chore(deps): bump the go-modules group across 1 directory with 76 updates #7
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…ates Bumps the go-modules group with 4 updates in the / directory: [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam), [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim), [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) and google.golang.org/protobuf. Updates `github.com/paketo-buildpacks/occam` from 0.25.0 to 0.27.0 - [Release notes](https://github.com/paketo-buildpacks/occam/releases) - [Commits](paketo-buildpacks/occam@v0.25.0...v0.27.0) Updates `github.com/paketo-buildpacks/packit/v2` from 2.17.0 to 2.20.0 - [Release notes](https://github.com/paketo-buildpacks/packit/releases) - [Commits](paketo-buildpacks/packit@v2.17.0...v2.20.0) Updates `dario.cat/mergo` from 1.0.0 to 1.0.2 - [Release notes](https://github.com/imdario/mergo/releases) - [Commits](darccio/mergo@v1.0.0...v1.0.2) Updates `github.com/Azure/go-ansiterm` from 0.0.0-20210617225240-d185dfc1b5a1 to 0.0.0-20250102033503-faa5f7b0171c - [Commits](https://github.com/Azure/go-ansiterm/commits) Updates `github.com/CycloneDX/cyclonedx-go` from 0.7.1 to 0.9.2 - [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml) - [Commits](CycloneDX/cyclonedx-go@v0.7.1...v0.9.2) Updates `github.com/DataDog/zstd` from 1.4.5 to 1.5.5 - [Release notes](https://github.com/DataDog/zstd/releases) - [Commits](DataDog/zstd@v1.4.5...v1.5.5) Updates `github.com/Masterminds/sprig/v3` from 3.2.3 to 3.3.0 - [Release notes](https://github.com/Masterminds/sprig/releases) - [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md) - [Commits](Masterminds/sprig@v3.2.3...v3.3.0) Updates `github.com/Microsoft/hcsshim` from 0.11.7 to 0.13.0 - [Release notes](https://github.com/Microsoft/hcsshim/releases) - [Commits](microsoft/hcsshim@v0.11.7...v0.13.0) Updates `github.com/ProtonMail/go-crypto` from 1.1.3 to 1.2.0 - [Release notes](https://github.com/ProtonMail/go-crypto/releases) - [Commits](ProtonMail/go-crypto@v1.1.3...v1.2.0) Updates `github.com/anchore/go-logger` from 0.0.0-20220728155337-03b66a5207d8 to 0.0.0-20250318195838-07ae343dd722 - [Commits](https://github.com/anchore/go-logger/commits) Updates `github.com/anchore/packageurl-go` from 0.1.1-0.20230104203445-02e0a6721501 to 0.1.1-0.20250220190351-d62adb6e1115 - [Release notes](https://github.com/anchore/packageurl-go/releases) - [Commits](https://github.com/anchore/packageurl-go/commits) Updates `github.com/anchore/syft` from 0.80.0 to 1.26.0 - [Release notes](https://github.com/anchore/syft/releases) - [Changelog](https://github.com/anchore/syft/blob/main/.goreleaser.yaml) - [Commits](anchore/syft@v0.80.0...v1.26.0) Updates `github.com/andybalholm/brotli` from 1.0.4 to 1.1.2-0.20250424173009-453214e765f3 - [Commits](https://github.com/andybalholm/brotli/commits) Updates `github.com/bmatcuk/doublestar/v4` from 4.6.0 to 4.8.1 - [Release notes](https://github.com/bmatcuk/doublestar/releases) - [Commits](bmatcuk/doublestar@v4.6.0...v4.8.1) Updates `github.com/cenkalti/backoff/v4` from 4.2.1 to 4.3.0 - [Changelog](https://github.com/cenkalti/backoff/blob/v5/CHANGELOG.md) - [Commits](cenkalti/backoff@v4.2.1...v4.3.0) Updates `github.com/cloudflare/circl` from 1.3.7 to 1.6.1 - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.3.7...v1.6.1) Updates `github.com/containerd/stargz-snapshotter/estargz` from 0.14.3 to 0.16.3 - [Release notes](https://github.com/containerd/stargz-snapshotter/releases) - [Commits](containerd/stargz-snapshotter@v0.14.3...v0.16.3) Updates `github.com/cpuguy83/dockercfg` from 0.3.1 to 0.3.2 - [Release notes](https://github.com/cpuguy83/dockercfg/releases) - [Commits](cpuguy83/dockercfg@v0.3.1...v0.3.2) Updates `github.com/cyphar/filepath-securejoin` from 0.2.5 to 0.4.1 - [Release notes](https://github.com/cyphar/filepath-securejoin/releases) - [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md) - [Commits](cyphar/filepath-securejoin@v0.2.5...v0.4.1) Updates `github.com/docker/cli` from 27.1.1+incompatible to 28.1.1+incompatible - [Commits](docker/cli@v27.1.1...v28.1.1) Updates `github.com/docker/distribution` from 2.8.2+incompatible to 2.8.3+incompatible - [Release notes](https://github.com/docker/distribution/releases) - [Commits](distribution/distribution@v2.8.2...v2.8.3) Updates `github.com/docker/docker-credential-helpers` from 0.7.0 to 0.9.3 - [Release notes](https://github.com/docker/docker-credential-helpers/releases) - [Commits](docker/docker-credential-helpers@v0.7.0...v0.9.3) Updates `github.com/dsnet/compress` from 0.0.2-0.20210315054119-f66993602bf5 to 0.0.2-0.20230904184137-39efe44ab707 - [Release notes](https://github.com/dsnet/compress/releases) - [Commits](https://github.com/dsnet/compress/commits) Updates `github.com/gabriel-vasile/mimetype` from 1.4.8 to 1.4.9 - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.8...v1.4.9) Updates `github.com/go-git/go-billy/v5` from 5.6.0 to 5.6.2 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.6.0...v5.6.2) Updates `github.com/go-git/go-git/v5` from 5.13.0 to 5.16.0 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.13.0...v5.16.0) Updates `github.com/go-ole/go-ole` from 1.2.6 to 1.3.0 - [Release notes](https://github.com/go-ole/go-ole/releases) - [Changelog](https://github.com/go-ole/go-ole/blob/master/ChangeLog.md) - [Commits](go-ole/go-ole@v1.2.6...v1.3.0) Updates `github.com/golang/groupcache` from 0.0.0-20210331224755-41bb18bfe9da to 0.0.0-20241129210726-2c02b8208cf8 - [Commits](https://github.com/golang/groupcache/commits) Updates `github.com/google/go-containerregistry` from 0.20.2 to 0.20.4 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml) - [Commits](google/go-containerregistry@v0.20.2...v0.20.4) Updates `github.com/huandu/xstrings` from 1.3.3 to 1.5.0 - [Release notes](https://github.com/huandu/xstrings/releases) - [Commits](huandu/xstrings@v1.3.3...v1.5.0) Updates `github.com/jinzhu/copier` from 0.3.5 to 0.4.0 - [Commits](jinzhu/copier@v0.3.5...v0.4.0) Updates `github.com/klauspost/compress` from 1.16.7 to 1.18.0 - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.16.7...v1.18.0) Updates `github.com/klauspost/pgzip` from 1.2.5 to 1.2.6 - [Release notes](https://github.com/klauspost/pgzip/releases) - [Commits](klauspost/pgzip@v1.2.5...v1.2.6) Updates `github.com/lufia/plan9stats` from 0.0.0-20211012122336-39d0f177ccd0 to 0.0.0-20250317134145-8bc96cf8fc35 - [Commits](https://github.com/lufia/plan9stats/commits) Updates `github.com/magiconair/properties` from 1.8.7 to 1.8.10 - [Release notes](https://github.com/magiconair/properties/releases) - [Commits](magiconair/properties@v1.8.7...v1.8.10) Updates `github.com/mattn/go-runewidth` from 0.0.13 to 0.0.16 - [Commits](mattn/go-runewidth@v0.0.13...v0.0.16) Updates `github.com/moby/sys/sequential` from 0.5.0 to 0.6.0 - [Release notes](https://github.com/moby/sys/releases) - [Commits](moby/sys@signal/v0.5.0...signal/v0.6.0) Updates `github.com/moby/sys/user` from 0.3.0 to 0.4.0 - [Release notes](https://github.com/moby/sys/releases) - [Commits](moby/sys@user/v0.3.0...user/v0.4.0) Updates `github.com/moby/term` from 0.5.0 to 0.5.2 - [Commits](moby/term@v0.5.0...v0.5.2) Updates `github.com/nwaples/rardecode` from 1.1.0 to 1.1.3 - [Commits](nwaples/rardecode@v1.1.0...v1.1.3) Updates `github.com/opencontainers/image-spec` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/opencontainers/image-spec/releases) - [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md) - [Commits](opencontainers/image-spec@v1.1.0...v1.1.1) Updates `github.com/pierrec/lz4/v4` from 4.1.15 to 4.1.22 - [Commits](pierrec/lz4@v4.1.15...v4.1.22) Updates `github.com/pjbgf/sha1cd` from 0.3.0 to 0.3.2 - [Release notes](https://github.com/pjbgf/sha1cd/releases) - [Commits](pjbgf/sha1cd@v0.3.0...v0.3.2) Updates `github.com/power-devops/perfstat` from 0.0.0-20210106213030-5aafc221ea8c to 0.0.0-20240221224432-82ca36839d55 - [Commits](https://github.com/power-devops/perfstat/commits) Updates `github.com/rivo/uniseg` from 0.2.0 to 0.4.7 - [Release notes](https://github.com/rivo/uniseg/releases) - [Commits](rivo/uniseg@v0.2.0...v0.4.7) Updates `github.com/sassoftware/go-rpmutils` from 0.2.0 to 0.4.0 - [Release notes](https://github.com/sassoftware/go-rpmutils/releases) - [Commits](sassoftware/go-rpmutils@v0.2.0...v0.4.0) Updates `github.com/shopspring/decimal` from 1.2.0 to 1.4.0 - [Release notes](https://github.com/shopspring/decimal/releases) - [Changelog](https://github.com/shopspring/decimal/blob/master/CHANGELOG.md) - [Commits](shopspring/decimal@v1.2.0...v1.4.0) Updates `github.com/skeema/knownhosts` from 1.3.0 to 1.3.1 - [Commits](skeema/knownhosts@v1.3.0...v1.3.1) Updates `github.com/spdx/tools-golang` from 0.5.0 to 0.5.5 - [Release notes](https://github.com/spdx/tools-golang/releases) - [Changelog](https://github.com/spdx/tools-golang/blob/main/RELEASE-NOTES.md) - [Commits](spdx/tools-golang@v0.5.0...v0.5.5) Updates `github.com/spf13/afero` from 1.9.5 to 1.14.0 - [Release notes](https://github.com/spf13/afero/releases) - [Commits](spf13/afero@v1.9.5...v1.14.0) Updates `github.com/spf13/cast` from 1.5.0 to 1.7.1 - [Release notes](https://github.com/spf13/cast/releases) - [Commits](spf13/cast@v1.5.0...v1.7.1) Updates `github.com/sylabs/sif/v2` from 2.8.1 to 2.21.1 - [Release notes](https://github.com/sylabs/sif/releases) - [Changelog](https://github.com/sylabs/sif/blob/main/.goreleaser.yml) - [Commits](sylabs/sif@v2.8.1...v2.21.1) Updates `github.com/sylabs/squashfs` from 0.6.1 to 1.0.6 - [Commits](sylabs/squashfs@v0.6.1...v1.0.6) Updates `github.com/tklauser/go-sysconf` from 0.3.12 to 0.3.15 - [Release notes](https://github.com/tklauser/go-sysconf/releases) - [Commits](tklauser/go-sysconf@v0.3.12...v0.3.15) Updates `github.com/tklauser/numcpus` from 0.6.1 to 0.10.0 - [Release notes](https://github.com/tklauser/numcpus/releases) - [Commits](tklauser/numcpus@v0.6.1...v0.10.0) Updates `github.com/vbatts/go-mtree` from 0.5.3 to 0.5.4 - [Release notes](https://github.com/vbatts/go-mtree/releases) - [Changelog](https://github.com/vbatts/go-mtree/blob/main/releases.md) - [Commits](vbatts/go-mtree@v0.5.3...v0.5.4) Updates `github.com/vbatts/tar-split` from 0.11.3 to 0.12.1 - [Release notes](https://github.com/vbatts/tar-split/releases) - [Commits](vbatts/tar-split@v0.11.3...v0.12.1) Updates `github.com/vifraa/gopom` from 0.2.1 to 1.0.0 - [Release notes](https://github.com/vifraa/gopom/releases) - [Commits](vifraa/gopom@v0.2.1...v1.0.0) Updates `github.com/wagoodman/go-partybus` from 0.0.0-20210627031916-db1f5573bbc5 to 0.0.0-20230516145632-8ccac152c651 - [Commits](https://github.com/wagoodman/go-partybus/commits) Updates `github.com/wagoodman/go-progress` from 0.0.0-20230301185719-21920a456ad5 to 0.0.0-20230925121702-07e42b3cdba0 - [Commits](https://github.com/wagoodman/go-progress/commits) Updates `github.com/yusufpapurcu/wmi` from 1.2.3 to 1.2.4 - [Release notes](https://github.com/yusufpapurcu/wmi/releases) - [Commits](yusufpapurcu/wmi@v1.2.3...v1.2.4) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.60.0 to 0.61.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.60.0...zpages/v0.61.0) Updates `go.opentelemetry.io/otel` from 1.35.0 to 1.36.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.36.0) Updates `go.opentelemetry.io/otel/metric` from 1.35.0 to 1.36.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.36.0) Updates `go.opentelemetry.io/otel/trace` from 1.35.0 to 1.36.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.36.0) Updates `golang.org/x/crypto` from 0.36.0 to 0.38.0 - [Commits](golang/crypto@v0.36.0...v0.38.0) Updates `golang.org/x/exp` from 0.0.0-20240719175910-8a7402abbf56 to 0.0.0-20250305212735-054e65f0b394 - [Commits](https://github.com/golang/exp/commits) Updates `golang.org/x/mod` from 0.19.0 to 0.24.0 - [Commits](golang/mod@v0.19.0...v0.24.0) Updates `golang.org/x/net` from 0.37.0 to 0.40.0 - [Commits](golang/net@v0.37.0...v0.40.0) Updates `golang.org/x/sync` from 0.12.0 to 0.14.0 - [Commits](golang/sync@v0.12.0...v0.14.0) Updates `golang.org/x/sys` from 0.31.0 to 0.33.0 - [Commits](golang/sys@v0.31.0...v0.33.0) Updates `golang.org/x/text` from 0.23.0 to 0.25.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.23.0...v0.25.0) Updates `golang.org/x/xerrors` from 0.0.0-20220907171357-04be3eba64a2 to 0.0.0-20231012003039-104605ab7028 - [Commits](https://github.com/golang/xerrors/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240401170217-c3f982113cda to 0.0.0-20241223144023-3abc09e42ca8 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.59.0 to 1.69.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.59.0...v1.69.0) Updates `google.golang.org/protobuf` from 1.36.5 to 1.36.6 --- updated-dependencies: - dependency-name: github.com/paketo-buildpacks/occam dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/paketo-buildpacks/packit/v2 dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: dario.cat/mergo dependency-version: 1.0.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/Azure/go-ansiterm dependency-version: 0.0.0-20250102033503-faa5f7b0171c dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/CycloneDX/cyclonedx-go dependency-version: 0.9.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/DataDog/zstd dependency-version: 1.5.5 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/Masterminds/sprig/v3 dependency-version: 3.3.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/Microsoft/hcsshim dependency-version: 0.13.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/ProtonMail/go-crypto dependency-version: 1.2.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/anchore/go-logger dependency-version: 0.0.0-20250318195838-07ae343dd722 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/anchore/packageurl-go dependency-version: 0.1.1-0.20250220190351-d62adb6e1115 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/anchore/syft dependency-version: 1.26.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: go-modules - dependency-name: github.com/andybalholm/brotli dependency-version: 1.1.2-0.20250424173009-453214e765f3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/bmatcuk/doublestar/v4 dependency-version: 4.8.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/cenkalti/backoff/v4 dependency-version: 4.3.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/containerd/stargz-snapshotter/estargz dependency-version: 0.16.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/cpuguy83/dockercfg dependency-version: 0.3.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/cyphar/filepath-securejoin dependency-version: 0.4.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/docker/cli dependency-version: 28.1.1+incompatible dependency-type: indirect update-type: version-update:semver-major dependency-group: go-modules - dependency-name: github.com/docker/distribution dependency-version: 2.8.3+incompatible dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/docker/docker-credential-helpers dependency-version: 0.9.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/dsnet/compress dependency-version: 0.0.2-0.20230904184137-39efe44ab707 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/gabriel-vasile/mimetype dependency-version: 1.4.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.6.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.16.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/go-ole/go-ole dependency-version: 1.3.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/golang/groupcache dependency-version: 0.0.0-20241129210726-2c02b8208cf8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/google/go-containerregistry dependency-version: 0.20.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/huandu/xstrings dependency-version: 1.5.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/jinzhu/copier dependency-version: 0.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/klauspost/compress dependency-version: 1.18.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/klauspost/pgzip dependency-version: 1.2.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/lufia/plan9stats dependency-version: 0.0.0-20250317134145-8bc96cf8fc35 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/magiconair/properties dependency-version: 1.8.10 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/mattn/go-runewidth dependency-version: 0.0.16 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/moby/sys/sequential dependency-version: 0.6.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/moby/sys/user dependency-version: 0.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/moby/term dependency-version: 0.5.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/nwaples/rardecode dependency-version: 1.1.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/opencontainers/image-spec dependency-version: 1.1.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/pierrec/lz4/v4 dependency-version: 4.1.22 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/pjbgf/sha1cd dependency-version: 0.3.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/power-devops/perfstat dependency-version: 0.0.0-20240221224432-82ca36839d55 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/rivo/uniseg dependency-version: 0.4.7 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/sassoftware/go-rpmutils dependency-version: 0.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/shopspring/decimal dependency-version: 1.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/skeema/knownhosts dependency-version: 1.3.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/spdx/tools-golang dependency-version: 0.5.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/spf13/afero dependency-version: 1.14.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/spf13/cast dependency-version: 1.7.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/sylabs/sif/v2 dependency-version: 2.21.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/sylabs/squashfs dependency-version: 1.0.6 dependency-type: indirect update-type: version-update:semver-major dependency-group: go-modules - dependency-name: github.com/tklauser/go-sysconf dependency-version: 0.3.15 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/tklauser/numcpus dependency-version: 0.10.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/vbatts/go-mtree dependency-version: 0.5.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/vbatts/tar-split dependency-version: 0.12.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/vifraa/gopom dependency-version: 1.0.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: go-modules - dependency-name: github.com/wagoodman/go-partybus dependency-version: 0.0.0-20230516145632-8ccac152c651 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/wagoodman/go-progress dependency-version: 0.0.0-20230925121702-07e42b3cdba0 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/yusufpapurcu/wmi dependency-version: 1.2.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.61.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel dependency-version: 1.36.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.36.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.36.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/crypto dependency-version: 0.38.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/exp dependency-version: 0.0.0-20250305212735-054e65f0b394 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: golang.org/x/mod dependency-version: 0.24.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/net dependency-version: 0.40.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sync dependency-version: 0.14.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sys dependency-version: 0.33.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/text dependency-version: 0.25.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/xerrors dependency-version: 0.0.0-20231012003039-104605ab7028 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20241223144023-3abc09e42ca8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.69.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/protobuf dependency-version: 1.36.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the go-modules group with 4 updates in the / directory: github.com/paketo-buildpacks/occam, github.com/Microsoft/hcsshim, go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and google.golang.org/protobuf.
Updates
github.com/paketo-buildpacks/occamfrom 0.25.0 to 0.27.0Release notes
Sourced from github.com/paketo-buildpacks/occam's releases.
Commits
aeef59dUpdates go mod version to 1.24.3 (#376)1936f59Bump dependencies (#386)e97009bManual upgrade of dependencies (#384)23d583aBump golang.org/x/net from 0.37.0 to 0.38.0b89b13eBump github.com/paketo-buildpacks/packit/v2 from 2.16.0 to 2.17.0e12234cBump github.com/onsi/gomega from 1.36.3 to 1.37.0Updates
github.com/paketo-buildpacks/packit/v2from 2.17.0 to 2.20.0Release notes
Sourced from github.com/paketo-buildpacks/packit/v2's releases.
Commits
b3d4c50Bump dependencies (#651)4589337Updates go mod version to 1.24.3 (#643)dc86e8dDowngrade docker and stereoscopeaa5bc77Bump github.com/anchore/stereoscopef3fa74aUse upstream syft (#639)7e884aaBump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9f3ac27aBump golang.org/x/net from 0.37.0 to 0.38.0Updates
dario.cat/mergofrom 1.0.0 to 1.0.2Release notes
Sourced from dario.cat/mergo's releases.
Commits
7b33b2brefactor: migrate from YAML to JSON for test data and update related functions229a214chore(.well-known): add funding manifest URLs file6be20c6chore(SECURITY.md): update supported versions to reflect current versioning9007623chore(README) : remove kubernetes from the list of users2b1eb9cUpdate FUNDING.yml2ceb994Create FUNDING.json59ea6a9Merge pull request #251 from joshkaplinsky/joshkaplinsky/without-dereference-...96f24afMerge pull request #253 from vsemichev/master2f1a615fixes issue #187. adds test to verify the fix.4da170bfixes issue #187. attempt #3Updates
github.com/Azure/go-ansitermfrom 0.0.0-20210617225240-d185dfc1b5a1 to 0.0.0-20250102033503-faa5f7b0171cCommits
Updates
github.com/CycloneDX/cyclonedx-gofrom 0.7.1 to 0.9.2Release notes
Sourced from github.com/CycloneDX/cyclonedx-go's releases.
... (truncated)
Commits
cba06ffMerge pull request #205 from CycloneDX/dependabot/go_modules/github.com/termi...5c81749Merge pull request #211 from CycloneDX/dependabot/github_actions/actions/setu...753526cMerge pull request #204 from DmitriyLewen/fix/componentEvidence-as-array4d3aff9UPDATE_SNAPSHOTS=true make testd68a199fix: useidentityas array invalid-evidence.json24e9503fix: tests238cbeabuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0a7f7415Merge branch 'master' of github.com:DmitriyLewen/cyclonedx-go into fix/compon...05f8930build(deps): bump github.com/terminalstatic/go-xsd-validate464d426Merge pull request #202 from CycloneDX/dependabot/github_actions/actions/chec...Updates
github.com/DataDog/zstdfrom 1.4.5 to 1.5.5Release notes
Sourced from github.com/DataDog/zstd's releases.
... (truncated)
Commits
5f14d6aMerge pull request #125 from DataDog/viq111/1.5.5ca4d3c7Update vendored zstd to 1.5.503725e7Merge pull request #126 from DataDog/viq111/circleci1b4c894[circle] Remove latest as cimg/go does not have the tagff5a3bb[circleci] Update tested Go versions to 1.19 & 1.206e5a54b[circleci] Switch to newer imagesfd035e5Merge pull request #117 from bsergean/patch-1c798238Merge branch '1.x' into patch-113d5b10update documentationd64f463Merge pull request #120 from DataDog/viq111/fix-min-sizeUpdates
github.com/Masterminds/sprig/v3from 3.2.3 to 3.3.0Release notes
Sourced from github.com/Masterminds/sprig/v3's releases.
Changelog
Sourced from github.com/Masterminds/sprig/v3's changelog.
Commits
e708470Merge pull request #408 from mattfarina/update-changelog-3.38fc4354Updating the changelog for the 3.3.0 releasecb81a32Merge pull request #407 from mattfarina/remove-dup-math-functions2637693Removing duplicate documentation06b9a87Merge pull request #290 from zzhu41/patch-1e663ec6Merge pull request #369 from chey/patch-1bb2f73fMerge pull request #375 from carlpett/patch-1f07659eMerge pull request #400 from itzik-elayev/master98b35c1Add closing bracket7a88928Merge pull request #406 from mattfarina/update-mergoUpdates
github.com/Microsoft/hcsshimfrom 0.11.7 to 0.13.0Release notes
Sourced from github.com/Microsoft/hcsshim's releases.
... (truncated)
Commits
7084bd2rego policy enforcer should use the same user parsing logic as GCS (#2405)a5c5b4cDeps/crypto vulnFix golang.org/x/crypto vulnerability (#2416)a00144aAdd support for running confidential WCOW UVMs5def1d7Allow different types of boot configurations for WCOW UVMb4e0744Merge pull request #2406 from anmaxvl/privileged-pausee5f8fd8tooling: allow pause container to be run in privileged moded7e3842feature: cross-container named pipes (#2358)62ddb12HvSocket support for containers (#2353)fa9d402ci: fix golangci-lint config (#2387)a3c0edfgithub-actions: update lint action (#2379)Updates
github.com/ProtonMail/go-cryptofrom 1.1.3 to 1.2.0Release notes
Sourced from github.com/ProtonMail/go-crypto's releases.
... (truncated)
Commits
70930d7Merge pull request #280 from ProtonMail/fix/aead-max-chunk-size54e82fdfix: The max AEAD chunk size must be 4MiB not 65KiB61ae167Merge pull request #278 from ProtonMail/chore/bump-go-versionaf200f2chore: Update min go version to 1.22.0e52eadaMerge pull request #271 from ProtonMail/feat/improve-errors-key-selection4bf9d90feat(v2): Improve error message for encryption key selectiond47bb38Merge pull request #266 from caarlos0/issuer-key-id756ebbdMake Issuer Key ID signature subpacket non-critical44ef98cMerge pull request #276 from mdosch/fix-random-source-is-brokenb105e24Merge branch 'main' into fix-random-source-is-brokenUpdates
github.com/anchore/go-loggerfrom 0.0.0-20220728155337-03b66a5207d8 to 0.0.0-20250318195838-07ae343dd722Commits
Updates
github.com/anchore/packageurl-gofrom 0.1.1-0.20230104203445-02e0a6721501 to 0.1.1-0.20250220190351-d62adb6e1115Commits
Updates
github.com/anchore/syftfrom 0.80.0 to 1.26.0Release notes
Sourced from github.com/anchore/syft's releases.
... (truncated)
Commits
ac883f5add cdx group as purl namespace (#3922)e23ca43add PE binary cataloger (#3911)b4ca040chore: update dockerfile base images to latest rolling tags (#3915)828645echore(deps): update CPE dictionary index (#3913)db77b54finalize go mod ref (#3908)2d4fe51remove benchmark workflow (#3906)e1374f7fix: update license content filtering default case to be 'none' for no conten...9458938chore(deps): bump github/codeql-action from 3.28.17 to 3.28.18 (#3905)8cbdd38fix: Make Native Image contains no embedded SBOM Error Discoverable (#3805)8f02bd8fix: Distinguish openjdk vs jdk when using file source (#3895)Updates
github.com/andybalholm/brotlifrom 1.0.4 to 1.1.2-0.20250424173009-453214e765f3Commits
Updates
github.com/bmatcuk/doublestar/v4from 4.6.0 to 4.8.1Release notes
Sourced from github.com/bmatcuk/doublestar/v4's releases.Description has been truncated