Update Go Dependencies by red-hat-konflux[bot] · Pull Request #386 · securesign/fulcio

red-hat-konflux · 2026-05-11T11:42:46Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
chainguard.dev/sdk	require	patch	`v0.1.54` → `v0.1.76`	`v0.1.90` (+13)
cloud.google.com/go/iam	indirect	minor	`v1.9.0` → `v1.11.0`
cloud.google.com/go/kms	indirect	minor	`v1.29.0` → `v1.31.0`
cloud.google.com/go/security	require	minor	`v1.22.0` → `v1.25.0`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.21.1` → `v1.22.0`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	minor	`v1.13.1` → `v1.14.0`
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys	indirect	minor	`v1.4.0` → `v1.5.0`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	patch	`v1.7.1` → `v1.7.2`
github.com/Masterminds/semver/v3	indirect	minor	`v3.3.1` → `v3.5.0`
github.com/ThalesGroup/crypto11	require	patch	`v1.6.0` → `v1.6.1`
github.com/aws/aws-sdk-go-v2	indirect	minor	`v1.41.6` → `v1.42.0`
github.com/aws/aws-sdk-go-v2/config	indirect	patch	`v1.32.16` → `v1.32.25`
github.com/aws/aws-sdk-go-v2/credentials	indirect	patch	`v1.19.15` → `v1.19.24`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	patch	`v1.18.22` → `v1.18.29`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	patch	`v1.4.22` → `v1.4.29`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	indirect	patch	`v2.7.22` → `v2.7.29`
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	patch	`v1.4.23` → `v1.4.30`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	patch	`v1.13.8` → `v1.13.12`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	patch	`v1.13.22` → `v1.13.29`
github.com/aws/aws-sdk-go-v2/service/kms	indirect	minor	`v1.51.0` → `v1.53.4`
github.com/aws/aws-sdk-go-v2/service/signin	indirect	minor	`v1.0.10` → `v1.2.0`
github.com/aws/aws-sdk-go-v2/service/sso	indirect	minor	`v1.30.16` → `v1.31.3`
github.com/aws/aws-sdk-go-v2/service/sts	indirect	minor	`v1.42.0` → `v1.43.3`
github.com/aws/smithy-go	indirect	minor	`v1.25.0` → `v1.27.2`
github.com/bmatcuk/doublestar/v4	indirect	minor	`v4.9.1` → `v4.10.0`
github.com/cenkalti/backoff/v4	indirect	major	`v4.3.0` → `v6.0.1`
github.com/cenkalti/backoff/v5	indirect	major	`v5.0.3` → `v6.0.1`
github.com/clipperhouse/displaywidth	indirect	minor	`v0.10.0` → `v0.11.0`
github.com/clipperhouse/uax29/v2	indirect	minor	`v2.6.0` → `v2.7.0`
github.com/coreos/go-oidc/v3	require	minor	`v3.18.0` → `v3.19.0`
github.com/fatih/color	indirect	minor	`v1.18.0` → `v1.19.0`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/fsnotify/fsnotify	require	minor	`v1.9.0` → `v1.10.1`
github.com/go-jose/go-jose/v3	indirect	major	`v3.0.5` → `v4.1.4`
github.com/go-viper/mapstructure/v2	indirect	minor	`v2.4.0` → `v2.5.0`
github.com/golang-jwt/jwt/v5	indirect	patch	`v5.3.0` → `v5.3.1`
github.com/google/go-containerregistry	indirect	patch	`v0.21.5` → `v0.21.7`
github.com/googleapis/api-linter/v2	indirect	minor	`v2.0.0` → `v2.3.1`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.15` → `v0.3.16`	`v0.3.17`
github.com/grpc-ecosystem/go-grpc-middleware	require	major	`v1.4.0` → `v2.3.3`
github.com/grpc-ecosystem/grpc-gateway/v2	indirect	minor	`v2.27.3` → `v2.29.0`
github.com/grpc-ecosystem/grpc-gateway/v2	require	minor	`v2.28.0` → `v2.29.0`
github.com/hashicorp/hcl	indirect	major	`v1.0.1-vault-7` → `v2.24.0`
github.com/jellydator/ttlcache/v3	indirect	patch	`v3.4.0` → `v3.4.1`
github.com/letsencrypt/boulder	indirect	minor	`v0.20260420.0` → `v0.20260623.0`
github.com/mattn/go-colorable	indirect	patch	`v0.1.14` → `v0.1.15`
github.com/mattn/go-isatty	indirect	patch	`v0.0.20` → `v0.0.22`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.23` → `v0.0.24`
github.com/olekukonko/errors	indirect	minor	`v1.2.0` → `v1.3.0`
github.com/olekukonko/ll	indirect	patch	`v0.1.6` → `v0.1.8`
github.com/pelletier/go-toml/v2	indirect	minor	`v2.2.4` → `v2.4.1`	`v2.4.2`
github.com/prometheus/common	require	minor	`v0.67.5` → `v0.69.0`
github.com/rogpeppe/go-internal	indirect	minor	`v1.14.1` → `v1.15.0`
github.com/sigstore/sigstore	require	patch	`v1.10.5` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/aws	require	patch	`v1.10.5` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	patch	`v1.10.5` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	patch	`v1.10.5` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	require	patch	`v1.10.5` → `v1.10.8`
github.com/spiffe/go-spiffe/v2	require	minor	`v2.6.0` → `v2.8.1`
github.com/tink-crypto/tink-go-awskms/v2	require	major	`v2.1.0` → `v3.0.0`
github.com/tink-crypto/tink-go-gcpkms/v2	require	minor	`v2.2.0` → `v2.3.0`
github.com/tink-crypto/tink-go/v2	require	minor	`v2.6.0` → `v2.7.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.68.0` → `v0.69.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.68.0` → `v0.69.0`
go.opentelemetry.io/otel	indirect	minor	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	indirect	minor	`v1.42.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	indirect	minor	`v1.42.0` → `v1.44.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/sdk	indirect	minor	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.43.0` → `v1.44.0`
go.step.sm/crypto	require	minor	`v0.77.9` → `v0.83.0`	`v0.84.1` (+1)
go.uber.org/zap	require	minor	`v1.27.1` → `v1.28.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.4` → `v3.0.4`
goa.design/goa/v3	require	minor	`v3.23.4` → `v3.28.0`
golang.org/x/net	indirect	minor	`v0.53.0` → `v0.56.0`
golang.org/x/net	indirect	minor	`v0.55.0` → `v0.56.0`
golang.org/x/sync	indirect	minor	`v0.20.0` → `v0.21.0`
golang.org/x/sys	indirect	minor	`v0.43.0` → `v0.46.0`
golang.org/x/text	indirect	minor	`v0.36.0` → `v0.38.0`
google.golang.org/api	require	minor	`v0.276.0` → `v0.286.0`
google.golang.org/genproto	indirect	digest	`7cedc36` → `b703f56`
google.golang.org/genproto/googleapis/api	indirect	digest	`7cedc36` → `b703f56`
google.golang.org/genproto/googleapis/api	require	digest	`7cedc36` → `b703f56`
google.golang.org/genproto/googleapis/rpc	indirect	digest	`7cedc36` → `b703f56`
google.golang.org/grpc	indirect	minor	`v1.80.0` → `v1.81.1`
google.golang.org/grpc	require	minor	`v1.80.0` → `v1.81.1`
google.golang.org/grpc/cmd/protoc-gen-go-grpc	indirect	patch	`v1.6.1` → `v1.6.2`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

chainguard-dev/sdk (chainguard.dev/sdk)

`v0.1.76`

Compare Source

feat(bots/microflow): GitHub PR reconciler that runs microflows (#42726)

`v0.1.75`

Compare Source

feat(rebuilder): grant prod-eco-python build SA malware-status access

`v0.1.74`

Compare Source

feat(argos): ArgosVulns query API — org-scoped CGP metadata (BatchGet, ListForOrg) (#41760)

`v0.1.73`

Compare Source

feat(advisories): record grype DB provenance on detection and fixed events (#43211)

`v0.1.72`

Compare Source

feat(libraries): migrate Artifacts service to v2beta1 (#42526)

`v0.1.71`

Compare Source

feat(iam): migrate ExternalGroupRoleMapping to v2beta1 (#43160)

`v0.1.70`

Compare Source

registry: emit subdomain on pull/push events for skills attribution (#43168)

`v0.1.69`

Compare Source

graphql: add update for AWS subscriptions (#43165)

`v0.1.68`

Compare Source

policies: audit events on policy mutations (#43083)

`v0.1.67`

Compare Source

feat(iam): enrich group-mapping audit events (IdP + capabilities) (#43035)

`v0.1.66`

Compare Source

api: add Update RPC for aws marketplace subscriptions (#43141)

`v0.1.65`

Compare Source

fix(chainctl,sdk/sts): bound, retry, and fail-fast the refresh-token exchange instead of hanging or going interactive (CUS-839) (#42233)

`v0.1.64`

Compare Source

feat(AddChart): allow users to specify a tag (#42952)
sdk: rename AWS marketplace subscription caps and add to owner (#43008)

`v0.1.63`

Compare Source

feat(iam): migrate DFC agent to v2alpha1 Terms endpoints (#42386)

`v0.1.62`

Compare Source

graphql: add AWSMarketplaceSubscriptions and AWS_MARKETPLACE OrgKind (#42767)
feat(iam): add BatchCreateRoleBindings RPC to v2beta1 RoleBindingsService (#40816)

`v0.1.61`

Compare Source

feat(iam/proto): add SCIM sub-config to IdentityProvider (CUS-422) (#42132)

`v0.1.60`

Compare Source

add chart endpoint and charts service (#41082)

`v0.1.59`

Compare Source

Add custom APK repositories field to CustomOverlay (#41940)

`v0.1.58`

Compare Source

Full Changelog: chainguard-dev/sdk@v0.1.57...v0.1.58

`v0.1.57`

Compare Source

What's Changed

fix(sts): repoint mono-readonly trust policy to open-source-publish by @jml in #157

Full Changelog: chainguard-dev/sdk@v0.1.56...v0.1.57

`v0.1.56`

Compare Source

Full Changelog: chainguard-dev/sdk@v0.1.55...v0.1.56

`v0.1.55`

Compare Source

Full Changelog: chainguard-dev/sdk@v0.1.54...v0.1.55

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.7.2`

Compare Source

What's Changed

Adjust constants used in FMI tests by @Avery-Dunn in #608
Update version to 1.7.1 by @Avery-Dunn in #607
Add MSAL client metadata headers to IMDS managed identity requests by @Copilot in #611
Disable gzip compression #613 by @4gust in #616
Update version.go by @4gust in #617

New Contributors

@Copilot made their first contribution in #611

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.1...v1.7.2

Masterminds/semver (github.com/Masterminds/semver/v3)

`v3.5.0`

Compare Source

What's Changed

Adding more prerelease tests by @mattfarina in #273
Update constraint error messages by @mattfarina in #278
Fix edge cases by @mattfarina in #279
Adding some checks in by @mattfarina in #280
Updating deps by @mattfarina in #281
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #282
Bump actions/cache from 4.2.3 to 5.0.5 by @dependabot[bot] in #283
Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by @dependabot[bot] in #284
Updating gitignore for devcontainers by @mattfarina in #286
Fixing some quality issues by @mattfarina in #287

New Contributors

@dependabot[bot] made their first contribution in #282

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

`v3.4.0`

Compare Source

There are a few changes in this release to highlight:

Constraints now has a property IncludePrerelease. When set to true the Check and Validate methods will include prereleases.
When an AND group has one constraint with a prerelease but more than one constraint then prereleases will be included. For example, >1.0.0-beta.1 < 2. In the past this would not have included prereleases because each constraint needed to have a prerelease. Now, only one constraint needs to have a prerelease. This is considered a long standing bug fix. Note, this does not carry across OR groups. For example, >1.0.0-beta.1 < 2 || > 3. In this case, prereleases will not be included when evaluating against >3.
NewVersion coercion with leading "0"'s is restored. This can be disabled by setting the package level property CoerceNewVersion to false.

What's Changed

fix the CodeQL link by @dmitris in #257
Restore detailed errors when failed to parse with NewVersion by @mattfarina in #262
updating go version tested with by @mattfarina in #263
Restore the ability to have leading 0's with NewVersion by @mattfarina in #266
Handle pre-releases on all in an and group by @mattfarina in #267
Add property to include prereleases by @mattfarina in #268
Updating the error message handling by @mattfarina in #269
Update the release notes and readme for new version by @mattfarina in #270

New Contributors

@dmitris made their first contribution in #257

Full Changelog: Masterminds/semver@v3.3.1...v3.4.0

ThalesGroup/crypto11 (github.com/ThalesGroup/crypto11)

`v1.6.1`

Compare Source

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

`v1.42.0`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.42.0
- Feature: Add preview of standard retry changes behind AWS_NEW_RETRIES_2026 flag
github.com/aws/aws-sdk-go-v2/service/computeoptimizer: v1.53.0
- Feature: Adds new Idle Recommendation Resource types in the AWS Compute Optimizer API
github.com/aws/aws-sdk-go-v2/service/costoptimizationhub: v1.24.0
- Feature: Adds new Idle Recommendation types in the Cost Optimization Hub API
github.com/aws/aws-sdk-go-v2/service/deadline: v1.33.0
- Feature: Added optional identityCenterRegion parameter to AssociateMember APIs to allow managing memberships for users and groups in other regions.
github.com/aws/aws-sdk-go-v2/service/devopsagent: v1.6.0
- Feature: Add Asset APIs for managing versioned assets and asset files in AWS DevOps Agent agent spaces.
github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.59.0
- Feature: Add preview of standard retry changes behind AWS_NEW_RETRIES_2026 flag
github.com/aws/aws-sdk-go-v2/service/dynamodbstreams: v1.33.0
- Feature: Add preview of standard retry changes behind AWS_NEW_RETRIES_2026 flag
github.com/aws/aws-sdk-go-v2/service/mediapackagev2: v1.40.0
- Feature: Adds support for DASH Audio Timeline Patternization. This enables your DASH manifests to templatize the repeating patterns that emerge in audio segment timelines. This compacts the total timeline length, utilizing the repeat notation, such that manifests don't grow indefinitely long.
github.com/aws/aws-sdk-go-v2/service/mgn: v1.45.0
- Feature: AWS Transform discovery tool now supported as network migration input source. You can now use the AWS Transform Discovery tool as a source for network migration alongside modelizeIT, enabling hybrid network migrations for environments running both VMware and non-VMware workloads.
github.com/aws/aws-sdk-go-v2/service/observabilityadmin: v1.17.0
- Feature: CloudWatch Observability Admin extends CentralizationRuleForOrganization APIs to support metrics, enabling centralization of metrics across accounts and Regions alongside logs.
github.com/aws/aws-sdk-go-v2/service/omics: v1.44.0
- Feature: StartRunBatch API - Add EngineSettings
github.com/aws/aws-sdk-go-v2/service/sfn: v1.43.0
- Feature: Add preview of standard retry changes behind AWS_NEW_RETRIES_2026 flag
github.com/aws/aws-sdk-go-v2/service/sqs: v1.44.0
- Feature: Add preview of standard retry changes behind AWS_NEW_RETRIES_2026 flag
github.com/aws/aws-sdk-go-v2/service/swf: v1.35.0
- Feature: Add preview of standard retry changes behind AWS_NEW_RETRIES_2026 flag
github.com/aws/aws-sdk-go-v2/service/taxsettings: v1.18.0
- Feature: Adds support for additional tax information fields for Philippines, Belgium, Chile, France, Poland, and Italy in the Tax Settings API.

`v1.41.12`

Compare Source

General Highlights

Dependency Update: Update to smithy-go v1.27.1 to fix several union-related deserialization bugs in schema-serde-enabled services.
Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.41.12
- Bug Fix: Replace usages of deprecated io/ioutil package with io.
github.com/aws/aws-sdk-go-v2/service/amplifybackend: v1.33.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/appflow: v1.52.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/appintegrations: v1.38.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.47.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/chimesdkvoice: v1.29.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/cloudformation: v1.72.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/configservice: v1.64.0
- Feature: AWS Config now supports internal service-linked rules, allowing AWS service partners to deploy Config rules for customers and use the evaluation results to build enhanced features.
github.com/aws/aws-sdk-go-v2/service/connectparticipant: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/costexplorer: v1.65.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect: v1.33.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/efs: v1.42.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/emr: v1.61.0
- Feature: Added support for Spark Connect interactive sessions on Amazon EMR on EC2 with new APIs - StartSession, GetSession, GetSessionEndpoint, ListSessions, and TerminateSession. Added sessionEnabled field in RunJobFlow and DescribeCluster to enable Spark Connect endpoints on EMR clusters.
github.com/aws/aws-sdk-go-v2/service/geomaps: v1.11.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/glue: v1.143.0
- Feature: AWS Glue Interactive Sessions now supports Apache Spark Connect, enabling remote Spark execution over gRPC with minimal client-side dependencies. Adds GetSessionEndpoint and GetDashboardUrl APIs. Modifies CreateSession now accepts SPARK CONNECT session type.
github.com/aws/aws-sdk-go-v2/service/guardduty: v1.79.2
- Documentation: Remove unsupported RDS field for filter
github.com/aws/aws-sdk-go-v2/service/interconnect: v1.1.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ivs: v1.52.0
- Feature: adds UpdateAdConfiguration operation to AWS IVS low-latency APIs
github.com/aws/aws-sdk-go-v2/service/kendra: v1.61.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mediaconnect: v1.50.0
- Feature: BDD bulk update change rollout
github.com/aws/aws-sdk-go-v2/service/mediapackage: v1.40.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mediapackagevod: v1.40.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mq: v1.35.0
- Feature: BDD bulk update change rollout
github.com/aws/aws-sdk-go-v2/service/mwaaserverless: v1.1.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/opensearchserverless: v1.32.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/route53recoveryreadiness: v1.27.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/s3files: v1.1.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.252.0
- Feature: Adds the IncludedData parameter to DescribeModelCard and DescribeModelPackage. Set it to MetadataOnly to retrieve a model card without decrypt permission on the customer managed AWS KMS key (default AllData returns full content). Adds support for the MTRL Job resource in SageMaker Search.
github.com/aws/aws-sdk-go-v2/service/sagemakerruntimehttp2: v1.1.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/signerdata: v1.1.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sns: v1.40.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sustainability: v1.1.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/taxsettings: v1.17.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/uxc: v1.1.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/wickr: v1.3.0
- Feature: AWS Wickr now allows network administrators to configure a maximum session duration for non-SSO users in security groups, and display customizable consent popups to users at login for terms of use or compliance acknowledgements.
github.com/aws/aws-sdk-go-v2/service/workdocs: v1.31.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/workspaces: v1.69.0
- Feature: Adding new BDD representation of endpoint ruleset

`v1.41.11`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.41.11
- Bug Fix: Replace usages of deprecated io/ioutil package with io.
github.com/aws/aws-sdk-go-v2/service/georoutes: v1.12.0
- Feature: Add "standardRegionalEndpoints" back to fix 'Could not connect to the endpoint URL'

`v1.41.10`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.41.10
- Bug Fix: Replace usages of deprecated io/ioutil package with io.
github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.58.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ec2: v1.305.0
- Feature: Amazon EC2 now supports self-service cancellation of future-dated Capacity Reservations. A cancellation charge applies based on remaining commitment. Customers can generate a cancellation quote to review charges before confirming.
github.com/aws/aws-sdk-go-v2/service/elasticache: v1.54.0
- Feature: Amazon ElastiCache for Valkey now supports durability. This new capability is enabled through a Multi-AZ transactional log, enabling fast recovery and restart during failures.
github.com/aws/aws-sdk-go-v2/service/georoutes: v1.11.0
- Feature: Added Transit and Intermodal travel modes to CalculateRoutes. Plan routes using public transit (bus, subway, train, ferry) or combine transit with driving, taxi, and rental car segments in a single multi-modal route.
github.com/aws/aws-sdk-go-v2/service/guardduty: v1.79.0
- Feature: Amazon GuardDuty Runtime Monitoring now supports 3 new SensitiveFileModified finding types (Persistence, PrivilegeEscalation, DefenseEvasion) that detect when security-sensitive system files are modified on EC2 instances or containers, indicating potential compromise through file tampering.
github.com/aws/aws-sdk-go-v2/service/iot: v1.75.1
- Documentation: Fleet indexing documentation update
github.com/aws/aws-sdk-go-v2/service/keyspacesstreams: v1.8.0
- Feature: Added iterator description to the GetRecords API response for Amazon Keyspaces Change Data Capture (CDC) streams, enabling consumers to track their current position within the stream.
github.com/aws/aws-sdk-go-v2/service/lambda: v1.92.0
- Feature: Adds configuration for tag propagation to Lambda-managed resources.
github.com/aws/aws-sdk-go-v2/service/lexruntimeservice: v1.30.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/managedblockchain: v1.32.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/marketplacemetering: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mediaconvert: v1.92.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/medialive: v1.98.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mediastore: v1.30.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/migrationhub: v1.32.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/mturk: v1.31.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/neptune: v1.45.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/personalizeruntime: v1.34.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/pi: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/pinpoint: v1.40.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/pinpointemail: v1.30.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/polly: v1.58.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ram: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/redshift: v1.63.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/rekognition: v1.52.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi: v1.33.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/route53: v1.63.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/route53domains: v1.36.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/s3: v1.103.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.251.0
- Feature: Amazon SageMaker Job is a new service to help you manage various workloads related to model fine tuning, evaluation etc. Two job categories are supported today, AgentRFT for multi-turn agentic reinforcement fine tuning, and AgentRFTEvaluation for evaluating base model or trained model from AgentRFT.
github.com/aws/aws-sdk-go-v2/service/sagemakerjobruntime: v1.0.0
- Release: New AWS service client module
- Feature: Amazon SageMaker Job Runtime is a new service for managing trajectory data during multi-turn customization jobs. It provides APIs to send inference requests to models during job execution, mark rollouts as complete, and submit reward values for training trajectories.
github.com/aws/aws-sdk-go-v2/service/secretsmanager: v1.42.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/servicecatalog: v1.40.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sfn: v1.42.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/shield: v1.35.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/snowball: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sqs: v1.43.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/ssm: v1.69.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sso: v1.31.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/storagegateway: v1.44.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/sts: v1.43.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/swf: v1.34.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/transcribe: v1.56.0
- Feature: Release new Language locales including am-ET, es-MX, fa-AF, ht-HT, jv-ID, km-KH, my-MM, sq-AL, ne-NP. The commit shows past locales that have already been release which include cy-gb, ga-ie, gd-gb.
github.com/aws/aws-sdk-go-v2/service/transfer: v1.73.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/waf: v1.31.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/xray: v1.37.0
- Feature: Adding new BDD representation of endpoint ruleset

`v1.41.9`

Compare Source

`v1.41.8`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.41.8
- Bug Fix: Adds support for AWS_RESTRICT_FILE_PERMISSIONS for env and in-code config.
github.com/aws/aws-sdk-go-v2/config: v1.32.19
- Bug Fix: Adds support for AWS_RESTRICT_FILE_PERMISSIONS for env and in-code config.
github.com/aws/aws-sdk-go-v2/credentials: v1.19.18
- Bug Fix: Create new login cache files with 0600 on Unix platforms.
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager: v0.2.1
- Bug Fix: Feature parity for transfer manager v2 to allow range download, support checksum type config, fix error from failed transfer's follow-up due to ctx cancellation, honor mpu threshold and add back max upload parts option
github.com/aws/aws-sdk-go-v2/service/accessanalyzer: v1.49.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/amp: v1.43.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder: v1.29.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/appstream: v1.60.0
- Feature: Amazon WorkSpaces Applications now supports BYOL (Bring Your Own License). This enables customers to import their own WorkSpaces images and use them in WorkSpaces Applications.
github.com/aws/aws-sdk-go-v2/service/arcregionswitch: v1.8.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/artifact: v1.16.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/backupsearch: v1.7.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/bedrock: v1.62.0
- Feature: Add support for ModelPackageArn in Bedrock's CreateCustomModel API
github.com/aws/aws-sdk-go-v2/service/bedrockagentcore: v1.28.0
- Feature: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId and runtimeClientError to InvokeHarness.
github.com/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol: v1.41.0
- Feature: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId parameter to InvokeHarness for end-user identification.
github.com/aws/aws-sdk-go-v2/service/bedrockdataautomationruntime: v1.11.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/bedrockruntime: v1.53.0
- Feature: Support system role in message
github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.30.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/braket: v1.41.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/chatbot: v1.15.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/chimesdkmeetings: v1.34.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.33.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/cloudfrontkeyvaluestore: v1.13.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/codegurureviewer: v1.35.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/codestarconnections: v1.36.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/controlcatalog: v1.16.0
- Feature: AWS Control Catalog - Added GovernedProviders response field and inclusion filter to GetControl and ListControls APIs to identify and filter by cloud provider. Added ParameterRequirementSummary response field indicating parameter requirements.
github.com/aws/aws-sdk-go-v2/service/costoptimizationhub: v1.23.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/customerprofiles: v1.62.0
- Feature: BatchPutProfileObject API adds multiple profile objects to a domain of a given ObjectType in a single API call.
github.com/aws/aws-sdk-go-v2/service/deadline: v1.32.0
- Feature: Added support for persistent storage on Service-Managed Fleets, allowing customers to configure persistent storage that preserves data across worker sessions which reduces job startup times for workloads with large software installations or asset caches.
github.com/aws/aws-sdk-go-v2/service/detective: v1.39.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/finspacedata: v1.34.0
- Feature: Adding new BDD representation of endpoint ruleset
github.com/aws/aws-sdk-go-v2/service/georoutes: [v1.10.0](service/ge

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-05-11T11:42:48Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.25.9` -> `1.26.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260427160629-7cedc36a6bc4` -> `v0.0.0-20260526163538-3dc84a4a5aaa`
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12-0.20260120151049-f2248ac996af`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260427160629-7cedc36a6bc4` -> `v0.0.0-20260526163538-3dc84a4a5aaa`

petrpinkas · 2026-05-12T12:39:52Z

/retest

red-hat-konflux · 2026-06-18T19:39:24Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go mod tidy
go: downloading github.com/tink-crypto/tink-go-awskms/v3 v3.0.0
go: downloading go.uber.org/goleak v1.3.0
go: downloading github.com/go-rod/rod v0.116.2
go: downloading gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
go: downloading github.com/klauspost/compress v1.18.6
go: downloading go.yaml.in/yaml/v2 v2.4.4
go: downloading github.com/frankban/quicktest v1.14.6
go: downloading go.opentelemetry.io/otel/sdk/metric v1.44.0
go: downloading github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache v0.4.0
go: downloading github.com/go-test/deep v1.1.1
go: downloading github.com/hashicorp/go-hclog v1.6.3
go: downloading github.com/ysmood/goob v0.4.0
go: downloading github.com/ysmood/got v0.40.0
go: downloading github.com/ysmood/gson v0.7.3
go: downloading github.com/ysmood/fetchup v0.2.3
go: downloading github.com/ysmood/leakless v0.9.0
go: downloading github.com/kr/pretty v0.3.1
go: downloading github.com/AzureAD/microsoft-authentication-extensions-for-go/cache v0.1.1
go: downloading github.com/c2sp/wycheproof v0.0.0-20260105152342-fca0d3ba9f12
go: downloading github.com/fatih/color v1.18.0
go: downloading github.com/mattn/go-colorable v0.1.14
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/jmhodges/clock v1.2.0
go: downloading github.com/kr/text v0.2.0
go: downloading github.com/rogpeppe/go-internal v1.14.1
go: downloading gonum.org/v1/gonum v0.17.0
go: downloading github.com/envoyproxy/go-control-plane/envoy v1.37.0
go: downloading github.com/keybase/go-keychain v0.0.1
go: downloading github.com/envoyproxy/go-control-plane v0.14.0
go: downloading github.com/cncf/xds/go v0.0.0-20260202195803-dba9d589def2
go: downloading github.com/envoyproxy/protoc-gen-validate v1.3.3
go: downloading github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10
go: finding module for package github.com/grpc-ecosystem/go-grpc-middleware/v2/recovery
go: finding module for package github.com/grpc-ecosystem/go-grpc-middleware/v2/logging/zap
go: finding module for package github.com/grpc-ecosystem/go-grpc-middleware/v2/retry
go: finding module for package github.com/grpc-ecosystem/go-grpc-middleware/v2/logging/zap/ctxzap
go: github.com/sigstore/fulcio/cmd/app imports
	github.com/grpc-ecosystem/go-grpc-middleware/v2/logging/zap: module github.com/grpc-ecosystem/go-grpc-middleware/v2@latest found (v2.3.3), but does not contain package github.com/grpc-ecosystem/go-grpc-middleware/v2/logging/zap
go: github.com/sigstore/fulcio/cmd/app imports
	github.com/grpc-ecosystem/go-grpc-middleware/v2/recovery: module github.com/grpc-ecosystem/go-grpc-middleware/v2@latest found (v2.3.3), but does not contain package github.com/grpc-ecosystem/go-grpc-middleware/v2/recovery
go: github.com/sigstore/fulcio/cmd/app imports
	github.com/grpc-ecosystem/go-grpc-middleware/v2/retry: module github.com/grpc-ecosystem/go-grpc-middleware/v2@latest found (v2.3.3), but does not contain package github.com/grpc-ecosystem/go-grpc-middleware/v2/retry
go: github.com/sigstore/fulcio/pkg/log imports
	github.com/grpc-ecosystem/go-grpc-middleware/v2/logging/zap/ctxzap: module github.com/grpc-ecosystem/go-grpc-middleware/v2@latest found (v2.3.3), but does not contain package github.com/grpc-ecosystem/go-grpc-middleware/v2/logging/zap/ctxzap

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label May 11, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 4 times, most recently from a8c8072 to d19cd69 Compare May 12, 2026 07:41

petrpinkas approved these changes May 12, 2026

View reviewed changes

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 22 times, most recently from dc86bfb to 84faae5 Compare May 19, 2026 11:31

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 28 times, most recently from 2c65cc7 to b4b5a02 Compare May 29, 2026 06:22

Update Go Dependencies

e6b5a24

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update Go Dependencies#386

Update Go Dependencies#386
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/go-deps

red-hat-konflux Bot commented May 11, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented May 11, 2026 •

edited

Loading

Uh oh!

petrpinkas commented May 12, 2026

Uh oh!

red-hat-konflux Bot commented Jun 18, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

red-hat-konflux Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

petrpinkas commented May 12, 2026

Uh oh!

red-hat-konflux Bot commented Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

red-hat-konflux Bot commented May 11, 2026 •

edited

Loading

red-hat-konflux Bot commented May 11, 2026 •

edited

Loading

red-hat-konflux Bot commented Jun 18, 2026 •

edited

Loading