Skip to content

chore(deps): update go dependencies#110

Merged
JasonPowr merged 2 commits intomainfrom
konflux/mintmaker/main/go-deps
Feb 27, 2026
Merged

chore(deps): update go dependencies#110
JasonPowr merged 2 commits intomainfrom
konflux/mintmaker/main/go-deps

Conversation

@red-hat-konflux
Copy link
Copy Markdown

@red-hat-konflux red-hat-konflux Bot commented Feb 26, 2026

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
github.com/ThalesIgnite/crypto11 indirect minor v1.2.5 -> v1.6.0
github.com/google/certificate-transparency-go indirect patch v1.3.2 -> v1.3.3
github.com/open-policy-agent/opa indirect minor v1.13.2 -> v1.14.0
github.com/sigstore/scaffolding require patch v0.7.22 -> v0.7.33
github.com/valyala/fastjson indirect patch v1.6.7 -> v1.6.10
google.golang.org/genproto indirect digest 2f722ef -> a57be14
google.golang.org/genproto/googleapis/api indirect digest 2f722ef -> a57be14
google.golang.org/genproto/googleapis/rpc indirect digest 2f722ef -> a57be14

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

ThalesIgnite/crypto11 (github.com/ThalesIgnite/crypto11)

v1.6.0

Compare Source

What's Changed

Full Changelog: ThalesGroup/crypto11@v1.5.0...v1.6.0

v1.5.0

Compare Source

What's Changed

Full Changelog: ThalesGroup/crypto11@v1.4.1...v1.5.0

v1.4.1

Compare Source

What's Changed

New Contributors

Full Changelog: ThalesGroup/crypto11@v1.4.0...v1.4.1

v1.4.0

Compare Source

What's Changed

New Contributors

Full Changelog: ThalesGroup/crypto11@v1.3.0...v1.4.0

v1.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: ThalesGroup/crypto11@v1.2.1...v1.3.0

google/certificate-transparency-go (github.com/google/certificate-transparency-go)

v1.3.3

Compare Source

CTFE
Tools
Log list library
Submission proxy
Other
Misc
Dependency updates
open-policy-agent/opa (github.com/open-policy-agent/opa)

v1.14.0

Compare Source

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • Improved rule indexing of variable assignments and x in {...} expressions
  • Support for --h2c with unix domain socket for opa run
  • A new glossary tooltip for technical terms in the docs
  • Fixes published in the v1.13.1 and v1.13.2 releases
Improved rule indexing of variable assignments and x in {...} expressions (#​1841)

With this change, the rule indexer will index expressions like:

allow if input.role in {"admin", "user"}

On lookup, the rule body will only be returned if input.role is either one of "admin" or "user".

The reverse case is also indexed:

allow if "admin" in input.roles

in which the searched collection is unknown.

Authored by @​srenatus reported by @​nischalsheth

Runtime, SDK, Tooling
Compiler, Topdown and Rego
Docs, Website, Ecosystem
Miscellaneous
  • maintainers: Moving nilekhc to emeritus, and renew maintainer terms (#​8276) authored by @​JaydipGabani
  • ast: Add public method to extend the compliance test cases with IR plans (#​7556) authored by @​sspaink reported by @​shomron
  • ast: Tiny nitpicky cleanup (#​8309) authored by @​srenatus
  • chore: Clean up bundle storage tests (#​8267) authored by @​anderseknert
  • chore: Remove unnecessary comment from bundle JWT verification impl (#​8354) authored by @​johanfylling
  • ci: Bump golangci-lint (v2.9.0), fix issues (#​8314) authored by @​srenatus
  • ci: Harden and update all GH Actions workflows (#​8356, #​8377, #​8368 authored by @​philipaconrad and @​srenatus
  • go: Cleanup old build flags (#​8314) authored by @​srenatus
  • rego: Remove superfluous package import of plugins (#​6754) authored by @​srenatus reported by @​oxisto
  • tests: Extract runtime Info to new package (#​8362) authored by @​charlieegan3
  • tests: Fix BenchmarkFunctionArgumentCounts query (#​8327) authored by @​alex60217101990
  • tests: Disable rule indexing for benchmark (#​8375) authored by @​srenatus
  • workflows: Add nightly vuln checks for released versions/images (#​8336 #​8339) authored by @​srenatus
  • Dependency updates; notably:
    • build: bump golang from 1.25.6 to 1.26.0
    • build(deps): build(deps): bump go.opentelemetry.io deps from 1.39.0/0.64.0 to 1.40.0/0.65.0
      Applying fix for GHSA-9h8m-3fm2-qjrq
    • build(deps): bump github.com/dgraph-io/badger/v4 from 4.9.0 to 4.9.1
    • build(deps): bump github.com/huandu/go-sqlbuilder from 1.39.0 to 1.39.1
    • build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0
    • build(deps): bump golang.org/x/text from 0.33.0 to 0.34.0
    • build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1
    • build(deps): bump go.opentelemetry.io deps from 1.39.0/0.64.0 to 1.40.0/0.65.0
sigstore/scaffolding (github.com/sigstore/scaffolding)

v0.7.33

Compare Source

v0.7.32

Compare Source

v0.7.31

Compare Source

What's Changed

  • Add namespace to tesseract images in #​1792

Full Changelog: sigstore/scaffolding@v0.7.30...v0.7.31

v0.7.30

Compare Source

What's Changed

  • Build and publish GCP & POSIX TesseraCT in #​1789

Full Changelog: sigstore/scaffolding@v0.7.29...v0.7.30

v0.7.29

Compare Source

What's Changed

This release reverts a previous change to the prober to allow for insecure gRPC connections, in favor of allowing for gRPC testing to be disabled.

  • Allow disabling Fulcio gRPC testing via flag in #​1787

Full Changelog: sigstore/scaffolding@v0.7.28...v0.7.29

v0.7.28

Compare Source

What's Changed

  • Allow insecure transport for Fulcio gRPC requests to be configured by flag in #​1786

Full Changelog: sigstore/scaffolding@v0.7.27...v0.7.28

v0.7.27

Compare Source

What's Changed

  • fix: Adjust Fulcio gRPC URL handling for internal services in #​1774

Full Changelog: sigstore/scaffolding@v0.7.26...v0.7.27

v0.7.26

Compare Source

What's Changed

  • Build GCP omniwitness on release in #​1775

Full Changelog: sigstore/scaffolding@v0.7.25...v0.7.26

v0.7.25

Compare Source

What's Changed

New Contributors

Full Changelog: sigstore/scaffolding@v0.7.24...v0.7.25

v0.7.24

Compare Source

Changelog

  • 819d566 Bump github.com/sigstore/cosign/v2 from 2.5.0 to 2.5.2 (#​1611)
Thanks to all contributors!

What's Changed


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
Copy link
Copy Markdown
Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: github.com/ThalesIgnite/crypto11@v1.6.0: parsing go.mod:
	module declares its path as: github.com/ThalesGroup/crypto11
	        but was required as: github.com/ThalesIgnite/crypto11

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from e9be94b to 1193ada Compare February 26, 2026 18:43
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 1193ada to 147316e Compare February 27, 2026 02:22
@JasonPowr JasonPowr merged commit 47dd229 into main Feb 27, 2026
101 of 102 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant