chore(deps): bump the gomod group across 1 directory with 15 updates #54
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=80&v=4){kind=small}
Bumps the gomod group with 3 updates in the / directory: [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib), [github.com/sigstore/rekor-tiles](https://github.com/sigstore/rekor-tiles) and [github.com/sigstore/timestamp-authority](https://github.com/sigstore/timestamp-authority). Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.9.0 to 0.9.1 - [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases) - [Commits](secure-systems-lab/go-securesystemslib@v0.9.0...v0.9.1) Updates `github.com/sigstore/rekor-tiles` from 0.1.7-0.20250624231741-98cd4a77300f to 0.1.11 - [Release notes](https://github.com/sigstore/rekor-tiles/releases) - [Changelog](https://github.com/sigstore/rekor-tiles/blob/main/Dockerfile.release) - [Commits](https://github.com/sigstore/rekor-tiles/commits/v0.1.11) Updates `github.com/sigstore/sigstore` from 1.9.5 to 1.9.6-0.20250729224751-181c5d3339b3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](https://github.com/sigstore/sigstore/commits) Updates `github.com/sigstore/sigstore-go` from 1.1.0 to 1.1.2-0.20250811211025-bac873564adb - [Release notes](https://github.com/sigstore/sigstore-go/releases) - [Commits](https://github.com/sigstore/sigstore-go/commits) Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.9.5 to 1.9.6-0.20250729224751-181c5d3339b3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](https://github.com/sigstore/sigstore/commits) Updates `github.com/sigstore/timestamp-authority` from 1.2.8 to 1.2.9 - [Release notes](https://github.com/sigstore/timestamp-authority/releases) - [Changelog](https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md) - [Commits](sigstore/timestamp-authority@v1.2.8...v1.2.9) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.1) Updates `github.com/spf13/pflag` from 1.0.7 to 1.0.10 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.7...v1.0.10) Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.10.0...v1.11.1) Updates `golang.org/x/crypto` from 0.40.0 to 0.41.0 - [Commits](golang/crypto@v0.40.0...v0.41.0) Updates `golang.org/x/sync` from 0.16.0 to 0.17.0 - [Commits](golang/sync@v0.16.0...v0.17.0) Updates `golang.org/x/term` from 0.33.0 to 0.34.0 - [Commits](golang/term@v0.33.0...v0.34.0) Updates `google.golang.org/api` from 0.243.0 to 0.248.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.243.0...v0.248.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.8 Updates `sigs.k8s.io/release-utils` from 0.12.0 to 0.12.1 - [Release notes](https://github.com/kubernetes-sigs/release-utils/releases) - [Commits](kubernetes-sigs/release-utils@v0.12.0...v0.12.1) --- updated-dependencies: - dependency-name: github.com/secure-systems-lab/go-securesystemslib dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/rekor-tiles dependency-version: 0.1.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/sigstore dependency-version: 1.9.6-0.20250729224751-181c5d3339b3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/sigstore-go dependency-version: 1.1.2-0.20250811211025-bac873564adb dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp dependency-version: 1.9.6-0.20250729224751-181c5d3339b3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/timestamp-authority dependency-version: 1.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/spf13/pflag dependency-version: 1.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/stretchr/testify dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/crypto dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/sync dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/term dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: google.golang.org/api dependency-version: 0.248.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: google.golang.org/protobuf dependency-version: 1.36.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: sigs.k8s.io/release-utils dependency-version: 0.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the gomod group with 3 updates in the / directory: github.com/secure-systems-lab/go-securesystemslib, github.com/sigstore/rekor-tiles and github.com/sigstore/timestamp-authority.
Updates
github.com/secure-systems-lab/go-securesystemslibfrom 0.9.0 to 0.9.1Commits
a1a33cdMerge pull request #120 from secure-systems-lab/dependabot/github_actions/dom...4f201c1Merge pull request #122 from rosstimothy/tross/remove_testing5d1cc26Move hexDecode test helper into a test fileebae973Merge pull request #121 from secure-systems-lab/dependabot/go_modules/golang....551dff1chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.050ac487chore(deps): bump dominikh/staticcheck-action from 1.3.1 to 1.4.09d9f015Merge pull request #117 from secure-systems-lab/dependabot/go_modules/golang....9aa50eachore(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.03e526e2Merge pull request #115 from secure-systems-lab/dependabot/go_modules/golang....a1093e6Merge pull request #116 from secure-systems-lab/dependabot/github_actions/act...Updates
github.com/sigstore/rekor-tilesfrom 0.1.7-0.20250624231741-98cd4a77300f to 0.1.11Release notes
Sourced from github.com/sigstore/rekor-tiles's releases.
Commits
Updates
github.com/sigstore/sigstorefrom 1.9.5 to 1.9.6-0.20250729224751-181c5d3339b3Commits
Updates
github.com/sigstore/sigstore-gofrom 1.1.0 to 1.1.2-0.20250811211025-bac873564adbRelease notes
Sourced from github.com/sigstore/sigstore-go's releases.
Commits
Updates
github.com/sigstore/sigstore/pkg/signature/kms/gcpfrom 1.9.5 to 1.9.6-0.20250729224751-181c5d3339b3Commits
Updates
github.com/sigstore/timestamp-authorityfrom 1.2.8 to 1.2.9Release notes
Sourced from github.com/sigstore/timestamp-authority's releases.
Commits
6a9f9e6logging: Don't use Error when logging 4xx responses (#1159)48065b9chore(deps): bump golang from 1.25.0 to 1.25.1 in the docker group (#1160)ead25fdchore(deps): bump github/codeql-action in the actions group (#1161)f4dcc5dchore(deps): bump github.com/prometheus/client_golang in the gomod group (#1162)4dce52cchore(deps): bump the gomod group with 2 updates (#1157)0760214chore(deps): bump codecov/codecov-action in the actions group (#1158)b0a7e83chore(deps): bump actions/setup-go from 5.5.0 to 6.0.0 (#1156)9f85393chore(deps): bump github.com/spf13/pflag in the gomod group (#1155)ecc1d67chore(deps): bump github.com/go-openapi/swag from 0.23.1 to 0.24.1 (#1150)f35ae49chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#1154)Updates
github.com/spf13/cobrafrom 1.9.1 to 1.10.1Release notes
Sourced from github.com/spf13/cobra's releases.
... (truncated)
Commits
7da941cchore: Bump pflag to v1.0.9 (#2305)51d6751Bump pflag to 1.0.8 (#2303)3f3b818Update README.md with new logodcaf42eAdd Periscope to the list of projects using Cobra (#2299)6dec1aeThe default ShellCompDirective can be customized for a command and its subcom...c8289c1chore(golangci-lint): add some exclusion presets4af7b64refactor: apply golangci-lint autofixes, work around false positives75790e4chore(golangci-lint): upgrade to v2db3ddb5Adding sponsorship to README.md67171d6putting sponsorship below headerUpdates
github.com/spf13/pflagfrom 1.0.7 to 1.0.10Release notes
Sourced from github.com/spf13/pflag's releases.
Commits
0491e57Merge pull request #448 from thaJeztah/fix_go_version72abab1Merge pull request #447 from thaJeztah/fix_deprecation_comment7e4dfb1Test on Go 1.1218a9d17move Func, BoolFunc, tests as they require go1.21c5b9e98remove uses of errors.Is, which requires go1.1345a4873fix deprecation comment for (FlagSet.)ParseErrorsWhitelist1043857Merge pull request #446 from spf13/fix-backwards-compat7412009fix: Restore ParseErrorsWhitelist name for nowb9c16faMerge pull request #444 from spf13/reset-args-even-if-empty40abc49Merge pull request #443 from spf13/silence-errhelpUpdates
github.com/stretchr/testifyfrom 1.10.0 to 1.11.1Release notes
Sourced from github.com/stretchr/testify's releases.
... (truncated)
Commits
2a57335Merge pull request #1788 from brackendawson/1785-backport-1.11af8c912Backport #1786 to release/1.11b7801fbMerge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...69831f3build(deps): bump actions/checkout from 4 to 5a53be35Improve captureTestingT helperaafb604mock: improve formatting of error message7218e03improve error msg929a212Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filteringbc7459esuite: faster filtering of methods (-testify.m)7d37b5csuite: refactor methodFilterUpdates
golang.org/x/cryptofrom 0.40.0 to 0.41.0Commits
ef5341bgo.mod: update golang.org/x dependenciesb999374acme: fix pebble subprocess output data racec247deax509roots/fallback: store bundle certs directly in DER1fda731acme: increase pebble test waitForServer attempts1b4c3d2x509roots/fallback: update bundleb903b53acme: capture pebble test subprocess stdout/stderrUpdates
golang.org/x/syncfrom 0.16.0 to 0.17.0Commits
04914c2all: upgrade go directive to at least 1.24.0 [generated]Updates
golang.org/x/termfrom 0.33.0 to 0.34.0Commits
a35244dgo.mod: update golang.org/x dependencies4f53e0cterm: allow multi-line bracketed paste to not create single line with verbati...27f29d8term: remove duplicate flag and add comment on windowsUpdates
google.golang.org/apifrom 0.243.0 to 0.248.0Release notes
Sourced from google.golang.org/api's releases.
... (truncated)
Changelog
Sourced from google.golang.org/api's changelog.
... (truncated)
Commits
79bed22chore(main): release 0.248.0 (#3273)07ab1f3chore(all): update all (#3278)59f18fdfeat(all): auto-regenerate discovery clients (#3280)71f2c5ffeat(all): auto-regenerate discovery clients (#3279)23daa11feat(all): auto-regenerate discovery clients (#3277)2692170feat(all): auto-regenerate discovery clients (#3276)4c66642feat(all): auto-regenerate discovery clients (#3275)2900298feat(all): auto-regenerate discovery clients (#3274)8f03c8efeat(all): auto-regenerate discovery clients (#3272)56a3682chore(main): release 0.247.0 (#3265)Updates
google.golang.org/protobuffrom 1.36.6 to 1.36.8Updates
sigs.k8s.io/release-utilsfrom 0.12.0 to 0.12.1Release notes
Sourced from sigs.k8s.io/release-utils's releases.
Commits
bb0eb13Merge pull request #140 from kubernetes-sigs/dependabot/go_modules/all-6cd1ce...46f34f1build(deps): bump github.com/olekukonko/tablewriter in the all group40e56cfMerge pull request #139 from cpanato/improve-tablewriterdde8abdrename pkg util to helpers9eb8ae7add more wrapper fiunc for tablewriter7ff2414Merge pull request #138 from cpanato/updates06ebfc2fix lints94773febump cosign and golangci-lint versionsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions