chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #351 · securesign/fulcio

red-hat-konflux · 2026-02-08T13:27:21Z

This PR contains the following updates:

Package	Type	Update	Change
cloud.google.com/go/auth	indirect	patch	`v0.18.1` -> `v0.18.2`
filippo.io/edwards25519	indirect	minor	`v1.1.0` -> `v1.2.0`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.6.0` -> `v1.7.0`
github.com/aws/aws-sdk-go-v2/credentials	indirect	patch	`v1.19.7` -> `v1.19.11`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	patch	`v1.18.17` -> `v1.18.19`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	patch	`v1.4.17` -> `v1.4.19`
github.com/aws/aws-sdk-go-v2/internal/ini	indirect	patch	`v1.8.4` -> `v1.8.5`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	patch	`v1.13.4` -> `v1.13.6`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	patch	`v1.13.17` -> `v1.13.19`
github.com/aws/aws-sdk-go-v2/service/signin	indirect	patch	`v1.0.5` -> `v1.0.7`
github.com/clipperhouse/displaywidth	indirect	minor	`v0.9.0` -> `v0.11.0`
github.com/google/certificate-transparency-go	require	patch	`v1.3.2` -> `v1.3.3`
github.com/google/go-containerregistry	indirect	minor	`v0.20.7` -> `v0.21.2`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.11` -> `v0.3.14`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.19` -> `v0.0.20`
github.com/olekukonko/ll	indirect	patch	`v0.1.4` -> `v0.1.7`
github.com/petermattis/goid	indirect	digest	`7c7de50` -> `17d1149`
github.com/prometheus/procfs	indirect	minor	`v0.19.2` -> `v0.20.1`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.65.0` -> `v0.66.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.65.0` -> `v0.66.0`
go.step.sm/crypto	require	patch	`v0.76.0` -> `v0.76.2`
golang.org/x/crypto	indirect	minor	`v0.47.0` -> `v0.48.0`
golang.org/x/net	indirect	minor	`v0.49.0` -> `v0.51.0`
golang.org/x/oauth2	indirect	minor	`v0.34.0` -> `v0.35.0`
golang.org/x/sys	indirect	minor	`v0.40.0` -> `v0.41.0`
golang.org/x/term	indirect	minor	`v0.39.0` -> `v0.40.0`
golang.org/x/text	indirect	minor	`v0.33.0` -> `v0.34.0`
google.golang.org/api	require	minor	`v0.265.0` -> `v0.269.0`
google.golang.org/genproto	indirect	digest	`546029d` -> `a57be14`
google.golang.org/genproto/googleapis/api	indirect	digest	`546029d` -> `a57be14`
google.golang.org/genproto/googleapis/api	require	digest	`546029d` -> `a57be14`
google.golang.org/genproto/googleapis/rpc	indirect	digest	`546029d` -> `a57be14`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

FiloSottile/edwards25519 (filippo.io/edwards25519)

`v1.2.0`

Compare Source

`v1.1.1`

Compare Source

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.7.0`: 1.7.0

Compare Source

What's Changed

Add WithPrompt option for AuthCodeURL by @szogoon in #585
Use form_post response mode for interactive authentication by @ashok672 in #596

New Contributors

@szogoon made their first contribution in #585
@ashok672 made their first contribution in #596

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.6.0...v1.7.0

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/credentials)

`v1.19.11`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.19.11
- Bug Fix: Add missing ChecksumType field to UploadOutput.
github.com/aws/aws-sdk-go-v2/service/cloudformation: v1.67.0
- Feature: Add new warning type 'EXCLUDED_RESOURCES'
github.com/aws/aws-sdk-go-v2/service/connectcases: v1.32.0
- Feature: New Search All Related Items API enables searching related items across cases
github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.51.0
- Feature: Add support for dual-stack account endpoint generation
github.com/aws/aws-sdk-go-v2/service/guardduty: v1.64.3
- Documentation: Updated descriptions for the Location parameter in CreateTrustedEntitySet and CreateThreatEntitySet.
github.com/aws/aws-sdk-go-v2/service/synthetics: v1.41.0
- Feature: Adds support to configure canaries with pre-configured blueprint code on supported runtime versions. This behavior can be controlled via the new BlueprintTypes property exposed in the CreateCanary and UpdateCanary APIs.

clipperhouse/displaywidth (github.com/clipperhouse/displaywidth)

`v0.11.0`

Compare Source

`v0.10.0`

Compare Source

google/certificate-transparency-go (github.com/google/certificate-transparency-go)

`v1.3.3`

Compare Source

CTFE

set explicit http server timeouts by @1seal in #1755
Regenerate protos by @phbnf in #1743
Update instructions to generate protos by @phbnf in #1742
ctfe: Enforce max request and header size limits by @fghanmi in #1720
[CTFE] Add a /log.v3.json endpoint to help satisfy a requirement of the Chrome CT Log Policy by @robstradling in #1703

Tools

Log list library

Support tiled logs in the loglist3 logfilter functions by @robstradling in #1762
Add FindTiledLog* functions by @robstradling in #1763

Submission proxy

Cap request body size in submission proxy by @1seal in #1754
add some additional log messages around CT log compatibility by @breadyzhang in #1734

Other

jsonclient: don't depend on error text from other packages in tests by @neild in #1741
Parse klog flags in preloader. by @phbnf in #1711
Fix incorrect leaf hash calculation for precertificates in upload command by @Barre in #1710

Misc

Remove internal witness by @roger2hk in #1765
Update transparency-dev slack invite link by @taknira in #1718

Dependency updates

Bump golangci-lint version to v2.10.1 by @roger2hk in #1769
Bump the all-deps group with 7 updates by @dependabot[bot] in #1768
Bump github/codeql-action from 4.32.0 to 4.32.4 in the all-deps group by @dependabot[bot] in #1767
Bump the docker-deps group across 2 directories with 2 updates by @dependabot[bot] in #1766
Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 by @dependabot[bot] in #1764
Bump the docker-deps group across 5 directories with 3 updates by @dependabot[bot] in #1758
Bump the all-deps group with 3 updates by @dependabot[bot] in #1757
Bump golang.org/x/crypto from 0.46.0 to 0.47.0 in the all-deps group by @dependabot[bot] in #1756
Bumped linter and fixed a potential race condition by @mhutchinson in #1753
Bump the docker-deps group across 5 directories with 3 updates by @dependabot[bot] in #1750
Bump the all-deps group with 9 updates by @dependabot[bot] in #1749
Bump the all-deps group across 1 directory with 5 updates by @dependabot[bot] in #1748
Bump the all-deps group with 4 updates by @dependabot[bot] in #1745
Bump the docker-deps group across 4 directories with 1 update by @dependabot[bot] in #1744
Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #1740
Bump the docker-deps group across 5 directories with 3 updates by @dependabot[bot] in #1737
Bump the all-deps group with 4 updates by @dependabot[bot] in #1736
Bump the all-deps group with 2 updates by @dependabot[bot] in #1735
Bump Go from 1.23 to 1.24 by @roger2hk in #1733
Bump the docker-deps group across 4 directories with 2 updates by @dependabot[bot] in #1732
Bump the all-deps group with 10 updates by @dependabot[bot] in #1731
Bump the all-deps group with 3 updates by @dependabot[bot] in #1730
Bump the docker-deps group across 4 directories with 2 updates by @dependabot[bot] in #1727
Bump the all-deps group with 2 updates by @dependabot[bot] in #1726
Bump the all-deps group with 6 updates by @dependabot[bot] in #1725
Bump github/codeql-action from 3.29.2 to 3.29.5 in the all-deps group by @dependabot[bot] in #1723
Bump the docker-deps group across 5 directories with 2 updates by @dependabot[bot] in #1722
Bump the all-deps group with 8 updates by @dependabot[bot] in #1721
Bump the all-deps group with 8 updates by @dependabot[bot] in #1717
Bump the docker-deps group across 4 directories with 2 updates by @dependabot[bot] in #1716
Bump github/codeql-action from 3.29.0 to 3.29.2 in the all-deps group by @dependabot[bot] in #1715
add continuous mode by @phbnf in #1714
Bump golangci-lint from 2.0.2 to 2.1.6 by @roger2hk in #1713
Bump the all-deps group with 4 updates by @dependabot[bot] in #1706

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.21.2`

Compare Source

What's Changed

Better handle redirects to https in ping by @jonjohnsonjr in #2225

Full Changelog: google/go-containerregistry@v0.21.1...v0.21.2

`v0.21.1`

Compare Source

This release fixes a regression in crane introduced in the previous release.

What's Changed

Add WithFileBufferedOpener for file-backed daemon image buffering by @twdamhore in #2214
crane: fix case in auth response json by @aelindeman in #2218

New Contributors

@twdamhore made their first contribution in #2214
@aelindeman made their first contribution in #2218

Full Changelog: google/go-containerregistry@v0.21.0...v0.21.1

`v0.21.0`

Compare Source

This release updates the minimum Go version to 1.25.6.

What's Changed

fix(mutate): don't skip dir replacements via whiteout in export by @r4f4 in #2191
Improve performance of v1.NewHash by @bmoylan in #2194
Bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #2207
Bump the root-deps group across 1 directory with 7 updates by @dependabot[bot] in #2195
Fix error messages in crane_test.go by @jammie-jelly in #2189
Bump go version across packages to 1.25.6 by @Subserial in #2211
Join go.mod dependency updates by @Subserial in #2212
Bump the go-deps group across 3 directories with 3 updates by @dependabot[bot] in #2213
Disable taint gosec lints by @Subserial in #2215
Update go version used in goreleaser by @Subserial in #2216

New Contributors

@r4f4 made their first contribution in #2191
@jammie-jelly made their first contribution in #2189

Full Changelog: google/go-containerregistry@v0.20.7...v0.21.0

`v0.20.8`

Compare Source

googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)

`v0.3.14`

Compare Source

What's Changed

chore: Update main.go to increase proxyrequesttimeout by @agrawalradhika-cell in #187
chore: Increase proxy request timeout for rsync gcloud fix by @agrawalradhika-cell in #188
feat: Update version.txt to 0.3.14 by @agrawalradhika-cell in #189

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.13...v0.3.14

`v0.3.13`

Compare Source

What's Changed

feat: support non-mtls requests as well by @sai-sunder-s in #185
feat: Update version.txt to 0.3.12 by @agrawalradhika-cell in #183
feat: Update version.txt to 0.3.13 by @agrawalradhika-cell in #186

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.12...v0.3.13

`v0.3.12`

Compare Source

What's Changed

chore: Update go.mod to upgrade the go version to 1.24.11 by @agrawalradhika-cell in #180

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.11...v0.3.12

mattn/go-runewidth (github.com/mattn/go-runewidth)

`v0.0.20`

Compare Source

olekukonko/ll (github.com/olekukonko/ll)

prometheus/procfs (github.com/prometheus/procfs)

`v0.20.1`

Compare Source

What's Changed

nvme: Parse NVMe namespace details by @ShashwatHiregoudar in #765
Fix bcachefs parsing by @ananthb in #789
Synchronize common files from prometheus/prometheus by @prombot in #788
Update sysfs/class_thermal: continue on EINVAL in parseClassThermalZone to ignore only invalid thermal zones which raise "invalid argument" by @ccastiglione-reply in #763

New Contributors

@ccastiglione-reply made their first contribution in #763

Full Changelog: prometheus/procfs@v0.20.0...v0.20.1

`v0.20.0`

Compare Source

What's Changed

Synchronize common files from prometheus/prometheus by @prombot in #747
Synchronize common files from prometheus/prometheus by @prombot in #766
build(deps): bump golang.org/x/sync from 0.17.0 to 0.19.0 by @dependabot[bot] in #773
build(deps): bump golang.org/x/sys from 0.37.0 to 0.39.0 by @dependabot[bot] in #772
Synchronize common files from prometheus/prometheus by @prombot in #774
Fix /proc/interrupts by @ffyuanda in #775
Synchronize common files from prometheus/prometheus by @prombot in #778
Synchronize common files from prometheus/prometheus by @prombot in #779
Migrate to GitHub actions by @SuperQ in #780
build(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by @dependabot[bot] in #782
Synchronize common files from prometheus/prometheus by @prombot in #785
bcachefs support by @ananthb in #750
build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #781
feat: parse capabilities in /proc/pid/status by @biscout42 in #784
class_cooling_device: ignore EINVAL (etc) when reading files. by @malcolmr in #783
Add type and name to the DRM parser class by @Deezzir in #672

New Contributors

@ffyuanda made their first contribution in #775
@ananthb made their first contribution in #750
@biscout42 made their first contribution in #784
@malcolmr made their first contribution in #783
@Deezzir made their first contribution in #672

Full Changelog: prometheus/procfs@v0.19.2...v0.20.0

smallstep/crypto (go.step.sm/crypto)

`v0.76.2`

Compare Source

`v0.76.1`

Compare Source

googleapis/google-api-go-client (google.golang.org/api)

`v0.269.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3512) (7565f1c)

Bug Fixes

generator: Handle preview version pkg name (#3511) (2a249ce)

`v0.268.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3502) (5ccf9b9)
all: Auto-regenerate discovery clients (#3505) (f405df9)
all: Auto-regenerate discovery clients (#3506) (cda923a)
all: Auto-regenerate discovery clients (#3507) (e9015cc)
all: Auto-regenerate discovery clients (#3508) (20fbcc1)
all: Auto-regenerate discovery clients (#3509) (20c1e0f)
Update to go 1.26 (#3504) (cc5baec)

`v0.267.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3492) (62e5a8e)
all: Auto-regenerate discovery clients (#3494) (832516f)
all: Auto-regenerate discovery clients (#3495) (1415f4c)
all: Auto-regenerate discovery clients (#3496) (633a3a2)
all: Auto-regenerate discovery clients (#3497) (6463f72)
all: Auto-regenerate discovery clients (#3499) (ab20d56)
all: Auto-regenerate discovery clients (#3500) (8a6df06)

`v0.266.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3483) (a3a61ce)
all: Auto-regenerate discovery clients (#3485) (200d140)
all: Auto-regenerate discovery clients (#3486) (870909e)
all: Auto-regenerate discovery clients (#3487) (6018e80)
all: Auto-regenerate discovery clients (#3489) (402353b)
all: Auto-regenerate discovery clients (#3490) (49c652f)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-02-09T06:32:05Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

13 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.25.1` -> `1.25.6`
`google.golang.org/grpc`	`v1.78.0` -> `v1.79.1`
`cloud.google.com/go/kms`	`v1.25.0` -> `v1.26.0`
`github.com/aws/aws-sdk-go-v2`	`v1.41.1` -> `v1.41.3`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.17` -> `v2.7.19`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.30.9` -> `v1.30.12`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.35.13` -> `v1.35.16`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.41.6` -> `v1.41.8`
`github.com/aws/smithy-go`	`v1.24.0` -> `v1.24.2`
`github.com/googleapis/gax-go/v2`	`v2.16.0` -> `v2.17.0`
`go.opentelemetry.io/otel`	`v1.40.0` -> `v1.41.0`
`go.opentelemetry.io/otel/metric`	`v1.40.0` -> `v1.41.0`
`go.opentelemetry.io/otel/sdk`	`v1.40.0` -> `v1.41.0`
`go.opentelemetry.io/otel/trace`	`v1.40.0` -> `v1.41.0`

File name: hack/tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.0` -> `1.25.0`
`github.com/clipperhouse/uax29/v2`	`v2.5.0` -> `v2.7.0`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot added the dependencies label Feb 8, 2026

red-hat-konflux bot changed the title ~~chore(deps): update module golang.org/x/oauth2 to v0.35.0~~ chore(deps): update go dependencies Feb 8, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 2 times, most recently from 5a587d4 to 1343fe6 Compare February 9, 2026 06:32

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 14 times, most recently from 109dd6a to b7cc8d4 Compare February 16, 2026 13:32

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 11 times, most recently from b754e7f to c321b64 Compare February 20, 2026 13:49

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 20 times, most recently from 2a1e838 to 2e46b8f Compare March 2, 2026 14:15

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 8 times, most recently from 3133b9a to 2b46977 Compare March 6, 2026 10:07

chore(deps): update go dependencies

dc041d6

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch from 2b46977 to dc041d6 Compare March 6, 2026 14:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update go dependencies#351

chore(deps): update go dependencies#351
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.2from
konflux/mintmaker/release-1.2/go-deps

red-hat-konflux bot commented Feb 8, 2026 •

edited

Loading

Uh oh!

red-hat-konflux bot commented Feb 9, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux bot commented Feb 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.7.0: 1.7.0

What's Changed

New Contributors

General Highlights

Module Highlights

CTFE

Tools

Log list library

Submission proxy

Other

Misc

Dependency updates

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Features

Bug Fixes

Features

Features

Features

Configuration

Documentation

Uh oh!

red-hat-konflux bot commented Feb 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

File name: hack/tools/go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux bot commented Feb 8, 2026 •

edited

Loading

`v1.7.0`: 1.7.0

red-hat-konflux bot commented Feb 9, 2026 •

edited

Loading