chore(deps): bump the all group across 1 directory with 19 updates #1503
+91,088
−126,353
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependabot
bot
added
dependencies
tekton-robot
added
the
size/XL
Contributor
|
/approve |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: anithapriyanatarajan The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
tekton-robot
added
the
approved
Bumps the all group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/compute/metadata](https://github.com/googleapis/google-cloud-go) | `0.8.0` | `0.9.0` | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.56.1` | `1.58.0` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.6` | `0.20.7` | | [github.com/in-toto/archivista](https://github.com/in-toto/archivista) | `0.10.0` | `0.11.1` | | [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.6.0` | `2.6.1` | | [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.4.2` | `1.4.3` | | [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.9.6-0.20250729224751-181c5d3339b3` | `1.10.3` | | [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) | `1.9.5` | `1.10.3` | | [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore) | `1.9.5` | `1.10.3` | | [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore) | `1.9.6-0.20250729224751-181c5d3339b3` | `1.10.3` | | [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore) | `1.9.5` | `1.10.3` | | [github.com/tektoncd/pipeline](https://github.com/tektoncd/pipeline) | `1.3.1` | `1.7.0` | | [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.27.1` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.45.0` | `0.46.0` | | google.golang.org/protobuf | `1.36.10` | `1.36.11` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.34.1` | `0.35.0` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.1` | `0.35.0` | | [k8s.io/code-generator](https://github.com/kubernetes/code-generator) | `0.33.4` | `0.35.0` | Updates `cloud.google.com/go/compute/metadata` from 0.8.0 to 0.9.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@v0.8.0...v0.9.0) Updates `cloud.google.com/go/storage` from 1.56.1 to 1.58.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@storage/v1.56.1...spanner/v1.58.0) Updates `github.com/google/go-containerregistry` from 0.20.6 to 0.20.7 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.20.6...v0.20.7) Updates `github.com/in-toto/archivista` from 0.10.0 to 0.11.1 - [Release notes](https://github.com/in-toto/archivista/releases) - [Commits](in-toto/archivista@v0.10.0...v0.11.1) Updates `github.com/sigstore/cosign/v2` from 2.6.0 to 2.6.1 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v2.6.0...v2.6.1) Updates `github.com/sigstore/rekor` from 1.4.2 to 1.4.3 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.4.2...v1.4.3) Updates `github.com/sigstore/sigstore` from 1.9.6-0.20250729224751-181c5d3339b3 to 1.10.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](https://github.com/sigstore/sigstore/commits/v1.10.3) Updates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.9.5 to 1.10.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.9.5...v1.10.3) Updates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.9.5 to 1.10.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.9.5...v1.10.3) Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.9.6-0.20250729224751-181c5d3339b3 to 1.10.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](https://github.com/sigstore/sigstore/commits/v1.10.3) Updates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.9.5 to 1.10.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.9.5...v1.10.3) Updates `github.com/tektoncd/pipeline` from 1.3.1 to 1.7.0 - [Release notes](https://github.com/tektoncd/pipeline/releases) - [Changelog](https://github.com/tektoncd/pipeline/blob/main/releases.md) - [Commits](tektoncd/pipeline@v1.3.1...v1.7.0) Updates `go.uber.org/zap` from 1.27.0 to 1.27.1 - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](uber-go/zap@v1.27.0...v1.27.1) Updates `golang.org/x/crypto` from 0.45.0 to 0.46.0 - [Commits](golang/crypto@v0.45.0...v0.46.0) Updates `google.golang.org/grpc` from 1.75.0 to 1.76.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.0...v1.76.0) Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11 Updates `k8s.io/apimachinery` from 0.34.1 to 0.35.0 - [Commits](kubernetes/apimachinery@v0.34.1...v0.35.0) Updates `k8s.io/client-go` from 0.34.1 to 0.35.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.34.1...v0.35.0) Updates `k8s.io/code-generator` from 0.33.4 to 0.35.0 - [Commits](kubernetes/code-generator@v0.33.4...v0.35.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/compute/metadata dependency-version: 0.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: cloud.google.com/go/storage dependency-version: 1.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/google/go-containerregistry dependency-version: 0.20.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/in-toto/archivista dependency-version: 0.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/cosign/v2 dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/rekor dependency-version: 1.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/sigstore dependency-version: 1.10.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws dependency-version: 1.10.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure dependency-version: 1.10.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp dependency-version: 1.10.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault dependency-version: 1.10.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/tektoncd/pipeline dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: go.uber.org/zap dependency-version: 1.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: golang.org/x/crypto dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: google.golang.org/grpc dependency-version: 1.76.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/apimachinery dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/client-go dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/code-generator dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/go_modules/all-55a104dda0
branch
from
8fd48d2 to
4f3ad6e
Compare
|
New changes are detected. LGTM label has been removed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the all group with 18 updates in the / directory:
0.8.00.9.01.56.11.58.00.20.60.20.70.10.00.11.12.6.02.6.11.4.21.4.31.9.6-0.20250729224751-181c5d3339b31.10.31.9.51.10.31.9.51.10.31.9.6-0.20250729224751-181c5d3339b31.10.31.9.51.10.31.3.11.7.01.27.01.27.10.45.00.46.01.36.101.36.110.34.10.35.00.34.10.35.00.33.40.35.0Updates
cloud.google.com/go/compute/metadatafrom 0.8.0 to 0.9.0Changelog
Sourced from cloud.google.com/go/compute/metadata's changelog.
... (truncated)
Commits
d4f8670BREAKING: all: regenerate toolkit client23179f2readme: document Trace and Error Reporting clientsc2e00bbtrace: switch to grpc-trace-bin for gRPC calls1de0ed4rpcreplay: Fprintf functions8878988bigtable/bttest: Return proper error code when entity already existse432073bigtable: Don't retry on INTERNAL errors.84bf648rpcreplay: responses to code review comments from previous CLe687f27rpcreplay: replay of unary RPCs9da216dspanner: more integration testsa089e75logging: document that Close flushes the loggersUpdates
cloud.google.com/go/storagefrom 1.56.1 to 1.58.0Release notes
Sourced from cloud.google.com/go/storage's releases.
Commits
e68777cchore(main): release spanner 1.58.0 (#9423)6deb969docs(pubsub): check for nil responses for receive examples (#9516)e54989echore: remove old samples that no longer compile (#9510)1cf28f6docs(run): clarify some defaults and required or optional values (#9505)dbd8f28chore(main): release firestore 1.15.0 (#8918)d320daadoc(datastore): Add document around FitlerField (#7536)07ece0fchore: release main (#9484)b06f2b9chore(all): update deps (#9467)e5d0c2fdoc(storage): update gRPC docs (#9488)ae1f547feat(compute): Update Compute Engine API to revision 20240220 (#886) (#9485)Updates
github.com/google/go-containerregistryfrom 0.20.6 to 0.20.7Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
e075f20go mod tidyon dependabot update (#2171)45aacf4Bump the actions group across 1 directory with 3 updates (#2170)073b936Update dependencies and deprecate DockerVersion field (#2164)390dacdBump golang.org/x/crypto from 0.38.0 to 0.45.0 in /cmd/krane (#2163)ca44d47Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /pkg/authn/k8schain (#2162)999cc1fBump github.com/docker/docker (#2161)d1809c8Build artifacts for riscv64 (#2159)7471efdBump the auxiliary-deps group across 3 directories with 4 updates (#2156)2bb5bb0Bump the actions group with 5 updates (#2155)16371c1Remove manual vendor setting for dependabot (#2151)Updates
github.com/in-toto/archivistafrom 0.10.0 to 0.11.1Release notes
Sourced from github.com/in-toto/archivista's releases.
... (truncated)
Commits
1d6959eAllow DB connections to refresh credentials (#646)03fc694chore: bump github.com/aws/aws-sdk-go-v2/feature/rds/auth (#654)6aa100achore: bump github.com/aws/aws-sdk-go-v2/config from 1.31.12 to 1.31.15 (#653)03949b3chore: bump the github-actions group across 1 directory with 2 updates (#652)ee5b523chore: bump golang from20ee0b6toaee43c3(#644)a546ecdchore: bump github.com/in-toto/go-witness from 0.8.6 to 0.9.1 (#645)7f5a1eechore: bump golang from 1.25.2-alpine to 1.25.3-alpine (#643)7dacb58fix the server.go path in Makefile (#640)03b16e3chore: bump golang from182059dto06cdd34(#641)ca644e7chore: bump the github-actions group with 2 updates (#642)Updates
github.com/sigstore/cosign/v2from 2.6.0 to 2.6.1Release notes
Sourced from github.com/sigstore/cosign/v2's releases.
Changelog
Sourced from github.com/sigstore/cosign/v2's changelog.
Commits
634fabeBump sigstore-go, move conformance back to tagged releasec5545edPartially populate the output of cosign verify when working with new bundles ...e191024bump go builder to use 1.25.1 and cosign (#4417)Updates
github.com/sigstore/rekorfrom 1.4.2 to 1.4.3Release notes
Sourced from github.com/sigstore/rekor's releases.
Changelog
Sourced from github.com/sigstore/rekor's changelog.
Commits
cb5b1d5Changelog for v1.4.3, fix goreleaser for Cosign v3 (#2682)b34d99dfix remaining zizmor fixes (#2617)e032725use interruptable context to elegantly handle signals in rekor-cli (#2681)2d4e985(docs): guard unsafe int/uint conversions flagged by gosec (#2679)fdde6ecbuild(deps): Bump sigstore/scaffolding/trillian_log_signer (#2677)5ecf774build(deps): Bump sigstore/scaffolding/trillian_log_server (#2678)381f351build(deps): Bump go.step.sm/crypto from 0.73.0 to 0.74.0 (#2674)e7bf948build(deps): Bump golang.org/x/mod from 0.28.0 to 0.29.0 (#2665)e8b7b7fbuild(deps): Bump github/codeql-action in the all group (#2663)9589399build(deps): Bump the all group with 7 updates (#2673)Updates
github.com/sigstore/sigstorefrom 1.9.6-0.20250729224751-181c5d3339b3 to 1.10.3Release notes
Sourced from github.com/sigstore/sigstore's releases.
... (truncated)
Commits
Updates
github.com/sigstore/sigstore/pkg/signature/kms/awsfrom 1.9.5 to 1.10.3Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/aws's releases.
... (truncated)
Commits
72f0ed7build(deps): Bump github.com/aws/aws-sdk-go-v2/config (#2230)b257168build(deps): Bump github.com/aws/aws-sdk-go-v2 in /pkg/signature/kms/aws (#2226)84f57b8build(deps): Bump github.com/sigstore/sigstore (#2221)bdc1a86build(deps): Bump actions/checkout from 5.0.1 to 6.0.0 (#2220)11dfe81build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/aws (#2236)0214948Add back ValidatePubKey as a deprecated, minimal function (#2235)cc26bb8build(deps): Bump localstack/localstack in /test/e2e in the all group (#2227)63ab8d8build(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms (#2229)9e629f0build(deps): Bump the all group with 2 updates (#2219)234b99dbuild(deps): Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 (#2223)Updates
github.com/sigstore/sigstore/pkg/signature/kms/azurefrom 1.9.5 to 1.10.3Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/azure's releases.
... (truncated)
Commits
72f0ed7build(deps): Bump github.com/aws/aws-sdk-go-v2/config (#2230)b257168build(deps): Bump github.com/aws/aws-sdk-go-v2 in /pkg/signature/kms/aws (#2226)84f57b8build(deps): Bump github.com/sigstore/sigstore (#2221)bdc1a86build(deps): Bump actions/checkout from 5.0.1 to 6.0.0 (#2220)11dfe81build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/aws (#2236)0214948Add back ValidatePubKey as a deprecated, minimal function (#2235)cc26bb8build(deps): Bump localstack/localstack in /test/e2e in the all group (#2227)63ab8d8build(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms (#2229)9e629f0build(deps): Bump the all group with 2 updates (#2219)234b99dbuild(deps): Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 (#2223)Updates
github.com/sigstore/sigstore/pkg/signature/kms/gcpfrom 1.9.6-0.20250729224751-181c5d3339b3 to 1.10.3Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/gcp's releases.
... (truncated)
Commits
Updates
github.com/sigstore/sigstore/pkg/signature/kms/hashivaultfrom 1.9.5 to 1.10.3Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/hashivault's releases.