Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Apr 4, 2025

Bumps the go_modules group with 7 updates in the / directory:

Package From To
github.com/docker/docker 25.0.5+incompatible 25.0.6+incompatible
github.com/moby/moby 25.0.3+incompatible 26.1.0+incompatible
github.com/redis/go-redis/v9 9.5.4 9.5.5
golang.org/x/crypto 0.21.0 0.31.0
helm.sh/helm/v3 3.14.2 3.14.3
github.com/go-git/go-git/v5 5.11.0 5.13.0
github.com/golang-jwt/jwt/v4 4.5.0 4.5.2

Bumps the go_modules group with 3 updates in the /contrib/grpcplugins/action/plugin-archive directory: golang.org/x/crypto, github.com/go-git/go-git/v5 and github.com/golang-jwt/jwt/v4.
Bumps the go_modules group with 3 updates in the /contrib/grpcplugins/action/plugin-artifactory-release-bundle-create directory: golang.org/x/crypto, github.com/go-git/go-git/v5 and github.com/golang-jwt/jwt/v4.
Bumps the go_modules group with 3 updates in the /contrib/grpcplugins/action/plugin-artifactory-release-bundle-distribute directory: golang.org/x/crypto, github.com/go-git/go-git/v5 and github.com/golang-jwt/jwt/v4.
Bumps the go_modules group with 3 updates in the /contrib/grpcplugins/action/plugin-tmpl directory: golang.org/x/crypto, github.com/go-git/go-git/v5 and github.com/golang-jwt/jwt/v4.
Bumps the go_modules group with 3 updates in the /contrib/integrations/artifactory/artifactory-build-info-plugin directory: golang.org/x/crypto, github.com/go-git/go-git/v5 and github.com/golang-jwt/jwt/v4.
Bumps the go_modules group with 3 updates in the /contrib/integrations/artifactory/artifactory-download-artifact-plugin directory: golang.org/x/crypto, github.com/go-git/go-git/v5 and github.com/golang-jwt/jwt/v4.
Bumps the go_modules group with 3 updates in the /contrib/integrations/artifactory/artifactory-promote-plugin directory: golang.org/x/crypto, github.com/go-git/go-git/v5 and github.com/golang-jwt/jwt/v4.
Bumps the go_modules group with 3 updates in the /contrib/integrations/artifactory/artifactory-release-plugin directory: golang.org/x/crypto, github.com/go-git/go-git/v5 and github.com/golang-jwt/jwt/v4.
Bumps the go_modules group with 3 updates in the /contrib/integrations/artifactory/artifactory-upload-artifact-plugin directory: golang.org/x/crypto, github.com/go-git/go-git/v5 and github.com/golang-jwt/jwt/v4.
Bumps the go_modules group with 1 update in the /sdk/interpolate directory: gopkg.in/yaml.v2.
Bumps the go_modules group with 3 updates in the /tools/smtpmock directory: golang.org/x/crypto, golang.org/x/net and gopkg.in/yaml.v2.

Updates github.com/docker/docker from 25.0.5+incompatible to 25.0.6+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v25.0.6

25.0.6

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains a fix for CVE-2024-41110 / GHSA-v23v-6jw2-98fq that impacted setups using authorization plugins (AuthZ) for access control.

Bug fixes and enhancements

  • [25.0] remove erroneous platform from image config OCI descriptor in docker save output. moby/moby#47695
  • [25.0 backport] Fix a nil dereference when getting image history for images having layers without the Created value set. moby/moby#47759
  • [25.0 backport] apparmor: Allow confined runc to kill containers. moby/moby#47830
  • [25.0 backport] Fix an issue where rapidly promoting a Swarm node after another node was demoted could cause the promoted node to fail its promotion. moby/moby#47869
  • [25.0 backport] don't depend on containerd platform.Parse to return a typed error. moby/moby#47890
  • [25.0 backport] builder/mobyexporter: Add missing nil check moby/moby#47987

Packaging updates

Full Changelog: moby/moby@v25.0.5...v25.0.6

Commits
  • b08a51f Merge pull request #48231 from austinvazquez/backport-vendor-otel-v0.46.1-to-...
  • d151b0f vendor: OTEL v0.46.1 / v1.21.0
  • c6ba9a5 Merge pull request #48225 from austinvazquez/backport-workflow-artifact-reten...
  • 4673a3c Merge pull request #48227 from austinvazquez/backport-backport-branch-check-t...
  • 30f8908 github/ci: Check if backport is opened against the expected branch
  • 7454d6a ci: update workflow artifacts retention
  • 65cc597 Merge commit from fork
  • b722836 Merge pull request #48199 from austinvazquez/update-containerd-binary-to-1.7.20
  • e8ecb9c update containerd binary to v1.7.20
  • e6cae1f update containerd binary to v1.7.19
  • Additional commits viewable in compare view

Updates github.com/moby/moby from 25.0.3+incompatible to 26.1.0+incompatible

Release notes

Sourced from github.com/moby/moby's releases.

v26.1.0

26.1.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New

Bug fixes and enhancements

  • Native Windows containers are configured with an internal DNS server for container name resolution, and external DNS servers for other lookups. Not all resolvers, including nslookup, fall back to the external resolvers when they get a SERVFAIL answer from the internal server. So, the internal DNS server can now be configured to forward requests to the external resolvers, by setting "features": {"windows-dns-proxy": true } in the daemon.json file. moby/moby#47584

[!NOTE] This will be the new default behavior in Docker Engine 27.0.

[!WARNING] The windows-dns-proxy feature flag will be removed in a future release.

  • Swarm: Fix Subpath not being passed to the container config. moby/moby#47711
  • Classic builder: Fix cache miss on WORKDIR <directory>/ build step (directory with a trailing slash). moby/moby#47723
  • containerd image store: Fix docker images failing when any image in the store has unexpected target. moby/moby#47738

v26.0.2

26.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains a security fix for CVE-2024-32473, an unexpected configuration of IPv6 on IPv4-only interfaces.

Bug fixes and enhancements

v26.0.1

... (truncated)

Commits
  • c8af8eb Merge pull request #47738 from vvoland/c8d-walk-image-badimagetarget
  • 7d95fe8 c8d/list: Ignore unexpected image target
  • 801fd16 Merge pull request #47735 from cpuguy83/better_walk_error
  • 6667e96 Include more details in errnotManifestOrIndex
  • ee8b788 Merge pull request #47734 from krissetto/image-history-timestamp-dereference
  • 96c9353 Merge pull request #47723 from vvoland/builder-fix-workdir-slash
  • ab570ab nil dereference fix on image history Created value
  • 7532420 container/SetupWorkingDirectory: Don't mutate config
  • a4d5b6b builder/normalizeWorkdir: Always return cleaned path
  • e829cca Merge pull request #47584 from robmry/upstream_dns_windows
  • Additional commits viewable in compare view

Updates github.com/redis/go-redis/v9 from 9.5.4 to 9.5.5

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

v9.5.5

What's Changed

Full Changelog: redis/go-redis@v9.5.4...v9.5.5

Commits

Updates golang.org/x/crypto from 0.21.0 to 0.31.0

Commits
  • b4f1988 ssh: make the public key cache a 1-entry FIFO cache
  • 7042ebc openpgp/clearsign: just use rand.Reader in tests
  • 3e90321 go.mod: update golang.org/x dependencies
  • 8c4e668 x509roots/fallback: update bundle
  • 6018723 go.mod: update golang.org/x dependencies
  • 71ed71b README: don't recommend go get
  • 750a45f sha3: add MarshalBinary, AppendBinary, and UnmarshalBinary
  • 36b1725 sha3: avoid trailing permutation
  • 80ea76e sha3: fix padding for long cSHAKE parameters
  • c17aa50 sha3: avoid buffer copy
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.23.0 to 0.25.0

Commits
  • 85d1d54 go.mod: update golang.org/x dependencies
  • cde1dda proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts
  • fe7f039 publicsuffix: spruce up code gen and speed up PublicSuffix
  • 459513d internal/http3: move more common stream processing to genericConn
  • aad0180 http2: fix flakiness from t.Log when GOOS=js
  • b73e574 http2: don't log expected errors from writing invalid trailers
  • 5f45c77 internal/http3: make read-data tests usable for server handlers
  • 43c2540 http2, internal/httpcommon: reject userinfo in :authority
  • 1d78a08 http2, internal/httpcommon: factor out server header logic for h2/h3
  • 0d7dc54 quic: add Conn.ConnectionState
  • Additional commits viewable in compare view

Updates helm.sh/helm/v3 from 3.14.2 to 3.14.3

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.14.3 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.14.3. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.14.4 will contain only bug fixes and be released on April 10, 2024.
  • 3.15.0 is the next feature release and will be on May 08, 2024.

Changelog

  • Add a note about --dry-run displaying secrets f03cc04caaa8f6d7c3e67cf918929150cf6f3f12 (Matt Farina)
  • add error messages 1a7330fe3802beeb3f897a1c701d8a4b9c1316c5 (George Jenkins)
  • Fix: Ignore alias validation error for index load d6acc0027dca47dec40ccdd66febd0c8bcf4813f (George Jenkins)
  • chore(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 b2738fb782d149ffa4748cb0ee78d674986d04b0 (dependabot[bot])
  • chore(deps): bump github.com/DATA-DOG/go-sqlmock from 1.5.0 to 1.5.2 5b0847e0e763e98bcbf8a12e8f9c5f7c11d123a1 (dependabot[bot])
  • Update architecture detection method 7e18c39f0753c73e4660f3796f01f5b33f2552b5 (weidongkl)
Commits
  • f03cc04 Add a note about --dry-run displaying secrets
  • 1a7330f add error messages
  • d6acc00 Fix: Ignore alias validation error for index load
  • b2738fb chore(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12
  • 5b0847e chore(deps): bump github.com/DATA-DOG/go-sqlmock from 1.5.0 to 1.5.2
  • 7e18c39 Update architecture detection method
  • See full diff in compare view

Updates github.com/containerd/containerd from 1.7.11 to 1.7.12

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.12

Welcome to the v1.7.12 release of containerd!

The twelfth patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

  • Fix on dialer function for Windows (#9501)
  • Improve /etc/group handling when appending groups (#9544)
  • Update shim pidfile permissions to 0644 (#9548)
  • Update runc binary to v1.1.11 (#9596)
  • Allow import and export to reference missing content (#9600)
  • Remove runc import (#9605)
  • Update Go version to 1.20.13 (#9624)

Deprecation Warnings

  • Emit deprecation warning for containerd.io/restart.logpath label usage (#9567)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Akihiro Suda
  • Sebastiaan van Stijn
  • Wei Fu
  • Derek McGowan
  • Paweł Gronowski
  • Jaroslav Jindrak
  • Maksym Pavlenko
  • Samuel Karp
  • Anthony Nandaa
  • Bjorn Neergaard
  • Djordje Lukic
  • Kay Yan

Changes

  • [release/1.7] Prepare release notes for v1.7.12 (#9632)
    • 775d544fe Prepare release notes for v1.7.12
  • [release/1.7] update to go1.20.13, test go1.21.6 (#9624)
    • a5dc5b894 update to go1.20.13, test go1.21.6
  • [release/1.7] shim: Create pid-file and address with 0644 permissions (#9548)
    • 8d82242eb shim: Create address file with 0644 permissions
    • 260963a35 shim: Create pid-file with 0644 permissions

... (truncated)

Commits
  • 71909c1 Merge pull request #9632 from dmcgowan/prepare-v1.7.12
  • 775d544 Prepare release notes for v1.7.12
  • 4ebe8e2 Merge pull request #9624 from thaJeztah/1.7_update_golang_1.20.13
  • a5dc5b8 update to go1.20.13, test go1.21.6
  • 50e7359 Merge pull request #9548 from Dzejrou/1.7_fix_ignoring_umask
  • 5a675f2 Merge pull request #9602 from thaJeztah/1.7_backport_no_execabs
  • ccca466 Merge pull request #9605 from thaJeztah/1.7_backport_switch_moby_user
  • 9251072 remove github.com/opencontainers/runc dependency
  • 4e67213 vendor: github.com/cncf-tags/container-device-interface v0.6.1
  • e0ee0be go.mod: github.com/opencontainers/runtime-spec v1.1.0
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.11.0 to 5.13.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.13.0

What's Changed

... (truncated)

Commits
  • 94bd4af Merge pull request #1261 from BeChris/issue680
  • 8b7f5ba Merge pull request #1262 from go-git/dependabot/go_modules/github.com/elazarl...
  • 41d80a0 build: bump github.com/elazarl/goproxy
  • 4998140 git: worktree_commit, sanitize author and commiter name and email before crea...
  • 9049625 Merge pull request #1260 from go-git/dependabot/github_actions/github/codeql-...
  • dae48b4 build: bump github/codeql-action from 3.27.9 to 3.28.0
  • 7d6fbc2 Merge pull request #1220 from BeChris/accept_uppercase_hexa_in_pktline_length
  • 62a77b7 plumbing: Fix invalid reference name error while cloning branches containing ...
  • 5e11196 plumbing: format/pktline, accept upercase hexadecimal value as pktline length...
  • 65f5e1a Merge pull request #1256 from go-git/dependabot/go_modules/golang-org-232a611e2d
  • Additional commits viewable in compare view

Updates github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.2

Release notes

Sourced from github.com/golang-jwt/jwt/v4's releases.

v4.5.2

See GHSA-mh63-6h87-95cp

Full Changelog: golang-jwt/jwt@v4.5.1...v4.5.2

v4.5.1

Security

Unclear documentation of the error behavior in ParseWithClaims in <= 4.5.0 could lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by ParseWithClaims return both error codes. If users only check for the jwt.ErrTokenExpired using error.Is, they will ignore the embedded jwt.ErrTokenSignatureInvalid and thus potentially accept invalid tokens.

This issue was documented in GHSA-29wx-vh33-7x7r and fixed in this release.

Note: v5 was not affected by this issue. So upgrading to this release version is also recommended.

What's Changed

  • Back-ported error-handling logic in ParseWithClaims from v5 branch. This fixes GHSA-29wx-vh33-7x7r.

Full Changelog: golang-jwt/jwt@v4.5.0...v4.5.1

Commits

Updates golang.org/x/crypto from 0.21.0 to 0.31.0

Commits
  • b4f1988 ssh: make the public key cache a 1-entry FIFO cache
  • 7042ebc openpgp/clearsign: just use rand.Reader in tests
  • 3e90321 go.mod: update golang.org/x dependencies
  • 8c4e668 x509roots/fallback: update bundle
  • 6018723 go.mod: update golang.org/x dependencies
  • 71ed71b README: don't recommend go get
  • 750a45f sha3: add MarshalBinary, AppendBinary, and UnmarshalBinary
  • 36b1725 sha3: avoid trailing permutation
  • 80ea76e sha3: fix padding for long cSHAKE parameters
  • c17aa50 sha3: avoid buffer copy
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.23.0 to 0.25.0

Commits
  • 85d1d54 go.mod: update golang.org/x dependencies
  • cde1dda proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts
  • fe7f039 publicsuffix: spruce up code gen and speed up PublicSuffix
  • 459513d internal/http3: move more common stream processing to genericConn
  • aad0180 http2: fix flakiness from t.Log when GOOS=js
  • b73e574 http2: don't log expected errors from writing invalid trailers
  • 5f45c77 internal/http3: make read-data tests usable for server handlers
  • 43c2540 http2, internal/httpcommon: reject userinfo in :authority
  • 1d78a08 http2, internal/httpcommon: factor out server header logic for h2/h3
  • 0d7dc54 quic: add Conn.ConnectionState
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.11.0 to 5.13.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.13.0

What's Changed

... (truncated)

Commits

…updates

Bumps the go_modules group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/docker/docker](https://github.com/docker/docker) | `25.0.5+incompatible` | `25.0.6+incompatible` |
| [github.com/moby/moby](https://github.com/moby/moby) | `25.0.3+incompatible` | `26.1.0+incompatible` |
| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.5.4` | `9.5.5` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.21.0` | `0.31.0` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.14.2` | `3.14.3` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.11.0` | `5.13.0` |
| [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.0` | `4.5.2` |

Bumps the go_modules group with 3 updates in the /contrib/grpcplugins/action/plugin-archive directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt).
Bumps the go_modules group with 3 updates in the /contrib/grpcplugins/action/plugin-artifactory-release-bundle-create directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt).
Bumps the go_modules group with 3 updates in the /contrib/grpcplugins/action/plugin-artifactory-release-bundle-distribute directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt).
Bumps the go_modules group with 3 updates in the /contrib/grpcplugins/action/plugin-tmpl directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt).
Bumps the go_modules group with 3 updates in the /contrib/integrations/artifactory/artifactory-build-info-plugin directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt).
Bumps the go_modules group with 3 updates in the /contrib/integrations/artifactory/artifactory-download-artifact-plugin directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt).
Bumps the go_modules group with 3 updates in the /contrib/integrations/artifactory/artifactory-promote-plugin directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt).
Bumps the go_modules group with 3 updates in the /contrib/integrations/artifactory/artifactory-release-plugin directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt).
Bumps the go_modules group with 3 updates in the /contrib/integrations/artifactory/artifactory-upload-artifact-plugin directory: [golang.org/x/crypto](https://github.com/golang/crypto), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) and [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt).
Bumps the go_modules group with 1 update in the /sdk/interpolate directory: gopkg.in/yaml.v2.
Bumps the go_modules group with 3 updates in the /tools/smtpmock directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/net](https://github.com/golang/net) and gopkg.in/yaml.v2.


Updates `github.com/docker/docker` from 25.0.5+incompatible to 25.0.6+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v25.0.5...v25.0.6)

Updates `github.com/moby/moby` from 25.0.3+incompatible to 26.1.0+incompatible
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@v25.0.3...v26.1.0)

Updates `github.com/redis/go-redis/v9` from 9.5.4 to 9.5.5
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/CHANGELOG.md)
- [Commits](redis/go-redis@v9.5.4...v9.5.5)

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.23.0 to 0.25.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `helm.sh/helm/v3` from 3.14.2 to 3.14.3
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.14.2...v3.14.3)

Updates `github.com/containerd/containerd` from 1.7.11 to 1.7.12
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.11...v1.7.12)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.13.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.23.0 to 0.25.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.13.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.23.0 to 0.25.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.13.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.22.0 to 0.25.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.13.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.23.0 to 0.25.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.13.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.23.0 to 0.25.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.13.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.23.0 to 0.25.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.13.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.23.0 to 0.25.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.13.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.23.0 to 0.25.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.13.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.23.0 to 0.25.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.13.0)

Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v4.5.0...v4.5.2)

Updates `gopkg.in/yaml.v2` from 2.2.2 to 2.2.8

Updates `golang.org/x/crypto` from 0.21.0 to 0.31.0
- [Commits](golang/crypto@v0.21.0...v0.31.0)

Updates `golang.org/x/net` from 0.23.0 to 0.36.0
- [Commits](golang/net@v0.23.0...v0.36.0)

Updates `gopkg.in/yaml.v2` from 2.2.3 to 2.2.8

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-version: 25.0.6+incompatible
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/moby/moby
  dependency-version: 26.1.0+incompatible
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.5.5
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.25.0
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.14.3
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/containerd/containerd
  dependency-version: 1.7.12
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.25.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.25.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.25.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.25.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.25.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.25.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.25.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.25.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.25.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.13.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-version: 4.5.2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: gopkg.in/yaml.v2
  dependency-version: 2.2.8
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.31.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.36.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: gopkg.in/yaml.v2
  dependency-version: 2.2.8
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants