Skip to content

build(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.8 - #2371

Merged
egibs merged 1 commit into
mainfrom
dependabot/go_modules/github.com/google/go-containerregistry-0.21.8
Aug 4, 2026
Merged

build(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.8#2371
egibs merged 1 commit into
mainfrom
dependabot/go_modules/github.com/google/go-containerregistry-0.21.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/google/go-containerregistry from 0.21.7 to 0.21.8.

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.8

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

Commits
  • 2ea098f Bump go version to 1.26.5 (#2388)
  • ec2e586 actions: reformat ALL actions (#2386)
  • ab819b6 actions: fix unformatted action (#2385)
  • eed9a20 actions: update actions to be pinned by hash (#2384)
  • 8a97709 build(deps): bump github.com/moby/moby/client (#2380)
  • d04bf7d tarball: use correct file extension for zstd/uncompressed (#2382)
  • 4d13d53 mutate: apply opaque-directory whiteouts (.wh..wh..opq) in Extract (#2372)
  • af2603f feat(remote): add WithReferrersTagFallback option (#2366)
  • fb19695 fix(daemon): copy ExposedPorts from source config in computeImageConfig (#2356)
  • 0c9d911 mutate: bounds-check layer index when building rebase addendums (#2371)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.21.7 to 0.21.8.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.7...v0.21.8)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 4, 2026
@egibs
egibs enabled auto-merge (squash) August 4, 2026 12:22
@egibs
egibs merged commit 38f20c6 into main Aug 4, 2026
23 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/google/go-containerregistry-0.21.8 branch August 4, 2026 12:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant