chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #526 · securesign/rekor

red-hat-konflux · 2026-01-13T17:50:43Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
cel.dev/expr	indirect	minor	`v0.24.0` -> `v0.25.1`
cloud.google.com/go	indirect	minor	`v0.121.2` -> `v0.123.0`
cloud.google.com/go/auth	indirect	minor	`v0.16.2` -> `v0.18.2`
cloud.google.com/go/compute/metadata	indirect	minor	`v0.7.0` -> `v0.9.0`
cloud.google.com/go/iam	indirect	patch	`v1.5.2` -> `v1.5.3`
cloud.google.com/go/kms	indirect	minor	`v1.22.0` -> `v1.23.2`
cloud.google.com/go/longrunning	indirect	minor	`v0.6.7` -> `v0.8.0`
filippo.io/edwards25519	indirect	minor	`v1.1.0` -> `v1.2.0`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.18.0` -> `v1.21.0`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	minor	`v1.10.1` -> `v1.13.1`
github.com/Azure/azure-sdk-for-go/sdk/internal	indirect	patch	`v1.11.1` -> `v1.11.2`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.4.2` -> `v1.7.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	indirect	minor	`v0.51.0` -> `v0.55.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	indirect	minor	`v0.51.0` -> `v0.55.0`
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	indirect	minor	`v1.6.10` -> `v1.7.6`
github.com/aws/aws-sdk-go-v2/credentials	indirect	minor	`v1.17.69` -> `v1.19.11`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	minor	`v1.16.31` -> `v1.18.19`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	indirect	minor	`v1.17.77` -> `v1.22.6`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	minor	`v1.3.35` -> `v1.4.19`
github.com/aws/aws-sdk-go-v2/internal/ini	indirect	patch	`v1.8.3` -> `v1.8.5`
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	minor	`v1.3.34` -> `v1.4.20`
github.com/aws/aws-sdk-go-v2/service/internal/checksum	indirect	minor	`v1.7.2` -> `v1.9.11`
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	indirect	minor	`v1.18.15` -> `v1.19.19`
github.com/aws/smithy-go	indirect	minor	`v1.22.3` -> `v1.23.2`
github.com/cncf/xds/go	indirect	digest	`2ac532f` -> `dba9d58`
github.com/danieljoos/wincred	indirect	patch	`v1.2.2` -> `v1.2.3`
github.com/envoyproxy/protoc-gen-validate	indirect	minor	`v1.2.1` -> `v1.3.3`
github.com/go-openapi/analysis	indirect	minor	`v0.23.0` -> `v0.24.2`
github.com/go-openapi/errors	indirect	patch	`v0.22.1` -> `v0.22.7`
github.com/go-openapi/errors	require	patch	`v0.22.1` -> `v0.22.7`
github.com/go-openapi/inflect	indirect	patch	`v0.21.2` -> `v0.21.5`
github.com/go-openapi/jsonpointer	indirect	minor	`v0.21.1` -> `v0.22.5`
github.com/go-openapi/jsonreference	indirect	patch	`v0.21.0` -> `v0.21.5`
github.com/go-openapi/loads	indirect	minor	`v0.22.0` -> `v0.23.2`
github.com/go-openapi/loads	require	minor	`v0.22.0` -> `v0.23.2`
github.com/go-openapi/runtime	indirect	minor	`v0.28.0` -> `v0.29.2`
github.com/go-openapi/runtime	require	minor	`v0.28.0` -> `v0.29.2`
github.com/go-openapi/spec	indirect	minor	`v0.21.0` -> `v0.22.4`
github.com/go-openapi/spec	require	minor	`v0.21.0` -> `v0.22.4`
github.com/go-openapi/strfmt	indirect	minor	`v0.23.0` -> `v0.25.0`
github.com/go-openapi/strfmt	require	minor	`v0.23.0` -> `v0.25.0`
github.com/go-openapi/swag	indirect	minor	`v0.23.1` -> `v0.25.5`
github.com/go-openapi/swag	require	minor	`v0.23.1` -> `v0.25.5`
github.com/go-openapi/validate	indirect	minor	`v0.24.0` -> `v0.25.1`
github.com/go-openapi/validate	require	minor	`v0.24.0` -> `v0.25.1`
github.com/go-sql-driver/mysql	require	patch	`v1.9.2` -> `v1.9.3`
github.com/go-swagger/go-swagger	require	minor	`v0.32.3` -> `v0.33.1`
github.com/google/go-containerregistry	indirect	minor	`v0.20.3` -> `v0.21.2`
github.com/google/pprof	indirect	digest	`c6617b8` -> `a15ffb7`
github.com/google/rpmpack	require	patch	`v0.7.0` -> `v0.7.1`
github.com/google/wire	indirect	minor	`v0.6.0` -> `v0.7.0`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.6` -> `v0.3.14`
github.com/in-toto/in-toto-golang	require	minor	`v0.9.0` -> `v0.10.0`
github.com/klauspost/compress	indirect	patch	`v1.18.0` -> `v1.18.4`
github.com/letsencrypt/boulder	indirect	minor	`v0.0.0-20240620165639-de9c06129bec` -> `v0.20260303.0`
github.com/mailru/easyjson	indirect	patch	`v0.9.0` -> `v0.9.1`
github.com/mattn/go-sqlite3	indirect	patch	`v1.14.28` -> `v1.14.34`
github.com/prometheus/client_golang	require	minor	`v1.22.0` -> `v1.23.2`
github.com/prometheus/common	indirect	minor	`v0.64.0` -> `v0.67.5`
github.com/prometheus/procfs	indirect	minor	`v0.16.1` -> `v0.20.1`
github.com/sagikazarmark/locafero	indirect	minor	`v0.9.0` -> `v0.12.0`
github.com/secure-systems-lab/go-securesystemslib	require	minor	`v0.9.0` -> `v0.10.0`
github.com/sigstore/protobuf-specs	require	minor	`v0.4.2` -> `v0.5.0`
github.com/sigstore/sigstore	require	minor	`v1.9.5` -> `v1.10.4`
github.com/sigstore/sigstore/pkg/signature/kms/aws	require	minor	`v1.9.4` -> `v1.10.4`
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	minor	`v1.9.4` -> `v1.10.4`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	minor	`v1.9.4` -> `v1.10.4`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	require	minor	`v1.9.4` -> `v1.10.4`
github.com/spf13/afero	indirect	minor	`v1.14.0` -> `v1.15.0`
github.com/spf13/cast	indirect	minor	`v1.9.0` -> `v1.10.0`
github.com/spf13/cobra	require	minor	`v1.9.1` -> `v1.10.2`
github.com/spf13/pflag	indirect	patch	`v1.0.6` -> `v1.0.10`
github.com/spf13/pflag	require	patch	`v1.0.6` -> `v1.0.10`
github.com/spf13/viper	indirect	minor	`v1.20.1` -> `v1.21.0`
github.com/spf13/viper	require	minor	`v1.20.1` -> `v1.21.0`
github.com/stretchr/testify	require	minor	`v1.10.0` -> `v1.11.1`
github.com/toqueteos/webbrowser	indirect	patch	`v1.2.0` -> `v1.2.1`
github.com/ulikunitz/xz	indirect	patch	`v0.5.12` -> `v0.5.15`
go.mongodb.org/mongo-driver	indirect	patch	`v1.17.3` -> `v1.17.9`
go.opentelemetry.io/auto/sdk	indirect	minor	`v1.1.0` -> `v1.2.1`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.61.0` -> `v0.67.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.61.0` -> `v0.67.0`
gocloud.dev	require	minor	`v0.40.0` -> `v0.45.0`
golang.org/x/crypto	indirect	minor	`v0.38.0` -> `v0.48.0`
golang.org/x/crypto	require	minor	`v0.40.0` -> `v0.48.0`
golang.org/x/exp	require	digest	`b6e5de4` -> `3dfff04`
golang.org/x/mod	indirect	minor	`v0.24.0` -> `v0.33.0`
golang.org/x/mod	require	minor	`v0.25.0` -> `v0.33.0`
golang.org/x/net	require	minor	`v0.42.0` -> `v0.51.0`
golang.org/x/oauth2	indirect	minor	`v0.30.0` -> `v0.35.0`
golang.org/x/sync	indirect	minor	`v0.14.0` -> `v0.19.0`
golang.org/x/sync	require	minor	`v0.16.0` -> `v0.19.0`
golang.org/x/sys	indirect	minor	`v0.33.0` -> `v0.41.0`
golang.org/x/sys	indirect	minor	`v0.34.0` -> `v0.41.0`
golang.org/x/term	indirect	minor	`v0.33.0` -> `v0.40.0`
golang.org/x/text	indirect	minor	`v0.25.0` -> `v0.34.0`
golang.org/x/text	indirect	minor	`v0.27.0` -> `v0.34.0`
golang.org/x/time	indirect	minor	`v0.12.0` -> `v0.14.0`
golang.org/x/tools	indirect	minor	`v0.33.0` -> `v0.42.0`
google.golang.org/api	require	minor	`v0.237.0` -> `v0.269.0`
google.golang.org/genproto	indirect	digest	`200df99` -> `a57be14`
google.golang.org/genproto/googleapis/api	indirect	digest	`200df99` -> `a57be14`
google.golang.org/genproto/googleapis/rpc	require	digest	`513f239` -> `a57be14`
sigs.k8s.io/yaml	require	minor	`v1.5.0` -> `v1.6.0`
software.sslmate.com/src/go-pkcs12	indirect	minor	`v0.5.0` -> `v0.7.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

google/cel-spec (cel.dev/expr)

`v0.25.1`

Compare Source

Minor additions to the v0.25.0 release

What's Changed

Remove test/v1 directory and its protos by @l46kok in #487
Add parsing tests for string and bytes literals by @hudlow in #489

Full Changelog: google/cel-spec@v0.25.0...v0.25.1

`v0.25.0`

Compare Source

What's Changed

Initial version of the policy specification by @jcking in #477
Remove orphaned ToC entry for enums as ints from the specification by @timostamm in #476
Tests for selector, function, and field names formerly defined as reserved by @hudlow in #480
Add a test case for lastIndexOf in string_ext against an empty string by @l46kok in #468
Remove TOC from language definition by @hudlow in #482
Remove int(enum) -> int signature by @hudlow in #483
Clarify formatting decimals, add %f formatting test cases around rounding by @l46kok in #485
Remove remaining google.rpc.Status deps from cel-spec by @TristonianJones in #486

New Contributors

@timostamm made their first contribution in #476

Full Changelog: google/cel-spec@v0.24.0...v0.25.0

googleapis/google-cloud-go (cloud.google.com/go)

`v0.123.0`

Compare Source

Features

internal/stategen: Populate the latest googleapis commit (#12880) (7b017a0)
librariangen: Implement the build command (#12817) (14734c8)

Bug Fixes

internal/librariangen: Add link to source commit in release notes (#12881) (1c06cc6)
internal/librariangen: Fix CHANGES.md headers (#12849) (baf515d)
internal/librariangen: Remove go mod init/tidy from postprocessor (#12832) (1fe506a)
internal/librariangen: Test for error path with flags (#12830) (f0da7b2)
internal/postprocessor: Add dlp to skip-module-scan-paths (#12857) (45a7d9b)
librariangen: Honor original container contract (#12846) (71c8fd3)
librariangen: Improvements to release-init (#12842) (0db677a)
stategen: Specify an appropriate tag format for google-cloud-go (#12835) (ffcff33)

`v0.122.0`

Compare Source

Features

internal/librariangen: Add release-init command (#12751) (52e84cc)

Bug Fixes

internal/godocfx: Better support for v2 modules (#12797) (4bc8785)
internal/godocfx: Module detection when tidy errors (#12801) (83d46cd)
internal/librariangen: Fix goimports errors (#12765) (83bdaa4)

`v0.121.6`

Compare Source

Bug Fixes

internal/librariangen: Fix Dockerfile permissions for go mod tidy (#12704) (0e70a0b)

`v0.121.5`

Compare Source

Bug Fixes

internal/librariangen: Get README title from service config yaml (#12676) (b3b8f70)
internal/librariangen: Update source_paths to source_roots in generate-request.json (#12691) (2adb6f9)

`v0.121.4`

Compare Source

Bug Fixes

geminidataanalytics: Correct resource reference type for parent field in data_chat_service.proto (98ba6f0)
internal/postprocessor: Add git (#12524) (82030ee)

`v0.121.3`

Compare Source

Documentation

impersonate: Address TODO in impersonate/example_test.go (#12401) (dd096ec)

FiloSottile/edwards25519 (filippo.io/edwards25519)

`v1.2.0`

Compare Source

`v1.1.1`

Compare Source

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.7.0`: 1.7.0

Compare Source

What's Changed

Add WithPrompt option for AuthCodeURL by @szogoon in #585
Use form_post response mode for interactive authentication by @ashok672 in #596

New Contributors

@szogoon made their first contribution in #585
@ashok672 made their first contribution in #596

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.6.0...v1.7.0

`v1.6.0`

Compare Source

What's Changed

Deprecate ROPC flow by @Ugonnaak1 in #584
Added a cache lookup for AcquireTokenByCredential by @4gust in #590
Fix panic in AcquireTokenSilent for public clients due to nil Credential by @4gust in #581
Adding support for FMI (Federated Managed Identity) by @4gust in #586
Adjust issuer validation to handle cases where instance discovery is not performed by @Avery-Dunn in #591

New Contributors

@Ugonnaak1 made their first contribution in #584

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.5.0...v1.6.0

`v1.5.0`

Compare Source

What's Changed

Bump github.com/golang-jwt/jwt/v5 from 5.0.0 to 5.2.2 by @dependabot[bot] in #563
Added a FIC test by @4gust in #557
Fix CodeQL warning 'Cross-site scripting vulnerability due to user-provided value by @fengga in #566
fix: support both login.partner.microsoftonline.cn and login.chinaclo… by @Achiket123 in #575
Add validation for issuer returned by OIDC endpoint by @Avery-Dunn in #576
#572 - Update spelling of client by @equalsgibson in #573

New Contributors

@dependabot[bot] made their first contribution in #563
@fengga made their first contribution in #566
@Achiket123 made their first contribution in #575
@Avery-Dunn made their first contribution in #576
@equalsgibson made their first contribution in #573

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.4.2...v1.5.0

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

`v0.55.0`: v1.31.0/v0.55.0

Compare Source

What's Changed

Add feature gate to allow sending log trace context without a prefix by @dashpole in #1079
[exporter/collector/logs] Support httpRequest.status field as integer or string containing an integer. by @franciscovalentecastro in #1080
Fix CI by @dashpole in #1086
precompile regex from resource filters by @dashpole in #1085
Add region tags in OTLP Trace Sample by @psx95 in #1089
[exporter/collector/logs] Create Int32OrString and Int64OrString to handle integer fields in gcp.http_request. by @franciscovalentecastro in #1091
[chore] Pre-release steps for opentelemetry-operations-go repo release. by @franciscovalentecastro in #1092

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.54.0...v0.55.0

`v0.54.0`: v1.30.0/v0.54.0

Compare Source

What's Changed

Add OTel Logging sample by @psx95 in #1055
Update slog example by @psx95 in #1056
Show structured logging in Go by @psx95 in #1057
log project name when metric requests fail by @dashpole in #1059
Migrate from pkg/translator/prometheus to otlptranslator by @dashpole in #1061
feat: Populate description for gcm.TimeSeries by @bwplotka in #1063
Bump mapstructure dependency manually by @braydonk in #1066
post-release: fix segfault in script when no replace is found by @ridwanmsharif in #1025
Update all dependencies, bump go version by @dashpole in #1069
prepare for v1.30.0/v0.54.0 by @dashpole in #1072

New Contributors

@bwplotka made their first contribution in #1063

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0

`v0.53.0`: v1.29.0/v0.53.0

Compare Source

What's Changed

exporter/metric: add WithMetricClient option by @enocom in #1033
go.mod: use go 1.23 by @braydonk in #1048

New Contributors

@enocom made their first contribution in #1033

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.52.0...v0.53.0

`v0.52.0`: v1.28.0/v0.52.0

Compare Source

What's Changed

chore(deps): update go version from 1.2x.x to 1.23.8 and 1.24.0 to 1.24.2 in go.mod files and tests. by @franciscovalentecastro in #1036
exporter/collector: Add mapping for LogSeverity values set as SeverityText to correct SeverityNumber. by @franciscovalentecastro in #1031
Allow overriding Project ID using env var by @psx95 in #1040
Update dependencies and tooling by @psx95 in #1042
Prepare for v1.28.0/v0.52.0 by @psx95 in #1045

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.51.0...v0.52.0

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream)

`v1.7.2`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/service/amp: v1.34.0
- Feature: Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus
github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.39.0
- Feature: With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded.
github.com/aws/aws-sdk-go-v2/service/dsql: v1.5.0
- Feature: Features: support for customer managed encryption keys
github.com/aws/aws-sdk-go-v2/service/glue: v1.113.0
- Feature: This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning
github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.7.2
- Bug Fix: Handle checksum for unseekable body with 0 content length

`v1.7.1`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/service/acm: v1.32.0
- Feature: Add support for file-based HTTP domain control validation, available through Amazon CloudFront.
github.com/aws/aws-sdk-go-v2/service/cloudfront: v1.46.0
- Feature: Add distribution tenant, connection group, and multi-tenant distribution APIs to the CloudFront SDK.
github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.43.1
- Documentation: Doc only update for GSI descriptions.
github.com/aws/aws-sdk-go-v2/service/imagebuilder: v1.42.0
- Feature: Add integration with SSM Parameter Store to Image Builder.
github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.7.1
- Bug Fix: Don't emit warnings about lack of checksum validation for non-200 responses.

`v1.7.0`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/service/ec2: v1.209.0
- Feature: This release adds the GroupLongName field to the response of the DescribeAvailabilityZones API.
github.com/aws/aws-sdk-go-v2/service/ecr: v1.43.0
- Feature: This release adds Amazon ECR to Amazon ECR pull through cache rules support.
github.com/aws/aws-sdk-go-v2/service/ecs: v1.54.2
- Documentation: This is a documentation only update for Amazon ECS to address various tickets.
github.com/aws/aws-sdk-go-v2/service/inspector2: v1.36.0
- Feature: Adding componentArn to network reachability details
github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.7.0
- Feature: Add extra check during output checksum validation so the validation skip warning would not be logged if object is not fetched from s3
github.com/aws/aws-sdk-go-v2/service/medialive: v1.71.0
- Feature: Add an enum option DISABLED for Output Locking Mode under Global Configuration.

aws/smithy-go (github.com/aws/smithy-go)

`v1.23.2`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.23.2
- Bug Fix: Adjust the initial sizes of each middleware phase to avoid some unnecessary reallocation.
- Bug Fix: Avoid unnecessary allocation overhead from the metrics system when not in use.

`v1.23.1`

Compare Source

`v1.23.0`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.23.0
- Feature: Sort map keys in JSON Document types.

`v1.22.5`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.22.5
- Feature: Add HTTP interceptors.

`v1.22.4`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.22.4
- Bug Fix: Fix CBOR serd empty check for string and enum fields
- Bug Fix: Fix HTTP metrics data race.
- Bug Fix: Replace usages of deprecated ioutil package.

danieljoos/wincred (github.com/danieljoos/wincred)

`v1.2.3`

Compare Source

What's Changed

Test newer Go versions by @danieljoos in #63
gha: update go matrix; add go1.23, stable and oldstable by @thaJeztah in #77
Bump github.com/stretchr/testify from 1.9.0 to 1.11.1 by @dependabot[bot] in #74
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #71
fix unsafe uintptr usage to be GC-safe on go1.25 by @thaJeztah in #78
Bump actions/setup-go from 5 to 6 by @dependabot[bot] in #75
Bump codecov/codecov-action from 4 to 5 by @dependabot[bot] in #69

New Contributors

@thaJeztah made their first contribution in #77

Full Changelog: danieljoos/wincred@v1.2.2...v1.2.3

envoyproxy/protoc-gen-validate (github.com/envoyproxy/protoc-gen-validate)

`v1.3.3`

Compare Source

One more release attempt to get Python published on PyPI. 😄

What's Changed

Update Python 3.9 references to 3.10 by @stefanvanburen in bufbuild#1370

Full Changelog: bufbuild/protoc-gen-validate@v1.3.2...v1.3.3

`v1.3.2`

Compare Source

Fixing the v1.3.1 release, which was fixing the v1.3.0 release 😄.

What's Changed

Attempt to fix release by @stefanvanburen in bufbuild#1368

Full Changelog: bufbuild/protoc-gen-validate@v1.3.1...v1.3.2

`v1.3.1`

Compare Source

This is a release to get out Python support for 3.13, which failed to publish to PyPI in v1.3.0.

What's Changed

Bump the java group across 1 directory with 4 updates by @dependabot[bot] in bufbuild#1332
Bump actions/checkout from 5 to 6 in the github-actions group by @dependabot[bot] in bufbuild#1330
Fix Java deployment by @pkwarren in bufbuild#1335
Update settings.xml to use SONATYPE_USERNAME env var by @pkwarren in bufbuild#1336
Run deployment with release profile by @pkwarren in bufbuild#1337
Remove maven settings.xml file by @pkwarren in bufbuild#1338
Bump the java group in /java with 2 updates by @dependabot[bot] in bufbuild#1334
Bump the github-actions group with 2 updates by @dependabot[bot] in bufbuild#1341
Bump the java group in /java with 2 updates by @dependabot[bot] in bufbuild#1340
Bump the go-tests group in /tests with 2 updates by @dependabot[bot] in bufbuild#1339
Bump the java group across 1 directory with 2 updates by @dependabot[bot] in bufbuild#1343
Support for latest setuptools by @matejsp in bufbuild#1345
Replace deprecated java_proto_library from rules_java by @mmorel-35 in bufbuild#1349
Bump golang.org/x/net from 0.48.0 to 0.49.0 in /tests in the go-tests group by @dependabot[bot] in bufbuild#1350
Bump the java group across 1 directory with 4 updates by @dependabot[bot] in bufbuild#1351
Bump wheel from 0.45.1 to 0.46.2 by @dependabot[bot] in bufbuild#1352
Update go and deps by @rodaine in bufbuild#1355
Update python and deps by @rodaine in bufbuild#1354
Bump the java group in /java with 2 updates by @dependabot[bot] in bufbuild#1356
Bump the python-root group across 1 directory with 4 updates by @dependabot[bot] in bufbuild#1357

Full Changelog: bufbuild/protoc-gen-validate@v1.3.0...v1.3.1

`v1.3.0`

Compare Source

What's Changed

Update README.md by @nicksnyder in bufbuild#1233
Fix unreliable asset generation by @nicksnyder in bufbuild#1235
Add Maven developers entry by @pkwarren in bufbuild#1237
Bump the java group across 1 directory with 5 updates by @dependabot[bot] in bufbuild#1230
Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 in the go group by @dependabot[bot] in bufbuild#1239
Fix in rule for repeated int32 by @mortezaPRK in bufbuild#1240
Bump the python-root group across 1 directory with 8 updates by @dependabot[bot] in bufbuild#1243
Support in rule for repeated int32 and int64 fields by @mortezaPRK in bufbuild#1241
Bump protobuf from 5.29.1 to 5.29.3 in /python in the python group across 1 directory by @dependabot[bot] in bufbuild#1244
Link to migration guide by @nicksnyder in bufbuild#1247
Bump the go group across 1 directory with 2 updates by @dependabot[bot] in bufbuild#1251
Bump the go-tests group across 1 directory with 2 updates by @dependabot[bot] in bufbuild#1250
Bump flake8 from 7.1.1 to 7.1.2 in the python-root group by @dependabot[bot] in bufbuild#1249
Bump com.google.api.grpc:proto-google-common-protos from 2.50.1 to 2.52.0 in /java in the java group across 1 directory by @dependabot[bot] in bufbuild#1248
Bump jinja2 from 3.1.4 to 3.1.5 in /python by @dependabot[bot] in bufbuild#1213
Bump org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0 in /java in the java group by @dependabot[bot] in bufbuild#1252
Bump com.google.api.grpc:proto-google-common-protos from 2.52.0 to 2.53.0 in /java in the java group by @dependabot[bot] in bufbuild#1254
Bump jinja2 from 3.1.5 to 3.1.6 in /python by @dependabot[bot] in bufbuild#1255
Bump the python-root group with 2 updates by @dependabot[bot] in bufbuild#1253
Bump the java group in /java with 2 updates by @dependabot[bot] in bufbuild#1259
Bump setuptools from 75.8.2 to 76.0.0 in the python-root group by @dependabot[bot] in bufbuild#1258
Bump golang.org/x/net from 0.35.0 to 0.37.0 in /tests in the go-tests group by @dependabot[bot] in bufbuild#1257
Bump protobuf from 5.29.3 to 6.30.1 in the python-root group by @dependabot[bot] in bufbuild#1261
Bump the java group across 1 directory with 5 updates by @dependabot[bot] in bufbuild#1270
Bump the go-tests group across 1 directory with 2 updates by @dependabot[bot] in bufbuild#1267
Bump the java group in /java with 3 updates by @dependabot[bot] in bufbuild#1274
Fix incompatibility with --incompatible_disable_starlark_host_transitions by @meteorcloudy in bufbuild#1275
Bump com.google.api.grpc:proto-google-common-protos from 2.55.0 to 2.55.3 in /java in the java group by @dependabot[bot] in bufbuild#1277
Switch to publish to Maven Central by @pkwarren in bufbuild#1278
Bump golang.org/x/net from 0.39.0 to 0.40.0 in /tests in the go-tests group by @dependabot[bot] in bufbuild#1280
Bump the python-root group across 1 directory with 3 updates by @dependabot[bot] in bufbuild#1268
Bump com.google.api.grpc:proto-google-common-protos from 2.55.3 to 2.56.0 in /java in the java group by @dependabot[bot] in bufbuild#1279
Bump the java group in /java with 2 updates by @dependabot[bot] in bufbuild#1281
Bump setuptools fr

red-hat-konflux · 2026-01-13T17:50:45Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

32 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.6` -> `1.25.6`
`go.uber.org/zap`	`v1.27.0` -> `v1.27.1`
`google.golang.org/grpc`	`v1.73.0` -> `v1.79.2`
`google.golang.org/protobuf`	`v1.36.6` -> `v1.36.11`
`cloud.google.com/go/pubsub`	`v1.49.0` -> `v1.50.1`
`github.com/redis/go-redis/v9`	`v9.9.0` -> `v9.10.0`
`github.com/tink-crypto/tink-go/v2`	`v2.4.0` -> `v2.5.0`
`cloud.google.com/go/monitoring`	`v1.24.2` -> `v1.24.3`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.27.0` -> `v1.30.0`
`github.com/aws/aws-sdk-go`	`v1.55.6` -> `v1.55.8`
`github.com/aws/aws-sdk-go-v2`	`v1.36.4` -> `v1.41.3`
`github.com/aws/aws-sdk-go-v2/config`	`v1.29.16` -> `v1.32.11`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.35` -> `v2.7.19`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.12.3` -> `v1.13.6`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.12.16` -> `v1.13.19`
`github.com/aws/aws-sdk-go-v2/service/kms`	`v1.41.0` -> `v1.49.5`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.80.0` -> `v1.96.4`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.25.4` -> `v1.30.12`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.30.2` -> `v1.35.16`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.33.21` -> `v1.41.8`
`github.com/envoyproxy/go-control-plane/envoy`	`v1.32.4` -> `v1.36.0`
`github.com/go-jose/go-jose/v4`	`v4.1.1` -> `v4.1.3`
`github.com/jellydator/ttlcache/v3`	`v3.3.0` -> `v3.4.0`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.36.0` -> `v1.39.0`
`go.opentelemetry.io/otel`	`v1.36.0` -> `v1.42.0`
`go.opentelemetry.io/otel/metric`	`v1.36.0` -> `v1.42.0`
`go.opentelemetry.io/otel/sdk`	`v1.36.0` -> `v1.42.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.36.0` -> `v1.42.0`
`go.opentelemetry.io/otel/trace`	`v1.36.0` -> `v1.42.0`
`go.yaml.in/yaml/v2`	`v2.4.2` -> `v2.4.3`
`cloud.google.com/go/storage`	`v1.55.0` -> `v1.57.2`
`github.com/googleapis/gax-go/v2`	`v2.14.2` -> `v2.17.0`
`github.com/pelletier/go-toml/v2`	`v2.2.3` -> `v2.2.4`

File name: hack/tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

4 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.6` -> `1.24.0`
`github.com/Masterminds/semver/v3`	`v3.2.1` -> `v3.4.0`
`github.com/Masterminds/sprig/v3`	`v3.2.3` -> `v3.3.0`
`github.com/go-viper/mapstructure/v2`	`v2.2.1` -> `v2.4.0`
`github.com/pelletier/go-toml/v2`	`v2.2.3` -> `v2.2.4`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot added the dependencies label Jan 13, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 28 times, most recently from a1bec32 to e44cf75 Compare January 19, 2026 18:50

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 21 times, most recently from 5c0b5f8 to a75b95b Compare January 26, 2026 18:30

red-hat-konflux bot changed the title ~~Update Go Dependencies~~ chore(deps): update go dependencies Jan 26, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 7 times, most recently from a866f28 to 917a9d8 Compare January 28, 2026 05:43

chore(deps): update go dependencies

3da3b79

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update go dependencies#526

chore(deps): update go dependencies#526
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.3from
konflux/mintmaker/release-1.3/go-deps

red-hat-konflux bot commented Jan 13, 2026 •

edited

Loading

Uh oh!

red-hat-konflux bot commented Jan 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux bot commented Jan 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Documentation

v1.7.0: 1.7.0

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

v0.55.0: v1.31.0/v0.55.0

What's Changed

v0.54.0: v1.30.0/v0.54.0

What's Changed

New Contributors

v0.53.0: v1.29.0/v0.53.0

What's Changed

New Contributors

v0.52.0: v1.28.0/v0.52.0

What's Changed

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

Uh oh!

red-hat-konflux bot commented Jan 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

File name: hack/tools/go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux bot commented Jan 13, 2026 •

edited

Loading

`v1.7.0`: 1.7.0

`v0.55.0`: v1.31.0/v0.55.0

`v0.54.0`: v1.30.0/v0.54.0

`v0.53.0`: v1.29.0/v0.53.0

`v0.52.0`: v1.28.0/v0.52.0

red-hat-konflux bot commented Jan 13, 2026 •

edited

Loading