Skip to content

Bump the go-deps group across 1 directory with 8 updates - #1735

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-435ce47093
Open

Bump the go-deps group across 1 directory with 8 updates#1735
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-435ce47093

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 7 updates in the / directory:

Package From To
cloud.google.com/go/kms 1.31.0 1.33.0
github.com/cyphar/filepath-securejoin 0.6.1 0.7.0
github.com/fluxcd/cli-utils 1.2.2 1.2.3
github.com/fluxcd/pkg/auth 0.55.0 0.56.0
github.com/getsops/sops/v3 3.13.2 3.13.3
github.com/go-logr/logr 1.4.3 1.4.4
github.com/onsi/gomega 1.42.1 1.43.0

Updates cloud.google.com/go/kms from 1.31.0 to 1.33.0

Release notes

Sourced from cloud.google.com/go/kms's releases.

kms: v1.33.0

1.33.0 (2026-07-23)

Features

retail: v1.33.0

1.33.0 (2026-08-13)

Features

cloudbuild: v1.33.0

1.33.0 (2026-08-20)

Features

discoveryengine: v1.33.0

1.33.0 (2026-08-26)

Features

discoveryengine: v1.32.0

1.32.0 (2026-07-20)

Features

Changelog

Sourced from cloud.google.com/go/kms's changelog.

1.33.0 (2024-08-20)

Features

  • documentai: Add support for Go 1.23 iterators (84461c0)

1.32.0 (2024-08-08)

Features

  • documentai: A new field gen_ai_model_info is added to message .google.cloud.documentai.v1.ProcessorVersion (649c075)
  • documentai: A new field imageless_mode is added to message .google.cloud.documentai.v1.ProcessRequest (649c075)

Bug Fixes

  • documentai: Update google.golang.org/api to v0.191.0 (5b32644)
Commits
  • 4f63392 chore: release main (#20195)
  • 09acbb3 feat(bigtable): add Session struct + state machine (#20117)
  • 0b4eb72 chore(cloud/sql): onboarding a new API (#20206)
  • bcbf714 feat(bigtable): add AFE picker (Simple / LeastInFlight / LeastLatency) (#20204)
  • 6e776eb ci: revert "ci: librarian to use Go 1.25.8 toolchain" (#20205)
  • f0c7260 chore(main): release bigtable 1.51.0 (#20014)
  • a466345 feat(bigtable): add sessionTracer for per-Session lifecycle + vRPC metrics (#...
  • a9990b4 chore(bigtable): remove toolchain directive (#20203)
  • 104e0de feat: update API sources and regenerate (#20188)
  • 8dfb2b4 ci: librarian to use Go 1.25.8 toolchain (#20200)
  • Additional commits viewable in compare view

Updates github.com/cyphar/filepath-securejoin from 0.6.1 to 0.7.0

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.7.0 -- "You talk of times of peace for all, and then prepare for war."

Changed

  • Update to cyphar.com/go-pathrs@0.2.5, which included a build-time API breakage that we needed to work around. The API of this library is unchanged by this, but users should make sure to update to v0.7.0 of filepath-securejoin if they use the libpathrs built tag and have update to libpathrs v0.2.5.

Signed-off-by: Aleksa Sarai cyphar@cyphar.com

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.7.0] - 2025-06-17

You talk of times of peace for all, and then prepare for war.

Changed

  • Update to cyphar.com/go-pathrs@0.2.5, which included a build-time API breakage that we needed to work around. The API of this library is unchanged by this, but users should make sure to update to v0.7.0 of filepath-securejoin if they use the libpathrs built tag and have update to libpathrs v0.2.5.
Commits
  • 8096a95 VERSION: release v0.7.0
  • 1324ccb merge #101 into cyphar/filepath-securejoin:main
  • dd8f0bb deps: bump to cyphar.com/go-pathrs@v0.2.5
  • c9a7725 gha: bump golangci-lint to v2.12
  • 2e968bd Merge pull request #91 from cyphar/dependabot/github_actions/actions/download...
  • 2879148 Merge pull request #90 from cyphar/dependabot/github_actions/actions/upload-a...
  • 07b805b build(deps): bump actions/download-artifact from 6 to 7
  • 8507844 build(deps): bump actions/upload-artifact from 5 to 6
  • daef0cf Merge pull request #89 from cyphar/dependabot/github_actions/actions/checkout-6
  • 95f8ea4 build(deps): bump actions/checkout from 5 to 6
  • Additional commits viewable in compare view

Updates github.com/fluxcd/cli-utils from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/fluxcd/cli-utils's releases.

v1.2.3

What's Changed

Full Changelog: fluxcd/cli-utils@v1.2.2...v1.2.3

Commits

Updates github.com/fluxcd/pkg/auth from 0.55.0 to 0.56.0

Commits
  • bf02f0a Merge pull request #1026 from fluxcd/storage-refactoring
  • e2dd3d1 artifact: Refactor storage package structure
  • ee36d78 Merge pull request #1025 from fluxcd/controller-runtime-v0.22.1
  • b5ab5b9 Prepare release
  • 6ce90c6 Add the Artifact Management SDK to readme
  • e4f3937 Update controller-runtime to v0.22.1
  • 9e2ac7d Merge pull request #1024 from fluxcd/dependabot/github_actions/ci-43e6514044
  • 93ac531 build(deps): bump the ci group across 1 directory with 5 updates
  • 24724be Merge pull request #1023 from fluxcd/runtime-env-vars
  • 85cb1e2 runtime: Add environment variables
  • Additional commits viewable in compare view

Updates github.com/getsops/sops/v3 from 3.13.2 to 3.13.3

Release notes

Sourced from github.com/getsops/sops/v3's releases.

v3.13.3

Installation

To install sops, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.linux.amd64
Move the binary in to your PATH
mv sops-v3.13.3.linux.amd64 /usr/local/bin/sops
Make the binary executable
chmod +x /usr/local/bin/sops

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.checksums.sigstore.json
Verify the checksums file
cosign verify-blob sops-v3.13.3.checksums.txt 
--bundle sops-v3.13.3.checksums.sigstore.json 
--certificate-identity-regexp=https://github.com/getsops 
--certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:

# Verify the binary using the checksums file
sha256sum -c sops-v3.13.3.checksums.txt --ignore-missing

Verify artifact provenance

The SLSA provenance of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an in-toto link metadata file named sops-v3.13.3.intoto.jsonl. To verify the provenance of an artifact, you can utilize the slsa-verifier tool:

# Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.13.3/sops-v3.13.3.intoto.jsonl
</tr></table>

... (truncated)

Changelog

Sourced from github.com/getsops/sops/v3's changelog.

3.13.3

Improvements:

Bugfixes:

  • Fix a bug introduced in 3.13.2 that computes a wrong MAC during decryption for sequences (YAML lists) that contain a comment (#2245).
  • Fix completion subcommands so that they do not have an empty line before the shebang (#2253).

Project changes:

  • CI dependency updates (#2241, #2250, #2260).
  • Rust dependency updates for functional tests (#2259).
Commits
  • 26e2f47 Merge pull request #2249 from felixfontein/release-3.13.3
  • 357de8a Fix old changelog.
  • 73f38b8 Add changelog.
  • 74428b6 Bump version to 3.13.3.
  • f5fe6ab Merge pull request #2253 from felixfontein/completion
  • 238f71b Remove leading newline.
  • 5a745f3 Merge pull request #2248 from felixfontein/deps
  • f406e83 Update dependencies with 'go get -t -u ./...'.
  • 7149e91 Merge pull request #2259 from getsops/dependabot/cargo/functional-tests/rust-...
  • fefb6ee build(deps): Bump the rust group in /functional-tests with 3 updates
  • Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits
  • 96a9aba Fix lint
  • 51c6302 Better implementation of pointer recursion checking
  • c667114 funcr: Handle and test recursive values
  • f7ffadb Add benchmark for pointer args
  • e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
  • 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
  • 0b40896 build(deps): bump github/codeql-action/upload-sarif
  • 77f671b Bump to Go 1.26
  • cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
  • 3832a11 build(deps): bump github/codeql-action/upload-sarif
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.42.1 to 1.43.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.43.0

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Commits

Updates golang.org/x/net from 0.56.0 to 0.57.0

Commits
  • b8f09f6 go.mod: update golang.org/x dependencies
  • f05f21b idna: reject all-ASCII xn-- labels on all Go versions
  • 0f748cf internal/http3: clean up stream I/O methods usages in tests
  • 0bb961e internal/http3: add net/http.ResponseController support
  • 0ca694d webdav: document Dir's lack of defense against filesystem modification
  • bd5f1dc http2: initialize Transport on NewClientConn
  • 488ff63 bpf: add security considerations to package docs
  • 93d1f25 xsrftoken: avoid token collisions
  • 5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-deps group across 1 directory with 8 updates
81431fa 
Bumps the go-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) | `1.31.0` | `1.33.0` |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.6.1` | `0.7.0` |
| [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils) | `1.2.2` | `1.2.3` |
| [github.com/fluxcd/pkg/auth](https://github.com/fluxcd/pkg) | `0.55.0` | `0.56.0` |
| [github.com/getsops/sops/v3](https://github.com/getsops/sops) | `3.13.2` | `3.13.3` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.3` | `1.4.4` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.42.1` | `1.43.0` |



Updates `cloud.google.com/go/kms` from 1.31.0 to 1.33.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.31.0...kms/v1.33.0)

Updates `github.com/cyphar/filepath-securejoin` from 0.6.1 to 0.7.0
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.6.1...v0.7.0)

Updates `github.com/fluxcd/cli-utils` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/fluxcd/cli-utils/releases)
- [Commits](fluxcd/cli-utils@v1.2.2...v1.2.3)

Updates `github.com/fluxcd/pkg/auth` from 0.55.0 to 0.56.0
- [Commits](fluxcd/pkg@oci/v0.55.0...oci/v0.56.0)

Updates `github.com/getsops/sops/v3` from 3.13.2 to 3.13.3
- [Release notes](https://github.com/getsops/sops/releases)
- [Changelog](https://github.com/getsops/sops/blob/main/CHANGELOG.md)
- [Commits](getsops/sops@v3.13.2...v3.13.3)

Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.3...v1.4.4)

Updates `github.com/onsi/gomega` from 1.42.1 to 1.43.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.42.1...v1.43.0)

Updates `golang.org/x/net` from 0.56.0 to 0.57.0
- [Commits](golang/net@v0.56.0...v0.57.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/kms
  dependency-version: 1.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/cli-utils
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/auth
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/getsops/sops/v3
  dependency-version: 3.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/net
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency label Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants