build(deps): bump the all group in /acceptance with 25 updates #225

dependabot · 2025-08-04T21:47:38Z

Bumps the all group in /acceptance with 25 updates:

Package	From	To
cuelang.org/go	`0.11.1`	`0.14.0`
github.com/cucumber/godog	`0.15.0`	`0.15.1`
github.com/enterprise-contract/enterprise-contract-controller/api	`0.1.79`	`0.1.122`
github.com/evanphx/json-patch/v5	`5.9.0`	`5.9.11`
github.com/gkampitakis/go-snaps	`0.5.7`	`0.5.14`
github.com/go-git/go-billy/v5	`5.6.0`	`5.6.2`
github.com/go-git/go-git/v5	`5.13.0`	`5.16.2`
github.com/google/go-containerregistry	`0.20.2`	`0.20.6`
github.com/otiai10/copy	`1.14.0`	`1.14.1`
github.com/secure-systems-lab/go-securesystemslib	`0.9.0`	`0.9.1`
github.com/sigstore/cosign/v2	`2.4.1`	`2.5.3`
github.com/sigstore/rekor	`1.3.6`	`1.3.10`
github.com/sigstore/sigstore	`1.8.9`	`1.9.5`
github.com/tektoncd/cli	`0.38.0`	`0.41.1`
github.com/tektoncd/pipeline	`0.66.0`	`1.0.0`
github.com/testcontainers/testcontainers-go	`0.34.0`	`0.38.0`
github.com/wiremock/go-wiremock	`1.11.0`	`1.13.0`
golang.org/x/exp	`0.0.0-20240823005443-9b4947da3948`	`0.0.0-20250408133849-7e4ce0ab07d0`
k8s.io/api	`0.31.4`	`0.33.2`
k8s.io/apimachinery	`0.31.4`	`0.33.2`
k8s.io/client-go	`0.31.4`	`0.33.2`
sigs.k8s.io/kind	`0.26.0`	`0.29.0`
sigs.k8s.io/kustomize/api	`0.18.0`	`0.20.1`
sigs.k8s.io/kustomize/kyaml	`0.18.1`	`0.20.1`
sigs.k8s.io/yaml	`1.4.0`	`1.5.0`

Updates cuelang.org/go from 0.11.1 to 0.14.0

Updates github.com/cucumber/godog from 0.15.0 to 0.15.1

Release notes

Sourced from github.com/cucumber/godog's releases.

v0.15.1

What's Changed

fix(deps): update module github.com/cucumber/godog to v0.15.0 by @renovate[bot] in cucumber/godog#661

fix(formatter): On concurrent execution, execute formatter at end of Scenario by @tigh-latte in cucumber/godog#645

Localisation support by @MegaGrindStone in cucumber/godog#665

Add details to "step is undefined" error by @vearutop in cucumber/godog#669

Update honnef.co/go/tools/cmd/staticcheck version in Makefile by @RezaZareiii in cucumber/godog#670

fix(deps): update module github.com/spf13/pflag to v1.0.6 by @renovate[bot] in cucumber/godog#675

fix(errors): Fix expected Step argument count for steps with context.Context by @tigh-latte in cucumber/godog#679

Replace deprecated ::set-output by @nodeg in cucumber/godog#681

chore(deps): update dominikh/staticcheck-action action to v1.4.0 by @renovate[bot] in cucumber/godog#689

fix: verify dogT exists in the context before using it by @cakoolen in cucumber/godog#692

fix: change bang to being in README by @nahomEagleLion in cucumber/godog#687

fix(deps): update module github.com/spf13/pflag to v1.0.7 by @renovate[bot] in cucumber/godog#694

feat: support uint types by @chengxilo in cucumber/godog#695

Mark junit test cases as skipped if no pickle step results available by @mrsheepuk in cucumber/godog#597

Print step declaration line instead of handler declaration line by @SpencerC in cucumber/godog#668

New Contributors

@MegaGrindStone made their first contribution in cucumber/godog#665

@RezaZareiii made their first contribution in cucumber/godog#670

@nodeg made their first contribution in cucumber/godog#681

@cakoolen made their first contribution in cucumber/godog#692

@nahomEagleLion made their first contribution in cucumber/godog#687

@chengxilo made their first contribution in cucumber/godog#695

@SpencerC made their first contribution in cucumber/godog#668

Full Changelog: cucumber/godog@v0.15.0...v0.15.1

Changelog

Sourced from github.com/cucumber/godog's changelog.

[v0.15.1]

Added

Step text is added to "step is undefined" error - (669 - vearutop)

Localisation support by @MegaGrindStone in cucumber/godog#665

feat: support uint types by @chengxilo in cucumber/godog#695

Changed

Replace deprecated ::set-output - (681 - nodeg)

Fixed

fix(errors): fix(errors): Fix expected Step argument count for steps with context.Context (679 - tigh-latte)

fix(formatter): On concurrent execution, execute formatter at end of Scenario - (645 - tigh-latte)

Pretty printing results now prints the line where the step is declared instead of the line where the handler is declared. (668 - spencerc)

Update honnef.co/go/tools/cmd/staticcheck version in Makefile by @RezaZareiii in cucumber/godog#670

fix: verify dogT exists in the context before using it by @cakoolen in cucumber/godog#692

fix: change bang to being in README by @nahomEagleLion in cucumber/godog#687

Mark junit test cases as skipped if no pickle step results available by @mrsheepuk in cucumber/godog#597

Print step declaration line instead of handler declaration line by @SpencerC in cucumber/godog#668

Commits

b7da3ab Update CHANGELOG.md for release, tidy modules
005cfc2 Print step declaration line instead of handler declaration line (#668)
6ba3a7e Mark junit test cases as skipped if no pickle step results available (#597)
9b4d5e9 feat: support uint types (#695)
963f338 fix(deps): update module github.com/spf13/pflag to v1.0.7 (#694)
6a0bb7f fix: change bang to being in README (#687)
3651f88 fix: verify dogT exists in the context before using it (#692)
532be7d chore(deps): update dominikh/staticcheck-action action to v1.4.0 (#689)
74fa488 Replace deprecated ::set-output (#681)
4a4fd8a fix(errors): Fix expected Step argument count for steps with `context.Context...
Additional commits viewable in compare view

Updates github.com/enterprise-contract/enterprise-contract-controller/api from 0.1.79 to 0.1.122

Release notes

Sourced from github.com/enterprise-contract/enterprise-contract-controller/api's releases.

API Release api/v0.1.122

What's Changed

chore(deps): update github/codeql-action action to v3.29.5 by @renovate[bot] in enterprise-contract/enterprise-contract-controller#548

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.121...api/v0.1.122

API Release api/v0.1.121

What's Changed

chore(deps): update github/codeql-action action to v3.29.4 by @renovate[bot] in enterprise-contract/enterprise-contract-controller#546

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.120...api/v0.1.121

API Release api/v0.1.120

What's Changed

chore(deps): update github/codeql-action action to v3.29.3 by @renovate[bot] in enterprise-contract/enterprise-contract-controller#545

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.119...api/v0.1.120

API Release api/v0.1.119

What's Changed

chore(deps): update registry.access.redhat.com/ubi8/ubi-micro:latest docker digest to c1b052e by @renovate[bot] in enterprise-contract/enterprise-contract-controller#543

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.118...api/v0.1.119

API Release api/v0.1.118

What's Changed

chore(deps): update step-security/harden-runner action to v2.13.0 by @renovate[bot] in enterprise-contract/enterprise-contract-controller#544

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.117...api/v0.1.118

API Release api/v0.1.117

What's Changed

chore: update references to github-workflows repo by @robnester-rh in enterprise-contract/enterprise-contract-controller#542

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.116...api/v0.1.117

API Release api/v0.1.116

What's Changed

chore(deps): update github/codeql-action action to v3.29.2 by @renovate in enterprise-contract/enterprise-contract-controller#541

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.115...api/v0.1.116

API Release api/v0.1.115

... (truncated)

Commits

06d3e25 chore(deps): update github/codeql-action action to v3.29.5 (#548)
e8aeb57 chore(deps): update github/codeql-action action to v3.29.4 (#546)
254dd32 chore(deps): update github/codeql-action action to v3.29.3 (#545)
3cbefd1 Merge pull request #543 from enterprise-contract/renovate/docker-updates
e9ecb43 chore(deps): update step-security/harden-runner action to v2.13.0 (#544)
6b3b184 chore(deps): update registry.access.redhat.com/ubi8/ubi-micro:latest docker d...
cdbb7f9 Merge pull request #542 from robnester-rh/EC-1118
cec302c chore: update references to github-workflows repo
ef75d55 chore(deps): update github/codeql-action action to v3.29.2 (#541)
c7ff330 chore(deps): update step-security/harden-runner action to v2.12.2 (#540)
Additional commits viewable in compare view

Updates github.com/evanphx/json-patch/v5 from 5.9.0 to 5.9.11

Release notes

Sourced from github.com/evanphx/json-patch/v5's releases.

v5.9.11

What's Changed

Export errBadJSONDoc and errBadJSONPatch errors by @skitt in evanphx/json-patch#209

Full Changelog: evanphx/json-patch@v5.9.10...v5.9.11

v5.9.10

What's Changed

Drop the reference to gopkg.in for v5 by @skitt in evanphx/json-patch#203

remove unmaintained errors pkg(github.com/pkg/errors) by @koba1t in evanphx/json-patch#206

New Contributors

@skitt made their first contribution in evanphx/json-patch#203

@koba1t made their first contribution in evanphx/json-patch#206

Full Changelog: evanphx/json-patch@v5.9.0...v5.9.10

Commits

84a4bb1 Merge pull request #209 from skitt/export-errs-v5
7a7a88a Export errBadJSONDoc and errBadJSONPatch errors
bd18525 Upgrade go-flags
42f26cb Fix spacing
0a3482b Merge pull request #206 from koba1t/remove_unmaintained_error_pkg
106306d remove unmaintained errors pkg
e7cfbbb Merge pull request #203 from skitt/drop-gopkgin-v5
61e1ad7 Drop the reference to gopkg.in for v5
See full diff in compare view

Updates github.com/gkampitakis/go-snaps from 0.5.7 to 0.5.14

Release notes

Sourced from github.com/gkampitakis/go-snaps's releases.

v0.5.14

What's Changed

feat: snaps.Clean now returns if snaps dirty and err by @gkampitakis in gkampitakis/go-snaps#131

Full Changelog: gkampitakis/go-snaps@v0.5.13...v0.5.14

v0.5.13

What's Changed

feat: support MatchStandaloneYAML by @gkampitakis in gkampitakis/go-snaps#128

chore: update go-yaml and gh-action deps by @gkampitakis in gkampitakis/go-snaps#129

Full Changelog: gkampitakis/go-snaps@v0.5.12...v0.5.13

v0.5.12

What's Changed

feat: add UPDATE_SNAPS=always for updating and creating snaps on CI setup by @gkampitakis in gkampitakis/go-snaps#126

Full Changelog: gkampitakis/go-snaps@v0.5.11...v0.5.12

v0.5.11

What's Changed

feat: add json format config by @kitimark in gkampitakis/go-snaps#121

New Contributors

@kitimark made their first contribution in gkampitakis/go-snaps#121

Full Changelog: gkampitakis/go-snaps@v0.5.10...v0.5.11

v0.5.10

What's Changed

fix: handle builds with trimpath enabled by @gkampitakis in gkampitakis/go-snaps#120

Full Changelog: gkampitakis/go-snaps@v0.5.9...v0.5.10

v0.5.9

What's Changed

fix: snaps.Update should apply and on snapshot create by @gkampitakis in gkampitakis/go-snaps#119

Full Changelog: gkampitakis/go-snaps@v0.5.8...v0.5.9

Kudos to @orloffv for this issue gkampitakis/go-snaps#116

v0.5.8

... (truncated)

Commits

e303e41 feat: snaps.Clean now returns if snaps dirty and err (#131)
e88f212 chore: update go-yaml and gh-action deps (#129)
2957128 feat: support MatchStandaloneYAML (#128)
66ada09 feat: add UPDATE_SNAPS=always for updating and creating snaps on CI setup (#126)
1bd0d83 chore: add FUNDING details
e004bc1 feat: add json format config (#121)
8740883 fix: handle builds with trimpath enabled (#120)
00f3055 fix: snaps.Update should apply and on snapshot create (#119)
560fde0 feat: implement matchStandaloneJSON (#113)
f81115d feat: implement matchYAML (#114)
See full diff in compare view

Updates github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.2

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.6.2

What's Changed

Enable the iofs adapter to also return other interfaces from io/fs by @JAORMX in go-git/go-billy#102

build: Bump dependencies by @pjbgf in go-git/go-billy#103

New Contributors

@JAORMX made their first contribution in go-git/go-billy#102

Full Changelog: go-git/go-billy@v5.6.1...v5.6.2

v5.6.1

What's Changed

build: bump github/codeql-action from 3.26.11 to 3.27.0 by @dependabot in go-git/go-billy#88

build: bump github/codeql-action from 3.27.0 to 3.27.1 by @dependabot in go-git/go-billy#89

build: bump github/codeql-action from 3.27.1 to 3.27.4 by @dependabot in go-git/go-billy#90

build: bump github/codeql-action from 3.27.4 to 3.27.5 by @dependabot in go-git/go-billy#91

Bump dependencies and build housekeeping by @pjbgf in go-git/go-billy#95

Full Changelog: go-git/go-billy@v5.6.0...v5.6.1

Commits

9f8b16d Merge pull request #103 from pjbgf/bump-deps
783f58c build: Bump dependencies
0009381 Merge pull request #102 from JAORMX/iofs-extra-interfaces-v5
21beb15 Enable the iofs adapter to also return other interfaces from io/fs
a6c6b50 Merge pull request #95 from pjbgf/pre-release
f4615d3 build: Remove test_js workflow
ae8b61b build: Bump workflows Go versions
b412339 build: Align dependabot settings with go-git
d982317 build: Bump Go to 1.21 and dependencies
9ca623c Merge pull request #91 from go-git/dependabot/github_actions/github/codeql-ac...
Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.13.0 to 5.16.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.16.2

What's Changed

utils: fix diff so subpaths work for sparse checkouts, fixes 1455 to releases/v5.x by @kane8n in go-git/go-git#1567

Full Changelog: go-git/go-git@v5.16.1...v5.16.2

v5.16.1

What's Changed

utils: merkletrie, Fix diff on sparse-checkout index. Fixes #1406 to releases/v5.x by @kane8n in go-git/go-git#1561

New Contributors

@kane8n made their first contribution in go-git/go-git#1561

Full Changelog: go-git/go-git@v5.16.0...v5.16.1

v5.16.0

What's Changed

[v5] plumbing: support mTLS for HTTPS protocol by @hiddeco in go-git/go-git#1510

v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix #1514 by @pjbgf in go-git/go-git#1515

Full Changelog: go-git/go-git@v5.15.0...v5.16.0

v5.15.0

What's Changed

plumbing: add cert auth support to releases/v5.x by @Javier-varez in go-git/go-git#1482

v5: Bump dependencies by @pjbgf in go-git/go-git#1505

Full Changelog: go-git/go-git@v5.14.0...v5.15.0

v5.14.0

What's Changed

v5: Bump Go and dependencies to mitigate GO-2025-3487 by @pjbgf in go-git/go-git#1436

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/crypto@v0.35.0 which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: go-git/go-git@v5.13.2...v5.14.0

v5.13.2

What's Changed

plumbing: use the correct user agent string. Fixes #883 by @uragirii in go-git/go-git#1364

build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by @dependabot in go-git/go-git#1365

build: bump the golang-org group with 2 updates by @dependabot in go-git/go-git#1367

build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by @dependabot in go-git/go-git#1368

build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by @dependabot in go-git/go-git#1378

build: bump github/codeql-action from 3.28.0 to 3.28.1 by @dependabot in go-git/go-git#1376

build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by @dependabot in go-git/go-git#1377

git: worktree, fix restoring dot slash files (backported to v5). Fixes #1176 by @BeChris in go-git/go-git#1361

... (truncated)

Commits

ed8216c Merge pull request #1567 from kane8n/backport-to-v5-patricsss/fix-1455
4f35eba Merge pull request #1484 from patricsss/patricsss/fix-1455
fd1a836 Merge pull request #1561 from kane8n/backport-to-v5-fix-sparse-checkout-status
c3c8410 Merge pull request #1492 from onee-only/fix-sparse-checkout-status
6d4a5c6 Merge pull request #1515 from pjbgf/regre
beedd6b plumbing: transport, Reintroduce SetHostKeyCallback. Fix #1514
763ce2e Merge pull request #1510 from hiddeco/mtls-support
5320e1b plumbing: surface transport configuration errors
9bbc93b plumbing: fix unintended pointer mutation in test
f3783f4 plumbing: support mTLS for HTTPS protocol
Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.20.2 to 0.20.6

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.6

What's Changed

Ensure that tag name is not empty if name contains colon by @SaschaSchwarze0 in google/go-containerregistry#2094

Bump some deps by @jonjohnsonjr in google/go-containerregistry#2110

New Contributors

@SaschaSchwarze0 made their first contribution in google/go-containerregistry#2094

Full Changelog: google/go-containerregistry@v0.20.4...v0.20.6

v0.20.5

What's Changed

build(deps): bump docker/docker to v28.0.0+incompatible by @luhring in google/go-containerregistry#2071

Migrate linter to v2 by @Subserial in google/go-containerregistry#2096

bump go version + bump deps by @Subserial in google/go-containerregistry#2093

implement TextMarshaler/JSONMarshaler more consistently by @imjasonh in google/go-containerregistry#2097

Update CodeQL permissions by @Subserial in google/go-containerregistry#2103

Update goreleaser permissions by @Subserial in google/go-containerregistry#2104

Update provenance action in release by @Subserial in google/go-containerregistry#2105

Update validator action by @Subserial in google/go-containerregistry#2106

New Contributors

@luhring made their first contribution in google/go-containerregistry#2071

@Subserial made their first contribution in google/go-containerregistry#2096

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.5

v0.20.4 - Not usable as a go module

🚨 This release was published to the Go module proxy and then re-tagged with a different commit. This means it's not usable as a Go module (google/go-containerregistry#2107) -- please us v0.20.5 instead.

What's Changed

build(deps): bump docker/docker to v28.0.0+incompatible by @luhring in google/go-containerregistry#2071

Migrate linter to v2 by @Subserial in google/go-containerregistry#2096

bump go version + bump deps by @Subserial in google/go-containerregistry#2093

implement TextMarshaler/JSONMarshaler more consistently by @imjasonh in google/go-containerregistry#2097

Update CodeQL permissions by @Subserial in google/go-containerregistry#2103

Update goreleaser permissions by @Subserial in google/go-containerregistry#2104

Update provenance action in release by @Subserial in google/go-containerregistry#2105

Update validator action by @Subserial in google/go-containerregistry#2106

New Contributors

@luhring made their first contribution in google/go-containerregistry#2071

@Subserial made their first contribution in google/go-containerregistry#2096

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.4

v0.20.3

What's Changed

remote/transport: Make bearer transport go-routine-safe by @2opremio in google/go-containerregistry#1806

Expose compare package by @jonjohnsonjr in google/go-containerregistry#2001

... (truncated)

Commits

59a4b85 Bump some deps (#2110)
5b10395 Ensure that tag name is not empty if name contains colon (#2094)
4eb8c4d Update validator action (#2106)
78d4a6e Update provenance action (#2105)
33840ff Update goreleaser permissions (#2104)
8d47c37 Update CodeQL permissions (#2103)
a61de15 implement TextMarshaler/JSONMarshaler more consistently (#2097)
1d5b256 bump go version + bump deps (#2093)
ccaa0d6 Migrate linter to v2 (#2096)
098045d build(deps): bump docker/docker to v28.0.0+incompatible (#2071)
Additional commits viewable in compare view

Updates github.com/otiai10/copy from 1.14.0 to 1.14.1

Commits

5ef5923 Revert "CopyMethod" since it's not ready
49b0b59 Merge pull request #164 from eth-p/feat-copymethod-api
f530620 ci: Allow triggering Go workflow manually
b4dd789 refactor: Split common code out of CopyBytes
9205813 feat: Add FileCopyMethod option / API
2f93b8f Merge pull request #159 from otiai10/dependabot/go_modules/main/golang.org/x/...
87072f3 Bump golang.org/x/sys from 0.23.0 to 0.24.0
d0690cb Merge pull request #158 from otiai10/dependabot/go_modules/main/golang.org/x/...
b87119d Bump golang.org/x/sys from 0.22.0 to 0.23.0
355527c Merge pull request #157 from otiai10/dependabot/go_modules/main/golang.org/x/...
Additional commits viewable in compare view

Updates github.com/secure-systems-lab/go-securesystemslib from 0.9.0 to 0.9.1

Commits

a1a33cd Merge pull request #120 from secure-systems-lab/dependabot/github_actions/dom...
4f201c1 Merge pull request #122 from rosstimothy/tross/remove_testing
5d1cc26 Move hexDecode test helper into a test file
ebae973 Merge pull request #121 from secure-systems-lab/dependabot/go_modules/golang....
551dff1 chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0
50ac487 chore(deps): bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
9d9f015 Merge pull request #117 from secure-systems-lab/dependabot/go_modules/golang....
9aa50ea chore(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0
3e526e2 Merge pull request #115 from secure-systems-lab/dependabot/go_modules/golang....
a1093e6 Merge pull request #116 from secure-systems-lab/dependabot/github_actions/act...
Additional commits viewable in compare view

Updates github.com/sigstore/cosign/v2 from 2.4.1 to 2.5.3

Release notes

Sourced from github.com/sigstore/cosign/v2's releases.

v2.5.3

Changelog

488ef8ceed5ab5d77379e9077a124a0d0df41d06 Add signing-config create command (#4280)

722207e0059efea600a7c03ea4ff6caa889d84d3 Allow multiple services to be specified for trusted-root create (#4285)

2ee22fcdf520a984281ff0195be89810a952280c force when copying the latest image to overwrite (#4298)

86560e15eb407f7fa2ddddc7d9dbc4ba33cff635 Fix cert verification logic for trusted-root/SCTs (#4294)

9f3b013feb3d46c8ee6d5539e7b13eb736ba14ce Fix lint error for types package (#4295)

3b3c0fc20b621ed148b3efea00204f67bfda039d feat: Add OCI 1.1+ experimental support to tree (#4205)

49c8d784a78d298d0eef1f9898d70eb2d0f07536 Add validity period end for trusted-root create (#4271)

ba8214ec0c6e50ef8c4e4272a16ccfacf5f3147d avoid double-loading trustedroot from file (#4264)

Thanks to all contributors!

v2.5.2

Changelog

b1261098fbe8a7680732d36b52237ecf574808d5 Do not load trusted root when CT env key is set

19ef59d3d55e2c987de30bbd3b72fe3df0d1ec34 docs: improve doc for --no-upload option (#4206)

Thanks to all contributors!

v2.5.1

Features

Add Rekor v2 support for trusted-root create (#4242)

Add baseUrl and Uri to trusted-root create command

Upgrade to TUF v2 client with trusted root

Don't verify SCT for a private PKI cert (#4225)

Bump TSA library to relax EKU chain validation rules (#4219)

Bug Fixes

Bump sigstore-go to pick up log index=0 fix (#4162)

remove unused recursive flag on attest command (#4187)

Docs

Fix indentation in verify-blob cmd examples (#4160)

Releases

ensure we copy the latest tags on each release (#4157)

v2.5.0 includes an implementation of the new bundle specification, attesting and verifying OCI image attestations uploaded as OCI artifacts. This feature is currently gated behind the --new-bundle-format flag

... (truncated)

Changelog

Sourced from github.com/sigstore/cosign/v2's changelog.

v2.5.3

Features

Add signing-config create command (#4280)

Allow multiple services to be specified for trusted-root create (#4285)

feat: Add OCI 1.1+ experimental support to tree (#4205)

Add validity period end for trusted-root create (#4271)

Bug Fixes

Fix cert verification logic for trusted-root/SCTs (#4294)

force when copying the latest image to overwrite (#4298)

avoid double-loading trustedroot from file (#4264)

v2.5.2

Bug Fixes

Do not load trusted root when CT env key is set

Documentation

docs: improve doc for --no-upload option (#4206)

v2.5.1

Features

Add Rekor v2 support for trusted-root create (#4242)

Add baseUrl and Uri to trusted-root create command

Upgrade to TUF v2 client with trusted root
...
Description has been truncated

Bumps the all group in /acceptance with 25 updates: | Package | From | To | | --- | --- | --- | | cuelang.org/go | `0.11.1` | `0.14.0` | | [github.com/cucumber/godog](https://github.com/cucumber/godog) | `0.15.0` | `0.15.1` | | [github.com/enterprise-contract/enterprise-contract-controller/api](https://github.com/enterprise-contract/enterprise-contract-controller) | `0.1.79` | `0.1.122` | | [github.com/evanphx/json-patch/v5](https://github.com/evanphx/json-patch) | `5.9.0` | `5.9.11` | | [github.com/gkampitakis/go-snaps](https://github.com/gkampitakis/go-snaps) | `0.5.7` | `0.5.14` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.0` | `5.6.2` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.0` | `5.16.2` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.2` | `0.20.6` | | [github.com/otiai10/copy](https://github.com/otiai10/copy) | `1.14.0` | `1.14.1` | | [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) | `0.9.0` | `0.9.1` | | [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.4.1` | `2.5.3` | | [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.3.6` | `1.3.10` | | [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.8.9` | `1.9.5` | | [github.com/tektoncd/cli](https://github.com/tektoncd/cli) | `0.38.0` | `0.41.1` | | [github.com/tektoncd/pipeline](https://github.com/tektoncd/pipeline) | `0.66.0` | `1.0.0` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.34.0` | `0.38.0` | | [github.com/wiremock/go-wiremock](https://github.com/wiremock/go-wiremock) | `1.11.0` | `1.13.0` | | [golang.org/x/exp](https://github.com/golang/exp) | `0.0.0-20240823005443-9b4947da3948` | `0.0.0-20250408133849-7e4ce0ab07d0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.31.4` | `0.33.2` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.31.4` | `0.33.2` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.31.4` | `0.33.2` | | [sigs.k8s.io/kind](https://github.com/kubernetes-sigs/kind) | `0.26.0` | `0.29.0` | | [sigs.k8s.io/kustomize/api](https://github.com/kubernetes-sigs/kustomize) | `0.18.0` | `0.20.1` | | [sigs.k8s.io/kustomize/kyaml](https://github.com/kubernetes-sigs/kustomize) | `0.18.1` | `0.20.1` | | [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) | `1.4.0` | `1.5.0` | Updates `cuelang.org/go` from 0.11.1 to 0.14.0 Updates `github.com/cucumber/godog` from 0.15.0 to 0.15.1 - [Release notes](https://github.com/cucumber/godog/releases) - [Changelog](https://github.com/cucumber/godog/blob/main/CHANGELOG.md) - [Commits](cucumber/godog@v0.15.0...v0.15.1) Updates `github.com/enterprise-contract/enterprise-contract-controller/api` from 0.1.79 to 0.1.122 - [Release notes](https://github.com/enterprise-contract/enterprise-contract-controller/releases) - [Commits](enterprise-contract/enterprise-contract-controller@api/v0.1.79...api/v0.1.122) Updates `github.com/evanphx/json-patch/v5` from 5.9.0 to 5.9.11 - [Release notes](https://github.com/evanphx/json-patch/releases) - [Commits](evanphx/json-patch@v5.9.0...v5.9.11) Updates `github.com/gkampitakis/go-snaps` from 0.5.7 to 0.5.14 - [Release notes](https://github.com/gkampitakis/go-snaps/releases) - [Commits](gkampitakis/go-snaps@v0.5.7...v0.5.14) Updates `github.com/go-git/go-billy/v5` from 5.6.0 to 5.6.2 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.6.0...v5.6.2) Updates `github.com/go-git/go-git/v5` from 5.13.0 to 5.16.2 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.13.0...v5.16.2) Updates `github.com/google/go-containerregistry` from 0.20.2 to 0.20.6 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml) - [Commits](google/go-containerregistry@v0.20.2...v0.20.6) Updates `github.com/otiai10/copy` from 1.14.0 to 1.14.1 - [Release notes](https://github.com/otiai10/copy/releases) - [Commits](otiai10/copy@v1.14.0...v1.14.1) Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.9.0 to 0.9.1 - [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases) - [Commits](secure-systems-lab/go-securesystemslib@v0.9.0...v0.9.1) Updates `github.com/sigstore/cosign/v2` from 2.4.1 to 2.5.3 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v2.4.1...v2.5.3) Updates `github.com/sigstore/rekor` from 1.3.6 to 1.3.10 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.3.6...v1.3.10) Updates `github.com/sigstore/sigstore` from 1.8.9 to 1.9.5 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.9...v1.9.5) Updates `github.com/tektoncd/cli` from 0.38.0 to 0.41.1 - [Release notes](https://github.com/tektoncd/cli/releases) - [Changelog](https://github.com/tektoncd/cli/blob/main/releases.md) - [Commits](tektoncd/cli@v0.38.0...v0.41.1) Updates `github.com/tektoncd/pipeline` from 0.66.0 to 1.0.0 - [Release notes](https://github.com/tektoncd/pipeline/releases) - [Changelog](https://github.com/tektoncd/pipeline/blob/main/releases.md) - [Commits](tektoncd/pipeline@v0.66.0...v1.0.0) Updates `github.com/testcontainers/testcontainers-go` from 0.34.0 to 0.38.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.34.0...v0.38.0) Updates `github.com/wiremock/go-wiremock` from 1.11.0 to 1.13.0 - [Release notes](https://github.com/wiremock/go-wiremock/releases) - [Commits](wiremock/go-wiremock@v1.11.0...v1.13.0) Updates `golang.org/x/exp` from 0.0.0-20240823005443-9b4947da3948 to 0.0.0-20250408133849-7e4ce0ab07d0 - [Commits](https://github.com/golang/exp/commits) Updates `k8s.io/api` from 0.31.4 to 0.33.2 - [Commits](kubernetes/api@v0.31.4...v0.33.2) Updates `k8s.io/apimachinery` from 0.31.4 to 0.33.2 - [Commits](kubernetes/apimachinery@v0.31.4...v0.33.2) Updates `k8s.io/client-go` from 0.31.4 to 0.33.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.31.4...v0.33.2) Updates `sigs.k8s.io/kind` from 0.26.0 to 0.29.0 - [Release notes](https://github.com/kubernetes-sigs/kind/releases) - [Commits](kubernetes-sigs/kind@v0.26.0...v0.29.0) Updates `sigs.k8s.io/kustomize/api` from 0.18.0 to 0.20.1 - [Release notes](https://github.com/kubernetes-sigs/kustomize/releases) - [Commits](kubernetes-sigs/kustomize@api/v0.18.0...api/v0.20.1) Updates `sigs.k8s.io/kustomize/kyaml` from 0.18.1 to 0.20.1 - [Release notes](https://github.com/kubernetes-sigs/kustomize/releases) - [Commits](kubernetes-sigs/kustomize@kyaml/v0.18.1...api/v0.20.1) Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.5.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.4.0...v1.5.0) --- updated-dependencies: - dependency-name: cuelang.org/go dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/cucumber/godog dependency-version: 0.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/enterprise-contract/enterprise-contract-controller/api dependency-version: 0.1.122 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/evanphx/json-patch/v5 dependency-version: 5.9.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/gkampitakis/go-snaps dependency-version: 0.5.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/google/go-containerregistry dependency-version: 0.20.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/otiai10/copy dependency-version: 1.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/secure-systems-lab/go-securesystemslib dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/cosign/v2 dependency-version: 2.5.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/rekor dependency-version: 1.3.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/sigstore dependency-version: 1.9.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/tektoncd/cli dependency-version: 0.41.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/tektoncd/pipeline dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: github.com/testcontainers/testcontainers-go dependency-version: 0.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/wiremock/go-wiremock dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/exp dependency-version: 0.0.0-20250408133849-7e4ce0ab07d0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/api dependency-version: 0.33.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/apimachinery dependency-version: 0.33.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/client-go dependency-version: 0.33.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: sigs.k8s.io/kind dependency-version: 0.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: sigs.k8s.io/kustomize/api dependency-version: 0.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: sigs.k8s.io/kustomize/kyaml dependency-version: 0.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: sigs.k8s.io/yaml dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 4, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the all group in /acceptance with 25 updates #225

build(deps): bump the all group in /acceptance with 25 updates #225

Uh oh!

dependabot bot commented on behalf of github Aug 4, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

build(deps): bump the all group in /acceptance with 25 updates #225

Are you sure you want to change the base?

build(deps): bump the all group in /acceptance with 25 updates #225

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.15.1

What's Changed

New Contributors

[v0.15.1]

Added

Changed

Fixed

API Release api/v0.1.122

What's Changed

API Release api/v0.1.121

What's Changed

API Release api/v0.1.120

What's Changed

API Release api/v0.1.119

What's Changed

API Release api/v0.1.118

What's Changed

API Release api/v0.1.117

What's Changed

API Release api/v0.1.116

What's Changed

API Release api/v0.1.115

v5.9.11

What's Changed

v5.9.10

What's Changed

New Contributors

v0.5.14

What's Changed

v0.5.13

What's Changed

v0.5.12

What's Changed

v0.5.11

What's Changed

New Contributors

v0.5.10

What's Changed

v0.5.9

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.8...v0.5.9

v0.5.8

v5.6.2

What's Changed

New Contributors

v5.6.1

What's Changed

v5.16.2

What's Changed

v5.16.1

What's Changed

New Contributors

v5.16.0

What's Changed

v5.15.0

What's Changed

v5.14.0

What's Changed

v5.13.2

What's Changed

v0.20.6

What's Changed

New Contributors

v0.20.5

What's Changed

New Contributors

v0.20.4 - Not usable as a go module

What's Changed

New Contributors

v0.20.3

What's Changed

v2.5.3

Changelog

dependabot bot commented on behalf of github Aug 4, 2025 •

edited

Loading

Full Changelog: gkampitakis/go-snaps@`v0.5.8...v0.5.9`