Skip to content

Update go modules (release-v0.8) (patch)#1729

Open
renovate[bot] wants to merge 1 commit into
release-v0.8from
renovate/release-v0.8-patch-go-modules
Open

Update go modules (release-v0.8) (patch)#1729
renovate[bot] wants to merge 1 commit into
release-v0.8from
renovate/release-v0.8-patch-go-modules

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 16, 2026

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/conforma/cli v0.8.108v0.8.129 age adoption passing confidence
github.com/tektoncd/cli v0.42.1v0.42.2 age adoption passing confidence
oras.land/oras v1.3.0v1.3.2 age adoption passing confidence

Release Notes

conforma/cli (github.com/conforma/cli)

v0.8.129

Compare Source

v0.8.123

Compare Source

v0.8.122

Compare Source

v0.8.120

Compare Source

tektoncd/cli (github.com/tektoncd/cli)

v0.42.2

Compare Source

v0.42.2 Release 🎉

This patch release addresses the following CVEs: CVE-2026-33186, CVE-2026-33810, CVE-2025-61729 and CVE-2025-61726.

Changelog

Full Changelog: tektoncd/cli@v0.42.1...v0.42.2


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot enabled auto-merge (squash) May 16, 2026 00:50
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented May 16, 2026

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 16 additional dependencies were updated

Details:

Package Change
cloud.google.com/go/auth v0.17.0 -> v0.18.0
cloud.google.com/go/monitoring v1.24.2 -> v1.24.3
github.com/go-chi/chi/v5 v5.2.3 -> v5.2.4
github.com/go-openapi/errors v0.22.5 -> v0.22.6
github.com/go-openapi/spec v0.22.2 -> v0.22.3
github.com/googleapis/enterprise-certificate-proxy v0.3.7 -> v0.3.9
github.com/googleapis/gax-go/v2 v2.15.0 -> v2.16.0
github.com/mattn/go-runewidth v0.0.16 -> v0.0.19
github.com/olekukonko/ll v0.0.9 -> v0.1.3
github.com/olekukonko/tablewriter v1.1.0 -> v1.1.2
github.com/sigstore/rekor v1.4.3 -> v1.5.0
github.com/sirupsen/logrus v1.9.4-0.20230606125235-dd1b4c2e81af -> v1.9.4
google.golang.org/api v0.258.0 -> v0.260.0
google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9 -> v0.0.0-20251202230838-ff82c1b0f217
gopkg.in/ini.v1 v1.67.0 -> v1.67.1
sigs.k8s.io/release-utils v0.12.2 -> v0.12.3
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 24 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.5 -> 1.26.2
cloud.google.com/go/auth v0.17.0 -> v0.18.0
cloud.google.com/go/firestore v1.18.0 -> v1.20.0
cloud.google.com/go/longrunning v0.6.7 -> v0.7.0
cloud.google.com/go/monitoring v1.24.2 -> v1.24.3
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 -> v1.31.0
github.com/cncf/xds/go v0.0.0-20251022180443-0feb69152e9f -> v0.0.0-20251210132809-ee656c7534f5
github.com/envoyproxy/go-control-plane/envoy v1.35.0 -> v1.36.0
github.com/envoyproxy/protoc-gen-validate v1.2.1 -> v1.3.0
github.com/go-chi/chi/v5 v5.2.3 -> v5.2.4
github.com/go-openapi/errors v0.22.5 -> v0.22.6
github.com/go-openapi/spec v0.22.2 -> v0.22.3
github.com/googleapis/enterprise-certificate-proxy v0.3.7 -> v0.3.9
github.com/googleapis/gax-go/v2 v2.15.0 -> v2.16.0
github.com/olekukonko/ll v0.1.2 -> v0.1.3
github.com/olekukonko/tablewriter v1.1.0 -> v1.1.2
github.com/sigstore/rekor v1.4.3 -> v1.5.0
github.com/sirupsen/logrus v1.9.4-0.20230606125235-dd1b4c2e81af -> v1.9.4
go.opentelemetry.io/contrib/detectors/gcp v1.38.0 -> v1.39.0
google.golang.org/api v0.258.0 -> v0.260.0
google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260120221211-b8f7ae30c516
google.golang.org/grpc v1.78.0 -> v1.80.0
gopkg.in/ini.v1 v1.67.0 -> v1.67.1
sigs.k8s.io/release-utils v0.12.2 -> v0.12.3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants