Repository navigation
build(deps): bump the go-dependencies group across 1 directory with 16 updates - #2718
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
force-pushed
the
dependabot/go_modules/go-dependencies-87f15db3b3
branch
2 times, most recently
from
October 26, 2026 22:13
301f06d to
ee56d6b
Compare
…6 updates Bumps the go-dependencies group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio) | `0.6.2` | `0.6.4` | | [github.com/chainguard-dev/kaniko](https://github.com/chainguard-dev/kaniko) | `1.25.16` | `1.25.20` | | [github.com/docker/cli](https://github.com/docker/cli) | `29.4.3+incompatible` | `29.7.2+incompatible` | | [github.com/dustin/go-humanize](https://github.com/dustin/go-humanize) | `1.0.1` | `1.1.0` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.19.2` | `5.19.3` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.22.1` | | [github.com/moby/moby/api](https://github.com/moby/moby) | `1.54.2` | `1.55.0` | | [github.com/moby/moby/client](https://github.com/moby/moby) | `0.4.1` | `0.5.1` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.42.1` | `1.44.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.41.0` | `0.42.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.23.0` | `0.24.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.48.0` | `0.49.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` | Updates `github.com/Microsoft/go-winio` from 0.6.2 to 0.6.4 - [Release notes](https://github.com/Microsoft/go-winio/releases) - [Commits](microsoft/go-winio@v0.6.2...v0.6.4) Updates `github.com/chainguard-dev/kaniko` from 1.25.16 to 1.25.20 - [Release notes](https://github.com/chainguard-dev/kaniko/releases) - [Changelog](https://github.com/chainguard-forks/kaniko/blob/main/CHANGELOG.md) - [Commits](chainguard-forks/kaniko@v1.25.16...v1.25.20) Updates `github.com/docker/cli` from 29.4.3+incompatible to 29.7.2+incompatible - [Commits](docker/cli@v29.4.3...v29.7.2) Updates `github.com/dustin/go-humanize` from 1.0.1 to 1.1.0 - [Commits](dustin/go-humanize@v1.0.1...v1.1.0) Updates `github.com/go-git/go-git/v5` from 5.19.2 to 5.19.3 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.19.2...v5.19.3) Updates `github.com/google/go-containerregistry` from 0.21.5 to 0.22.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.5...v0.22.1) Updates `github.com/moby/moby/api` from 1.54.2 to 1.55.0 - [Release notes](https://github.com/moby/moby/releases) - [Commits](moby/moby@api/v1.54.2...api/v1.55.0) Updates `github.com/moby/moby/client` from 0.4.1 to 0.5.1 - [Release notes](https://github.com/moby/moby/releases) - [Changelog](https://github.com/moby/moby/blob/v0.5.1/CHANGELOG.md) - [Commits](moby/moby@v0.4.1...v0.5.1) Updates `github.com/onsi/gomega` from 1.42.1 to 1.44.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.42.1...v1.44.0) Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0 - [Commits](golang/crypto@v0.57.0...v0.58.0) Updates `golang.org/x/mod` from 0.41.0 to 0.42.0 - [Commits](golang/mod@v0.41.0...v0.42.0) Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0 - [Commits](golang/oauth2@v0.36.0...v0.37.0) Updates `golang.org/x/sync` from 0.23.0 to 0.24.0 - [Commits](golang/sync@v0.23.0...v0.24.0) Updates `golang.org/x/sys` from 0.48.0 to 0.49.0 - [Commits](golang/sys@v0.48.0...v0.49.0) Updates `golang.org/x/term` from 0.46.0 to 0.47.0 - [Commits](golang/term@v0.46.0...v0.47.0) Updates `golang.org/x/text` from 0.42.0 to 0.43.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.42.0...v0.43.0) --- updated-dependencies: - dependency-name: github.com/chainguard-dev/kaniko dependency-version: 1.25.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/docker/cli dependency-version: 29.9.0+incompatible dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/dustin/go-humanize dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/google/go-containerregistry dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/Microsoft/go-winio dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/moby/moby/api dependency-version: 1.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/moby/moby/client dependency-version: 0.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/onsi/gomega dependency-version: 1.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/crypto dependency-version: 0.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/mod dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/oauth2 dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sys dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/term dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/text dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/go_modules/go-dependencies-87f15db3b3
branch
from
November 2, 2026 22:13
ee56d6b to
75e23ff
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-dependencies group with 16 updates in the / directory:
0.6.20.6.41.25.161.25.2029.4.3+incompatible29.7.2+incompatible1.0.11.1.05.19.25.19.30.21.50.22.11.54.21.55.00.4.10.5.11.42.11.44.00.57.00.58.00.41.00.42.00.36.00.37.00.23.00.24.00.48.00.49.00.46.00.47.00.42.00.43.0Updates
github.com/Microsoft/go-winiofrom 0.6.2 to 0.6.4Release notes
Sourced from github.com/Microsoft/go-winio's releases.
Commits
b900fd8Fix regression in mkwinsyscall for non SystemDLLs (#394)48c993aBump golang.org/x/sys from 0.48.0 to 0.49.0 (#393)2430248improve interoperability with stdlib sentinel errors and deprecate aliases (#...f19d971linting: enable dupword, intrange, mirror, gocritic (#387)0b70f54tools/mkwinsyscall: remove errnoERROR_IO_PENDING const (#260)7e8af9bResolves race in makeConnectedServerPipe / Close (#388)70234f2Bump golang.org/x/tools to v0.50.0 (#385)1de8712fix linting issues (#325)3093527ci: update actions and golangci-lint, and fix linting (#349)c7e589dMerge pull request #383 from thaJeztah/use_tool_generateUpdates
github.com/chainguard-dev/kanikofrom 1.25.16 to 1.25.20Release notes
Sourced from github.com/chainguard-dev/kaniko's releases.
... (truncated)
Commits
96c054cchore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#505)08de01fFix GO-2026-6225: carry a patched docker-credential-acr-env inside the kaniko...605f716chore(deps): bump github.com/cyphar/filepath-securejoin (#507)624b30cchore(deps): bump zizmorcore/zizmor-action (#503)4ef72a0chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 (#484)690743cchore(deps): bump the gomod group across 1 directory with 7 updates (#497)20ad4e3chore(deps): bump the actions group across 1 directory with 5 updates (#499)0d97f2cchore(deps): bump buildkit to 0.31.1 and go-containerregistry to 0.22.1 (#498)0da6497chore(deps): bump github.com/containerd/containerd/v2 (#490)3221da2chore(deps): bump busybox from32b5cdatoea2b991in /deploy (#491)Updates
github.com/docker/clifrom 29.4.3+incompatible to 29.7.2+incompatibleCommits
a7dcaa6Merge pull request #7151 from vvoland/update-archive400b45fvendor: github.com/moby/go-archive v0.3.338887ecMerge pull request #7145 from winklemad/fix-service-duplicate-removal-panic904aef7Merge pull request #7147 from docker/dependabot/github_actions/docker-actions...f08e60ebuild(deps): bump docker/docker-agent-action/.github/workflows/review-pr.ymlabfd891Merge pull request #7149 from vvoland/update-docker519eb45VERSION: 29.7.28717af7cli/command/service: fix panic when removing duplicate valuese9452d6Merge pull request #7142 from thaJeztah/bump_go_archive_0.3.2a6014a7vendor: github.com/moby/go-archive v0.3.2Updates
github.com/dustin/go-humanizefrom 1.0.1 to 1.1.0Commits
40736daFix #105528b6f7Fix #852ccb40fFix #1030509d5bfeat: add ParseComma and ParseCommaf with doc comments and epsilon test0a173b2Increase big coverageca34c61Bump actions/setup-go from 6.1.0 to 6.3.0da71bb0Bump actions/checkout from 5.0.1 to 6.0.2d02cffbsi: accept the Greek letter mu as an alias for µ in ParseSI0f3681dRound off coverage of biged94053Increase bytes parsing coverageUpdates
github.com/go-git/go-git/v5from 5.19.2 to 5.19.3Release notes
Sourced from github.com/go-git/go-git/v5's releases.
Commits
bdae57cMerge pull request #2468 from go-git/bump-pjbgf372805dbuild: Bump pjbgf/sha1cd to v0.7.0e28bfffMerge pull request #2467 from go-git/renovate/releases/v5.x-go-gitdbfe60fbuild: Update module github.com/go-git/go-billy/v5 to v5.9.2a3fa9b3Merge pull request #2451 from go-git/drop-go-1.251fc0e47build: Drop Go 1.254f28503Merge pull request #2340 from jgoosens/releases/v5.x5a01a03Merge pull request #2357 from go-git/renovate/releases/v5.x-go-golang.org-x-c...5372bc7Merge pull request #2421 from akashchamp/fix/packfile-parallel-test-race3d20dedplumbing: format/packfile, Stop running TestChecksumMismatch and TestMalforme...Updates
github.com/google/go-containerregistryfrom 0.21.5 to 0.22.1Release notes
Sourced from github.com/google/go-containerregistry's releases.
... (truncated)
Commits
8a72a42remote: copy manifest annotations to referrers fallback tag descriptors (#2441)5765c35build(deps): bump the go-deps group across 2 directories with 3 updates (#2439)969402ffix(mutate): make Time layer updates lazy (#2429)25c682eflatten: preserve config and layer media types when flattening (#2438)79af990remote: add SSRF redirect protection to writer-side HTTP clients (#2432)4b9b3c7fix(release): honor declared Go toolchain (#2435)e033b9cfix(build): install binaries to /ko-app and add to PATH (#2424) (#2436)8bd7902name: return a helpful error when a reference contains a URL scheme (#2431)163134dvalidate: support index attestation manifests and empty configs (#2414)44f7ea3fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml (#2434)Updates
github.com/moby/moby/apifrom 1.54.2 to 1.55.0Release notes
Sourced from github.com/moby/moby/api's releases.
Commits
b6c53c2Merge pull request #52773 from vvoland/c8d-amd64-variants01115e8Merge pull request #52906 from vvoland/fix-TestContainerWithConflictingNoneNe...b36296fMerge pull request #52913 from thaJeztah/windows_does_statsa81aa78TestContainerWithConflictingNoneNetwork: Extend Windows timeout908a35aMerge pull request #52914 from thaJeztah/no_stderr04d33b5Merge pull request #52912 from thaJeztah/cleanup_GenerateRandomAlphaOnlyString3b2f557Merge pull request #52722 from notandruu/integration/migrate-TestInspectAPIIm...62b3aaeMerge pull request #52901 from vvoland/c8d-imageusage11d3342integration-cli: un-skip stats tests on Windowsa47b1b2Merge pull request #52891 from smerkviladze/attestations-clearer-blob-missing...Updates
github.com/moby/moby/clientfrom 0.4.1 to 0.5.1Release notes
Sourced from github.com/moby/moby/client's releases.
Changelog
Sourced from github.com/moby/moby/client's changelog.
... (truncated)
Commits
3b89d13Bump to v0.5.116225c4Merge pull request #1291 from dotcloud/ensure_mount_commitdd2f0d8Merge pull request #1238 from dotcloud/1237-improve_docker_top-feature0b57e44Merge branch 'master' into 1237-improve_docker_top-featuref2dc492Merge pull request #1342 from dsissitka/patch-4a7ace53Merge pull request #1339 from dhrp/docker-run-d-descriptionc99e8deMerge branch 'cleanup_signal_handling' of https://github.com/calavera/docker ...c06aa62Merge pull request #1306 from dotcloud/1294_fix_wrong_untag_using_id_rmi9ba9983Fixed a couple of minor syntax errors.7d68afbMerge pull request #1209 from zimbatm/upstart-improvementsUpdates
github.com/onsi/gomegafrom 1.42.1 to 1.44.0Release notes
Sourced from github.com/onsi/gomega's releases.
Changelog
Sourced from github.com/onsi/gomega's changelog.