Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 12, 2025

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
cuelang.org/go v0.13.2v0.15.3 age adoption passing confidence require minor
cuelang.org/go v0.11.1v0.15.3 age adoption passing confidence require minor
github.com/conforma/go-containerregistry 6f40a373459088 replace digest
github.com/cyberphone/json-canonicalization ba74d4419d51d7 age adoption passing confidence require digest
github.com/go-git/go-billy/v5 v5.6.0v5.7.0 age adoption passing confidence require minor
github.com/go-git/go-git/v5 v5.13.2v5.16.4 age adoption passing confidence require minor
github.com/go-git/go-git/v5 v5.13.0v5.16.4 age adoption passing confidence require minor
github.com/go-openapi/runtime v0.28.0v0.29.2 age adoption passing confidence require minor
github.com/go-openapi/strfmt v0.23.0v0.25.0 age adoption passing confidence require minor
github.com/golangci/golangci-lint v1.63.4v1.64.8 age adoption passing confidence require minor
github.com/google/addlicense v1.1.1v1.2.0 age adoption passing confidence require minor
github.com/konflux-ci/application-api e7eb2ec555a927 age adoption passing confidence require digest
github.com/open-policy-agent/conftest v0.62.0v0.66.0 age adoption passing confidence require minor
github.com/open-policy-agent/opa v1.6.0v1.12.1 age adoption passing confidence require minor
github.com/pkg/diff 20ebb0f4e6772a age adoption passing confidence require digest
github.com/sigstore/cosign/v2 v2.4.1v2.6.1 age adoption passing confidence require minor
github.com/sigstore/rekor v1.3.6v1.4.3 age adoption passing confidence require minor
github.com/sigstore/sigstore v1.8.9v1.10.3 age adoption passing confidence require minor
github.com/spf13/afero v1.14.0v1.15.0 age adoption passing confidence require minor
github.com/spf13/cobra v1.9.1v1.10.2 age adoption passing confidence require minor
github.com/spf13/viper v1.20.1v1.21.0 age adoption passing confidence require minor
github.com/tektoncd/chains v0.22.2v0.26.0 age adoption passing confidence require minor
github.com/tektoncd/cli v0.38.0v0.42.0 age adoption passing confidence require minor
github.com/tektoncd/cli v0.37.1v0.42.0 age adoption passing confidence require minor
github.com/testcontainers/testcontainers-go v0.34.0v0.40.0 age adoption passing confidence require minor
github.com/testcontainers/testcontainers-go/modules/registry v0.34.0v0.40.0 age adoption passing confidence require minor
github.com/wiremock/go-wiremock v1.11.0v1.14.0 age adoption passing confidence require minor
golang.org/x/benchmarks a2b48b6523919e age adoption passing confidence require digest
golang.org/x/exp 7e4ce0a944ab1f age adoption passing confidence require digest
golang.org/x/exp 2d47ceb944ab1f age adoption passing confidence require digest
golang.org/x/net v0.44.0v0.48.0 age adoption passing confidence require minor
golang.org/x/sync v0.17.0v0.19.0 age adoption passing confidence require minor
golang.org/x/text v0.29.0v0.32.0 age adoption passing confidence require minor
gotest.tools/gotestsum v1.12.1v1.13.0 age adoption passing confidence require minor
helm.sh/helm/v3 v3.18.5v3.19.4 age adoption passing confidence require minor
k8s.io/api v0.34.2v0.35.0 age adoption passing confidence require minor
k8s.io/apiextensions-apiserver v0.34.2v0.35.0 age adoption passing confidence require minor
k8s.io/apimachinery v0.34.2v0.35.0 age adoption passing confidence require minor
k8s.io/client-go v0.34.2v0.35.0 age adoption passing confidence require minor
k8s.io/kube-openapi f3f2b994e65d59 age adoption passing confidence require digest
k8s.io/kubernetes v1.34.2v1.35.0 age adoption passing confidence require minor
sigs.k8s.io/kind v0.26.0v0.31.0 age adoption passing confidence require minor
sigs.k8s.io/kustomize/api v0.20.1v0.21.0 age adoption passing confidence require minor
sigs.k8s.io/kustomize/kustomize/v5 v5.7.1v5.8.0 age adoption passing confidence require minor
sigs.k8s.io/kustomize/kyaml v0.20.1v0.21.0 age adoption passing confidence require minor

Release Notes

cue-lang/cue (cuelang.org/go)

v0.15.3

Compare Source

Evaluator

Fix a panic which could occur when using Expr after LookupPath on a cue.Value.

cmd/cue

Fix a panic which could occur when using cue cmd tasks referencing definitions.

Fix a panic which could occur when cue get go encountered a Go enum type with zero named values.

Encodings

Fix a bug in the TOML decoder where nested arrays were not being correctly mapped to CUE values.

Full list of changes since v0.15.1

v0.15.2

Compare Source

v0.15.1

Compare Source

Evaluator

Fix an evalv3 regression first introduced in v0.11.0 where the and built-in function started evaluating its arguments too eagerly, causing failures in cue def.

Fix an evalv3 regression where closedness info could be lost when using a comprehension.

Fix a bug where the evaluator would panic on alias cycles with dynamic fields rather than giving a good error.

LSP

Formatting standalone CUE files - either without a package name, or outside of a CUE module - now works correctly.

Fix a bug where trying to use "find references" on a CUE module with nested modules would cause a hang.

Fix a bug where resolving path roots did not work correctly in the presence of struct embeddings.

cmd/cue

Fix a regression in v0.15.0 where cue get go no longer skipped generating CUE files without any declarations.

Go API

Fix a bug in the subsume package where a struct with a pattern constraint did not subsume a closed struct with a matching field.

Rename the bootstrap build tag used in the internal/filetypes package to cuebootstrap to avoid conflicts with build tags in other Go modules.

Full list of changes since v0.15.0

v0.15.0

Compare Source

Changes which may break some users are marked below with: ⚠️

Note that this release no longer includes a checksums.txt asset; GitHub now provide digests natively.

LSP

This release includes the initial version of cue lsp - with support for "go to definition", "find references", rename, code completion, hover documentation, and code formatting.

See our Getting Started wiki page for instructions on how to set it up with your editor.

Please report any bugs or missing features you encounter via the Issue tracker or via the #lsp channels on Discord or Slack.

Language

explicitopen experiment for #A...

The explicitopen per-file experiment enables the posfix ... operator to explicitly open closed structs, allowing additional fields to be added. This change simplifies CUE's semantics, reduces user confusion, and enables clearer expression of type extensibility patterns.

You can try this experiment by following our how-to guide. For more information, see the proposal on GitHub and the spec change patch.

aliasv2 experiment

The aliasv2 per-file experiment implements the new "postfix aliases" syntax, and introduces a "self" predeclared identifier referring to the innermost surrounding struct or list.

You can try this experiment by following our how-to guide. For more information, see the proposal on GitHub and the spec change patch.

Other experiments

⚠️ With its proposal accepted, the keepvalidators global experiment is now stable, meaning that CUE_EXPERIMENT=keepvalidators is always enabled.

With its proposal accepted, the structcmp per-file experiment is now stable with language.version at v0.15.0 or later, meaning that the @experiment(structcmp) attribute is unnecessary as it's always enabled.

Evaluator

⚠️ Removing evalv2

The old evalv2 evaluator, which previously could be re-enabled via CUE_EXPERIMENT=evalv3=0, is now deleted. The new evalv3 evaluator has been on by default since v0.13.0, and at this point our entire test suite including Unity is working.

Removing the old evaluator reduces significant load on development, as we were able to clear out 4000 lines of code, and simplify the internal types and code structure. This is a necessary step to unblock ongoing feature and performance work in the evaluator.

As a bonus, because the old and new evaluators shared many core evaluator types, removing the fields only used by the old evaluator yields modest memory usage improvements of around 4-6%.

Performance

Evaluating concrete CUE values no longer involves dependency analysis; this should result in modest speed improvements when marshaling to YAML, via either cue export -e expr -o yaml or yaml.Marshal.

Dependency analysis now avoids computing references more than once, which resolves an expontential performance issue for some configurations using chains of CUE references.

Add caching to a part of the typochecker algorithm; this has been measured to provide performance improvements of up to 30% on a few large projects.

cue/parser now reuses more memory, which results in parsing performance improvements of up to 30% and memory savings of up to 50%, especially when loading large CUE data files.

Other changes

File embedding via the @embed attribute has gained an allowEmptyGlob option, to allow glob patterns to match zero files without causing an error.

The evaluator now shows all user errors created with the error builtin when they can be related to a disjunction failure. Previously, the evaluator would try to only show user errors directly part of a disjunction error, but that caused too many omissions.

Some error positions which were lost in the transition from evalv2 to evalv3 have been reintroduced.

Fix a bug where required fields in a definition might not be enforced when unifying with an inline struct in an expression, such as (#RequiresFoo & {bar: "baz"}).bar.

Fix a regression introduced in v0.12.0 where incomplete errors were not being handled consistently if they directly involved the top-level value.

A number of panics and error regressions in the evaluator which were reported since v0.14 have been fixed; thank you to all who reported these.

cmd/cue

A new cue help experiments command is introduced to document all available per-file and global experiments.

The cue fix --exp flag is introduced to rewrite files or packages to use new and experimental semantics with @experiment attributes.

cue mod mirror now copies OCI referrers between registries, which ensures that artifacts like signatures and attestations which reference modules being mirrored are copied as well.

cue mod resolve gains a --deps flag that lists all dependencies of the current module and which registries they resolve to.

cue get go gains an --outfile flag to generate exactly one CUE file for a single Go package, which can be useful when integrating cue get go into build systems like Bazel.

Fix a regression introduced in v0.9.0 where loading a qualified pattern like ./...:pkgname no longer filtered files based on the package name given.

cue get go now stops on any Go package loading error. Trying to continue in the presence of syntax or type-checking errors could lead to generating incorrect CUE.

Encodings

Initial support for encoding CUE schemas as JSON Schema is added. This includes a new encoding/jsonschema.Generate Go API, as well as CLI support via cue def --out jsonschema. This is currently very experimental, and many features are missing. For now, it can only generate a single version of JSON Schema, draft/2020-12.

The YAML library in the archived Go module gopkg.in/yaml.v3 has been replaced by go.yaml.in/yaml/v3, an active fork now maintained by the YAML organization.

cue exp gengotypes is improved to handle more edge cases with CUE package imports which could result in broken Go code.

The Protobuf decoder has been tweaked to not require files such as google/protobuf/timestamp.proto to exist on disk, given that they are mapped to CUE standard library APIs directly.

The Protobuf decoder has also been tweaked to support fully qualified references such as my.pkg.name.MessageName.

A bug is fixed in the TOML decoder where sub-table keys could incorrectly lead to duplicate key errors.

Standard library

The net package has gained new AddIP and AddIPCIDR functions to add numerical offsets to IP addresses or CIDR networks.

The Atoi, ParseInt, and ParseUint functions in the strconv package now work on integers with unlimited precision, like the rest of the CUE evaluator, rather than just a maximum of 64 bits.

Go API

The new cue.Value.IsClosed and cue.Value.IsClosedRecursively methods report whether a value has been closed at the top level or recursively, which is useful information when writing schema encodings.

The new cue.Patterns and cue.Selector.Pattern APIs allow introspecting pattern constraints in CUE struct values.

The new encoding/yaml.Decoder API allows decoding a stream of YAML documents, given that existing APIs did not support streams of multiple YAML documents.

encoding/json gains JSON Pointer APIs, which are already useful in packages like encoding/jsonschema.

cue/ast introduces PostfixExpr to support upcoming additions to the language syntax.

cue/ast introduces StringLabelNeedsQuoting to determine whether a string label needs to be quoted when used in CUE syntax.

cue/ast introduces NewStringLabel to create an ast.Label as either an unquoted identifier or a quoted string, depending on whether the string label needs quoting.

tools/fix has gained new APIs to fix configs to use an active experiment, as well as fixing configs to a newer language version.

cue introduces a Path.Append convenience method.

⚠️ cue/build.Instance.Match is removed, given that it was never set to any value at any point since it was added.

cue/token is adjusted so that node positions within a file never result in an offset which is outside the bounds of the file. This could easily lead to subtle bugs or panics when using node position offsets.

⚠️ The cue/token.Pos.Before method is now rewritten to match cue/token.Pos.Compare, given that it always returned "false" for positions from different files. The method is now deprecated as well.

cue/errors is adjusted so that Positions only collects printable positions, to prevent printing empty positions in the CLI.

cue/ast deprecates the File.Imports field in favor of the File.ImportSpecs iterator method. The iterator method File.ImportDecls is also introduced for completeness.

⚠️ The long-deprecated cue.ResolveReferences option API is now removed.

cue/parser.DeprecationError.Version is deprecated, as tracking CUE language versions via integers has not been used since v0.4.3, and the mechanism was never properly documented.

Full list of changes since v0.14.0

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/main-go-modules branch 13 times, most recently from 3ae1f3d to 1f19bd9 Compare December 19, 2025 11:03
@dheerajodha dheerajodha changed the title Update go modules (main) (minor) rebase! Update go modules (main) (minor) Dec 19, 2025
@renovate renovate bot force-pushed the renovate/main-go-modules branch from 1f19bd9 to 50c601b Compare December 19, 2025 13:05
@renovate renovate bot changed the title rebase! Update go modules (main) (minor) Update go modules (main) (minor) Dec 19, 2025
@renovate renovate bot force-pushed the renovate/main-go-modules branch 2 times, most recently from 059b692 to 5a20189 Compare December 22, 2025 01:40
@renovate renovate bot force-pushed the renovate/main-go-modules branch from 5a20189 to dfde260 Compare December 30, 2025 15:31
@renovate
Copy link
Contributor Author

renovate bot commented Dec 30, 2025

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 64 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.6 -> 1.25.0
github.com/evanphx/json-patch/v5 v5.9.0 -> v5.9.11
github.com/in-toto/in-toto-golang v0.9.0 -> v0.9.1-0.20240317085821-8e2966059a09
github.com/secure-systems-lab/go-securesystemslib v0.9.0 -> v0.9.1
github.com/tektoncd/pipeline v0.66.0 -> v1.3.1
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/ProtonMail/go-crypto v1.1.3 -> v1.1.6
github.com/cloudflare/circl v1.4.0 -> v1.6.1
github.com/docker/cli v28.2.2+incompatible -> v28.3.3+incompatible
github.com/docker/docker v28.3.3+incompatible -> v28.5.1+incompatible
github.com/docker/go-connections v0.5.0 -> v0.6.0
github.com/go-jose/go-jose/v4 v4.1.2 -> v4.1.3
github.com/go-openapi/analysis v0.23.0 -> v0.24.1
github.com/go-openapi/errors v0.22.0 -> v0.22.4
github.com/go-openapi/jsonpointer v0.21.0 -> v0.22.1
github.com/go-openapi/jsonreference v0.21.0 -> v0.21.3
github.com/go-openapi/loads v0.22.0 -> v0.23.2
github.com/go-openapi/runtime v0.28.0 -> v0.29.2
github.com/go-openapi/spec v0.21.0 -> v0.22.1
github.com/go-openapi/swag v0.23.0 -> v0.25.1
github.com/golang/snappy v0.0.4 -> v1.0.0
github.com/google/certificate-transparency-go v1.2.1 -> v1.3.2
github.com/hashicorp/go-retryablehttp v0.7.7 -> v0.7.8
github.com/letsencrypt/boulder v0.0.0-20240830194243-1fcf0ee08180 -> v0.20251110.0
github.com/magiconair/properties v1.8.7 -> v1.8.10
github.com/mailru/easyjson v0.7.7 -> v0.9.0
github.com/mattn/go-colorable v0.1.13 -> v0.1.14
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/term v0.5.0 -> v0.5.2
github.com/open-policy-agent/opa v1.6.0 -> v1.8.0
github.com/pjbgf/sha1cd v0.3.0 -> v0.3.2
github.com/rogpeppe/go-internal v1.13.1 -> v1.14.1
github.com/sagikazarmark/locafero v0.7.0 -> v0.11.0
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/sigstore/protobuf-specs v0.3.2 -> v0.5.0
github.com/skeema/knownhosts v1.3.0 -> v1.3.1
github.com/sourcegraph/conc v0.3.0 -> v0.3.1-0.20240121214520-5f936abd7ae8
github.com/spf13/afero v1.12.0 -> v1.15.0
github.com/spf13/cast v1.7.1 -> v1.10.0
github.com/spf13/cobra v1.9.1 -> v1.10.1
github.com/spf13/pflag v1.0.6 -> v1.0.10
github.com/spf13/viper v1.20.1 -> v1.21.0
go.mongodb.org/mongo-driver v1.16.1 -> v1.17.6
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 -> v0.63.0
go.opentelemetry.io/otel v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.36.0 -> v1.37.0
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
golang.org/x/crypto v0.41.0 -> v0.44.0
golang.org/x/mod v0.29.0 -> v0.31.0
golang.org/x/net v0.43.0 -> v0.47.0
golang.org/x/oauth2 v0.30.0 -> v0.33.0
golang.org/x/sync v0.17.0 -> v0.19.0
golang.org/x/sys v0.37.0 -> v0.38.0
golang.org/x/term v0.34.0 -> v0.37.0
golang.org/x/text v0.28.0 -> v0.31.0
gomodules.xyz/jsonpatch/v2 v2.4.0 -> v2.5.0
google.golang.org/api v0.215.0 -> v0.254.0
google.golang.org/genproto/googleapis/api v0.0.0-20250804133106-a7a43d27e69b -> v0.0.0-20250825161204-c5933d9347a5
google.golang.org/genproto/googleapis/rpc v0.0.0-20250804133106-a7a43d27e69b -> v0.0.0-20251022142026-3a174f9686a8
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0
k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b -> v0.0.0-20250910181357-589584f1c912
k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 -> v0.0.0-20251002143259-bc988d571ff4
knative.dev/pkg v0.0.0-20240815051656-89743d9bbf7c -> v0.0.0-20250415155312-ed3e2158b883
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 113 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.6 -> 1.25.3
github.com/CycloneDX/cyclonedx-go v0.9.2 -> v0.9.3
github.com/docker/docker v28.2.2+incompatible -> v28.5.1+incompatible
github.com/secure-systems-lab/go-securesystemslib v0.9.0 -> v0.9.1
github.com/sirupsen/logrus v1.9.3 -> v1.9.4-0.20230606125235-dd1b4c2e81af
github.com/spf13/pflag v1.0.6 -> v1.0.10
cloud.google.com/go v0.116.0 -> v0.121.6
cloud.google.com/go/auth v0.13.0 -> v0.17.0
cloud.google.com/go/auth/oauth2adapt v0.2.6 -> v0.2.8
cloud.google.com/go/compute/metadata v0.7.0 -> v0.9.0
cloud.google.com/go/iam v1.2.2 -> v1.5.3
cloud.google.com/go/monitoring v1.21.2 -> v1.24.2
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/BurntSushi/toml v1.5.0 -> v1.6.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.29.0 -> v1.30.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.48.1 -> v0.53.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.48.1 -> v0.53.0
github.com/ProtonMail/go-crypto v1.1.5 -> v1.3.0
github.com/aws/aws-sdk-go-v2 v1.36.3 -> v1.39.5
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.10 -> v1.7.1
github.com/aws/aws-sdk-go-v2/config v1.29.15 -> v1.31.16
github.com/aws/aws-sdk-go-v2/credentials v1.17.68 -> v1.18.20
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 -> v1.18.12
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 -> v1.4.12
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 -> v2.7.12
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 -> v1.8.4
github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.34 -> v1.4.9
github.com/aws/aws-sdk-go-v2/service/ecr v1.32.2 -> v1.45.1
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.25.4 -> v1.33.2
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 -> v1.13.2
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.7.2 -> v1.8.9
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 -> v1.13.12
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.15 -> v1.19.9
github.com/aws/aws-sdk-go-v2/service/s3 v1.80.1 -> v1.88.3
github.com/aws/aws-sdk-go-v2/service/sso v1.25.3 -> v1.30.0
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.1 -> v1.35.4
github.com/aws/aws-sdk-go-v2/service/sts v1.33.20 -> v1.39.0
github.com/aws/smithy-go v1.22.3 -> v1.23.1
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20240826150212-5dc58b6e29f8 -> v0.10.1
github.com/cenkalti/backoff/v5 v5.0.2 -> v5.0.3
github.com/cloudflare/circl v1.4.0 -> v1.6.1
github.com/cncf/xds/go v0.0.0-20250501225837-2ac532fd4443 -> v0.0.0-20251022180443-0feb69152e9f
github.com/containerd/stargz-snapshotter/estargz v0.16.3 -> v0.17.0
github.com/coreos/go-oidc/v3 v3.11.0 -> v3.17.0
github.com/cyberphone/json-canonicalization v0.0.0-20231217050601-ba74d44ecf5f -> v0.0.0-20241213102144-19d51d7fe467
github.com/dgraph-io/badger/v4 v4.7.0 -> v4.8.0
github.com/docker/cli v28.2.2+incompatible -> v28.5.0+incompatible
github.com/docker/go-connections v0.5.0 -> v0.6.0
github.com/envoyproxy/go-control-plane/envoy v1.32.4 -> v1.35.0
github.com/go-jose/go-jose/v4 v4.1.2 -> v4.1.3
github.com/go-openapi/analysis v0.23.0 -> v0.24.1
github.com/go-openapi/errors v0.22.0 -> v0.22.4
github.com/go-openapi/jsonpointer v0.21.0 -> v0.22.1
github.com/go-openapi/jsonreference v0.21.0 -> v0.21.3
github.com/go-openapi/loads v0.22.0 -> v0.23.2
github.com/go-openapi/spec v0.21.0 -> v0.22.1
github.com/go-openapi/swag v0.23.0 -> v0.25.1
github.com/google/cel-go v0.26.0 -> v0.26.1
github.com/google/certificate-transparency-go v1.2.1 -> v1.3.2
github.com/google/s2a-go v0.1.8 -> v0.1.9
github.com/googleapis/enterprise-certificate-proxy v0.3.4 -> v0.3.6
github.com/googleapis/gax-go/v2 v2.14.1 -> v2.15.0
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 -> v2.27.2
github.com/hashicorp/go-getter v1.8.1 -> v1.8.3
github.com/hashicorp/go-retryablehttp v0.7.7 -> v0.7.8
github.com/jmespath/go-jmespath v0.4.0 -> v0.4.1-0.20220621161143-b0104c826a24
github.com/mailru/easyjson v0.7.7 -> v0.9.0
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/buildkit v0.23.2 -> v0.26.3
github.com/moby/term v0.5.0 -> v0.5.2
github.com/prometheus/procfs v0.16.1 -> v0.17.0
github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 -> v0.0.0-20250401214520-65e299d6c5c9
github.com/sagikazarmark/locafero v0.7.0 -> v0.11.0
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/sigstore/fulcio v1.6.3 -> v1.7.1
github.com/sigstore/protobuf-specs v0.3.2 -> v0.5.0
github.com/sourcegraph/conc v0.3.0 -> v0.3.1-0.20240121214520-5f936abd7ae8
github.com/spf13/cast v1.7.1 -> v1.10.0
github.com/spiffe/go-spiffe/v2 v2.5.0 -> v2.6.0
github.com/stoewer/go-strcase v1.3.0 -> v1.3.1
github.com/vbatts/tar-split v0.12.1 -> v0.12.2
github.com/vektah/gqlparser/v2 v2.5.28 -> v2.5.31
github.com/yusufpapurcu/wmi v1.2.3 -> v1.2.4
go.mongodb.org/mongo-driver v1.16.1 -> v1.17.6
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/detectors/gcp v1.36.0 -> v1.38.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 -> v0.63.0
go.opentelemetry.io/otel v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/metric v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/sdk v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/sdk/metric v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/trace v1.37.0 -> v1.38.0
go.opentelemetry.io/proto/otlp v1.6.0 -> v1.7.1
go.step.sm/crypto v0.51.2 -> v0.74.0
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
golang.org/x/crypto v0.42.0 -> v0.46.0
golang.org/x/mod v0.29.0 -> v0.31.0
golang.org/x/oauth2 v0.30.0 -> v0.34.0
golang.org/x/sys v0.37.0 -> v0.39.0
golang.org/x/term v0.35.0 -> v0.38.0
golang.org/x/tools v0.37.0 -> v0.40.0
google.golang.org/api v0.215.0 -> v0.254.0
google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 -> v0.0.0-20250603155806-513f23925822
google.golang.org/genproto/googleapis/api v0.0.0-20250804133106-a7a43d27e69b -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/genproto/googleapis/rpc v0.0.0-20250804133106-a7a43d27e69b -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/grpc v1.76.0 -> v1.77.0
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0
k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 -> v0.0.0-20251002143259-bc988d571ff4
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730
sigs.k8s.io/release-utils v0.8.4 -> v0.12.2
File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 184 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.6 -> 1.25.3
4d63.com/gocheckcompilerdirectives v1.2.1 -> v1.3.0
4d63.com/gochecknoglobals v0.2.1 -> v0.2.2
cloud.google.com/go v0.116.0 -> v0.121.6
cloud.google.com/go/auth v0.13.0 -> v0.16.5
cloud.google.com/go/auth/oauth2adapt v0.2.6 -> v0.2.8
cloud.google.com/go/compute/metadata v0.7.0 -> v0.9.0
cloud.google.com/go/firestore v1.17.0 -> v1.18.0
cloud.google.com/go/iam v1.2.2 -> v1.5.2
cloud.google.com/go/kms v1.20.1 -> v1.22.0
cloud.google.com/go/longrunning v0.6.2 -> v0.6.7
cloud.google.com/go/monitoring v1.21.2 -> v1.24.2
cloud.google.com/go/storage v1.49.0 -> v1.56.1
cuelang.org/go v0.13.2 -> v0.15.1
github.com/4meepo/tagalign v1.4.1 -> v1.4.2
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0 -> v1.18.2
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.0 -> v1.11.0
github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 -> v1.11.2
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.1.0 -> v1.4.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.0.1 -> v1.2.0
github.com/AzureAD/microsoft-authentication-library-for-go v1.3.2 -> v1.4.2
github.com/BurntSushi/toml v1.5.0 -> v1.6.0
github.com/Crocmagnon/fatcontext v0.5.3 -> v0.7.1
github.com/CycloneDX/cyclonedx-go v0.9.2 -> v0.9.3
github.com/GaijinEntertainment/go-exhaustruct/v3 v3.3.0 -> v3.3.1
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.29.0 -> v1.30.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.48.1 -> v0.53.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.48.1 -> v0.53.0
github.com/IBM/sarama v1.43.3 -> v1.45.2
github.com/Masterminds/semver/v3 v3.3.0 -> v3.4.0
github.com/OpenPeeDeeP/depguard/v2 v2.2.0 -> v2.2.1
github.com/ProtonMail/go-crypto v1.0.0 -> v1.3.0
github.com/alingse/nilnesserr v0.1.1 -> v0.1.2
github.com/aws/aws-sdk-go v1.55.5 -> v1.55.8
github.com/aws/aws-sdk-go-v2 v1.36.3 -> v1.38.1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.10 -> v1.7.0
github.com/aws/aws-sdk-go-v2/config v1.29.15 -> v1.31.3
github.com/aws/aws-sdk-go-v2/credentials v1.17.68 -> v1.18.7
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.30 -> v1.18.4
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.34 -> v1.4.4
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.34 -> v2.7.4
github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.34 -> v1.4.4
github.com/aws/aws-sdk-go-v2/service/ecr v1.32.2 -> v1.45.1
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.25.4 -> v1.33.2
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.3 -> v1.13.0
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.7.2 -> v1.8.4
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.15 -> v1.13.4
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.15 -> v1.19.4
github.com/aws/aws-sdk-go-v2/service/kms v1.35.5 -> v1.44.2
github.com/aws/aws-sdk-go-v2/service/s3 v1.80.1 -> v1.87.1
github.com/aws/aws-sdk-go-v2/service/sso v1.25.3 -> v1.28.2
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.1 -> v1.34.0
github.com/aws/aws-sdk-go-v2/service/sts v1.33.20 -> v1.38.0
github.com/aws/smithy-go v1.22.3 -> v1.22.5
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20240826150212-5dc58b6e29f8 -> v0.10.1
github.com/catenacyber/perfsprint v0.7.1 -> v0.8.2
github.com/cloudflare/circl v1.4.0 -> v1.6.0
github.com/cncf/xds/go v0.0.0-20250501225837-2ac532fd4443 -> v0.0.0-20251022180443-0feb69152e9f
github.com/containerd/stargz-snapshotter/estargz v0.16.3 -> v0.17.0
github.com/coreos/go-oidc/v3 v3.11.0 -> v3.14.1
github.com/cyberphone/json-canonicalization v0.0.0-20231217050601-ba74d44ecf5f -> v0.0.0-20241213102144-19d51d7fe467
github.com/cyphar/filepath-securejoin v0.4.1 -> v0.6.1
github.com/docker/cli v28.2.2+incompatible -> v28.5.0+incompatible
github.com/docker/docker v28.2.2+incompatible -> v28.3.3+incompatible
github.com/envoyproxy/go-control-plane/envoy v1.32.4 -> v1.35.0
github.com/evanphx/json-patch/v5 v5.9.0 -> v5.9.11
github.com/gdamore/tcell/v2 v2.7.4 -> v2.9.0
github.com/ghostiam/protogetter v0.3.8 -> v0.3.9
github.com/go-chi/chi/v5 v5.1.0 -> v5.2.3
github.com/go-critic/go-critic v0.11.5 -> v0.12.0
github.com/go-jose/go-jose/v4 v4.1.2 -> v4.1.3
github.com/go-openapi/errors v0.22.0 -> v0.22.2
github.com/go-openapi/swag v0.23.0 -> v0.24.1
github.com/go-viper/mapstructure/v2 v2.3.0 -> v2.4.0
github.com/gofrs/flock v0.12.1 -> v0.13.0
github.com/golang-jwt/jwt/v5 v5.2.2 -> v5.3.0
github.com/golang/snappy v0.0.4 -> v1.0.0
github.com/golangci/dupl v0.0.0-20180902072040-3e9179ac440a -> v0.0.0-20250308024227-f665c8d69b32
github.com/golangci/gofmt v0.0.0-20241223200906-057b0627d9b9 -> v0.0.0-20250106114630-d62b90e6713d
github.com/golangci/revgrep v0.5.3 -> v0.8.0
github.com/google/cel-go v0.26.0 -> v0.26.1
github.com/google/certificate-transparency-go v1.2.1 -> v1.3.2
github.com/google/go-containerregistry v0.20.2 -> v0.20.6
github.com/google/s2a-go v0.1.8 -> v0.1.9
github.com/googleapis/enterprise-certificate-proxy v0.3.4 -> v0.3.6
github.com/googleapis/gax-go/v2 v2.14.1 -> v2.15.0
github.com/gostaticanalysis/comment v1.4.2 -> v1.5.0
github.com/gostaticanalysis/forcetypeassert v0.1.0 -> v0.2.0
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 -> v2.27.2
github.com/hashicorp/go-getter v1.8.1 -> v1.8.3
github.com/hashicorp/go-retryablehttp v0.7.7 -> v0.7.8
github.com/hashicorp/go-secure-stdlib/parseutil v0.1.8 -> v0.2.0
github.com/hashicorp/go-sockaddr v1.0.6 -> v1.0.7
github.com/hashicorp/vault/api v1.14.0 -> v1.16.0
github.com/jellydator/ttlcache/v3 v3.3.0 -> v3.4.0
github.com/jmespath/go-jmespath v0.4.0 -> v0.4.1-0.20220621161143-b0104c826a24
github.com/karamaru-alpha/copyloopvar v1.1.0 -> v1.2.1
github.com/kisielk/errcheck v1.8.0 -> v1.9.0
github.com/kkHAIKE/contextcheck v1.1.5 -> v1.1.6
github.com/ktr0731/go-fuzzyfinder v0.8.0 -> v0.9.0
github.com/ldez/exptostd v0.3.1 -> v0.4.2
github.com/ldez/gomoddirectives v0.6.0 -> v0.6.1
github.com/ldez/grignotin v0.7.0 -> v0.9.0
github.com/mailru/easyjson v0.7.7 -> v0.9.0
github.com/matoous/godox v0.0.0-20240105082147-c5b5e0e7c0c0 -> v1.1.0
github.com/mgechev/revive v1.5.1 -> v1.7.0
github.com/mitchellh/mapstructure v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/buildkit v0.23.2 -> v0.26.3
github.com/nunnatsa/ginkgolinter v0.18.4 -> v0.19.1
github.com/pierrec/lz4/v4 v4.1.21 -> v4.1.22
github.com/polyfloyd/go-errorlint v1.7.0 -> v1.7.1
github.com/prometheus/procfs v0.16.1 -> v0.17.0
github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 -> v0.0.0-20250401214520-65e299d6c5c9
github.com/sagikazarmark/locafero v0.7.0 -> v0.11.0
github.com/secure-systems-lab/go-securesystemslib v0.8.0 -> v0.9.1
github.com/securego/gosec/v2 v2.21.4 -> v2.22.2
github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 -> v1.4.0
github.com/sigstore/cosign/v2 v2.4.0 -> v2.6.0
github.com/sigstore/fulcio v1.6.3 -> v1.7.1
github.com/sigstore/protobuf-specs v0.3.2 -> v0.5.0
github.com/sigstore/rekor v1.3.6 -> v1.4.2
github.com/sigstore/sigstore v1.8.8 -> v1.9.6-0.20250729224751-181c5d3339b3
github.com/sigstore/sigstore/pkg/signature/kms/aws v1.8.8 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/azure v1.8.8 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.8.8 -> v1.9.6-0.20250729224751-181c5d3339b3
github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.8.8 -> v1.9.5
github.com/sourcegraph/conc v0.3.0 -> v0.3.1-0.20240121214520-5f936abd7ae8
github.com/spf13/afero v1.12.0 -> v1.15.0
github.com/spf13/cast v1.7.1 -> v1.10.0
github.com/spf13/cobra v1.9.1 -> v1.10.1
github.com/spf13/pflag v1.0.7 -> v1.0.10
github.com/spf13/viper v1.20.1 -> v1.21.0
github.com/spiffe/go-spiffe/v2 v2.5.0 -> v2.6.0
github.com/stoewer/go-strcase v1.3.0 -> v1.3.1
github.com/tdakkota/asciicheck v0.3.0 -> v0.4.1
github.com/tektoncd/hub v1.18.0 -> v1.22.2
github.com/tektoncd/pipeline v0.66.0 -> v1.3.1
github.com/tektoncd/triggers v0.29.0 -> v0.33.0
github.com/tetafro/godot v1.4.20 -> v1.5.0
github.com/uudashr/iface v1.3.0 -> v1.3.1
github.com/vbatts/tar-split v0.12.1 -> v0.12.2
github.com/vektah/gqlparser/v2 v2.5.28 -> v2.5.31
go-simpler.org/sloglint v0.7.2 -> v0.9.0
go.mongodb.org/mongo-driver v1.16.1 -> v1.17.4
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/detectors/gcp v1.36.0 -> v1.38.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.62.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 -> v0.63.0
go.opentelemetry.io/otel v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/metric v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/sdk v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/sdk/metric v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/trace v1.37.0 -> v1.38.0
go.step.sm/crypto v0.51.2 -> v0.70.0
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
goa.design/goa/v3 v3.18.2 -> v3.21.1
gocloud.dev v0.39.0 -> v0.43.0
gocloud.dev/docstore/mongodocstore v0.39.0 -> v0.43.0
gocloud.dev/pubsub/kafkapubsub v0.39.0 -> v0.43.0
golang.org/x/crypto v0.42.0 -> v0.45.0
golang.org/x/exp v0.0.0-20250408133849-7e4ce0ab07d0 -> v0.0.0-20250911091902-df9299821621
golang.org/x/exp/typeparams v0.0.0-20241108190413-2d47ceb2692f -> v0.0.0-20250210185358-939b2ce775ac
golang.org/x/net v0.44.0 -> v0.47.0
golang.org/x/oauth2 v0.30.0 -> v0.32.0
golang.org/x/sync v0.17.0 -> v0.18.0
golang.org/x/sys v0.37.0 -> v0.38.0
golang.org/x/term v0.35.0 -> v0.37.0
golang.org/x/text v0.29.0 -> v0.31.0
golang.org/x/tools v0.37.0 -> v0.38.0
gomodules.xyz/jsonpatch/v2 v2.4.0 -> v2.5.0
google.golang.org/api v0.215.0 -> v0.248.0
google.golang.org/genproto v0.0.0-20241118233622-e639e219e697 -> v0.0.0-20250715232539-7130f93afb79
google.golang.org/genproto/googleapis/api v0.0.0-20250804133106-a7a43d27e69b -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/genproto/googleapis/rpc v0.0.0-20250804133106-a7a43d27e69b -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/grpc v1.76.0 -> v1.77.0
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0
honnef.co/go/tools v0.5.1 -> v0.6.1
k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b -> v0.0.0-20250910181357-589584f1c912
k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 -> v0.0.0-20251002143259-bc988d571ff4
knative.dev/pkg v0.0.0-20240815051656-89743d9bbf7c -> v0.0.0-20250415155312-ed3e2158b883
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730
sigs.k8s.io/kustomize/api v0.20.1 -> v0.21.0
sigs.k8s.io/kustomize/cmd/config v0.20.1 -> v0.21.0
sigs.k8s.io/kustomize/kyaml v0.20.1 -> v0.21.0
sigs.k8s.io/release-utils v0.8.4 -> v0.12.1
File name: tools/kubectl/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 14 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.6 -> 1.25.0
github.com/spf13/cobra v1.9.1 -> v1.10.0
github.com/spf13/pflag v1.0.6 -> v1.0.9
go.opentelemetry.io/otel v1.35.0 -> v1.36.0
go.opentelemetry.io/otel/trace v1.35.0 -> v1.36.0
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
golang.org/x/net v0.43.0 -> v0.47.0
golang.org/x/sync v0.17.0 -> v0.18.0
golang.org/x/sys v0.37.0 -> v0.38.0
golang.org/x/term v0.34.0 -> v0.37.0
golang.org/x/text v0.28.0 -> v0.31.0
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0
k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b -> v0.0.0-20250910181357-589584f1c912
k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 -> v0.0.0-20251002143259-bc988d571ff4
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants