Skip to content

chore(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7#2964

Merged
tekton-robot merged 1 commit into
release-v0.45.xfrom
dependabot/go_modules/release-v0.45.x/github.com/google/go-containerregistry-0.21.7
Jul 8, 2026
Merged

chore(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7#2964
tekton-robot merged 1 commit into
release-v0.45.xfrom
dependabot/go_modules/release-v0.45.x/github.com/google/go-containerregistry-0.21.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/google/go-containerregistry from 0.21.6 to 0.21.7.

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.7

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.6...v0.21.7

Commits
  • c68d899 Bump go version to 1.26.4 (#2350)
  • da61d86 transport: do not re-attach bearer token after cross-host redirect (#2349)
  • 09fe1e5 fix(tarball): normalize paths when matching files (#2334)
  • 5baa399 build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)
  • 97a8a17 fix(transport): apply refreshed bearer token after cross-host redirect (#2337)
  • e963497 internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)
  • 02649ea fix: prevent SSRF in google.List() pagination (#2332)
  • 7204b40 build(deps): bump the actions group across 1 directory with 2 updates (#2344)
  • 4cfaa93 build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)
  • 6849394 pkg/registry: export RedirectError (#2177)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Used by dependabot - identifies all PRs created by dependabot kind/misc Categorizes issue or PR as a miscellaneuous one. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesnt merit a release note. labels Jul 3, 2026
@tekton-robot tekton-robot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Jul 3, 2026
vdemeester
vdemeester previously approved these changes Jul 3, 2026

@vdemeester vdemeester left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@vdemeester

Copy link
Copy Markdown
Member

/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Jul 3, 2026
@tekton-robot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: vdemeester

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 3, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/release-v0.45.x/github.com/google/go-containerregistry-0.21.7 branch from dc9a614 to 3432141 Compare July 3, 2026 18:41
@tekton-robot tekton-robot removed the lgtm Indicates that a PR is ready to be merged. label Jul 3, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/release-v0.45.x/github.com/google/go-containerregistry-0.21.7 branch from 3432141 to b8e4be5 Compare July 3, 2026 18:58
@dependabot dependabot Bot changed the title Bump github.com/google/go-containerregistry from 0.21.5 to 0.21.7 chore(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.7 Jul 6, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/release-v0.45.x/github.com/google/go-containerregistry-0.21.7 branch from b8e4be5 to 95be4a8 Compare July 6, 2026 10:32
@dependabot dependabot Bot changed the title chore(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.7 chore(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7 Jul 8, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/release-v0.45.x/github.com/google/go-containerregistry-0.21.7 branch from 95be4a8 to c069535 Compare July 8, 2026 16:09
Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.6 to 0.21.7.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.6...v0.21.7)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/release-v0.45.x/github.com/google/go-containerregistry-0.21.7 branch from c069535 to b1090c3 Compare July 8, 2026 17:19
@tekton-robot tekton-robot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. and removed size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. labels Jul 8, 2026
@divyansh42

Copy link
Copy Markdown
Member

/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Jul 8, 2026
@tekton-robot tekton-robot merged commit 780f9fd into release-v0.45.x Jul 8, 2026
10 checks passed
@dependabot dependabot Bot deleted the dependabot/go_modules/release-v0.45.x/github.com/google/go-containerregistry-0.21.7 branch July 8, 2026 17:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dependencies Used by dependabot - identifies all PRs created by dependabot kind/misc Categorizes issue or PR as a miscellaneuous one. lgtm Indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesnt merit a release note. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants