chore(deps): bump the go-dependencies group across 1 directory with 13 updates - #4429
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
andaaron
reviewed
Sep 17, 2026
| module zotregistry.dev/zot/v2 | ||
|
|
||
| go 1.26.3 | ||
| go 1.27.0 |
…3 updates Bumps the go-dependencies group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `1.8.0` | `1.8.1` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.45.1` | `1.47.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.2` | `1.33.4` | | [github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue](https://github.com/aws/aws-sdk-go-v2) | `1.21.2` | `1.21.4` | | [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.66.0` | `1.68.0` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.63.0` | `1.65.0` | | [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.47.0` | `1.49.0` | | [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.4` | `4.1.5` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.22.0` | `0.22.1` | | [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.10.9` | `1.10.10` | | [github.com/zitadel/oidc/v3](https://github.com/zitadel/oidc) | `3.49.4` | `3.49.6` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.56.0` | `0.57.0` | | [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.24.1` | `0.25.0` | Updates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.8.0 to 1.8.1 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.8.0...sdk/azidentity/v1.8.1) Updates `github.com/aws/aws-sdk-go-v2` from 1.45.1 to 1.47.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.45.1...v1.47.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.2 to 1.33.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.33.2...config/v1.33.4) Updates `github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue` from 1.21.2 to 1.21.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.21.2...service/pi/v1.21.4) Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.66.0 to 1.68.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.66.0...service/s3/v1.68.0) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.63.0 to 1.65.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.63.0...service/s3/v1.65.0) Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.47.0 to 1.49.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.47.0...service/s3/v1.49.0) Updates `github.com/go-jose/go-jose/v4` from 4.1.4 to 4.1.5 - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](go-jose/go-jose@v4.1.4...v4.1.5) Updates `github.com/google/go-containerregistry` from 0.22.0 to 0.22.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.22.0...v0.22.1) Updates `github.com/sigstore/sigstore` from 1.10.9 to 1.10.10 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.10.9...v1.10.10) Updates `github.com/zitadel/oidc/v3` from 3.49.4 to 3.49.6 - [Release notes](https://github.com/zitadel/oidc/releases) - [Commits](zitadel/oidc@v3.49.4...v3.49.6) Updates `golang.org/x/crypto` from 0.56.0 to 0.57.0 - [Commits](golang/crypto@v0.56.0...v0.57.0) Updates `sigs.k8s.io/controller-runtime` from 0.24.1 to 0.25.0 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.24.1...v0.25.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.33.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue dependency-version: 1.21.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb dependency-version: 1.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.65.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager dependency-version: 1.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/go-jose/go-jose/v4 dependency-version: 4.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/google/go-containerregistry dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/sigstore/sigstore dependency-version: 1.10.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/zitadel/oidc/v3 dependency-version: 3.49.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: golang.org/x/crypto dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/go_modules/go-dependencies-d21696d16c
branch
from
September 18, 2026 07:55
fc78064 to
e8ad57b
Compare
Contributor
Author
|
Looks like these dependencies are no longer updatable, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/go_modules/go-dependencies-d21696d16c
branch
September 19, 2026 07:57
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-dependencies group with 13 updates in the / directory:
1.8.01.8.11.45.11.47.01.33.21.33.41.21.21.21.41.66.01.68.01.63.01.65.01.47.01.49.04.1.44.1.50.22.00.22.11.10.91.10.103.49.43.49.60.56.00.57.00.24.10.25.0Updates
github.com/Azure/azure-sdk-for-go/sdk/storage/azblobfrom 1.8.0 to 1.8.1Release notes
Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.
Commits
d5e09eaPrepare azidentity v1.8.1 for release (#23954)af8249dIncrement package version after release of storage/azblob (#23940)8b21042Increment package version after release of storage/azdatalake (#23958)a44e152Release storage stg96 azdatalake preview (#23957)b11c1a5Relax tenant verification for credentials having optional tenant IDs (#23951)e557039remove erroneous package inclusion during package-properties evaluation (#23948)0fb4336Increment package version after release of messaging/azservicebus (#23950)b1480a2Updating docs.microsoft.com to learn.microsoft.com (#23934)786b0beCredential chains continue iterating after unexpected IMDS responses (#23894)7d4721badd liftr base package dep to emitter dep list (#23938)Updates
github.com/aws/aws-sdk-go-v2from 1.45.1 to 1.47.0Commits
b189f38Release 2026-09-090905d5fRegenerated Clients9cc4bc5Update API model126fe2dfix GetObject deadlock (#3554)5126885Remove retry metrics header middleware (#3546)bd8de4dExpand S3 operations that check for an error inside an HTTP 200 response (wav...394ee64Release 2026-09-083c9cb8bRegenerated Clients6f85682Update endpoints modelcc3942bUpdate API modelUpdates
github.com/aws/aws-sdk-go-v2/configfrom 1.33.2 to 1.33.4Commits
b189f38Release 2026-09-090905d5fRegenerated Clients9cc4bc5Update API model126fe2dfix GetObject deadlock (#3554)5126885Remove retry metrics header middleware (#3546)bd8de4dExpand S3 operations that check for an error inside an HTTP 200 response (wav...394ee64Release 2026-09-083c9cb8bRegenerated Clients6f85682Update endpoints modelcc3942bUpdate API modelUpdates
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevaluefrom 1.21.2 to 1.21.4Commits
2de0027Release 2023-11-28f0c890cRegenerated Clientse032d9eUpdate endpoints model507661fUpdate API model4128360fix: respect functional option modifications to RetryMaxAttempts (#2390)d66ab2cRelease 2023-11-27.2a264f87Regenerated Clients7d50b35Update API model13546abRelease 2023-11-2759ce389Regenerated ClientsUpdates
github.com/aws/aws-sdk-go-v2/service/dynamodbfrom 1.66.0 to 1.68.0Commits
18fea5dRelease 2024-11-21480ffa8Regenerated Clients4075928Update endpoints model2a88650Update API modelc527ee8Release 2024-11-20fdd6839Regenerated Clients6809be0Update endpoints modelf040881Update API model249090eRelease 2024-11-19c158e16Regenerated ClientsUpdates
github.com/aws/aws-sdk-go-v2/service/ecrfrom 1.63.0 to 1.65.0Commits
7a76a2aRelease 2024-10-04e35b8beRegenerated Clients6e95871Update endpoints model0d58df3Update API model280579aadd HTTP client metrics from smithy-go (#2815)cb83a1cRelease 2024-10-038503c83Regenerated Clients317e15bUpdate endpoints model3ff5168Update API model6191b25Release 2024-10-02Updates
github.com/aws/aws-sdk-go-v2/service/secretsmanagerfrom 1.47.0 to 1.49.0Commits
4fd9126Release 2024-02-13d22cecdRegenerated Clientsb640bf5Update SDK's smithy-go dependency to v1.20.094e885cUpdate endpoints modelb3a6cd7Update API model5f328e6chore: bump min go to 1.20 (#2494)3cb2c97ci: fix CI scripts for main branch case (#2491)0e44db4Release 2024-02-121d8fb3bRegenerated Clientse4d556fUpdate API modelUpdates
github.com/go-jose/go-jose/v4from 4.1.4 to 4.1.5Release notes
Sourced from github.com/go-jose/go-jose/v4's releases.
Commits
b10771eReject typed nil at Verify time56f3866Check alg against pubkey curve during verify. (#293)74114c2cipher/cbc_hmac: don't panic on empty ciphertext (#292)6b364f3cipher/cbc_hmac: don't panic on invalid key (#291)a31af25json: limit stack depth (#290)7f5beb3jwt: reject out-of-range NumericDate values (#278)e37f31aTest on Go 1.26 and 1.27 (#284)5b371aeReject malformed Ed25519 JWKs (#250)ad7f32dBump actions/setup-python from 6 to 7 (#275)1563054Bump actions/setup-go from 6 to 7 (#274)Updates
github.com/google/go-containerregistryfrom 0.22.0 to 0.22.1Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
8a72a42remote: copy manifest annotations to referrers fallback tag descriptors (#2441)5765c35build(deps): bump the go-deps group across 2 directories with 3 updates (#2439)969402ffix(mutate): make Time layer updates lazy (#2429)25c682eflatten: preserve config and layer media types when flattening (#2438)79af990remote: add SSRF redirect protection to writer-side HTTP clients (#2432)4b9b3c7fix(release): honor declared Go toolchain (#2435)e033b9cfix(build): install binaries to /ko-app and add to PATH (#2424) (#2436)8bd7902name: return a helpful error when a reference contains a URL scheme (#2431)163134dvalidate: support index attestation manifests and empty configs (#2414)44f7ea3fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml (#2434)Updates
github.com/sigstore/sigstorefrom 1.10.9 to 1.10.10Release notes
Sourced from github.com/sigstore/sigstore's releases.
Commits
49e21e5build(deps): Bump github.com/google/go-containerregistry from 0.21.9 to 0.22....eda3b60build(deps): Bump the gomod group across 4 directories with 4 updates (#2413)b3e2728Adjust mldsa error handling (#2417)bfbf63eSupport for ML-DSA keys (#2416)538e3faBump go to 1.27 and fix linter and api issues (#2415)e8841f5build(deps): Bump hashicorp/vault in /test/e2e in the all group (#2412)5b3d739Fix Azure KMS ECDSA signature verification (r||s ordering + padding) (#2410)ba4de68build(deps): Bump github.com/aws/aws-sdk-go-v2/config (#2406)1abceddbuild(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#2407)d579148build(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms (#2404)Updates
github.com/zitadel/oidc/v3from 3.49.4 to 3.49.6Release notes
Sourced from github.com/zitadel/oidc/v3's releases.
Commits
cb9e7dffix(oidc): map ErrSubjectInvalid to invalid_grant instead of server_error (#950)2d0c9cbfix(op): stop double-decoding redirect_uri in authorization requests (#969)24d9a1bchore(deps): bump github/codeql-action from 4.37.8 to 4.37.9 (#970)Updates
golang.org/x/cryptofrom 0.56.0 to 0.57.0Commits
3f62bf1go.mod: update golang.org/x dependenciesUpdates
sigs.k8s.io/controller-runtimefrom 0.24.1 to 0.25.0Release notes
Sourced from sigs.k8s.io/controller-runtime's releases.
... (truncated)
Commits
e8f9455🐛 fakeclient: Allow updating managedFields through Update (#3585)0cc1315Merge pull request #3565 from dongjiang1989/fix-leakfa96780🐛 Fix goroutine leaks in cache Start() methods1f5514b✨ Add a read-your-own-write client (#3472)df386c7🌱 Bump to golangci-lint v2.13.1 (#3580)dc7618fMerge pull request #3583 from pujitha24/auto/issue-358237fe235🐛 fake: fix AddIndex panic when client is wrapped with an interceptor01c7782✨ Allow overriding REST client latency histogram buckets (#3573)857be80Merge pull request #3576 from demirdilek/fix-leaderelection-contextual-loggingb1387beMerge pull request #3581 from alvaroaleman/fake-consistent