build(deps): bump the all-dependencies group with 12 updates by dependabot[bot] · Pull Request #298 · bnema/gordon

dependabot · 2026-10-01T05:43:37Z

Bumps the all-dependencies group with 12 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.45.1`	`1.47.1`
github.com/aws/aws-sdk-go-v2/config	`1.33.1`	`1.33.6`
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	`0.4.1`	`0.4.10`
github.com/aws/aws-sdk-go-v2/service/s3	`1.109.1`	`1.113.4`
github.com/google/go-containerregistry	`0.22.0`	`0.22.1`
github.com/mattn/go-runewidth	`0.0.28`	`0.0.30`
github.com/moby/moby/api	`1.55.0`	`1.56.0`
github.com/moby/moby/client	`0.5.1`	`0.6.0`
golang.org/x/mod	`0.40.0`	`0.41.0`
golang.org/x/sync	`0.22.0`	`0.23.0`
golang.org/x/sys	`0.47.0`	`0.48.0`
golang.org/x/time	`0.15.0`	`0.16.0`

Updates github.com/aws/aws-sdk-go-v2 from 1.45.1 to 1.47.1

Commits

52ba256 Release 2026-09-24
21223cd Regenerated Clients
84d89bd Update endpoints model
d9c59ff Update API model
8fd86b1 feat: Add aws-chunked response decoding reader (#3563)
ff3ac6f Release 2026-09-23
e57d2ff Regenerated Clients
ef6fdb9 Update endpoints model
385ab15 Update API model
fafcb4f Checksum non-200 HTTP responses (#3564)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.1 to 1.33.6

Commits

52ba256 Release 2026-09-24
21223cd Regenerated Clients
84d89bd Update endpoints model
d9c59ff Update API model
8fd86b1 feat: Add aws-chunked response decoding reader (#3563)
ff3ac6f Release 2026-09-23
e57d2ff Regenerated Clients
ef6fdb9 Update endpoints model
385ab15 Update API model
fafcb4f Checksum non-200 HTTP responses (#3564)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.4.1 to 0.4.10

Commits

52ba256 Release 2026-09-24
21223cd Regenerated Clients
84d89bd Update endpoints model
d9c59ff Update API model
8fd86b1 feat: Add aws-chunked response decoding reader (#3563)
ff3ac6f Release 2026-09-23
e57d2ff Regenerated Clients
ef6fdb9 Update endpoints model
385ab15 Update API model
fafcb4f Checksum non-200 HTTP responses (#3564)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.109.1 to 1.113.4

Commits

52ba256 Release 2026-09-24
21223cd Regenerated Clients
84d89bd Update endpoints model
d9c59ff Update API model
8fd86b1 feat: Add aws-chunked response decoding reader (#3563)
ff3ac6f Release 2026-09-23
e57d2ff Regenerated Clients
ef6fdb9 Update endpoints model
385ab15 Update API model
fafcb4f Checksum non-200 HTTP responses (#3564)
Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.22.0 to 0.22.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.22.1

What's Changed

Reject non-canonical IP literals in all SSRF guards by @shaggyinsomniac in google/go-containerregistry#2426

daemon: fix stale docker/docker reference in WithClient docs by @BobDu in google/go-containerregistry#2428

build(deps): bump the go-deps group across 2 directories with 4 updates by @dependabot[bot] in google/go-containerregistry#2422

authn: do not overwrite AuthConfig.Auth when username and password are empty by @nileshpatil6 in google/go-containerregistry#2420

build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in google/go-containerregistry#2423

Support pulling images by sha512 digest by @BobDu in google/go-containerregistry#2427

Allow empty label and annotation values in crane mutate by @theadsingh in google/go-containerregistry#2418

fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml by @tprussak in google/go-containerregistry#2434

validate: support index attestation manifests and empty configs by @Subserial in google/go-containerregistry#2414

name: improve error when parsing a reference with a URL scheme by @locker95 in google/go-containerregistry#2431

fix(build): install binaries to /ko-app and add to PATH (#2424) by @tprussak in google/go-containerregistry#2436

fix(release): honor declared Go toolchain by @rksharma-owg in google/go-containerregistry#2435

remote: apply checkRedirectSSRF to writer-side HTTP clients by @locker95 in google/go-containerregistry#2432

flatten: preserve config and layer media types when flattening by @Subserial in google/go-containerregistry#2438

fix(mutate): make Time layer updates lazy by @amarkdotdev in google/go-containerregistry#2429

build(deps): bump the go-deps group across 2 directories with 3 updates by @dependabot[bot] in google/go-containerregistry#2439

remote: copy manifest annotations to referrers fallback tag descriptors by @codysoyland in google/go-containerregistry#2441

New Contributors

@shaggyinsomniac made their first contribution in google/go-containerregistry#2426

@BobDu made their first contribution in google/go-containerregistry#2428

@nileshpatil6 made their first contribution in google/go-containerregistry#2420

@theadsingh made their first contribution in google/go-containerregistry#2418

@locker95 made their first contribution in google/go-containerregistry#2431

@rksharma-owg made their first contribution in google/go-containerregistry#2435

@codysoyland made their first contribution in google/go-containerregistry#2441

Full Changelog: google/go-containerregistry@v0.22.0...v0.22.1

Commits

8a72a42 remote: copy manifest annotations to referrers fallback tag descriptors (#2441)
5765c35 build(deps): bump the go-deps group across 2 directories with 3 updates (#2439)
969402f fix(mutate): make Time layer updates lazy (#2429)
25c682e flatten: preserve config and layer media types when flattening (#2438)
79af990 remote: add SSRF redirect protection to writer-side HTTP clients (#2432)
4b9b3c7 fix(release): honor declared Go toolchain (#2435)
e033b9c fix(build): install binaries to /ko-app and add to PATH (#2424) (#2436)
8bd7902 name: return a helpful error when a reference contains a URL scheme (#2431)
163134d validate: support index attestation manifests and empty configs (#2414)
44f7ea3 fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml (#2434)
Additional commits viewable in compare view

Updates github.com/mattn/go-runewidth from 0.0.28 to 0.0.30

Commits

14205cc Merge pull request #110 from mattn/truncate-rune-fast-path
67f0b8d Take the rune fast path in the Truncate functions too
a42811d Merge pull request #111 from mattn/wrap-invalid-utf8
1156ade Keep strings that are not valid UTF-8 on the segmenter
06120a9 Merge pull request #109 from mattn/skip-segmentation-without-joiners
21388ad Skip grapheme segmentation for text that cannot form clusters
6c7068f Generate a table of runes that can join a grapheme cluster
2793dc5 Merge pull request #108 from youdie006/fix-wrap-grapheme-cluster
fd7c07f Add Wrap benchmarks for the ASCII, CJK and emoji paths
f5f115c Inline the ASCII width rule in the Wrap fast path
Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.55.0 to 1.56.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.0

1.56.0

Changelog

GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538

POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463

api/docs: sync API docs v1.25 - v1.55. moby/moby#53246

api/swagger: Align Healthcheck name with Go struct. moby/moby#53567

api/types/plugin: Deprecated plugin.Privileges sorting methods in favor of slices.SortFunc. moby/moby#53511

api/types/plugin: fix Privileges Swap implementation. moby/moby#53510

api: Bump to 1.56. moby/moby#53425

api: document Task.NetworksAttachments in the swagger definition. moby/moby#53082

api: remove gotest.tools from tests. moby/moby#53535

api: swagger: Use int64 for build query params. moby/moby#53520

api: use blackbox testing. moby/moby#53525

Fix API reference documenting an unsupported names filter for GET /configs. moby/moby#53447

Commits

9b2179d Merge pull request #53572 from vvoland/api-docs-cut
575cf82 Merge pull request #53571 from thaJeztah/bump_tools
20beedb api/docs: Cut v1.56
bb86302 Merge pull request #53569 from vvoland/afvsock-lsm
65be55a Merge pull request #53513 from thaJeztah/daemon_fix_list
0af79c4 Merge pull request #53570 from vvoland/process-release
7d1ce6a Merge pull request #53568 from renovate-bot/renovate/github.com-mdlayher-sock...
0df1a00 Dockerfile: update cli v29.7.2, compose v5.5.1, buildx v0.37.0
e1d06bd Drop replace rules
b40d37e Merge pull request #53359 from vvoland/ext-namegenerator
Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.5.1 to 0.6.0

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.0

0.6.0

Changelog

pkg/jsonmessage: add new WithMessagePrinter option to use a custom printer for messages. moby/moby#53489

api: Bump to 1.56. moby/moby#53425

minor cleanups, refactors. moby/moby#53509

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.0 (2013-08-22)

Runtime: Load authConfig only when needed and fix useless WARNING

Runtime: Add lxc-conf flag to allow custom lxc options

Runtime: Fix race conditions in parallel pull

Runtime: Improve CMD, ENTRYPOINT, and attach docs.

Documentation: Small fix to docs regarding adding docker groups

Documentation: Add MongoDB image example

Builder: Add USER instruction do Dockerfile

Documentation: updated default -H docs

Remote API: Sort Images by most recent creation date.

Builder: Add workdir support for the Buildfile

Runtime: Add an option to set the working directory

Runtime: Show tag used when image is missing

Documentation: Update readme with dependencies for building

Documentation: Add instructions for creating and using the docker group

Remote API: Reworking opaque requests in registry module

Runtime: Fix Graph ByParent() to generate list of child images per parent image.

Runtime: Add Image name to LogEvent tests

Documentation: Add sudo to examples and installation to documentation

Hack: Bash Completion: Limit commands to containers of a relevant state

Remote API: Add image name in /events

Runtime: Apply volumes-from before creating volumes

Runtime: Make docker run handle SIGINT/SIGTERM

Runtime: Prevent crash when .dockercfg not readable

Hack: Add docker dependencies coverage testing into docker-ci

Runtime: Add -privileged flag and relevant tests, docs, and examples

Packaging: Docker-brew 0.5.2 support and memory footprint reduction

Runtime: Install script should be fetched over https, not http.

Packaging: Add new docker dependencies into docker-ci

Runtime: Use Go 1.1.2 for dockerbuilder

Registry: Improve auth push

Runtime: API, issue 1471: Use groups for socket permissions

Documentation: PostgreSQL service example in documentation

Contrib: bash completion script

Tests: Improve TestKillDifferentUser to prevent timeout on buildbot

Documentation: Fix typo in docs for docker run -dns

Documentation: Adding a reference to ps -a

Runtime: Correctly detect IPv4 forwarding

Packaging: Revert "docker.upstart: avoid spawning a sh process"

Runtime: Use ranged for loop on channels

Runtime: Fix typo: fmt.Sprint -> fmt.Sprintf

Tests: Fix typo in TestBindMounts (runContainer called without image)

Runtime: add websocket support to /container//attach/ws

Runtime: Mount /dev/shm as a tmpfs

Builder: Only count known instructions as build steps

Builder: Fix docker build and docker events output

Runtime: switch from http to https for get.docker.io

Tests: Improve TestGetContainersTop so it does not rely on sleep

Packaging: Docker-brew and Docker standard library

Testing: Add some tests in server and utils

... (truncated)

Commits

f4a4f1c Bump to 0.6.0
f925edd Merge pull request #1525 from griff/1503-fix
12715c8 Merge pull request #1609 from jpetazzo/release-docker-with-docker
326dadd Merge pull request #1565 from dotcloud/only_load_authconfig_when_needed
a3510c9 Merge pull request #1560 from dotcloud/439-allow-lxc-args
262d57e Merge pull request #1623 from mhennings/1592-fix-race-conditions-in-parallel-...
551092f Add lxc-conf flag to allow custom lxc options
3f802f4 Fix race conditions in parallel pull
0b9c8e2 Merge pull request #1596 from metalivedev/1149-easyfixes
42fe550 Merge pull request #1614 from denibertovic/docs
Additional commits viewable in compare view

Updates golang.org/x/mod from 0.40.0 to 0.41.0

Commits

d0a27b2 modfile: fix Cleanup and DropTool documentation
d12008c all: upgrade go directive to at least 1.26.0 [generated]
See full diff in compare view

Updates golang.org/x/sync from 0.22.0 to 0.23.0

Commits

f75267d semaphore: panic on negative capacity
3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
See full diff in compare view

Updates golang.org/x/sys from 0.47.0 to 0.48.0

Commits

613e257 cpu: add riscv64 hwprobe drift test
6f7b10f unix: add MLOCK_ONFAULT constant
663e7c8 cpu: add basic support for GOARCH=sparc64
de5f12f cpu: add ppc64le POWER10 detection
80e8acf unix: run go fix
1e3c182 unix: add IPMI interface
d429e20 unix: stop generating sparc termbits from the generic header
bd3bddf unix: add missing HWTSTAMP_* constants
e812f53 windows: add SO_SNDTIMEO constant for socket options
f6989c5 unix: align Ifreq so its union accessors cannot fault
Additional commits viewable in compare view

Updates golang.org/x/time from 0.15.0 to 0.16.0

Commits

fb013b3 all: upgrade go directive to at least 1.26.0 [generated]
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 12 updates: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.45.1` | `1.47.1` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.1` | `1.33.6` | | [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.4.1` | `0.4.10` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.109.1` | `1.113.4` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.22.0` | `0.22.1` | | [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.28` | `0.0.30` | | [github.com/moby/moby/api](https://github.com/moby/moby) | `1.55.0` | `1.56.0` | | [github.com/moby/moby/client](https://github.com/moby/moby) | `0.5.1` | `0.6.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.40.0` | `0.41.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.15.0` | `0.16.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.45.1 to 1.47.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.45.1...v1.47.1) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.1 to 1.33.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.33.1...config/v1.33.6) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.4.1 to 0.4.10 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/transfermanager/v0.4.1...feature/s3/transfermanager/v0.4.10) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.109.1 to 1.113.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.109.1...service/s3/v1.113.4) Updates `github.com/google/go-containerregistry` from 0.22.0 to 0.22.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.22.0...v0.22.1) Updates `github.com/mattn/go-runewidth` from 0.0.28 to 0.0.30 - [Commits](mattn/go-runewidth@v0.0.28...v0.0.30) Updates `github.com/moby/moby/api` from 1.55.0 to 1.56.0 - [Release notes](https://github.com/moby/moby/releases) - [Commits](moby/moby@api/v1.55.0...api/v1.56.0) Updates `github.com/moby/moby/client` from 0.5.1 to 0.6.0 - [Release notes](https://github.com/moby/moby/releases) - [Changelog](https://github.com/moby/moby/blob/v0.6.0/CHANGELOG.md) - [Commits](moby/moby@v0.5.1...v0.6.0) Updates `golang.org/x/mod` from 0.40.0 to 0.41.0 - [Commits](golang/mod@v0.40.0...v0.41.0) Updates `golang.org/x/sync` from 0.22.0 to 0.23.0 - [Commits](golang/sync@v0.22.0...v0.23.0) Updates `golang.org/x/sys` from 0.47.0 to 0.48.0 - [Commits](golang/sys@v0.47.0...v0.48.0) Updates `golang.org/x/time` from 0.15.0 to 0.16.0 - [Commits](golang/time@v0.15.0...v0.16.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.47.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.33.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager dependency-version: 0.4.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.113.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: github.com/google/go-containerregistry dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: github.com/mattn/go-runewidth dependency-version: 0.0.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: github.com/moby/moby/api dependency-version: 1.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: github.com/moby/moby/client dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: golang.org/x/mod dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: golang.org/x/time dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-01T05:43:44Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: c3d03d60-ebf2-4d5e-93cf-651e74d4c533

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot · 2026-10-01T17:38:13Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 1, 2026

bnema closed this Oct 1, 2026

dependabot Bot deleted the dependabot/go_modules/all-dependencies-624066abb0 branch October 1, 2026 17:38

Navigation Menu

Repository navigation

build(deps): bump the all-dependencies group with 12 updates - #298

build(deps): bump the all-dependencies group with 12 updates#298
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-dependencies-624066abb0

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

coderabbitai Bot commented Oct 1, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

v0.22.1

What's Changed

New Contributors

api/v1.56.0

1.56.0

Changelog

client/v0.6.0

0.6.0

Changelog

0.6.0 (2013-08-22)

Uh oh!

coderabbitai Bot commented Oct 1, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant