Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 9, 2025

Bumps the all group with 6 updates in the / directory:

Package From To
github.com/containerd/stargz-snapshotter/estargz 0.17.0 0.18.1
go.opentelemetry.io/proto/otlp 1.8.0 1.9.0
golang.org/x/sync 0.17.0 0.18.0
golang.org/x/sys 0.36.0 0.38.0
golang.org/x/time 0.13.0 0.14.0
golang.org/x/tools 0.37.0 0.38.0

Updates github.com/containerd/stargz-snapshotter/estargz from 0.17.0 to 0.18.1

Release notes

Sourced from github.com/containerd/stargz-snapshotter/estargz's releases.

v0.18.1

Notable Changes

  • Avoid repeated decompression and further utilize the --GH option to speed up conversion (#2145), thanks to @​escapefreeg
  • Improved sortEntries performance (#2153), thanks to @​wswsmao

v0.18.0

Notable Changes

  • Fixed restoring error of snapshots on unexpected restart of stargz snapshotter (#2091, #2092), thanks to @​wswsmao
  • Added FadvDontNeed option to reduce pagecache consumption in stargz snapshotter (#2095), thanks to @​wswsmao
  • Removed testing dependency from code outside tests (#2098), thanks to @​rosstimothy
  • Added all option for the ctr-remote's --gpus flag (#2102, #2118), thanks to @​wswsmao
  • Added --prefetch-list flag to ctr-remote (#2113, #2148), thanks to @​wswsmao
  • Enabled deduplication in ImageRecorder.Record (#2116), thanks to @​wswsmao
  • Fixed potential data race in nativeconverter/estargz (#2133), thanks to @​escapefreeg
  • Added support of decompression helpers in ctr-remote for better conversion speed (#2117), thanks to @​escapefreeg
  • Improved logging behaviour in fusemanager (#2135), thanks to @​mmonaco
  • Fixed to preserve normal snapshots during cleanup in stargz snapshotter (#2127), thanks to @​ChengyuZhu6
  • Fixed lazy pulling failure on images with empty layers (#2137)
  • Fixed stargz snapshotter to run without depending on fusermount by default (#2146)
  • Enabled ctr-remote to capture early file access (#2129), thanks to @​wswsmao
  • Refactors and document fixes (#2112, #2150), thanks to @​wswsmao
Commits
  • 60de78b Merge pull request #2167 from ktock/prepare-v0.18.1
  • d676264 Prepare for v0.18.1
  • b53f30b Merge pull request #2164 from containerd/dependabot/go_modules/gomod-30043e7df9
  • 9f66f8d Merge pull request #2165 from AkihiroSuda/containerd-2.1.5
  • 7a0b484 Dockerfile: update runc (1.3.3)
  • abedc76 Dockerfile: update containerd (2.1.5)
  • 0caa3c2 go.mod: github.com/containerd/containerd/v2 v2.1.5
  • 1274e2a build(deps): bump github.com/docker/cli
  • dca1521 Merge pull request #2162 from ktock/golangci-lint-2.6
  • 7c03a01 Fix golangci-lint "misspell" error
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.0 to 1.18.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.1

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

Commits

Updates github.com/vbatts/tar-split from 0.12.1 to 0.12.2

Release notes

Sourced from github.com/vbatts/tar-split's releases.

v0.12.2

What's Changed

Full Changelog: vbatts/tar-split@v0.12.1...v0.12.2

Commits
  • e93e901 Merge pull request #85 from mtrmac/backport
  • 55da7d6 archive/tar: set a limit on the size of GNU sparse file 1.0 regions
  • See full diff in compare view

Updates go.opentelemetry.io/proto/otlp from 1.8.0 to 1.9.0

Commits
  • 88af9ba Release v1.9.0 (#462)
  • 80a8eec chore(deps): update module github.com/cyphar/filepath-securejoin to v0.6.0 (#...
  • b727281 chore(deps): update module github.com/cyphar/filepath-securejoin to v0.5.1 (#...
  • 8faf5f6 chore(deps): update github/codeql-action action to v4.31.2 (#461)
  • f634804 chore(deps): update actions/upload-artifact action to v5 (#459)
  • 9e2ba7e chore(deps): update github/codeql-action action to v4.31.0 (#458)
  • 6568f81 chore(deps): update github/codeql-action action to v4.30.9 (#455)
  • 848d585 chore(deps): update github/codeql-action action to v4.30.8 (#453)
  • dbaa58d chore(deps): update github/codeql-action action to v4 (#452)
  • cbb6ab2 chore(deps): update module github.com/go-git/go-git/v5 to v5.16.3 (#444)
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.17.0 to 0.18.0

Commits

Updates golang.org/x/sys from 0.36.0 to 0.38.0

Commits
  • 15129aa cpu: also use MRS instruction in getmmfr1
  • ed38ca2 unix: add SizeofNhmsg and SizeofNexthopGrp
  • 3675c4c cpu: use MRS instruction to read arm64 system registers
  • 2a15272 unix: add consts for ELF handling
  • 6239615 cpu: add HPDS, LOR, PAN detection for arm64
  • ea436ef windows: add iphlpapi routing functions
  • 28c5bda unix: add SetMemPolicy and its mode/flag values
  • b731f78 unix/linux: switch to ubuntu 25.04, Go 1.25.1
  • 1edeebe unix: mkall.sh: fail if docker build failed
  • ecada54 unix: use slices.{Equal,Sort} in tests
  • Additional commits viewable in compare view

Updates golang.org/x/time from 0.13.0 to 0.14.0

Commits

Updates golang.org/x/tools from 0.37.0 to 0.38.0

Commits
  • a22b5e8 go.mod: update golang.org/x dependencies
  • 4bbcc9f all: use reflect.TypeFor instead of reflect.TypeOf when we have known the type
  • 122c93a internal/refactor: AddImport: remove unnecessary result
  • 76aace8 internal/analysisinternal: rationalize
  • 8cf2d63 gopls/internal/golang: add condition for enabling package move
  • 1f054fd x/tools: downgrade token.FileSet parameters to token.File
  • 44e71e5 go/analysis/passes/printf: check anonymous functions too
  • 9095e9b internal/analysisinternal: extract DeleteVar
  • 62a1b26 internal/analysisinternal: IsChildOf(Cursor, edge.Kind) bool
  • d32fb50 internal/analysisinternal: export EnclosingFile
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/containerd/stargz-snapshotter/estargz](https://github.com/containerd/stargz-snapshotter) | `0.17.0` | `0.18.1` |
| [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.8.0` | `1.9.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.17.0` | `0.18.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.36.0` | `0.38.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.13.0` | `0.14.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.37.0` | `0.38.0` |



Updates `github.com/containerd/stargz-snapshotter/estargz` from 0.17.0 to 0.18.1
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.17.0...v0.18.1)

Updates `github.com/klauspost/compress` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.18.0...v1.18.1)

Updates `github.com/vbatts/tar-split` from 0.12.1 to 0.12.2
- [Release notes](https://github.com/vbatts/tar-split/releases)
- [Commits](vbatts/tar-split@v0.12.1...v0.12.2)

Updates `go.opentelemetry.io/proto/otlp` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.8.0...v1.9.0)

Updates `golang.org/x/sync` from 0.17.0 to 0.18.0
- [Commits](golang/sync@v0.17.0...v0.18.0)

Updates `golang.org/x/sys` from 0.36.0 to 0.38.0
- [Commits](golang/sys@v0.36.0...v0.38.0)

Updates `golang.org/x/time` from 0.13.0 to 0.14.0
- [Commits](golang/time@v0.13.0...v0.14.0)

Updates `golang.org/x/tools` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.37.0...v0.38.0)

---
updated-dependencies:
- dependency-name: github.com/containerd/stargz-snapshotter/estargz
  dependency-version: 0.18.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/vbatts/tar-split
  dependency-version: 0.12.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/sys
  dependency-version: 0.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/time
  dependency-version: 0.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/tools
  dependency-version: 0.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 9, 2025
@dependabot dependabot bot requested review from a team as code owners November 9, 2025 16:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 9, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 30, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 30, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/all-e56e04b11d branch November 30, 2025 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant