chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #350 · securesign/fulcio

red-hat-konflux · 2026-02-08T05:29:58Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
bitbucket.org/creachadair/stringset	indirect	patch	`v0.0.12` -> `v0.0.14`
chainguard.dev/go-grpc-kit	require	patch	`v0.17.15` -> `v0.17.17`
chainguard.dev/sdk	require	patch	`v0.1.45` -> `v0.1.52`
cloud.google.com/go	indirect	minor	`v0.121.6` -> `v0.123.0`
cloud.google.com/go/auth	indirect	minor	`v0.18.0` -> `v0.19.0`
cloud.google.com/go/iam	indirect	minor	`v1.5.3` -> `v1.6.0`
cloud.google.com/go/longrunning	indirect	minor	`v0.6.7` -> `v0.8.0`
cloud.google.com/go/longrunning	indirect	minor	`v0.7.0` -> `v0.8.0`
dario.cat/mergo	indirect	patch	`v1.0.1` -> `v1.0.2`
filippo.io/edwards25519	indirect	minor	`v1.1.0` -> `v1.2.0`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.20.0` -> `v1.21.0`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.6.0` -> `v1.7.0`
github.com/PaesslerAG/gval	indirect	minor	`v1.0.0` -> `v1.2.4`
github.com/asaskevich/govalidator	require	digest	`f21760c` -> `e113478`
github.com/aws/aws-sdk-go-v2/credentials	indirect	patch	`v1.19.5` -> `v1.19.13`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	patch	`v1.18.16` -> `v1.18.21`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	patch	`v1.4.16` -> `v1.4.21`
github.com/aws/aws-sdk-go-v2/internal/ini	indirect	patch	`v1.8.4` -> `v1.8.6`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	patch	`v1.13.16` -> `v1.13.21`
github.com/aws/aws-sdk-go-v2/service/signin	indirect	patch	`v1.0.4` -> `v1.0.9`
github.com/chainguard-dev/clog	indirect	minor	`v1.7.0` -> `v1.8.0`
github.com/google/certificate-transparency-go	require	patch	`v1.3.2` -> `v1.3.3`
github.com/google/go-containerregistry	indirect	minor	`v0.20.7` -> `v0.21.3`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.7` -> `v0.3.14`
github.com/grpc-ecosystem/go-grpc-prometheus	require	digest	`82c2437` -> `a5446fa`
github.com/hashicorp/vault/api	indirect	minor	`v1.22.0` -> `v1.23.0`
github.com/letsencrypt/boulder	indirect	minor	`v0.20251110.0` -> `v0.20260324.0`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.9` -> `v0.0.21`
github.com/miekg/pkcs11	indirect	patch	`v1.1.1` -> `v1.1.2`
github.com/prometheus/procfs	indirect	minor	`v0.16.1` -> `v0.20.1`
github.com/sagikazarmark/locafero	indirect	minor	`v0.7.0` -> `v0.12.0`
github.com/secure-systems-lab/go-securesystemslib	indirect	minor	`v0.9.1` -> `v0.10.0`
github.com/sigstore/sigstore	require	patch	`v1.10.3` -> `v1.10.4`
github.com/sigstore/sigstore/pkg/signature/kms/aws	require	patch	`v1.10.3` -> `v1.10.4`
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	patch	`v1.10.3` -> `v1.10.4`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	patch	`v1.10.3` -> `v1.10.4`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	require	patch	`v1.10.3` -> `v1.10.4`
github.com/spf13/afero	indirect	minor	`v1.12.0` -> `v1.15.0`
github.com/spf13/cast	indirect	minor	`v1.7.1` -> `v1.10.0`
github.com/spf13/pflag	indirect	patch	`v1.0.7` -> `v1.0.10`
github.com/spf13/viper	require	minor	`v1.20.1` -> `v1.21.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.63.0` -> `v0.67.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.63.0` -> `v0.67.0`
go.opentelemetry.io/proto/otlp	indirect	minor	`v1.7.1` -> `v1.10.0`
go.step.sm/crypto	require	minor	`v0.75.0` -> `v0.77.1`
golang.org/x/crypto	indirect	minor	`v0.46.0` -> `v0.49.0`
golang.org/x/net	indirect	minor	`v0.42.0` -> `v0.52.0`
golang.org/x/net	indirect	minor	`v0.48.0` -> `v0.52.0`
golang.org/x/oauth2	indirect	minor	`v0.34.0` -> `v0.36.0`
golang.org/x/sync	indirect	minor	`v0.17.0` -> `v0.20.0`
golang.org/x/sync	indirect	minor	`v0.19.0` -> `v0.20.0`
golang.org/x/sys	indirect	minor	`v0.34.0` -> `v0.42.0`
golang.org/x/sys	indirect	minor	`v0.39.0` -> `v0.42.0`
golang.org/x/term	indirect	minor	`v0.38.0` -> `v0.41.0`
golang.org/x/text	indirect	minor	`v0.29.0` -> `v0.35.0`
golang.org/x/text	indirect	minor	`v0.32.0` -> `v0.35.0`
golang.org/x/time	indirect	minor	`v0.14.0` -> `v0.15.0`
google.golang.org/api	require	minor	`v0.259.0` -> `v0.273.0`
google.golang.org/genproto	indirect	digest	`ff82c1b` -> `d00831a`
google.golang.org/genproto/googleapis/api	indirect	digest	`57b25ae` -> `d00831a`
google.golang.org/genproto/googleapis/api	require	digest	`0a764e5` -> `d00831a`
google.golang.org/genproto/googleapis/rpc	indirect	digest	`57b25ae` -> `d00831a`
google.golang.org/genproto/googleapis/rpc	indirect	digest	`0a764e5` -> `d00831a`
google.golang.org/grpc/cmd/protoc-gen-go-grpc	indirect	minor	`v1.5.1` -> `v1.6.1`
sigs.k8s.io/release-utils	require	patch	`v0.12.2` -> `v0.12.3`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

creachadair/stringset (bitbucket.org/creachadair/stringset)

`v0.0.14`

Compare Source

`v0.0.13`

Compare Source

chainguard-dev/go-grpc-kit (chainguard.dev/go-grpc-kit)

`v0.17.17`

Compare Source

What's Changed

Bump google.golang.org/api from 0.271.0 to 0.272.0 by @dependabot[bot] in #553
Bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #554
Bump actions/cache from 4.2.4 to 5.0.4 by @dependabot[bot] in #562
Bump chainguard-dev/actions from 1.4.15 to 1.6.9 by @dependabot[bot] in #561
test(options): add unit tests for GRPCOptions, GRPCDialOptions, and ClientOptions by @k4leung4 in #559
docs: expand README to cover all packages and add GoDoc comments by @k4leung4 in #560
fix(metrics): use ContinueOnError for /metrics handler by @k4leung4 in #563

Full Changelog: chainguard-dev/go-grpc-kit@v0.17.16...v0.17.17

`v0.17.16`

Compare Source

What's Changed

Bump github.com/prometheus/client_golang from 1.23.0 to 1.23.1 in the prom group by @dependabot[bot] in #463
Bump google.golang.org/api from 0.247.0 to 0.248.0 by @dependabot[bot] in #458
Bump github.com/prometheus/client_golang from 1.23.1 to 1.23.2 in the prom group by @dependabot[bot] in #466
Bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 in the golang-org-x group by @dependabot[bot] in #465
Bump reviewdog/action-actionlint from 1.66.1 to 1.67.0 by @dependabot[bot] in #468
Bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #471
Bump chainguard-dev/actions from 1.4.12 to 1.4.14 by @dependabot[bot] in #470
Bump reviewdog/action-tflint from 1.24.2 to 1.25.0 by @dependabot[bot] in #469
Bump google.golang.org/api from 0.248.0 to 0.249.0 by @dependabot[bot] in #467
Bump step-security/harden-runner from 2.13.0 to 2.13.1 by @dependabot[bot] in #475
Bump golang.org/x/net from 0.43.0 to 0.44.0 in the golang-org-x group by @dependabot[bot] in #472
Bump google.golang.org/grpc from 1.75.0 to 1.75.1 by @dependabot[bot] in #476
Bump chainguard-dev/actions from 1.4.14 to 1.4.15 by @dependabot[bot] in #473
Bump google.golang.org/protobuf from 1.36.8 to 1.36.9 by @dependabot[bot] in #474
Bump google.golang.org/api from 0.249.0 to 0.264.0 by @dependabot[bot] in #533
Bump reviewdog/action-actionlint from 1.67.0 to 1.70.0 by @dependabot[bot] in #535
update go by @k4leung4 in #544
Bump actions/checkout from 5.0.0 to 6.0.2 by @dependabot[bot] in #529
[StepSecurity] Apply security best practices by @stepsecurity-app[bot] in #546
Reduce ReadHeaderTimeout and fix missing timeout in Serve() by @k4leung4 in #547
fix cgclientid propagation and register as Prometheus label by @k4leung4 in #543
trace: add metrics for traceparent preserve/restore by @k4leung4 in #545
Bump step-security/harden-runner from 2.13.1 to 2.16.0 by @dependabot[bot] in #548

Full Changelog: chainguard-dev/go-grpc-kit@v0.17.15...v0.17.16

chainguard-dev/sdk (chainguard.dev/sdk)

googleapis/google-cloud-go (cloud.google.com/go)

`v0.123.0`

Compare Source

Features

internal/stategen: Populate the latest googleapis commit (#12880) (7b017a0)
librariangen: Implement the build command (#12817) (14734c8)

Bug Fixes

internal/librariangen: Add link to source commit in release notes (#12881) (1c06cc6)
internal/librariangen: Fix CHANGES.md headers (#12849) (baf515d)
internal/librariangen: Remove go mod init/tidy from postprocessor (#12832) (1fe506a)
internal/librariangen: Test for error path with flags (#12830) (f0da7b2)
internal/postprocessor: Add dlp to skip-module-scan-paths (#12857) (45a7d9b)
librariangen: Honor original container contract (#12846) (71c8fd3)
librariangen: Improvements to release-init (#12842) (0db677a)
stategen: Specify an appropriate tag format for google-cloud-go (#12835) (ffcff33)

`v0.122.0`

Compare Source

Features

internal/librariangen: Add release-init command (#12751) (52e84cc)

Bug Fixes

internal/godocfx: Better support for v2 modules (#12797) (4bc8785)
internal/godocfx: Module detection when tidy errors (#12801) (83d46cd)
internal/librariangen: Fix goimports errors (#12765) (83bdaa4)

imdario/mergo (dario.cat/mergo)

`v1.0.2`

Compare Source

What's Changed

Drops gopkg.in/yaml.v3, only used for loading fixtures. Thanks @trim21 for bringing to my attention (#262) that this library is no longer maintained.

Full Changelog: darccio/mergo@v1.0.1...v1.0.2

FiloSottile/edwards25519 (filippo.io/edwards25519)

`v1.2.0`

Compare Source

`v1.1.1`

Compare Source

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.7.0`: 1.7.0

Compare Source

What's Changed

Add WithPrompt option for AuthCodeURL by @szogoon in #585
Use form_post response mode for interactive authentication by @ashok672 in #596

New Contributors

@szogoon made their first contribution in #585
@ashok672 made their first contribution in #596

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.6.0...v1.7.0

PaesslerAG/gval (github.com/PaesslerAG/gval)

`v1.2.4`

Compare Source

What's Changed

Fix functions Nil arguements by @KinyaElGrande in #109

New Contributors

@KinyaElGrande made their first contribution in #109

Full Changelog: PaesslerAG/gval@v1.2.3...v1.2.4

`v1.2.3`

Compare Source

What's Changed

Apply formatting (go fmt) by @darh in #92
Add support for typed map and slices with method calls by @tw1nk in #88
fix unexpected func() bool expected bool by @mei-rune in #104
feat: fix goroutine leakage problem caused by errCh write blocking. by @catundercar in #107

New Contributors

@tw1nk made their first contribution in #88
@mei-rune made their first contribution in #104
@catundercar made their first contribution in #107

Full Changelog: PaesslerAG/gval@v1.2.2...v1.2.3

`v1.2.2`

Compare Source

Wrap errors instead of the error message.

`v1.2.1`: Allow nil arguments and catch panics in function calls

Compare Source

`v1.2.0`

Compare Source

Added DecimalArithmetic to gval.

`v1.1.2`

Compare Source

Fixed IsConst for go 1.17
Fixed scanning to much characters while parsing operators

`v1.1.1`

Compare Source

Fixed typed nil value issues.

`v1.1.0`: 1.1

Compare Source

Make ident and parentheses parsers available separately from Base()

`v1.0.1`

Compare Source

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/credentials)

`v1.19.11`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.19.11
- Bug Fix: Add missing ChecksumType field to UploadOutput.
github.com/aws/aws-sdk-go-v2/service/cloudformation: v1.67.0
- Feature: Add new warning type 'EXCLUDED_RESOURCES'
github.com/aws/aws-sdk-go-v2/service/connectcases: v1.32.0
- Feature: New Search All Related Items API enables searching related items across cases
github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.51.0
- Feature: Add support for dual-stack account endpoint generation
github.com/aws/aws-sdk-go-v2/service/guardduty: v1.64.3
- Documentation: Updated descriptions for the Location parameter in CreateTrustedEntitySet and CreateThreatEntitySet.
github.com/aws/aws-sdk-go-v2/service/synthetics: v1.41.0
- Feature: Adds support to configure canaries with pre-configured blueprint code on supported runtime versions. This behavior can be controlled via the new BlueprintTypes property exposed in the CreateCanary and UpdateCanary APIs.

chainguard-dev/clog (github.com/chainguard-dev/clog)

`v1.8.0`

Compare Source

What's Changed

docs: fix doc comments for clog.Logger by @luhring in #36
gcp: Surface trace propagation functions on context by @markusthoemmes in #40
[StepSecurity] Apply security best practices by @stepsecurity-app[bot] in #39
Bump actions/setup-go from 5.3.0 to 5.5.0 by @dependabot[bot] in #37
slogtest: demonstrate use of t.Context() by @imjasonh in #41
gcp: Refactor to pass in custom writer by @wlynch in #52
Bump actions/checkout from 4.2.2 to 6.0.1 by @dependabot[bot] in #51
Bump step-security/harden-runner from 2.12.0 to 2.13.3 by @dependabot[bot] in #50
Bump actions/setup-go from 5.5.0 to 6.1.0 by @dependabot[bot] in #49

New Contributors

@luhring made their first contribution in #36
@markusthoemmes made their first contribution in #40
@stepsecurity-app[bot] made their first contribution in #39

Full Changelog: chainguard-dev/clog@v1.7.0...v1.8.0

google/certificate-transparency-go (github.com/google/certificate-transparency-go)

`v1.3.3`

Compare Source

CTFE

set explicit http server timeouts by @1seal in #1755
Regenerate protos by @phbnf in #1743
Update instructions to generate protos by @phbnf in #1742
ctfe: Enforce max request and header size limits by @fghanmi in #1720
[CTFE] Add a /log.v3.json endpoint to help satisfy a requirement of the Chrome CT Log Policy by @robstradling in #1703

Tools

Log list library

Support tiled logs in the loglist3 logfilter functions by @robstradling in #1762
Add FindTiledLog* functions by @robstradling in #1763

Submission proxy

Cap request body size in submission proxy by @1seal in #1754
add some additional log messages around CT log compatibility by @breadyzhang in #1734

Other

jsonclient: don't depend on error text from other packages in tests by @neild in #1741
Parse klog flags in preloader. by @phbnf in #1711
Fix incorrect leaf hash calculation for precertificates in upload command by @Barre in #1710

Misc

Remove internal witness by @roger2hk in #1765
Update transparency-dev slack invite link by @taknira in #1718

Dependency updates

Bump golangci-lint version to v2.10.1 by @roger2hk in #1769
Bump the all-deps group with 7 updates by @dependabot[bot] in #1768
Bump github/codeql-action from 4.32.0 to 4.32.4 in the all-deps group by @dependabot[bot] in #1767
Bump the docker-deps group across 2 directories with 2 updates by @dependabot[bot] in #1766
Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 by @dependabot[bot] in #1764
Bump the docker-deps group across 5 directories with 3 updates by @dependabot[bot] in #1758
Bump the all-deps group with 3 updates by @dependabot[bot] in #1757
Bump golang.org/x/crypto from 0.46.0 to 0.47.0 in the all-deps group by @dependabot[bot] in #1756
Bumped linter and fixed a potential race condition by @mhutchinson in #1753
Bump the docker-deps group across 5 directories with 3 updates by @dependabot[bot] in #1750
Bump the all-deps group with 9 updates by @dependabot[bot] in #1749
Bump the all-deps group across 1 directory with 5 updates by @dependabot[bot] in #1748
Bump the all-deps group with 4 updates by @dependabot[bot] in #1745
Bump the docker-deps group across 4 directories with 1 update by @dependabot[bot] in #1744
Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #1740
Bump the docker-deps group across 5 directories with 3 updates by @dependabot[bot] in #1737
Bump the all-deps group with 4 updates by @dependabot[bot] in #1736
Bump the all-deps group with 2 updates by @dependabot[bot] in #1735
Bump Go from 1.23 to 1.24 by @roger2hk in #1733
Bump the docker-deps group across 4 directories with 2 updates by @dependabot[bot] in #1732
Bump the all-deps group with 10 updates by @dependabot[bot] in #1731
Bump the all-deps group with 3 updates by @dependabot[bot] in #1730
Bump the docker-deps group across 4 directories with 2 updates by @dependabot[bot] in #1727
Bump the all-deps group with 2 updates by @dependabot[bot] in #1726
Bump the all-deps group with 6 updates by @dependabot[bot] in #1725
Bump github/codeql-action from 3.29.2 to 3.29.5 in the all-deps group by @dependabot[bot] in #1723
Bump the docker-deps group across 5 directories with 2 updates by @dependabot[bot] in #1722
Bump the all-deps group with 8 updates by @dependabot[bot] in #1721
Bump the all-deps group with 8 updates by @dependabot[bot] in #1717
Bump the docker-deps group across 4 directories with 2 updates by @dependabot[bot] in #1716
Bump github/codeql-action from 3.29.0 to 3.29.2 in the all-deps group by @dependabot[bot] in #1715
add continuous mode by @phbnf in #1714
Bump golangci-lint from 2.0.2 to 2.1.6 by @roger2hk in #1713
Bump the all-deps group with 4 updates by @dependabot[bot] in #1706

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.21.3`

What's Changed

Adds local file support to the crane index subcommand by @edwardthiele in #2223
migrate to github.com/moby/moby modules by @thaJeztah in #2228
Bump the go-deps group across 4 directories with 7 updates by @dependabot[bot] in #2233
Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions group by @dependabot[bot] in #2220
mutate: reject path traversal and symlink escape in Extract by @KevinZhao in #2227
tarball: detect symlink cycles in extractFileFromTar by @vnykmshr in #2232
bump golang to 1.25.7 by @Subserial in #2236

New Contributors

@edwardthiele made their first contribution in #2223
@thaJeztah made their first contribution in #2228
@KevinZhao made their first contribution in #2227
@vnykmshr made their first contribution in #2232

Full Changelog: google/go-containerregistry@v0.21.2...v0.21.3

`v0.21.2`

What's Changed

Better handle redirects to https in ping by @jonjohnsonjr in #2225

Full Changelog: google/go-containerregistry@v0.21.1...v0.21.2

`v0.21.1`

This release fixes a regression in crane introduced in the previous release.

What's Changed

Add WithFileBufferedOpener for file-backed daemon image buffering by @twdamhore in #2214
crane: fix case in auth response json by @aelindeman in #2218

New Contributors

@twdamhore made their first contribution in #2214
@aelindeman made their first contribution in #2218

Full Changelog: google/go-containerregistry@v0.21.0...v0.21.1

`v0.21.0`

This release updates the minimum Go version to 1.25.6.

What's Changed

fix(mutate): don't skip dir replacements via whiteout in export by @r4f4 in #2191
Improve performance of v1.NewHash by @bmoylan in #2194
Bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #2207
Bump the root-deps group across 1 directory with 7 updates by @dependabot[bot] in #2195
Fix error messages in crane_test.go by @jammie-jelly in #2189
Bump go version across packages to 1.25.6 by @Subserial in #2211
Join go.mod dependency updates by @Subserial in #2212
Bump the go-deps group across 3 directories with 3 updates by @dependabot[bot] in #2213
Disable taint gosec lints by @Subserial in #2215
Update go version used in goreleaser by @Subserial in #2216

New Contributors

@r4f4 made their first contribution in #2191
@jammie-jelly made their first contribution in #2189

Full Changelog: google/go-containerregistry@v0.20.7...v0.21.0

`v0.20.8`

googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)

`v0.3.14`

Compare Source

What's Changed

chore: Update main.go to increase proxyrequesttimeout by @agrawalradhika-cell in #187
chore: Increase proxy request timeout for rsync gcloud fix by @agrawalradhika-cell in #188
feat: Update version.txt to 0.3.14 by @agrawalradhika-cell in #189

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.13...v0.3.14

`v0.3.13`

Compare Source

What's Changed

feat: support non-mtls requests as well by @sai-sunder-s in #185
feat: Update version.txt to 0.3.12 by @agrawalradhika-cell in #183
feat: Update version.txt to 0.3.13 by @agrawalradhika-cell in #186

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.12...v0.3.13

`v0.3.12`

Compare Source

What's Changed

chore: Update go.mod to upgrade the go version to 1.24.11 by @agrawalradhika-cell in #180

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.11...v0.3.12

`v0.3.11`

Compare Source

What's Changed

chore: Update version.txt to v0.3.11 by @agrawalradhika-cell in #176
chore: Update logging in http_proxy to be enabled via ENABLE_ENTERPRSE_CERTIFICATE_LOGS by @agrawalradhika-cell in #175
feat: Update CODEOWNERS to add Radhika and Nolan to ECP code by @agrawalradhika-cell in #166
build(deps): bump golang.org/x/crypto from 0.35.0 to 0.45.0 by @dependabot[bot] in #161
chore(deps): update dependency go to 1.25 by @renovate-bot in #144
fix(deps): update module golang.org/x/sys to v0.40.0 by @renovate-bot in #145
fix(deps): update module golang.org/x/crypto to v0.47.0 by @renovate-bot in #177

New Contributors

@dependabot[bot] made their first contribution in #161

Full Changelog: googleapis/enterprise-certificate-proxy@0.3.10...v0.3.11

`v0.3.9`

Compare Source

What's Changed

Revert "feat: Add logging for ECP such that it is enabled/disabled using ENABLE_ENTERPRISE_CERTIFICATE_LOGS flag" by @agrawalradhika-cell in #168
chore: Remove logging from http_proxy to reduce noise for customers, will add them back later. by @agrawalradhika-cell in #169

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.8...v0.3.9

`v0.3.8`

Compare Source

What's Changed

feat: Add logging for ECP such that it is enabled/disabled using ENABLE_ENTERPRISE_CERTIFICATE_LOGS flag by @agrawalradhika-cell in #164
chore: Update version.txt to update version to v0.3.8 by @agrawalradhika-cell in #167

New Contributors

@agrawalradhika-cell made their first contribution in #164

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.7...v0.3.8

letsencrypt/boulder (github.com/letsencrypt/boulder)

`v0.20260324.0`

Compare Source

What's Changed

test: add health check for bvitess by @jsha in [#8658](https://redirect

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-02-09T01:20:47Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

21 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.25.1` -> `1.25.6`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.27.4` -> `v2.28.0`
`google.golang.org/grpc`	`v1.78.0` -> `v1.79.3`
`cloud.google.com/go/kms`	`v1.23.2` -> `v1.26.0`
`github.com/aws/aws-sdk-go-v2`	`v1.41.0` -> `v1.41.4`
`github.com/aws/aws-sdk-go-v2/config`	`v1.32.5` -> `v1.32.7`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.16` -> `v2.7.20`
`github.com/aws/aws-sdk-go-v2/service/kms`	`v1.49.1` -> `v1.49.5`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.30.7` -> `v1.30.13`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.35.12` -> `v1.35.17`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.41.5` -> `v1.41.9`
`github.com/aws/smithy-go`	`v1.24.0` -> `v1.24.2`
`github.com/google/go-containerregistry`	`v0.20.7` -> `v0.21.0`
`github.com/googleapis/gax-go/v2`	`v2.16.0` -> `v2.18.0`
`github.com/pelletier/go-toml/v2`	`v2.2.3` -> `v2.2.4`
`go.opentelemetry.io/otel`	`v1.38.0` -> `v1.42.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.38.0` -> `v1.42.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`	`v1.38.0` -> `v1.42.0`
`go.opentelemetry.io/otel/metric`	`v1.38.0` -> `v1.42.0`
`go.opentelemetry.io/otel/sdk`	`v1.38.0` -> `v1.42.0`
`go.opentelemetry.io/otel/trace`	`v1.38.0` -> `v1.42.0`
`go.yaml.in/yaml/v2`	`v2.4.3` -> `v2.4.4`

File name: hack/tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

2 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.6` -> `1.25.0`
`google.golang.org/grpc`	`v1.75.1` -> `v1.76.0`
`google.golang.org/protobuf`	`v1.36.10` -> `v1.36.11`

red-hat-konflux · 2026-03-25T18:23:01Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: errors parsing go.mod:
go.mod:11:2: require github.com/asaskevich/govalidator: version "v0.0.0-20250122183457-e11347878e23" invalid: go.mod has post-v0 module path "github.com/asaskevich/govalidator/v11" at revision e11347878e23

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux · 2026-03-27T14:37:35Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

red-hat-konflux Bot added the dependencies label Feb 8, 2026

red-hat-konflux Bot changed the title ~~chore(deps): update go dependencies~~ chore(deps): update go dependencies - autoclosed Feb 8, 2026

red-hat-konflux Bot closed this Feb 8, 2026

red-hat-konflux Bot deleted the konflux/mintmaker/main/go-deps branch February 8, 2026 09:19

red-hat-konflux Bot changed the title ~~chore(deps): update go dependencies - autoclosed~~ chore(deps): update go dependencies Feb 8, 2026

red-hat-konflux Bot reopened this Feb 8, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 6 times, most recently from dd8d6e5 to 9caaf2c Compare February 9, 2026 01:20

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 17 times, most recently from 2790d78 to 863c664 Compare February 14, 2026 17:27

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 21 times, most recently from 6071bde to 23e6a9d Compare February 24, 2026 01:29

red-hat-konflux Bot and others added 6 commits March 27, 2026 14:00

chore(deps): update go dependencies

4fcc59d

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Updating Fulcio go mod

5dffd0d

Running go mod tidy

f2e4fce

Updating files to go 1.25.7

dee7e8c

Updating Generated Files

9456aa2

Updating Hack tools package to fix CVE reported by CI

1a4edcf

tommyd450 approved these changes Mar 27, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update go dependencies#350

chore(deps): update go dependencies#350
tommyd450 merged 6 commits intomainfrom
konflux/mintmaker/main/go-deps

red-hat-konflux Bot commented Feb 8, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Feb 9, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Mar 25, 2026

Uh oh!

red-hat-konflux Bot commented Mar 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

red-hat-konflux Bot commented Feb 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

Features

Bug Fixes

Features

Bug Fixes

What's Changed

v1.7.0: 1.7.0

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

v1.2.1: Allow nil arguments and catch panics in function calls

v1.1.0: 1.1

General Highlights

Module Highlights

What's Changed

New Contributors

CTFE

Tools

Log list library

Submission proxy

Other

Misc

Dependency updates

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Feb 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

File name: hack/tools/go.mod

Uh oh!

red-hat-konflux Bot commented Mar 25, 2026

⚠️ Artifact update problem

File name: go.sum

Uh oh!

red-hat-konflux Bot commented Mar 27, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

red-hat-konflux Bot commented Feb 8, 2026 •

edited

Loading

`v1.7.0`: 1.7.0

`v1.2.1`: Allow nil arguments and catch panics in function calls

`v1.1.0`: 1.1

red-hat-konflux Bot commented Feb 9, 2026 •

edited

Loading