Skip to content

build(deps): Bump github.com/regclient/regclient from 0.11.3 to 0.11.4#2449

Merged
rajathagasthya merged 1 commit into
mainfrom
dependabot/go_modules/main/github.com/regclient/regclient-0.11.4
May 13, 2026
Merged

build(deps): Bump github.com/regclient/regclient from 0.11.3 to 0.11.4#2449
rajathagasthya merged 1 commit into
mainfrom
dependabot/go_modules/main/github.com/regclient/regclient-0.11.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps github.com/regclient/regclient from 0.11.3 to 0.11.4.

Release notes

Sourced from github.com/regclient/regclient's releases.

v0.11.4

Release v0.11.4

Security:

  • Validate server URL in token auth. (PR 1075)
  • Upgrading Go fixes CVE-2026-33814 and CVE-2026-39836, other vulnerabilities fixed in 1.26.3 were not called by this project. (PR 1084)

Features:

  • Support scanning OCI Layout for referrers. (PR 1074)
  • Add created timestamp in OCI Layout entries. (PR 1081)
  • tag.ls now accepts the same pagination parameters as repo.ls. (PR 1086)

Fixes:

  • Push tags for minor and major releases on Docker Hub. (PR 1087)

Contributors:

Changelog

Sourced from github.com/regclient/regclient's changelog.

Release v0.11.4

Security:

  • Validate server URL in token auth. (PR 1075)
  • Upgrading Go fixes CVE-2026-33814 and CVE-2026-39836, other vulnerabilities fixed in 1.26.3 were not called by this project. (PR 1084)

Features:

  • Support scanning OCI Layout for referrers. (PR 1074)
  • Add created timestamp in OCI Layout entries. (PR 1081)
  • tag.ls now accepts the same pagination parameters as repo.ls. (PR 1086)

Fixes:

  • Push tags for minor and major releases on Docker Hub. (PR 1087)

Contributors:

Commits
  • 8b080b4 Release v0.11.4
  • 520f2d9 Merge for release v0.11.4
  • b413945 Merge pull request #1087 from sersoft-gmbh/bugfix/docker-hub-release
  • 1da9ca0 Merge pull request #1086 from sersoft-gmbh/feature/paginated-tags
  • 550bcd9 Fix docker workflow missing minor/major tags on docker hub push
  • d316d85 Allow pagination parameters on tag listing
  • f9d9912 Merge pull request #1084 from sudo-bmitch/pr-update-20260510
  • 623af26 Version bump
  • 92ea103 Merge pull request #1082 from sudo-bmitch/pr-update-20260503
  • 177fb14 Version bump
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/regclient/regclient](https://github.com/regclient/regclient) from 0.11.3 to 0.11.4.
- [Release notes](https://github.com/regclient/regclient/releases)
- [Changelog](https://github.com/regclient/regclient/blob/v0.11.4/release.md)
- [Commits](regclient/regclient@v0.11.3...v0.11.4)

---
updated-dependencies:
- dependency-name: github.com/regclient/regclient
  dependency-version: 0.11.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Issue/PR Pull about a dependency file label May 12, 2026
@copy-pr-bot
Copy link
Copy Markdown

copy-pr-bot Bot commented May 12, 2026

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@rajathagasthya
Copy link
Copy Markdown
Contributor

/ok-to-test d90f93f

@coveralls
Copy link
Copy Markdown

Coverage Status

coverage: 29.286%. remained the same — dependabot/go_modules/main/github.com/regclient/regclient-0.11.4 into main

@tariq1890
Copy link
Copy Markdown
Contributor

Let's also bump regctl versions in the GitHub actions and Gitlab ci yaml files

@rajathagasthya
Copy link
Copy Markdown
Contributor

regctl version in CI files has been bumped in #2444

@rajathagasthya
Copy link
Copy Markdown
Contributor

/cherry-pick release-26.3

@rajathagasthya rajathagasthya merged commit cf78123 into main May 13, 2026
36 of 37 checks passed
@rajathagasthya rajathagasthya deleted the dependabot/go_modules/main/github.com/regclient/regclient-0.11.4 branch May 13, 2026 02:20
@github-actions
Copy link
Copy Markdown
Contributor

🤖 Backport PR created for release-26.3: #2454 ⚠️ (has conflicts)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cherry-pick/release-26.3 dependencies Issue/PR Pull about a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants