Skip to content

chore(deps): update module github.com/theupdateframework/go-tuf to v2 (9.3)#5239

Closed
elastic-renovate-prod[bot] wants to merge 2 commits into
9.3from
renovate/9.3-github.com-theupdateframework-go-tuf-2.x
Closed

chore(deps): update module github.com/theupdateframework/go-tuf to v2 (9.3)#5239
elastic-renovate-prod[bot] wants to merge 2 commits into
9.3from
renovate/9.3-github.com-theupdateframework-go-tuf-2.x

Conversation

@elastic-renovate-prod
Copy link
Copy Markdown
Contributor

@elastic-renovate-prod elastic-renovate-prod Bot commented Apr 23, 2026

This PR contains the following updates:

Package Type Update Change
github.com/theupdateframework/go-tuf indirect major v0.7.0 -> v2.4.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

theupdateframework/go-tuf (github.com/theupdateframework/go-tuf)

v2.4.1

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.4.0...v2.4.1

v2.4.0

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.3.1...v2.4.0

v2.3.1

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.3.0...v2.3.1

v2.3.0

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.2.0...v2.3.0

v2.2.0

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.1.1...v2.2.0

v2.1.1

Compare Source

What's Changed

Fixed a regression that can fail clients using the DefaultFetcher{} directly without using the constructor.

Full Changelog: theupdateframework/go-tuf@v2.1.0...v2.1.1

v2.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: theupdateframework/go-tuf@v2.0.2...v2.1.0

v2.0.2

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.0.1...v2.0.2

v2.0.1

Compare Source

What's Changed

Security
Other

Full Changelog: theupdateframework/go-tuf@v2.0.0...v2.0.1

v2.0.0

Compare Source

Breaking changes

  • This is the first release of go-tuf v2 and it's a complete re-write indicated by the new major version.
  • We also decided to leave go-tuf as a library only.

What's Changed

New Contributors

Full Changelog: theupdateframework/go-tuf@v0.7.0...v2.0.0

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@elastic-renovate-prod elastic-renovate-prod Bot added backport-skip dependencies Pull requests that update a dependency file renovate Team:Security-Cloud Services Security Data Experience - Cloud Services team. labels Apr 23, 2026
@elastic-renovate-prod elastic-renovate-prod Bot requested a review from a team as a code owner April 23, 2026 01:15
@elastic-renovate-prod elastic-renovate-prod Bot force-pushed the renovate/9.3-github.com-theupdateframework-go-tuf-2.x branch 3 times, most recently from abcc0c9 to 376126f Compare April 23, 2026 01:58
@elastic-renovate-prod
Copy link
Copy Markdown
Contributor Author

elastic-renovate-prod Bot commented Apr 23, 2026

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: github.com/elastic/sarama@v1.24.1-elastic: parsing go.mod:
	module declares its path as: github.com/Shopify/sarama
	        but was required as: github.com/elastic/sarama

@elastic-renovate-prod elastic-renovate-prod Bot force-pushed the renovate/9.3-github.com-theupdateframework-go-tuf-2.x branch from 376126f to 5f1041e Compare April 23, 2026 19:01
@elastic-renovate-prod
Copy link
Copy Markdown
Contributor Author

elastic-renovate-prod Bot commented Apr 24, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@olegsu olegsu closed this May 5, 2026
@elastic-renovate-prod
Copy link
Copy Markdown
Contributor Author

elastic-renovate-prod Bot commented May 5, 2026

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 2.x releases. But if you manually upgrade to 2.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@elastic-renovate-prod elastic-renovate-prod Bot deleted the renovate/9.3-github.com-theupdateframework-go-tuf-2.x branch May 5, 2026 19:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

backport-skip dependencies Pull requests that update a dependency file renovate Team:Security-Cloud Services Security Data Experience - Cloud Services team.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@olegsu