Skip to content

Update go modules (main) (patch)#2980

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/main-patch-go-modules
Open

Update go modules (main) (patch)#2980
renovate[bot] wants to merge 1 commit intomainfrom
renovate/main-patch-go-modules

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
cuelang.org/go v0.15.3 → v0.15.4 age adoption passing confidence
github.com/cucumber/godog v0.15.0 → v0.15.1 age adoption passing confidence
github.com/daixiang0/gci v0.13.5 → v0.13.7 age adoption passing confidence
github.com/evanphx/json-patch v5.9.0+incompatible → v5.9.11+incompatible age adoption passing confidence
github.com/evanphx/json-patch/v5 v5.9.0 → v5.9.11 age adoption passing confidence
github.com/gkampitakis/go-snaps v0.5.7 → v0.5.19 age adoption passing confidence
github.com/open-policy-agent/opa v1.12.1 → v1.12.3 age adoption passing confidence
github.com/otiai10/copy v1.14.0 → v1.14.1 age adoption passing confidence
github.com/sirupsen/logrus v1.9.4-0.20230606125235-dd1b4c2e81af → v1.9.4 age adoption passing confidence
github.com/spdx/tools-golang v0.5.5 → v0.5.7 age adoption passing confidence
github.com/tektoncd/chains v0.22.2 → v0.22.3 age adoption passing confidence
github.com/tektoncd/cli v0.38.0 → v0.38.2 age adoption passing confidence
github.com/tektoncd/cli v0.37.1 → v0.37.2 age adoption passing confidence
github.com/testcontainers/testcontainers-go v0.34.0 → v0.34.1 age adoption passing confidence
gotest.tools/gotestsum v1.12.1 → v1.12.3 age adoption passing confidence
helm.sh/helm/v3 v3.18.5 → v3.18.6 age adoption passing confidence
k8s.io/api v0.35.0 → v0.35.1 age adoption passing confidence
k8s.io/apiextensions-apiserver v0.34.2 → v0.34.4 age adoption passing confidence
k8s.io/apimachinery v0.35.0 → v0.35.1 age adoption passing confidence
k8s.io/client-go v0.35.0 → v0.35.1 age adoption passing confidence
k8s.io/kubernetes v1.34.2 → v1.34.4 age adoption passing confidence

Release Notes

cue-lang/cue (cuelang.org/go)

v0.15.4

Compare Source

Evaluator

Fix a panic which could occur when using the error built-in with cyclic references.

Fix a panic which could occur when loading @experiment(aliasv2) syntax with an invalid alias name.

cmd/cue

Relax the cue login --token validation to allow future Central Registry token types.

Encodings

Fix a bug in the TOML decoder where nested arrays were causing incorrect "duplicate key" errors.

Full list of changes since v0.15.3
  • internal/cueversion: bump LanguageVersion for v0.15.4 by @​mvdan in 50c137c
  • internal/ci: bump Go and goreleaser for v0.15.4 by @​mvdan in 8e3eaa9
  • cmd/cue: relax login --token prefix validation by @​rustyx in d0bd478
  • cue/ast/astutil: fix nil pointer dereference in postfix alias error by @​mvdan in c5df0af
  • internal/core/debug: fix stack overflow in error formatting by @​mvdan in bf7a40d
  • encoding/toml: correctly check for duplicate keys with arrays by @​mvdan in 4a5fd52
cucumber/godog (github.com/cucumber/godog)

v0.15.1

Compare Source

Added
Changed
  • Replace deprecated ::set-output - (681 - nodeg)
Fixed
  • fix(errors): fix(errors): Fix expected Step argument count for steps with context.Context (679 - tigh-latte)
  • fix(formatter): On concurrent execution, execute formatter at end of Scenario - (645 - tigh-latte)
  • Pretty printing results now prints the line where the step is declared instead of the line where the handler is declared. (668 - spencerc)
  • Update honnef.co/go/tools/cmd/staticcheck version in Makefile by @​RezaZareiii in #​670
  • fix: verify dogT exists in the context before using it by @​cakoolen in #​692
  • fix: change bang to being in README by @​nahomEagleLion in #​687
  • Mark junit test cases as skipped if no pickle step results available by @​mrsheepuk in #​597
  • Print step declaration line instead of handler declaration line by @​SpencerC in #​668
daixiang0/gci (github.com/daixiang0/gci)

v0.13.7

Compare Source

What's Changed

New Contributors

Full Changelog: daixiang0/gci@v0.13.6...v0.13.7

v0.13.6

Compare Source

What's Changed

Full Changelog: daixiang0/gci@v0.13.5...v0.13.6

evanphx/json-patch (github.com/evanphx/json-patch)

v5.9.11+incompatible

Compare Source

v5.9.10+incompatible

Compare Source

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

v0.5.19

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@0.5.18...v0.5.19

v0.5.18

Compare Source

v0.5.17

Compare Source

v0.5.16

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.15...v0.5.16

v0.5.15

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.14...v0.5.15

v0.5.14

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.13...v0.5.14

v0.5.13

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.12...v0.5.13

v0.5.12

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.11...v0.5.12

v0.5.11

Compare Source

What's Changed
New Contributors

Full Changelog: gkampitakis/go-snaps@v0.5.10...v0.5.11

v0.5.10

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.9...v0.5.10

v0.5.9

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.8...v0.5.9

Kudos to @​orloffv for this issue #​116

v0.5.8

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.7...v0.5.8

open-policy-agent/opa (github.com/open-policy-agent/opa)

v1.12.3

Compare Source

v1.12.3

This is a bug fix release addressing two issues:

Bundle polling is being misconfigured when discovery bundle is updated (#​8215)

This is an issue where the polling interval for discovery (discovery.polling.min_delay_seconds and discovery.polling.max_delay_seconds) were misinterpreted on reconfiguration, causing extremely long update intervals.

Reported by @​loganmiller-chime, authored by @​sspaink

Decision log size buffer buffer_size_limit_bytes misconfigured during reconfiguration (#​8213)

This is a regression in the decision log, where the decision_logs.reporting.buffer_size_limit_bytes was mistakenly assigned the value of decision_logs.reporting.upload_size_limit_bytes during reconfiguration.
This issue is only present when decision_logs.reporting.buffer_type is set to size, which is the default value.

Authored by @​sspaink

v1.12.2

Compare Source

This bug fix release address issues found in the new string interpolation feature

otiai10/copy (github.com/otiai10/copy)

v1.14.1

Compare Source

sirupsen/logrus (github.com/sirupsen/logrus)

v1.9.4

Compare Source

Notable changes

  • go.mod: update minimum supported go version to v1.17 #​1460
  • go.mod: bump up dependencies #​1460
  • Touch-up godoc and add "doc" links.
  • README: fix links, grammar, and update examples.
  • Add GNU/Hurd support #​1364
  • Add WASI wasip1 support #​1388
  • Remove uses of deprecated ioutil package #​1472
  • CI: update actions and golangci-lint #​1459
  • CI: remove appveyor, add macOS #​1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

spdx/tools-golang (github.com/spdx/tools-golang)

v0.5.7

Compare Source

What's Changed

New Contributors

Full Changelog: spdx/tools-golang@v0.5.6...v0.5.7

v0.5.6

Compare Source

What's Changed

New Contributors

Full Changelog: spdx/tools-golang@v0.5.5...v0.5.6

tektoncd/chains (github.com/tektoncd/chains)

v0.22.3: Tekton Chains release v0.22.3 "v0.22.3"

Compare Source

-Docs @​ v0.22.3
-Examples @​ v0.22.3

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/chains/previous/v0.22.3/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677abc5f8010a0a21be4daa53325a217f4df92955848f73f226c6ed054c429fb9f82

Obtain the attestation:

REKOR_UUID=108e9186e8c5677abc5f8010a0a21be4daa53325a217f4df92955848f73f226c6ed054c429fb9f82
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/chains/previous/v0.22.3/release.yaml
REKOR_UUID=108e9186e8c5677abc5f8010a0a21be4daa53325a217f4df92955848f73f226c6ed054c429fb9f82

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.22.3@​sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Fixes
Misc
  • 🔨 Upgrade golang.org/x/crypto to 0.31.0 (#​1269)

Thanks

Thanks to these contributors who contributed to v0.22.3!

Extra shout-out for awesome release notes:

tektoncd/cli (github.com/tektoncd/cli)

v0.38.2

Compare Source

v0.38.2 Release 🎉

This is a bug fix release for CVEs GHSA-w32m-9786-jp63 on golang.org/x/net and GHSA-v778-237x-gjrc on golang.org/x/crypto.

ChangeLog 📋
Misc 🔨
  • Bump golang.org/x/net from 0.30.0 to 0.33.0 #​2473
  • Bump golang.org/x/crypto from 0.28.0 to 0.31.0 #​2447

v0.38.1

Compare Source

v0.38.1 Release 🎉

This is a bug fix release as tkn start was failing with tkn version v0.38.0 release and old(er) pipeline version. This release comes with Pipelines v0.62.3 and Triggers version v0.29.1

ChangeLog 📋
Misc 🔨
  • Bump tektoncd/pipeline to v0.62.3 #​2392
  • Bump github.com/tektoncd/triggers from 0.29.0 to 0.29.1 #​2394
testcontainers/testcontainers-go (github.com/testcontainers/testcontainers-go)

v0.34.1

Compare Source

gotestyourself/gotestsum (gotest.tools/gotestsum)

v1.12.3

Compare Source

What's Changed

New Contributors

Full Changelog: gotestyourself/gotestsum@v1.12.2...v1.12.3

v1.12.2

Compare Source

What's Changed

New Contributors

Full Changelog: gotestyourself/gotestsum@v1.12.1...v1.12.2

helm/helm (helm.sh/helm/v3)

v3.18.6: Helm v3.18.6

Compare Source

Helm v3.18.6 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.6. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

  • fix(helm-lint): fmt b76a950 (Isaiah Lewis)
  • fix(helm-lint): Add TLSClientConfig b79a421 (Isaiah Lewis)
  • fix(helm-lint): Add HTTP/HTTPS URL support for json schema references b9180e6 (Isaiah Lewis)
kubernetes/api (k8s.io/api)

v0.35.1

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.34.4

Compare Source

v0.34.3

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.35.1

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.35.1

Compare Source

kubernetes/kubernetes (k8s.io/kubernetes)

v1.34.4

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

v1.34.3: Kubernetes v1.34.3

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot enabled auto-merge October 1, 2025 09:20
@renovate
Copy link
Contributor Author

renovate bot commented Oct 1, 2025 •
edited
Loading

ℹ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 25 additional dependencies were updated

Details:

Package Change
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/ProtonMail/go-crypto v1.1.3 -> v1.1.5
github.com/cyphar/filepath-securejoin v0.3.1 -> v0.3.6
github.com/gkampitakis/ciinfo v0.3.0 -> v0.3.2
github.com/go-openapi/errors v0.22.0 -> v0.22.1
github.com/go-openapi/swag v0.23.0 -> v0.23.1
github.com/google/certificate-transparency-go v1.2.1 -> v1.3.1
github.com/magiconair/properties v1.8.7 -> v1.8.9
github.com/mailru/easyjson v0.7.7 -> v0.9.0
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/term v0.5.0 -> v0.5.2
github.com/pjbgf/sha1cd v0.3.0 -> v0.3.2
github.com/rogpeppe/go-internal v1.13.1 -> v1.13.2-0.20241226121412-a5dc8ff20d0a
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/sigstore/protobuf-specs v0.3.2 -> v0.4.1
github.com/sigstore/timestamp-authority v1.2.2 -> v1.2.4
github.com/spf13/pflag v1.0.6 -> v1.0.7
github.com/tidwall/gjson v1.17.3 -> v1.18.0
golang.org/x/crypto v0.38.0 -> v0.40.0
golang.org/x/net v0.40.0 -> v0.41.0
golang.org/x/sync v0.15.0 -> v0.16.0
golang.org/x/sys v0.33.0 -> v0.34.0
golang.org/x/term v0.32.0 -> v0.33.0
golang.org/x/text v0.25.0 -> v0.27.0
google.golang.org/api v0.215.0 -> v0.228.0
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 32 additional dependencies were updated

Details:

Package Change
cloud.google.com/go v0.116.0 -> v0.118.3
cloud.google.com/go/auth v0.13.0 -> v0.15.0
cloud.google.com/go/auth/oauth2adapt v0.2.6 -> v0.2.8
cloud.google.com/go/iam v1.2.2 -> v1.4.1
cloud.google.com/go/monitoring v1.21.2 -> v1.24.0
cloud.google.com/go/storage v1.49.0 -> v1.50.0
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.48.1 -> v0.49.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.48.1 -> v0.49.0
github.com/aws/aws-sdk-go-v2/service/ecr v1.32.2 -> v1.40.3
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.25.4 -> v1.31.2
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20240826150212-5dc58b6e29f8 -> v0.9.1
github.com/coreos/go-oidc/v3 v3.11.0 -> v3.12.0
github.com/gkampitakis/ciinfo v0.3.0 -> v0.3.2
github.com/go-openapi/errors v0.22.0 -> v0.22.1
github.com/go-openapi/swag v0.23.0 -> v0.23.1
github.com/google/certificate-transparency-go v1.2.1 -> v1.3.1
github.com/google/s2a-go v0.1.8 -> v0.1.9
github.com/googleapis/enterprise-certificate-proxy v0.3.4 -> v0.3.6
github.com/jmespath/go-jmespath v0.4.0 -> v0.4.1-0.20220621161143-b0104c826a24
github.com/mailru/easyjson v0.7.7 -> v0.9.0
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/term v0.5.0 -> v0.5.2
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/sigstore/fulcio v1.6.3 -> v1.6.6
github.com/sigstore/protobuf-specs v0.3.2 -> v0.4.1
github.com/sigstore/timestamp-authority v1.2.2 -> v1.2.4
github.com/tidwall/gjson v1.17.0 -> v1.18.0
go.step.sm/crypto v0.51.2 -> v0.60.0
google.golang.org/api v0.215.0 -> v0.228.0
google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 -> v0.0.0-20250303144028-a0af3efb3deb
sigs.k8s.io/release-utils v0.8.4 -> v0.11.0
File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/tektoncd/triggers v0.29.0 -> v0.29.1

@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 8 times, most recently from 9db40be to 4561648 Compare October 8, 2025 12:52
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 2 times, most recently from e73a45c to ed34230 Compare October 15, 2025 17:07
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 5 times, most recently from 187c7ea to 4a1c342 Compare October 26, 2025 19:33
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch from 4a1c342 to 07e4517 Compare October 27, 2025 16:27
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 6 times, most recently from 8477e06 to 5b4902e Compare November 6, 2025 12:51
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 3 times, most recently from 3276771 to b01d438 Compare November 12, 2025 20:14
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 7 times, most recently from d0f4357 to ad209dc Compare February 2, 2026 14:05
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 15 times, most recently from f662170 to b34489e Compare February 12, 2026 14:28
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch 3 times, most recently from c0352f3 to 9564980 Compare February 13, 2026 19:03
@renovate renovate bot force-pushed the renovate/main-patch-go-modules branch from 9564980 to 6ce6267 Compare February 13, 2026 20:41
@codecov
Copy link

codecov bot commented Feb 13, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag Coverage Δ
acceptance 55.51% <ø> (+<0.01%) ⬆️
generative 18.56% <ø> (ø)
integration 27.56% <ø> (ø)
unit 68.39% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

main renovate size: L

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants