Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 16, 2025

Bumps the go-modules group with 8 updates in the / directory:

Package From To
github.com/onsi/gomega 1.36.3 1.37.0
github.com/paketo-buildpacks/occam 0.23.0 0.25.0
dario.cat/mergo 1.0.1 1.0.2
github.com/gabriel-vasile/mimetype 1.4.8 1.4.9
github.com/magiconair/properties 1.8.9 1.8.10
github.com/moby/sys/user 0.3.0 0.4.0
github.com/paketo-buildpacks/packit/v2 2.16.0 2.18.0
go.opentelemetry.io/proto/otlp 1.5.0 1.6.0

Updates github.com/onsi/gomega from 1.36.3 to 1.37.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.37.0

1.37.0

Features

  • add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]
Changelog

Sourced from github.com/onsi/gomega's changelog.

1.37.0

Features

  • add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]
Commits

Updates github.com/paketo-buildpacks/occam from 0.23.0 to 0.25.0

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.25.0

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.24.0...v0.25.0

v0.24.0

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.23.0...v0.24.0

Commits
  • 5d4a320 Adding support for packaging multi-arch extension based on the OS architectur...
  • 2330b88 Set PACK_VOLUME_KEY when performing pack build
  • 62e0cec Bump github.com/onsi/gomega from 1.36.0 to 1.36.3
  • 2afed4d Updates go mod version to 1.24.1
  • 27eb12e Updating github-config
  • See full diff in compare view

Updates dario.cat/mergo from 1.0.1 to 1.0.2

Release notes

Sourced from dario.cat/mergo's releases.

v1.0.2

What's Changed

  • Drops gopkg.in/yaml.v3, only used for loading fixtures. Thanks @​trim21 for bringing to my attention (#262) that this library is no longer maintained.

Full Changelog: darccio/mergo@v1.0.1...v1.0.2

Commits
  • 7b33b2b refactor: migrate from YAML to JSON for test data and update related functions
  • 229a214 chore(.well-known): add funding manifest URLs file
  • 6be20c6 chore(SECURITY.md): update supported versions to reflect current versioning
  • 9007623 chore(README) : remove kubernetes from the list of users
  • 2b1eb9c Update FUNDING.yml
  • 2ceb994 Create FUNDING.json
  • See full diff in compare view

Updates github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

v1.4.9 GLTF support and performance improvements

What's Changed

Full Changelog: gabriel-vasile/mimetype@v1.4.8...v1.4.9

Commits
  • 551461b add support for GLTF
  • 63e2356 go mod tidy
  • 12592ed json: add parser with query capacity
  • 55e964a Bump the github-actions group across 1 directory with 2 updates
  • a10cc03 Bump golang.org/x/net in the gomod group across 1 directory
  • 773b07c CI: move fuzz to cron job (#653)
  • 68c306d tests: revert effects of Extend
  • e8ef900 gha: use stable version of golang in CI
  • 9ab9e39 benchmark: reset mem and timer after allocating and before bench run
  • adb0181 json: more benchmarking
  • Additional commits viewable in compare view

Updates github.com/magiconair/properties from 1.8.9 to 1.8.10

Release notes

Sourced from github.com/magiconair/properties's releases.

v1.8.10

What's Changed

Full Changelog: magiconair/properties@v1.8.9...v1.8.10

Commits
  • 281f515 Merge pull request #81 from magiconair/issue-80
  • 6b7aa68 test with go1.24
  • 06f3133 escape leading whitespace on value in Write()
  • 3dfc3b5 Merge pull request #77 from magiconair/get32bit
  • b148584 Add 32bit numeric getters which do not panic
  • See full diff in compare view

Updates github.com/moby/sys/user from 0.3.0 to 0.4.0

Release notes

Sourced from github.com/moby/sys/user's releases.

mountinfo v0.4.0

Breaking changes:

  • PidMountInfo is now deprecated and will be removed before v1.0; users should switch to GetMountsFromReader (#47)

Fixes and improvements:

  • run filter after all fields are parsed (#50)
  • correct handling errors from bufio.Scan
  • documentation formatting fixes (#48)

Thanks to:

  • Aleksa Sarai

capability v0.4.0

Added

Fixed

  • Apply now returns an error if called for non-zero pid. Before this change, it could silently change some capabilities of the current process, instead of the one identified by the pid. (#168, #174)
  • Fixed tests that change capabilities to be run in a separate process. (#173)
  • Other improvements in tests. (#169, #170)

Changed

  • Use raw syscalls (which are slightly faster). (#176)
  • Most tests are now limited to testing the public API of the package. (#162)
  • Simplify parsing /proc/pid/status, add a test case. (#162)
  • Optimize the number of syscall to set ambient capabilities in Apply by clearing them first; add a test case. (#163, #164)
  • Better documentation for Apply, [NewFile], [NewFile2], [NewPid], [NewPid2]. (#175)

Removed

  • .golangci.yml and .codespellrc are no longer part of the package. (#158)

For the complete list of changes, see https://github.com/moby/sys/blob/HEAD/capability/CHANGELOG.md.


Thanks to all of the contributors who made this release possible:

... (truncated)

Commits
  • 71f0c5e Merge pull request #182 from dmcgowan/merge-idtools
  • db55716 Update interface to fit into user package
  • 8e08d6b Merge idtools from github.com/moby/moby/pkg/idtools
  • 7e518ec Merge pull request #49087 from dmcgowan/split-idtools-internal
  • 6134528 Split internal idtools functionality
  • 9ecbe7b pkg/idtools: rewrite to use moby/sys/user
  • 5805d70 pkg/idtools: use lazyregexp to compile regexes on first use
  • fdf2879 Merge pull request #49162 from thaJeztah/pkg_system_volume_uuid
  • 3d38759 pkg/idtools: remove uses of deprecated system.MkdirAll
  • ca0444f Merge pull request #180 from thaJeztah/add_codecov
  • Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.16.0 to 2.18.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.18.0

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.17.0...v2.18.0

v2.17.0

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.16.0...v2.17.0

Commits
  • aa5bc77 Bump github.com/anchore/stereoscope
  • f3fa74a Use upstream syft (#639)
  • 7e884aa Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  • f3ac27a Bump golang.org/x/net from 0.37.0 to 0.38.0
  • d54905c Bump github.com/onsi/gomega from 1.36.3 to 1.37.0
  • 9f6c6ec Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  • 98c0b23 Bump github.com/onsi/gomega from 1.34.1 to 1.36.3
  • 1916e76 Bump github.com/BurntSushi/toml from 1.4.0 to 1.5.0
  • 89b9189 Bump github.com/containerd/containerd from 1.7.0 to 1.7.27
  • a19d2e2 Bump google.golang.org/grpc from 1.54.0 to 1.56.3
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/proto/otlp from 1.5.0 to 1.6.0

Release notes

Sourced from go.opentelemetry.io/proto/otlp's releases.

v1.6.0

Overview

Generated Go code for the v1.6.0 version of the OTLP

OTLP Changelog

Added

  • resource: Add EntityRef. #635
  • general: add specs for empty telemetry envelopes. #622

Changed

  • logs: Stabilize event_name field in LogRecord message. #643
  • profiles: Move the lookup tables to ProfilesData. #644
  • profiles: Move default sample_type from the string table to sample_type. #620
  • general: remove comment on each service about keeping the RPC alive #637
  • metrics: clarify when bucket_counts array may be empty #619

Full Changelog: open-telemetry/opentelemetry-proto@v1.5.0...v1.6.0

What's Changed

... (truncated)

Commits
  • ed3d8b9 Release v1.6.0 (#304)
  • 54306df fix(deps): update module go.opentelemetry.io/build-tools/multimod to v0.23.1 ...
  • 757fdc7 chore(deps): update otel/build-protobuf docker tag to v0.25.0 (#308)
  • d2c0ede Use renovate-friendly def of Docker image (#305)
  • 7c54435 fix(deps): update module go.opentelemetry.io/build-tools/multimod to v0.23.0 ...
  • 225af11 chore(deps): update google.golang.org/genproto/googleapis/rpc digest to 10db9...
  • 0a64f54 chore(deps): update google.golang.org/genproto/googleapis/api digest to 10db9...
  • 293531b chore(deps): update github/codeql-action action to v3.28.16 (#298)
  • 3ed1d3d chore(deps): update google.golang.org/genproto/googleapis/rpc digest to 7b384...
  • 9dd37fe chore(deps): update google.golang.org/genproto/googleapis/api digest to 7b384...
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.36.0 to 0.37.0

Commits
  • 959f8f3 go.mod: update golang.org/x dependencies
  • 769bcd6 ssh: use the configured rand in kex init
  • d0a798f cryptobyte: fix typo 'octects' into 'octets' for asn1.go
  • acbcbef acme: remove unnecessary []byte conversion
  • 376eb14 x509roots: support constrained roots
  • b369b72 crypto/internal/poly1305: implement function update in assembly on loong64
  • 6b853fb ssh/knownhosts: check more than one key
  • See full diff in compare view

Updates golang.org/x/net from 0.38.0 to 0.39.0

Commits

Updates golang.org/x/sync from 0.12.0 to 0.13.0

Commits

Updates golang.org/x/sys from 0.31.0 to 0.32.0

Commits
  • 01aaa83 all: simplify code by using modern Go constructs
  • 1b2bd6b windows: replace all StringToUTF16 calls with UTF16FromString
  • 1c3b72f unix: update Linux kernel to 6.14
  • c175b6b windows: add cmsghdr and pktinfo structures
  • 3330b5e unix: support Readv, Preadv, Writev and Pwritev for darwin
  • 7401cce cpu: replace specific instructions with WORD in the function get_cpucfg on lo...
  • b8f7da6 cpu: add support for detecting cpu features on loong64
  • f2ce62c windows: add constants for PMTUD socket options
  • See full diff in compare view

Updates golang.org/x/text from 0.23.0 to 0.24.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 16, 2025
@dependabot dependabot bot requested a review from a team as a code owner May 16, 2025 07:09
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 16, 2025
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label May 16, 2025
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-modules-19216cfeb6 branch from 9eb3eee to bea5d2a Compare May 19, 2025 07:27
Bumps the go-modules group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.36.3` | `1.37.0` |
| [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.23.0` | `0.25.0` |
| [dario.cat/mergo](https://github.com/imdario/mergo) | `1.0.1` | `1.0.2` |
| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.8` | `1.4.9` |
| [github.com/magiconair/properties](https://github.com/magiconair/properties) | `1.8.9` | `1.8.10` |
| [github.com/moby/sys/user](https://github.com/moby/sys) | `0.3.0` | `0.4.0` |
| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.16.0` | `2.18.0` |
| [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.5.0` | `1.6.0` |



Updates `github.com/onsi/gomega` from 1.36.3 to 1.37.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.36.3...v1.37.0)

Updates `github.com/paketo-buildpacks/occam` from 0.23.0 to 0.25.0
- [Release notes](https://github.com/paketo-buildpacks/occam/releases)
- [Commits](paketo-buildpacks/occam@v0.23.0...v0.25.0)

Updates `dario.cat/mergo` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/imdario/mergo/releases)
- [Commits](darccio/mergo@v1.0.1...v1.0.2)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.8 to 1.4.9
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.8...v1.4.9)

Updates `github.com/magiconair/properties` from 1.8.9 to 1.8.10
- [Release notes](https://github.com/magiconair/properties/releases)
- [Commits](magiconair/properties@v1.8.9...v1.8.10)

Updates `github.com/moby/sys/user` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/moby/sys/releases)
- [Commits](moby/sys@user/v0.3.0...user/v0.4.0)

Updates `github.com/paketo-buildpacks/packit/v2` from 2.16.0 to 2.18.0
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.16.0...v2.18.0)

Updates `go.opentelemetry.io/proto/otlp` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.5.0...v1.6.0)

Updates `golang.org/x/crypto` from 0.36.0 to 0.37.0
- [Commits](golang/crypto@v0.36.0...v0.37.0)

Updates `golang.org/x/net` from 0.38.0 to 0.39.0
- [Commits](golang/net@v0.38.0...v0.39.0)

Updates `golang.org/x/sync` from 0.12.0 to 0.13.0
- [Commits](golang/sync@v0.12.0...v0.13.0)

Updates `golang.org/x/sys` from 0.31.0 to 0.32.0
- [Commits](golang/sys@v0.31.0...v0.32.0)

Updates `golang.org/x/text` from 0.23.0 to 0.24.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.23.0...v0.24.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/occam
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: dario.cat/mergo
  dependency-version: 1.0.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/magiconair/properties
  dependency-version: 1.8.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/moby/sys/user
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.18.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sync
  dependency-version: 0.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-version: 0.24.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-modules-19216cfeb6 branch from bea5d2a to dcb6be2 Compare May 20, 2025 07:40
@paketo-bot paketo-bot merged commit 11444b7 into main May 20, 2025
8 checks passed
@paketo-bot paketo-bot deleted the dependabot/go_modules/go-modules-19216cfeb6 branch May 20, 2025 07:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code semver:patch A change requiring a patch version bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants