Chore(deps): Bump the go-dependencies group across 1 directory with 9 updates#3553
Closed
dependabot[bot] wants to merge 1 commit intomainfrom
Closed
Chore(deps): Bump the go-dependencies group across 1 directory with 9 updates#3553dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
… updates Bumps the go-dependencies group with 4 updates in the / directory: [github.com/cnabio/cnab-go](https://github.com/cnabio/cnab-go), [github.com/cnabio/cnab-to-oci](https://github.com/cnabio/cnab-to-oci), [github.com/docker/buildx](https://github.com/docker/buildx) and [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry). Updates `github.com/cnabio/cnab-go` from 0.26.0 to 0.26.1 - [Release notes](https://github.com/cnabio/cnab-go/releases) - [Commits](cnabio/cnab-go@v0.26.0...v0.26.1) Updates `github.com/cnabio/cnab-to-oci` from 0.5.1 to 0.5.3 - [Release notes](https://github.com/cnabio/cnab-to-oci/releases) - [Commits](cnabio/cnab-to-oci@v0.5.1...v0.5.3) Updates `github.com/cnabio/image-relocation` from 0.9.1 to 0.9.2 - [Release notes](https://github.com/cnabio/image-relocation/releases) - [Commits](cnabio/image-relocation@v0.9.1...v0.9.2) Updates `github.com/containerd/containerd` from 1.7.29 to 1.7.30 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.29...v1.7.30) Updates `github.com/docker/buildx` from 0.30.1 to 0.31.1 - [Release notes](https://github.com/docker/buildx/releases) - [Commits](docker/buildx@v0.30.1...v0.31.1) Updates `github.com/docker/cli` from 28.5.2+incompatible to 29.1.5+incompatible - [Commits](docker/cli@v28.5.2...v29.1.5) Updates `github.com/google/go-containerregistry` from 0.20.6 to 0.21.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.20.6...v0.21.1) Updates `github.com/moby/buildkit` from 0.26.1 to 0.27.0 - [Release notes](https://github.com/moby/buildkit/releases) - [Commits](moby/buildkit@v0.26.1...v0.27.0) Updates `k8s.io/utils` from 0.0.0-20250604170112-4c0f3b243397 to 0.0.0-20251002143259-bc988d571ff4 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: github.com/cnabio/cnab-go dependency-version: 0.26.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/cnabio/cnab-to-oci dependency-version: 0.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/cnabio/image-relocation dependency-version: 0.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/containerd/containerd dependency-version: 1.7.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/docker/buildx dependency-version: 0.31.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/docker/cli dependency-version: 29.1.5+incompatible dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-dependencies - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/moby/buildkit dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: k8s.io/utils dependency-version: 0.0.0-20251002143259-bc988d571ff4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/go_modules/go-dependencies-0ce9c95420
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-dependencies group with 4 updates in the / directory: github.com/cnabio/cnab-go, github.com/cnabio/cnab-to-oci, github.com/docker/buildx and github.com/google/go-containerregistry.
Updates
github.com/cnabio/cnab-gofrom 0.26.0 to 0.26.1Release notes
Sourced from github.com/cnabio/cnab-go's releases.
Commits
cad527fBump the go-dependencies group across 1 directory with 5 updates (#387)Updates
github.com/cnabio/cnab-to-ocifrom 0.5.1 to 0.5.3Release notes
Sourced from github.com/cnabio/cnab-to-oci's releases.
Commits
05a2950Merge pull request #208 from cnabio/dependabot/go_modules/go-dependencies-eba...f3df649Bumped to go 1.25b5ff231Bump github.com/cnabio/cnab-go in the go-dependencies groupc257296Merge pull request #207 from cnabio/dependabot/go_modules/go-dependencies-bab...65adc1fBump the go-dependencies group with 3 updates31c4f61Merge pull request #206 from cnabio/dependabot/go_modules/go-dependencies-6d5...7d99ec6Bump github.com/docker/cli in the go-dependencies group0196238Merge pull request #205 from cnabio/dependabot/go_modules/go-dependencies-d5e...fb3a3a9Bump github.com/containerd/containerd in the go-dependencies groupb2bc6f1Merge pull request #204 from cnabio/dependabot/go_modules/go-dependencies-7e8...Updates
github.com/cnabio/image-relocationfrom 0.9.1 to 0.9.2Release notes
Sourced from github.com/cnabio/image-relocation's releases.
Commits
27face6Merge pull request #17 from cnabio/dependabot/github_actions/actions/setup-go-697ffc0aMerge pull request #16 from cnabio/dependabot/github_actions/actions/checkout-6f563986Merge pull request #15 from cnabio/dependabot/github_actions/actions/cache-47babefdMerge pull request #14 from cnabio/dependabot/github_actions/codecov/codecov-...567d7c4Bump actions/setup-go from 3 to 66f4b254Bump actions/checkout from 3 to 6a941ed4Bump actions/cache from 3 to 4154e292Bump codecov/codecov-action from 3 to 5102822fMerge pull request #13 from dgannon991/chore/bump-deps-and-introduce-dependabot4fb00bfIntroduced dependabot and set a good baselineUpdates
github.com/containerd/containerdfrom 1.7.29 to 1.7.30Release notes
Sourced from github.com/containerd/containerd's releases.
... (truncated)
Commits
71c1c86Merge pull request #12652 from dmcgowan/prepare-1.7.303d0ca6dPrepare release notes for v1.7.30a8ce78bMerge pull request #12650 from klihub/fixes/1.7.x/nri-cdi-device-injectionba2b3a2Merge pull request #12660 from AkihiroSuda/cni-1.9.0-1.70bc74f4cri,nri: don't drop requested CDI devices silently.7db16b5script/setup/install-cni: install CNI plugins v1.9.03b655c2Merge pull request #12640 from AkihiroSuda/dev-1.7bca897bgo.mod: golang.org/x/crypto v0.45.037cbd22CI: drop Go 1.23ee49d17Update Go requirements in BUILDINGUpdates
github.com/docker/buildxfrom 0.30.1 to 0.31.1Release notes
Sourced from github.com/docker/buildx's releases.
... (truncated)
Commits
a267595Merge pull request #3632 from tonistiigi/v0.31.1-picks3fba856imagetools: avoid pushing to same repo in paralleld841330imagetools: avoid trying to load attestations inline references95e1563imagetools: fix excessive copies on create command44945d7Merge pull request #3621 from tonistiigi/vendor-buildkit-v0.2708e5e8evendor: update buildkit to v0.27.079763c6Merge pull request #3616 from thaJeztah/bump_cli0d343efvendor: github.com/docker/cli v29.1.59c33ef3Merge pull request #3612 from tonistiigi/dhi-auth9567f7fMerge pull request #3614 from tonistiigi/policy-json-stubUpdates
github.com/docker/clifrom 28.5.2+incompatible to 29.1.5+incompatibleCommits
0e6fee6Merge pull request #6698 from thaJeztah/inline_parseWindowsDevice88be588Merge pull request #6709 from vvoland/img-list-all-docf7ddc8adocs: Update --all flag description to clarify it shows dangling images00e23cfMerge pull request #6706 from docker/dependabot/github_actions/actions/upload...4d7a8b0build(deps): bump actions/upload-artifact from 5 to 6f52814dMerge pull request #6705 from vvoland/list-fix0f03c31image/list: Fixdangling=falsehandling1e25906cli/tree: Remove unusedallfield4d6fc33Merge pull request #6704 from vvoland/list-fix09a4664image/tree: Add golden testUpdates
github.com/google/go-containerregistryfrom 0.20.6 to 0.21.1Release notes
Sourced from github.com/google/go-containerregistry's releases.
... (truncated)
Commits
85f2bf5crane: fix case in auth response json (#2218)e971d63Add WithFileBufferedOpener for file-backed daemon image buffering (#2214)8e2d6a6Update go version used in goreleaser (#2216)b58334fDisable taint gosec lints (#2215)88b39edBump the go-deps group across 3 directories with 3 updates (#2213)102ac75join go.mod dependency updates (#2212)d5817d5Bump go version across packages to 1.25.6 (#2211)23f0632Fix error messages in crane_test.go (#2189)438abdeBump the root-deps group across 1 directory with 7 updates (#2195)b6eadd8Bump the actions group across 1 directory with 4 updates (#2207)Updates
github.com/moby/buildkitfrom 0.26.1 to 0.27.0Release notes
Sourced from github.com/moby/buildkit's releases.
... (truncated)
Commits
2bcd66dMerge pull request #6482 from tonistiigi/v0.27-picks-26c53e9eforwarder: fix concurrent map write panic in the gateway forwarder64bc21aMerge pull request #6479 from tonistiigi/v0.27-picks6f380e6vendor: align google.golang.org/genproto/xxx versionsa9c91f7vendor: update go-actions-cache to 54bc28c2b2fc80eMerge pull request #6473 from tonistiigi/attestation-index-errora50e8a1source: avoid error when attestation asked from non-indexfaed462Merge pull request #6464 from tonistiigi/image-attestation-lease-fix870da9cMerge pull request #6465 from thaJeztah/bump_logrus98291f1vendor: github.com/sirupsen/logrus v1.9.4Updates
k8s.io/utilsfrom 0.0.0-20250604170112-4c0f3b243397 to 0.0.0-20251002143259-bc988d571ff4Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions