Skip to content

chore(deps): bump the go group with 8 updates - #2133

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-22d9b57e1e
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-22d9b57e1e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the go group with 8 updates:

Package From To
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager 0.4.10 0.4.12
github.com/aws/aws-sdk-go-v2/service/s3 1.113.4 1.114.0
github.com/cloudflare/cfssl 1.6.5 1.7.0
github.com/docker/cli 29.8.1+incompatible 29.8.2+incompatible
github.com/go-git/go-billy/v5 5.9.1 5.9.2
github.com/klauspost/pgzip 1.2.6 1.2.7
github.com/sigstore/sigstore 1.10.9 1.11.0
sigs.k8s.io/controller-runtime 0.25.1 0.25.2

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.4.10 to 0.4.12

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.4 to 1.114.0

Commits

Updates github.com/cloudflare/cfssl from 1.6.5 to 1.7.0

Release notes

Sourced from github.com/cloudflare/cfssl's releases.

v1.7.0

Changelog

  • 5c9bfdfe467e4f17966af9a20b49c0a9dee130ea Add scripts to regenerate {api,bundler,ubiquity}'s testdata
  • 2adc622098396c4b83672b5dd7651a38e6bd0ee7 Create semgrep.yml
  • faaff55b279b375f62632875b2da82754e313c10 Fixes #1237 partially by updating test data certificates to be valid
  • dd8f9ef9972b61f6bf26299e45cab04326b4f7e4 Github actions linter uses golangci-lint@v1.57
  • adad8d85bdef30103bfc3eb0268c139dceb414c4 Merge pull request #1 from ang-cloudflare/fix-pr-1434-review-findings
  • 12a0addeae31a6bf4c49afbda9531411a628e0f9 Merge pull request #1055 from akoserwal/master
  • 361a3a54f913d85daedbc43499dddd6ed68001eb Merge pull request #1364 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.21.0
  • 03f268137ca459ea7aa159bf1886e3e22a75418d Merge pull request #1365 from cloudflare/dependabot/go_modules/github.com/go-sql-driver/mysql-1.8.0
  • d6d030a38b1426c8c7632186cd41f4cdfe71c2c3 Merge pull request #1368 from cloudflare/dependabot/go_modules/github.com/google/certificate-transparency-go-1.1.8
  • 91b63b5bb6cc84899849f1aa352c3a44e66b42b9 Merge pull request #1395 from cloudflare/hrushikeshdeshpande-creating-semgrep-yml
  • cb0a0a3b9daf7ba477e106f2f013dd68267f0190 Merge pull request #1408 from mitch292/mitch292/certificate-transparency-go-bump
  • 730ee589c51ba8e1c4a8b704849915274d03b8d3 Merge pull request #1409 from mitch292/mitch292/revert-ct-go-upgrade
  • 1c1bc0be9c8ca9ff17757979947137a2cccf0bd1 Merge pull request #1410 from mitch292/mitch292/1237-fix-test-cases
  • 6d2d0b221d8a0880220bfefeb00c3f8a2646f53a Merge pull request #1412 from mitch292/mitch292/fix-linting
  • b898d2f02a1504d7f4a585d32ed6a48c28c748af Merge pull request #1415 from mitch292/mitch292/go-version
  • ed8df49712657524e8647cb7a9576422baa2faa1 Merge pull request #1416 from cloudflare/mschwarzl/dockerignore
  • 82408a199099610d358a0971598c48a8802cae8a Merge pull request #1434 from elukey/master
  • e429e72785df640e0dd3320dc895d4dd03c66cdb Merge pull request #1436 from mitch292/fix-copy-extensions-security-bypass
  • 7d5fdbba3b50af687f2969380f6495fcb766fa3f Merge pull request #1445 from ang-cloudflare/ang/SECENG-13957
  • e71a023cf3e626cf0f5918b61e35c9210fa7a973 Merge pull request #1447 from cloudflare/dianatran/goreleaser-v2
  • 800f0c598693e3ece8de1cb8c0369f38b0e064b3 Migrate goreleaser config to v2 and limit build parallelism
  • 62db3517d76250c5ff72454479b3caec0f04e2da Regenerate api's testdata
  • 214a1542c73570eda26ed3004f0ffe71c91957ba Regenerate bundler's testdata
  • f8821d5ee2580d7a3dd92099d1ca328e9d74da34 Regenerate ubiquity's testdata
  • 14f61be73922e6aebb8643da11749396c1b36ba4 Revert "Upgrade certificate-transparency-go from v1.1.8 to v1.3.1"
  • 05f2d4f4a7438b74e8fb0ffe675fa7e1c0783f36 SECENG-13957: feat: add ML-DSA-44/65/87 post-quantum key support
  • 038e4d2d9c553bd005aaedc4ef4252dd2b7cb73d Update README
  • 2bc4eb0b45ebe4215d0de8706dbaf719dfa995a0 Update READMe
  • 2312d45cb95ed214d2a5c39096ac243aabe2dcd8 Update certstore_development and sqlit_test dbs after testdata update
  • a40f86c2accf3b46c04b7b3ed02135f98eb9210d Update repository to reflect required min go version of 1.20
  • d3645c109d4bd68ac47d497fdfce90ab8d5eb44d Update semgrep.yml
  • 1a73d78a1852001b7b9c21f3eceea0e721ea6a6c Upgrade certificate-transparency-go from v1.1.8 to v1.3.1
  • b4650b5dac4b567206399a44ac3edb4d1f86a7a2 build(deps): bump github.com/go-sql-driver/mysql from 1.7.1 to 1.8.0
  • a421aee8370e9323f00a284fb6be14a3abdcf8ee build(deps): bump github.com/google/certificate-transparency-go
  • d13ac5d73889ff76cc769995bfbbde431c0e1341 build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0
  • ea2095dd50d3250b5d8ec830ce82189e0b5888f2 fix: preserve regenerated fixture coverage
  • 8994bdd4398559c224da53efab300128974b33a0 fix: prevent CSR extensions from overriding CA-managed key usage in copy_extensions
  • cd8a4ded61b2df01b3d520361d966c4e581bc02e ignore .git to .dockerignore
Commits
  • e71a023 Merge pull request #1447 from cloudflare/dianatran/goreleaser-v2
  • 800f0c5 Migrate goreleaser config to v2 and limit build parallelism
  • 7d5fdbb Merge pull request #1445 from ang-cloudflare/ang/SECENG-13957
  • 05f2d4f SECENG-13957: feat: add ML-DSA-44/65/87 post-quantum key support
  • 82408a1 Merge pull request #1434 from elukey/master
  • adad8d8 Merge pull request #1 from ang-cloudflare/fix-pr-1434-review-findings
  • ea2095d fix: preserve regenerated fixture coverage
  • e429e72 Merge pull request #1436 from mitch292/fix-copy-extensions-security-bypass
  • 8994bdd fix: prevent CSR extensions from overriding CA-managed key usage in copy_exte...
  • 2312d45 Update certstore_development and sqlit_test dbs after testdata update
  • Additional commits viewable in compare view

Updates github.com/docker/cli from 29.8.1+incompatible to 29.8.2+incompatible

Commits
  • 7fc2dff Merge pull request #7325 from docker/dependabot/github_actions/codecov/codeco...
  • ca5a266 build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1
  • 39f182c Merge pull request #7323 from docker/dependabot/github_actions/docker-actions...
  • 0684ae0 Merge pull request #7311 from docker/dependabot/github_actions/codeql-actions...
  • b7dc94c build(deps): bump the codeql-actions group across 1 directory with 3 updates
  • 12566dd build(deps): bump the docker-actions group with 3 updates
  • 4167943 Merge pull request #7320 from docker/dependabot/github_actions/docker-actions...
  • 9dcf8af Merge pull request #7322 from thaJeztah/bump_version
  • 6fdced8 update version to 29.8.2
  • 0a563b1 build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml
  • See full diff in compare view

Updates github.com/go-git/go-billy/v5 from 5.9.1 to 5.9.2

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.9.2

What's Changed

Full Changelog: go-git/go-billy@v5.9.0...v5.9.2

Commits

Updates github.com/klauspost/pgzip from 1.2.6 to 1.2.7

Release notes

Sourced from github.com/klauspost/pgzip's releases.

v1.2.7

What's Changed

New Contributors

Full Changelog: klauspost/pgzip@v1.2.6...v1.2.7

Commits

Updates github.com/sigstore/sigstore from 1.10.9 to 1.11.0

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.11.0

What's Changed

v1.11.0 and v1.10.10 are identical releases tagged for the same commit. Since the minimum Go version has been bumped to 1.27.0, we are releasing this change as a minor version bump. Dependencies that do not want to update to 1.27 yet can use v1.10.11, and we'll backport any security fixes to v1.10.x for the next 6 months while Go 1.26 is still supported.

Full Changelog: sigstore/sigstore@v1.10.9...v1.11.0

v1.10.11 rolls back the release to a previous commit where the minimum Go version is 1.25.0. An upcoming v1.11.0 will require 1.27.0.

v1.10.10

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.10.9...v1.10.10

Commits
  • 4f4c3f8 Add release instructions (#2418)
  • 49e21e5 build(deps): Bump github.com/google/go-containerregistry from 0.21.9 to 0.22....
  • eda3b60 build(deps): Bump the gomod group across 4 directories with 4 updates (#2413)
  • b3e2728 Adjust mldsa error handling (#2417)
  • bfbf63e Support for ML-DSA keys (#2416)
  • 538e3fa Bump go to 1.27 and fix linter and api issues (#2415)
  • e8841f5 build(deps): Bump hashicorp/vault in /test/e2e in the all group (#2412)
  • 5b3d739 Fix Azure KMS ECDSA signature verification (r||s ordering + padding) (#2410)
  • ba4de68 build(deps): Bump github.com/aws/aws-sdk-go-v2/config (#2406)
  • 1abcedd build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#2407)
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.25.1 to 0.25.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.1...v0.25.2

Commits
  • 5d8467b Merge pull request #3613 from k8s-infra-cherrypick-robot/cherry-pick-3609-to-...
  • 7b211af sparkles: Add a metric for the readyourwite consistency wait duration
  • dc84738 Merge pull request #3610 from k8s-infra-cherrypick-robot/cherry-pick-3608-to-...
  • c7eb492 book: Document that ReadYourWrite doesn't work correctly with > 1 Namespace
  • d837464 Merge pull request #3603 from k8s-infra-cherrypick-robot/cherry-pick-3594-to-...
  • 1b98304 sparkles: Add metrics handler options
  • 8963baf Merge pull request #3600 from k8s-infra-cherrypick-robot/cherry-pick-3598-to-...
  • ade6e0b Fix SubResourceCreateOptions.ApplyToSubResourceCreate
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.4.10` | `0.4.12` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.113.4` | `1.114.0` |
| [github.com/cloudflare/cfssl](https://github.com/cloudflare/cfssl) | `1.6.5` | `1.7.0` |
| [github.com/docker/cli](https://github.com/docker/cli) | `29.8.1+incompatible` | `29.8.2+incompatible` |
| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.9.1` | `5.9.2` |
| [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip) | `1.2.6` | `1.2.7` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.10.9` | `1.11.0` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.25.1` | `0.25.2` |


Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.4.10 to 0.4.12
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@feature/s3/transfermanager/v0.4.10...feature/s3/transfermanager/v0.4.12)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.113.4 to 1.114.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.113.4...service/s3/v1.114.0)

Updates `github.com/cloudflare/cfssl` from 1.6.5 to 1.7.0
- [Release notes](https://github.com/cloudflare/cfssl/releases)
- [Changelog](https://github.com/cloudflare/cfssl/blob/master/CHANGELOG)
- [Commits](cloudflare/cfssl@v1.6.5...v1.7.0)

Updates `github.com/docker/cli` from 29.8.1+incompatible to 29.8.2+incompatible
- [Commits](docker/cli@v29.8.1...v29.8.2)

Updates `github.com/go-git/go-billy/v5` from 5.9.1 to 5.9.2
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.9.1...v5.9.2)

Updates `github.com/klauspost/pgzip` from 1.2.6 to 1.2.7
- [Release notes](https://github.com/klauspost/pgzip/releases)
- [Commits](klauspost/pgzip@v1.2.6...v1.2.7)

Updates `github.com/sigstore/sigstore` from 1.10.9 to 1.11.0
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.9...v1.11.0)

Updates `sigs.k8s.io/controller-runtime` from 0.25.1 to 0.25.2
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.25.1...v0.25.2)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager
  dependency-version: 0.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.114.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/cloudflare/cfssl
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/docker/cli
  dependency-version: 29.8.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/klauspost/pgzip
  dependency-version: 1.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Oct 4, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 4, 2026 08:26
@github-actions github-actions Bot added the size/s Small label Oct 4, 2026
@frewilhelm

Copy link
Copy Markdown
Contributor

@dependabot ignore github.com/sigstore/sigstore

@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you about github.com/sigstore/sigstore again, unless you unignore it.

@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 5, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-22d9b57e1e branch October 5, 2026 06:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. size/s Small

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant