chore(deps): bump the go group across 1 directory with 18 updates by dependabot[bot] · Pull Request #2052 · open-component-model/ocm

dependabot · 2026-07-26T08:32:17Z

Bumps the go group with 14 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.42.1`	`1.43.0`
github.com/aws/aws-sdk-go-v2/config	`1.32.30`	`1.32.31`
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	`0.3.4`	`0.3.5`
github.com/aws/aws-sdk-go-v2/service/ecr	`1.59.1`	`1.60.0`
github.com/docker/go-connections	`0.7.0`	`0.8.0`
github.com/go-git/go-billy/v5	`5.9.0`	`5.9.1`
github.com/go-logr/logr	`1.4.3`	`1.4.4`
github.com/go-openapi/swag/conv	`0.27.0`	`0.27.3`
github.com/klauspost/compress	`1.19.0`	`1.19.1`
github.com/sigstore/cosign/v3	`3.1.1`	`3.1.2`
github.com/ulikunitz/xz	`0.5.15`	`0.5.16`
k8s.io/api	`0.36.2`	`0.36.3`
k8s.io/apiextensions-apiserver	`0.36.2`	`0.36.3`
k8s.io/cli-runtime	`0.36.2`	`0.36.3`

Updates github.com/aws/aws-sdk-go-v2 from 1.42.1 to 1.43.0

Commits

4fef345 Release 2026-07-21
6275419 Regenerated Clients
f859830 Update API model
278591d Add an option to clients to disable clock skew (#3483)
d132ac7 Fix Clock Skew according to internal specification (#3472)
03519c9 Release 2026-07-20
dda3efb Regenerated Clients
348cec0 Update API model
f4fd272 Release 2026-07-17
8e4cbc8 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.30 to 1.32.31

Commits

4fef345 Release 2026-07-21
6275419 Regenerated Clients
f859830 Update API model
278591d Add an option to clients to disable clock skew (#3483)
d132ac7 Fix Clock Skew according to internal specification (#3472)
03519c9 Release 2026-07-20
dda3efb Regenerated Clients
348cec0 Update API model
f4fd272 Release 2026-07-17
8e4cbc8 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.29 to 1.19.30

Commits

4fef345 Release 2026-07-21
6275419 Regenerated Clients
f859830 Update API model
278591d Add an option to clients to disable clock skew (#3483)
d132ac7 Fix Clock Skew according to internal specification (#3472)
03519c9 Release 2026-07-20
dda3efb Regenerated Clients
348cec0 Update API model
f4fd272 Release 2026-07-17
8e4cbc8 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.4 to 0.3.5

Commits

4fef345 Release 2026-07-21
6275419 Regenerated Clients
f859830 Update API model
278591d Add an option to clients to disable clock skew (#3483)
d132ac7 Fix Clock Skew according to internal specification (#3472)
03519c9 Release 2026-07-20
dda3efb Regenerated Clients
348cec0 Update API model
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.59.1 to 1.60.0

Commits

4d36126 Release 2024-08-20
5ba784c Regenerated Clients
d447ea1 Update API model
33d4eab Remove deprecated codestar service (#2754)
6fe0e9b Release 2024-08-19
3c84b64 Regenerated Clients
c78cc2e Update endpoints model
72a29e1 Update API model
c8a8274 Release 2024-08-16
ebfdc50 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.105.2 to 1.106.0

Commits

4fef345 Release 2026-07-21
6275419 Regenerated Clients
f859830 Update API model
278591d Add an option to clients to disable clock skew (#3483)
d132ac7 Fix Clock Skew according to internal specification (#3472)
03519c9 Release 2026-07-20
dda3efb Regenerated Clients
348cec0 Update API model
f4fd272 Release 2026-07-17
8e4cbc8 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/docker/go-connections from 0.7.0 to 0.8.0

Commits

754f906 Merge pull request #158 from thaJeztah/no_umask
20f47a1 sockets: read somaxconn from system instead of SOMAXCONN
e195e2a sockets: set socket permissions without umask hack
32c72ec Merge pull request #162 from thaJeztah/abstract_sockets
f3526e5 sockets: improve abstract Unix socket handling
fd93b41 Merge pull request #163 from thaJeztah/rm_log
d0c7559 sockets: update more tests to use tempSocketPath utility
7106f49 Merge pull request #161 from thaJeztah/todone
fa1caa7 sockets: fix some remaining TODOs in Windows code
31d55b2 Merge pull request #160 from thaJeztah/inmemory_context
Additional commits viewable in compare view

Updates github.com/go-git/go-billy/v5 from 5.9.0 to 5.9.1

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.9.1

What's Changed

build: Update module golang.org/x/net to v0.55.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-billy#216

build: Update module golang.org/x/text to v0.39.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-billy#230

build: Update module golang.org/x/net to v0.56.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-billy#229

Full Changelog: go-git/go-billy@v5.9.0...v5.9.1

Commits

19ea4dd Merge pull request #229 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...
8923518 build: Update module golang.org/x/net to v0.56.0 [SECURITY]
306e011 Merge pull request #230 from go-git/renovate/releases/v5.x-go-golang.org-x-te...
6108d3a build: Update module golang.org/x/text to v0.39.0 [SECURITY]
f135070 Merge pull request #216 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...
473e72c build: Update module golang.org/x/net to v0.55.0 [SECURITY]
See full diff in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

drop +build tags by @pohly in go-logr/logr#401

CI: avoid floating dependencies, fix issues by @pohly in go-logr/logr#432

Bump to Go 1.26 by @thockin in go-logr/logr#445

funcr: bound slog.Group nesting depth to prevent stack overflow by @martinholovsky in go-logr/logr#447

funcr: Handle and test recursive values by @thockin in go-logr/logr#446

New Contributors

@martinholovsky made their first contribution in go-logr/logr#447

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits

96a9aba Fix lint
51c6302 Better implementation of pointer recursion checking
c667114 funcr: Handle and test recursive values
f7ffadb Add benchmark for pointer args
e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
0b40896 build(deps): bump github/codeql-action/upload-sarif
77f671b Bump to Go 1.26
cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
3832a11 build(deps): bump github/codeql-action/upload-sarif
Additional commits viewable in compare view

Updates github.com/go-openapi/swag/conv from 0.27.0 to 0.27.3

Release notes

Sourced from github.com/go-openapi/swag/conv's releases.

v0.27.3

0.27.3 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.2...v0.27.3

2 commits in this release.

Fixed bugs

fix: rooted path should also work on windows by @fredbi in #226 ...

Miscellaneous tasks

chore: prepare release v0.27.3 by @bot-go-openapi[bot] in #227 ...

People who contributed to this release

@fredbi

swag license terms

Per-module changes

conv (0.27.3)

Miscellaneous tasks

chore: prepare release v0.27.3 by @bot-go-openapi[bot] in #227 ...

... (truncated)

Commits

179769d chore: prepare release v0.27.3
1d10f1e fix: rooted path should also work on windows (#226)
c0c66d9 chore: prepare release v0.27.2
b0d2d9d fix(loading): resolve absolute in-root paths under WithRoot (#224)
c8a41f7 chore: prepare release v0.27.1
221c895 chore: more go.mod replace missing
c110f25 Merge pull request #222 from fredbi/chore/fix-deps
50ff260 Merge pull request #221 from fredbi/perf/adapter-options
a130e07 perf(adapters): updated benchmark
727fdfa refact(adapters): refactored pools and options in json adapters.
Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.1

What's Changed

zstd: Validate SnappyConverter literal copies by @klauspost in klauspost/compress#1170

flate: use Peek instead of ReadByte for the bufio.Reader decode path by @joechenrh in klauspost/compress#1169

zstd: bump avo pin, regenerate arm64 asm by @lizthegrey in klauspost/compress#1167

New Contributors

@joechenrh made their first contribution in klauspost/compress#1169

Full Changelog: klauspost/compress@v1.19.0...v1.19.1

Commits

2602f4a Update changelog for version 1.19.0
983acec add defensive checks
9960386 zstd: Validate SnappyConverter literal copies (#1170)
e29d4d3 flate: use Peek instead of ReadByte for the bufio.Reader decode path (#...
c0bbc84 zstd: bump avo pin, regenerate arm64 asm (#1167)
efdb6ed build(deps): bump the github-actions group with 6 updates (#1166)
See full diff in compare view

Updates github.com/sigstore/cosign/v3 from 3.1.1 to 3.1.2

Release notes

Sourced from github.com/sigstore/cosign/v3's releases.

v3.1.2

This may be the last Cosign v3.1 release, as we finish deprecations and removing unused functionality. Soon we'll start work on Cosign v4 where we will remove things that are currently deprecated. We'll continue to support Cosign v3, with it's opt-in backwards compatibility, as described in our versioning policy.

If you haven't already, now is an excellent time to move to the bundle format that has been supported since Cosign v2.6.

We have received a ton of fixes over the past month from folks using Cosign in a variety of environments - thank you all!

Deprecations

816f2b6634821cefe6ceabbffdd5ff7ffc00d0a4 Deprecate --payload for sign and verify commands (#4991)

Features

5121398c0ae6f4444d8ffd10447d7b765184f304 docs: add OVHcloud KMS in available external plugins (#4962)

38f73bb8fd949fad71e7086bd122080b2d47ceeb Add insecure registry flag to ko publish in kind-verify-attestation workflow (#4970)

2e0749ac11c7326299f6af65ae6a3ab6a6750586 Deprecate --output-attestation (#4958)

2233166935e2940a530e5a740adc095f4ca4863d Add bundle inspect command (#4842)

Fixes

eb3bb86f712a1163591b6663bbc434afb6fad467 Guard against empty certificate PEM in mutate.Signature (#4998)

089731c31f750153e9d91ec248c990e3b1991c2b fix(download): Validate predicate type for new bundle format

d996ce12df6967bb5bf81e3244bfbbe1c2665f34 Skip nil subject entries in IntotoSubjectClaimVerifier (#5016)

8ca5b2002f5cd43614c476665e2055e59392b59d Fix Makefile: fall back to "unknown" version info when built outside a git repo (#5000)

df78bf67985f09e431f88b69be5842b7d0f5f4eb fix(verify): skip identity validation for security keys (#5012)

aebdc3a232083841b9c957fbba6b80b41df8caad fix: include artifactType in OCI 1.1 signature referrer manifest

c0edaac063a90b1dcacdabc7fc23e6c6f8ade90d Allow attestation download to handle both bundle types (#4996)

a8642c7b8611d557b4a592e6b94b188bd9427d7c Fix panic in dockerfile verify on malformed FROM lines (#4979)

ef3e3b446a011852929a08f51095ecc67495bfe7 fix(release): restore signing-step auth and fail on image signing errors (#4978)

16ddbcf9040b75e2329f2436b65ba3ed340dac88 feat(signing-config): add --base-config flag to override services from base config (#4977)

f17f812494b558499d89a37a6c9161657d2371e9 fix: pass NewBundleFormat to KeyOpts in sign command (#4981)

6ef8d9d040a481e26e065349c292799615ea7e7b fix: ignore build stage references in dockerfile verify (#4961)

8dbdef561622178f453d64d83faa02b1744a19f7 fix: allow '=' in annotation values (#4957)

Cleanup

193d2153431f8bb0d945a4c1ee721872f73add67 Remove unused policy evaluation code (#4936)

0fc9811059a037c32599e133ec4cc9fead4f354e Remove unused signing code (#4918)

95dceda0e7ea0b8d1f1a1d2b9a98c9fb2a6e5b74 Remove unused OCI code (#4935)

b1dd2e9524daf7406b350cbbfa7f4cd7b8ea0973 Remove unused ephemeral signer (#4938)

Documentation

81841260820bdddef3ea65c6f0824caca0cf2715 feat: improve verify flag shell completions (#4965)

ed0efe8cb464c1bae4711f87b552b1f2e602c816 docs: fix Short style and add Example fields to piv-tool subcommands (#4942)

d41b86c63cfd2653c263962a9225691c5774c228 docs: add Example fields to env and bundle create commands (#4941)

8a7174a1d462b3bb5a2722c7e1cf3a24fd1d3896 docs: fix Short style and add Example fields to pkcs11-tool subcommands

Thanks to all contributors!

Commits

193d215 Remove unused policy evaluation code (#4936)
eb3bb86 Guard against empty certificate PEM in mutate.Signature (#4998)
089731c fix(download): Validate predicate type for new bundle format
d996ce1 Skip nil subject entries in IntotoSubjectClaimVerifier (#5016)
8ca5b20 Fix Makefile: fall back to "unknown" version info when built outside a git re...
df78bf6 fix(verify): skip identity validation for security keys (#5012)
ee51b53 chore(deps): bump golang in the all group across 1 directory (#4950)
aebdc3a fix: include artifactType in OCI 1.1 signature referrer manifest
816f2b6 Deprecate --payload for sign and verify commands (#4991)
c0edaac Allow attestation download to handle both bundle types (#4996)
Additional commits viewable in compare view

Updates github.com/ulikunitz/xz from 0.5.15 to 0.5.16

Commits

024f909 isterminal_fallback.go: ensure +build and go:build lines are consistent
ba40d80 Prepare release v0.5.16
82b346c internal/term: add fallback option for unsupported operating systems
b371040 dependabot.yml: fix the ecosystem
7de699b Enabled dependabot
62a9f09 Add CodeQL analysis workflow configuration
57ec7ec go-test-platforms.yml: add read permissions
7314c96 go.mod: Make go1.20 the supported compiler
cdbb6ac go-test-platforms.yml: remove not necessary activities
87b9bf9 go-test-platforms.yml: add workflow-dispatch event
Additional commits viewable in compare view

Updates k8s.io/api from 0.36.2 to 0.36.3

Commits

3fde3c4 Update dependencies to v0.36.3 tag
53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.2 to 0.36.3

Commits

2e78d6f Update dependencies to v0.36.3 tag
4b2f007 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
c8a9346 Add e2e test for setting maps and slices to null via SSA
b387965 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
See full diff in compare view

Updates k8s.io/apimachinery from 0.36.2 to 0.36.3

Commits

40bf4b2 Update dependencies to v0.36.3 tag
34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
See full diff in compare view

Updates k8s.io/cli-runtime from 0.36.2 to 0.36.3

Commits

a39fac4 Update dependencies to v0.36.3 tag
88a785e Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
1706906 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
See full diff in compare view

Updates k8s.io/client-go from 0.36.2 to 0.36.3

Commits

44a8af2 Update dependencies to v0.36.3 tag
f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.1` | `1.43.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.30` | `1.32.31` | | [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.3.4` | `0.3.5` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.59.1` | `1.60.0` | | [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.7.0` | `0.8.0` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.9.0` | `5.9.1` | | [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.3` | `1.4.4` | | [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.27.0` | `0.27.3` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.19.0` | `1.19.1` | | [github.com/sigstore/cosign/v3](https://github.com/sigstore/cosign) | `3.1.1` | `3.1.2` | | [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.15` | `0.5.16` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.36.2` | `0.36.3` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.36.2` | `0.36.3` | | [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.36.2` | `0.36.3` | Updates `github.com/aws/aws-sdk-go-v2` from 1.42.1 to 1.43.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.42.1...v1.43.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.30 to 1.32.31 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.30...config/v1.32.31) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.29 to 1.19.30 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.19.29...credentials/v1.19.30) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.3.4 to 0.3.5 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/transfermanager/v0.3.4...feature/s3/transfermanager/v0.3.5) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.59.1 to 1.60.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ssm/v1.59.1...service/s3/v1.60.0) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.105.2 to 1.106.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.105.2...service/s3/v1.106.0) Updates `github.com/docker/go-connections` from 0.7.0 to 0.8.0 - [Commits](docker/go-connections@v0.7.0...v0.8.0) Updates `github.com/go-git/go-billy/v5` from 5.9.0 to 5.9.1 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.9.0...v5.9.1) Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4 - [Release notes](https://github.com/go-logr/logr/releases) - [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md) - [Commits](go-logr/logr@v1.4.3...v1.4.4) Updates `github.com/go-openapi/swag/conv` from 0.27.0 to 0.27.3 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.27.0...v0.27.3) Updates `github.com/klauspost/compress` from 1.19.0 to 1.19.1 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.19.0...v1.19.1) Updates `github.com/sigstore/cosign/v3` from 3.1.1 to 3.1.2 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v3.1.1...v3.1.2) Updates `github.com/ulikunitz/xz` from 0.5.15 to 0.5.16 - [Commits](ulikunitz/xz@v0.5.15...v0.5.16) Updates `k8s.io/api` from 0.36.2 to 0.36.3 - [Commits](kubernetes/api@v0.36.2...v0.36.3) Updates `k8s.io/apiextensions-apiserver` from 0.36.2 to 0.36.3 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.36.2...v0.36.3) Updates `k8s.io/apimachinery` from 0.36.2 to 0.36.3 - [Commits](kubernetes/apimachinery@v0.36.2...v0.36.3) Updates `k8s.io/cli-runtime` from 0.36.2 to 0.36.3 - [Commits](kubernetes/cli-runtime@v0.36.2...v0.36.3) Updates `k8s.io/client-go` from 0.36.2 to 0.36.3 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.36.2...v0.36.3) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager dependency-version: 0.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.106.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/docker/go-connections dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-logr/logr dependency-version: 1.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/conv dependency-version: 0.27.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/klauspost/compress dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/sigstore/cosign/v3 dependency-version: 3.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/ulikunitz/xz dependency-version: 0.5.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/api dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/apimachinery dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/cli-runtime dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/client-go dependency-version: 0.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-27T08:40:11Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Jul 26, 2026

dependabot Bot requested a review from a team as a code owner July 26, 2026 08:32

dependabot Bot added kind/dependency dependency update, etc. kind/chore chore, maintenance, etc. labels Jul 26, 2026

github-actions Bot added the size/m Medium label Jul 26, 2026

frewilhelm mentioned this pull request Jul 27, 2026

chore(deps): bump the go group across 1 directory with 18 updates (fix #2052) #2053

Merged

frewilhelm closed this in 414c6aa Jul 27, 2026

dependabot Bot deleted the dependabot/go_modules/go-debe88f27d branch July 27, 2026 08:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go group across 1 directory with 18 updates#2052

chore(deps): bump the go group across 1 directory with 18 updates#2052
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-debe88f27d

dependabot Bot commented on behalf of github Jul 26, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 26, 2026

v5.9.1

What's Changed

v1.4.4

What's Changed

New Contributors

v0.27.3

0.27.3 - 2026-07-20

Fixed bugs

Miscellaneous tasks

People who contributed to this release

Per-module changes

conv (0.27.3)

Miscellaneous tasks

v1.19.1

What's Changed

New Contributors

v3.1.2

Deprecations

Features

Fixes

Cleanup

Documentation

Thanks to all contributors!

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants