Skip to content

chore(deps): bump the all group across 1 directory with 2 updates#1518

Merged
tekton-robot merged 1 commit intomainfrom
dependabot/go_modules/all-ab14522e5c
Jan 18, 2026
Merged

chore(deps): bump the all group across 1 directory with 2 updates#1518
tekton-robot merged 1 commit intomainfrom
dependabot/go_modules/all-ab14522e5c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jan 15, 2026

Bumps the all group with 2 updates in the / directory: cloud.google.com/go/storage and github.com/in-toto/go-witness.

Updates cloud.google.com/go/storage from 1.59.0 to 1.59.1

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage 1.59.1

1.59.1 (2026-01-14)

Bug Fixes

Commits
  • 5cd8007 chore: librarian release pull request: 20260114T061057Z (#13597)
  • 585cd82 feat(firestore): [PQ] add pipeline queries
  • 6752a49 fix: remove mandatory attrs response in MRD (#13585)
  • 1347004 chore: skip failing TestIntegration_WriterAppendEdgeCases (#13586)
  • e7723a0 test(storage): add test for MRD with read handle (#13591)
  • 7e730f1 test(datastore): fix flaky tests (#13587)
  • d23326b chore(spanner): add gorm data type names for PG types (#13584)
  • bc92500 fix: don't update global object's readhandle in MRD (#13575)
  • 712f562 fix: close attrsReady channel when metadata is missing (#13574)
  • 2b52937 chore: tidy generated snippets (#13571)
  • Additional commits viewable in compare view

Updates github.com/in-toto/go-witness from 0.9.1 to 0.9.2

Release notes

Sourced from github.com/in-toto/go-witness's releases.

v0.9.2

What's Changed

Full Changelog: in-toto/go-witness@v0.9.1...v0.9.2

Commits
  • 1b6dcd7 chore: bump github.com/aws/aws-sdk-go-v2/config from 1.31.20 to 1.31.21 (#638)
  • e03e418 chore: bump github.com/aws/aws-sdk-go-v2/service/kms from 1.48.2 to 1.48.3 (#...
  • b27326c chore: bump github/codeql-action from 4.31.9 to 4.31.10 (#635)
  • d999c86 chore: bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.13 to 1.1...
  • df5f3b3 chore: bump github.com/sigstore/sigstore from 1.10.0 to 1.10.3 (#633)
  • 220bcf5 fix: handle cosign encrypted keys with empty passphrase (#632)
  • ea9777b chore: bump github.com/sigstore/fulcio from 1.6.6 to 1.8.3 in the go_modules ...
  • ea8e8b7 chore: bump github.com/spdx/tools-golang from 0.5.5 to 0.5.6 (#630)
  • a21b507 chore: bump github/codeql-action from 4.31.8 to 4.31.9 (#626)
  • 19c07c1 feat: support Sigstore encrypted PEM keys (#614)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 2 updates in the / directory: [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) and [github.com/in-toto/go-witness](https://github.com/in-toto/go-witness).


Updates `cloud.google.com/go/storage` from 1.59.0 to 1.59.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.59.0...storage/v1.59.1)

Updates `github.com/in-toto/go-witness` from 0.9.1 to 0.9.2
- [Release notes](https://github.com/in-toto/go-witness/releases)
- [Commits](in-toto/go-witness@v0.9.1...v0.9.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.59.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/in-toto/go-witness
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Used by dependabot - identifies all PRs created by dependabot kind/misc Categorizes issue or PR as a miscellaneuous one. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesnt merit a release note. labels Jan 15, 2026
@tekton-robot tekton-robot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Jan 15, 2026
@jkhelil
Copy link
Copy Markdown
Member

jkhelil commented Jan 18, 2026

/approve

@jkhelil
Copy link
Copy Markdown
Member

jkhelil commented Jan 18, 2026

/lgtm

@tekton-robot
Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: jkhelil

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jan 18, 2026
@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Jan 18, 2026
@tekton-robot tekton-robot merged commit a9205f6 into main Jan 18, 2026
17 checks passed
@dependabot dependabot Bot deleted the dependabot/go_modules/all-ab14522e5c branch January 18, 2026 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dependencies Used by dependabot - identifies all PRs created by dependabot kind/misc Categorizes issue or PR as a miscellaneuous one. lgtm Indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesnt merit a release note. size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants