Bump the all group across 1 directory with 19 updates #2371
+404
−372
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the all group with 12 updates in the /acceptance directory: | Package | From | To | | --- | --- | --- | | cuelang.org/go | `0.11.1` | `0.12.0` | | [github.com/enterprise-contract/enterprise-contract-controller/api](https://github.com/enterprise-contract/enterprise-contract-controller) | `0.1.79` | `0.1.83` | | [github.com/evanphx/json-patch/v5](https://github.com/evanphx/json-patch) | `5.9.0` | `5.9.11` | | [github.com/gkampitakis/go-snaps](https://github.com/gkampitakis/go-snaps) | `0.5.7` | `0.5.11` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.0` | `5.6.2` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.0` | `5.14.0` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.2` | `0.20.3` | | [github.com/otiai10/copy](https://github.com/otiai10/copy) | `1.14.0` | `1.14.1` | | [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.4.1` | `2.4.3` | | [github.com/tektoncd/pipeline](https://github.com/tektoncd/pipeline) | `0.66.0` | `0.69.0` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.34.0` | `0.35.0` | | [sigs.k8s.io/kustomize/api](https://github.com/kubernetes-sigs/kustomize) | `0.18.0` | `0.19.0` | Updates `cuelang.org/go` from 0.11.1 to 0.12.0 Updates `github.com/enterprise-contract/enterprise-contract-controller/api` from 0.1.79 to 0.1.83 - [Release notes](https://github.com/enterprise-contract/enterprise-contract-controller/releases) - [Commits](enterprise-contract/enterprise-contract-controller@api/v0.1.79...api/v0.1.83) Updates `github.com/evanphx/json-patch/v5` from 5.9.0 to 5.9.11 - [Release notes](https://github.com/evanphx/json-patch/releases) - [Commits](evanphx/json-patch@v5.9.0...v5.9.11) Updates `github.com/gkampitakis/go-snaps` from 0.5.7 to 0.5.11 - [Release notes](https://github.com/gkampitakis/go-snaps/releases) - [Commits](gkampitakis/go-snaps@v0.5.7...v0.5.11) Updates `github.com/go-git/go-billy/v5` from 5.6.0 to 5.6.2 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.6.0...v5.6.2) Updates `github.com/go-git/go-git/v5` from 5.13.0 to 5.14.0 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.13.0...v5.14.0) Updates `github.com/google/go-containerregistry` from 0.20.2 to 0.20.3 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml) - [Commits](google/go-containerregistry@v0.20.2...v0.20.3) Updates `github.com/otiai10/copy` from 1.14.0 to 1.14.1 - [Release notes](https://github.com/otiai10/copy/releases) - [Commits](otiai10/copy@v1.14.0...v1.14.1) Updates `github.com/sigstore/cosign/v2` from 2.4.1 to 2.4.3 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v2.4.1...v2.4.3) Updates `github.com/sigstore/rekor` from 1.3.6 to 1.3.9 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.3.6...v1.3.9) Updates `github.com/sigstore/sigstore` from 1.8.9 to 1.8.15 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.9...v1.8.15) Updates `github.com/tektoncd/pipeline` from 0.66.0 to 0.69.0 - [Release notes](https://github.com/tektoncd/pipeline/releases) - [Changelog](https://github.com/tektoncd/pipeline/blob/main/releases.md) - [Commits](tektoncd/pipeline@v0.66.0...v0.69.0) Updates `github.com/testcontainers/testcontainers-go` from 0.34.0 to 0.35.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.34.0...v0.35.0) Updates `golang.org/x/exp` from 0.0.0-20240823005443-9b4947da3948 to 0.0.0-20241108190413-2d47ceb2692f - [Commits](https://github.com/golang/exp/commits) Updates `k8s.io/api` from 0.31.4 to 0.31.6 - [Commits](kubernetes/api@v0.31.4...v0.31.6) Updates `k8s.io/apimachinery` from 0.31.4 to 0.31.6 - [Commits](kubernetes/apimachinery@v0.31.4...v0.31.6) Updates `k8s.io/client-go` from 0.31.4 to 0.31.6 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.31.4...v0.31.6) Updates `sigs.k8s.io/kustomize/api` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/kubernetes-sigs/kustomize/releases) - [Commits](kubernetes-sigs/kustomize@api/v0.18.0...api/v0.19.0) Updates `sigs.k8s.io/kustomize/kyaml` from 0.18.1 to 0.19.0 - [Release notes](https://github.com/kubernetes-sigs/kustomize/releases) - [Commits](kubernetes-sigs/kustomize@kyaml/v0.18.1...api/v0.19.0) --- updated-dependencies: - dependency-name: cuelang.org/go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/enterprise-contract/enterprise-contract-controller/api dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/evanphx/json-patch/v5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/gkampitakis/go-snaps dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/go-git/go-billy/v5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/google/go-containerregistry dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/otiai10/copy dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/cosign/v2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/sigstore dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/tektoncd/pipeline dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/testcontainers/testcontainers-go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/exp dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/api dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/apimachinery dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/client-go dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: sigs.k8s.io/kustomize/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: sigs.k8s.io/kustomize/kyaml dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the all group with 12 updates in the /acceptance directory:
0.11.10.12.00.1.790.1.835.9.05.9.110.5.70.5.115.6.05.6.25.13.05.14.00.20.20.20.31.14.01.14.12.4.12.4.30.66.00.69.00.34.00.35.00.18.00.19.0Updates
cuelang.org/gofrom 0.11.1 to 0.12.0Updates
github.com/enterprise-contract/enterprise-contract-controller/apifrom 0.1.79 to 0.1.83Release notes
Sourced from github.com/enterprise-contract/enterprise-contract-controller/api's releases.
Commits
6f293a9Merge pull request #470 from enterprise-contract/dependabot/github_actions/ac...3bbb0b4Merge pull request #480 from enterprise-contract/dependabot/github_actions/ac...c84deabMerge pull request #481 from enterprise-contract/dependabot/github_actions/gi...0a8bb0cMerge pull request #482 from enterprise-contract/dependabot/github_actions/os...cb28e70Merge pull request #485 from enterprise-contract/dependabot/github_actions/co...0c1d3d1Bump codecov/codecov-action from 5.1.2 to 5.4.02b7b058Bump ossf/scorecard-action from 2.4.0 to 2.4.17b68a28Bump github/codeql-action from 3.28.1 to 3.28.1064d8c5fBump actions/upload-artifact from 4.6.0 to 4.6.179e1e1fBump actions/setup-go from 5.2.0 to 5.3.0Updates
github.com/evanphx/json-patch/v5from 5.9.0 to 5.9.11Release notes
Sourced from github.com/evanphx/json-patch/v5's releases.
Commits
84a4bb1Merge pull request #209 from skitt/export-errs-v57a7a88aExport errBadJSONDoc and errBadJSONPatch errorsbd18525Upgrade go-flags42f26cbFix spacing0a3482bMerge pull request #206 from koba1t/remove_unmaintained_error_pkg106306dremove unmaintained errors pkge7cfbbbMerge pull request #203 from skitt/drop-gopkgin-v561e1ad7Drop the reference to gopkg.in for v5Updates
github.com/gkampitakis/go-snapsfrom 0.5.7 to 0.5.11Release notes
Sourced from github.com/gkampitakis/go-snaps's releases.
Commits
e004bc1feat: add json format config (#121)8740883fix: handle builds with trimpath enabled (#120)00f3055fix: snaps.Update should apply and on snapshot create (#119)560fde0feat: implement matchStandaloneJSON (#113)f81115dfeat: implement matchYAML (#114)Updates
github.com/go-git/go-billy/v5from 5.6.0 to 5.6.2Release notes
Sourced from github.com/go-git/go-billy/v5's releases.
Commits
9f8b16dMerge pull request #103 from pjbgf/bump-deps783f58cbuild: Bump dependencies0009381Merge pull request #102 from JAORMX/iofs-extra-interfaces-v521beb15Enable theiofsadapter to also return other interfaces fromio/fsa6c6b50Merge pull request #95 from pjbgf/pre-releasef4615d3build: Remove test_js workflowae8b61bbuild: Bump workflows Go versionsb412339build: Align dependabot settings with go-gitd982317build: Bump Go to 1.21 and dependencies9ca623cMerge pull request #91 from go-git/dependabot/github_actions/github/codeql-ac...Updates
github.com/go-git/go-git/v5from 5.13.0 to 5.14.0Release notes
Sourced from github.com/go-git/go-git/v5's releases.
Commits
863c621Merge pull request #1436 from pjbgf/v5-bumps2e69e81build: Bump dependenciesb2c1ec9build: Bump Go versions2c68247Merge pull request #1383 from go-git/dependabot/go_modules/github.com/ProtonM...d462c2eMerge pull request #1359 from BeChris/issue1150-v532ac23aMerge pull request #1392 from go-git/dependabot/go_modules/github.com/pjbgf/s...93e635abuild: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2b2bb975git: worktree_status, took into account code review remarks518ac88git: worktree_status, fix adding dot slash files to working tree (backported ...21b3150build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5Updates
github.com/google/go-containerregistryfrom 0.20.2 to 0.20.3Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
c4dd792bump deps using hack/bump-deps.sh (#2042)6bce25eDetect zstd in crane append (#2023)06dcd85mutate: Create a defensive annotations copy (#2030)a9a53a8check for 406 status code when handling referrers endpoint response (#2026)4630c40don't pin chainguard-dev/actions (#2025)808e354bump actions to latest (#2011)a07d1cafix: redact.URL uses (*URL).Redacted to omit basic-auth password (#1947)00f182bExpose compare package (#2001)b8e87edremote/transport: Make bearer transport go-routine-safe (#1806)Updates
github.com/otiai10/copyfrom 1.14.0 to 1.14.1Commits
5ef5923Revert "CopyMethod" since it's not ready49b0b59Merge pull request #164 from eth-p/feat-copymethod-apif530620ci: Allow triggering Go workflow manuallyb4dd789refactor: Split common code out of CopyBytes9205813feat: Add FileCopyMethod option / API2f93b8fMerge pull request #159 from otiai10/dependabot/go_modules/main/golang.org/x/...87072f3Bump golang.org/x/sys from 0.23.0 to 0.24.0d0690cbMerge pull request #158 from otiai10/dependabot/go_modules/main/golang.org/x/...b87119dBump golang.org/x/sys from 0.22.0 to 0.23.0355527cMerge pull request #157 from otiai10/dependabot/go_modules/main/golang.org/x/...Updates
github.com/sigstore/cosign/v2from 2.4.1 to 2.4.3Release notes
Sourced from github.com/sigstore/cosign/v2's releases.
... (truncated)
Changelog
Sourced from github.com/sigstore/cosign/v2's changelog.
... (truncated)
Commits
6a7abbfchore(deps): bump the gomod group across 1 directory with 4 updates (#4074)0b69cc5chore(deps): bump github.com/buildkite/agent/v3 from 3.91.0 to 3.92.1 (#4066)3564b3echore(deps): bump gitlab.com/gitlab-org/api/client-go (#4065)d6aeeb2Enable fetching signatures without remote get. (#4047)26d0ee5Bump sigstore/sigstore to support KMS plugins (#4073)5181623chore(deps): bump golangci/golangci-lint-action in the actions group (#4070)c1b1a78chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (#4067)a0b20b7sort properly Go imports (#4071)b4be5f7chore(deps): bump google.golang.org/api from 0.220.0 to 0.221.0 (#4068)01fde81sync comment with parameter name in function signature (#4063)Updates
github.com/sigstore/rekorfrom 1.3.6 to 1.3.9Release notes
Sourced from github.com/sigstore/rekor's releases.
Changelog
Sourced from github.com/sigstore/rekor's changelog.
... (truncated)
Commits
b67ee82build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.040f29babuild(deps): Bump golang from51a6466to8c10f212497b42build(deps): Bump google/cloud-sdk from 506.0.0 to 507.0.0ac42c19build(deps): Bump google.golang.org/api from 0.217.0 to 0.218.010e8115build(deps): Bump the all group with 3 updates2f182a1build(deps): Bump google.golang.org/protobuf in the all groupf3db95bCache checkpoint for inactive shards (#2332)1cb78cabuild(deps): Bump google/cloud-sdk from 505.0.0 to 506.0.0b68f6bbbuild(deps): Bump google.golang.org/api from 0.216.0 to 0.217.015c696cbuild(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.2.0 to 2.3.0Updates
github.com/sigstore/sigstorefrom 1.8.9 to 1.8.15Release notes
Sourced from github.com/sigstore/sigstore's releases.
... (truncated)
Commits
0c5004ebuild(deps): Bump golang.org/x/oauth2 from 0.25.0 to 0.26.0 (#1968)08ccf77build(deps): Bump github.com/aws/aws-sdk-go-v2 in /pkg/signature/kms/aws (#1970)9720b04build(deps): Bump golangci/golangci-lint-action (#1984)ce0fa17fix: cliplugin: return ErrorProviderNotFound when calling Get with a path (#1...a5ada3fcheck concrete type for non-nil (#1983)75b85e2pkg/signature: fix RSA PSS 3072 key size in algorithm registry (#1981)351b102export variable (#1978)0a1ec6fbuild(deps): Bump golang.org/x/oauth2 in /pkg/signature/kms/gcp (#1973)a806b7ebuild(deps): Bump github.com/hashicorp/vault/api (#1974)a235f11build(deps): Bump localstack/localstack in /test/e2e in the all group (#1965)Updates
github.com/tektoncd/pipelinefrom 0.66.0 to 0.69.0Release notes
Sourced from github.com/tektoncd/pipeline's releases.
... (truncated)
Changelog
Sourced from github.com/tektoncd/pipeline's changelog.