Skip to content

Update go modules (main) (patch)#3130

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/main-patch-go-modules
Open

Update go modules (main) (patch)#3130
renovate[bot] wants to merge 1 commit intomainfrom
renovate/main-patch-go-modules

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Feb 27, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
cuelang.org/go v0.16.0v0.16.1 age adoption passing confidence
github.com/conforma/crds/api v0.1.7v0.1.10 age adoption passing confidence
github.com/conforma/go-gather v1.1.0v1.1.4 age adoption passing confidence
github.com/cucumber/godog v0.15.0v0.15.1 age adoption passing confidence
github.com/daixiang0/gci v0.13.5v0.13.7 age adoption passing confidence
github.com/gkampitakis/go-snaps v0.5.19v0.5.21 age adoption passing confidence
github.com/go-git/go-git/v5 v5.17.1v5.17.2 age adoption passing confidence
github.com/go-openapi/runtime v0.29.2v0.29.3 age adoption passing confidence
github.com/google/go-containerregistry v0.21.0v0.21.5 age adoption passing confidence
github.com/mattn/go-isatty v0.0.20v0.0.21 age adoption passing confidence
github.com/otiai10/copy v1.14.0v1.14.1 age adoption passing confidence
github.com/package-url/packageurl-go v0.1.3v0.1.5 age adoption passing confidence
github.com/sigstore/cosign/v3 v3.0.4v3.0.6 age adoption passing confidence
github.com/sigstore/rekor v1.5.0v1.5.1 age adoption passing confidence
github.com/sigstore/sigstore v1.10.4v1.10.5 age adoption passing confidence
github.com/testcontainers/testcontainers-go v0.34.0v0.34.1 age adoption passing confidence
gotest.tools/gotestsum v1.12.1v1.12.3 age adoption passing confidence
k8s.io/api v0.35.0v0.35.4 age adoption passing confidence
k8s.io/api v0.35.3v0.35.4 age adoption passing confidence
k8s.io/apiextensions-apiserver v0.34.3v0.34.7 age adoption passing confidence
k8s.io/apimachinery v0.35.0v0.35.4 age adoption passing confidence
k8s.io/apimachinery v0.35.3v0.35.4 age adoption passing confidence
k8s.io/client-go v0.35.0v0.35.4 age adoption passing confidence
k8s.io/client-go v0.35.3v0.35.4 age adoption passing confidence
k8s.io/kubernetes v1.34.2v1.34.7 age adoption passing confidence

Release Notes

cue-lang/cue (cuelang.org/go)

v0.16.1

Compare Source

Language

The fallback keyword in the aliasv2 experiment is replaced by otherwise, which is clearer. cue fmt or cue fix can be used to rewrite existing code.

Evaluator

Fix a regression where the compiler could add comments to the input AST value, which could lead to increased memory usage.

Fix a bug where exporting certain schemas could result in "cannot have both alias and field in same scope" errors.

cmd/cue

Fix a panic which could occur when using non-label expressions in the --path flag.

Teach cue login to give helpful errors when used with OCI registries which don't support the OAuth2 device flow.

Go API

Fix a regression where cue.Context.Encode could panic on custom marshaler types with pointer receivers.

Full list of changes since v0.16.0
conforma/go-gather (github.com/conforma/go-gather)

v1.1.4

Compare Source

Bug Fixes
  • deps: update module github.com/go-git/go-git/v5 to v5.17.2 (c5f27d8)

v1.1.3

Compare Source

Bug Fixes
  • ci: add gomodTidy to Renovate postUpdateOptions (222184f)

v1.1.2

Compare Source

Bug Fixes
  • deps: update actions/upload-artifact action to v7.0.1 (3e6fec5)
  • deps: update github actions (b2496c3)

v1.1.1

Compare Source

Bug Fixes
  • ci: add local Renovate overrides for semantic-release compatibility (9626eab)
cucumber/godog (github.com/cucumber/godog)

v0.15.1

Compare Source

Added
Changed
  • Replace deprecated ::set-output - (681 - nodeg)
Fixed
  • fix(errors): fix(errors): Fix expected Step argument count for steps with context.Context (679 - tigh-latte)
  • fix(formatter): On concurrent execution, execute formatter at end of Scenario - (645 - tigh-latte)
  • Pretty printing results now prints the line where the step is declared instead of the line where the handler is declared. (668 - spencerc)
  • Update honnef.co/go/tools/cmd/staticcheck version in Makefile by @​RezaZareiii in #​670
  • fix: verify dogT exists in the context before using it by @​cakoolen in #​692
  • fix: change bang to being in README by @​nahomEagleLion in #​687
  • Mark junit test cases as skipped if no pickle step results available by @​mrsheepuk in #​597
  • Print step declaration line instead of handler declaration line by @​SpencerC in #​668
daixiang0/gci (github.com/daixiang0/gci)

v0.13.7

Compare Source

What's Changed

New Contributors

Full Changelog: daixiang0/gci@v0.13.6...v0.13.7

v0.13.6

Compare Source

What's Changed

Full Changelog: daixiang0/gci@v0.13.5...v0.13.6

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

v0.5.21

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.20...v0.5.21

v0.5.20

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.19...v0.5.20

go-git/go-git (github.com/go-git/go-git/v5)

v5.17.2

Compare Source

What's Changed

⚠️ This release fixes a bug (#​1942) that blocked some users from upgrading to v5.17.1. Thanks @​pskrbasu for reporting it. 🙇

Full Changelog: go-git/go-git@v5.17.1...v5.17.2

go-openapi/runtime (github.com/go-openapi/runtime)

v0.29.3

Compare Source

0.29.3 - 2026-03-08

Full Changelog: go-openapi/runtime@v0.29.2...v0.29.3

27 commits in this release.


Fixed bugs
Documentation
Code quality
Miscellaneous tasks
Updates

People who contributed to this release

New Contributors

runtime license terms

License

Per-module changes


client-middleware/opentracing (0.29.3)

Documentation
Code quality
Miscellaneous tasks
google/go-containerregistry (github.com/google/go-containerregistry)

v0.21.5

Compare Source

What's Changed

Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5

v0.21.4

Compare Source

What's Changed
New Contributors

Full Changelog: google/go-containerregistry@v0.21.3...v0.21.4

v0.21.3

Compare Source

What's Changed
New Contributors

Full Changelog: google/go-containerregistry@v0.21.2...v0.21.3

v0.21.2

Compare Source

What's Changed

Full Changelog: google/go-containerregistry@v0.21.1...v0.21.2

v0.21.1

Compare Source

This release fixes a regression in crane introduced in the previous release.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.0...v0.21.1

mattn/go-isatty (github.com/mattn/go-isatty)

v0.0.21

Compare Source

otiai10/copy (github.com/otiai10/copy)

v1.14.1

Compare Source

package-url/packageurl-go (github.com/package-url/packageurl-go)

v0.1.5

Compare Source

What's Changed

New Contributors

Full Changelog: package-url/packageurl-go@v0.1.4...v0.1.5

v0.1.4

Compare Source

What's Changed

New Contributors

Full Changelog: package-url/packageurl-go@v0.1.3...v0.1.4

sigstore/cosign (github.com/sigstore/cosign/v3)

v3.0.6

Compare Source

Changelog

v3.0.6 resolves GHSA-w6c6-c85g-mmv6. This release also adds support for signing with OpenBao-managed keys.

Thanks to all contributors!

v3.0.5

Compare Source

Deprecations

Features

  • Automatically require signed timestamp with Rekor v2 entries (#​4666)
  • Allow --local-image with --new-bundle-format for v2 and v3 signatures (#​4626)
  • Add mTLS support for TSA client connections when signing with a signing config (#​4620)
  • Enforce TSA requirement for Rekor v2, Fuclio signing (#​4683)

Bug Fixes

  • Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#​4635)
  • fix: avoid panic on malformed attestation payload (#​4651)
  • fix: avoid panic on malformed tlog entries (#​4649)
  • fix: avoid panic on malformed replace payload (#​4653)
  • Gracefully fail if bundle payload body is not a string (#​4648)
  • Verify validity of chain rather than just certificate (#​4663)
  • fix: avoid panic on malformed tlog entry body (#​4652)

Documentation

  • docs(cosign): clarify RFC3161 revocation semantics (#​4642)
  • Fix typo in CLI help (#​4701)
sigstore/rekor (github.com/sigstore/rekor)

v1.5.1

Compare Source

Features

  • optimize memory for DSSE v0.0.1 processing (#​2766)

Bug Fixes

  • Type assert the entry bundle when verifying inclusion proof (#​2755)
  • return correct errors in rare failure situations (#​2753)
  • raise error if decoding hash fails during inclusion proof (#​2754)
sigstore/sigstore (github.com/sigstore/sigstore)

v1.10.5

Compare Source

What's Changed

  • (kms/hashivault): add openbao support in #​2303
  • Fix typo in RSA PSS 4096 signature identifier in #​2270
  • fix: eliminate usage of text/template in #​2288
  • chore: mention openbao being supported as well (#​2303) in #​2313

Full Changelog: sigstore/sigstore@v1.10.4...v1.10.5

testcontainers/testcontainers-go (github.com/testcontainers/testcontainers-go)

v0.34.1

[Compare Source](https:


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Feb 27, 2026

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 13 additional dependencies were updated

Details:

Package Change
golang.org/x/exp v0.0.0-20250911091902-df9299821621 -> v0.0.0-20251023183803-a4bb9ffd2546
github.com/go-chi/chi/v5 v5.2.4 -> v5.2.5
github.com/go-openapi/runtime v0.29.2 -> v0.29.3
github.com/go-openapi/swag v0.25.4 -> v0.25.5
github.com/go-openapi/swag/cmdutils v0.25.4 -> v0.25.5
github.com/go-openapi/swag/netutils v0.25.4 -> v0.25.5
github.com/google/certificate-transparency-go v1.3.2 -> v1.3.3
github.com/letsencrypt/boulder v0.20251110.0 -> v0.20260223.0
github.com/prometheus/procfs v0.17.0 -> v0.19.2
github.com/sigstore/rekor-tiles/v2 v2.0.1 -> v2.2.1
github.com/sigstore/timestamp-authority/v2 v2.0.4 -> v2.0.5
golang.org/x/mod v0.33.0 -> v0.34.0
google.golang.org/grpc v1.79.3 -> v1.80.0
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 29 additional dependencies were updated

Details:

Package Change
golang.org/x/exp v0.0.0-20250911091902-df9299821621 -> v0.0.0-20251023183803-a4bb9ffd2546
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 -> v1.31.0
github.com/aws/aws-sdk-go-v2/service/ecr v1.51.2 -> v1.55.3
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.2 -> v1.38.10
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.11.0 -> v0.12.0
github.com/clipperhouse/displaywidth v0.6.0 -> v0.10.0
github.com/clipperhouse/uax29/v2 v2.3.0 -> v2.6.0
github.com/go-chi/chi/v5 v5.2.4 -> v5.2.5
github.com/go-jose/go-jose/v4 v4.1.3 -> v4.1.4
github.com/go-openapi/swag v0.25.4 -> v0.25.5
github.com/go-openapi/swag/cmdutils v0.25.4 -> v0.25.5
github.com/go-openapi/swag/netutils v0.25.4 -> v0.25.5
github.com/google/certificate-transparency-go v1.3.2 -> v1.3.3
github.com/letsencrypt/boulder v0.20251110.0 -> v0.20260223.0
github.com/miekg/pkcs11 v1.1.1 -> v1.1.2
github.com/olekukonko/errors v1.1.0 -> v1.2.0
github.com/olekukonko/ll v0.1.3 -> v0.1.6
github.com/olekukonko/tablewriter v1.1.2 -> v1.1.4
github.com/prometheus/common v0.67.4 -> v0.67.5
github.com/prometheus/procfs v0.17.0 -> v0.19.2
github.com/sigstore/fulcio v1.8.4 -> v1.8.5
github.com/sigstore/rekor-tiles/v2 v2.0.1 -> v2.2.1
github.com/sigstore/timestamp-authority/v2 v2.0.4 -> v2.0.5
gitlab.com/gitlab-org/api/client-go v1.11.0 -> v1.46.0
go.opentelemetry.io/contrib/detectors/gcp v1.39.0 -> v1.40.0
golang.org/x/mod v0.33.0 -> v0.34.0
golang.org/x/tools v0.42.0 -> v0.43.0
google.golang.org/grpc v1.79.3 -> v1.80.0
sigs.k8s.io/release-utils v0.12.3 -> v0.12.4
File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/moby/spdystream v0.5.0 -> v0.5.1
File name: tools/kubectl/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated

Details:

Package Change
github.com/moby/spdystream v0.5.0 -> v0.5.1
go.opentelemetry.io/otel v1.35.0 -> v1.41.0
go.opentelemetry.io/otel/trace v1.35.0 -> v1.41.0

@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 14 times, most recently from 2a265d3 to a650df7 Compare March 6, 2026 00:43
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 4 times, most recently from 5fde2e2 to 0d4d965 Compare March 9, 2026 23:05
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 5 times, most recently from afe86d8 to 9a0b95c Compare March 15, 2026 01:16
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 10 times, most recently from 6ea8830 to 5cadede Compare April 2, 2026 13:38
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 10 times, most recently from 7860080 to db2fad6 Compare April 10, 2026 10:12
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 9 times, most recently from 68c7ba1 to e62576d Compare April 16, 2026 19:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants