Update go modules (main) (patch) by renovate[bot] · Pull Request #3130 · conforma/cli

renovate · 2026-02-27T01:15:43Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cuelang.org/go	`v0.16.0` → `v0.16.1`
github.com/conforma/crds/api	`v0.1.7` → `v0.1.11`
github.com/cucumber/godog	`v0.15.0` → `v0.15.1`
github.com/gkampitakis/go-snaps	`v0.5.19` → `v0.5.23`
github.com/mattn/go-isatty	`v0.0.20` → `v0.0.22`
github.com/package-url/packageurl-go	`v0.1.3` → `v0.1.6`
github.com/sigstore/cosign/v3	`v3.0.4` → `v3.0.6`
github.com/tektoncd/chains	`v0.26.2` → `v0.26.6`
github.com/tektoncd/cli	`v0.44.1` → `v0.44.2`
github.com/testcontainers/testcontainers-go	`v0.34.0` → `v0.34.1`
gotest.tools/gotestsum	`v1.12.1` → `v1.12.3`
k8s.io/api	`v0.36.0` → `v0.36.2`
k8s.io/apiextensions-apiserver	`v0.36.0` → `v0.36.2`
k8s.io/apimachinery	`v0.36.0` → `v0.36.2`
k8s.io/client-go	`v0.36.0` → `v0.36.2`
k8s.io/kubernetes	`v1.34.2` → `v1.34.9`
oras.land/oras-go/v2	`v2.6.1` → `v2.6.2`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

cue-lang/cue (cuelang.org/go)

`v0.16.1`

Compare Source

Language

The fallback keyword in the aliasv2 experiment is replaced by otherwise, which is clearer. cue fmt or cue fix can be used to rewrite existing code.

Evaluator

Fix a regression where the compiler could add comments to the input AST value, which could lead to increased memory usage.

Fix a bug where exporting certain schemas could result in "cannot have both alias and field in same scope" errors.

`cmd/cue`

Fix a panic which could occur when using non-label expressions in the --path flag.

Teach cue login to give helpful errors when used with OCI registries which don't support the OAuth2 device flow.

Go API

Fix a regression where cue.Context.Encode could panic on custom marshaler types with pointer receivers.

Full list of changes since v0.16.0

internal/cueversion: bump to v0.16.1 by @mvdan in 6d609d7
internal/ci: build releases with Go 1.26.2 by @mvdan in cedf4c8
update all golang.org/x/... dependencies by @mvdan in b4efeef
all: rename fallback keyword to otherwise by @mpvl in f813811
lsp/cache: improve rename by @cuematthew in 8e47027
integration/workspace: add test showing bad behaviour by @cuematthew in a5e0ef5
cmd/cue: suggest docker/podman login when OAuth2 device flow is unsupported by @mvdan in c169605
cmd/cue: add testscript for cue login when device code endpoint is unsupported by @mvdan in d7c882a
cmd/cue: clarify how to authenticate with standard OCI registries by @mvdan in 2613edf
internal/core/compile: avoid mutating AST by @rogpeppe in e4b0516
internal/core/export: fix alias/field name conflict in pattern constraints by @mvdan in 1e46409
internal/core/export: add regression test for alias/field name conflict by @mvdan in 1654f66
pkg: fix godoc mistakes across several packages by @mvdan in eae9aaf
internal/core/convert: fix panic when encoding pointer-receiver marshalers by @mvdan in 8e39aec
cmd/cue: return an error for non-label --path expressions instead of panicking by @mvdan in 5a55849
encoding: add godoc hints for cue/ast result types by @mvdan in 682c663

cucumber/godog (github.com/cucumber/godog)

`v0.15.1`

Compare Source

Added

Step text is added to "step is undefined" error - (669 - vearutop)
Localisation support by @MegaGrindStone in #665
feat: support uint types by @chengxilo in #695

Changed

Replace deprecated ::set-output - (681 - nodeg)

Fixed

fix(errors): fix(errors): Fix expected Step argument count for steps with context.Context (679 - tigh-latte)
fix(formatter): On concurrent execution, execute formatter at end of Scenario - (645 - tigh-latte)
Pretty printing results now prints the line where the step is declared instead of the line where the handler is declared. (668 - spencerc)
Update honnef.co/go/tools/cmd/staticcheck version in Makefile by @RezaZareiii in #670
fix: verify dogT exists in the context before using it by @cakoolen in #692
fix: change bang to being in README by @nahomEagleLion in #687
Mark junit test cases as skipped if no pickle step results available by @mrsheepuk in #597
Print step declaration line instead of handler declaration line by @SpencerC in #668

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

`v0.5.23`

Compare Source

What's Changed

Fix Skipf test format for Go vet by @HNO3Miracle in #160
feat: support labeling snapshots by @G-Rath in #152

New Contributors

@HNO3Miracle made their first contribution in #160

Full Changelog: gkampitakis/go-snaps@v0.5.22...v0.5.23

`v0.5.22`

Compare Source

What's Changed

Enhance README with additional Any matcher example by @MoritzHeld in #157
fix: create snapshot files with 0644 instead of os.ModePerm by @gkampitakis in #159

New Contributors

@MoritzHeld made their first contribution in #157

Full Changelog: gkampitakis/go-snaps@v0.5.21...v0.5.22

`v0.5.21`

Compare Source

What's Changed

support nested arrays in json matchers by @gkampitakis in #145

Full Changelog: gkampitakis/go-snaps@v0.5.20...v0.5.21

`v0.5.20`

Compare Source

What's Changed

feat: support setting serializer on config by @gkampitakis in #154

Full Changelog: gkampitakis/go-snaps@v0.5.19...v0.5.20

mattn/go-isatty (github.com/mattn/go-isatty)

`v0.0.22`

Compare Source

`v0.0.21`

Compare Source

package-url/packageurl-go (github.com/package-url/packageurl-go)

`v0.1.6`

Compare Source

What's Changed

Optimize parsing and serialization performance by @andrew in #86

New Contributors

@andrew made their first contribution in #86

Full Changelog: package-url/packageurl-go@v0.1.5...v0.1.6

`v0.1.5`

Compare Source

What's Changed

Remove version requirement for TypeSwift by @Talgarr in #90
Handle non-canonical input purls a bit more gracefully by @petergardfjall in #89

New Contributors

@Talgarr made their first contribution in #90

Full Changelog: package-url/packageurl-go@v0.1.4...v0.1.5

`v0.1.4`

Compare Source

What's Changed

Fix golangci and update versions by @shibumi in #76
Allow npm names to be case sensitive by @PFCM in #73
add custom validation for pkg:cpan by @petergardfjall in #79
move cpan to known types by @nikpivkin in #71
Run tests using reference data from purl-spec by @keshav-space in #80
update code to honor the canonical purl encoding by @petergardfjall in #83

New Contributors

@PFCM made their first contribution in #73
@nikpivkin made their first contribution in #71
@keshav-space made their first contribution in #80

Full Changelog: package-url/packageurl-go@v0.1.3...v0.1.4

sigstore/cosign (github.com/sigstore/cosign/v3)

`v3.0.6`

Compare Source

Changelog

v3.0.6 resolves GHSA-w6c6-c85g-mmv6. This release also adds support for signing with OpenBao-managed keys.

f1ad3ee Fix DSSE predicate check (GHSA-w6c6-c85g-mmv6) (#4801)
a09afa9 Handle whitespace-only certificate annotation (#4760)
5a38a6d fix(sign): closing SignerVerifier too early when signing with a security key (#4761)
2290a59 Disallow --new-bundle-format and --rfc3161-timestamp (#4762)
36f4008 support managed keys in conformance testing (#4728)
3274cf9 Add support for GCE metadata server env var (#4732)
2e9754a fix: preserve per-layer annotations in WriteAttestationsReferrer (#4709)
dece275 Fix parsing of in-toto for string predicates
bd4f0fd Mark batch of flags for deprecation (#4698)
9b259ff disallow key and cert identity being used together during verification (#4636)
95eb1c3 support key creation in GitLab group (#4704)

Thanks to all contributors!

`v3.0.5`

Compare Source

Deprecations

Deprecate rekor-entry-type flag (#4691)
Deprecate cosign triangulate (#4676)
Deprecate cosign copy (#4681)

Features

Automatically require signed timestamp with Rekor v2 entries (#4666)
Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
Add mTLS support for TSA client connections when signing with a signing config (#4620)
Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)

Bug Fixes

Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
fix: avoid panic on malformed attestation payload (#4651)
fix: avoid panic on malformed tlog entries (#4649)
fix: avoid panic on malformed replace payload (#4653)
Gracefully fail if bundle payload body is not a string (#4648)
Verify validity of chain rather than just certificate (#4663)
fix: avoid panic on malformed tlog entry body (#4652)

Documentation

docs(cosign): clarify RFC3161 revocation semantics (#4642)
Fix typo in CLI help (#4701)

tektoncd/chains (github.com/tektoncd/chains)

`v0.26.6`: Tekton Chains Release v0.26.6

Compare Source

Tekton Chains Release v0.26.6

-Docs @ v0.26.6
-Examples @ v0.26.6

Installation one-liner

kubectl apply -f https://infra.tekton.dev/tekton-releases/chains/previous/v0.26.6/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a9cc2851aeabc5d55eb1dce87413ca45c2e7196726dd0e84ea1255a41f3d43ca2

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a9cc2851aeabc5d55eb1dce87413ca45c2e7196726dd0e84ea1255a41f3d43ca2
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://infra.tekton.dev/tekton-releases/chains/previous/v0.26.6/release.yaml
REKOR_UUID=108e9186e8c5677a9cc2851aeabc5d55eb1dce87413ca45c2e7196726dd0e84ea1255a41f3d43ca2

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.26.6@&#8203;sha256:" + .digest.sha256')

# Download the release file
curl -L "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

Misc

🔨 chore(deps): bump github.com/tektoncd/pipeline from 1.9.5 to 1.9.6 in the all group (#1774)
🔨 chore(deps): bump chainguard-dev/actions/kind-diag from 1.6.25 to 1.6.26 in the all group across 1 directory (#1760)
🔨 chore(deps): bump chainguard-dev/actions/kind-diag from 1.6.14 to 1.6.25 (#1750)
🔨 chore(deps): bump github/codeql-action/autobuild from 3.30.7 to 3.30.9 (#1749)
🔨 chore(deps): bump github/codeql-action/init from 3.30.7 to 3.30.9 (#1748)
🔨 chore(deps): bump github/codeql-action/analyze from 3.30.7 to 3.30.9 (#1734)
🔨 chore(deps): bump github.com/tektoncd/pipeline from 1.9.4 to 1.9.5 in the all group (#1729)
🔨 chore(deps): bump the all group with 14 updates (#1728)
🔨 chore(deps): bump step-security/harden-runner from 2.13.1 to 2.13.3 (#1725)
🔨 chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#1719)

Docs

Thanks

Thanks to these contributors who contributed to v0.26.6!

❤️ @app/dependabot
❤️ @tekton-robot

Extra shout-out for awesome release notes:

😍 @tekton-robot

`v0.26.5`: Tekton Chains release v0.26.5

Compare Source

Tekton Chains release v0.26.5 "Release v0.26.5"

-Docs @ v0.26.5
-Examples @ v0.26.5

Installation one-liner

kubectl apply -f https://infra.tekton.dev/tekton-releases/chains/previous/v0.26.5/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a349f2deb2e5f38833800ef9c33b284db5d2c2b4df8641b7b6fe629503b43089a

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a349f2deb2e5f38833800ef9c33b284db5d2c2b4df8641b7b6fe629503b43089a
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://infra.tekton.dev/tekton-releases/chains/previous/v0.26.5/release.yaml
REKOR_UUID=108e9186e8c5677a349f2deb2e5f38833800ef9c33b284db5d2c2b4df8641b7b6fe629503b43089a

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.26.5@&#8203;sha256:" + .digest.sha256')

# Download the release file
curl -L "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.26.5!

❤️ @jkhelil

Extra shout-out for awesome release notes:

😍 @jkhelil

`v0.26.4`: Tekton Chains "Release v0.26.4"

Compare Source

Tekton Chains "Release v0.26.4"

-Docs @ v0.26.4
-Examples @ v0.26.4

Installation one-liner

kubectl apply -f https://infra.tekton.dev/tekton-releases/chains/previous/v0.26.4/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a530b574bc14f60d678f287e5f81e8707750ea0808ede65f1f7a4add3183e74a1

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a530b574bc14f60d678f287e5f81e8707750ea0808ede65f1f7a4add3183e74a1
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://infra.tekton.dev/tekton-releases/chains/previous/v0.26.4/release.yaml
REKOR_UUID=108e9186e8c5677a530b574bc14f60d678f287e5f81e8707750ea0808ede65f1f7a4add3183e74a1

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.26.4@&#8203;sha256:" + .digest.sha256')

# Download the release file
curl -L "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

Misc

🔨 fix(cve): CVE-2026-33814 - Update golang.org/x/net to v0.53.0 (release-v0.26.x) (#1670)

Docs

Thanks

Thanks to these contributors who contributed to v0.26.4!

❤️ @anithapriyanatarajan
❤️ @jkhelil

Extra shout-out for awesome release notes:

😍 @anithapriyanatarajan
😍 @jkhelil

`v0.26.3`: Tekton Chains release v0.26.3

Compare Source

-Docs @ v0.26.3
-Examples @ v0.26.3

Installation one-liner

kubectl apply -f https://infra.tekton.dev/tekton-releases/chains/previous/v0.26.3/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a48f46d165fc47afed5b254fe710ca6cc3d34f49019f2e53df43d1417a0877719

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a48f46d165fc47afed5b254fe710ca6cc3d34f49019f2e53df43d1417a0877719
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://infra.tekton.dev/tekton-releases/chains/previous/v0.26.3/release.yaml
REKOR_UUID=108e9186e8c5677a48f46d165fc47afed5b254fe710ca6cc3d34f49019f2e53df43d1417a0877719

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.26.3@&#8203;sha256:" + .digest.sha256')

# Download the release file
curl -L "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Security Fixes

🔨 [Release-v0.26.x] fix: CVE-2026-34986, CVE-2026-33211, & CVE-2026-33186 (#1630)

Thanks

Thanks to these contributors who contributed to v0.26.3!

❤️ @anithapriyanatarajan
❤️ @infernus01

Extra shout-out for awesome release notes:

😍 @anithapriyanatarajan
😍 @infernus01

tektoncd/cli (github.com/tektoncd/cli)

`v0.44.2`

Compare Source

v0.44.2 Release 🎉

This patch release addresses the following CVEs: CVE-2026-40938, CVE-2026-40161, CVE-2026-24051, CVE-2026-24051 and CVE-2026-34986.

Changelog

17a7599 New version v0.44.2

Full Changelog: tektoncd/cli@v0.44.1...v0.44.2

testcontainers/testcontainers-go (github.com/testcontainers/testcontainers-go)

`v0.34.1`

Compare Source

gotestyourself/gotestsum (gotest.tools/gotestsum)

`v1.12.3`

Compare Source

What's Changed

Bump golang.org/x/tools from 0.24.0 to 0.33.0 by @dependabot in #496
Bump golang.org/x/term from 0.29.0 to 0.32.0 by @dependabot in #494
feat: add the --rerun-fails-abort-on-data-race flag by @hugodutka in #497
Bump golang.org/x/tools from 0.33.0 to 0.34.0 by @dependabot in #501

New Contributors

@hugodutka made their first contribution in #497

Full Changelog: gotestyourself/gotestsum@v1.12.2...v1.12.3

`v1.12.2`

Compare Source

What's Changed

Bump gotest.tools/v3 from 3.5.1 to 3.5.2 by @dependabot in #463
Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in #468
Bump github.com/fatih/color from 1.17.0 to 1.18.0 by @dependabot in #446
Use event times for elapsed by @dnephin in #482
feat: support for hidding skipped tests in the junit report by @v1v in #478

New Contributors

@v1v made their first contribution in #478

See the CHANGELOG for more details.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM (* 0-3 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-02-27T01:15:46Z

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

8 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.21.0` -> `v0.22.0`
`github.com/gkampitakis/ciinfo`	`v0.3.2` -> `v0.3.4`
`github.com/goccy/go-yaml`	`v1.18.0` -> `v1.19.2`
`github.com/google/certificate-transparency-go`	`v1.3.2` -> `v1.3.3`
`github.com/maruel/natural`	`v1.1.1` -> `v1.3.0`
`github.com/sigstore/rekor-tiles/v2`	`v2.0.1` -> `v2.2.1`
`github.com/sigstore/timestamp-authority/v2`	`v2.0.4` -> `v2.0.5`
`github.com/tidwall/gjson`	`v1.18.0` -> `v1.19.0`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

11 additional dependencies were updated

Details:

Package	Change
`golang.org/x/sync`	`v0.21.0` -> `v0.22.0`
`github.com/gkampitakis/ciinfo`	`v0.3.2` -> `v0.3.4`
`github.com/goccy/go-yaml`	`v1.18.0` -> `v1.19.2`
`github.com/google/certificate-transparency-go`	`v1.3.2` -> `v1.3.3`
`github.com/maruel/natural`	`v1.1.1` -> `v1.3.0`
`github.com/miekg/pkcs11`	`v1.1.1` -> `v1.1.2`
`github.com/sigstore/fulcio`	`v1.8.4` -> `v1.8.5`
`github.com/sigstore/rekor-tiles/v2`	`v2.0.1` -> `v2.2.1`
`github.com/sigstore/timestamp-authority/v2`	`v2.0.4` -> `v2.0.5`
`github.com/tidwall/gjson`	`v1.18.0` -> `v1.19.0`
`gitlab.com/gitlab-org/api/client-go`	`v1.11.0` -> `v1.46.0`

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

4 additional dependencies were updated

Details:

Package	Change
`github.com/in-toto/go-witness`	`v0.9.1` -> `v0.9.2`
`github.com/in-toto/in-toto-golang`	`v0.10.0` -> `v0.11.0`
`github.com/sigstore/cosign/v2`	`v2.6.2` -> `v2.6.3`
`github.com/sigstore/timestamp-authority/v2`	`v2.0.3` -> `v2.0.6`

fullsend-ai-review · 2026-07-08T15:32:30Z

🤖 Finished Review · ✅ Success · Started 3:32 PM UTC · Completed 3:40 PM UTC
Commit: 8f05d87 · View workflow run →

fullsend-ai-review · 2026-07-09T06:45:15Z

🤖 Finished Review · ✅ Success · Started 6:45 AM UTC · Completed 6:51 AM UTC
Commit: 8f05d87 · View workflow run →

fullsend-ai-review · 2026-07-09T10:07:33Z

🤖 Finished Review · ✅ Success · Started 10:07 AM UTC · Completed 10:11 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-09T15:41:57Z

🤖 Finished Review · ✅ Success · Started 3:41 PM UTC · Completed 3:46 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-09T23:17:23Z

🤖 Finished Review · ✅ Success · Started 11:17 PM UTC · Completed 11:21 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-10T01:37:46Z

🤖 Finished Review · ✅ Success · Started 1:37 AM UTC · Completed 1:45 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-10T06:46:37Z

🤖 Finished Review · ✅ Success · Started 6:46 AM UTC · Completed 6:51 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-10T20:46:46Z

🤖 Finished Review · ✅ Success · Started 8:46 PM UTC · Completed 8:53 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-13T19:22:21Z

🤖 Finished Review · ✅ Success · Started 7:22 PM UTC · Completed 7:27 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-14T12:16:48Z

🤖 Finished Review · ✅ Success · Started 12:16 PM UTC · Completed 12:24 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-14T12:53:25Z

🤖 Finished Review · ✅ Success · Started 12:53 PM UTC · Completed 12:57 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-14T13:08:36Z

🤖 Finished Review · ✅ Success · Started 1:08 PM UTC · Completed 1:18 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-14T20:00:39Z

🤖 Finished Review · ✅ Success · Started 8:00 PM UTC · Completed 8:05 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-15T06:41:25Z

🤖 Finished Review · ✅ Success · Started 6:41 AM UTC · Completed 6:45 AM UTC
Commit: 87c4a29 · View workflow run →

renovate Bot added main renovate labels Feb 27, 2026

renovate Bot enabled auto-merge February 27, 2026 01:15

github-actions Bot added the size: XL label Feb 27, 2026

renovate Bot force-pushed the renovate/main-patch-go-modules branch 14 times, most recently from 2a265d3 to a650df7 Compare March 6, 2026 00:43

renovate Bot force-pushed the renovate/main-patch-go-modules branch 4 times, most recently from 5fde2e2 to 0d4d965 Compare March 9, 2026 23:05

github-actions Bot added size: XXL and removed size: XL labels Mar 9, 2026

renovate Bot force-pushed the renovate/main-patch-go-modules branch 5 times, most recently from afe86d8 to 9a0b95c Compare March 15, 2026 01:16

This comment was marked as outdated.

Sign in to view

Update go modules

d2983b4

fullsend-ai-review Bot approved these changes Jul 15, 2026

View reviewed changes

Uh oh!

Conversation

renovate Bot commented Feb 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Language

Evaluator

cmd/cue

Go API

Added

Changed

Fixed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Changelog

Thanks to all contributors!

Deprecations

Features

Bug Fixes

Documentation

v0.26.6: Tekton Chains Release v0.26.6

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

v0.26.5: Tekton Chains release v0.26.5

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

v0.26.4: Tekton Chains "Release v0.26.4"

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

v0.26.3: Tekton Chains release v0.26.3

Installation one-liner

Attestation

Changes

Security Fixes

Thanks

v0.44.2 Release 🎉

Changelog

What's Changed

New Contributors

What's Changed

New Contributors

v1.34.3: Kubernetes v1.34.3

Configuration

Uh oh!

renovate Bot commented Feb 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: acceptance/go.mod

File name: go.mod

File name: tools/go.mod

Uh oh!

fullsend-ai-review Bot commented Jul 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

renovate Bot commented Feb 27, 2026 •

edited

Loading

`cmd/cue`

`v0.26.6`: Tekton Chains Release v0.26.6

`v0.26.5`: Tekton Chains release v0.26.5

`v0.26.4`: Tekton Chains "Release v0.26.4"

`v0.26.3`: Tekton Chains release v0.26.3

`v1.34.3`: Kubernetes v1.34.3

renovate Bot commented Feb 27, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 8, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 9, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 9, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 9, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 9, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 10, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 10, 2026 •

edited

Loading