Update go modules (release-v0.6) (patch) by renovate[bot] · Pull Request #2985 · conforma/cli

renovate · 2025-10-01T09:22:49Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cuelang.org/go	`v0.11.1` → `v0.11.2`
github.com/cucumber/godog	`v0.15.0` → `v0.15.1`
github.com/daixiang0/gci	`v0.13.5` → `v0.13.7`
github.com/enterprise-contract/enterprise-contract-controller/api	`v0.1.79` → `v0.1.281`
github.com/enterprise-contract/go-containerregistry	`v0.20.3-0.20250120083621-7be5271048b1` → `v0.20.6`
github.com/evanphx/json-patch	`v5.9.0+incompatible` → `v5.9.11+incompatible`
github.com/evanphx/json-patch/v5	`v5.9.0` → `v5.9.11`
github.com/gkampitakis/go-snaps	`v0.5.7` → `v0.5.19`
github.com/google/go-containerregistry	`v0.20.2` → `v0.20.8`
github.com/otiai10/copy	`v1.14.0` → `v1.14.1`
github.com/package-url/packageurl-go	`v0.1.3` → `v0.1.4`
github.com/secure-systems-lab/go-securesystemslib	`v0.9.0` → `v0.9.1`
github.com/sigstore/cosign/v2	`v2.4.1` → `v2.4.3`
github.com/sigstore/rekor	`v1.3.6` → `v1.3.10`
github.com/sirupsen/logrus	`v1.9.3` → `v1.9.4`
github.com/spf13/pflag	`v1.0.6` → `v1.0.10`
github.com/tektoncd/chains	`v0.22.2` → `v0.22.3`
github.com/tektoncd/cli	`v0.38.0` → `v0.38.2`
github.com/testcontainers/testcontainers-go	`v0.34.0` → `v0.34.1`
k8s.io/api	`v0.34.2` → `v0.34.4`
k8s.io/apiextensions-apiserver	`v0.34.2` → `v0.34.4`
k8s.io/apimachinery	`v0.34.2` → `v0.34.4`
k8s.io/client-go	`v0.34.2` → `v0.34.4`
k8s.io/kubernetes	`v1.34.2` → `v1.34.4`

Release Notes

cue-lang/cue (cuelang.org/go)

`v0.11.2`

Compare Source

This release includes fixes for bugs which were uncovered and resolved in the last few weeks.

Evaluator

CL 1206279 fixes a regression in the old evaluator which could lead to "conflicting value" errors.

`cmd/cue`

CL 1207330 fixes a regression where cue get go stopped copying some CUE files from Go package directories.

CL 1207402 fixes a regression where cue def --inline-imports could result in invalid CUE which failed to evaluate.

Full list of changes since v0.11.1

internal/cueversion: bump LanguageVersion for the next release by @mvdan in 079dc4a
internal/ci: update pinned Go for the next release by @mvdan in b1a57a5
internal/core/dep: fix handling sharing in non-rooted nodes by @mpvl in 8d97e7a
cmd/cue: add test for 3646 by @mpvl in 815cb30
cmd/cue: fix a regression with cue get go dropping CUE files by @mvdan in 5b0e411
cmd/cue: add a test case to reproduce #3644 by @mvdan in 801f976
internal/core/adt: fix let issue for eval v2 by @mpvl in a1fbeaa
internal/core/adt: add tests for 3590 and 3591 by @mpvl in 0ae498f

cucumber/godog (github.com/cucumber/godog)

`v0.15.1`

Compare Source

Added

Step text is added to "step is undefined" error - (669 - vearutop)
Localisation support by @MegaGrindStone in #665
feat: support uint types by @chengxilo in #695

Changed

Replace deprecated ::set-output - (681 - nodeg)

Fixed

fix(errors): fix(errors): Fix expected Step argument count for steps with context.Context (679 - tigh-latte)
fix(formatter): On concurrent execution, execute formatter at end of Scenario - (645 - tigh-latte)
Pretty printing results now prints the line where the step is declared instead of the line where the handler is declared. (668 - spencerc)
Update honnef.co/go/tools/cmd/staticcheck version in Makefile by @RezaZareiii in #670
fix: verify dogT exists in the context before using it by @cakoolen in #692
fix: change bang to being in README by @nahomEagleLion in #687
Mark junit test cases as skipped if no pickle step results available by @mrsheepuk in #597
Print step declaration line instead of handler declaration line by @SpencerC in #668

daixiang0/gci (github.com/daixiang0/gci)

`v0.13.7`

Compare Source

What's Changed

fix: scrape all goos/goarch pair for stdlib by @Zxilly in #208
chore: get module info from pass by @ldez in #221
chore: remove analyzer by @ldez in #222
feat: update standard list to go1.25 by @ldez in #233
bump up version by @daixiang0 in #234

New Contributors

@Zxilly made their first contribution in #208

Full Changelog: daixiang0/gci@v0.13.6...v0.13.7

`v0.13.6`

Compare Source

What's Changed

fix: update standard list to go1.24 by @ldez in #227
bump up version by @daixiang0 in #229

Full Changelog: daixiang0/gci@v0.13.5...v0.13.6

enterprise-contract/go-containerregistry (github.com/enterprise-contract/go-containerregistry)

evanphx/json-patch (github.com/evanphx/json-patch)

`v5.9.11+incompatible`

Compare Source

`v5.9.10+incompatible`

Compare Source

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

`v0.5.19`

Compare Source

What's Changed

fix: use backticks for inline snaps when appropriate by @gkampitakis in #149

Full Changelog: gkampitakis/go-snaps@0.5.18...v0.5.19

`v0.5.18`

Compare Source

`v0.5.17`

Compare Source

`v0.5.16`

Compare Source

What's Changed

fix: don't drop /r character when scanning by @gkampitakis in #139
chore: replace vendored go-diff with upstream by @gkampitakis in #143
chore: update golangci-lint to v2 by @G-Rath in #141
fix: detect no_color support by @gkampitakis in #123
experimenting with inline snapshot support by @gkampitakis in #70

Full Changelog: gkampitakis/go-snaps@v0.5.15...v0.5.16

`v0.5.15`

Compare Source

What's Changed

test: explicitly return named variables by @G-Rath in #137
ci: show diff after running linting by @G-Rath in #136
fix: only update snapshots when actually allowed by @G-Rath in #135

Full Changelog: gkampitakis/go-snaps@v0.5.14...v0.5.15

`v0.5.14`

Compare Source

What's Changed

feat: snaps.Clean now returns if snaps dirty and err by @gkampitakis in #131

Full Changelog: gkampitakis/go-snaps@v0.5.13...v0.5.14

`v0.5.13`

Compare Source

What's Changed

feat: support MatchStandaloneYAML by @gkampitakis in #128
chore: update go-yaml and gh-action deps by @gkampitakis in #129

Full Changelog: gkampitakis/go-snaps@v0.5.12...v0.5.13

`v0.5.12`

Compare Source

What's Changed

feat: add UPDATE_SNAPS=always for updating and creating snaps on CI setup by @gkampitakis in #126

Full Changelog: gkampitakis/go-snaps@v0.5.11...v0.5.12

`v0.5.11`

Compare Source

What's Changed

feat: add json format config by @kitimark in #121

New Contributors

@kitimark made their first contribution in #121

Full Changelog: gkampitakis/go-snaps@v0.5.10...v0.5.11

`v0.5.10`

Compare Source

What's Changed

fix: handle builds with trimpath enabled by @gkampitakis in #120

Full Changelog: gkampitakis/go-snaps@v0.5.9...v0.5.10

`v0.5.9`

Compare Source

What's Changed

fix: snaps.Update should apply and on snapshot create by @gkampitakis in #119

Full Changelog: gkampitakis/go-snaps@`v0.5.8...v0.5.9`

Kudos to @orloffv for this issue #116

`v0.5.8`

Compare Source

What's Changed

feat: implement matchYAML by @gkampitakis in #114
feat: implement matchStandaloneJSON by @gkampitakis in #113

Full Changelog: gkampitakis/go-snaps@v0.5.7...v0.5.8

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.20.8`

Compare Source

`v0.20.7`

Compare Source

What's Changed

Fix ArgsEscaped lint directive by @Subserial in #2137
transport: Fix broken links to distribution docs by @guzalv in #2136
fix(remote): using customized retry predicate func if provided by @derekhjray in #2135
Adding docker file by @HassanJasim in #2138
crane: Add timestamp to flatten layer by @Stephanie0829 in #2117
feat(remote): pass retryBackoff option to transport by @aslafy-z in #1628
Expose clobber refusal error by @pjbgf in #2146
Build artifacts for riscv64 by @ffgan in #2159
Update dependencies and deprecate DockerVersion field by @Subserial in #2164

New Contributors

@guzalv made their first contribution in #2136
@derekhjray made their first contribution in #2135
@HassanJasim made their first contribution in #2138
@Stephanie0829 made their first contribution in #2117
@pjbgf made their first contribution in #2146
@ffgan made their first contribution in #2159

Full Changelog: google/go-containerregistry@v0.20.6...v0.20.7

`v0.20.6`

Compare Source

What's Changed

Ensure that tag name is not empty if name contains colon by @SaschaSchwarze0 in #2094
Bump some deps by @jonjohnsonjr in #2110

New Contributors

@SaschaSchwarze0 made their first contribution in #2094

Full Changelog: google/go-containerregistry@v0.20.4...v0.20.6

`v0.20.5`

Compare Source

What's Changed

build(deps): bump docker/docker to v28.0.0+incompatible by @luhring in #2071
Migrate linter to v2 by @Subserial in #2096
bump go version + bump deps by @Subserial in #2093
implement TextMarshaler/JSONMarshaler more consistently by @imjasonh in #2097
Update CodeQL permissions by @Subserial in #2103
Update goreleaser permissions by @Subserial in #2104
Update provenance action in release by @Subserial in #2105
Update validator action by @Subserial in #2106

New Contributors

@luhring made their first contribution in #2071
@Subserial made their first contribution in #2096

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.5

`v0.20.4`: - Not usable as a go module

Compare Source

🚨 This release was published to the Go module proxy and then re-tagged with a different commit. This means it's not usable as a Go module (#2107) -- please us v0.20.5 instead.

What's Changed

build(deps): bump docker/docker to v28.0.0+incompatible by @luhring in #2071
Migrate linter to v2 by @Subserial in #2096
bump go version + bump deps by @Subserial in #2093
implement TextMarshaler/JSONMarshaler more consistently by @imjasonh in #2097
Update CodeQL permissions by @Subserial in #2103
Update goreleaser permissions by @Subserial in #2104
Update provenance action in release by @Subserial in #2105
Update validator action by @Subserial in #2106

New Contributors

@luhring made their first contribution in #2071
@Subserial made their first contribution in #2096

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.4

`v0.20.3`

Compare Source

What's Changed

remote/transport: Make bearer transport go-routine-safe by @2opremio in #1806
Expose compare package by @jonjohnsonjr in #2001
fix: redact.URL uses (*URL).Redacted to omit basic-auth password by @bmoylan in #1947
bump actions to latest by @ajayk in #2011
don't pin chainguard-dev/actions by @imjasonh in #2025
Check for 406 status code when handling referrers API endpoint response by @malancas in #2026
mutate: Create a defensive annotations copy by @jonjohnsonjr in #2030
Detect zstd in crane append by @jonjohnsonjr in #2023
bump deps using hack/bump-deps.sh by @imjasonh in #2042

New Contributors

@bmoylan made their first contribution in #1947
@ajayk made their first contribution in #2011
@malancas made their first contribution in #2026

Full Changelog: google/go-containerregistry@v0.20.2...v0.20.3

otiai10/copy (github.com/otiai10/copy)

`v1.14.1`

Compare Source

package-url/packageurl-go (github.com/package-url/packageurl-go)

`v0.1.4`

Compare Source

What's Changed

Fix golangci and update versions by @shibumi in #76
Allow npm names to be case sensitive by @PFCM in #73
add custom validation for pkg:cpan by @petergardfjall in #79
move cpan to known types by @nikpivkin in #71
Run tests using reference data from purl-spec by @keshav-space in #80
update code to honor the canonical purl encoding by @petergardfjall in #83

New Contributors

@PFCM made their first contribution in #73
@nikpivkin made their first contribution in #71
@keshav-space made their first contribution in #80

Full Changelog: package-url/packageurl-go@v0.1.3...v0.1.4

secure-systems-lab/go-securesystemslib (github.com/secure-systems-lab/go-securesystemslib)

`v0.9.1`

Compare Source

sigstore/cosign (github.com/sigstore/cosign/v2)

`v2.4.3`

Compare Source

Features

Bump sigstore/sigstore to support KMS plugins (#4073)
Enable fetching signatures without remote get. (#4047)
Feat/file flag completion improvements (#4028)
Update builder to use go1.23.6 (#4052)

Bug Fixes

fix parsing error in --only for cosign copy (#4049)

Cleanup

Refactor verifyNewBundle into library function (#4013)
fix comment typo and imports order (#4061)
sync comment with parameter name in function signature (#4063)
sort properly Go imports (#4071)

Contributors

Bob Callaway
Carlos Tadeu Panato Junior
Cody Soyland
Dmitry Savintsev
Hayden B
Tomasz Janiszewski
Ville Skyttä

`v2.4.2`

Compare Source

Features

Updated open-policy-agent to 1.1.0 library (#4036)
- Note that only Rego v0 policies are supported at this time
Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
Add support for verifying root checksum in cosign initialize (#3953)
Detect if user supplied a valid protobuf bundle (#3931)
Add a log message if user doesn't provide --trusted-root (#3933)
Support mTLS towards container registry (#3922)
Add bundle create helper command (#3901)
Add trusted-root create helper command (#3876)

Bug Fixes

fix: set tls config while retaining other fields from default http transport (#4007)
policy fuzzer: ignore known panics (#3993)
Fix for multiple WithRemote options (#3982)
Add nightly conformance test workflow (#3979)
Fix copy --only for signatures + update/align docs (#3904)

Documentation

Remove usage.md from spec, point to client spec (#3918)
move reference from gcr to ghcr (#3897)

Contributors

AdamKorcz
Aditya Sirish
Bob Callaway
Carlos Tadeu Panato Junior
Cody Soyland
Colleen Murphy
Hayden B
Jussi Kukkonen
Marco Franssen
Nianyu Shen
Slavek Kabrda
Søren Juul
Warren Hodgkinson
Zach Steindler

sigstore/rekor (github.com/sigstore/rekor)

`v1.3.10`

Compare Source

Note that Rekor v1 is in maintenance mode as we are actively developing
its successor, Rekor v2, designed to be easy to maintain and cheaper to operate.. See the
README
for more information.

Features

Added --client-signing-algorithms flag (#1974)

Fixes / Misc

emit unpopulated values when marshalling (#2438)
pkg/api: better logs when algorithm registry rejects a key (#2429)
chore: improve mysql readiness checks (#2397)

Contributors

Bob Callaway
cangqiaoyuzhuo
Carlos Tadeu Panato Junior
cpanato
Hayden B
Praful Khanduri
Ramon Petgrave
Riccardo Schirone
rubyisrust
Sascha Grunert

`v1.3.9`

Compare Source

Features

Cache checkpoint for inactive shards (#2332)
Support per-shard signing keys (#2330)

Contributors

Hayden B

`v1.3.8`

Compare Source

Bug Fixes

fix zizmor issues (#2298)
remove unneeded value in log message (#2282)

Quality Enhancements

chore: relax go directive to permit 1.22.x
fetch minisign from homebrew instead of custom ppa (#2329)
fix(ci): simplify GOVERSION extraction
chore(deps): bump actions pins to latest
Updates go and golangci-lint (#2302)
update builder to use go1.23.4 (#2301)
clean up spaces
log request body on 500 error to aid debugging (#2283)

Contributors

Appu Goundan
Bob Callaway
Carlos Tadeu Panato Junior
Dominic Evans
sgpinkus

`v1.3.7`

Compare Source

New Features

log request body on 500 error to aid debugging (#2283)
Add support for signing with Tink keyset (#2228)
Add public key hash check in Signed Note verification (#2214)
update Trillian TLS configuration (#2202)
Add TLS support for Trillian server (#2164)
Replace docker-compose with plugin if available (#2153)
Add flags to backfill script (#2146)
Unset DisableKeepalive for backfill HTTP client (#2137)
Add script to delete indexes from Redis (#2120)
Run CREATE statement in backfill script (#2109)
Add MySQL support to backfill script (#2081)
Run e2e tests on mysql and redis index backends (#2079)

Bug Fixes

remove unneeded value in log message (#2282)
Add error message when computing consistency proof (#2278)
fix validation error handling on API (#2217)
fix error in pretty-printed inclusion proof from verify subcommand (#2210)
Fix index scripts (#2203)
fix failing sharding test
Better error handling in backfill script (#2148)
Batch entries in cleanup script (#2158)
Add missing workflow for index cleanup test (#2121)
hashedrekord: fix schema $id (#2092)

Contributors

Aditya Sirish
Bob Callaway
Colleen Murphy
cpanato
Firas Ghanmi
Hayden B
Hojoung (Brian) Jang
William Woodruff

sirupsen/logrus (github.com/sirupsen/logrus)

`v1.9.4`

Compare Source

Notable changes

go.mod: update minimum supported go version to v1.17 #1460
go.mod: bump up dependencies #1460
Touch-up godoc and add "doc" links.
README: fix links, grammar, and update examples.
Add GNU/Hurd support #1364
Add WASI wasip1 support #1388
Remove uses of deprecated ioutil package #1472
CI: update actions and golangci-lint #1459
CI: remove appveyor, add macOS #1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

spf13/pflag (github.com/spf13/pflag)

`v1.0.10`

Compare Source

What's Changed

fix deprecation comment for (FlagSet.)ParseErrorsWhitelist by @thaJeztah in #447
remove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by @thaJeztah in #448

New Contributors

@thaJeztah made their first contribution in #447

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

`v1.0.9`

Compare Source

What's Changed

fix: Restore ParseErrorsWhitelist name for now by @tomasaschan in #446

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

`v1.0.8`

Compare Source

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be f

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-12-09T15:37:04Z

ℹ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

28 additional dependencies were updated

Details:

Package	Change
`github.com/sigstore/sigstore`	`v1.8.15` -> `v1.9.1`
`github.com/Azure/go-ansiterm`	`v0.0.0-20230124172434-306776ec8161` -> `v0.0.0-20250102033503-faa5f7b0171c`
`github.com/containerd/stargz-snapshotter/estargz`	`v0.15.1` -> `v0.18.1`
`github.com/docker/cli`	`v27.2.0+incompatible` -> `v29.0.3+incompatible`
`github.com/docker/docker`	`v27.2.0+incompatible` -> `v28.5.2+incompatible`
`github.com/docker/docker-credential-helpers`	`v0.8.2` -> `v0.9.3`
`github.com/gkampitakis/ciinfo`	`v0.3.0` -> `v0.3.2`
`github.com/go-openapi/errors`	`v0.22.0` -> `v0.22.1`
`github.com/go-openapi/swag`	`v0.23.0` -> `v0.23.1`
`github.com/google/certificate-transparency-go`	`v1.2.1` -> `v1.3.1`
`github.com/magiconair/properties`	`v1.8.7` -> `v1.8.9`
`github.com/mailru/easyjson`	`v0.7.7` -> `v0.9.0`
`github.com/mitchellh/mapstructure`	`v1.5.0` -> `v1.5.1-0.20231216201459-8508981c8b6c`
`github.com/moby/term`	`v0.5.0` -> `v0.5.2`
`github.com/rogpeppe/go-internal`	`v1.13.1` -> `v1.13.2-0.20241226121412-a5dc8ff20d0a`
`github.com/sergi/go-diff`	`v1.3.2-0.20230802210424-5b0b94c5c0d3` -> `v1.4.0`
`github.com/sigstore/protobuf-specs`	`v0.4.0` -> `v0.4.1`
`github.com/sigstore/timestamp-authority`	`v1.2.2` -> `v1.2.4`
`github.com/spf13/cobra`	`v1.9.1` -> `v1.10.1`
`github.com/spf13/pflag`	`v1.0.6` -> `v1.0.9`
`github.com/tidwall/gjson`	`v1.17.3` -> `v1.18.0`
`github.com/vbatts/tar-split`	`v0.11.5` -> `v0.12.2`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.60.0` -> `v0.61.0`
`golang.org/x/mod`	`v0.29.0` -> `v0.30.0`
`golang.org/x/oauth2`	`v0.30.0` -> `v0.33.0`
`golang.org/x/sync`	`v0.17.0` -> `v0.18.0`
`golang.org/x/sys`	`v0.37.0` -> `v0.38.0`
`google.golang.org/api`	`v0.217.0` -> `v0.228.0`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

38 additional dependencies were updated

Details:

Package	Change
`github.com/open-policy-agent/opa`	`v0.70.0` -> `v1.1.0`
`cloud.google.com/go/auth`	`v0.14.0` -> `v0.14.1`
`cloud.google.com/go/storage`	`v1.43.0` -> `v1.45.0`
`github.com/aws/aws-sdk-go`	`v1.55.5` -> `v1.55.6`
`github.com/aws/aws-sdk-go-v2/config`	`v1.29.1` -> `v1.29.6`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.17.54` -> `v1.17.59`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.16.24` -> `v1.16.28`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.3.28` -> `v1.3.32`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.28` -> `v2.6.32`
`github.com/aws/aws-sdk-go-v2/internal/ini`	`v1.8.1` -> `v1.8.2`
`github.com/aws/aws-sdk-go-v2/service/ecr`	`v1.32.2` -> `v1.40.3`
`github.com/aws/aws-sdk-go-v2/service/ecrpublic`	`v1.25.4` -> `v1.31.2`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.12.1` -> `v1.12.2`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.12.9` -> `v1.12.13`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.24.11` -> `v1.24.15`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.28.10` -> `v1.28.14`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.33.9` -> `v1.33.14`
`github.com/awslabs/amazon-ecr-credential-helper/ecr-login`	`v0.0.0-20240826150212-5dc58b6e29f8` -> `v0.9.1`
`github.com/docker/cli`	`v27.5.0+incompatible` -> `v28.2.2+incompatible`
`github.com/docker/docker-credential-helpers`	`v0.8.2` -> `v0.9.3`
`github.com/gkampitakis/ciinfo`	`v0.3.0` -> `v0.3.2`
`github.com/google/certificate-transparency-go`	`v1.2.1` -> `v1.3.1`
`github.com/google/flatbuffers`	`v24.3.25+incompatible` -> `v24.12.23+incompatible`
`github.com/jmespath/go-jmespath`	`v0.4.0` -> `v0.4.1-0.20220621161143-b0104c826a24`
`github.com/magiconair/properties`	`v1.8.7` -> `v1.8.9`
`github.com/mitchellh/mapstructure`	`v1.5.0` -> `v1.5.1-0.20231216201459-8508981c8b6c`
`github.com/rogpeppe/go-internal`	`v1.13.1` -> `v1.13.2-0.20241226121412-a5dc8ff20d0a`
`github.com/sergi/go-diff`	`v1.3.2-0.20230802210424-5b0b94c5c0d3` -> `v1.4.0`
`github.com/sigstore/fulcio`	`v1.6.3` -> `v1.6.6`
`github.com/sigstore/rekor`	`v1.3.6` -> `v1.3.9`
`github.com/sigstore/timestamp-authority`	`v1.2.2` -> `v1.2.4`
`github.com/tidwall/gjson`	`v1.17.0` -> `v1.18.0`
`github.com/vbatts/tar-split`	`v0.11.6` -> `v0.12.1`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.60.0` -> `v0.61.0`
`go.step.sm/crypto`	`v0.51.2` -> `v0.57.0`
`google.golang.org/api`	`v0.217.0` -> `v0.221.0`
`k8s.io/api`	`v0.34.2` -> `v0.34.3`
`sigs.k8s.io/release-utils`	`v0.8.4` -> `v0.11.0`

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`github.com/tektoncd/triggers`	`v0.29.0` -> `v0.29.1`

renovate · 2025-12-12T06:18:00Z

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

28 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.6` -> `1.25.6`
`github.com/sigstore/sigstore`	`v1.8.15` -> `v1.9.1`
`github.com/Azure/go-ansiterm`	`v0.0.0-20230124172434-306776ec8161` -> `v0.0.0-20250102033503-faa5f7b0171c`
`github.com/containerd/stargz-snapshotter/estargz`	`v0.15.1` -> `v0.18.2`
`github.com/docker/cli`	`v27.2.0+incompatible` -> `v29.2.1+incompatible`
`github.com/docker/docker`	`v27.2.0+incompatible` -> `v28.5.2+incompatible`
`github.com/docker/docker-credential-helpers`	`v0.8.2` -> `v0.9.3`
`github.com/gkampitakis/ciinfo`	`v0.3.0` -> `v0.3.2`
`github.com/go-openapi/errors`	`v0.22.0` -> `v0.22.1`
`github.com/go-openapi/swag`	`v0.23.0` -> `v0.23.1`
`github.com/google/certificate-transparency-go`	`v1.2.1` -> `v1.3.1`
`github.com/klauspost/compress`	`v1.18.2` -> `v1.18.4`
`github.com/magiconair/properties`	`v1.8.7` -> `v1.8.9`
`github.com/mailru/easyjson`	`v0.7.7` -> `v0.9.0`
`github.com/mitchellh/mapstructure`	`v1.5.0` -> `v1.5.1-0.20231216201459-8508981c8b6c`
`github.com/moby/term`	`v0.5.0` -> `v0.5.2`
`github.com/sergi/go-diff`	`v1.3.2-0.20230802210424-5b0b94c5c0d3` -> `v1.4.0`
`github.com/sigstore/protobuf-specs`	`v0.4.0` -> `v0.4.1`
`github.com/sigstore/timestamp-authority`	`v1.2.2` -> `v1.2.4`
`github.com/spf13/cobra`	`v1.9.1` -> `v1.10.2`
`github.com/spf13/pflag`	`v1.0.6` -> `v1.0.9`
`github.com/tidwall/gjson`	`v1.17.3` -> `v1.18.0`
`github.com/vbatts/tar-split`	`v0.11.5` -> `v0.12.2`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.60.0` -> `v0.61.0`
`golang.org/x/mod`	`v0.29.0` -> `v0.33.0`
`golang.org/x/oauth2`	`v0.30.0` -> `v0.35.0`
`golang.org/x/sync`	`v0.18.0` -> `v0.19.0`
`golang.org/x/sys`	`v0.38.0` -> `v0.41.0`
`google.golang.org/api`	`v0.217.0` -> `v0.228.0`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

37 additional dependencies were updated

Details:

Package	Change
`github.com/open-policy-agent/opa`	`v0.70.0` -> `v1.1.0`
`cloud.google.com/go/auth`	`v0.14.0` -> `v0.14.1`
`cloud.google.com/go/storage`	`v1.43.0` -> `v1.45.0`
`github.com/aws/aws-sdk-go`	`v1.55.5` -> `v1.55.6`
`github.com/aws/aws-sdk-go-v2/config`	`v1.29.1` -> `v1.29.6`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.17.54` -> `v1.17.59`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.16.24` -> `v1.16.28`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.3.28` -> `v1.3.32`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.28` -> `v2.6.32`
`github.com/aws/aws-sdk-go-v2/internal/ini`	`v1.8.1` -> `v1.8.2`
`github.com/aws/aws-sdk-go-v2/service/ecr`	`v1.32.2` -> `v1.40.3`
`github.com/aws/aws-sdk-go-v2/service/ecrpublic`	`v1.25.4` -> `v1.31.2`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.12.1` -> `v1.12.2`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.12.9` -> `v1.12.13`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.24.11` -> `v1.24.15`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.28.10` -> `v1.28.14`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.33.9` -> `v1.33.14`
`github.com/awslabs/amazon-ecr-credential-helper/ecr-login`	`v0.0.0-20240826150212-5dc58b6e29f8` -> `v0.9.1`
`github.com/docker/cli`	`v27.5.0+incompatible` -> `v28.2.2+incompatible`
`github.com/docker/docker-credential-helpers`	`v0.8.2` -> `v0.9.3`
`github.com/gkampitakis/ciinfo`	`v0.3.0` -> `v0.3.2`
`github.com/google/certificate-transparency-go`	`v1.2.1` -> `v1.3.1`
`github.com/google/flatbuffers`	`v24.3.25+incompatible` -> `v24.12.23+incompatible`
`github.com/jmespath/go-jmespath`	`v0.4.0` -> `v0.4.1-0.20220621161143-b0104c826a24`
`github.com/magiconair/properties`	`v1.8.7` -> `v1.8.9`
`github.com/mitchellh/mapstructure`	`v1.5.0` -> `v1.5.1-0.20231216201459-8508981c8b6c`
`github.com/sergi/go-diff`	`v1.3.2-0.20230802210424-5b0b94c5c0d3` -> `v1.4.0`
`github.com/sigstore/fulcio`	`v1.6.3` -> `v1.6.6`
`github.com/sigstore/rekor`	`v1.3.6` -> `v1.3.9`
`github.com/sigstore/timestamp-authority`	`v1.2.2` -> `v1.2.4`
`github.com/tidwall/gjson`	`v1.17.0` -> `v1.18.0`
`github.com/vbatts/tar-split`	`v0.11.6` -> `v0.12.1`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.60.0` -> `v0.61.0`
`go.step.sm/crypto`	`v0.51.2` -> `v0.57.0`
`google.golang.org/api`	`v0.217.0` -> `v0.221.0`
`k8s.io/api`	`v0.34.2` -> `v0.34.4`
`sigs.k8s.io/release-utils`	`v0.8.4` -> `v0.11.0`

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`github.com/tektoncd/triggers`	`v0.29.0` -> `v0.29.1`

dheerajodha · 2026-02-26T15:02:10Z

Closing this PR as part of the larger effort to stop the renovate bot from create PR that upgrade Go versions automatically (refer: EC-1663), we prefer to do that manually.

renovate Bot added release-v0.6 renovate labels Oct 1, 2025

renovate Bot enabled auto-merge October 1, 2025 09:22

renovate Bot force-pushed the renovate/release-v0.6-patch-go-modules branch 12 times, most recently from 2a41294 to 71d3c93 Compare October 8, 2025 12:55

renovate Bot force-pushed the renovate/release-v0.6-patch-go-modules branch 10 times, most recently from d3a7685 to f8d3990 Compare October 16, 2025 04:54

renovate Bot force-pushed the renovate/release-v0.6-patch-go-modules branch 5 times, most recently from 58bc620 to 1fc64ca Compare October 20, 2025 05:14

renovate Bot force-pushed the renovate/release-v0.6-patch-go-modules branch 10 times, most recently from 2fccf04 to 52beec9 Compare November 8, 2025 04:49

renovate Bot force-pushed the renovate/release-v0.6-patch-go-modules branch 7 times, most recently from 49ab407 to e3c0f0c Compare November 16, 2025 02:16

renovate Bot force-pushed the renovate/release-v0.6-patch-go-modules branch 8 times, most recently from 6777451 to f75800b Compare November 24, 2025 01:48

renovate Bot force-pushed the renovate/release-v0.6-patch-go-modules branch from f75800b to a891e83 Compare November 25, 2025 00:37

Update go modules

025adf3

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update go modules (release-v0.6) (patch)#2985

Update go modules (release-v0.6) (patch)#2985
renovate[bot] wants to merge 1 commit intorelease-v0.6from
renovate/release-v0.6-patch-go-modules

renovate Bot commented Oct 1, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Dec 9, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Dec 12, 2025 •

edited

Loading

Uh oh!

dheerajodha commented Feb 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Oct 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Evaluator

cmd/cue

Added

Changed

Fixed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.8...v0.5.9

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

v0.20.4: - Not usable as a go module

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Features

Bug Fixes

Cleanup

Contributors

Features

Bug Fixes

Documentation

Contributors

Features

Fixes / Misc

Contributors

Features

Contributors

Bug Fixes

Quality Enhancements

Contributors

New Features

Bug Fixes

Contributors

Notable changes

What's Changed

New Contributors

What's Changed

⚠️ Breaking Change

Configuration

Uh oh!

renovate Bot commented Dec 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: acceptance/go.mod

File name: go.mod

File name: tools/go.mod

Uh oh!

renovate Bot commented Dec 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: acceptance/go.mod

File name: go.mod

File name: tools/go.mod

Uh oh!

dheerajodha commented Feb 26, 2026

Uh oh!

Reviewers

renovate Bot commented Oct 1, 2025 •

edited

Loading

`cmd/cue`

Full Changelog: gkampitakis/go-snaps@`v0.5.8...v0.5.9`

`v0.20.4`: - Not usable as a go module

renovate Bot commented Dec 9, 2025 •

edited

Loading

renovate Bot commented Dec 12, 2025 •

edited

Loading