Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the go-modules group across 1 directory with 41 updates #841

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 20, 2025

Bumps the go-modules group with 26 updates in the / directory:

Package From To
github.com/onsi/gomega 1.36.0 1.36.2
github.com/paketo-buildpacks/libnodejs 0.3.0 0.4.0
dario.cat/mergo 1.0.0 1.0.1
github.com/Masterminds/semver/v3 3.2.1 3.3.1
github.com/Masterminds/sprig/v3 3.2.3 3.3.0
github.com/Microsoft/hcsshim 0.12.5 0.12.9
github.com/ProtonMail/go-crypto 1.1.3 1.1.5
github.com/andybalholm/brotli 1.1.0 1.1.1
github.com/bmatcuk/doublestar/v4 4.6.1 4.8.0
github.com/cloudflare/circl 1.3.9 1.5.0
github.com/containerd/stargz-snapshotter/estargz 0.15.1 0.16.3
github.com/cpuguy83/dockercfg 0.3.1 0.3.2
github.com/cyphar/filepath-securejoin 0.3.1 0.4.0
github.com/docker/cli 27.1.1+incompatible 27.5.0+incompatible
github.com/gabriel-vasile/mimetype 1.4.6 1.4.8
github.com/go-git/go-billy/v5 5.6.0 5.6.2
github.com/go-git/go-git/v5 5.13.0 5.13.1
github.com/google/go-containerregistry 0.20.2 0.20.3
github.com/magiconair/properties 1.8.7 1.8.9
github.com/moby/term 0.5.0 0.5.2
github.com/pierrec/lz4/v4 4.1.21 4.1.22
github.com/pjbgf/sha1cd 0.3.0 0.3.1
github.com/spf13/afero 1.11.0 1.12.0
github.com/spf13/cast 1.7.0 1.7.1
github.com/sylabs/sif/v2 2.18.0 2.20.2
github.com/tklauser/numcpus 0.8.0 0.9.0

Updates github.com/onsi/gomega from 1.36.0 to 1.36.2

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.36.2

Maintenance

v1.36.1

1.36.1

Fixes

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.36.2

Maintenance

  • Bump google.golang.org/protobuf from 1.35.1 to 1.36.1 (#810) [9a7609d]
  • Bump golang.org/x/net from 0.30.0 to 0.33.0 (#807) [b6cb028]
  • Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.22.1 (#808) [5756529]
  • Bump nokogiri from 1.16.3 to 1.16.5 in /docs (#757) [dabc12e]

1.36.1

Fixes

Commits

Updates github.com/paketo-buildpacks/libnodejs from 0.3.0 to 0.4.0

Release notes

Sourced from github.com/paketo-buildpacks/libnodejs's releases.

v0.4.0

What's Changed

  • Introduce BP_VERIFY_LAUNCHPOINT to enable generated files

Full Changelog: paketo-buildpacks/libnodejs@v0.3.0...v0.4.0

Commits

Updates dario.cat/mergo from 1.0.0 to 1.0.1

Release notes

Sourced from dario.cat/mergo's releases.

v1.0.1

What's Changed

New Contributors

Full Changelog: darccio/mergo@v1.0.0...v1.0.1

Commits

Updates github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.1

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.3.1

What's Changed

Full Changelog: Masterminds/semver@v3.3.0...v3.3.1

v3.3.0

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.2.1...v3.3.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

Changelog

3.3.0 (2024-08-27)

Added

Changed

  • #241: Simplify StrictNewVersion parsing (thanks @​grosser)
  • Testing support up through Go 1.23
  • Minimum version set to 1.21 as this is what's tested now
  • Fuzz testing now supports caching
Commits
  • 1558ca3 Merge pull request #253 from mattfarina/fix-bad-versions
  • 252dd61 Fix for allowing some version that were invalid
  • e6e3d4d Merge pull request #249 from mattfarina/update-changelog-3.3.0
  • e80c4ea Updating changelog for 3.3.0
  • 80427ad Merge pull request #248 from mattfarina/bump-min-version
  • b610837 bumping min version in go.mod based on what's tested
  • a4cccd8 Merge pull request #246 from mattfarina/bump-go-1.23
  • 7c178cf Updating the testing version of Go used
  • 29f94c1 Merge pull request #241 from grosser/grosser/validate
  • 2cf1b16 Merge pull request #245 from mattfarina/remove-vert
  • Additional commits viewable in compare view

Updates github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0

Release notes

Sourced from github.com/Masterminds/sprig/v3's releases.

v3.3.0

What's Changed

New Contributors

Full Changelog: Masterminds/sprig@v3.2.3...v3.3.0

Changelog

Sourced from github.com/Masterminds/sprig/v3's changelog.

Release 3.3.0 (2024-08-29)

Added

Changed

  • #407: Removed duplicate documentation (functions were documentated in 2 places)
  • #290: Corrected copy/paster oops in math documentation (thanks @​zzhu41)
  • #369: Corrected template reference in docs (thanks @​chey)
  • #375: Added link to URL documenation (thanks @​carlpett)
  • #406: Updated the mergo dependency which had a breaking change (which was accounted for)
  • #376: Fixed documentation error (thanks @​jheyduk)
  • #404: Updated dependency tree
  • #391: Fixed misspelling (thanks @​chrishalbert)
  • #405: Updated Go versions used in testing
Commits
  • e708470 Merge pull request #408 from mattfarina/update-changelog-3.3
  • 8fc4354 Updating the changelog for the 3.3.0 release
  • cb81a32 Merge pull request #407 from mattfarina/remove-dup-math-functions
  • 2637693 Removing duplicate documentation
  • 06b9a87 Merge pull request #290 from zzhu41/patch-1
  • e663ec6 Merge pull request #369 from chey/patch-1
  • bb2f73f Merge pull request #375 from carlpett/patch-1
  • f07659e Merge pull request #400 from itzik-elayev/master
  • 98b35c1 Add closing bracket
  • 7a88928 Merge pull request #406 from mattfarina/update-mergo
  • Additional commits viewable in compare view

Updates github.com/Microsoft/hcsshim from 0.12.5 to 0.12.9

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.9

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.8...v0.12.9

v0.12.8

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.7...v0.12.8

v0.12.7

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.6...v0.12.7

v0.12.6

What's Changed

Full Changelog: microsoft/hcsshim@v0.12.5...v0.12.6

Commits
  • 7392335 Switch to using containerd/errdefs/pkg/errgrpc for grpc translation
  • 79d3f32 Update go to 1.22
  • 05636b9 Update JOB_OBJECT_ALL_ACCESS and OpenJobObject (#2095)
  • 1550628 mobve SILOOBJECT_BASIC_INFORMATION to winapi
  • bf52d58 fix SILOOBJECT_BASIC_INFORMATION alignment
  • 8d48d87 Update containerd to v1.7.23 (#2295)
  • 4ad298f Fixing typo (#2289)
  • 86b5333 Bump golangci/golangci-lint-action from 4 to 6
  • 5ae96f3 Update runc to v1.1.14
  • 8f3fccd Update pkg versions
  • Additional commits viewable in compare view

Updates github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.5

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.1.5

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.4...v1.1.5

Release v1.1.5-proton

What's Changed

This release is v1.1.5 with support for the following non-standardized features:

Release v1.1.4

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.3...v1.1.4

Release v1.1.4-proton

What's Changed

This release is v1.1.4 with support for the following non-standardized features:

Commits
  • d703f49 Check binding signature details against primary key (#264)
  • 72cacd5 ci: Update openpgp-interop-test-analyzer to v2.1.0 (#243)
  • 3de0301 Update artifact actions to v4 (#260)
  • be3aef0 Merge pull request #259 from ProtonMail/less-memory-large-msgs
  • 1fd5ec8 Add tests for reusing buffer in OCB en/decryption
  • df3ee02 Buffer decrypted bytes more efficiently
  • 04cfaf2 Reuse plaintext slice for ciphertext when encrypting
  • fee7824 Reuse ciphertext slice for plaintext when decrypting
  • 6fa7f91 Preallocate the chunk size rather than buffering
  • add07bd Don't allocate the nonce for each chunk
  • Additional commits viewable in compare view

Updates github.com/andybalholm/brotli from 1.1.0 to 1.1.1

Commits

Updates github.com/bmatcuk/doublestar/v4 from 4.6.1 to 4.8.0

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Fixed Escaped Meta in the "Base" of the Pattern

If the "base" of a pattern (ie, everything up to the first path slash before any meta characters) contains an escaped meta character, doublestar would fail to glob any files.

Thanks to @​tdurieux for finding and fixing this bug!

Breaking-ish Change

I've updated SplitPattern to unescape meta characters in the first returned string. I suspect this shouldn't cause issues for anyone because, if anyone was using this function, they've probably either never passed a pattern with escaped meta characters, or hand-rolled an unescape method to fix the bug - which will now be a no-op for them.

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.7.1...v4.8.0

Fixed FilepathGlob("")

To be consistent with filepath.Glob, FilepathGlob("") returns nil.

Added MatchUnvalidated, PathMatchUnvalidated

These functions provide a small performance improvement in cases where you don't care about whether or not the pattern is valid (maybe because you already ran ValidatePattern).

Commits
  • 29e67f4 fix windows tests
  • 28b892c remove sponsor =(
  • 4b5670c fix(#96) some minor corrections to escaping pattern base
  • 1e7ad31 fix: fix match when there is a escaped meta in the pattern
  • 1e20c6d fixes #95 FilepathGlob("") should return nil
  • da152ef add docs for MatchUnvalidated, PathMatchUnvalidated
  • 2832f67 closes #92 adds MatchUnvalidated
  • 424062b added sponsor: MASV
  • See full diff in compare view

Updates github.com/cloudflare/circl from 1.3.9 to 1.5.0

Release notes

Sourced from github.com/cloudflare/circl's releases.

CIRCL v1.5.0

New: ML-DSA, Module-Lattice-based Digital Signature Algorithm.

What's Changed

New Contributors

Full Changelog: cloudflare/circl@v1.4.0...v1.5.0

CIRCL v1.4.0

Changes

New: ML-KEM compatible with FIPS-203.

Commit History

Full Changelog: cloudflare/circl@v1.3.9...v1.4.0

Commits
  • 1310edf Release v1.5.0
  • 0246d59 Add test for ML-DSA signature verification.
  • e2bbd01 Add ML-DSA (FIPS204) (#480)
  • 2ba992f Reverting arm64 jobs since qemu can't run go1.23 binaries yet.
  • ab15f82 Updates golangci-lint to v1.61.0 and fixes code.
  • 064a9ba Bump to go1.22 inner files and ci jobs.
  • 7040592 Adding semgrepignore to also analyse test files.
  • 51a9a33 Update semgrep.yml
  • cfbc696 Create semgrep.yml
  • 2d6cd98 kem: add X25519MLKEM768 TLS hybrid KEM
  • Additional commits viewable in compare view

Updates github.com/containerd/errdefs from 0.1.0 to 0.3.0

Release notes

Sourced from github.com/containerd/errdefs's releases.

v0.3.0

This release splits the errdefs package into the github.com/containerd/errdefs package which only contains error definitions as well as basic functions to check for those definitions and the github.com/containerd/errdefs/pkg package which containers functionality for using the errdefs, such as error serialization and adding more data to errors.

What's Changed

Full Changelog: containerd/errdefs@v0.2.0...v0.3.0

pkg/v0.3.0

What's Changed

Full Changelog: containerd/errdefs@v0.3.0...pkg/v0.3.0

v0.2.0

What's Changed

New Contributors

Full Changelog: containerd/errdefs@v0.1.0...v0.2.0

Commits
  • 9fd32fc Merge pull request #19 from dmcgowan/pkg-package
  • 3dabb2b Merge pull request #20 from austinvazquez/upgrade-ci
  • 303a6ea Update to Go 1.22.8 in CI
  • e70104e Upgrade to golangci-lint@v1.61.0
  • ffe5586 Upgrade to golangci/golangci-lint-action@v6
  • 908b04b Upgrade to actions/checkout@v4
  • 608b83c Upgrade to actions/setup-go@v5
  • 8e82ae4 Upgrade macOS runner image to macOS 13
  • 46a6522 Add errdefs/pkg package
  • 02b65bc Merge pull request #18 from dmcgowan/add-missing-interfaces
  • Additional commits viewable in compare view

Updates github.com/containerd/stargz-snapshotter/estargz from 0.15.1 to 0.16.3

Release notes

Sourced from github.com/containerd/stargz-snapshotter/estargz's releases.

v0.16.3

Notable Changes

  • Fix zstd:chunked converter error on duplicated blobs (#1894)

v0.16.2

Notable Changes

  • go.mod: Use 1.22.0 by specifying to google.golang.org/grpc v1.67.1 (#1877)

v0.16.1

Notable Changes

  • prevernt go version upgraded to 1.23 in go.mod (#1863)

v0.16.0

Notable Changes

  • Support for the latest CRI-O(>=v1.31.0) and Podman (>=v5.1.0) Additional Layer Store (#1673, #1674)
  • Fix log message in refnode.Lookup (#1595), thanks to @​iain-macdonald
  • store: use OnForget API for checking if a node is reusable (#1808)
  • Support for containerd v2 (#1722), thanks to @​apostasie
  • fs: Check connection only when image isn't fully cached (#1584)
Commits
  • c0389e0 Merge pull request #1898 from ktock/prepare-v0.16.3
  • c6a444e [v0.16] Prepare for v0.16.3
  • 86bbdeb Merge pull request #1894 from ktock/bp-1885
  • 9b706a2 Rely on OpenWriter for retrying opening writer
  • 570ba70 Rely on contaienrd's GC for cleanup of temporary content
  • 1d34a1b Merge pull request #1878 from ktock/prepare-v0.16.2
  • 3971b26 Merge pull request #1877 from ktock/v0.16dev
  • 1e4fad0 Preapre for v0.16.2
  • 4edcebd go.mod: Use 1.22.0 by specifying to google.golang.org/grpc v1.67.1
  • 7d3230e Merge pull request #1864 from ktock/prepare-v0.16.1
  • Additional commits viewable in compare view

Updates github.com/cpuguy83/dockercfg from 0.3.1 to 0.3.2

Release notes

Sourced from github.com/cpuguy83/dockercfg's releases.

v0.3.2

What's Changed

New Contributors

Full Changelog: cpuguy83/dockercfg@v0.3.1...v0.3.2

Commits

Updates github.com/cyphar/filepath-securejoin from 0.3.1 to 0.4.0

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.4.0

This release primarily includes a few minor breaking changes to make the MkdirAll and SecureJoin interfaces more robust against accidental misuse.

  • SecureJoin(VFS) will now return an error if the provided root is not a filepath.Clean'd path.

    While it is ultimately the responsibility of the caller to ensure the root is a safe path to use, passing a path like /symlink/.. as a root would result in the SecureJoin'd path being placed in / even though /symlink/.. might be a different directory, and so we should more strongly discourage such usage.

    All major users of securejoin.SecureJoin already ensure that the paths they provide are safe (and this is ultimately a question of user error), but removing this foot-gun is probably a good idea. Of course, this is necessarily a breaking API change (though we expect no real users to be affected by it).

    Thanks to Erik Sjölund, who initially reported this issue as a possible security issue.

  • MkdirAll and MkdirHandle now take an os.FileMode-style mode argument instead of a raw unix.S_*-style mode argument, which may cause compile-time type errors depending on how you use filepath-securejoin. For most users, there will be no change in behaviour aside from the type change (as the bottom 0o777 bits are the same in both formats, and most users are probably only using those bits).

    However, if you were using unix.S_ISVTX to set the sticky bit with MkdirAll(Handle) you will need to switch to os.ModeSticky otherwise you will get a runtime error with this update. In addition, the error message you will get from passing unix.S_ISUID and unix.S_ISGID will be different as they are treated as invalid bits now (note that previously passing said bits was also an error).

Thanks to the following contributors for helping make this release possible:

Signed-off-by: Aleksa Sarai cyphar@cyphar.com

v0.3.6

This release lowers the minimum Go version to Go 1.18 as well as some library dependencies, in order to make it easier for folks that need to backport patches using the new filepath-securejoin API onto branches

... (truncated)

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.4.0] - 2025-01-13

Breaking

  • SecureJoin(VFS) will now return an error if the provided root is not a filepath.Clean'd path.

    While it is ultimately the responsibility of the caller to ensure the root is a safe path to use, passing a path like /symlink/.. as a root would result in the SecureJoin'd path being placed in / even though /symlink/.. might be a different directory, and so we should more strongly discourage such usage.

    All major users of securejoin.SecureJoin already ensure that the paths they provide are safe (and this is ultimately a question of user error), but removing this foot-gun is probably a good idea. Of course, this is necessarily a breaking API change (though we expect no real users to be affected by it).

    Thanks to Erik Sjölund, who initially reported this issue as a possible security issue.

  • MkdirAll and MkdirHandle now take an os.FileMode-style mode argument instead of a raw unix.S_*-style mode argument, which may cause compile-time type errors depending on how you use filepath-securejoin. For most users, there will be no change in behaviour aside from the type change (as the bottom 0o777 bits are the same in both formats, and most users are probably only using those bits).

    However, if you were using unix.S_ISVTX to set the sticky bit with MkdirAll(Handle) you will need to switch to os.ModeSticky otherwise you will get a runtime error with this update. In addition, the error message you will get from passing <...

    Description has been truncated

Bumps the go-modules group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.36.0` | `1.36.2` |
| [github.com/paketo-buildpacks/libnodejs](https://github.com/paketo-buildpacks/libnodejs) | `0.3.0` | `0.4.0` |
| [dario.cat/mergo](https://github.com/imdario/mergo) | `1.0.0` | `1.0.1` |
| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.2.1` | `3.3.1` |
| [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) | `3.2.3` | `3.3.0` |
| [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.12.5` | `0.12.9` |
| [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.1.3` | `1.1.5` |
| [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.1.0` | `1.1.1` |
| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.6.1` | `4.8.0` |
| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.9` | `1.5.0` |
| [github.com/containerd/stargz-snapshotter/estargz](https://github.com/containerd/stargz-snapshotter) | `0.15.1` | `0.16.3` |
| [github.com/cpuguy83/dockercfg](https://github.com/cpuguy83/dockercfg) | `0.3.1` | `0.3.2` |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.3.1` | `0.4.0` |
| [github.com/docker/cli](https://github.com/docker/cli) | `27.1.1+incompatible` | `27.5.0+incompatible` |
| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.6` | `1.4.8` |
| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.0` | `5.6.2` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.0` | `5.13.1` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.2` | `0.20.3` |
| [github.com/magiconair/properties](https://github.com/magiconair/properties) | `1.8.7` | `1.8.9` |
| [github.com/moby/term](https://github.com/moby/term) | `0.5.0` | `0.5.2` |
| [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.21` | `4.1.22` |
| [github.com/pjbgf/sha1cd](https://github.com/pjbgf/sha1cd) | `0.3.0` | `0.3.1` |
| [github.com/spf13/afero](https://github.com/spf13/afero) | `1.11.0` | `1.12.0` |
| [github.com/spf13/cast](https://github.com/spf13/cast) | `1.7.0` | `1.7.1` |
| [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.18.0` | `2.20.2` |
| [github.com/tklauser/numcpus](https://github.com/tklauser/numcpus) | `0.8.0` | `0.9.0` |



Updates `github.com/onsi/gomega` from 1.36.0 to 1.36.2
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.36.0...v1.36.2)

Updates `github.com/paketo-buildpacks/libnodejs` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/paketo-buildpacks/libnodejs/releases)
- [Commits](paketo-buildpacks/libnodejs@v0.3.0...v0.4.0)

Updates `dario.cat/mergo` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/imdario/mergo/releases)
- [Commits](darccio/mergo@v1.0.0...v1.0.1)

Updates `github.com/Masterminds/semver/v3` from 3.2.1 to 3.3.1
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](Masterminds/semver@v3.2.1...v3.3.1)

Updates `github.com/Masterminds/sprig/v3` from 3.2.3 to 3.3.0
- [Release notes](https://github.com/Masterminds/sprig/releases)
- [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md)
- [Commits](Masterminds/sprig@v3.2.3...v3.3.0)

Updates `github.com/Microsoft/hcsshim` from 0.12.5 to 0.12.9
- [Release notes](https://github.com/Microsoft/hcsshim/releases)
- [Commits](microsoft/hcsshim@v0.12.5...v0.12.9)

Updates `github.com/ProtonMail/go-crypto` from 1.1.3 to 1.1.5
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](ProtonMail/go-crypto@v1.1.3...v1.1.5)

Updates `github.com/andybalholm/brotli` from 1.1.0 to 1.1.1
- [Commits](andybalholm/brotli@v1.1.0...v1.1.1)

Updates `github.com/bmatcuk/doublestar/v4` from 4.6.1 to 4.8.0
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.6.1...v4.8.0)

Updates `github.com/cloudflare/circl` from 1.3.9 to 1.5.0
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](cloudflare/circl@v1.3.9...v1.5.0)

Updates `github.com/containerd/errdefs` from 0.1.0 to 0.3.0
- [Release notes](https://github.com/containerd/errdefs/releases)
- [Commits](containerd/errdefs@v0.1.0...v0.3.0)

Updates `github.com/containerd/stargz-snapshotter/estargz` from 0.15.1 to 0.16.3
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.15.1...v0.16.3)

Updates `github.com/cpuguy83/dockercfg` from 0.3.1 to 0.3.2
- [Release notes](https://github.com/cpuguy83/dockercfg/releases)
- [Commits](cpuguy83/dockercfg@v0.3.1...v0.3.2)

Updates `github.com/cyphar/filepath-securejoin` from 0.3.1 to 0.4.0
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.3.1...v0.4.0)

Updates `github.com/docker/cli` from 27.1.1+incompatible to 27.5.0+incompatible
- [Commits](docker/cli@v27.1.1...v27.5.0)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.6 to 1.4.8
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.6...v1.4.8)

Updates `github.com/go-git/go-billy/v5` from 5.6.0 to 5.6.2
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.6.0...v5.6.2)

Updates `github.com/go-git/go-git/v5` from 5.13.0 to 5.13.1
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.13.0...v5.13.1)

Updates `github.com/google/go-containerregistry` from 0.20.2 to 0.20.3
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.20.2...v0.20.3)

Updates `github.com/klauspost/compress` from 1.17.9 to 1.17.11
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.9...v1.17.11)

Updates `github.com/magiconair/properties` from 1.8.7 to 1.8.9
- [Release notes](https://github.com/magiconair/properties/releases)
- [Commits](magiconair/properties@v1.8.7...v1.8.9)

Updates `github.com/moby/sys/user` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/moby/sys/releases)
- [Commits](moby/sys@user/v0.2.0...user/v0.3.0)

Updates `github.com/moby/term` from 0.5.0 to 0.5.2
- [Commits](moby/term@v0.5.0...v0.5.2)

Updates `github.com/pierrec/lz4/v4` from 4.1.21 to 4.1.22
- [Commits](pierrec/lz4@v4.1.21...v4.1.22)

Updates `github.com/pjbgf/sha1cd` from 0.3.0 to 0.3.1
- [Release notes](https://github.com/pjbgf/sha1cd/releases)
- [Commits](pjbgf/sha1cd@v0.3.0...v0.3.1)

Updates `github.com/spf13/afero` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/spf13/afero/releases)
- [Commits](spf13/afero@v1.11.0...v1.12.0)

Updates `github.com/spf13/cast` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/spf13/cast/releases)
- [Commits](spf13/cast@v1.7.0...v1.7.1)

Updates `github.com/sylabs/sif/v2` from 2.18.0 to 2.20.2
- [Release notes](https://github.com/sylabs/sif/releases)
- [Changelog](https://github.com/sylabs/sif/blob/main/.goreleaser.yml)
- [Commits](sylabs/sif@v2.18.0...v2.20.2)

Updates `github.com/tklauser/numcpus` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/tklauser/numcpus/releases)
- [Commits](tklauser/numcpus@v0.8.0...v0.9.0)

Updates `github.com/vbatts/tar-split` from 0.11.5 to 0.11.6
- [Release notes](https://github.com/vbatts/tar-split/releases)
- [Commits](vbatts/tar-split@v0.11.5...v0.11.6)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.53.0 to 0.58.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.53.0...zpages/v0.58.0)

Updates `go.opentelemetry.io/otel` from 1.28.0 to 1.33.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.33.0)

Updates `go.opentelemetry.io/otel/metric` from 1.28.0 to 1.33.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.33.0)

Updates `go.opentelemetry.io/otel/trace` from 1.28.0 to 1.33.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.33.0)

Updates `golang.org/x/crypto` from 0.31.0 to 0.32.0
- [Commits](golang/crypto@v0.31.0...v0.32.0)

Updates `golang.org/x/mod` from 0.20.0 to 0.22.0
- [Commits](golang/mod@v0.20.0...v0.22.0)

Updates `golang.org/x/net` from 0.33.0 to 0.34.0
- [Commits](golang/net@v0.33.0...v0.34.0)

Updates `golang.org/x/sys` from 0.28.0 to 0.29.0
- [Commits](golang/sys@v0.28.0...v0.29.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240528184218-531527333157 to 0.0.0-20241223144023-3abc09e42ca8
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.65.0 to 1.67.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.65.0...v1.67.3)

Updates `google.golang.org/protobuf` from 1.35.1 to 1.36.3

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/libnodejs
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: dario.cat/mergo
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/Masterminds/semver/v3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Masterminds/sprig/v3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Microsoft/hcsshim
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/andybalholm/brotli
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cloudflare/circl
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/containerd/errdefs
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/containerd/stargz-snapshotter/estargz
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cpuguy83/dockercfg
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/docker/cli
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-billy/v5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/google/go-containerregistry
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/magiconair/properties
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/moby/sys/user
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/moby/term
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/pierrec/lz4/v4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/pjbgf/sha1cd
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/spf13/afero
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/spf13/cast
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/sylabs/sif/v2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/tklauser/numcpus
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/vbatts/tar-split
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner January 20, 2025 16:23
@dependabot dependabot bot added the failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow label Jan 20, 2025
@dependabot dependabot bot requested review from mhdawson and pacostas January 20, 2025 16:23
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Jan 20, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 20, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 20, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/go-modules-4609f8b4f1 branch January 20, 2025 20:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow semver:patch A change requiring a patch version bump
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant