chore(deps): bump the go group across 1 directory with 8 updates by dependabot[bot] · Pull Request #2135 · open-component-model/ocm

dependabot · 2026-10-05T07:33:59Z

Bumps the go group with 8 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	`0.4.10`	`0.4.13`
github.com/aws/aws-sdk-go-v2/service/s3	`1.113.4`	`1.114.0`
github.com/docker/cli	`29.8.1+incompatible`	`29.8.2+incompatible`
github.com/go-git/go-billy/v5	`5.9.1`	`5.9.2`
github.com/klauspost/pgzip	`1.2.6`	`1.2.7`
github.com/moby/moby/api	`1.56.0`	`1.56.1`
github.com/moby/moby/client	`0.6.0`	`0.6.1`
sigs.k8s.io/controller-runtime	`0.25.1`	`0.25.2`

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.4.10 to 0.4.13

Commits

4e901eb Release 2026-10-01
e65b6c6 Regenerated Clients
0fb4a76 Update endpoints model
d4a0d30 Update API model
171d404 Add s3 transfermanager downloader fuzzy test (#3569)
2edd815 Parametrize which protocl we use on eventstream tests (#3573)
55377d1 Release 2026-09-30
7418acf Regenerated Clients
8e21aaa Update endpoints model
9b78075 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.4 to 1.114.0

Commits

55377d1 Release 2026-09-30
7418acf Regenerated Clients
8e21aaa Update endpoints model
9b78075 Update API model
404700d Release 2026-09-29
bc6eb75 Regenerated Clients
51ae28b Update API model
2babe29 Update smithy-go workflow behavior for forks (#3566)
4b034e5 Release 2026-09-28
f75fa56 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/docker/cli from 29.8.1+incompatible to 29.8.2+incompatible

Commits

7fc2dff Merge pull request #7325 from docker/dependabot/github_actions/codecov/codeco...
ca5a266 build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1
39f182c Merge pull request #7323 from docker/dependabot/github_actions/docker-actions...
0684ae0 Merge pull request #7311 from docker/dependabot/github_actions/codeql-actions...
b7dc94c build(deps): bump the codeql-actions group across 1 directory with 3 updates
12566dd build(deps): bump the docker-actions group with 3 updates
4167943 Merge pull request #7320 from docker/dependabot/github_actions/docker-actions...
9dcf8af Merge pull request #7322 from thaJeztah/bump_version
6fdced8 update version to 29.8.2
0a563b1 build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml
See full diff in compare view

Updates github.com/go-git/go-billy/v5 from 5.9.1 to 5.9.2

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.9.2

What's Changed

build: Update module golang.org/x/net to v0.55.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-billy#216

build: Update module golang.org/x/text to v0.39.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-billy#230

build: Update module golang.org/x/net to v0.56.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-billy#229

Full Changelog: go-git/go-billy@v5.9.0...v5.9.2

Commits

See full diff in compare view

Updates github.com/klauspost/pgzip from 1.2.6 to 1.2.7

Release notes

Sourced from github.com/klauspost/pgzip's releases.

v1.2.7

What's Changed

Use Go modules by @klauspost in klauspost/pgzip#65

Handle multistream with readahead by @klauspost in klauspost/pgzip#68

fix: return currentBuffer and prevTail to dstPool in init to stop leak by @SAY-5 in klauspost/pgzip#69

fix: avoid deadlock on Read after WriteTo drain by @Solaris-star in klauspost/pgzip#71

New Contributors

@SAY-5 made their first contribution in klauspost/pgzip#69

@Solaris-star made their first contribution in klauspost/pgzip#71

Full Changelog: klauspost/pgzip@v1.2.6...v1.2.7

Commits

740cd9e Update dependency. Run 'go fix' (#73)
7249ebc fix: avoid deadlock on Read after WriteTo drain (#71)
89611d0 fix: return currentBuffer and prevTail to dstPool in init to stop leak (#69)
e0ddb06 Handle multistream with readahead (#68)
6108bbd Fix build status badge in README (#66)
8775b78 Use Go modules (#65)
c45f9e7 Fix Go 1.24 test and clean up (#63)
See full diff in compare view

Updates github.com/moby/moby/api from 1.56.0 to 1.56.1

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.1

1.56.1

Changelog

api/scripts: Allow isolated model generation with an API directory. moby/moby#53629

api/swagger: Improve OpenAPI compatibility. moby/moby#53626

api/swagger: Quote HTTP response status codes. moby/moby#53759

api/templates: schema: disable validators and serializer sections. moby/moby#53751

api: fix G117 (gosec). moby/moby#53721

api: swagger ImageManifestSummary.ImageData: fix invalid required field. moby/moby#53750

api: update go-swagger to v0.36.6. moby/moby#53754

fix: invalid swagger YAML indentation. moby/moby#53606

Commits

14ebc60 Merge pull request #53830 from tonistiigi/update-buildkit-v0.34.0-rc1
8eded0e Merge pull request #53671 from thaJeztah/add_WithHTTPRequestHook
c4e39af Merge pull request #53596 from vvoland/c8d-refactor-imgload
b8a569e client: add WithHTTPRequestHook option
0fed273 Merge pull request #53803 from thaJeztah/etchosts_cleanups
80c72a3 Merge pull request #53831 from corhere/fix-dnsproxy-servfail-test
1cfa161 daemon/containerd: Split image loading into import and unpack steps
e7272aa Merge pull request #53606 from flostellbrink/fix/swagger-yaml-indentation
357096e libnetwork/etchosts: keep file open when updating hosts
012b2ef libnetwork/etchosts: propagate file close errors
Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.6.0 to 0.6.1

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.1

0.6.1

Changelog

client: add WithHTTPRequestHook option. moby/moby#53671

client: deprecate WithResponseHook in favor of WithHTTPResponseHook. moby/moby#53666

client: fix WithHTTPResponseHook hooks not being called for hijacked HTTP connections. moby/moby#53821

client: postRaw: use consistent order or arguments. moby/moby#53677

client: prevent response hooks from consuming response body. moby/moby#53667

client: remove redundant cloning of response hooks. moby/moby#53822

client: update github.com/docker/go-connections v0.8.1. moby/moby#53708

golangci-lint: enable usetesting linter. moby/moby#53720

vendor: github.com/moby/moby/api v1.56.1. moby/moby#53837

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.1 (2013-08-23)

Registry: Pass "meta" headers in API calls to the registry

Packaging: Use correct upstart script with new build tool

Packaging: Use libffi-dev, don't build it from sources

Packaging: Removed duplicate mercurial install command

Commits

5105263 Bump to v0.6.1
7b5c579 Use correct upstart script with new build tool
15d658d Removed duplicate mercurial install command
59281d6 use libffi-dev, don't build it from sources
29be20f Fixed: ImagePull in runtime test
5a8c32d Use additional decorator in RequestFactory to pass meta headers to registry
588f8e1 Merge pull request #1628 from dotcloud/bump_0.6.0
See full diff in compare view

Updates sigs.k8s.io/controller-runtime from 0.25.1 to 0.25.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.25.2

What's Changed

[release-0.25] 🐛 Fix SubResourceCreateOptions.ApplyToSubResourceCreate by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3600

[release-0.25] ✨ Add metrics handler options by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3603

[release-0.25] 📖 Document that ReadYourWrite doesn't work correctly with > 1 Namespace by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3610

[release-0.25] ✨ Add a metric for the readyourwite consistency wait duration by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3613

Full Changelog: kubernetes-sigs/controller-runtime@v0.25.1...v0.25.2

Commits

5d8467b Merge pull request #3613 from k8s-infra-cherrypick-robot/cherry-pick-3609-to-...
7b211af sparkles: Add a metric for the readyourwite consistency wait duration
dc84738 Merge pull request #3610 from k8s-infra-cherrypick-robot/cherry-pick-3608-to-...
c7eb492 book: Document that ReadYourWrite doesn't work correctly with > 1 Namespace
d837464 Merge pull request #3603 from k8s-infra-cherrypick-robot/cherry-pick-3594-to-...
1b98304 sparkles: Add metrics handler options
8963baf Merge pull request #3600 from k8s-infra-cherrypick-robot/cherry-pick-3598-to-...
ade6e0b Fix SubResourceCreateOptions.ApplyToSubResourceCreate
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.4.10` | `0.4.13` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.113.4` | `1.114.0` | | [github.com/docker/cli](https://github.com/docker/cli) | `29.8.1+incompatible` | `29.8.2+incompatible` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.9.1` | `5.9.2` | | [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip) | `1.2.6` | `1.2.7` | | [github.com/moby/moby/api](https://github.com/moby/moby) | `1.56.0` | `1.56.1` | | [github.com/moby/moby/client](https://github.com/moby/moby) | `0.6.0` | `0.6.1` | | [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.25.1` | `0.25.2` | Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.4.10 to 0.4.13 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/transfermanager/v0.4.10...feature/s3/transfermanager/v0.4.13) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.113.4 to 1.114.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.113.4...service/s3/v1.114.0) Updates `github.com/docker/cli` from 29.8.1+incompatible to 29.8.2+incompatible - [Commits](docker/cli@v29.8.1...v29.8.2) Updates `github.com/go-git/go-billy/v5` from 5.9.1 to 5.9.2 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.9.1...v5.9.2) Updates `github.com/klauspost/pgzip` from 1.2.6 to 1.2.7 - [Release notes](https://github.com/klauspost/pgzip/releases) - [Commits](klauspost/pgzip@v1.2.6...v1.2.7) Updates `github.com/moby/moby/api` from 1.56.0 to 1.56.1 - [Release notes](https://github.com/moby/moby/releases) - [Commits](moby/moby@api/v1.56.0...api/v1.56.1) Updates `github.com/moby/moby/client` from 0.6.0 to 0.6.1 - [Release notes](https://github.com/moby/moby/releases) - [Changelog](https://github.com/moby/moby/blob/v0.6.1/CHANGELOG.md) - [Commits](moby/moby@v0.6.0...v0.6.1) Updates `sigs.k8s.io/controller-runtime` from 0.25.1 to 0.25.2 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.25.1...v0.25.2) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager dependency-version: 0.4.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.114.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/docker/cli dependency-version: 29.8.2+incompatible dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/klauspost/pgzip dependency-version: 1.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/moby/moby/api dependency-version: 1.56.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/moby/moby/client dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.25.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Oct 5, 2026

dependabot Bot requested a review from a team as a code owner October 5, 2026 07:34

dependabot Bot added kind/dependency dependency update, etc. kind/chore chore, maintenance, etc. labels Oct 5, 2026

github-actions Bot added the size/s Small label Oct 5, 2026

frewilhelm enabled auto-merge (squash) October 5, 2026 07:57

frewilhelm approved these changes Oct 5, 2026

View reviewed changes

frewilhelm merged commit d797261 into main Oct 5, 2026
21 checks passed

frewilhelm deleted the dependabot/go_modules/go-586c2080bd branch October 5, 2026 07:59

Navigation Menu

Repository navigation

chore(deps): bump the go group across 1 directory with 8 updates - #2135

chore(deps): bump the go group across 1 directory with 8 updates#2135
frewilhelm merged 1 commit into
mainfrom
dependabot/go_modules/go-586c2080bd

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026

v5.9.2

What's Changed

v1.2.7

What's Changed

New Contributors

api/v1.56.1

1.56.1

Changelog

client/v0.6.1

0.6.1

Changelog

0.6.1 (2013-08-23)

v0.25.2

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant