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/sync dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.32.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/apimachinery dependency-version: 0.32.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/client-go dependency-version: 0.32.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/kube-openapi dependency-version: 0.0.0-20241212222426-2c72e554b1e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: oras.land/oras-go/v2 dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the all group with 14 updates in the / directory:
0.11.10.13.00.9.00.9.227.5.0+incompatible28.2.2+incompatible0.1.790.1.1065.9.0+incompatible5.9.11+incompatible0.5.70.5.125.13.25.16.01.4.21.4.30.55.00.61.02.4.12.5.00.63.01.0.00.34.1-0.20241204123437-72be139401220.37.00.34.00.37.02.5.02.6.0Updates
cuelang.org/gofrom 0.11.1 to 0.13.0Updates
github.com/CycloneDX/cyclonedx-gofrom 0.9.0 to 0.9.2Release notes
Sourced from github.com/CycloneDX/cyclonedx-go's releases.
Commits
cba06ffMerge pull request #205 from CycloneDX/dependabot/go_modules/github.com/termi...5c81749Merge pull request #211 from CycloneDX/dependabot/github_actions/actions/setu...753526cMerge pull request #204 from DmitriyLewen/fix/componentEvidence-as-array4d3aff9UPDATE_SNAPSHOTS=true make testd68a199fix: useidentityas array invalid-evidence.json24e9503fix: tests238cbeabuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0a7f7415Merge branch 'master' of github.com:DmitriyLewen/cyclonedx-go into fix/compon...05f8930build(deps): bump github.com/terminalstatic/go-xsd-validate464d426Merge pull request #202 from CycloneDX/dependabot/github_actions/actions/chec...Updates
github.com/docker/dockerfrom 27.5.0+incompatible to 28.2.2+incompatibleRelease notes
Sourced from github.com/docker/docker's releases.
... (truncated)
Commits
45873beMerge pull request #50105 from jsternberg/revert-build-dangling7994426Revert "containerd: images overridden by a build are kept dangling"f144264Merge pull request #50090 from corhere/libn/overlay-netip768cfaeMerge pull request #50050 from robmry/nftables_internal_dnsd3289ddAdd nftables NAT rules for internal DNS resolver7a0bf74Merge pull request #50038 from ctalledo/fix-for-50037b43afbfMerge pull request #50098 from robmry/remove_docker-user_return_rulec299ba3Update worker.Platforms() in builder-next worker.0e2cc22Merge pull request #50049 from robmry/nftables_env_var_enablee37efd4Merge pull request #50068 from mmorel-35/github.com/containerd/errdefsUpdates
github.com/enterprise-contract/enterprise-contract-controller/apifrom 0.1.79 to 0.1.106Release notes
Sourced from github.com/enterprise-contract/enterprise-contract-controller/api's releases.
... (truncated)
Commits
9237da9Update ossf/scorecard-action action to v2.4.2 (#531)ccbfa71Merge pull request #530 from robnester-rh/EC-1113ac443f8chore: update references toec-policiesrepo718a621Merge pull request #525 from Acepresso/pre-merge-make-all-EC-1262ca0759cCI: runmake allbefore checking for uncommitted changes8935728Update github/codeql-action action to v3.28.18 (#527)356b3b3Update codecov/codecov-action action to v5.4.3 (#526)54a830dMerge pull request #524 from Acepresso/add-reference-field-EC-1246f35c607Add "reference" field to volatileConfig34d635eUpdate GitHub Actions updates (#523)Updates
github.com/evanphx/json-patchfrom 5.9.0+incompatible to 5.9.11+incompatibleRelease notes
Sourced from github.com/evanphx/json-patch's releases.
Commits
84a4bb1Merge pull request #209 from skitt/export-errs-v57a7a88aExport errBadJSONDoc and errBadJSONPatch errorsbd18525Upgrade go-flags42f26cbFix spacing0a3482bMerge pull request #206 from koba1t/remove_unmaintained_error_pkg106306dremove unmaintained errors pkge7cfbbbMerge pull request #203 from skitt/drop-gopkgin-v561e1ad7Drop the reference to gopkg.in for v5Updates
github.com/gkampitakis/go-snapsfrom 0.5.7 to 0.5.12Release notes
Sourced from github.com/gkampitakis/go-snaps's releases.
Commits
66ada09feat: add UPDATE_SNAPS=always for updating and creating snaps on CI setup (#126)1bd0d83chore: add FUNDING detailse004bc1feat: add json format config (#121)8740883fix: handle builds with trimpath enabled (#120)00f3055fix: snaps.Update should apply and on snapshot create (#119)560fde0feat: implement matchStandaloneJSON (#113)f81115dfeat: implement matchYAML (#114)Updates
github.com/go-git/go-git/v5from 5.13.2 to 5.16.0Release notes
Sourced from github.com/go-git/go-git/v5's releases.
Commits
6d4a5c6Merge pull request #1515 from pjbgf/regrebeedd6bplumbing: transport, Reintroduce SetHostKeyCallback. Fix #1514763ce2eMerge pull request #1510 from hiddeco/mtls-support5320e1bplumbing: surface transport configuration errors9bbc93bplumbing: fix unintended pointer mutation in testf3783f4plumbing: support mTLS for HTTPS protocol6f444d3Merge pull request #1505 from pjbgf/bump9996069v5: Bump dependencies768fda7Merge pull request #1482 from Javier-varez/add-cert-auth-support-v5.xba9d693plumbing: support setting custom host key algorithms along with host key call...Updates
github.com/go-logr/logrfrom 1.4.2 to 1.4.3Release notes
Sourced from github.com/go-logr/logr's releases.
Commits
38a1c47build(deps): bump github/codeql-action from 3.28.17 to 3.28.18f08beddbuild(deps): bump actions/setup-go from 5.4.0 to 5.5.06295e99build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0028840dbuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17511e5faMerge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...d806463build(deps): bump github/codeql-action from 3.28.13 to 3.28.15158c311Merge pull request #366 from thockin/masterc79ddb3Update to support golangci-lint v220a64babuild(deps): bump github/codeql-action from 3.28.12 to 3.28.130385e14Add comments around slog exceptionsUpdates
github.com/google/go-cmpfrom 0.6.0 to 0.7.0Release notes
Sourced from github.com/google/go-cmp's releases.
Commits
9b12f36Detect proto.Message types when failing to export a field (#370)4dd3d63fix: type 'aribica' => 'arabica' (#368)391980cSupport compare functions with SortSlices and SortMaps (#367)Updates
github.com/open-policy-agent/conftestfrom 0.55.0 to 0.61.0Release notes
Sourced from github.com/open-policy-agent/conftest's releases.
... (truncated)
Commits
1e43dc0deps: update jsonc import path (#1133)bcba55ebuild(deps): bump github.com/open-policy-agent/opa from 1.4.2 to 1.5.0 (#1134)f09428fbuild(deps): bump golang from 1.24.2-alpine to 1.24.3-alpine (#1124)f82f556fix: Use v1 as rego version for fmt, too (#1128)a826a0bbuild(deps): bump cuelang.org/go from 0.12.1 to 0.13.0 (#1131)d44b480build(deps): bump github.com/moby/buildkit from 0.21.1 to 0.22.0 (#1129)ed0ff0afix(test): clean updated policies after test run (#1109)989734fdocs: update examples to v1 syntax (#1126)1441245docs: Update README.md to make it compatible with v1 syntax (#1122)9e56924build(deps): bump github.com/google/go-jsonnet from 0.20.0 to 0.21.0 (#1120)Updates
github.com/open-policy-agent/opafrom 0.70.0 to 1.5.0Release notes
Sourced from github.com/open-policy-agent/opa's releases.
... (truncated)
Changelog
Sourced from github.com/open-policy-agent/opa's changelog.