chore(deps): Bump the minor-patch group across 1 directory with 25 updates by dependabot[bot] · Pull Request #2011 · sigstore/policy-controller

dependabot · 2026-08-24T19:32:16Z

Bumps the minor-patch group with 16 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.42.0`	`1.43.7`
github.com/google/go-containerregistry	`0.21.7`	`0.21.9`
github.com/letsencrypt/boulder	`0.20260309.0`	`0.20260817.0`
github.com/sigstore/rekor	`1.5.3`	`1.5.4`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
golang.org/x/net	`0.57.0`	`0.58.0`
google.golang.org/grpc	`1.82.1`	`1.83.1`
k8s.io/api	`0.36.2`	`0.36.4`
k8s.io/client-go	`0.36.2`	`0.36.4`
cuelang.org/go	`0.16.1`	`0.17.1`
github.com/Azure/azure-sdk-for-go/sdk/azcore	`1.22.0`	`1.23.0`
github.com/docker/docker-credential-helpers	`0.9.5`	`0.9.8`
github.com/docker/go-connections	`0.7.0`	`0.8.1`
github.com/open-policy-agent/opa	`1.17.1`	`1.19.1`
github.com/sigstore/protobuf-specs	`0.5.1`	`0.5.2`
github.com/sigstore/sigstore-go	`1.2.2`	`1.3.0`

Updates github.com/aws/aws-sdk-go-v2 from 1.42.0 to 1.43.7

Commits

284a484 Release 2026-08-20
c278723 Regenerated Clients
626bebc Update API model
36c8121 Make x-amz-checksum-* headers on presigner always show up as headers (#3522)
283dd70 Expand S3 operations that check for an error inside an HTTP 200 response (wav...
27045a8 Fix tmv1 uploadretry flaky test (#3520)
228e8ec Release 2026-08-19
176298d Regenerated Clients
6a05af8 Update API model
daa38bc Bump Smithy version to 1.73.0 (#3524)
Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.7 to 0.21.9

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.9

What's Changed

actions: pin slsa generator by version by @Subserial in google/go-containerregistry#2395

fix: prevent data race on scope refreshes within remote.writer by @Subserial in google/go-containerregistry#2396

fix: remove '.' from unsafe path prefixes by @Subserial in google/go-containerregistry#2400

build(deps): bump the actions group with 3 updates by @dependabot[bot] in google/go-containerregistry#2398

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in google/go-containerregistry#2353

build(deps): bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /cmd/krane by @dependabot[bot] in google/go-containerregistry#2367

build(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /pkg/authn/k8schain by @dependabot[bot] in google/go-containerregistry#2368

build(deps): bump golang.org/x/net from 0.49.0 to 0.55.0 in /pkg/authn/kubernetes by @dependabot[bot] in google/go-containerregistry#2363

build(deps): bump the go-deps group across 3 directories with 7 updates by @dependabot[bot] in google/go-containerregistry#2377

build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in google/go-containerregistry#2375

Reject unsafe Windows archive paths in Extract by @Haihan-Jiang in google/go-containerregistry#2330

feat(goreleaser): add loong64 build support for crane/gcrane/krane by @xuxiaowei-com-cn in google/go-containerregistry#2358

Document tag and digest reference semantics by @Haihan-Jiang in google/go-containerregistry#2325

remote: release pull limiter slot when body is read to EOF by @knQzx in google/go-containerregistry#2373

tarball: bounds-check layer index in uncompressed LayerByDiffID by @arpitjain099 in google/go-containerregistry#2370

authn: read Podman auth from XDG config by @vigneshakaviki in google/go-containerregistry#2379

transport: per-host bearer token exchange on cross-host redirect by @amitzig in google/go-containerregistry#2360

mutate: bounds-check layer index when building rebase addendums by @arpitjain099 in google/go-containerregistry#2371

fix(daemon): copy ExposedPorts from source config in computeImageConfig by @x64vps in google/go-containerregistry#2356

feat(remote): add WithReferrersTagFallback option by @kevinmdavis in google/go-containerregistry#2366

mutate: apply opaque-directory whiteouts (.wh..wh..opq) in Extract by @sadmanf in google/go-containerregistry#2372

tarball: use correct file extension for zstd/uncompressed by @milas in google/go-containerregistry#2382

build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 in the go-deps group across 1 directory by @dependabot[bot] in google/go-containerregistry#2380

actions: update actions to be pinned by hash by @Subserial in google/go-containerregistry#2384

Bump go version to 1.26.5 by @Subserial in google/go-containerregistry#2388

New Contributors

@xuxiaowei-com-cn made their first contribution in google/go-containerregistry#2358

@knQzx made their first contribution in google/go-containerregistry#2373

@arpitjain099 made their first contribution in google/go-containerregistry#2370

@vigneshakaviki made their first contribution in google/go-containerregistry#2379

@amitzig made their first contribution in google/go-containerregistry#2360

@x64vps made their first contribution in google/go-containerregistry#2356

@kevinmdavis made their first contribution in google/go-containerregistry#2366

@sadmanf made their first contribution in google/go-containerregistry#2372

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

Commits

7b32099 build(deps): bump the actions group with 3 updates (#2398)
2a4447d fix: remove '.' from unsafe path prefixes (#2400)
43cc3e8 fix: prevent data race on scope refreshes within remote.writer (#2396)
7775aab actions: pin slsa generator version following linter exception (#2395)
2ea098f Bump go version to 1.26.5 (#2388)
ec2e586 actions: reformat ALL actions (#2386)
ab819b6 actions: fix unformatted action (#2385)
eed9a20 actions: update actions to be pinned by hash (#2384)
8a97709 build(deps): bump github.com/moby/moby/client (#2380)
d04bf7d tarball: use correct file extension for zstd/uncompressed (#2382)
Additional commits viewable in compare view

Updates github.com/letsencrypt/boulder from 0.20260309.0 to 0.20260817.0

Release notes

Sourced from github.com/letsencrypt/boulder's releases.

v0.20260817.0

What's Changed

go: Update from 1.26.3 to 1.26.6 by @beautifulentropy in letsencrypt/boulder#8937

mtpublisher: ML-DSA signatures using trees/cosignature by @beautifulentropy in letsencrypt/boulder#8933

sa: Preserve enabled state when updating rate limit overrides by @SashaMIT in letsencrypt/boulder#8935

mtca: Use mtpublisher implementation by @beautifulentropy in letsencrypt/boulder#8934

Apply ErrOnLimitReader to io.ReadAll() calls. by @ezekiel in letsencrypt/boulder#8834

Add Authz revocation upon Cert revocation, by feature flag. by @ezekiel in letsencrypt/boulder#8799

wfe: Early return after malformed JWK for KeyRollover by @beautifulentropy in letsencrypt/boulder#8938

bs3: Improve FakeS3 by @beautifulentropy in letsencrypt/boulder#8940

trees/checkpoint, trees/cosignature: Accept and return bytes by @beautifulentropy in letsencrypt/boulder#8941

Add custom lints covering our CP/CPS profiles by @aarongable in letsencrypt/boulder#8485

Revert "Remove GetRevocationStatus dead code" by @aarongable in letsencrypt/boulder#8939

Add lint - CP/CPS correspondence check to CI by @aarongable in letsencrypt/boulder#8947

Add lint for CCADB Section 6.3 by @aarongable in letsencrypt/boulder#8948

New Contributors

@SashaMIT made their first contribution in letsencrypt/boulder#8935

Full Changelog: letsencrypt/boulder@v0.20260811.0...v0.20260817.0

v0.20260811.0

What's Changed

mtca: Use trees/cosignature for signing by @beautifulentropy in letsencrypt/boulder#8932

docs: replace dead DESIGN.md link in README by @Semak12345 in letsencrypt/boulder#8881

New Contributors

@Semak12345 made their first contribution in letsencrypt/boulder#8881

Full Changelog: letsencrypt/boulder@v0.20260804.0...v0.20260811.0

v0.20260804.0

What's Changed

privatekey: Return a deterministic crypto.Signer from verifyMLDSA by @beautifulentropy in letsencrypt/boulder#8926

cert-checker: configure issuers for CP/CPS lints by @aarongable in letsencrypt/boulder#8927

unsigned: implement RFC 9925 by @jsha in letsencrypt/boulder#8901

trees/cosignature: Address remaining comments from #8904 by @beautifulentropy in letsencrypt/boulder#8928

build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.3 by @dependabot[bot] in letsencrypt/boulder#8929

observer: ccadb: check reported CRL shards for completeness by @inahga in letsencrypt/boulder#8890

Remove sa.FQDNSetExists dead code by @ezekiel in letsencrypt/boulder#8888

Full Changelog: letsencrypt/boulder@v0.20260729.0...v0.20260804.0

v0.20260729.0

What's Changed

Update grpc to v1.82.1 by @jsha in letsencrypt/boulder#8910

Update CODEOWNERS by @aarongable in letsencrypt/boulder#8921

mtca: write to tiles by @jsha in letsencrypt/boulder#8900

Move GenerateSKID into Core for sharing across ca, ceremony, and lints by @aarongable in letsencrypt/boulder#8922

... (truncated)

Commits

9ae976c Add lint for CCADB Section 6.3 (#8948)
e4d575f Add lint - CP/CPS correspondence check to CI (#8947)
4aeb577 Revert "Remove GetRevocationStatus dead code" (#8939)
2e7305d Add custom lints covering our CP/CPS profiles (#8485)
145a463 trees/checkpoint, trees/cosignature: Accept and return bytes (#8941)
89f1395 bs3: Improve FakeS3 (#8940)
b3d38f2 wfe: Early return after malformed JWK for KeyRollover (#8938)
43d8e17 Add Authz revocation upon Cert revocation, by feature flag. (#8799)
6da9976 Apply ErrOnLimitReader to io.ReadAll() calls. (#8834)
8dfaacc mtca: Use mtpublisher implementation (#8934)
Additional commits viewable in compare view

Updates github.com/sigstore/rekor from 1.5.3 to 1.5.4

Release notes

Sourced from github.com/sigstore/rekor's releases.

v1.5.4

Changelog

a36bd716fd0d81c314092718f37b53dc26b2af38 add changelog for v1.5.4 release (#2944)

705fc05d8397407872ebce83598c6ab27ef2a13b Apply proactive hardening against malformed requests (GHSA-843x-px86-vq42) (#2945)

5789c38f5cb272e7e41309d44985ce77cf01e56d build(deps): Bump github.com/go-swagger/go-swagger from 0.33.2 to 0.36.4 in /hack/tools in the all group across 1 directory (#2840)

7dd85d3abf008c7d11e1721fc95c6f4f91e5c6a0 better handle connection issues (#2931)

a8544a8e30ac73774b52f573c05d8e31844d26dd build(deps): Bump github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.4.0 (#2939)

ee19b41b56d15ac955e2a6fa5d059270d69bd8e6 remove repetitive viper lookups from api endpoints (#2922)

f3441b54a6969017e2a4cb111eecca9bf35385a2 move CI containers to GHCR (#2943)

d53aa51f4c3960d3b448cac308dc4e416e15671a build(deps): Bump the all group across 1 directory with 3 updates (#2942)

7af1d7c47fb9e893a3295b4a72553d2e9918dda3 build(deps): Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#2938)

ed250aa4865cf653e537fd84d8acc828a3889159 build(deps): Bump cloud.google.com/go/iam from 1.11.0 to 1.13.0 (#2937)

78ba595f16b0bfda5f1e5d7c76c93c260c4d9eef build(deps): Bump gocloud.dev from 0.45.0 to 0.46.0 (#2940)

6a6443e5230980a25a887a861f5c455eac46bf35 build(deps): Bump the all group with 4 updates (#2941)

a64a34535a43229d9b18d001f072a64b53a21004 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2935)

f6fa665db64145e254fb8b6ea2605074e96f946e build(deps): Bump golang from 1.26.5 to 1.26.6 in the all group (#2934)

2309dab576448029c276730735ccb76e5de52036 fix pprof arg (#2932)

5a1909af34d1f25c569d127b9b05530b54f02a05 build(deps): Bump the all group across 1 directory with 6 updates (#2925)

d9790726d5be07f40c3e1aa01f7f842b43976a6c build(deps): Bump golang from 3aff665 to 2005724 (#2924)

e1564dc41944a9653b79bf98e00b4ddd46919d45 build(deps): Bump github.com/prometheus/client_golang (#2928)

a497c02c0a0db1817cdb5d865f84576cca3723b6 build(deps): Bump the all group with 4 updates (#2930)

aea3064bdb4fcaa3ec06ee1c66e885fe5dc9073d build(deps): Bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 (#2926)

5486ddaa6db154049646f2cbf4d327145d85eee3 build(deps): Bump go.step.sm/crypto from 0.85.0 to 0.87.0 (#2927)

ebd7339c38c08f3ea865f63bc611b84d6d72f1df build(deps): Bump github.com/redis/go-redis/v9 from 9.20.1 to 9.22.0 (#2929)

d543a4a664465d8b99507fcd720af86539d5b817 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2923)

eaa6d5b3d22096c9bfd7458ca66032df4354aee7 build(deps): upgrade grpc-ecosystem/go-grpc-middleware to v2 (#2921)

1665651737fdea7d588a8bd71a2e5577abd2a928 build(deps): Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml (#2919)

24394e3bb6cceed5f17fa93972aba21b3e26d0f7 remove unused semver type version map (#2918)

3a9dba1565ad62d20004b6edd62c2997b8c71f5e build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 (#2823)

c4d4150e7fbdd45536cb79b32ced752a0c4a59c8 separate read/write sql traffic for indexservice into separate pools (#2914)

99f7844c567c7f37440882414c30970242f9ecf2 test against valkey (#2916)

aef6385ce5132a39b8f9dfe0210e5f2599fef5e9 Change default CLI upload type to hashedrekord (#2885)

1be154f685d656971fe80369cbb4e84ff3233886 fix shadowed err, wrong err label (#2907)

2cdf437463fbfdd0e638c7965b5ca2dcf315f4c5 build(deps): Bump github.com/go-openapi/swag/conv from 0.27.3 to 0.28.0 (#2910)

e7730e022c63ac15673d9138059127bb1ff20c23 build(deps): Bump golang.org/x/mod from 0.37.0 to 0.38.0 (#2911)

df58502b6ba2e74d9687638ee8094ffd3a908a9d build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2909)

730fa3757b2bb19efa4967c079a12dd1d2fc1581 build(deps): Bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.1 (#2912)

ace88208974be7481e44f6e849133a3b74e6e4d4 build(deps): Bump the all group with 4 updates (#2913)

dfe5a1c485c83b265696c1c9ea4399924d9af154 alpine: hash only the bytes read when computing the control.tar.gz digest (#2908)

a8f4a17c5628e2ccca90688086aef6ed87cbb38a Remove unmaintained scripts/createdb.sh dev helper (#2905)

9573f1b131eb20b000f4752233ca63538429c600 test mysql with production dsn strings (#2906)

f3299aac1ff4e1c7278bbbde80cde66f279203bc build(deps): Bump golang.org/x/crypto in /hack/tools (#2882)

cc5737ee991c30c4b300f464f00a74beb4e18acb build(deps): Bump the all group across 1 directory with 6 updates (#2898)

8485b5d69e1976880d0e6d05765e4489888228d4 build(deps): Bump cloud.google.com/go/pubsub from 1.50.2 to 1.51.0 (#2899)

3d80df7ee97108beb93477477ff0a2411528db79 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2897)

09bf9caea7ee3874ac651f3b11375fd8c181b748 create interface for TrillianClient (#2896)

671e78b6fc294999761fbd155e56ae54d1d23b93 build(deps): Bump the all group with 5 updates (#2900)

a00d60ef97b6016afe498c430bbd35a62f9b7fab build(deps): Bump go.step.sm/crypto from 0.77.7 to 0.85.0 (#2901)

ea4ed74526ad20b1a05e89fa387d03c123beafe1 build(deps): Bump actions/setup-go from 6.5.0 to 7.0.0 (#2902)

bde4e86e1e85cfb7ee4d48a7f98c9533051bac22 use more efficient table schema for indexes (#2903)

... (truncated)

Changelog

Sourced from github.com/sigstore/rekor's changelog.

v1.5.4

Features

search: add subject field for SAN-based lookup (#2850)

Change default CLI upload type to hashedrekord (#2885)

separate read/write sql traffic for indexservice into separate pools (#2914)

Bug Fixes

better handle connection issues (#2931)

fix pprof arg (#2932)

fix shadowed err, wrong err label (#2907)

alpine: hash only the bytes read when computing the control.tar.gz digest (#2908)

return a 400 error for invalid TreeID (#2895)

Return the file error instead of the URL error for a missing artifact path (#2872)

Apply proactive hardening against malformed requests (#2945)

Improvements

remove repetitive viper lookups from api endpoints (#2922)

move CI containers to GHCR (#2943)

remove unused semver type version map (#2918)

test against valkey (#2916)

Remove unmaintained scripts/createdb.sh dev helper (#2905)

test mysql with production dsn strings (#2906)

create interface for TrillianClient (#2896)

use more efficient table schema for indexes (#2903)

Migrate off deprecated golang.org/x/crypto/openpgp (#2883)

minimize duplicative JSON parsing while handling entries (#2880)

remove duplicative log entry (#2881)

optimize DSSE memory and cpu while parsing and verifying envs (#2879)

update builder to use go1.26.4 (#2873)

upgrade grpc-ecosystem/go-grpc-middleware to v2 (#2921)

Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml (#2919)

numerous upgraded dependencies

Documentation

docs(cli): add usage examples to rekor-cli commands (#2851)

Contributors

ahmagdyfb

Bob Callaway

Carlos Tadeu Panato Junior

Chiman Jain

Hayden

Jason Hall

Nikhil J

... (truncated)

Commits

a36bd71 add changelog for v1.5.4 release (#2944)
705fc05 Apply proactive hardening against malformed requests (GHSA-843x-px86-vq42) (#...
5789c38 build(deps): Bump github.com/go-swagger/go-swagger from 0.33.2 to 0.36.4 in /...
7dd85d3 better handle connection issues (#2931)
a8544a8 build(deps): Bump github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.4....
ee19b41 remove repetitive viper lookups from api endpoints (#2922)
f3441b5 move CI containers to GHCR (#2943)
d53aa51 build(deps): Bump the all group across 1 directory with 3 updates (#2942)
7af1d7c build(deps): Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#2938)
ed250aa build(deps): Bump cloud.google.com/go/iam from 1.11.0 to 1.13.0 (#2937)
Additional commits viewable in compare view

Updates github.com/sigstore/sigstore from 1.10.8 to 1.10.9

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.10.9

What's Changed

Note: sigstore/sigstore#2369 deprecates the TUF client. Use the TUF client from sigstore-go instead: https://github.com/sigstore/sigstore-go/tree/main/pkg/tuf

Deprecate TUF client, ValidatePubKey in sigstore/sigstore#2369

docs: add OVHcloud KMS in available external plugins in sigstore/sigstore#2359

fix(oauthflow): default the device flow poll interval to 5s per RFC 8628 in sigstore/sigstore#2381

Add BrowserOpener field to InteractiveIDTokenGetter in sigstore/sigstore#2383

Fix Azure KMS support for RSA signatures in sigstore/sigstore#2355

Full Changelog: sigstore/sigstore@v1.10.8...v1.10.9

Commits

ee9fe03 Fix Azure KMS support for RSA signatures (#2355)
b34fd13 feat(hashivault): token helper tests (#2176)
aed7c8b Dependencies updates (#2384)
05a1d97 build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azk...
be12908 build(deps): Bump github.com/hashicorp/vault/api (#2351)
a8f8715 build(deps): Bump cloud.google.com/go/kms in /pkg/signature/kms/gcp (#2350)
d91673d build(deps): Bump github.com/aws/aws-sdk-go-v2/config (#2372)
c482e99 build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#2347)
6529cc3 build(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms (#2376)
f95e2b7 build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2377)
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in stretchr/testify#1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in stretchr/testify#1775

mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1786

suite: validate method signatures and continue execution for valid tests by @vyas-git in stretchr/testify#1665

assert.PanicsWithError: report error message by @olivergondza in stretchr/testify#1400

assert: IsIncreasing et al can return false w/out failing by @brackendawson in stretchr/testify#1787

add type to error message of assert.Same by @egawata in stretchr/testify#1792

mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in stretchr/testify#1795

assert: truncate very long objects in test failure messages by @brackendawson in stretchr/testify#1646

assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in stretchr/testify#1888

suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in stretchr/testify#1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in stretchr/testify#1783

Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in stretchr/testify#1708

Promote ccoVeille to maintainer by @brackendawson in stretchr/testify#1784

build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in stretchr/testify#1790

assert.YAMLEq: Document mutlidoc behavior by @brackendawson in stretchr/testify#1791

_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in stretchr/testify#1782

doc: remove ineffective inline code blocks by @brackendawson in stretchr/testify#1714

Tag generated assertions as non-generated in new .gitattributes by @ubunatic in stretchr/testify#1815

... (truncated)

Commits

959dbda Merge pull request #1935 from harryzcy/yaml-update
9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
001eb79 Merge pull request #1905 from Kentzo/patch-1
ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
f8c01f3 mock: Mock.Return does not exist anymore
12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
a11649e assert: make *AssertionFunc type just aliases
dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
098f8d7 _codegen: use strings.Builder
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.54.0 to 0.55.0

Commits

f44d03d go.mod: update golang.org/x dependencies
5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64
b07833c ssh: return window credit for discarded extended data
d701c51 acme: fix nil pointer dereference in pebble test error reporting
999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms
90f76b8 ssh: reject certificate signature keys before recursing
b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs
626e40f ssh: drain stderr on forwarded TCP and Unix channels
31914c6 x509roots/fallback: update bundle
f2135b8 all: clean up minor issues found by staticcheck
Additional commits viewable in compare view

Updates golang.org/x/net from 0.57.0 to 0.58.0

Commits

acc78e0 go.mod: update golang.org/x dependencies
90d10f0 internal/http3: delete invalid Content-Length if declared in server handler
08abf4d internal/http3: infer headers when Content-Encoding is set but is empty
8d10596 http2: avoid deadlocks in wrapped ClientConn state callback
99c3b0a http2/hpack: build the table lookup maps lazily, only for encoders
5a920b1 http3: rework registration to allow using a fake network
7fd2842 quic: return an error from Accept after PacketConn reader exits
825111d quic: avoid busy-loop when keep-alive is blocked by congestion control
a02ddfa http/httpproxy: prioritize lowercase proxy environment variables
574e5eb quic: halt conn goroutines on close when listener exits early
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.82.1 to 1.83.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.1

Security

xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)

Special Thanks: @nvxbug

xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)

Special Thanks: @nvxbug

xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)

Special Thanks: @alimony

xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)

Special Thanks: @alimony

xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)

Special Thanks: @alimony

Performance

transport: Restrict memory overhead of buffering small data frames. (#9331)

Release 1.83.0

Security

server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.

xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.

xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.

xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)

xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)

authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)

Special Thanks: @hnefatl

xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.

This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)

xds: Add support for xDS-based HTTP CONNECT proxies.

This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=trueDescription has been truncated

…dates Bumps the minor-patch group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.0` | `1.43.7` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.7` | `0.21.9` | | [github.com/letsencrypt/boulder](https://github.com/letsencrypt/boulder) | `0.20260309.0` | `0.20260817.0` | | [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.5.3` | `1.5.4` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [golang.org/x/net](https://github.com/golang/net) | `0.57.0` | `0.58.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.82.1` | `1.83.1` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.36.2` | `0.36.4` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.2` | `0.36.4` | | [cuelang.org/go](https://github.com/cue-lang/cue) | `0.16.1` | `0.17.1` | | [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.22.0` | `1.23.0` | | [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.9.5` | `0.9.8` | | [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.7.0` | `0.8.1` | | [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.17.1` | `1.19.1` | | [github.com/sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs) | `0.5.1` | `0.5.2` | | [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `1.2.2` | `1.3.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.42.0 to 1.43.7 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.42.0...v1.43.7) Updates `github.com/google/go-containerregistry` from 0.21.7 to 0.21.9 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.7...v0.21.9) Updates `github.com/letsencrypt/boulder` from 0.20260309.0 to 0.20260817.0 - [Release notes](https://github.com/letsencrypt/boulder/releases) - [Changelog](https://github.com/letsencrypt/boulder/blob/main/docs/release.md) - [Commits](letsencrypt/boulder@v0.20260309.0...v0.20260817.0) Updates `github.com/sigstore/rekor` from 1.5.3 to 1.5.4 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.5.3...v1.5.4) Updates `github.com/sigstore/sigstore` from 1.10.8 to 1.10.9 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.10.8...v1.10.9) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0 - [Commits](golang/crypto@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.57.0 to 0.58.0 - [Commits](golang/net@v0.57.0...v0.58.0) Updates `google.golang.org/grpc` from 1.82.1 to 1.83.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.82.1...v1.83.1) Updates `google.golang.org/protobuf` from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 Updates `k8s.io/api` from 0.36.2 to 0.36.4 - [Commits](kubernetes/api@v0.36.2...v0.36.4) Updates `k8s.io/apimachinery` from 0.36.2 to 0.36.4 - [Commits](kubernetes/apimachinery@v0.36.2...v0.36.4) Updates `k8s.io/client-go` from 0.36.2 to 0.36.4 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.36.2...v0.36.4) Updates `cuelang.org/go` from 0.16.1 to 0.17.1 - [Release notes](https://github.com/cue-lang/cue/releases) - [Commits](cue-lang/cue@v0.16.1...v0.17.1) Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.22.0 to 1.23.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.22.0...sdk/azcore/v1.23.0) Updates `github.com/docker/docker-credential-helpers` from 0.9.5 to 0.9.8 - [Release notes](https://github.com/docker/docker-credential-helpers/releases) - [Commits](docker/docker-credential-helpers@v0.9.5...v0.9.8) Updates `github.com/docker/go-connections` from 0.7.0 to 0.8.1 - [Commits](docker/go-connections@v0.7.0...v0.8.1) Updates `github.com/hashicorp/vault/api` from 1.22.0 to 1.23.0 - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md) - [Commits](hashicorp/vault@api/v1.22.0...api/v1.23.0) Updates `github.com/open-policy-agent/opa` from 1.17.1 to 1.19.1 - [Release notes](https://github.com/open-policy-agent/opa/releases) - [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md) - [Commits](open-policy-agent/opa@v1.17.1...v1.19.1) Updates `github.com/sigstore/protobuf-specs` from 0.5.1 to 0.5.2 - [Release notes](https://github.com/sigstore/protobuf-specs/releases) - [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md) - [Commits](sigstore/protobuf-specs@v0.5.1...v0.5.2) Updates `github.com/sigstore/sigstore-go` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/sigstore/sigstore-go/releases) - [Commits](sigstore/sigstore-go@v1.2.2...v1.3.0) Updates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.10.8 to 1.10.9 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.10.8...v1.10.9) Updates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.10.8 to 1.10.9 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.10.8...v1.10.9) Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.10.8 to 1.10.9 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.10.8...v1.10.9) Updates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.10.8 to 1.10.9 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.10.8...v1.10.9) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.43.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/letsencrypt/boulder dependency-version: 0.20260817.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/sigstore/rekor dependency-version: 1.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/sigstore/sigstore dependency-version: 1.10.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: golang.org/x/crypto dependency-version: 0.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: golang.org/x/net dependency-version: 0.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: google.golang.org/grpc dependency-version: 1.83.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: google.golang.org/protobuf dependency-version: 1.36.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: k8s.io/api dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: k8s.io/apimachinery dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: k8s.io/client-go dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: cuelang.org/go dependency-version: 0.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore dependency-version: 1.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/docker/docker-credential-helpers dependency-version: 0.9.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/docker/go-connections dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/hashicorp/vault/api dependency-version: 1.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/open-policy-agent/opa dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/sigstore/protobuf-specs dependency-version: 0.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/sigstore/sigstore-go dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws dependency-version: 1.10.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure dependency-version: 1.10.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp dependency-version: 1.10.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault dependency-version: 1.10.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 24, 2026

dependabot Bot requested a review from a team as a code owner August 24, 2026 19:32

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 24, 2026

Navigation Menu

Uh oh!

chore(deps): Bump the minor-patch group across 1 directory with 25 updates - #2011

chore(deps): Bump the minor-patch group across 1 directory with 25 updates#2011
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-patch-df46388210

dependabot Bot commented on behalf of github Aug 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 24, 2026

v0.21.9

What's Changed

v0.21.8

What's Changed

New Contributors

v0.20260817.0

What's Changed

New Contributors

v0.20260811.0

What's Changed

New Contributors

v0.20260804.0

What's Changed

v0.20260729.0

What's Changed

v1.5.4

Changelog

v1.5.4

Features

Bug Fixes

Improvements

Documentation

Contributors

v1.10.9

What's Changed

v1.12.1

What's Changed

New Contributors

What's Changed

New Contributors

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

Release 1.83.1

Security

Performance

Release 1.83.0

Security

New Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants