Update go modules (main) (patch) #2980

renovate · 2025-10-01T09:20:05Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cuelang.org/go	`v0.11.1` → `v0.11.2`
github.com/CycloneDX/cyclonedx-go	`v0.9.2` → `v0.9.3`
github.com/cucumber/godog	`v0.15.0` → `v0.15.1`
github.com/daixiang0/gci	`v0.13.5` → `v0.13.7`
github.com/evanphx/json-patch	`v5.9.0+incompatible` → `v5.9.11+incompatible`
github.com/evanphx/json-patch/v5	`v5.9.0` → `v5.9.11`
github.com/gkampitakis/go-snaps	`v0.5.7` → `v0.5.19`
github.com/go-git/go-billy/v5	`v5.6.0` → `v5.6.2`
github.com/go-git/go-git/v5	`v5.13.0` → `v5.13.2`
github.com/otiai10/copy	`v1.14.0` → `v1.14.1`
github.com/secure-systems-lab/go-securesystemslib	`v0.9.0` → `v0.9.1`
github.com/sigstore/sigstore	`v1.8.9` → `v1.8.15`
github.com/sirupsen/logrus	`v1.9.3` → `v1.9.4`
github.com/spdx/tools-golang	`v0.5.5` → `v0.5.7`
github.com/spf13/pflag	`v1.0.7` → `v1.0.10`
github.com/tektoncd/chains	`v0.22.2` → `v0.22.3`
github.com/tektoncd/cli	`v0.38.0` → `v0.38.2`
github.com/tektoncd/cli	`v0.37.1` → `v0.37.2`
github.com/testcontainers/testcontainers-go	`v0.34.0` → `v0.34.1`
gotest.tools/gotestsum	`v1.12.1` → `v1.12.3`
helm.sh/helm/v3	`v3.18.5` → `v3.18.6`
k8s.io/api	`v0.34.2` → `v0.34.3`
k8s.io/apiextensions-apiserver	`v0.34.2` → `v0.34.3`
k8s.io/apimachinery	`v0.34.2` → `v0.34.3`
k8s.io/client-go	`v0.34.2` → `v0.34.3`
k8s.io/kubernetes	`v1.34.2` → `v1.34.3`

Release Notes

cue-lang/cue (cuelang.org/go)

`v0.11.2`

Compare Source

This release includes fixes for bugs which were uncovered and resolved in the last few weeks.

Evaluator

CL 1206279 fixes a regression in the old evaluator which could lead to "conflicting value" errors.

`cmd/cue`

CL 1207330 fixes a regression where cue get go stopped copying some CUE files from Go package directories.

CL 1207402 fixes a regression where cue def --inline-imports could result in invalid CUE which failed to evaluate.

Full list of changes since v0.11.1

internal/cueversion: bump LanguageVersion for the next release by @mvdan in 079dc4a
internal/ci: update pinned Go for the next release by @mvdan in b1a57a5
internal/core/dep: fix handling sharing in non-rooted nodes by @mpvl in 8d97e7a
cmd/cue: add test for 3646 by @mpvl in 815cb30
cmd/cue: fix a regression with cue get go dropping CUE files by @mvdan in 5b0e411
cmd/cue: add a test case to reproduce #3644 by @mvdan in 801f976
internal/core/adt: fix let issue for eval v2 by @mpvl in a1fbeaa
internal/core/adt: add tests for 3590 and 3591 by @mpvl in 0ae498f

CycloneDX/cyclonedx-go (github.com/CycloneDX/cyclonedx-go)

`v0.9.3`

Compare Source

Changelog

Fixes

6636ce3: fix: .component.data was not a slice as per CycloneDX schema #242 (@madpah)
3e0f245: fix: add missing properties (@rdghe)

Building and Packaging

24c8c33: build(deps): bump actions/setup-go from 5.2.0 to 5.4.0 (@dependabot[bot])
5fcf097: build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 (@dependabot[bot])
edea8ae: build(deps): bump apache/skywalking-eyes from 0.6.0 to 0.7.0 (@dependabot[bot])
f32eebc: build(deps): bump gitpod/workspace-go from 4702df2 to 8985eb7 (@dependabot[bot])
7fdaa7f: build(deps): bump gitpod/workspace-go from 6932342 to 4702df2 (@dependabot[bot])
d62ea3c: build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 (@dependabot[bot])
4709461: build(deps): bump goreleaser/goreleaser-action from 6.1.0 to 6.3.0 (@dependabot[bot])

cucumber/godog (github.com/cucumber/godog)

`v0.15.1`

Compare Source

Added

Step text is added to "step is undefined" error - (669 - vearutop)
Localisation support by @MegaGrindStone in #665
feat: support uint types by @chengxilo in #695

Changed

Replace deprecated ::set-output - (681 - nodeg)

Fixed

fix(errors): fix(errors): Fix expected Step argument count for steps with context.Context (679 - tigh-latte)
fix(formatter): On concurrent execution, execute formatter at end of Scenario - (645 - tigh-latte)
Pretty printing results now prints the line where the step is declared instead of the line where the handler is declared. (668 - spencerc)
Update honnef.co/go/tools/cmd/staticcheck version in Makefile by @RezaZareiii in #670
fix: verify dogT exists in the context before using it by @cakoolen in #692
fix: change bang to being in README by @nahomEagleLion in #687
Mark junit test cases as skipped if no pickle step results available by @mrsheepuk in #597
Print step declaration line instead of handler declaration line by @SpencerC in #668

daixiang0/gci (github.com/daixiang0/gci)

`v0.13.7`

Compare Source

What's Changed

fix: scrape all goos/goarch pair for stdlib by @Zxilly in #208
chore: get module info from pass by @ldez in #221
chore: remove analyzer by @ldez in #222
feat: update standard list to go1.25 by @ldez in #233
bump up version by @daixiang0 in #234

New Contributors

@Zxilly made their first contribution in #208

Full Changelog: daixiang0/gci@v0.13.6...v0.13.7

`v0.13.6`

Compare Source

What's Changed

fix: update standard list to go1.24 by @ldez in #227
bump up version by @daixiang0 in #229

Full Changelog: daixiang0/gci@v0.13.5...v0.13.6

evanphx/json-patch (github.com/evanphx/json-patch)

`v5.9.11+incompatible`

Compare Source

`v5.9.10+incompatible`

Compare Source

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

`v0.5.19`

Compare Source

What's Changed

fix: use backticks for inline snaps when appropriate by @gkampitakis in #149

Full Changelog: gkampitakis/go-snaps@0.5.18...v0.5.19

What's Changed

fix: don't drop /r character when scanning by @gkampitakis in #139
chore: replace vendored go-diff with upstream by @gkampitakis in #143
chore: update golangci-lint to v2 by @G-Rath in #141
fix: detect no_color support by @gkampitakis in #123
experimenting with inline snapshot support by @gkampitakis in #70

Full Changelog: gkampitakis/go-snaps@v0.5.15...v0.5.16

`v0.5.15`

Compare Source

What's Changed

test: explicitly return named variables by @G-Rath in #137
ci: show diff after running linting by @G-Rath in #136
fix: only update snapshots when actually allowed by @G-Rath in #135

Full Changelog: gkampitakis/go-snaps@v0.5.14...v0.5.15

`v0.5.14`

Compare Source

What's Changed

feat: snaps.Clean now returns if snaps dirty and err by @gkampitakis in #131

Full Changelog: gkampitakis/go-snaps@v0.5.13...v0.5.14

`v0.5.13`

Compare Source

What's Changed

feat: support MatchStandaloneYAML by @gkampitakis in #128
chore: update go-yaml and gh-action deps by @gkampitakis in #129

Full Changelog: gkampitakis/go-snaps@v0.5.12...v0.5.13

`v0.5.12`

Compare Source

What's Changed

feat: add UPDATE_SNAPS=always for updating and creating snaps on CI setup by @gkampitakis in #126

Full Changelog: gkampitakis/go-snaps@v0.5.11...v0.5.12

`v0.5.11`

Compare Source

What's Changed

feat: add json format config by @kitimark in #121

New Contributors

@kitimark made their first contribution in #121

Full Changelog: gkampitakis/go-snaps@v0.5.10...v0.5.11

`v0.5.10`

Compare Source

What's Changed

fix: handle builds with trimpath enabled by @gkampitakis in #120

Full Changelog: gkampitakis/go-snaps@v0.5.9...v0.5.10

`v0.5.9`

Compare Source

What's Changed

fix: snaps.Update should apply and on snapshot create by @gkampitakis in #119

Full Changelog: gkampitakis/go-snaps@`v0.5.8...v0.5.9`

Kudos to @orloffv for this issue #116

`v0.5.8`

Compare Source

What's Changed

feat: implement matchYAML by @gkampitakis in #114
feat: implement matchStandaloneJSON by @gkampitakis in #113

Full Changelog: gkampitakis/go-snaps@v0.5.7...v0.5.8

go-git/go-billy (github.com/go-git/go-billy/v5)

`v5.6.2`

Compare Source

What's Changed

Enable the iofs adapter to also return other interfaces from io/fs by @JAORMX in #102
build: Bump dependencies by @pjbgf in #103

New Contributors

@JAORMX made their first contribution in #102

Full Changelog: go-git/go-billy@v5.6.1...v5.6.2

`v5.6.1`

Compare Source

What's Changed

build: bump github/codeql-action from 3.26.11 to 3.27.0 by @dependabot in #88
build: bump github/codeql-action from 3.27.0 to 3.27.1 by @dependabot in #89
build: bump github/codeql-action from 3.27.1 to 3.27.4 by @dependabot in #90
build: bump github/codeql-action from 3.27.4 to 3.27.5 by @dependabot in #91
Bump dependencies and build housekeeping by @pjbgf in #95

Full Changelog: go-git/go-billy@v5.6.0...v5.6.1

go-git/go-git (github.com/go-git/go-git/v5)

`v5.13.2`

Compare Source

What's Changed

plumbing: use the correct user agent string. Fixes #883 by @uragirii in #1364
build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by @dependabot in #1365
build: bump the golang-org group with 2 updates by @dependabot in #1367
build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by @dependabot in #1368
build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by @dependabot in #1378
build: bump github/codeql-action from 3.28.0 to 3.28.1 by @dependabot in #1376
build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by @dependabot in #1377
git: worktree, fix restoring dot slash files (backported to v5). Fixes #1176 by @BeChris in #1361
build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2 by @dependabot in #1392
git: worktree_status, fix adding dot slash files to working tree (backported to v5). Fixes #1150 by @BeChris in #1359
build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5 by @dependabot in #1383

Full Changelog: go-git/go-git@v5.13.1...v5.13.2

`v5.13.1`

Compare Source

What's Changed

build: bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by @dependabot in #1327
build: bump github.com/elazarl/goproxy from 1.2.1 to 1.2.2 by @dependabot in #1329
build: bump github.com/elazarl/goproxy from 1.2.2 to 1.2.3 by @dependabot in #1340
Revert "plumbing: transport/ssh, Add support for SSH @cert-authority." by @pjbgf in #1346

Full Changelog: go-git/go-git@v5.13.0...v5.13.1

otiai10/copy (github.com/otiai10/copy)

`v1.14.1`

Compare Source

secure-systems-lab/go-securesystemslib (github.com/secure-systems-lab/go-securesystemslib)

`v0.9.1`

Compare Source

sigstore/sigstore (github.com/sigstore/sigstore)

`v1.8.15`

Compare Source

What's Changed

pkg/signature: fix RSA PSS 3072 key size in algorithm registry in #1981
check concrete type for non-nil to stop fuzzing crash in #1983
fix: cliplugin: return ErrorProviderNotFound when calling Get with a path in #1982

Full Changelog: sigstore/sigstore@v1.8.14...v1.8.15

`v1.8.14`

Compare Source

What's Changed

This is the same content as v1.8.13, with a CI/CD fix.

add initial plugin support for KMSs in #1901
cliplugin: add mocks and serialization testing in #1918
kms plugin: add SignMessage in #1919
cliplugin: add VerifySignature in #1944
cliplugin: add windows ci testing in #1951
Create Algorithm Registry API in #1601
cliplugin: add SupportedAlgorithms(), PublicKey(), and CryptoSigner(). in #1946
cliplugin: use caller contexts in #1947
cliplugin: semver, add tests for hash func encoding in #1948
cliplugin: lint fixes in #1958
cliplugin: convert module to package only in #1956

`v1.8.13`

Compare Source

What's Changed

add initial plugin support for KMSs in #1901
cliplugin: add mocks and serialization testing in #1918
kms plugin: add SignMessage in #1919
cliplugin: add VerifySignature in #1944
cliplugin: add windows ci testing in #1951
Create Algorithm Registry API in #1601
cliplugin: add SupportedAlgorithms(), PublicKey(), and CryptoSigner(). in #1946
cliplugin: use caller contexts in #1947
cliplugin: semver, add tests for hash func encoding in #1948
cliplugin: lint fixes in #1958
cliplugin: convert module to package only in #1956

Full Changelog: sigstore/sigstore@v1.8.12...v1.8.13

`v1.8.12`

Compare Source

What's Changed

build(deps): Bump google.golang.org/api from 0.210.0 to 0.212.0 in /pkg/signature/kms/gcp by @dependabot in #1912
build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.0 in /pkg/signature/kms/gcp by @dependabot in #1911
build(deps): Bump actions/setup-go from 5.1.0 to 5.2.0 in the all group by @dependabot in #1909
build(deps): Bump google.golang.org/api from 0.212.0 to 0.214.0 in /pkg/signature/kms/gcp by @dependabot in #1917
build(deps): Bump hashicorp/vault from 1.18.2 to 1.18.3 in /test/e2e in the all group by @dependabot in #1915
build(deps): Bump the gomod group across 2 directories with 5 updates by @dependabot in #1916
build(deps): Bump cloud.google.com/go/kms from 1.20.3 to 1.20.4 in /pkg/signature/kms/gcp in the gomod group across 1 directory by @dependabot in #1920
build(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 by @dependabot in #1924
build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @dependabot in #1921
build(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 by @dependabot in #1922
build(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 by @dependabot in #1923
build(deps): Bump golang.org/x/crypto from 0.28.0 to 0.31.0 in /test/fuzz by @dependabot in #1908
build(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8.0 to 0.9.0 by @dependabot in #1910
build(deps): Bump the tools group across 1 directory with 2 updates by @dependabot in #1913
cleanup ci by @cpanato in #1927

Full Changelog: sigstore/sigstore@v1.8.11...v1.8.12

`v1.8.11`

Compare Source

What's Changed

several dependabot updates
Replace custom auth code with azidentity.NewDefaultCredential for Azure KMS client by @malancas in #1888
fix: set go module directive to 1.22.0 by @dnwe in #1878

New Contributors

@dnwe made their first contribution in #1878

Full Changelog: sigstore/sigstore@v1.8.10...v1.8.11

`v1.8.10`

Compare Source

What's Changed

fix(kms): fix CreateKey may panic when using GCP KMS by @mozillazg in #1829
update to go1.22.7 and ci job by @cpanato in #1847
Mark TUF client as deprecated by @haydentherapper in #1858
bump to go 1.22.8 by @cpanato in #1865

and several dependencies updates

New Contributors

@mozillazg made their first contribution in #1829

Full Changelog: sigstore/sigstore@v1.8.9...v1.8.10

sirupsen/logrus (github.com/sirupsen/logrus)

`v1.9.4`

Compare Source

Notable changes

go.mod: update minimum supported go version to v1.17 #1460
go.mod: bump up dependencies #1460
Touch-up godoc and add "doc" links.
README: fix links, grammar, and update examples.
Add GNU/Hurd support #1364
Add WASI wasip1 support #1388
Remove uses of deprecated ioutil package #1472
CI: update actions and golangci-lint #1459
CI: remove appveyor, add macOS #1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

spdx/tools-golang (github.com/spdx/tools-golang)

`v0.5.7`

Compare Source

What's Changed

Fail parsing if the required prefix isn't present for IDs by @awyeth in #275

New Contributors

@awyeth made their first contribution in #275

Full Changelog: spdx/tools-golang@v0.5.6...v0.5.7

`v0.5.6`

Compare Source

What's Changed

Change the colon and space separator to just a colon by @warpkwd in #254
build(deps): Bump sigs.k8s.io/yaml to 1.6.0 by @dependabot[bot] in #259
Resolve two issues related to ExternalDocumentRef by @KAWAHARA-souta in #269
fix: Fix prefixDocumentId() to use correct prefix by @KAWAHARA-souta in #272

New Contributors

@warpkwd made their first contribution in #254
@KAWAHARA-souta made their first contribution in #269

Full Changelog: spdx/tools-golang@v0.5.5...v0.5.6

spf13/pflag (github.com/spf13/pflag)

`v1.0.10`

Compare Source

What's Changed

fix deprecation comment for (FlagSet.)ParseErrorsWhitelist by @thaJeztah in #447
remove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by @thaJeztah in #448

New Contributors

@thaJeztah made their first contribution in #447

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

`v1.0.9`

Compare Source

What's Changed

fix: Restore ParseErrorsWhitelist name for now by @tomasaschan in #446

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

`v1.0.8`

Compare Source

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

Remove Redundant "Unknown-Flag" Error by @vaguecoder in #364
Switching from whitelist to Allowlist terminology by @dubrie in #261
Omit zero time.Time default from usage line by @mologie in #438
implement CopyToGoFlagSet by @pohly in #330
flag: Emulate stdlib behavior and do not print ErrHelp by @tmc in #407
Print Default Values of String-to-String in Sorted Order by @vaguecoder in #365
fix: Don't print ErrHelp in ParseAll by @tomasaschan in #443
Reset args on re-parse even if empty by @tomasaschan in #444

New Contributors

@vaguecoder made their first contribution in #364
@dubrie made their first contribution in #261
@mologie made their first contribution in #438
@pohly made their first contribution in #330
@tmc made their first contribution in #407
@tomasaschan made their first contribution in #443

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

tektoncd/chains (github.com/tektoncd/chains)

`v0.22.3`: Tekton Chains release v0.22.3 "v0.22.3"

[Compare Sour

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-10-01T09:20:10Z

ℹ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

25 additional dependencies were updated

Details:

Package	Change
`github.com/Azure/go-ansiterm`	`v0.0.0-20230124172434-306776ec8161` -> `v0.0.0-20250102033503-faa5f7b0171c`
`github.com/ProtonMail/go-crypto`	`v1.1.3` -> `v1.1.5`
`github.com/cyphar/filepath-securejoin`	`v0.3.1` -> `v0.3.6`
`github.com/gkampitakis/ciinfo`	`v0.3.0` -> `v0.3.2`
`github.com/go-openapi/errors`	`v0.22.0` -> `v0.22.1`
`github.com/go-openapi/swag`	`v0.23.0` -> `v0.23.1`
`github.com/google/certificate-transparency-go`	`v1.2.1` -> `v1.3.1`
`github.com/magiconair/properties`	`v1.8.7` -> `v1.8.9`
`github.com/mailru/easyjson`	`v0.7.7` -> `v0.9.0`
`github.com/mitchellh/mapstructure`	`v1.5.0` -> `v1.5.1-0.20231216201459-8508981c8b6c`
`github.com/moby/term`	`v0.5.0` -> `v0.5.2`
`github.com/pjbgf/sha1cd`	`v0.3.0` -> `v0.3.2`
`github.com/rogpeppe/go-internal`	`v1.13.1` -> `v1.13.2-0.20241226121412-a5dc8ff20d0a`
`github.com/sergi/go-diff`	`v1.3.2-0.20230802210424-5b0b94c5c0d3` -> `v1.4.0`
`github.com/sigstore/protobuf-specs`	`v0.3.2` -> `v0.4.1`
`github.com/sigstore/timestamp-authority`	`v1.2.2` -> `v1.2.4`
`github.com/spf13/pflag`	`v1.0.6` -> `v1.0.7`
`github.com/tidwall/gjson`	`v1.17.3` -> `v1.18.0`
`golang.org/x/crypto`	`v0.38.0` -> `v0.40.0`
`golang.org/x/net`	`v0.40.0` -> `v0.41.0`
`golang.org/x/sync`	`v0.15.0` -> `v0.16.0`
`golang.org/x/sys`	`v0.33.0` -> `v0.34.0`
`golang.org/x/term`	`v0.32.0` -> `v0.33.0`
`golang.org/x/text`	`v0.25.0` -> `v0.27.0`
`google.golang.org/api`	`v0.215.0` -> `v0.228.0`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

32 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go`	`v0.116.0` -> `v0.118.3`
`cloud.google.com/go/auth`	`v0.13.0` -> `v0.15.0`
`cloud.google.com/go/auth/oauth2adapt`	`v0.2.6` -> `v0.2.8`
`cloud.google.com/go/iam`	`v1.2.2` -> `v1.4.1`
`cloud.google.com/go/monitoring`	`v1.21.2` -> `v1.24.0`
`cloud.google.com/go/storage`	`v1.49.0` -> `v1.50.0`
`github.com/Azure/go-ansiterm`	`v0.0.0-20230124172434-306776ec8161` -> `v0.0.0-20250102033503-faa5f7b0171c`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric`	`v0.48.1` -> `v0.49.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping`	`v0.48.1` -> `v0.49.0`
`github.com/aws/aws-sdk-go-v2/service/ecr`	`v1.32.2` -> `v1.40.3`
`github.com/aws/aws-sdk-go-v2/service/ecrpublic`	`v1.25.4` -> `v1.31.2`
`github.com/awslabs/amazon-ecr-credential-helper/ecr-login`	`v0.0.0-20240826150212-5dc58b6e29f8` -> `v0.9.1`
`github.com/coreos/go-oidc/v3`	`v3.11.0` -> `v3.12.0`
`github.com/gkampitakis/ciinfo`	`v0.3.0` -> `v0.3.2`
`github.com/go-openapi/errors`	`v0.22.0` -> `v0.22.1`
`github.com/go-openapi/swag`	`v0.23.0` -> `v0.23.1`
`github.com/google/certificate-transparency-go`	`v1.2.1` -> `v1.3.1`
`github.com/google/s2a-go`	`v0.1.8` -> `v0.1.9`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.4` -> `v0.3.6`
`github.com/jmespath/go-jmespath`	`v0.4.0` -> `v0.4.1-0.20220621161143-b0104c826a24`
`github.com/mailru/easyjson`	`v0.7.7` -> `v0.9.0`
`github.com/mitchellh/mapstructure`	`v1.5.0` -> `v1.5.1-0.20231216201459-8508981c8b6c`
`github.com/moby/term`	`v0.5.0` -> `v0.5.2`
`github.com/sergi/go-diff`	`v1.3.2-0.20230802210424-5b0b94c5c0d3` -> `v1.4.0`
`github.com/sigstore/fulcio`	`v1.6.3` -> `v1.6.6`
`github.com/sigstore/protobuf-specs`	`v0.3.2` -> `v0.4.1`
`github.com/sigstore/timestamp-authority`	`v1.2.2` -> `v1.2.4`
`github.com/tidwall/gjson`	`v1.17.0` -> `v1.18.0`
`go.step.sm/crypto`	`v0.51.2` -> `v0.60.0`
`google.golang.org/api`	`v0.215.0` -> `v0.228.0`
`google.golang.org/genproto`	`v0.0.0-20241118233622-e639e219e697` -> `v0.0.0-20250303144028-a0af3efb3deb`
`sigs.k8s.io/release-utils`	`v0.8.4` -> `v0.11.0`

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`github.com/tektoncd/triggers`	`v0.29.0` -> `v0.29.1`

renovate bot added main renovate labels Oct 1, 2025

renovate bot enabled auto-merge October 1, 2025 09:20

github-actions bot added the size: XL label Oct 1, 2025

renovate bot force-pushed the renovate/main-patch-go-modules branch 8 times, most recently from 9db40be to 4561648 Compare October 8, 2025 12:52

renovate bot force-pushed the renovate/main-patch-go-modules branch 2 times, most recently from e73a45c to ed34230 Compare October 15, 2025 17:07

renovate bot force-pushed the renovate/main-patch-go-modules branch 5 times, most recently from 187c7ea to 4a1c342 Compare October 26, 2025 19:33

renovate bot force-pushed the renovate/main-patch-go-modules branch from 4a1c342 to 07e4517 Compare October 27, 2025 16:27

renovate bot force-pushed the renovate/main-patch-go-modules branch 6 times, most recently from 8477e06 to 5b4902e Compare November 6, 2025 12:51

renovate bot force-pushed the renovate/main-patch-go-modules branch 3 times, most recently from 3276771 to b01d438 Compare November 12, 2025 20:14

renovate bot force-pushed the renovate/main-patch-go-modules branch 11 times, most recently from 5441a3d to 06d5ebf Compare December 19, 2025 13:01

renovate bot force-pushed the renovate/main-patch-go-modules branch 2 times, most recently from d7db3d3 to e8484f5 Compare December 29, 2025 15:07

renovate bot force-pushed the renovate/main-patch-go-modules branch 4 times, most recently from bbb7ca9 to fae2b60 Compare January 6, 2026 14:05

renovate bot force-pushed the renovate/main-patch-go-modules branch 5 times, most recently from 7235ae9 to ef30f37 Compare January 15, 2026 10:59

github-actions bot added size: XXL and removed size: XL labels Jan 15, 2026

renovate bot force-pushed the renovate/main-patch-go-modules branch 4 times, most recently from 54bc8f6 to 9b0618c Compare January 22, 2026 16:35

Update go modules

8cfa37c

renovate bot force-pushed the renovate/main-patch-go-modules branch from 9b0618c to 8cfa37c Compare January 22, 2026 20:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update go modules (main) (patch) #2980

Update go modules (main) (patch) #2980

Uh oh!

renovate bot commented Oct 1, 2025 •

edited

Loading

Uh oh!

renovate bot commented Oct 1, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Update go modules (main) (patch) #2980

Are you sure you want to change the base?

Update go modules (main) (patch) #2980

Uh oh!

Conversation

renovate bot commented Oct 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Evaluator

cmd/cue

Changelog

Fixes

Building and Packaging

Added

Changed

Fixed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.8...v0.5.9

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Notable changes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

⚠️ Breaking Change

What's Changed

New Contributors

v0.22.3: Tekton Chains release v0.22.3 "v0.22.3"

Configuration

Uh oh!

renovate bot commented Oct 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: acceptance/go.mod

File name: go.mod

File name: tools/go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Oct 1, 2025 •

edited

Loading

`cmd/cue`

Full Changelog: gkampitakis/go-snaps@`v0.5.8...v0.5.9`

`v0.22.3`: Tekton Chains release v0.22.3 "v0.22.3"

renovate bot commented Oct 1, 2025 •

edited

Loading