Skip to content

chore(deps): update go indirect dependencies#112

Open
deckhouse-BOaTswain wants to merge 1 commit into
mainfrom
renovate/go-indirect-dependencies
Open

chore(deps): update go indirect dependencies#112
deckhouse-BOaTswain wants to merge 1 commit into
mainfrom
renovate/go-indirect-dependencies

Conversation

@deckhouse-BOaTswain
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/deckhouse/deckhouse/pkg/log v0.2.0 -> v0.2.1 age confidence
github.com/docker/cli v29.4.0+incompatible -> v29.5.2+incompatible age confidence
github.com/docker/docker-credential-helpers v0.9.3 -> v0.9.7 age confidence
github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0 age confidence
github.com/evanphx/json-patch v5.9.0+incompatible -> v5.9.11+incompatible age confidence
github.com/fsnotify/fsnotify v1.7.0 -> v1.10.1 age confidence
github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.2 age confidence
github.com/go-openapi/jsonpointer v0.22.1 -> v0.23.1 age confidence
github.com/go-openapi/jsonreference v0.21.3 -> v0.21.6 age confidence
github.com/go-openapi/swag v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/cmdutils v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/conv v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/fileutils v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/jsonname v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/jsonutils v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/loading v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/mangling v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/netutils v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/stringutils v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/typeutils v0.25.4 -> v0.26.0 age confidence
github.com/go-openapi/swag/yamlutils v0.25.4 -> v0.26.0 age confidence
github.com/google/certificate-transparency-go v1.3.2 -> v1.3.3 age confidence
github.com/google/gnostic-models v0.6.9 -> v0.7.1 age confidence
github.com/google/go-containerregistry v0.21.5 -> v0.21.6 age confidence
github.com/hashicorp/errwrap v1.0.0 -> v1.1.0 age confidence
github.com/itchyny/gojq v0.12.17 -> v0.12.19 age confidence
github.com/itchyny/timefmt-go v0.1.6 -> v0.1.8 age confidence
github.com/jmoiron/sqlx v1.3.5 -> v1.4.0 age confidence
github.com/klauspost/compress v1.18.5 -> v1.18.6 age confidence
github.com/mailru/easyjson v0.7.7 -> v0.9.2 age confidence
github.com/pelletier/go-toml v1.9.3 -> v1.9.5 age confidence
github.com/prometheus/client_golang v1.22.0 -> v1.23.2 age confidence
github.com/prometheus/client_model v0.6.1 -> v0.6.2 age confidence
github.com/prometheus/common v0.62.0 -> v0.68.0 age confidence
github.com/prometheus/procfs v0.15.1 -> v0.20.1 age confidence
github.com/sylabs/oci-tools v0.19.0 -> v0.20.0 age confidence
github.com/tidwall/match v1.1.1 -> v1.2.0 age confidence
github.com/tidwall/pretty v1.2.0 -> v1.2.1 age confidence
github.com/vbatts/tar-split v0.12.2 -> v0.12.3 age confidence
github.com/weppos/publicsuffix-go v0.30.0 -> v0.50.3 age confidence
github.com/zmap/zlint/v3 v3.5.0 -> v3.7.1 age confidence
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.4 age confidence
golang.org/x/time v0.11.0 -> v0.15.0 age confidence
gomodules.xyz/jsonpatch/v2 v2.4.0 -> v2.5.0 age confidence
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0 age confidence
gotest.tools/v3 v3.4.0 -> v3.5.2 age confidence
gotest.tools/v3 v3.5.1 -> v3.5.2 age confidence
k8s.io/api v0.33.8 -> v0.36.1 age confidence
k8s.io/apiextensions-apiserver v0.33.8 -> v0.36.1 age confidence
k8s.io/apimachinery v0.33.8 -> v0.36.1 age confidence
k8s.io/client-go v0.33.8 -> v0.36.1 age confidence
k8s.io/klog/v2 v2.130.1 -> v2.140.0 age confidence
sigs.k8s.io/controller-runtime v0.20.4 -> v0.24.1 age confidence
sigs.k8s.io/structured-merge-diff/v4 v4.6.0 -> v4.7.0 age confidence

Release Notes

docker/cli (github.com/docker/cli)

v29.5.2+incompatible

Compare Source

v29.5.1+incompatible

Compare Source

v29.5.0+incompatible

Compare Source

v29.4.3+incompatible

Compare Source

v29.4.2+incompatible

Compare Source

v29.4.1+incompatible

Compare Source

docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)

v0.9.7

Compare Source

What's Changed
  • update to go1.26.3
  • ci: update zizmore action to v1.7.1

Full Changelog: docker/docker-credential-helpers@v0.9.6...v0.9.7

v0.9.6

Compare Source

What's Changed
  • update to go1.25.9
  • secretservice: allow building on openbsd
  • wincred: minor cleanups
  • Dockerfile: document build-args
  • Dockerfile: update golangci-lint to v2.11
  • Dockerfile: update xx to v1.9.0
  • ci: set default permissions and timeouts
  • ci: update actions
  • ci: pin actions by sha
  • ci: add zizmor workflow

Full Changelog: docker/docker-credential-helpers@v0.9.5...v0.9.6

v0.9.5

Compare Source

What's Changed
  • build(deps): bump actions/checkout from 5 to 6 #​395
  • build(deps): bump actions/upload-artifact from 4 to 6 #​398
  • build(deps): bump softprops/action-gh-release from 2.3.3 to 2.4.1 #​391
  • build(deps): bump softprops/action-gh-release from 2.4.1 to 2.5.0 #​397
  • Dockerfile: remove redundant DEBIAN_FRONTEND=noninteractive #​404
  • Dockerfile: update golangci-lint to v2.8 #​402
  • gha: update some actions to ubuntu 24.04 #​401
  • update to go1.25.2 #​392
  • update to go1.25.5 #​399

Full Changelog: docker/docker-credential-helpers@v0.9.4...v0.9.5

v0.9.4

Compare Source

What's Changed
  • update to go1.25.1 #​387
  • wincred: fix unsafe uintptr usage to be GC-safe on go1.25 #​386
  • gha: add macos-15-intel, remove macos-13 (deprecated) #​384
  • deb: Dockerfile: update to debian bookworm, ubuntu jammy (22.04) #​385
  • Dockerfile: update xx to v1.7.0 #​383
  • Dockerfile: update golangci-lint to v2.5 #​386
  • Dockerfile: merge build stages #​249
  • build(deps): bump github.com/danieljoos/wincred v1.2.3 #​388
  • build(deps): bump softprops/action-gh-release from 2.2.1 to 2.3.2 #​373
  • build(deps): bump actions/checkout from 4 to 5 #​376
  • build(deps): bump actions/setup-go from 5 to 6 #​377
  • build(deps): bump actions/github-script from 7 to 8 #​378
  • build(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3 #​379

Full Changelog: docker/docker-credential-helpers@v0.9.3...v0.9.4

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.13.0

Compare Source

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)

v3.12.2

Compare Source

  • allow empty payloads in post,put,patch, issue #​580 ( thanks @​liggitt, Jordan Liggitt)

v3.12.1

Compare Source

  • fix misroute when dealing multiple webservice with regex (#​549) (thanks Haitao Chen)

v3.12.0

Compare Source

v3.11.3

Compare Source

  • better not have 2 tags on one commit

v3.11.2

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.1

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)
evanphx/json-patch (github.com/evanphx/json-patch)

v5.9.11+incompatible

Compare Source

v5.9.10+incompatible

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes
  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes
  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

v1.9.0

Compare Source

Changes and fixes
  • all: make BufferedWatcher buffered again (#​657)

  • inotify: fix race when adding/removing watches while a watched path is being deleted (#​678, #​686)

  • inotify: don't send empty event if a watched path is unmounted (#​655)

  • inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#​679)

  • kqueue: fix watching relative symlinks (#​681)

  • kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#​682)

  • illumos: don't send error if changed file is deleted while processing the event (#​678)

v1.8.0

Compare Source

Additions
  • all: add FSNOTIFY_DEBUG to print debug logs to stderr (#​619)
Changes and fixes
  • windows: fix behaviour of WatchList() to be consistent with other platforms (#​610)

  • kqueue: ignore events with Ident=0 (#​590)

  • kqueue: set O_CLOEXEC to prevent passing file descriptors to children (#​617)

  • kqueue: emit events as "/path/dir/file" instead of "path/link/file" when watching a symlink (#​625)

  • inotify: don't send event for IN_DELETE_SELF when also watching the parent (#​620)

  • inotify: fix panic when calling Remove() in a goroutine (#​650)

  • fen: allow watching subdirectories of watched directories (#​621)

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.2

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed
  • Reject encoding indefinite-length map with odd item count by @​fxamacker in #​764
  • Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in #​765
  • Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in #​766
  • Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in #​767
  • Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in #​768
CI / GitHub Actions and Docs
🔎 Details...

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

v2.9.1

Compare Source

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the keyasint feature

These changes only affect Go struct fields tagged with keyasint:

  • [Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #​757)
  • [Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #​757)
  • [Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #​757)
🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

  • [Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #​753)
  • [Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #​753)
  • [Encoding] Reject encoding nil inside indefinite-length strings (PR #​750)
  • [Diagnostic] Accept valid U+FFFD replacement character (PR #​753)
What's Changed
CI / GitHub Actions and Docs
🔎 Details...

New Contributors

Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1

v2.9.0

Compare Source

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed fuzz tests and is production quality. However, the new TextUnmarshaler feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.

What's Changed
Docs
CI
🔎 Details
Special Thanks

Many thanks to @​benluddy for adding these new features! 🎉

  • Add opt-in support for encoding.TextMarshaler and encoding.TextUnmarshaler to encode and decode from CBOR text string.
  • Add opt-in support for json.Marshaler and json.Unmarshaler via user-provided transcoding function.
New Contributors

Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0

v2.8.0

Compare Source

v2.8.0 adds omitzero struct tag option, fixes and deprecates 3 functions, and bumps requirements to go 1.20+.

Many thanks to @​liggitt for contributing the omitzero support!

The "omitzero" option omits zero values from encoding, matching stdlib encoding/json behavior.
When specified in the cbor tag, the option is always hon


Configuration

📅 Schedule: Branch creation - "before 06:00 on monday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@deckhouse-BOaTswain deckhouse-BOaTswain added dependencies Pull requests that update a dependency file go Pull requests that update go code renovate indirect labels Jun 1, 2026
@deckhouse-BOaTswain
Copy link
Copy Markdown
Contributor Author

ℹ Artifact update notice

File name: examples/basic-example-module/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.8 -> 1.26.0
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
google.golang.org/protobuf v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff -> v0.0.0-20260317180543-43fb72c5454a
k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 -> v0.0.0-20260210185600-b8788abfbbc2
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 -> v0.0.0-20250730193827-2d320260d730
File name: examples/common-hooks/tls-certificate/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 6 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.8 -> 1.26.0
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/zmap/zcrypto v0.0.0-20230310154051-c8b263fd8300 -> v0.0.0-20260514033604-a1159eb3cad9
google.golang.org/protobuf v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff -> v0.0.0-20260317180543-43fb72c5454a
k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 -> v0.0.0-20260210185600-b8788abfbbc2
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 -> v0.0.0-20250730193827-2d320260d730
File name: examples/dependency-example-module/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 8 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.8 -> 1.26.0
github.com/google/go-containerregistry v0.21.5 -> v0.21.6
k8s.io/api v0.33.8 -> v0.36.1
k8s.io/apimachinery v0.33.8 -> v0.36.1
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
google.golang.org/protobuf v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff -> v0.0.0-20260317180543-43fb72c5454a
k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 -> v0.0.0-20260210185600-b8788abfbbc2
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 -> v0.0.0-20250730193827-2d320260d730
File name: examples/example-module/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.8 -> 1.26.0
k8s.io/api v0.33.8 -> v0.36.1
k8s.io/apimachinery v0.33.8 -> v0.36.1
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
google.golang.org/protobuf v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff -> v0.0.0-20260317180543-43fb72c5454a
k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 -> v0.0.0-20260210185600-b8788abfbbc2
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 -> v0.0.0-20250730193827-2d320260d730
File name: examples/settings-check/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.8 -> 1.26.0
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
google.golang.org/protobuf v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff -> v0.0.0-20260317180543-43fb72c5454a
k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 -> v0.0.0-20260210185600-b8788abfbbc2
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 -> v0.0.0-20250730193827-2d320260d730
File name: examples/single-file-app-example/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 6 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.8 -> 1.26.0
k8s.io/apimachinery v0.33.8 -> v0.36.1
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
google.golang.org/protobuf v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff -> v0.0.0-20260317180543-43fb72c5454a
k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 -> v0.0.0-20260210185600-b8788abfbbc2
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 -> v0.0.0-20250730193827-2d320260d730
File name: examples/single-file-example/hooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 6 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.8 -> 1.26.0
k8s.io/apimachinery v0.33.8 -> v0.36.1
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
google.golang.org/protobuf v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff -> v0.0.0-20260317180543-43fb72c5454a
k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 -> v0.0.0-20260210185600-b8788abfbbc2
sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 -> v0.0.0-20250730193827-2d320260d730
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/zmap/zcrypto v0.0.0-20230310154051-c8b263fd8300 -> v0.0.0-20260514033604-a1159eb3cad9

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code indirect renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants