Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 30, 2025

Bumps the all group with 3 updates in the / directory: github.com/google/go-containerregistry, go.opentelemetry.io/proto/otlp and golang.org/x/time.

Updates github.com/google/go-containerregistry from 0.20.6 to 0.20.7

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.7

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.6...v0.20.7

Commits
  • e075f20 go mod tidy on dependabot update (#2171)
  • 45aacf4 Bump the actions group across 1 directory with 3 updates (#2170)
  • 073b936 Update dependencies and deprecate DockerVersion field (#2164)
  • 390dacd Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /cmd/krane (#2163)
  • ca44d47 Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /pkg/authn/k8schain (#2162)
  • 999cc1f Bump github.com/docker/docker (#2161)
  • d1809c8 Build artifacts for riscv64 (#2159)
  • 7471efd Bump the auxiliary-deps group across 3 directories with 4 updates (#2156)
  • 2bb5bb0 Bump the actions group with 5 updates (#2155)
  • 16371c1 Remove manual vendor setting for dependabot (#2151)
  • Additional commits viewable in compare view

Updates github.com/containerd/stargz-snapshotter/estargz from 0.17.0 to 0.18.1

Release notes

Sourced from github.com/containerd/stargz-snapshotter/estargz's releases.

v0.18.1

Notable Changes

  • Avoid repeated decompression and further utilize the --GH option to speed up conversion (#2145), thanks to @​escapefreeg
  • Improved sortEntries performance (#2153), thanks to @​wswsmao

v0.18.0

Notable Changes

  • Fixed restoring error of snapshots on unexpected restart of stargz snapshotter (#2091, #2092), thanks to @​wswsmao
  • Added FadvDontNeed option to reduce pagecache consumption in stargz snapshotter (#2095), thanks to @​wswsmao
  • Removed testing dependency from code outside tests (#2098), thanks to @​rosstimothy
  • Added all option for the ctr-remote's --gpus flag (#2102, #2118), thanks to @​wswsmao
  • Added --prefetch-list flag to ctr-remote (#2113, #2148), thanks to @​wswsmao
  • Enabled deduplication in ImageRecorder.Record (#2116), thanks to @​wswsmao
  • Fixed potential data race in nativeconverter/estargz (#2133), thanks to @​escapefreeg
  • Added support of decompression helpers in ctr-remote for better conversion speed (#2117), thanks to @​escapefreeg
  • Improved logging behaviour in fusemanager (#2135), thanks to @​mmonaco
  • Fixed to preserve normal snapshots during cleanup in stargz snapshotter (#2127), thanks to @​ChengyuZhu6
  • Fixed lazy pulling failure on images with empty layers (#2137)
  • Fixed stargz snapshotter to run without depending on fusermount by default (#2146)
  • Enabled ctr-remote to capture early file access (#2129), thanks to @​wswsmao
  • Refactors and document fixes (#2112, #2150), thanks to @​wswsmao
Commits
  • 60de78b Merge pull request #2167 from ktock/prepare-v0.18.1
  • d676264 Prepare for v0.18.1
  • b53f30b Merge pull request #2164 from containerd/dependabot/go_modules/gomod-30043e7df9
  • 9f66f8d Merge pull request #2165 from AkihiroSuda/containerd-2.1.5
  • 7a0b484 Dockerfile: update runc (1.3.3)
  • abedc76 Dockerfile: update containerd (2.1.5)
  • 0caa3c2 go.mod: github.com/containerd/containerd/v2 v2.1.5
  • 1274e2a build(deps): bump github.com/docker/cli
  • dca1521 Merge pull request #2162 from ktock/golangci-lint-2.6
  • 7c03a01 Fix golangci-lint "misspell" error
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.0 to 1.18.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.1

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

Commits

Updates github.com/vbatts/tar-split from 0.12.1 to 0.12.2

Release notes

Sourced from github.com/vbatts/tar-split's releases.

v0.12.2

What's Changed

Full Changelog: vbatts/tar-split@v0.12.1...v0.12.2

Commits
  • e93e901 Merge pull request #85 from mtrmac/backport
  • 55da7d6 archive/tar: set a limit on the size of GNU sparse file 1.0 regions
  • See full diff in compare view

Updates go.opentelemetry.io/proto/otlp from 1.8.0 to 1.9.0

Commits
  • 88af9ba Release v1.9.0 (#462)
  • 80a8eec chore(deps): update module github.com/cyphar/filepath-securejoin to v0.6.0 (#...
  • b727281 chore(deps): update module github.com/cyphar/filepath-securejoin to v0.5.1 (#...
  • 8faf5f6 chore(deps): update github/codeql-action action to v4.31.2 (#461)
  • f634804 chore(deps): update actions/upload-artifact action to v5 (#459)
  • 9e2ba7e chore(deps): update github/codeql-action action to v4.31.0 (#458)
  • 6568f81 chore(deps): update github/codeql-action action to v4.30.9 (#455)
  • 848d585 chore(deps): update github/codeql-action action to v4.30.8 (#453)
  • dbaa58d chore(deps): update github/codeql-action action to v4 (#452)
  • cbb6ab2 chore(deps): update module github.com/go-git/go-git/v5 to v5.16.3 (#444)
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.17.0 to 0.18.0

Commits

Updates golang.org/x/sys from 0.36.0 to 0.38.0

Commits
  • 15129aa cpu: also use MRS instruction in getmmfr1
  • ed38ca2 unix: add SizeofNhmsg and SizeofNexthopGrp
  • 3675c4c cpu: use MRS instruction to read arm64 system registers
  • 2a15272 unix: add consts for ELF handling
  • 6239615 cpu: add HPDS, LOR, PAN detection for arm64
  • ea436ef windows: add iphlpapi routing functions
  • 28c5bda unix: add SetMemPolicy and its mode/flag values
  • b731f78 unix/linux: switch to ubuntu 25.04, Go 1.25.1
  • 1edeebe unix: mkall.sh: fail if docker build failed
  • ecada54 unix: use slices.{Equal,Sort} in tests
  • Additional commits viewable in compare view

Updates golang.org/x/time from 0.13.0 to 0.14.0

Commits

Updates golang.org/x/tools from 0.37.0 to 0.39.0

Commits
  • 034e59c internal/analysis/analyzerutil: fix FileUsesGoVersion
  • 076bd80 gopls/internal/filewatcher: retry directory reading upon failure
  • 605803f go/analysis/passes/loopclosure: simplify using IsMethodNamed
  • 2c6e03f internal/testenv: allow Apple diff too
  • 82112c0 gopls/internal/settings: correct git issue for fieldalignment warning
  • 1f97856 go.mod: update golang.org/x dependencies
  • c24121c go/analysis/passes/modernize: stditerators: even better name heuristic
  • edb9587 go/analysis/passes/modernize: stditerators: better name heuristic
  • 2f6a4f9 go/analysis/passes/modernize: forvar: handle "if v := v; cond {"
  • efd8c43 go/analysis: don't apply fixes to generated files
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 3 updates in the / directory: [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry), [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) and [golang.org/x/time](https://github.com/golang/time).


Updates `github.com/google/go-containerregistry` from 0.20.6 to 0.20.7
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.20.6...v0.20.7)

Updates `github.com/containerd/stargz-snapshotter/estargz` from 0.17.0 to 0.18.1
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.17.0...v0.18.1)

Updates `github.com/klauspost/compress` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.0...v1.18.1)

Updates `github.com/vbatts/tar-split` from 0.12.1 to 0.12.2
- [Release notes](https://github.com/vbatts/tar-split/releases)
- [Commits](vbatts/tar-split@v0.12.1...v0.12.2)

Updates `go.opentelemetry.io/proto/otlp` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.8.0...v1.9.0)

Updates `golang.org/x/sync` from 0.17.0 to 0.18.0
- [Commits](golang/sync@v0.17.0...v0.18.0)

Updates `golang.org/x/sys` from 0.36.0 to 0.38.0
- [Commits](golang/sys@v0.36.0...v0.38.0)

Updates `golang.org/x/time` from 0.13.0 to 0.14.0
- [Commits](golang/time@v0.13.0...v0.14.0)

Updates `golang.org/x/tools` from 0.37.0 to 0.39.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.37.0...v0.39.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.20.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/containerd/stargz-snapshotter/estargz
  dependency-version: 0.18.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/vbatts/tar-split
  dependency-version: 0.12.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/sys
  dependency-version: 0.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/time
  dependency-version: 0.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/tools
  dependency-version: 0.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 30, 2025
@dependabot dependabot bot requested review from a team as code owners November 30, 2025 16:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 30, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 7, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 7, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/all-77c5c22eef branch December 7, 2025 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant