Skip to content

Bump github.com/buildpacks/pack from 0.36.4 to 0.40.1#4774

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github.com/buildpacks/pack-0.40.1
Open

Bump github.com/buildpacks/pack from 0.36.4 to 0.40.1#4774
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github.com/buildpacks/pack-0.40.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 12, 2026

Bumps github.com/buildpacks/pack from 0.36.4 to 0.40.1.

Release notes

Sourced from github.com/buildpacks/pack's releases.

pack v0.40.1

Prerequisites

  • A container runtime such as Docker or podman must be available to execute builds.

Install

For instructions on installing pack, see our installation docs.

Run

Run the command pack.

You should see the following output

CLI for building apps using Cloud Native Buildpacks

Usage: pack [command]

Available Commands: build Generate app image from source code builder Interact with builders buildpack Interact with buildpacks extension Interact with extensions config Interact with your local pack config file inspect Show information about a built app image stack (deprecated) Interact with stacks rebase Rebase app image with latest run image sbom Interact with SBoM completion Outputs completion script location report Display useful information for reporting an issue version Show current 'pack' version help Help about any command

Flags: --force-color Force color output -h, --help Help for 'pack' --no-color Disable color output -q, --quiet Show less output --timestamps Enable timestamps in output -v, --verbose Show more output --version Show current 'pack' version

Use "pack [command] --help" for more information about a command.

Info

... (truncated)

Commits
  • bb546d6 chore: fix security vulnerabilities in dependencies (#2539)
  • 41139ee build(deps): bump github.com/chainguard-dev/kaniko (#2538)
  • 9d92bd1 build(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#2533)
  • 2926efc build(deps): bump github.com/google/go-containerregistry (#2532)
  • b86f52e build(deps): bump the go-dependencies group across 1 directory with 7 updates...
  • a8eaec8 build(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 (#2522)
  • d0e5e38 build(deps): bump the go-dependencies group across 1 directory with 14 update...
  • 06c9593 Ship FreeBSD binaries (#2518)
  • 94348a5 Execution Environment RFC Implementation (#2324)
  • 8125306 chore: migrate from docker/docker to moby/moby client (#2512)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/buildpacks/pack](https://github.com/buildpacks/pack) from 0.36.4 to 0.40.1.
- [Release notes](https://github.com/buildpacks/pack/releases)
- [Changelog](https://github.com/buildpacks/pack/blob/main/RELEASE.md)
- [Commits](buildpacks/pack@v0.36.4...v0.40.1)

---
updated-dependencies:
- dependency-name: github.com/buildpacks/pack
  dependency-version: 0.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants