Skip to content

Bump the go-modules group across 1 directory with 10 updates - #1750

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-000e4f0716
Closed

Bump the go-modules group across 1 directory with 10 updates#1750
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-000e4f0716

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 10 updates in the / directory:

Package From To
github.com/paketo-buildpacks/packit/v2 2.25.7 2.25.8
github.com/Microsoft/go-winio 0.6.3 0.6.4
github.com/containerd/containerd/v2 2.4.1 2.4.2
github.com/docker/cli 29.9.0+incompatible 29.9.1+incompatible
github.com/ebitengine/purego 0.11.1 0.11.2
github.com/go-jose/go-jose/v4 4.1.5 4.1.6
github.com/gookit/color 1.6.2 1.6.3
github.com/klauspost/pgzip 1.2.7 1.3.0
github.com/sigstore/sigstore 1.11.0 1.11.1
google.golang.org/api 0.302.0 0.304.0

Updates github.com/paketo-buildpacks/packit/v2 from 2.25.7 to 2.25.8

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.25.8

What's Changed

New Contributors

Full Changelog: paketo-buildpacks/packit@v2.25.7...v2.25.8

Commits
  • 09771d5 Updates github-config (#810)
  • 9a7cc7f Fix staticcheck linter issues CPE to CPEs (#826)
  • 9acbe99 Bump github.com/anchore/syft from 1.54.0 to 1.54.1
  • 90efd34 Bump modernc.org/sqlite from 1.60.0 to 1.60.1
  • 0e83f4c Bump github.com/anchore/syft from 1.52.0 to 1.54.0
  • fd7f908 Bump modernc.org/sqlite from 1.59.0 to 1.60.0
  • fe97147 Bump github.com/onsi/gomega from 1.43.1 to 1.44.0
  • 60c419f Bump github.com/containerd/containerd/v2 from 2.3.5 to 2.3.6
  • 80de157 Bump github.com/ulikunitz/xz from 0.5.16 to 0.5.17
  • 6863c38 Bump github.com/onsi/gomega from 1.43.0 to 1.43.1
  • Additional commits viewable in compare view

Updates github.com/Microsoft/go-winio from 0.6.3 to 0.6.4

Release notes

Sourced from github.com/Microsoft/go-winio's releases.

v0.6.4

What's Changed

Full Changelog: microsoft/go-winio@v0.6.3...v0.6.4

Commits

Updates github.com/containerd/containerd/v2 from 2.4.1 to 2.4.2

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.4.2

Welcome to the v2.4.2 release of containerd!

The second patch release for containerd 2.4 contains various fixes and updates including security patches.

Security Updates

Highlights

Container Runtime Interface (CRI)

  • Apply hardening to not follow symlinks for container log files (#14302)

Image Distribution

  • Fix excessive memory usage during image pulls when registry downloads outpace content writes (#14342)
  • Apply hardening to reject image references with ".." path components (#14282)

Runtime

  • Apply hardening to allowlist socket domains in the default seccomp profile (#14247)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Samuel Karp
  • Maksym Pavlenko
  • Sebastiaan van Stijn
  • Derek McGowan
  • LEI WANG
  • Paweł Gronowski
  • Phil Estes
  • Wei Fu
  • syed abdul khaliq

Changes

  • 4b342aeaf Prepare release notes for v2.4.2
  • Update to go1.26.9 / go1.27.2 (security) (#14350)

... (truncated)

Commits
  • b7a2526 Merge pull request #14338 from samuelkarp/prepare-release-2.4.2
  • 4b342ae Prepare release notes for v2.4.2
  • b5811e5 Merge pull request #14350 from thaJeztah/2.4_bump_go
  • 1d734f7 Merge pull request #14347 from k8s-infra-cherrypick-robot/cherry-pick-14346-t...
  • 9c06c81 Update to go1.26.9 / go1.27.2
  • 187caba Merge commit from fork
  • fc7adbf Merge commit from fork
  • 39cff48 Merge commit from fork
  • 3fb9faa ci: update to golangci-lint v2.14.0 (go1.27.2 compatibility)
  • 44fd201 remotes/docker: bound parallel fetch readers
  • Additional commits viewable in compare view

Updates github.com/docker/cli from 29.9.0+incompatible to 29.9.1+incompatible

Commits
  • dfc520d Merge pull request #7390 from renovate-bot/renovate/go-1.x
  • a3a2bb6 chore(deps): update dependency go to v1.27.1
  • c11295a Merge pull request #7388 from renovate-bot/renovate/tonistiigi-xx-1.x
  • 010e125 Merge pull request #7386 from renovate-bot/renovate/docker-buildx-bin-0.x
  • 5cdf229 Merge pull request #7387 from renovate-bot/renovate/docker-compose-bin-5.x
  • 66f6797 chore(deps): update tonistiigi/xx docker tag to v1.10.0
  • cb8870a chore(deps): update docker/compose-bin docker tag to v5.6.0
  • 529f66d chore(deps): update docker/buildx-bin docker tag to v0.38.0
  • 4d6ff7d Merge pull request #7380 from renovate-bot/renovate/actions-upload-artifact-7.x
  • b997c5b Merge pull request #7381 from renovate-bot/renovate/docker-actions
  • Additional commits viewable in compare view

Updates github.com/ebitengine/purego from 0.11.1 to 0.11.2

Release notes

Sourced from github.com/ebitengine/purego's releases.

v0.11.2

Fix a crash during CPU profiling on macOS, FreeBSD, and NetBSD caused by incorrect signal masking when creating threads (#553).

Commits

Updates github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6

Commits

Updates github.com/gookit/color from 1.6.2 to 1.6.3

Release notes

Sourced from github.com/gookit/color's releases.

v1.6.3

Change Log

Fixed

Other

Commits
  • c27a367 Merge remote-tracking branch 'origin/master'
  • dd2f770 build(deps): color 更新到 v1.6.2
  • 9bc305f Decode canonical color cube and grayscale palette values (#122)
  • 0d17892 fix(convert): zero-pad each channel in RgbToHex (#120)
  • See full diff in compare view

Updates github.com/klauspost/pgzip from 1.2.7 to 1.3.0

Release notes

Sourced from github.com/klauspost/pgzip's releases.

v1.3.0

What's Changed

New Contributors

Full Changelog: klauspost/pgzip@v1.2.7...v1.3.0

Commits
  • 03eeed3 feat: Parallel zlib writer implementation (#75)
  • 4e456ca Upgrade compress (#79)
  • 172a0d6 Return unexpected EOF if the stream misses its CRC trailer (#78)
  • e1b5b31 fix: reset read offset when Read drains the current block (#76)
  • See full diff in compare view

Updates github.com/sigstore/sigstore from 1.11.0 to 1.11.1

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.11.1

What's Changed

v1.11.1 drops the Go version directive to a minor release, 1.27, rather than the patch release, 1.27.0. Dependents will need to remove the patch version .0 from go.mod files, as go mod tidy will not automatically do so.

Full Changelog: sigstore/sigstore@v1.11.0...v1.11.1

Commits
  • 4068921 build(deps): Bump github.com/aws/aws-sdk-go-v2/config (#2420)
  • db8df91 build(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms (#2425)
  • 9ee089f build(deps): Bump golang.org/x/oauth2 from 0.36.0 to 0.37.0 (#2423)
  • 75c0ca3 build(deps): Bump github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0 (#2424)
  • 7885bcb build(deps): Bump github.com/aws/aws-sdk-go-v2 in /pkg/signature/kms/aws (#2426)
  • c350b4a build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2427)
  • c139819 build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2429)
  • 8c97c6a Check private key size in LoadED25519phSigner (#2438)
  • eee22a8 Set go directive to minor version only (go 1.27) (#2436)
  • 957a8a1 build(deps): Bump the all group in /test/e2e with 2 updates (#2434)
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.302.0 to 0.304.0

Release notes

Sourced from google.golang.org/api's releases.

v0.304.0

0.304.0 (2026-10-14)

Features

  • all: Auto-regenerate discovery clients (#3770) (a3ea7ac)
  • all: Auto-regenerate discovery clients (#3773) (795f958)
  • Enable non-blocking mode for generation pipeline (#3772) (bd231b0)

v0.303.0

0.303.0 (2026-10-13)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.304.0 (2026-10-14)

Features

  • all: Auto-regenerate discovery clients (#3770) (a3ea7ac)
  • all: Auto-regenerate discovery clients (#3773) (795f958)
  • Enable non-blocking mode for generation pipeline (#3772) (bd231b0)

0.303.0 (2026-10-13)

Features

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-modules group across 1 directory with 10 updates
0d3f787 
Bumps the go-modules group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.25.7` | `2.25.8` |
| [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio) | `0.6.3` | `0.6.4` |
| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.4.1` | `2.4.2` |
| [github.com/docker/cli](https://github.com/docker/cli) | `29.9.0+incompatible` | `29.9.1+incompatible` |
| [github.com/ebitengine/purego](https://github.com/ebitengine/purego) | `0.11.1` | `0.11.2` |
| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.5` | `4.1.6` |
| [github.com/gookit/color](https://github.com/gookit/color) | `1.6.2` | `1.6.3` |
| [github.com/klauspost/pgzip](https://github.com/klauspost/pgzip) | `1.2.7` | `1.3.0` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.11.0` | `1.11.1` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.302.0` | `0.304.0` |



Updates `github.com/paketo-buildpacks/packit/v2` from 2.25.7 to 2.25.8
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.25.7...v2.25.8)

Updates `github.com/Microsoft/go-winio` from 0.6.3 to 0.6.4
- [Release notes](https://github.com/Microsoft/go-winio/releases)
- [Commits](microsoft/go-winio@v0.6.3...v0.6.4)

Updates `github.com/containerd/containerd/v2` from 2.4.1 to 2.4.2
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.4.1...v2.4.2)

Updates `github.com/docker/cli` from 29.9.0+incompatible to 29.9.1+incompatible
- [Commits](docker/cli@v29.9.0...v29.9.1)

Updates `github.com/ebitengine/purego` from 0.11.1 to 0.11.2
- [Release notes](https://github.com/ebitengine/purego/releases)
- [Commits](ebitengine/purego@v0.11.1...v0.11.2)

Updates `github.com/go-jose/go-jose/v4` from 4.1.5 to 4.1.6
- [Commits](go-jose/go-jose@v4.1.5...v4.1.6)

Updates `github.com/gookit/color` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/gookit/color/releases)
- [Commits](gookit/color@v1.6.2...v1.6.3)

Updates `github.com/klauspost/pgzip` from 1.2.7 to 1.3.0
- [Release notes](https://github.com/klauspost/pgzip/releases)
- [Commits](klauspost/pgzip@v1.2.7...v1.3.0)

Updates `github.com/sigstore/sigstore` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.11.0...v1.11.1)

Updates `google.golang.org/api` from 0.302.0 to 0.304.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.302.0...v0.304.0)

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.25.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/Microsoft/go-winio
  dependency-version: 0.6.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.4.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/docker/cli
  dependency-version: 29.9.1+incompatible
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/ebitengine/purego
  dependency-version: 0.11.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/gookit/color
  dependency-version: 1.6.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/klauspost/pgzip
  dependency-version: 1.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.11.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/api
  dependency-version: 0.304.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team as code owners October 22, 2026 16:55
@dependabot
dependabot Bot requested review from pacostas and removed request for a team October 22, 2026 16:55
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 22, 2026
@dependabot dependabot Bot added the go Pull requests that update Go code label Oct 22, 2026
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Oct 22, 2026
@paketo-bot-reviewer
paketo-bot-reviewer enabled auto-merge (rebase) October 22, 2026 17:07
@dependabot @github

dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 23, 2026
auto-merge was automatically disabled October 23, 2026 16:55

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/go_modules/go-modules-000e4f0716 branch October 23, 2026 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@paketo-bot-reviewer paketo-bot-reviewer paketo-bot-reviewer approved these changes
@pacostas pacostas Awaiting requested review from pacostas pacostas is a code owner automatically assigned from paketo-buildpacks/nodejs-maintainers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code semver:patch A change requiring a patch version bump

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@paketo-bot-reviewer @paketo-bot