Skip to content

Bump the go-modules group across 1 directory with 25 updates - #1733

Merged
paketo-bot-reviewer merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-6ba2faca6a
Oct 14, 2026
Merged

paketo-bot-reviewer merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-6ba2faca6a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 25 updates in the / directory:

Package From To
github.com/anchore/go-rpmdb 0.2.1 0.2.2
github.com/anchore/stereoscope 0.3.3 0.3.4
github.com/anchore/syft 1.54.0 1.54.1
github.com/aws/aws-sdk-go-v2/config 1.33.6 1.33.7
github.com/aws/aws-sdk-go-v2/credentials 1.20.6 1.20.7
github.com/aws/aws-sdk-go-v2/service/s3 1.114.0 1.114.1
github.com/aws/aws-sdk-go-v2/service/signin 1.10.1 1.10.2
github.com/aws/aws-sdk-go-v2/service/sso 1.38.1 1.38.2
github.com/aws/aws-sdk-go-v2/service/ssooidc 1.43.1 1.43.2
github.com/aws/aws-sdk-go-v2/service/sts 1.51.1 1.51.2
github.com/aws/smithy-go 1.28.2 1.28.4
github.com/go-git/go-git/v5 5.19.2 5.19.3
github.com/googleapis/enterprise-certificate-proxy 0.3.22 0.3.23
github.com/hashicorp/go-getter 1.8.9 1.8.10
github.com/mattn/go-colorable 0.1.15 0.1.16
github.com/minio/minlz 1.2.1 1.2.2
github.com/nwaples/rardecode/v2 2.4.1 2.4.2
github.com/olekukonko/ll 0.1.8 0.1.9
github.com/pierrec/lz4/v4 4.1.32 4.1.33
github.com/shopspring/decimal 1.4.0 1.5.0
github.com/sigstore/fulcio 1.8.8 1.9.0
github.com/spiffe/go-spiffe/v2 2.8.2 2.9.0
golang.org/x/sys 0.48.0 0.49.0
golang.org/x/tools 0.50.0 0.51.0
google.golang.org/api 0.300.0 0.301.0

Updates github.com/anchore/go-rpmdb from 0.2.1 to 0.2.2

Release notes

Sourced from github.com/anchore/go-rpmdb's releases.

v0.2.2

Bug Fixes

(Full Changelog)

Commits

Updates github.com/anchore/stereoscope from 0.3.3 to 0.3.4

Release notes

Sourced from github.com/anchore/stereoscope's releases.

v0.3.4

Bug Fixes

Dependencies

6 dependency changes (6 updated).

  • github.com/bmatcuk/doublestar/v4 v4.10.0 → v4.10.2
  • github.com/docker/cli v29.8.1+incompatible → v29.8.2+incompatible
  • github.com/secure-systems-lab/go-securesystemslib v0.11.0 → v0.11.1
  • github.com/sigstore/protobuf-specs v0.5.1 → v0.5.2
  • github.com/sigstore/sigstore v1.10.8 → v1.10.11
  • github.com/sylabs/sif/v2 v2.24.1 → v2.24.2

(Full Changelog)

Commits
  • 0f2bbdb ci: run the full unit suite on windows (#716)
  • 1362d79 fix(test): stop fd-count leak checks flaking on GC timing (#721)
  • 3b70125 fix: load registry CA certs from absolute and parent-relative dirs (#720)
  • f942062 chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.10.0 to 4.10.2 (#717)
  • bf95849 chore(deps): bump github.com/sylabs/sif/v2 from 2.24.1 to 2.24.2 (#719)
  • ddbcbbe chore(deps): bump github.com/docker/cli (#718)
  • 59d3a69 fix: drop the colon from layer cache filenames (#705) (#715)
  • 0d5b0db chore(deps): update tool versions (#714)
  • See full diff in compare view

Updates github.com/anchore/syft from 1.54.0 to 1.54.1

Release notes

Sourced from github.com/anchore/syft's releases.

v1.54.1

Bug Fixes

Dependencies

9 dependency changes (9 updated).

  • github.com/anchore/go-rpmdb v0.2.0 → v0.2.2
  • github.com/anchore/stereoscope v0.3.3 → v0.3.4
  • github.com/docker/cli v29.8.1+incompatible → v29.8.2+incompatible
  • github.com/glebarez/go-sqlite v1.20.3 → v1.23.0
  • github.com/klauspost/compress v1.20.0 → v1.20.1
  • github.com/secure-systems-lab/go-securesystemslib v0.11.0 → v0.11.1
  • github.com/sigstore/protobuf-specs v0.5.1 → v0.5.2
  • github.com/sigstore/sigstore v1.10.8 → v1.10.11
  • github.com/sylabs/sif/v2 v2.24.1 → v2.24.2

(Full Changelog)

Commits
  • b254e6d chore(deps): update anchore dependencies (#5367)
  • 29b92a5 Add container-storage support for Podman and Buildah (#5368)
  • 6c9bb73 ci: run the full unit suite on windows (#5370)
  • 6d2493b chore(deps): update CPE dictionary index (#5375)
  • bc68299 chore(deps): bump github.com/klauspost/compress from 1.20.0 to 1.20.1 (#5369)
  • c33fa32 fix(dotnet): resolve packages.lock dependencies deterministically (#5210)
  • See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.6 to 1.33.7

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.6 to 1.20.7

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.114.0 to 1.114.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/signin from 1.10.1 to 1.10.2

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.38.1 to 1.38.2

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.43.1 to 1.43.2

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.51.1 to 1.51.2

Commits

Updates github.com/aws/smithy-go from 1.28.2 to 1.28.4

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-10-09)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.5
    • Bug Fix: Retain the key with the zero value when encountering a null-value key in a dense map. This matches how legacy code-generated JSON deserializers behaved.

Release (2026-10-07)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.4
    • Bug Fix: Revert #698 that fixed JoinPath with trailing slash. This has a side effect on certain S3 API paths in the downstream SDK that need more consideration.

Release (2026-10-06)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.3
    • Bug Fix: Accept either casing of message/Message on modeled JSON error structures in schema-based deserialization, and emit the smithy.api#error trait in generated schemas
    • Bug Fix: Include the underlying error when logging failures to discard or close an HTTP response body

Release (2026-09-18)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.2
    • Bug Fix: Avoid allocating a slice in ValidateEndpointHost by indexing into the hostname instead of using strings.Split.
    • Bug Fix: Fix event stream decode panic on unknown header value type.
    • Bug Fix: Fix schema-serde CBOR decode panic on malformed string/blob length.
    • Bug Fix: JoinPath keeps a trailing slash when the added path is a slash.

Release (2026-08-26)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.1
    • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

... (truncated)

Commits

Updates github.com/go-git/go-git/v5 from 5.19.2 to 5.19.3

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.3

What's Changed

New Contributors

Full Changelog: go-git/go-git@v5.19.2...v5.19.3

Commits
  • bdae57c Merge pull request #2468 from go-git/bump-pjbgf
  • 372805d build: Bump pjbgf/sha1cd to v0.7.0
  • e28bfff Merge pull request #2467 from go-git/renovate/releases/v5.x-go-git
  • dbfe60f build: Update module github.com/go-git/go-billy/v5 to v5.9.2
  • a3fa9b3 Merge pull request #2451 from go-git/drop-go-1.25
  • 1fc0e47 build: Drop Go 1.25
  • 4f28503 Merge pull request #2340 from jgoosens/releases/v5.x
  • 5a01a03 Merge pull request #2357 from go-git/renovate/releases/v5.x-go-golang.org-x-c...
  • 5372bc7 Merge pull request #2421 from akashchamp/fix/packfile-parallel-test-race
  • 3d20ded plumbing: format/packfile, Stop running TestChecksumMismatch and TestMalforme...
  • Additional commits viewable in compare view

Updates github.com/googleapis/enterprise-certificate-proxy from 0.3.22 to 0.3.23

Release notes

Sourced from github.com/googleapis/enterprise-certificate-proxy's releases.

v0.3.23

What's Changed

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.22...v0.3.23

Commits

Updates github.com/hashicorp/go-getter from 1.8.9 to 1.8.10

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.8.10

Bug fixes

Full Changelog: hashicorp/go-getter@v1.8.9...v1.8.10

Changelog

Sourced from github.com/hashicorp/go-getter's changelog.

1.8.10 (October 6, 2026)

BUG FIXES:

  • s3: Only force path-style addressing for non-AWS custom endpoints, restoring the SDK-default virtual-hosted-style for AWS endpoints. Fixes S3 downloads with AWS_USE_FIPS_ENDPOINT=true, whose path-style hostnames do not resolve [GH-676]
Commits
  • f37b03d Release v1.8.10
  • f512b82 [chore] : Bump the go group with 6 updates (#699)
  • fa06524 [chore] : Bump the go group with 4 updates (#698)
  • cb9c40a [chore] : Bump go.opentelemetry.io/otel/sdk (#695)
  • af0c1a9 [chore] : Bump the go group with 4 updates (#697)
  • 4df2943 [chore] : Bump aws-actions/configure-aws-credentials (#696)
  • 697ba66 sanitize destination path of keys received from S3/GCS List (#693)
  • 5393c9f [chore] : Bump the go group with 8 updates (#692)
  • 2efe0e2 [chore] : Bump the go group with 8 updates (#689)
  • 9f4d2d3 [chore] : Bump aws-actions/configure-aws-credentials (#688)
  • Additional commits viewable in compare view

Updates github.com/mattn/go-colorable from 0.1.15 to 0.1.16

Release notes

Sourced from github.com/mattn/go-colorable's releases.

v0.1.16

Improvements

  • Reduce parsing overhead and allocations for Windows consoles without VT support by processing text and escape sequences directly from input slices.
  • Avoid redundant console queries and attribute resets, and reduce Windows API argument allocations.
  • Precompute the 256-color mapping, removing first-use conversion work and concurrent initialization races.
  • Speed up ANSI sequence stripping in NonColorable.

Add regression coverage for fragmented sequences, Unicode titles, palette conversion, and real Windows console operations. CI passes on Windows, macOS, and Linux with Go 1.24, 1.25, and 1.26.

Implemented in #84. Real console output remains limited by console I/O: local benchmarks showed about 29% higher throughput for 4 KiB text with an escape sequence and about 3% for colored log lines; parser-only gains are substantially larger.

Full Changelog: mattn/go-colorable@v0.1.15...v0.1.16

Commits
  • 56c5db5 Merge pull request #84 from mattn/opt-windows-combined
  • 4844283 Integrate independently validated Windows performance improvements
  • See full diff in compare view

Updates github.com/minio/minlz from 1.2.1 to 1.2.2

Release notes

Sourced from github.com/minio/minlz's releases.

v1.2.2

What's Changed

Full Changelog: minio/minlz@v1.2.1...v1.2.2

Commits

Updates github.com/nwaples/rardecode/v2 from 2.4.1 to 2.4.2

Commits
  • 76ac572 fix error decoding empty files in a solid archive
  • fa6448a fix copyBytes overflow
  • adb9640 fix audio decoder delta being a signed byte
  • 8e8a490 save copyBytes() window overflow for next fill()
  • See full diff in compare view

Updates github.com/olekukonko/ll from 0.1.8 to 0.1.9

Commits
  • 1372653 Merge pull request #1 from toddy15/main
  • 346b0b8 Fix alignment issues on 32 bit.
  • e52da6f add Warning and Warningf for boltdb logging functions
  • See full diff in compare view

Updates github.com/pierrec/lz4/v4 from 4.1.32 to 4.1.33

Commits
  • b3ae24d lz4: document OnBlockDone concurrency
  • d9853db xxh32: fix a stale BlockSize comment
  • 4972926 lz4stream: stop shadowing the data channel in initR
  • 6374928 lz4: drop an else after return in CompressingReader
  • 6b13fb9 lz4: clean up comments
  • 0a60c23 Merge pull request #277 from honeycombio/lizf.testdata-licensing
  • 3b766df testdata: record where each file comes from and its licence
  • d9034fe testdata: replace the bzImage sample with a C-made legacy frame of text
  • 2baa0ce Merge pull request #276 from honeycombio/lizf.legacy-writer-bound
  • b9c03e8 Merge pull request #275 from honeycombio/lizf.lz4c-install
  • Additional commits viewable in compare view

Updates github.com/shopspring/decimal from 1.4.0 to 1.5.0

Release notes

Sourced from github.com/shopspring/decimal's releases.

v1.5.0

Full Changelog can be found in CHANGELOG.md. Please read its BEHAVIOR CHANGES section before upgrading.

New Contributors

Changelog

Sourced from github.com/shopspring/decimal's changelog.

Decimal v1.5.0

BEHAVIOR CHANGES

  • NewFromString and UnmarshalBinary, and so JSON, text, SQL, gob and Spanner decoding, reject exponents larger than the new MaxDecodeExponent setting (default 10,000). Such input could hang the process or use gigabytes of memory. Raise MaxDecodeExponent if you need larger exponents #440
  • Pow, PowWithPrecision, PowInt32 and PowBigInt round correctly. Results for fractional exponents have PowPrecisionNegativeExponent (16) decimal places, and negative powers that used to return 0 keep 16 significant digits, so 10^-18 is 0.000000000000000001. Results too large to represent return an error, or 0 from Pow, instead of hanging or panicking #439
  • RoundUp, RoundDown, RoundCeil and RoundFloor always return exponent -places, like Round. Values don't change, but Exponent(), Coefficient() and String() with TrimTrailingZeros = false can #426 #441
  • Truncate supports negative precision: 5432 truncated to -2 is 5400. Before, it returned 5432 unchanged #426
  • Shift panics when the exponent overflows an int32, instead of wrapping around #437
  • NewFromString rejects a sign right after a leading decimal point, such as ".-5" #447

FEATURES

  • Add TrimTrailingZeros and UseScientificNotation settings for string output #389 #416
  • Add Spanner support with EncodeSpanner and DecodeSpanner for Decimal and NullDecimal #395

ENHANCEMENTS

  • Most operations are faster and allocate less, about twice as fast on average across the benchmarks #444 #445 #446 #447 #448 #449 #451
  • Faster UnmarshalJSON, Scan and NewFromString #403
  • ExpHullAbrham raises its partial sum to a power by squaring. Large inputs that took minutes now take seconds #450
  • Document that NewFromFloat returns the shortest decimal that converts back to the same float, and how to convert large whole numbers exactly #442
  • Split decimal.go into decimal.go, math.go and encoding.go #452
  • Lint with golangci-lint in CI, and test on Go 1.26 and 1.27 #453 #454

BUGFIXES

  • Fix Float64 hanging on decimals with huge exponents #438
  • Fix ExpHullAbrham returning 10^exp instead of 1 for tiny inputs #433
  • Fix a data race in ExpTaylor #414
  • Fix NumDigits for some exact powers of ten #425
  • Fix the omitzero struct tag for Decimal fields in nested structs #415
  • Fix RoundCash giving wrong results with a low DivisionPrecision #443
  • NullDecimal is no longer Valid after a failed Scan, UnmarshalJSON or DecodeSpanner #443
Commits
  • f658fbf docs: changelog for v1.5.0 (#455)
  • b260985 ci: test on Go 1.26 and 1.27 instead of 1.22 and 1.23 (#454)
  • d25658f chore: lint with golangci-lint in CI instead of Go Report Card (#453)
  • fc257b4 chore: split decimal.go into math.go and encoding.go (#452)
  • aed8543 fix: RoundCash with a low DivisionPrecision and NullDecimal.Valid after error...
  • 811854c perf: faster QuoRem, DivRound, Round, RoundBank, RoundUp, RoundCeil and Round...
  • 9b6d118 perf: raise the ExpHullAbrham sum to its power by squaring (#450)
  • cc8953c perf: build trig constants once (#449)
  • 84990cb perf: faster String, MarshalJSON and NewFromString; reject a sign after the d...
  • 71ebcfd Fix the scale of the small-input exponential result (#433)
  • Additional commits viewable in compare view

Updates github.com/sigstore/fulcio from 1.8.8 to 1.9.0

Release notes

Sourced from github.com/sigstore/fulcio's releases.

v1.9.0

What's Changed

This release bumps the minimun Go version to 1.27, to prepare for a future release that will support ML-DSA through Go's crypto/mldsa package.

Full Changelog: sigstore/fulcio@v1.8.8...v1.9.0

Changelog

Sourced from github.com/sigstore/fulcio's changelog.

v1.9.0

This release bumps the minimum Go version to 1.27, in order to support ML-DSA in a future release. Prebuilt containers now use the latest Distroless image based on Debian 13.

Features

  • Specify the environment the identity provider is supported (#2410)
  • Serve TLS on HTTP/duplex and make TLS policy configurable (#2418)

Fixes / Refactors

  • Format large whole-number claims without scientific notation (#2406)
  • Replace archived go-grpc-prometheus with go-grpc-middleware provider (#2428)
Commits
  • e9c4967 Changelog for v1.9.0 (#2476)
  • 9d8715d build(deps): bump github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.4....
  • 0cd7561 Restrict OIDC HTTP client connections to internal and reserved IPs (#2475)
  • 1dfd908 build(deps): bump github.com/prometheus/common from 0.70.1 to 0.72.0 (#2473)
  • ceafe89 build(deps): bump goa.design/goa/v3 from 3.28.0 to 3.32.0 (#2471)
  • f3f4b0b build(deps): bump cloud.google.com/go/security from 1.26.0 to 1.28.0 (#2472)
  • e858544 build(deps): bump the all group with 2 updates (#2474)
  • a6a5acb build(deps): bump golang from 3680233 to e0174e5 (#2468)
  • 56b44b0 feat: serve TLS on HTTP/duplex and make TLS policy configurable (#2418)
  • 8500302 build(deps): bump the all group across 1 directory with 9 updates (#2467)
  • Additional commits viewable in

Bumps the go-modules group with 25 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/anchore/go-rpmdb](https://github.com/anchore/go-rpmdb) | `0.2.1` | `0.2.2` |
| [github.com/anchore/stereoscope](https://github.com/anchore/stereoscope) | `0.3.3` | `0.3.4` |
| [github.com/anchore/syft](https://github.com/anchore/syft) | `1.54.0` | `1.54.1` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.6` | `1.33.7` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.6` | `1.20.7` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.114.0` | `1.114.1` |
| [github.com/aws/aws-sdk-go-v2/service/signin](https://github.com/aws/aws-sdk-go-v2) | `1.10.1` | `1.10.2` |
| [github.com/aws/aws-sdk-go-v2/service/sso](https://github.com/aws/aws-sdk-go-v2) | `1.38.1` | `1.38.2` |
| [github.com/aws/aws-sdk-go-v2/service/ssooidc](https://github.com/aws/aws-sdk-go-v2) | `1.43.1` | `1.43.2` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.51.1` | `1.51.2` |
| [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.28.2` | `1.28.4` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.19.2` | `5.19.3` |
| [github.com/googleapis/enterprise-certificate-proxy](https://github.com/googleapis/enterprise-certificate-proxy) | `0.3.22` | `0.3.23` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.8.9` | `1.8.10` |
| [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable) | `0.1.15` | `0.1.16` |
| [github.com/minio/minlz](https://github.com/minio/minlz) | `1.2.1` | `1.2.2` |
| [github.com/nwaples/rardecode/v2](https://github.com/nwaples/rardecode) | `2.4.1` | `2.4.2` |
| [github.com/olekukonko/ll](https://github.com/olekukonko/ll) | `0.1.8` | `0.1.9` |
| [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.32` | `4.1.33` |
| [github.com/shopspring/decimal](https://github.com/shopspring/decimal) | `1.4.0` | `1.5.0` |
| [github.com/sigstore/fulcio](https://github.com/sigstore/fulcio) | `1.8.8` | `1.9.0` |
| [github.com/spiffe/go-spiffe/v2](https://github.com/spiffe/go-spiffe) | `2.8.2` | `2.9.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.48.0` | `0.49.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.50.0` | `0.51.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.300.0` | `0.301.0` |



Updates `github.com/anchore/go-rpmdb` from 0.2.1 to 0.2.2
- [Release notes](https://github.com/anchore/go-rpmdb/releases)
- [Commits](anchore/go-rpmdb@v0.2.1...v0.2.2)

Updates `github.com/anchore/stereoscope` from 0.3.3 to 0.3.4
- [Release notes](https://github.com/anchore/stereoscope/releases)
- [Changelog](https://github.com/anchore/stereoscope/blob/main/RELEASE.md)
- [Commits](anchore/stereoscope@v0.3.3...v0.3.4)

Updates `github.com/anchore/syft` from 1.54.0 to 1.54.1
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v1.54.0...v1.54.1)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.6 to 1.33.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.6...config/v1.33.7)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.6 to 1.20.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/mq/v1.20.6...service/mq/v1.20.7)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.114.0 to 1.114.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.114.0...service/s3/v1.114.1)

Updates `github.com/aws/aws-sdk-go-v2/service/signin` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.10.1...config/v1.10.2)

Updates `github.com/aws/aws-sdk-go-v2/service/sso` from 1.38.1 to 1.38.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.38.1...v1.38.2)

Updates `github.com/aws/aws-sdk-go-v2/service/ssooidc` from 1.43.1 to 1.43.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.43.1...v1.43.2)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.51.1 to 1.51.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.51.1...service/s3/v1.51.2)

Updates `github.com/aws/smithy-go` from 1.28.2 to 1.28.4
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.28.2...v1.28.4)

Updates `github.com/go-git/go-git/v5` from 5.19.2 to 5.19.3
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.19.2...v5.19.3)

Updates `github.com/googleapis/enterprise-certificate-proxy` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/googleapis/enterprise-certificate-proxy/releases)
- [Commits](googleapis/enterprise-certificate-proxy@v0.3.22...v0.3.23)

Updates `github.com/hashicorp/go-getter` from 1.8.9 to 1.8.10
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-getter@v1.8.9...v1.8.10)

Updates `github.com/mattn/go-colorable` from 0.1.15 to 0.1.16
- [Release notes](https://github.com/mattn/go-colorable/releases)
- [Commits](mattn/go-colorable@v0.1.15...v0.1.16)

Updates `github.com/minio/minlz` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/minio/minlz/releases)
- [Commits](minio/minlz@v1.2.1...v1.2.2)

Updates `github.com/nwaples/rardecode/v2` from 2.4.1 to 2.4.2
- [Commits](nwaples/rardecode@v2.4.1...v2.4.2)

Updates `github.com/olekukonko/ll` from 0.1.8 to 0.1.9
- [Release notes](https://github.com/olekukonko/ll/releases)
- [Commits](olekukonko/ll@v0.1.8...v0.1.9)

Updates `github.com/pierrec/lz4/v4` from 4.1.32 to 4.1.33
- [Release notes](https://github.com/pierrec/lz4/releases)
- [Commits](pierrec/lz4@v4.1.32...v4.1.33)

Updates `github.com/shopspring/decimal` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/shopspring/decimal/releases)
- [Changelog](https://github.com/shopspring/decimal/blob/master/CHANGELOG.md)
- [Commits](shopspring/decimal@v1.4.0...v1.5.0)

Updates `github.com/sigstore/fulcio` from 1.8.8 to 1.9.0
- [Release notes](https://github.com/sigstore/fulcio/releases)
- [Changelog](https://github.com/sigstore/fulcio/blob/main/CHANGELOG.md)
- [Commits](sigstore/fulcio@v1.8.8...v1.9.0)

Updates `github.com/spiffe/go-spiffe/v2` from 2.8.2 to 2.9.0
- [Release notes](https://github.com/spiffe/go-spiffe/releases)
- [Changelog](https://github.com/spiffe/go-spiffe/blob/main/CHANGELOG.md)
- [Commits](spiffe/go-spiffe@v2.8.2...v2.9.0)

Updates `golang.org/x/sys` from 0.48.0 to 0.49.0
- [Commits](golang/sys@v0.48.0...v0.49.0)

Updates `golang.org/x/tools` from 0.50.0 to 0.51.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.50.0...v0.51.0)

Updates `google.golang.org/api` from 0.300.0 to 0.301.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.300.0...v0.301.0)

---
updated-dependencies:
- dependency-name: github.com/anchore/go-rpmdb
  dependency-version: 0.2.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/stereoscope
  dependency-version: 0.3.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/syft
  dependency-version: 1.54.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.114.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/signin
  dependency-version: 1.10.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sso
  dependency-version: 1.38.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ssooidc
  dependency-version: 1.43.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.51.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.28.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/googleapis/enterprise-certificate-proxy
  dependency-version: 0.3.23
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/mattn/go-colorable
  dependency-version: 0.1.16
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/minio/minlz
  dependency-version: 1.2.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/nwaples/rardecode/v2
  dependency-version: 2.4.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/olekukonko/ll
  dependency-version: 0.1.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/pierrec/lz4/v4
  dependency-version: 4.1.33
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/shopspring/decimal
  dependency-version: 1.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sigstore/fulcio
  dependency-version: 1.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/spiffe/go-spiffe/v2
  dependency-version: 2.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.49.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools
  dependency-version: 0.51.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/api
  dependency-version: 0.301.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 14, 2026 21:14
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 14, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 14, 2026 21:14
@dependabot
dependabot Bot requested review from pacostas and paketo-bot-reviewer and removed request for a team October 14, 2026 21:14
@dependabot dependabot Bot added the go Pull requests that update Go code label Oct 14, 2026
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Oct 14, 2026
@paketo-bot-reviewer
paketo-bot-reviewer merged commit 1e67188 into main Oct 14, 2026
11 of 12 checks passed
@paketo-bot-reviewer
paketo-bot-reviewer deleted the dependabot/go_modules/go-modules-6ba2faca6a branch October 14, 2026 21:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code semver:patch A change requiring a patch version bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants