Skip to content

build(deps): bump the go-deps group across 1 directory with 6 updates #1831

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 12, 2025

Bumps the go-deps group with 6 updates in the / directory:

Package From To
github.com/fluxcd/pkg/apis/meta 1.12.0 1.13.0
github.com/fluxcd/pkg/helmtestserver 0.24.0 0.25.0
github.com/minio/minio-go/v7 7.0.92 7.0.93
github.com/sigstore/sigstore 1.9.1 1.9.5
google.golang.org/api 0.227.0 0.236.0
oras.land/oras-go/v2 2.5.0 2.6.0

Updates github.com/fluxcd/pkg/apis/meta from 1.12.0 to 1.13.0

Commits
  • 246bc82 Merge pull request #942 from fluxcd/force-annotation
  • 86ef319 Introduce reconcile.fluxcd.io/forceAt annotation
  • 9be33b3 Merge pull request #941 from fluxcd/crypto-v0.39.0
  • 8957219 Update golang.org/x/crypto to v0.39.0
  • 406c48d Merge pull request #940 from fluxcd/release-git-pkgs
  • 2298005 Release git/v0.32.0 and git/gogit/v0.34.0
  • 47a1b23 Merge pull request #938 from fluxcd/public-ecr
  • a0d4442 Fix support for public.ecr.aws
  • 53c7b2d Merge pull request #939 from kane8n/update-go-git
  • 77f008c update go-git
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/helmtestserver from 0.24.0 to 0.25.0

Commits
  • 090c3ce Merge pull request #886 from dipti-pai/move-github-provider
  • 84883b4 Move auth/github to git/github
  • 0d627fb Merge pull request #885 from fluxcd/gh-app-cache-key
  • 4380ea7 Take the hash of all the parts in the GitHub App token cache key
  • 84d0d45 Merge pull request #882 from kathleenfrench/kfrench/cel-eval-string
  • 567773d support string evaluation in CEL expressions
  • 8b1f852 Merge pull request #881 from fluxcd/token-cache-flags
  • 4b34b01 Add CLI flags for the token cache and method to delete all events
  • c05eb67 Merge pull request #880 from fluxcd/cache-custom-metric-labels
  • 4d91aae Add option for custom event namespace label in cache metrics
  • Additional commits viewable in compare view

Updates github.com/minio/minio-go/v7 from 7.0.92 to 7.0.93

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

Bugfix Release

What's Changed

New Contributors

Full Changelog: minio/minio-go@v7.0.92...v7.0.93

Commits

Updates github.com/sigstore/sigstore from 1.9.1 to 1.9.5

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.9.5

What's Changed

Full Changelog: sigstore/sigstore@v1.9.4...v1.9.5

v1.9.4

What's Changed

Full Changelog: sigstore/sigstore@v1.9.3...v1.9.4

v1.9.3

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.2...v1.9.3

v1.9.2

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.1...v1.9.2

Commits
  • 75efc00 build(deps): Bump localstack/localstack in /test/e2e in the all group (#2092)
  • 32d462f build(deps): Bump the all group in /test/e2e with 3 updates (#2091)
  • 007cd79 build(deps): Bump the all group in /test/e2e with 3 updates (#2074)
  • bbd546b build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2087)
  • 540126b build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2088)
  • 0996ba4 build(deps): Bump actions/dependency-review-action in the all group (#2085)
  • 7eafe24 build(deps): Bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 (#2081)
  • d771343 build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2082)
  • 1b0bd69 build(deps): Bump the all group with 2 updates (#2078)
  • e2f3b71 build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2084)
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.227.0 to 0.236.0

Release notes

Sourced from google.golang.org/api's releases.

v0.236.0

0.236.0 (2025-06-03)

Features

Bug Fixes

v0.235.0

0.235.0 (2025-05-28)

Features

Bug Fixes

  • internaloption: AuthCreds should honor WithoutAuthentication (#3166) (d117646)

v0.234.0

0.234.0 (2025-05-21)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.236.0 (2025-06-03)

Features

Bug Fixes

0.235.0 (2025-05-28)

Features

Bug Fixes

  • internaloption: AuthCreds should honor WithoutAuthentication (#3166) (d117646)

0.234.0 (2025-05-21)

Features

Bug Fixes

... (truncated)

Commits

Updates oras.land/oras-go/v2 from 2.5.0 to 2.6.0

Release notes

Sourced from oras.land/oras-go/v2's releases.

v2.6.0

New Features

Bug Fixes

  • Fix #640: Unclear error message from oci.NewFromTar
  • Fix #865: Symbolic links are not automatically overwritten when extracted from tar archive to File store
  • Fix #851: Dot‑prefixed paths in tar archives were not recognized by ReadOnlyOCIStore
  • Fix #880: The index.json generated by the OCI store lacked a mediaType field
  • Fix #895: The Docker-Content-Digest header was not verified in Repository.Blobs().Fetch()
  • Fix #916: Incorrect use of atomic.Value in the syncutil.Go utility function causes panics
  • Fix #923: Pushing descriptors with invalid digests to memory or file store caused panics
  • Other minor bug fixes

Documentation

  • Add documentation for artifact modeling
  • Add documentation for targets and content store
  • Add quickstart tutorial
  • Improve examples
  • Other minor improvements

Other Changes

  • Upgrade the Go support window to [1.23, 1.24]
  • Increase test coverage to 80%
  • Update dependencies
  • Minor optimization

Detailed Commits

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.12.0` | `1.13.0` |
| [github.com/fluxcd/pkg/helmtestserver](https://github.com/fluxcd/pkg) | `0.24.0` | `0.25.0` |
| [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.92` | `7.0.93` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.9.1` | `1.9.5` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.227.0` | `0.236.0` |
| [oras.land/oras-go/v2](https://github.com/oras-project/oras-go) | `2.5.0` | `2.6.0` |



Updates `github.com/fluxcd/pkg/apis/meta` from 1.12.0 to 1.13.0
- [Commits](fluxcd/pkg@apis/meta/v1.12.0...apis/meta/v1.13.0)

Updates `github.com/fluxcd/pkg/helmtestserver` from 0.24.0 to 0.25.0
- [Commits](fluxcd/pkg@git/v0.24.0...git/v0.25.0)

Updates `github.com/minio/minio-go/v7` from 7.0.92 to 7.0.93
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](minio/minio-go@v7.0.92...v7.0.93)

Updates `github.com/sigstore/sigstore` from 1.9.1 to 1.9.5
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.9.1...v1.9.5)

Updates `google.golang.org/api` from 0.227.0 to 0.236.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.227.0...v0.236.0)

Updates `oras.land/oras-go/v2` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/oras-project/oras-go/releases)
- [Commits](oras-project/oras-go@v2.5.0...v2.6.0)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/helmtestserver
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/minio/minio-go/v7
  dependency-version: 7.0.93
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: google.golang.org/api
  dependency-version: 0.236.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: oras.land/oras-go/v2
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency label Jun 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants