Skip to content

chore(deps): bump the common group across 1 directory with 49 updates - #310

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/common-78038476dd
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/common-78038476dd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026 •

Copy link
Copy Markdown

Bumps the common group with 49 updates in the / directory:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.21.0 1.23.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.13.1 1.14.1
github.com/CycloneDX/cyclonedx-go 0.10.0 0.12.0
github.com/GoogleCloudPlatform/docker-credential-gcr/v2 2.1.31 2.2.1
github.com/alicebob/miniredis/v2 2.36.1 2.39.0
github.com/apparentlymart/go-cidr 1.1.0 1.1.1
github.com/bmatcuk/doublestar/v4 4.10.0 4.10.1
github.com/cheggaaa/pb/v3 3.1.7 3.2.1
github.com/containerd/platforms 1.0.0-rc.2 1.0.0-rc.5
github.com/fatih/color 1.18.0 1.19.0
github.com/go-git/go-git/v5 5.16.5 5.19.2
github.com/gocsaf/csaf/v3 3.5.1 3.6.0
github.com/google/go-containerregistry 0.20.7 0.22.1
github.com/hashicorp/go-getter 1.8.4 1.8.9
github.com/hashicorp/go-version 1.8.0 1.9.0
github.com/hashicorp/hc-install 0.9.2 0.9.5
github.com/hashicorp/hcl/v2 2.24.0 2.25.0
github.com/hashicorp/terraform-exec 0.24.0 0.25.3
github.com/in-toto/in-toto-golang 0.10.0 0.11.0
github.com/magefile/mage 1.15.0 1.17.2
github.com/mattn/go-shellwords 1.0.12 1.0.15
github.com/open-policy-agent/opa 1.13.1 1.20.2
github.com/openvex/go-vex 0.2.7 0.2.9
github.com/package-url/packageurl-go 0.1.3 0.1.7
github.com/rogpeppe/go-internal 1.14.1 1.16.0
github.com/samber/lo 1.52.0 1.53.0
github.com/secure-systems-lab/go-securesystemslib 0.10.0 0.11.1
github.com/sigstore/rekor 1.5.0 1.5.4
github.com/sirupsen/logrus 1.9.4 1.10.2
github.com/stretchr/testify 1.11.1 1.12.1
github.com/tetratelabs/wazero 1.11.0 1.12.0
github.com/zclconf/go-cty 1.17.0 1.19.0
go.etcd.io/bbolt 1.4.3 1.5.0
golang.org/x/crypto 0.48.0 0.56.0
golang.org/x/mod 0.33.0 0.39.0
golang.org/x/net 0.50.0 0.58.0
golang.org/x/sync 0.19.0 0.22.0
golang.org/x/term 0.40.0 0.45.0
golang.org/x/text 0.34.0 0.41.0
golang.org/x/tools 0.42.0 0.49.0
golang.org/x/vuln 1.1.4 1.8.0
golang.org/x/xerrors 0.0.0-20240716161551-93cc26a95ae9 0.0.0-20240903120638-7835f813f4da
google.golang.org/protobuf 1.36.11 1.36.12
helm.sh/helm/v3 3.20.0 3.22.0
k8s.io/api 0.35.0 0.37.0
k8s.io/utils 0.0.0-20251002143259-bc988d571ff4 0.0.0-20260626114624-be93311217bd
modernc.org/sqlite 1.45.0 1.59.0
github.com/invopop/jsonschema 0.13.0 0.14.0
github.com/nikolalohinski/gonja/v2 2.6.0 2.9.0

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.23.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.1

1.23.1 (2026-08-27)

Other Changes

  • Upgraded dependencies.

sdk/azcore/v1.23.0

1.23.0 (2026-08-11)

Features Added

  • Helper method runtime.NewRequestForNextLink for creating requests for pageable operations that uses a next link. It handles absolute and relative next links.

Bugs Fixed

  • Fixed an issue where runtime.Pager[T].More could return true indefinitely after NextPage failed to retrieve the first page, causing for pager.More() loops to spin. After a page fetch returns an error the Pager now enters a terminal state: More returns false and subsequent NextPage calls return the same error without invoking the fetcher again.
Commits
  • d86ae78 Prep azcore for release (#27471)
  • 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
  • a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
  • af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
  • 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
  • e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
  • 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
  • 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
  • 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
  • cf17431 [AutoPR sdk-resourcemanager/containerservice/armcontainerservice]-generated-f...
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.1 to 1.14.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.14.1

1.14.1 (2026-08-27)

Other Changes

  • Upgraded dependencies
Commits
  • 920e79a Prep azidentity for release (#27473)
  • d86ae78 Prep azcore for release (#27471)
  • 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
  • a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
  • af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
  • 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
  • e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
  • 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
  • 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
  • 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
  • Additional commits viewable in compare view

Updates github.com/CycloneDX/cyclonedx-go from 0.10.0 to 0.12.0

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.12.0

Changelog

Building and Packaging

  • 5dfc64ab963e76da86efe7faae291ed095923484: build(deps): bump actions/checkout from 6.0.2 to 7.0.1 (@​dependabot[bot])
  • 1ede59bde7338f3c399d3fb8496fea1d09a64c4a: build(deps): bump actions/checkout from 6.0.2 to 7.0.1 (@​dependabot[bot])
  • 0802b2051bf0bab06d4292ffe9544f1b81b7d871: build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 (@​dependabot[bot])
  • 912c03326d52e05a11c8b4c04611e645e23a511f: build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (@​dependabot[bot])
  • 3b6942c801ce9089f70ce5d6823f9bc412ff1083: build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (@​dependabot[bot])
  • 14a734c429eb00311801569d0fca83d528f7807b: build(deps): bump github.com/terminalstatic/go-xsd-validate (@​dependabot[bot])
  • c3551dd3988ca16fc885906fdbed9871b97ed15f: build(deps): bump github.com/terminalstatic/go-xsd-validate (@​dependabot[bot])
  • 4598c3a9e8b7a69f9e5c30b4082cce6f12da9ad6: build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.3.0 (@​dependabot[bot])
  • 0d3dc12d273ad6c9bb80d3b00b52908f3df228b0: build(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.3 (@​dependabot[bot])

Others

  • ed2c60ec63e49257c9b943be633157777d70bd97: Encode evidence identity as a single object when downgrading below 1.6 (@​sueun-dev)
  • 3d9769a7919bf961da7c90286e9b6aa8f6389c8f: Strip fields newer than the target spec version when downgrading (@​sueun-dev)
  • cdee31c65c4f9675f81aff69deadae480019030c: chore: bump minimum go version to 1.25 (@​nscuro)
  • b3fcca54d5debbfe3cbf51078bf2c69bf65ed789: chore: harden GHA workflows; add zizmor job (@​nscuro)
  • cbc84f956ef2472a864d055705df0901335bf8fb: chore: refresh goreleaser setup (@​nscuro)

v0.11.0

Changelog

Building and Packaging

  • 32221d4829e8ec6007896af2d7f11fd6ba13d6c5: build(deps): bump actions/setup-go from 6.2.0 to 6.4.0 (#261) (@​dependabot[bot])
  • a42a4dd9163df91c4173d41db2cc7ed67f0db0b6: build(deps): bump gitpod/workspace-go from 08a7c68 to 00059ff (#255) (@​dependabot[bot])
  • 9810ab9f48d46f134ad9a13bbabd1397cc64804e: build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.1 (#263) (@​dependabot[bot])

Others

  • 2cef05662cba14b4ae948b1858fee532f8adadd1: Add comprehensive support for CycloneDX 1.7 specification (#257) (@​alistair-mclean)
  • 3ed34da50502f9b9d6ac9dff64df8b08e53aa2a5: Added 5 missing fields to match CycloneDX 1.6 spec: (#256) (@​alistair-mclean)
Commits
  • 717afd1 Merge pull request #289 from CycloneDX/go-1.25
  • cdee31c chore: bump minimum go version to 1.25
  • a748788 Merge pull request #288 from CycloneDX/goreleaser-config-update
  • c69efae Merge pull request #287 from CycloneDX/dependabot/github_actions/actions/chec...
  • cbc84f9 chore: refresh goreleaser setup
  • 5dfc64a build(deps): bump actions/checkout from 6.0.2 to 7.0.1
  • 2c4927c Merge pull request #286 from CycloneDX/gha-hardening
  • b3fcca5 chore: harden GHA workflows; add zizmor job
  • 9401da7 Merge pull request #285 from CycloneDX/dependabot/go_modules/github.com/stret...
  • 3b6942c build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1
  • Additional commits viewable in compare view

Updates github.com/GoogleCloudPlatform/docker-credential-gcr/v2 from 2.1.31 to 2.2.1

Release notes

Sourced from github.com/GoogleCloudPlatform/docker-credential-gcr/v2's releases.

v2.2.1

What's Changed

Full Changelog: GoogleCloudPlatform/docker-credential-gcr@v2.2.0...v2.2.1

v2.2.0

This minor release bumps dependencies, updates the Go toolchain version and drops the github.com/docker/docker dependency.

What's Changed

New Contributors

Full Changelog: GoogleCloudPlatform/docker-credential-gcr@v2.1.32...v2.2.0

v2.1.33

What's Changed

New Contributors

Full Changelog: GoogleCloudPlatform/docker-credential-gcr@v2.1.32...v2.1.33

v2.1.32

What's Changed

New Contributors

Full Changelog: GoogleCloudPlatform/docker-credential-gcr@v2.1.31...v2.1.32

Commits
  • bdb02de fix: pin Go version in goreleaser to go.mod + broaden version regex test (#199)
  • 7716c66 Bump the actions group across 1 directory with 3 updates (#195)
  • d3d71a2 chore(deps): bump toolchain version and apply to actions (#197)
  • 2e54530 Bump the go-deps group with 5 updates (#196)
  • c68e3e3 chore(actions): add dependabot config and update actions (#194)
  • 2cce594 chore(deps): remove deprecated docker/docker dependency (#193)
  • 2d59c81 chore(deps): bump docker-cli to v29.6.2+incompatible (#192)
  • ade502b Merge pull request #190 from GoogleCloudPlatform/upgrade-go-1.26
  • 1d6b29f Upgrade Go version to 1.26
  • 711dd80 Update logrus to use newer version with no CVE (#187)
  • Additional commits viewable in compare view

Updates github.com/alicebob/miniredis/v2 from 2.36.1 to 2.39.0

Release notes

Sourced from github.com/alicebob/miniredis/v2's releases.

GEOSEARCH, HPERSIST, PZPOP*

DELEX and fixes

HEXPIRE

Changelog

Sourced from github.com/alicebob/miniredis/v2's changelog.

v2.39.0

v2.38.0

v2.37.0

Commits

Updates github.com/apparentlymart/go-cidr from 1.1.0 to 1.1.1

Commits
  • 5730b04 SubnetBig returns error for negative subnet number
  • fab7bb4 HostBig: Don't crash for out-of-range hostnum greater than max uint64
  • e4ff799 Update doc comment spacing for newer gofmt behavior
  • See full diff in compare view

Updates github.com/bmatcuk/doublestar/v4 from 4.10.0 to 4.10.1

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Fixed issue with alternatives and character classes

There was an issue where commas or ending curly brackets inside a character class would cause code looking for the next alternative (commas) or the end of alternatives (ending curly brackets) to erroneously match those characters inside the character classes.

Thanks to @​sidsri14 for the fix!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.10.0...v4.10.1

Commits

Updates github.com/cheggaaa/pb/v3 from 3.1.7 to 3.2.1

Commits
  • 6e37daa Merge pull request #243 from cheggaaa/version-bumps
  • 3b0760a bump versions to 1.0.30 and 3.2.1
  • e3020d0 Merge pull request #242 from cheggaaa/v3-wasip1-js-stub
  • 6273214 Merge pull request #239 from cheggaaa/dependabot/go_modules/v3/github.com/mat...
  • d8bb17f Merge branch 'master' into dependabot/go_modules/v3/github.com/mattn/go-runew...
  • 49ec290 termutil: add fallback stub for platforms without terminal control
  • 425842b Merge pull request #240 from cheggaaa/dependabot/go_modules/v3/github.com/mat...
  • 12e27e0 Merge pull request #241 from calvinrp/wasip1-terminal-width
  • 7a78d76 Define terminalWidth on GOOS=wasip1 via the appengine/js stub
  • e49350a Bump github.com/mattn/go-isatty from 0.0.23 to 0.0.24 in /v3
  • Additional commits viewable in compare view

Updates github.com/containerd/platforms from 1.0.0-rc.2 to 1.0.0-rc.5

Release notes

Sourced from github.com/containerd/platforms's releases.

v1.0.0-rc.5

What's Changed

New Contributors

Full Changelog: containerd/platforms@v1.0.0-rc.4...v1.0.0-rc.5

v1.0.0-rc.4

What's Changed

Full Changelog: containerd/platforms@v1.0.0-rc.3...v1.0.0-rc.4

v1.0.0-rc.3

What's Changed

Full Changelog: containerd/platforms@v1.0.0-rc.2...v1.0.0-rc.3

Commits
  • 94edf53 Merge pull request #34 from zylxjtu/main
  • bacc690 Fix WS2022 compat on hosts past the latest LTSC
  • 09756f5 Merge pull request #33 from dmcgowan/only-os
  • 3a284c1 Merge pull request #31 from dmcgowan/windows-strip-features
  • 1e75776 Merge pull request #30 from thaJeztah/platforms_refactor
  • adbf321 Strip the win32k when comparing windows platforms
  • 27058a1 Add OnlyOS function allow matching any architecture
  • d028ee3 ParseAll: refactor
  • 8f5e31a FormatAll: use a string-builder for formatting os-options
  • 0165130 modernize --fix
  • Additional commits viewable in compare view

Updates github.com/fatih/color from 1.18.0 to 1.19.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits
  • ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
  • 1205984 Bump actions/setup-go from 5 to 6
  • 5715c20 Merge pull request #269 from UnSubble/main
  • 2f6e200 Merge branch 'main' into main
  • f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
  • 848e633 Merge branch 'main' into main
  • 4c2cd34 Add tests
  • 7f812f0 Bump actions/checkout from 4 to 6
  • b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
  • 239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.16.5 to 5.19.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.2

What's Changed

Full Changelog: go-git/go-git@v5.19.1...v5.19.2

v5.19.1

What's Changed

Full Changelog: go-git/go-git@v5.19.0...v5.19.1

v5.19.0

What's Changed

Full Changelog: go-git/go-git@v5.18.0...v5.19.0

v5.18.0

What's Changed

Full Changelog: go-git/go-git@v5.17.2...v5.18.0

... (truncated)

Commits
  • 3eeb238 Merge pull request #2277 from go-git/checkout-v5
  • 008a78f git: worktree, make the filesystem wrapper a symlink-safe boundary
  • 2263fb5 Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...
  • 77b7625 build: Update module golang.org/x/text to v0.39.0 [SECURITY]
  • 85ea767 Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...
  • 198675a build: Update module golang.org/x/net to v0.56.0 [SECURITY]
  • 4a0e66d Merge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment
  • 3b306ef storage: dotgit, align reference-name safety with refname_is_safe
  • f3d0cc1 storage: dotgit, reject path traversal in reference names
  • 979cfe9 Merge pull request #2262 from joshblum/joshblum/to-slash-v5
  • Additional commits viewable in compare view

Updates github.com/gocsaf/csaf/v3 from 3.5.1 to 3.6.0

Release notes

Sourced from github.com/gocsaf/csaf/v3's releases.

v3.6.0

This release was focused on extending the functionality while maintaining backwards compatibility. This is why we only changed the minor version.

If you observe anything that has broken the API, please open an issue.

Most of these changes were made to support the CSAF online checker. Issues found during the development of the online checker were also fixed.

Highlights

  • Uploader: add option to call external signing tool: gocsaf/csaf#738
  • Optimization of memory usage:
  • Allow cancellation of API calls which use http connections internally: gocsaf/csaf#740
  • New flags for more granular control:
    • Add pre_flight option to csaf_checker that logs pmdURL on successful PMD check: gocsaf/csaf#729
    • Add client_timeout flag in csaf_checker, csaf_downloader and csaf_aggregator: gocsaf/csaf#730
    • Checker: Implement a requirement evaluation trail to make more transparent why domains have passed or failed: gocsaf/csaf#741
  • More information logged:

Other Changes

New Contributors

Full Changelog: gocsaf/csaf@v3.5.1...v3.6

Commits
  • 974be17 Merge pull request #749 from gocsaf/update_3rd_party_2026-07-29
  • ad46561 Update 3rd party libraries.
  • 9f97812 Merge pull request #729 from gocsaf/checker-preflight
  • 7378b53 Merge pull request #742 from gocsaf/report_unused_pmds
  • d1cf49d Add unused PMD to security.txt reporter.
  • 0c4749f Merge branch 'main' into report_unused_pmds
  • da7b803 Merge pull request #730 from gocsaf/add-client-timeout-flag
  • ebd45b6 Merge pull request #725 from gocsaf/log_used_pmd
  • a931b1b Merge branch 'main' into checker-preflight
  • 2e82f55 Remove stale comment in csaf_downloader/downloader.go downloadContext struct
  • Additional commits viewable in

Bumps the common group with 49 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.21.0` | `1.23.1` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.13.1` | `1.14.1` |
| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.10.0` | `0.12.0` |
| [github.com/GoogleCloudPlatform/docker-credential-gcr/v2](https://github.com/GoogleCloudPlatform/docker-credential-gcr) | `2.1.31` | `2.2.1` |
| [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.36.1` | `2.39.0` |
| [github.com/apparentlymart/go-cidr](https://github.com/apparentlymart/go-cidr) | `1.1.0` | `1.1.1` |
| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.10.0` | `4.10.1` |
| [github.com/cheggaaa/pb/v3](https://github.com/cheggaaa/pb) | `3.1.7` | `3.2.1` |
| [github.com/containerd/platforms](https://github.com/containerd/platforms) | `1.0.0-rc.2` | `1.0.0-rc.5` |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.5` | `5.19.2` |
| [github.com/gocsaf/csaf/v3](https://github.com/gocsaf/csaf) | `3.5.1` | `3.6.0` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.7` | `0.22.1` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.8.4` | `1.8.9` |
| [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) | `1.8.0` | `1.9.0` |
| [github.com/hashicorp/hc-install](https://github.com/hashicorp/hc-install) | `0.9.2` | `0.9.5` |
| [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) | `2.24.0` | `2.25.0` |
| [github.com/hashicorp/terraform-exec](https://github.com/hashicorp/terraform-exec) | `0.24.0` | `0.25.3` |
| [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang) | `0.10.0` | `0.11.0` |
| [github.com/magefile/mage](https://github.com/magefile/mage) | `1.15.0` | `1.17.2` |
| [github.com/mattn/go-shellwords](https://github.com/mattn/go-shellwords) | `1.0.12` | `1.0.15` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.13.1` | `1.20.2` |
| [github.com/openvex/go-vex](https://github.com/openvex/go-vex) | `0.2.7` | `0.2.9` |
| [github.com/package-url/packageurl-go](https://github.com/package-url/packageurl-go) | `0.1.3` | `0.1.7` |
| [github.com/rogpeppe/go-internal](https://github.com/rogpeppe/go-internal) | `1.14.1` | `1.16.0` |
| [github.com/samber/lo](https://github.com/samber/lo) | `1.52.0` | `1.53.0` |
| [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) | `0.10.0` | `0.11.1` |
| [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.5.0` | `1.5.4` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.2` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` |
| [github.com/tetratelabs/wazero](https://github.com/tetratelabs/wazero) | `1.11.0` | `1.12.0` |
| [github.com/zclconf/go-cty](https://github.com/zclconf/go-cty) | `1.17.0` | `1.19.0` |
| [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt) | `1.4.3` | `1.5.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.48.0` | `0.56.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.33.0` | `0.39.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.50.0` | `0.58.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.19.0` | `0.22.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.40.0` | `0.45.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.34.0` | `0.41.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.42.0` | `0.49.0` |
| [golang.org/x/vuln](https://github.com/golang/vuln) | `1.1.4` | `1.8.0` |
| [golang.org/x/xerrors](https://github.com/golang/xerrors) | `0.0.0-20240716161551-93cc26a95ae9` | `0.0.0-20240903120638-7835f813f4da` |
| google.golang.org/protobuf | `1.36.11` | `1.36.12` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.20.0` | `3.22.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.35.0` | `0.37.0` |
| [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20251002143259-bc988d571ff4` | `0.0.0-20260626114624-be93311217bd` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.45.0` | `1.59.0` |
| [github.com/invopop/jsonschema](https://github.com/invopop/jsonschema) | `0.13.0` | `0.14.0` |
| [github.com/nikolalohinski/gonja/v2](https://github.com/nikolalohinski/gonja) | `2.6.0` | `2.9.0` |



Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.21.0 to 1.23.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.21.0...sdk/azcore/v1.23.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.13.1 to 1.14.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azidentity/v1.13.1...sdk/azidentity/v1.14.1)

Updates `github.com/CycloneDX/cyclonedx-go` from 0.10.0 to 0.12.0
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Commits](CycloneDX/cyclonedx-go@v0.10.0...v0.12.0)

Updates `github.com/GoogleCloudPlatform/docker-credential-gcr/v2` from 2.1.31 to 2.2.1
- [Release notes](https://github.com/GoogleCloudPlatform/docker-credential-gcr/releases)
- [Commits](GoogleCloudPlatform/docker-credential-gcr@v2.1.31...v2.2.1)

Updates `github.com/alicebob/miniredis/v2` from 2.36.1 to 2.39.0
- [Release notes](https://github.com/alicebob/miniredis/releases)
- [Changelog](https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md)
- [Commits](alicebob/miniredis@v2.36.1...v2.39.0)

Updates `github.com/apparentlymart/go-cidr` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/apparentlymart/go-cidr/releases)
- [Commits](apparentlymart/go-cidr@v1.1.0...v1.1.1)

Updates `github.com/bmatcuk/doublestar/v4` from 4.10.0 to 4.10.1
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.10.0...v4.10.1)

Updates `github.com/cheggaaa/pb/v3` from 3.1.7 to 3.2.1
- [Commits](cheggaaa/pb@v3.1.7...v3.2.1)

Updates `github.com/containerd/platforms` from 1.0.0-rc.2 to 1.0.0-rc.5
- [Release notes](https://github.com/containerd/platforms/releases)
- [Commits](containerd/platforms@v1.0.0-rc.2...v1.0.0-rc.5)

Updates `github.com/fatih/color` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.18.0...v1.19.0)

Updates `github.com/go-git/go-git/v5` from 5.16.5 to 5.19.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.16.5...v5.19.2)

Updates `github.com/gocsaf/csaf/v3` from 3.5.1 to 3.6.0
- [Release notes](https://github.com/gocsaf/csaf/releases)
- [Changelog](https://github.com/gocsaf/csaf/blob/main/docs/release-process-hints.md)
- [Commits](gocsaf/csaf@v3.5.1...v3.6.0)

Updates `github.com/google/go-containerregistry` from 0.20.7 to 0.22.1
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.20.7...v0.22.1)

Updates `github.com/hashicorp/go-getter` from 1.8.4 to 1.8.9
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-getter@v1.8.4...v1.8.9)

Updates `github.com/hashicorp/go-version` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/hashicorp/go-version/releases)
- [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-version@v1.8.0...v1.9.0)

Updates `github.com/hashicorp/hc-install` from 0.9.2 to 0.9.5
- [Release notes](https://github.com/hashicorp/hc-install/releases)
- [Commits](hashicorp/hc-install@v0.9.2...v0.9.5)

Updates `github.com/hashicorp/hcl/v2` from 2.24.0 to 2.25.0
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](hashicorp/hcl@v2.24.0...v2.25.0)

Updates `github.com/hashicorp/terraform-exec` from 0.24.0 to 0.25.3
- [Release notes](https://github.com/hashicorp/terraform-exec/releases)
- [Changelog](https://github.com/hashicorp/terraform-exec/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-exec@v0.24.0...v0.25.3)

Updates `github.com/in-toto/in-toto-golang` from 0.10.0 to 0.11.0
- [Release notes](https://github.com/in-toto/in-toto-golang/releases)
- [Changelog](https://github.com/in-toto/in-toto-golang/blob/master/CHANGELOG.md)
- [Commits](in-toto/in-toto-golang@v0.10.0...v0.11.0)

Updates `github.com/magefile/mage` from 1.15.0 to 1.17.2
- [Release notes](https://github.com/magefile/mage/releases)
- [Commits](magefile/mage@v1.15.0...v1.17.2)

Updates `github.com/mattn/go-shellwords` from 1.0.12 to 1.0.15
- [Release notes](https://github.com/mattn/go-shellwords/releases)
- [Commits](mattn/go-shellwords@v1.0.12...v1.0.15)

Updates `github.com/open-policy-agent/opa` from 1.13.1 to 1.20.2
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.13.1...v1.20.2)

Updates `github.com/openvex/go-vex` from 0.2.7 to 0.2.9
- [Release notes](https://github.com/openvex/go-vex/releases)
- [Commits](openvex/go-vex@v0.2.7...v0.2.9)

Updates `github.com/package-url/packageurl-go` from 0.1.3 to 0.1.7
- [Release notes](https://github.com/package-url/packageurl-go/releases)
- [Commits](package-url/packageurl-go@v0.1.3...v0.1.7)

Updates `github.com/rogpeppe/go-internal` from 1.14.1 to 1.16.0
- [Release notes](https://github.com/rogpeppe/go-internal/releases)
- [Commits](rogpeppe/go-internal@v1.14.1...v1.16.0)

Updates `github.com/samber/lo` from 1.52.0 to 1.53.0
- [Release notes](https://github.com/samber/lo/releases)
- [Commits](samber/lo@v1.52.0...v1.53.0)

Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.10.0 to 0.11.1
- [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases)
- [Commits](secure-systems-lab/go-securesystemslib@v0.10.0...v0.11.1)

Updates `github.com/sigstore/rekor` from 1.5.0 to 1.5.4
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](sigstore/rekor@v1.5.0...v1.5.4)

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.4...v1.10.2)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `github.com/tetratelabs/wazero` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/tetratelabs/wazero/releases)
- [Commits](wazero/wazero@v1.11.0...v1.12.0)

Updates `github.com/zclconf/go-cty` from 1.17.0 to 1.19.0
- [Release notes](https://github.com/zclconf/go-cty/releases)
- [Changelog](https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md)
- [Commits](zclconf/go-cty@v1.17.0...v1.19.0)

Updates `go.etcd.io/bbolt` from 1.4.3 to 1.5.0
- [Release notes](https://github.com/etcd-io/bbolt/releases)
- [Commits](etcd-io/bbolt@v1.4.3...v1.5.0)

Updates `golang.org/x/crypto` from 0.48.0 to 0.56.0
- [Commits](golang/crypto@v0.48.0...v0.56.0)

Updates `golang.org/x/mod` from 0.33.0 to 0.39.0
- [Commits](golang/mod@v0.33.0...v0.39.0)

Updates `golang.org/x/net` from 0.50.0 to 0.58.0
- [Commits](golang/net@v0.50.0...v0.58.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.22.0
- [Commits](golang/sync@v0.19.0...v0.22.0)

Updates `golang.org/x/term` from 0.40.0 to 0.45.0
- [Commits](golang/term@v0.40.0...v0.45.0)

Updates `golang.org/x/text` from 0.34.0 to 0.41.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.34.0...v0.41.0)

Updates `golang.org/x/tools` from 0.42.0 to 0.49.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.42.0...v0.49.0)

Updates `golang.org/x/vuln` from 1.1.4 to 1.8.0
- [Release notes](https://github.com/golang/vuln/releases)
- [Commits](golang/vuln@v1.1.4...v1.8.0)

Updates `golang.org/x/xerrors` from 0.0.0-20240716161551-93cc26a95ae9 to 0.0.0-20240903120638-7835f813f4da
- [Commits](https://github.com/golang/xerrors/commits)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

Updates `helm.sh/helm/v3` from 3.20.0 to 3.22.0
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.20.0...v3.22.0)

Updates `k8s.io/api` from 0.35.0 to 0.37.0
- [Commits](kubernetes/api@v0.35.0...v0.37.0)

Updates `k8s.io/utils` from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20260626114624-be93311217bd
- [Commits](https://github.com/kubernetes/utils/commits)

Updates `modernc.org/sqlite` from 1.45.0 to 1.59.0
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.45.0...v1.59.0)

Updates `github.com/invopop/jsonschema` from 0.13.0 to 0.14.0
- [Release notes](https://github.com/invopop/jsonschema/releases)
- [Commits](invopop/jsonschema@v0.13.0...v0.14.0)

Updates `github.com/nikolalohinski/gonja/v2` from 2.6.0 to 2.9.0
- [Commits](NikolaLohinski/gonja@v2.6.0...v2.9.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/GoogleCloudPlatform/docker-credential-gcr/v2
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/alicebob/miniredis/v2
  dependency-version: 2.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/apparentlymart/go-cidr
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-version: 4.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/cheggaaa/pb/v3
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/containerd/platforms
  dependency-version: 1.0.0-rc.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/fatih/color
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/gocsaf/csaf/v3
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/hashicorp/go-version
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/hashicorp/hc-install
  dependency-version: 0.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-version: 2.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/hashicorp/terraform-exec
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/in-toto/in-toto-golang
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/magefile/mage
  dependency-version: 1.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/mattn/go-shellwords
  dependency-version: 1.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.20.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/openvex/go-vex
  dependency-version: 0.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/package-url/packageurl-go
  dependency-version: 0.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/rogpeppe/go-internal
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/samber/lo
  dependency-version: 1.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/secure-systems-lab/go-securesystemslib
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/sigstore/rekor
  dependency-version: 1.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/tetratelabs/wazero
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/zclconf/go-cty
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: go.etcd.io/bbolt
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/crypto
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/mod
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/sync
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/term
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/text
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/tools
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/vuln
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/xerrors
  dependency-version: 0.0.0-20240903120638-7835f813f4da
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: k8s.io/api
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20260626114624-be93311217bd
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: modernc.org/sqlite
  dependency-version: 1.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/invopop/jsonschema
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/nikolalohinski/gonja/v2
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 30, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 30, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/common-78038476dd branch September 30, 2026 00:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants