Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps the golang group with 11 updates in the / directory:

Package From To
cloud.google.com/go/cloudbuild 1.23.1 1.24.0
cloud.google.com/go/storage 1.57.1 1.58.0
github.com/buildpacks/pack 0.38.2 0.39.0
github.com/docker/cli 28.5.2+incompatible 29.1.2+incompatible
github.com/go-git/go-git/v5 5.16.3 5.16.4
github.com/google/go-containerregistry 0.20.6 0.20.7
github.com/letsencrypt/boulder 0.20251103.0 0.20251202.0
github.com/spf13/cobra 1.10.1 1.10.2
golang.org/x/oauth2 0.33.0 0.34.0
golang.org/x/sync 0.18.0 0.19.0
google.golang.org/grpc 1.76.0 1.77.0

Updates cloud.google.com/go/cloudbuild from 1.23.1 to 1.24.0

Release notes

Sourced from cloud.google.com/go/cloudbuild's releases.

maps 1.24.0

1.24.0 (2025-10-10)

Features

Bug Fixes

  • upgrade gRPC service registration func (#13014) (PiperOrigin-RevId: 813834114) (b80fb13)

cloudbuild 1.24.0

1.24.0 (2025-12-04)

Features

  • Update GCB with latest proto changes (PiperOrigin-RevId: 837135318) (185951b3)

kms: v1.23.2

1.23.2 (2025-10-15)

Bug Fixes

  • kms: Conditionally enable AllowHardBoundTokens (fc134e0)
Changelog

Sourced from cloud.google.com/go/cloudbuild's changelog.

1.24.0 (2024-02-06)

Features

  • documentai: Add model_type in v1beta3 processor proto (#9355) (05e9e1f)

1.23.8 (2024-01-30)

Bug Fixes

  • documentai: Enable universe domain resolution options (fd1d569)

1.23.7 (2023-12-13)

Documentation

  • documentai: Clarify Properties documentation (757c1b0)

1.23.6 (2023-11-27)

Documentation

  • documentai: Update comment for ProcessOptions.page_range (63ffff2)

1.23.5 (2023-11-01)

Bug Fixes

  • documentai: Bump google.golang.org/api to v0.149.0 (8d2ab9f)

Documentation

  • documentai: Updated comments (24e410e)

1.23.4 (2023-10-26)

Bug Fixes

  • documentai: Update grpc-go to v1.59.0 (81a97b0)

1.23.3 (2023-10-17)

... (truncated)

Commits

Updates cloud.google.com/go/storage from 1.57.1 to 1.58.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage 1.58.0

1.58.0 (2025-12-03)

Features

  • add object contexts in Go GCS SDK (#13390) (079c4d96)

  • calculate crc32c by default and pass checksum in trailing and per-chunk request (#13205) (2ab1c778)

  • add support for partial success in ListBuckets (#13320) (d91e47f2)

Bug Fixes

storage 1.57.2

1.57.2 (2025-11-14)

Features

Bug Fixes

Documentation

  • updates to docs and docs formatting (PiperOrigin-RevId: 828488192) (93ca68d5)
Commits

Updates github.com/buildpacks/pack from 0.38.2 to 0.39.0

Release notes

Sourced from github.com/buildpacks/pack's releases.

pack v0.39.0

Prerequisites

  • A container runtime such as Docker or podman must be available to execute builds.

Install

For instructions on installing pack, see our installation docs.

Run

Run the command pack.

You should see the following output

CLI for building apps using Cloud Native Buildpacks

Usage: pack [command]

Available Commands: build Generate app image from source code builder Interact with builders buildpack Interact with buildpacks extension Interact with extensions config Interact with your local pack config file inspect Show information about a built app image stack (deprecated) Interact with stacks rebase Rebase app image with latest run image sbom Interact with SBoM completion Outputs completion script location report Display useful information for reporting an issue version Show current 'pack' version help Help about any command

Flags: --force-color Force color output -h, --help Help for 'pack' --no-color Disable color output -q, --quiet Show less output --timestamps Enable timestamps in output -v, --verbose Show more output --version Show current 'pack' version

Use "pack [command] --help" for more information about a command.

Info

... (truncated)

Commits
  • a8010d1 fix: upgrade imgutil to fix containerd snapshotter issue (#2493)
  • e45b434 fix: update lifecycle API validation for experimental flag solve issue #2414 ...
  • b604f01 Updating lifecycle version to v0.20.19 (#2481)
  • 9321d2c Bump to go 1.25 (#2480)
  • 53ab88c When fetching lifecycle image, use a platform-specific digest (#2467)
  • 6e6e4bf build(deps): bump the go-dependencies group across 1 directory with 3 updates...
  • 019eb74 fix(security): Resolve CVE-GHSA-cgrx-mc8f-2prm by upgrading selinux to v1.13....
  • 6735aac build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#2473)
  • f5f0a62 Use Docker API version negotiation instead of hardcoded version (#2474)
  • d1a30b6 build(deps): bump the go-dependencies group with 8 updates (#2453)
  • Additional commits viewable in compare view

Updates github.com/docker/cli from 28.5.2+incompatible to 29.1.2+incompatible

Commits
  • 890dcca Merge pull request #6688 from vvoland/update-go
  • d544885 update to go1.25.5
  • c197aa7 Merge pull request #6687 from thaJeztah/use_subtests
  • ba683d8 opts/swarmopts: use sub-tests
  • 0aedba5 Merge pull request #6669 from vvoland/29-norc
  • dd2be02 gha/e2e: Switch to rc and 29 latest
  • 360952c Merge pull request #6680 from thaJeztah/bump_modules
  • 8fc15ea Merge pull request #6579 from dvdksn/doc-daemon-buildc-example
  • 1abfbf2 vendor: github.com/moby/moby/client v0.2.1
  • e0d30db docs: update buildgc example config to use new buildkit v0.17 options
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.16.3 to 5.16.4

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.16.4

What's Changed

Full Changelog: go-git/go-git@v5.16.3...v5.16.4

Commits
  • de8ecc3 Merge pull request #1743 from go-git/renovate/releases/v5.x-go-github.com-go-...
  • 3e752f0 build: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY]
  • 3a31754 Merge pull request #1741 from go-git/renovate/releases/v5.x-go-github.com-clo...
  • acc28f1 build: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY]
  • 95f3880 Merge pull request #1742 from go-git/renovate/releases/v5.x-go-golang.org-x-n...
  • 329f926 build: Update module golang.org/x/net to v0.38.0 [SECURITY]
  • 399e04b Merge pull request #1734 from pjbgf/fix-ci
  • 2025eae build: test, Fix build on Windows.
  • fb6806f Merge pull request #1732 from swills/find-hash-panic-fix-backport
  • 382530f plumbing: format/idxfile, prevent panic
  • See full diff in compare view

Updates github.com/google/go-containerregistry from 0.20.6 to 0.20.7

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.7

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.6...v0.20.7

Commits
  • e075f20 go mod tidy on dependabot update (#2171)
  • 45aacf4 Bump the actions group across 1 directory with 3 updates (#2170)
  • 073b936 Update dependencies and deprecate DockerVersion field (#2164)
  • 390dacd Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /cmd/krane (#2163)
  • ca44d47 Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /pkg/authn/k8schain (#2162)
  • 999cc1f Bump github.com/docker/docker (#2161)
  • d1809c8 Build artifacts for riscv64 (#2159)
  • 7471efd Bump the auxiliary-deps group across 3 directories with 4 updates (#2156)
  • 2bb5bb0 Bump the actions group with 5 updates (#2155)
  • 16371c1 Remove manual vendor setting for dependabot (#2151)
  • Additional commits viewable in compare view

Updates github.com/letsencrypt/boulder from 0.20251103.0 to 0.20251202.0

Release notes

Sourced from github.com/letsencrypt/boulder's releases.

v0.20251202.0

What's Changed

Full Changelog: letsencrypt/boulder@v0.20251118.0...v0.20251202.0

v0.20251118.0

What's Changed

Full Changelog: letsencrypt/boulder@v0.20251110.0...v0.20251118.0

v0.20251110.0

What's Changed

Full Changelog: letsencrypt/boulder@v0.20251103.0...v0.20251110.0

Commits
  • 01eee61 build(deps): bump github/codeql-action from 3 to 4 (#8507)
  • 981a78a Remove dead code (#8506)
  • 9564684 sa: Stop injecting max_statement_time and long_query_time into DSNs (#8490)
  • b0b718c Update Public Suffix List to v0.50.1 (#8495)
  • 16fbe27 Make CAA checking more like DCV checking (#8491)
  • 2076d74 sfe/redis: Add limiter config to SFE and cleanup creds (#8501)
  • eb6e612 sfe: Keep loading intervals in sync with promise, fix wording (#8500)
  • 1f6ec8c borp/sa: Update borp to pass Transaction args through BoulderTypeConverter (#...
  • d0d89a7 sa: use dummy date instead of zero date (#8481)
  • 4327f25 sfe/overrides: Update agreements with revised wording from legal (#8488)
  • Additional commits viewable in compare view

Updates github.com/moby/buildkit from 0.25.2 to 0.26.1

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.26.1

Welcome to the v0.26.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi

Notable Changes

  • Fix excessive chunking when fetching blobs #6366

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.26.0

v0.26.0

buildkit 0.26.0

Welcome to the v0.26.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi
  • CrazyMax
  • Akihiro Suda
  • Sebastiaan van Stijn
  • Jonathan A. Sternberg
  • Brian Goff
  • Dawei Wei
  • Alberto Garcia Hierro
  • Damon Holden
  • David Karlsson
  • Justin Chadwell
  • Mikhail Dmitrichenko
  • bpascard

Notable Changes

... (truncated)

Commits
  • 29fc55f Merge pull request #6367 from tonistiigi/v0.26-picks
  • 247e13c contentutil: avoid defaulting to ReadAt for fetch
  • a8e548f Merge pull request #4673 from bpascard/master
  • cc2d332 Merge pull request #6351 from thaJeztah/bump_tarsplit
  • 640f8bb Merge pull request #6349 from tonistiigi/dockerd-test-fixes
  • c3fd6a3 vendor: github.com/vbatts/tar-split v0.12.2
  • 2224254 test: test updates for dockerd
  • a2a940e Merge pull request #6345 from tonistiigi/cap-session-policy
  • ae4ee62 Merge pull request #6344 from tonistiigi/git-policy-signatures
  • 594543f Merge pull request #6342 from tonistiigi/sourcepolicy-fixes
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

Commits

Updates golang.org/x/oauth2 from 0.33.0 to 0.34.0

Commits

Updates golang.org/x/sync from 0.18.0 to 0.19.0

Commits

Updates golang.org/x/tools from 0.38.0 to 0.39.0

Commits
  • 034e59c internal/analysis/analyzerutil: fix FileUsesGoVersion
  • 076bd80 gopls/internal/filewatcher: retry directory reading upon failure
  • 605803f go/analysis/passes/loopclosure: simplify using IsMethodNamed
  • 2c6e03f internal/testenv: allow Apple diff too
  • 82112c0 gopls/internal/settings: correct git issue for fieldalignment warning
  • 1f97856 go.mod: update golang.org/x dependencies
  • c24121c go/analysis/passes/modernize: stditerators: even better name heuristic
  • edb9587 go/analysis/passes/modernize: stditerators: better name heuristic
  • 2f6a4f9 go/analysis/passes/modernize: forvar: handle "if v := v; cond {"
  • efd8c43 go/analysis: don't apply fixes to generated files
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.255.0 to 0.256.0

Release notes

Sourced from google.golang.org/api's releases.

v0.256.0

0.256.0 (2025-11-10)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.256.0 (2025-11-10)

Features

Commits

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20251014184007-4626949a642f to 0.0.0-20251111163417-95abcf5c77ba

Commits

Updates google.golang.org/grpc from 1.76.0 to 1.77.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.77.0

API Changes

  • mem: Replace the Reader interface with a struct for better performance and maintainability. (#8669)

Behavior Changes

  • balancer/pickfirst: Remove support for the old pick_first LB policy via the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=false. The new pick_first has been the default since v1.71.0. (#8672)

Bug Fixes

  • xdsclient: Fix a race condition in the ADS stream implementation that could result in resource-not-found errors, causing the gRPC client channel to move to TransientFailure. (#8605)
  • client: Ignore HTTP status header for gRPC streams. (#8548)
  • client: Set a read deadline when closing a transport to prevent it from blocking indefinitely on a broken connection. (#8534)
  • client: Fix a bug where default port 443 was not automatically added to addresses without a specified port when sent to a proxy.
    • Setting environment variable GRPC_EXPERIMENTAL_ENABLE_DEFAULT_PORT_FOR_PROXY_TARGET=false disables this change; please file a bug if any problems are encountered as we will remove this option soon. (#8613)
  • balancer/pickfirst: Fix a bug where duplicate addresses were not being ignored as intended. (#8611)
  • server: Fix a bug that caused overcounting of channelz metrics for successful and failed streams. (#8573)
  • balancer/pickfirst: When configured, shuffle addresses in resolver updates that lack endpoints. Since gRPC automatically adds endpoints to resolver updates, this bug only affects custom LB policies that delegate to pick_first but don't set endpoints. (#8610)
  • mem: Clear large buffers before re-using. (#8670)

Performance Improvements

  • transport: Reduce heap allocations to reduce time spent in garbage collection. (#8624, #8630, #8639, #8668)
  • transport: Avoid copies when reading and writing Data frames. (#8657, #8667)
  • mem: Avoid clearing newly allocated buffers. (#8670)

New Features

  • outlierdetection: Add metrics specified in gRFC A91. (#8644)
  • stats/opentelemetry: Add support for optional label grpc.lb.backend_service in per-call metrics (#8637)
  • xds: Add support for JWT Call Credentials as specified in gRFC A97. Set environment variable GRPC_EXPERIMENTAL_XDS_BOOTSTRAP_CALL_CREDS=true to enable this feature. (#8536)
  • experimental/stats: Add support for up/down counters. (#8581)
Commits

Bumps the golang group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/cloudbuild](https://github.com/googleapis/google-cloud-go) | `1.23.1` | `1.24.0` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.57.1` | `1.58.0` |
| [github.com/buildpacks/pack](https://github.com/buildpacks/pack) | `0.38.2` | `0.39.0` |
| [github.com/docker/cli](https://github.com/docker/cli) | `28.5.2+incompatible` | `29.1.2+incompatible` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.3` | `5.16.4` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.6` | `0.20.7` |
| [github.com/letsencrypt/boulder](https://github.com/letsencrypt/boulder) | `0.20251103.0` | `0.20251202.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.33.0` | `0.34.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.18.0` | `0.19.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.76.0` | `1.77.0` |



Updates `cloud.google.com/go/cloudbuild` from 1.23.1 to 1.24.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.23.1...dlp/v1.24.0)

Updates `cloud.google.com/go/storage` from 1.57.1 to 1.58.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@storage/v1.57.1...spanner/v1.58.0)

Updates `github.com/buildpacks/pack` from 0.38.2 to 0.39.0
- [Release notes](https://github.com/buildpacks/pack/releases)
- [Changelog](https://github.com/buildpacks/pack/blob/main/RELEASE.md)
- [Commits](buildpacks/pack@v0.38.2...v0.39.0)

Updates `github.com/docker/cli` from 28.5.2+incompatible to 29.1.2+incompatible
- [Commits](docker/cli@v28.5.2...v29.1.2)

Updates `github.com/go-git/go-git/v5` from 5.16.3 to 5.16.4
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.16.3...v5.16.4)

Updates `github.com/google/go-containerregistry` from 0.20.6 to 0.20.7
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.20.6...v0.20.7)

Updates `github.com/letsencrypt/boulder` from 0.20251103.0 to 0.20251202.0
- [Release notes](https://github.com/letsencrypt/boulder/releases)
- [Changelog](https://github.com/letsencrypt/boulder/blob/main/docs/release.md)
- [Commits](letsencrypt/boulder@v0.20251103.0...v0.20251202.0)

Updates `github.com/moby/buildkit` from 0.25.2 to 0.26.1
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.25.2...v0.26.1)

Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.1...v1.10.2)

Updates `golang.org/x/oauth2` from 0.33.0 to 0.34.0
- [Commits](golang/oauth2@v0.33.0...v0.34.0)

Updates `golang.org/x/sync` from 0.18.0 to 0.19.0
- [Commits](golang/sync@v0.18.0...v0.19.0)

Updates `golang.org/x/tools` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.38.0...v0.39.0)

Updates `google.golang.org/api` from 0.255.0 to 0.256.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.255.0...v0.256.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20251014184007-4626949a642f to 0.0.0-20251111163417-95abcf5c77ba
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.76.0 to 1.77.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.76.0...v1.77.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/cloudbuild
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/buildpacks/pack
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/docker/cli
  dependency-version: 29.1.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: golang
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.20.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/letsencrypt/boulder
  dependency-version: 0.20251202.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: golang.org/x/tools
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: google.golang.org/api
  dependency-version: 0.256.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20251111163417-95abcf5c77ba
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner December 8, 2025 12:05
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants