🌱 Bump the gomod group across 2 directories with 8 updates #4866
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the gomod group with 6 updates in the / directory:
5.16.35.16.40.25.20.26.20.30.00.31.02.2.42.3.00.159.01.3.01.57.11.57.2Bumps the gomod group with 2 updates in the /tools directory: github.com/golangci/golangci-lint/v2 and github.com/goreleaser/goreleaser/v2.
Updates
github.com/go-git/go-git/v5from 5.16.3 to 5.16.4Release notes
Sourced from github.com/go-git/go-git/v5's releases.
Commits
de8ecc3Merge pull request #1743 from go-git/renovate/releases/v5.x-go-github.com-go-...3e752f0build: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY]3a31754Merge pull request #1741 from go-git/renovate/releases/v5.x-go-github.com-clo...acc28f1build: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY]95f3880Merge pull request #1742 from go-git/renovate/releases/v5.x-go-golang.org-x-n...329f926build: Update module golang.org/x/net to v0.38.0 [SECURITY]399e04bMerge pull request #1734 from pjbgf/fix-ci2025eaebuild: test, Fix build on Windows.fb6806fMerge pull request #1732 from swills/find-hash-panic-fix-backport382530fplumbing: format/idxfile, prevent panicUpdates
github.com/moby/buildkitfrom 0.25.2 to 0.26.2Release notes
Sourced from github.com/moby/buildkit's releases.
... (truncated)
Commits
be1f38eMerge pull request #6374 from crazy-max/0.26_picks_0.26.28a34dcdcache(s3): request checksum calculation when required29fc55fMerge pull request #6367 from tonistiigi/v0.26-picks247e13ccontentutil: avoid defaulting to ReadAt for fetcha8e548fMerge pull request #4673 from bpascard/mastercc2d332Merge pull request #6351 from thaJeztah/bump_tarsplit640f8bbMerge pull request #6349 from tonistiigi/dockerd-test-fixesc3fd6a3vendor: github.com/vbatts/tar-split v0.12.22224254test: test updates for dockerda2a940eMerge pull request #6345 from tonistiigi/cap-session-policyUpdates
golang.org/x/textfrom 0.30.0 to 0.31.0Commits
e7ff6b3go.mod: update golang.org/x dependenciesfbf012ball: use reflect.TypeFor instead of reflect.TypeOfUpdates
github.com/google/osv-scanner/v2from 2.2.4 to 2.3.0Release notes
Sourced from github.com/google/osv-scanner/v2's releases.
Changelog
Sourced from github.com/google/osv-scanner/v2's changelog.
Commits
b0b6027chore: OSV-Scanner Release 2.3.0 (#2350)b32306cfeat: update osv-scalibr (#2352)b8a7531test: update snapshots (#2353)0c8d19ffeat: update osv-scalibr (#2349)160118dchore(deps): update github/codeql-action action to v4.31.3 (#2347)e1e532ffeat: replacerequirementsenhanceableextractor with transitive enricher (#...12ad8d7fix(deps): update osv-scanner minor (#2346)a2268adfeat: update osv-scalibr (#2345)daa38bctest: update snapshots (#2348)9e193dafeat: Use osduplicate annotators instead (#2344)Updates
gitlab.com/gitlab-org/api/client-gofrom 0.159.0 to 1.3.0Release notes
Sourced from gitlab.com/gitlab-org/api/client-go's releases.
... (truncated)
Changelog
Sourced from gitlab.com/gitlab-org/api/client-go's changelog.
... (truncated)
Commits
44a866echore(release): 1.3.0 [skip ci]bf6777fMerge branch 'add-more-creds' into 'main'3439f4ffeat(credentials): Add support for revoking group PATs, listing/deleting grou...a6c9ddeMerge branch 'moveCommentsInterfaces1' into 'main'84a8f82refactor: moved comments to interface407491eMerge branch 'moveCommentsInterfaces2' into 'main'b2c52c2refactor(users): moved comments to interface6c99ca8Merge branch 'moveCommentInterfaces4' into 'main'7a1da57refactor: moved comments to interface929dfeaMerge branch 'simplify-requests' into 'main'Updates
cloud.google.com/go/storagefrom 1.57.1 to 1.57.2Release notes
Sourced from cloud.google.com/go/storage's releases.
Commits
54f5f63chore: librarian release pull request: 20251114T145800Z (#13361)315f65bfix(spanner): decoding spanner rows using SelectAll should map values in corr...d1224e8test(spanner): additional tests for SelectAll() (#13360)b9196cffeat: Add grpc.xds.resource_type label to xDS client metrics (#13358)b0f1362fix(storage): Handle redirect on takeover. (#13354)5574f5bchore: librarian update image pull request: 20251113T211851Z (#13355)3fef58bchore(internal/librariangen): bump gapic-generator-go to 0.55.1 (#13352)e978a68chore: update the go version in renovate.json (#13348)29b6c97chore: librarian update image pull request: 20251112T170525Z (#13346)1f4da37chore(internal/librariangen): bump gapic-generator-go to 0.55.0 (#13345)Updates
github.com/golangci/golangci-lint/v2from 2.6.1 to 2.6.2Release notes
Sourced from github.com/golangci/golangci-lint/v2's releases.
Changelog
Sourced from github.com/golangci/golangci-lint/v2's changelog.
Commits
dc16cf4chore: prepare releasea8a12dbfix: fmt command with symlinks (#6187)7bcb236build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 in the gi...f07ab6abuild(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 in /scripts/gen_g...7255b2cbuild(deps): bump github.com/maratori/testpackage from 1.1.1 to 1.1.2 (#6183)a237b82build(deps): bump github.com/maratori/testableexamples from 1.0.0 to 1.0.1 (#...79163b6build(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 (#6181)c128d12fix: use file depending on build configuration to invalidate cache (#6179)b92f577docs: improve fix flag description (#6175)fb3e4b2docs: fix changelogUpdates
github.com/goreleaser/goreleaser/v2from 2.12.7 to 2.13.0Release notes
Sourced from github.com/goreleaser/goreleaser/v2's releases.
... (truncated)
Commits
6e5e0aachore: auto-update generated filesa8c402fdocs: remove -unreleasedaaf5877fix(github): enterprise urls (#6261)689b24ddocs: update schema12a3492fix(aur): prerelease versions were not being properly handled (#6204)2299f2cchore(deps): update 7 dependencies (#6275)50e3175ci(deps): bump the actions group with 5 updates (#6277)c188627chore: auto-update generated filesae52ca2docs(security): update incident response document0f0c1cefix(mcp): move it all inside mcp.githubMost Recent Ignore Conditions Applied to This Pull Request
You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions