Skip to content

🌱 Bump the gomod group across 2 directories with 18 updates#5006

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomod-a674d80248
Closed

🌱 Bump the gomod group across 2 directories with 18 updates#5006
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomod-a674d80248

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 6, 2026 •
edited
Loading

Bumps the gomod group with 12 updates in the / directory:

Package From To
cloud.google.com/go/bigquery 1.73.1 1.75.0
cloud.google.com/go/pubsub 1.50.1 1.50.2
github.com/bradleyfalzon/ghinstallation/v2 2.17.0 2.18.0
github.com/go-git/go-git/v5 5.16.5 5.17.2
github.com/google/go-containerregistry 0.21.0 0.21.3
github.com/moby/buildkit 0.26.3 0.29.0
go.yaml.in/yaml/v2 2.4.3 2.4.4
gocloud.dev 0.44.0 0.45.0
mvdan.cc/sh/v3 3.12.0 3.13.0
github.com/in-toto/attestation 1.1.2 1.2.0
github.com/onsi/ginkgo/v2 2.28.0 2.28.1
gitlab.com/gitlab-org/api/client-go 1.41.0 1.46.0

Bumps the gomod group with 2 updates in the /tools directory: github.com/golangci/golangci-lint/v2 and github.com/goreleaser/goreleaser/v2.

Updates cloud.google.com/go/bigquery from 1.73.1 to 1.75.0

Commits
  • 9cde8ab chore(main): release spanner 1.75.0 (#11551)
  • d7671ec feat(spanner): make randIDForProcess hexadecimal in x-goog-spanner-request-id...
  • a8f16ef fix(spanner): inject "x-goog-spanner-request-id" into outgoing client context...
  • 59fe58a docs(monitoring/apiv3): remove extra fenced code block markers (#11535)
  • bfb6c05 chore(main): release pubsub 1.47.0 (#11547)
  • 46d6ed4 feat(pubsub): support new forms of topic ingestion (#11537)
  • 0dd7d3d feat(storage): wrap NotFound errors for buckets and objects (#11519)
  • 8fc5a87 chore: bump cloud.google.com/go dep (#11541)
  • 1a214c9 chore: release main (#11467)
  • 24b3a20 chore(main): release 0.118.1 (#11539)
  • Additional commits viewable in compare view

Updates cloud.google.com/go/pubsub from 1.50.1 to 1.50.2

Commits
  • e2bbf19 chore: librarian release pull request: 20260331T202405Z (#14314)
  • 4e6350f chore: librarian release pull request: 20260331T201226Z (#14312)
  • 7c26e42 chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /interna...
  • e5b2057 chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /internal/g...
  • 97d824d feat(firestore): add WithAlwaysUseImplicitOrderBy option (#14260)
  • eb1fe4c chore: librarian release pull request: 20260331T193117Z (#14310)
  • 8a34364 feat(bigtable): check alts if we return permission denied for pingandwarm (#...
  • 98a546d chore: update version.go template (#14307)
  • efb8c17 chore: add biglake and hive (#14306)
  • 4c0232a fix(pubsub): check for nil concurrency control span (#14303)
  • Additional commits viewable in compare view

Updates github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0

Release notes

Sourced from github.com/bradleyfalzon/ghinstallation/v2's releases.

v2.18.0

What's Changed

Full Changelog: bradleyfalzon/ghinstallation@v2.17.0...v2.18.0

Commits
  • 1237274 Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0
  • c9c5e67 Bump actions/checkout from 5.0.0 to 6.0.2
  • f5640e5 Update google/go-github to v84
  • 6e26acb drop deprecated go versions
  • 0e0f2d4 fix lints
  • bc61e9f apply best practices to ci
  • ee71ad0 bump golangci-lint to v2.10
  • 4ec07cc add go 1.25 and 1.26 to tests
  • 8f035f2 bump github.com/google/go-github to v83
  • a2705da Bump actions/checkout from 4.2.2 to 5.0.0
  • See full diff in compare view

Updates github.com/go-git/go-git/v5 from 5.16.5 to 5.17.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.17.2

What's Changed

⚠️ This release fixes a bug (go-git/go-git#1942) that blocked some users from upgrading to v5.17.1. Thanks @​pskrbasu for reporting it. 🙇

Full Changelog: go-git/go-git@v5.17.1...v5.17.2

v5.17.1

What's Changed

Full Changelog: go-git/go-git@v5.17.0...v5.17.1

v5.17.0

What's Changed

Full Changelog: go-git/go-git@v5.16.5...v5.17.0

Commits
  • 45ae193 Merge pull request #1944 from go-git/fix-perms
  • fda4f74 storage: filesystem/dotgit, Skip writing pack files that already exist on disk
  • 2212dc7 Merge pull request #1941 from go-git/renovate/releases/v5.x-go-github.com-go-...
  • ebb2d7d build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY]
  • 5e23dfd Merge pull request #1937 from pjbgf/idx-v5
  • 6b38a32 Merge pull request #1935 from pjbgf/index-v5
  • cd757fc plumbing: format/idxfile, Fix version and fanout checks
  • 3ec0d70 plumbing: format/index, Fix tree extension invalidated entry parsing
  • dbe10b6 plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git
  • e9b65df plumbing: format/index, Improve v4 entry name validation
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.0 to 0.21.3

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.3

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.2...v0.21.3

v0.21.2

What's Changed

Full Changelog: google/go-containerregistry@v0.21.1...v0.21.2

v0.21.1

This release fixes a regression in crane introduced in the previous release.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.0...v0.21.1

Commits
  • 3888fb8 bump golang to 1.25.7 (#2236)
  • f439624 tarball: detect symlink cycles in extractFileFromTar (#2232)
  • 400c263 mutate: reject path traversal and symlink escape in Extract (#2227)
  • 47eedc9 Bump goreleaser/goreleaser-action in the actions group (#2220)
  • be0a845 Bump the go-deps group across 4 directories with 7 updates (#2233)
  • e916301 migrate to github.com/moby/moby modules (#2228)
  • 8b2478e Adds local file support to the crane index subcommand (#2223)
  • 9e0ccb0 Better handle redirects to https in ping (#2225)
  • 85f2bf5 crane: fix case in auth response json (#2218)
  • e971d63 Add WithFileBufferedOpener for file-backed daemon image buffering (#2214)
  • See full diff in compare view

Updates github.com/moby/buildkit from 0.26.3 to 0.29.0

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.29.0

Welcome to the v0.29.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi
  • CrazyMax
  • David Karlsson
  • Akihiro Suda
  • Sebastiaan van Stijn
  • Brian Ristuccia
  • Jonathan A. Sternberg
  • Mateusz Gozdek
  • Natnael Gebremariam

Notable Changes

  • Builtin Dockerfile frontend has been updated to v1.23.0 changelog
  • Git sources can now initialize all files from a Git checkout with commit time in the LLB API for better reproducibility. See Dockerfile changelog for how to enable this in the Dockerfile frontend #6600
  • Various file access operations in Git and HTTP sources have been hardened for improved security #6613
  • Frontends can now report updated SOURCE_DATE_EPOCH with result metadata that can be used by exporters #6601
  • Fix possible panic when listing build history after recent deletions #6614
  • Fix possible issue where builds from Git repositories could start to fail after submodule rename #6563
  • Fix possible process lifecycle event ordering issue in interactive container API that could cause deadlocks in the client #6531
  • Fix regression where build progress skipped the message about layers being pushed to the registry #6587
  • Fix possible cgroup initialization failure in BuildKit container image entrypoint on some environments #6585
  • Fix issue with resolving symlinks via file access methods of the Gateway API #6559
  • Fix possible "parent snapshot does not exist" error when exporting images in parallel #6558
  • Fix possible panic from zstd compression #6599
  • Fix issue where cache imports from an uninitialized local cache tag could fail the build #6554
  • Included CNI plugins have been updated to v1.9.1 #6583
  • Included QEMU emulator support has been updated to v10.2.1 #6580
  • Runc container runtime has been updated to v1.3.5 #6625

Dependency Changes

  • github.com/aws/aws-sdk-go-v2 v1.41.1 -> v1.41.4
  • github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4 -> v1.7.5
  • github.com/aws/aws-sdk-go-v2/config v1.32.7 -> v1.32.12
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.7 -> v1.19.12
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.17 -> v1.18.20
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.17 -> v1.4.20
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.17 -> v2.7.20
  • github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 -> v1.8.6
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 -> v1.13.7

... (truncated)

Commits
  • 8543ce4 Merge pull request #6634 from moby/dependabot/github_actions/crazy-max-dot-gi...
  • 1154c7e Merge pull request #6635 from moby/dependabot/github_actions/codecov/codecov-...
  • 326e4d1 Merge pull request #6637 from moby/dependabot/github_actions/github/codeql-ac...
  • 676cdfa Merge pull request #6636 from moby/dependabot/github_actions/actions/setup-go...
  • 1dd2e50 build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
  • 21fb771 build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
  • 06b36e5 build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0
  • 969f5e4 build(deps): bump the crazy-max-dot-github group with 2 updates
  • f8fd302 Merge pull request #6623 from crazy-max/zizmor
  • a103fb6 Merge pull request #6625 from thaJeztah/bump_runc_1.3
  • Additional commits viewable in compare view

Updates go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4

Commits
  • 43b627a Replace gopkg.in/check.v1 with the standard testing library
  • See full diff in compare view

Updates gocloud.dev from 0.44.0 to 0.45.0

Release notes

Sourced from gocloud.dev's releases.

v0.45.0

What's Changed

New Contributors

Full Changelog: google/go-cloud@v0.44.0...v0.45.0

Commits
  • 7cc909b all: prerelease (#3664)
  • 31e3651 blob/s3blob: map S3 403 errors to PermissionDenied code (#3663)
  • c8f1226 all: update NATS dependency (#3662)
  • ac4bb89 all: Upgrade GitHub Actions for Node 24 compatibility (#3660)
  • 1497536 secrets/gcpkms: Add support for Additional Authenticated Data (AAD) (#3659)
  • 113974a all: Upgrade go.opentelemetry.io/otel/sdk to v1.40.0 (#3657)
  • 0b41d48 build(deps): bump the go_modules group across 2 directories with 1 update (#3...
  • 4c421d0 all: Update to go 1.26 (#3653)
  • b84d07f all: run go 1.26's go fix (#3654)
  • ae3c665 blob/gcsblob: derive universe domain from credentials (#3652)
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.34.0 to 0.35.0

Commits
  • 7ca2c6d go.mod: update golang.org/x dependencies
  • 73d1ba9 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates mvdan.cc/sh/v3 from 3.12.0 to 3.13.0

Release notes

Sourced from mvdan.cc/sh/v3's releases.

v3.13.0

This release introduces support for Zsh in the parser and formatter, which was tracked in issue #120 alongside the label https://github.com/mvdan/sh/labels/zsh. While support is not complete, it should be far enough for many use cases.

This release also drops support for Go 1.24 and includes many other enhancements:

  • cmd/shfmt
    • Exit with a non-zero status when -l prints any filenames
    • shfmt -version is now derived from the git current tag, dropping the -ldflags workaround
  • syntax
    • New nodes types and node fields are introduced alongside LangZsh
    • LangVariant is now a bitset, allowing the use of sets like "Bash-like"
    • Add InteractiveSeq and StmtsSeq iterator methods for Parser
    • Stop exposing the internal buffer in Printer via struct embedding
    • Support the use of brace expansions like declare {a,b}_c=value
    • Fix a bug where POSIX and Bash incorrectly allowed empty command lists
  • interp
    • Add support for shopt -s dotglob and shopt -s extglob
    • Add support for simple uses of !(expr) extended glob patterns
    • Support more builtin flags for declare, type, read
    • Fix various bugs relating to nulls, errors, and arrays
  • expand
    • Add Config.DotGlob and Config.ExtGlob for the interpreter
    • Add Variable.Flags to get the one-character declare flags
    • Do not force env vars on Windows to be uppercase
    • Fix various bugs relating to glob pattern matching
  • pattern
    • Add GlobLeadingDot and ExtendedOperators for the interpreter
    • Add NegExtGlobError to mark the use of !(expr) negation patterns

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.26.1 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

Note that this release no longer includes a sha256sums.txt asset; GitHub now provide digests natively.

Changelog

Sourced from mvdan.cc/sh/v3's changelog.

Changelog

Commits
  • 5c4d285 cmd/shfmt: bump Go and Alpine in the Dockerfile
  • 1ae455b update golang.org/x/sys
  • cb484d3 syntax: apply gopls warning suggestion
  • 64d9126 syntax: gofmt -w
  • 55d279f syntax: simplify zsh logic on left parentheses
  • 1cf3c19 syntax: support alternations in zsh test expressions
  • 0f0636e syntax: support parsing extended globs in zsh
  • a173247 syntax: parse and format zsh >! redirects as >|
  • d6bf6c9 syntax: rename ParamExp.Plus to IsSet
  • b612daa cmd/shfmt: simplify flag value code
  • Additional commits viewable in compare view

Updates github.com/in-toto/attestation from 1.1.2 to 1.2.0

Release notes

Sourced from github.com/in-toto/attestation's releases.

v1.2.0

Core Attestation Framework Spec Changes

New / Updated Predicates

Language Bindings Changes

Other Changes

New Contributors

Full Changelog: in-toto/attestation@v1.1.2...v1.2.0

Commits
  • df02077 Add SVR to the list of predicates and fix some issues in the list (#537)
  • cd3e5c7 Merge pull request #536 from marcelamelara/msm-update-maintainers
  • b31d198 Apply suggestions from code review
  • 4527976 Add Aditya as maintainer, move Mikhail and Tom to emeritus
  • 7bfb269 Ensure the Envelope spec meets ITE-5 (#431)
  • ad76f68 Clarify that non-cryptographic digests may use custom value encoding (#517)
  • 071e175 Bump actions/setup-node from 6.2.0 to 6.3.0 (#535)
  • cad7a33 Bump markdownlint-cli from 0.47.0 to 0.48.0 (#533)
  • 913a235 Bump actions/setup-go from 6.2.0 to 6.3.0 (#531)
  • 36c27c1 Merge pull request #530 from in-toto/dependabot/npm_and_yarn/markdown-it-14.1.1
  • Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.28.1

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

Commits

Updates gitlab.com/gitlab-org/api/client-go from 1.41.0 to 1.46.0

Release notes

Sourced from gitlab.com/gitlab-org/api/client-go's releases.

v1.46.0

1.46.0

🚀 Features

1.46.0 (2026-03-01)

v1.45.0

1.45.0

🚀 Features

🔄 Other Changes

1.45.0 (2026-02-27)

Bug Fixes

  • test: Use epic IID instead of ID in DeleteEpic cleanup. (49dea05)
Changelog

Sourced from gitlab.com/gitlab-org/api/client-go's changelog.

1.46.0

🚀 Features

1.46.0 (2026-03-01)

1.45.0

🚀 Features

🔄 Other Changes

1.45.0 (2026-02-27)

Bug Fixes

  • test: Use epic IID instead of ID in DeleteEpic cleanup. (49dea05)

1.44.0

🚀 Features

  • Implement runner controller instance-level runner scope support (!2765) by Timo Furrer

🔄 Other Changes

1.44.0 (2026-02-26)

1.43.0

🚀 Features

... (truncated)

Commits
  • da7b8a7 chore(release): 1.46.0 [skip ci]
  • 072590b Merge branch 'Update_Urls_and_add-missing' into 'main'
  • 8b63461 Update urls and add missing
  • 0abd5ce chore(release): 1.45.0 [skip ci]
  • 6f5a6da Merge branch 'issue_#2237' into 'main'
  • 06094f9 Add LockMembershipsToSAML support to Application Settings
  • 37ff76b Merge branch 'fforster/epic-cleanup' into 'main'
  • 49dea05 fix(test): Use epic IID instead of ID in DeleteEpic cleanup.
  • 1e294d4 chore(release): 1.44.0 [skip ci]
  • 69b78fe Merge branch 'rc-runner-scopes' into 'main'
  • Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.59.0 to 1.61.3

Commits
  • 35cd86a chore: librarian release pull request: 20260313T045834Z (#14170)
  • 428b228 docs(storage): Fix godoc formatting (#14169)
  • e56381c feat(vertexai): Support AgentEngine for Agent Development Kit (#14168)
  • d38abf9 feat(auth): add OpenTelemetry gRPC and HTTP wrappers for T4 tracing (#14133)
  • 9f56e9f chore: librarian release pull request: 20260312T071057Z (#14164)
  • 2dc8c9f chore: librarian release pull request: 20260312T041544Z (#14162)
  • aeffa93 feat(pubsub/v2): add keep alive support (#13457)
  • bb64998 feat(bigtable): add load balancing penalty for channel (#14149)
  • 704a21f Revert "Revert "chore: librarian release pull request: 20260311T074420Z"" (#1...
  • b1b0586 Revert "chore: librarian release pull request: 20260311T074420Z" (#14157)
  • Additional commits viewable in compare view

Updates github.com/go-git/go-billy/v5 from 5.7.0 to 5.8.0

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.8.0

What's Changed

Full Changelog: go-git/go-billy@v5.7.0...v5.8.0

Commits
  • 8662784 Merge pull request #187 from pjbgf/windows-rename
  • f387d62 build: Update test workflow to rely on oldstable/stable
  • 915dae9 polyfill: Add support for Chmod
  • f3d5600 osfs: Create dir for BoundOS Tempfiles
  • 247a741 Merge pull request #183 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...
  • 1c0c9d5 build: Update module golang.org/x/net to v0.45.0 [SECURITY]
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits
  • 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.28.1

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent wit...

Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 6, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 6, 2026 08:31
@dependabot dependabot Bot requested review from AdamKorcz and spencerschrock and removed request for a team April 6, 2026 08:31
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 6, 2026
@dependabot dependabot Bot had a problem deploying to integration-test April 6, 2026 08:31 Failure
@dosubot dosubot Bot added the size:L This PR changes 100-499 lines, ignoring generated files. label Apr 6, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/gomod-a674d80248 branch from 00fd2dd to 58047d5 Compare April 13, 2026 08:45
@dependabot dependabot Bot had a problem deploying to integration-test April 13, 2026 08:45 Failure
@dependabot
🌱 Bump the gomod group across 2 directories with 18 updates
4626578 
Bumps the gomod group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) | `1.73.1` | `1.75.0` |
| [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) | `1.50.1` | `1.50.2` |
| [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) | `2.17.0` | `2.18.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.5` | `5.17.2` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.0` | `0.21.3` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.26.3` | `0.29.0` |
| [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.3` | `2.4.4` |
| [gocloud.dev](https://github.com/google/go-cloud) | `0.44.0` | `0.45.0` |
| [mvdan.cc/sh/v3](https://github.com/mvdan/sh) | `3.12.0` | `3.13.0` |
| [github.com/in-toto/attestation](https://github.com/in-toto/attestation) | `1.1.2` | `1.2.0` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.0` | `2.28.1` |
| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `1.41.0` | `1.46.0` |

Bumps the gomod group with 2 updates in the /tools directory: [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint) and [github.com/goreleaser/goreleaser/v2](https://github.com/goreleaser/goreleaser).


Updates `cloud.google.com/go/bigquery` from 1.73.1 to 1.75.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@bigquery/v1.73.1...spanner/v1.75.0)

Updates `cloud.google.com/go/pubsub` from 1.50.1 to 1.50.2
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v1.50.1...pubsub/v1.50.2)

Updates `github.com/bradleyfalzon/ghinstallation/v2` from 2.17.0 to 2.18.0
- [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases)
- [Commits](bradleyfalzon/ghinstallation@v2.17.0...v2.18.0)

Updates `github.com/go-git/go-git/v5` from 5.16.5 to 5.17.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.16.5...v5.17.2)

Updates `github.com/google/go-containerregistry` from 0.21.0 to 0.21.3
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.0...v0.21.3)

Updates `github.com/moby/buildkit` from 0.26.3 to 0.29.0
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.26.3...v0.29.0)

Updates `go.yaml.in/yaml/v2` from 2.4.3 to 2.4.4
- [Commits](yaml/go-yaml@v2.4.3...v2.4.4)

Updates `gocloud.dev` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.44.0...v0.45.0)

Updates `golang.org/x/text` from 0.34.0 to 0.35.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.34.0...v0.35.0)

Updates `mvdan.cc/sh/v3` from 3.12.0 to 3.13.0
- [Release notes](https://github.com/mvdan/sh/releases)
- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)
- [Commits](mvdan/sh@v3.12.0...v3.13.0)

Updates `github.com/in-toto/attestation` from 1.1.2 to 1.2.0
- [Release notes](https://github.com/in-toto/attestation/releases)
- [Commits](in-toto/attestation@v1.1.2...v1.2.0)

Updates `github.com/onsi/ginkgo/v2` from 2.28.0 to 2.28.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.28.1)

Updates `gitlab.com/gitlab-org/api/client-go` from 1.41.0 to 1.46.0
- [Release notes](https://gitlab.com/gitlab-org/api/client-go/tags)
- [Changelog](https://gitlab.com/gitlab-org/api/client-go/blob/main/CHANGELOG.md)
- [Commits](https://gitlab.com/gitlab-org/api/client-go/compare/v1.41.0...v1.46.0)

Updates `cloud.google.com/go/storage` from 1.59.0 to 1.61.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.59.0...storage/v1.61.3)

Updates `github.com/go-git/go-billy/v5` from 5.7.0 to 5.8.0
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.7.0...v5.8.0)

Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0
- [Commits](golang/oauth2@v0.35.0...v0.36.0)

Updates `github.com/onsi/ginkgo/v2` from 2.28.0 to 2.28.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.28.1)

Updates `github.com/golangci/golangci-lint/v2` from 2.10.1 to 2.11.4
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md)
- [Commits](golangci/golangci-lint@v2.10.1...v2.11.4)

Updates `github.com/goreleaser/goreleaser/v2` from 2.12.2 to 2.15.2
- [Release notes](https://github.com/goreleaser/goreleaser/releases)
- [Commits](goreleaser/goreleaser@v2.12.2...v2.15.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-version: 1.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: cloud.google.com/go/pubsub
  dependency-version: 1.50.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/bradleyfalzon/ghinstallation/v2
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: gocloud.dev
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/text
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: mvdan.cc/sh/v3
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/in-toto/attestation
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: gitlab.com/gitlab-org/api/client-go
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.61.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/golangci/golangci-lint/v2
  dependency-version: 2.11.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/goreleaser/goreleaser/v2
  dependency-version: 2.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/gomod-a674d80248 branch from 58047d5 to 4626578 Compare April 20, 2026 09:05
@dependabot dependabot Bot had a problem deploying to integration-test April 20, 2026 09:05 Failure
@spencerschrock
Copy link
Copy Markdown
Member

spencerschrock commented Apr 23, 2026

@dependabot recreate

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 23, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 23, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/gomod-a674d80248 branch April 23, 2026 18:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@spencerschrock spencerschrock Awaiting requested review from spencerschrock spencerschrock is a code owner automatically assigned from ossf/scorecard-maintainers

@AdamKorcz AdamKorcz Awaiting requested review from AdamKorcz AdamKorcz is a code owner automatically assigned from ossf/scorecard-maintainers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size:L This PR changes 100-499 lines, ignoring generated files.

Projects

OpenSSF Scorecard
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@spencerschrock