chore(deps): bump the go group across 1 directory with 19 updates by dependabot[bot] · Pull Request #2098 · open-component-model/ocm

dependabot · 2026-09-06T08:32:53Z

Bumps the go group with 11 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.43.6`	`1.45.1`
github.com/aws/aws-sdk-go-v2/config	`1.32.37`	`1.33.2`
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	`0.3.14`	`0.4.2`
github.com/aws/aws-sdk-go-v2/service/ecr	`1.60.6`	`1.63.0`
github.com/fluxcd/cli-utils	`1.2.2`	`1.2.3`
github.com/go-openapi/swag/conv	`0.29.0`	`0.29.1`
github.com/klauspost/compress	`1.19.2`	`1.20.0`
github.com/onsi/gomega	`1.42.1`	`1.43.0`
github.com/sigstore/rekor	`1.5.3`	`1.5.4`
github.com/sirupsen/logrus	`1.10.1`	`1.10.2`
golang.org/x/crypto	`0.55.0`	`0.56.0`

Updates github.com/aws/aws-sdk-go-v2 from 1.43.6 to 1.45.1

Commits

4164024 Release 2026-08-28
4defbf5 Fix getter partsizecorruption (#3537)
d89aca4 fix downloadobject corruption caused by unequal part size (#3536)
8a0ed85 fix internal timeouts to not depend on the env (#3535)
893faa4 Release 2026-08-27
7263e51 Regenerated Clients
0d6ab44 Update API model
f16c9f2 Fix route53 error close body (#3518)
bc28b42 Move github workflows from inline scripts to actions (#3511)
7352017 support connection read timeouts (#3532)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.37 to 1.33.2

Commits

5a5ee7a Release 2026-08-31.2
bb72816 Regenerated Clients
4167234 Update API model
85ddf74 Remove credential source middleware (#3539)
258c696 Release 2026-08-31
029ffeb Regenerated Clients
c884b0f Update API model
71ac84b schema-serde: json wave 3 (#3538)
b63d8be Release 2026-08-28.2
43288f7 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.36 to 1.20.2

Commits

65023f3 Release 2023-08-17
0742a92 Regenerated Clients
0e3340f Update endpoints model
4526489 Update API model
18635b8 Add X-Amz-Server-Side-Encryption-Context header to required signed headers al...
4682b6a Achieve DisableMRAP parity in config loaders (#2239)
7ecab86 Release 2023-08-16
1ac4add Regenerated Clients
4f353cd Update API model
53f9e53 remove checks on push because its redundant (#2240)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.14 to 0.4.2

Commits

5a5ee7a Release 2026-08-31.2
bb72816 Regenerated Clients
4167234 Update API model
85ddf74 Remove credential source middleware (#3539)
258c696 Release 2026-08-31
029ffeb Regenerated Clients
c884b0f Update API model
71ac84b schema-serde: json wave 3 (#3538)
b63d8be Release 2026-08-28.2
43288f7 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.60.6 to 1.63.0

Commits

2f44586 Release 2024-09-20
22d0876 Regenerated Clients
5454ab9 Update API model
06150d9 add tracing and metrics support (#2798)
18f7b40 Release 2024-09-19
e91c9c4 Regenerated Clients
6df0a09 Update API model
98ae688 Release 2024-09-18
222928c Regenerated Clients
887c4de Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.2 to 1.110.0

Commits

5a5ee7a Release 2026-08-31.2
bb72816 Regenerated Clients
4167234 Update API model
85ddf74 Remove credential source middleware (#3539)
258c696 Release 2026-08-31
029ffeb Regenerated Clients
c884b0f Update API model
71ac84b schema-serde: json wave 3 (#3538)
b63d8be Release 2026-08-28.2
43288f7 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.27.8 to 1.28.1

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-26)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.28.1

Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.28.0

Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

Release (2026-08-25)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.10

Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.

Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-21)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.9

Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.

Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.

Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.

Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-14)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.8

Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-07)

... (truncated)

Commits

73ba51d Release 2026-08-26
4f48688 fix bad AddLogger insert (#701)
761f1cf Release 2026-08-25.2
5370784 Set Content-Length when the request body is set instead of via middleware (#694)
0bcd162 fixup some warnings
08e8d12 remove changelog
3c4a597 Release 2026-08-25
7e0c199 fix data race on stream (#700)
95f86a6 Release 2026-08-21
1ee11d1 fix event stream and empty collection serde (#699)
Additional commits viewable in compare view

Updates github.com/fluxcd/cli-utils from 1.2.2 to 1.2.3

Release notes

Sourced from github.com/fluxcd/cli-utils's releases.

v1.2.3

What's Changed

Upgrade to k8s 1.36.4 by @matheuscscp in fluxcd/cli-utils#39

Full Changelog: fluxcd/cli-utils@v1.2.2...v1.2.3

Commits

8155c12 Merge pull request #39 from fluxcd/upgrade-k8s-1.36
2522108 Upgrade to k8s 1.36.4
See full diff in compare view

Updates github.com/go-openapi/swag/conv from 0.29.0 to 0.29.1

Release notes

Sourced from github.com/go-openapi/swag/conv's releases.

v0.29.1

0.29.1 - 2026-08-21

Full Changelog: go-openapi/swag@v0.29.0...v0.29.1

4 commits in this release.

Testing

test(adapters): fix the nesting-depth test under encoding/json v2 by @fredbi in #240 ...

Miscellaneous tasks

chore: prepare release v0.29.1 by @bot-go-openapi[bot] in #242 ...

chore: update dependabot frequency and pr limit by @fredbi in #241 ...

Updates

build(deps): bump the development-dependencies group across 1 directory with 9 updates by @dependabot[bot] in #239 ...

People who contributed to this release

@fredbi

swag license terms

Per-module changes

conv (0.29.1)

... (truncated)

Commits

e56ec4c chore: prepare release v0.29.1
f03b072 chore: update dependabot frequency and pr limit (#241)
1098db4 build(deps): bump the development-dependencies group across 1 directory with ...
95025ef test(adapters): fix the nesting-depth test under encoding/json v2 (#240)
See full diff in compare view

Updates github.com/klauspost/compress from 1.19.2 to 1.20.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.0

What's Changed

Add lzw reader/writer by @klauspost in klauspost/compress#1189

xpress: add Microsoft XPRESS (MS-XCA) decompression by @MP-GOWTHAM in klauspost/compress#1195

s2: arm64 assembly encoders, lowered from the amd64 avo program by @lizthegrey in klauspost/compress#1187

zstd, huff0: improved arm64 lowering, and narrow two table loads to MOVWQZX by @lizthegrey in klauspost/compress#1175

gzhttp: limit jitter hash to jitterBuffer bytes by @VedantMadane in klauspost/compress#1192

s2: clamp the Go EncodeBetter skip to match the assembly by @lizthegrey in klauspost/compress#1190

xxhash: bound input of non-preemptive assembly by @AskAlexSharov in klauspost/compress#1196

zstd/huff0: fold two ISA-gap x86 idioms in the avo arm64 lowering by @lizthegrey in klauspost/compress#1199

ci: test against go1.27.x, drop go1.24.x by @lizthegrey in klauspost/compress#1198

zstd/huff0: break false partial-register dependencies in seqdec/4X decoders by @lizthegrey in klauspost/compress#1197

flate: Writer L7-9 with dictionary can emit the dictionary to stream by @klauspost in klauspost/compress#1201

New Contributors

@VedantMadane made their first contribution in klauspost/compress#1192

@AskAlexSharov made their first contribution in klauspost/compress#1196

@MP-GOWTHAM made their first contribution in klauspost/compress#1195

Full Changelog: klauspost/compress@v1.19.2...v1.20.0

Commits

9d8ccb1 flate: Writer with a preset dictionary emits the dictionary into the output s...
f93f23a build(deps): bump the github-actions group with 6 updates (#1200)
42f9d96 xpress: add Microsoft XPRESS (MS-XCA) decompression (#1195)
629c2ea zstd/huff0: break false partial-register dependencies in seqdec/4X decoders (...
ba74977 ci: test against go1.27.x, drop go1.24.x (#1198)
f5c1529 zstd/huff0: pin avo peephole folds, regenerate arm64 (#1199)
73508b2 s2: arm64 assembly encoders, lowered from the amd64 avo program (#1187)
0e43f04 xxhash: bound input of non-preemptive assembly (#1196)
4005c15 s2: clamp the Go EncodeBetter skip to match the assembly (#1190)
dd6de45 gzhttp: limit jitter hash to jitterBuffer bytes (#1192)
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.42.1 to 1.43.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.43.0

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Commits

bc1f21e v1.43.0
c814c0e v1.43.0 (full)
a89f25d Add gomock adaptor extension for using Gomega matchers with gomock
See full diff in compare view

Updates github.com/sigstore/rekor from 1.5.3 to 1.5.4

Release notes

Sourced from github.com/sigstore/rekor's releases.

v1.5.4

Changelog

a36bd716fd0d81c314092718f37b53dc26b2af38 add changelog for v1.5.4 release (#2944)

705fc05d8397407872ebce83598c6ab27ef2a13b Apply proactive hardening against malformed requests (GHSA-843x-px86-vq42) (#2945)

5789c38f5cb272e7e41309d44985ce77cf01e56d build(deps): Bump github.com/go-swagger/go-swagger from 0.33.2 to 0.36.4 in /hack/tools in the all group across 1 directory (#2840)

7dd85d3abf008c7d11e1721fc95c6f4f91e5c6a0 better handle connection issues (#2931)

a8544a8e30ac73774b52f573c05d8e31844d26dd build(deps): Bump github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.4.0 (#2939)

ee19b41b56d15ac955e2a6fa5d059270d69bd8e6 remove repetitive viper lookups from api endpoints (#2922)

f3441b54a6969017e2a4cb111eecca9bf35385a2 move CI containers to GHCR (#2943)

d53aa51f4c3960d3b448cac308dc4e416e15671a build(deps): Bump the all group across 1 directory with 3 updates (#2942)

7af1d7c47fb9e893a3295b4a72553d2e9918dda3 build(deps): Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#2938)

ed250aa4865cf653e537fd84d8acc828a3889159 build(deps): Bump cloud.google.com/go/iam from 1.11.0 to 1.13.0 (#2937)

78ba595f16b0bfda5f1e5d7c76c93c260c4d9eef build(deps): Bump gocloud.dev from 0.45.0 to 0.46.0 (#2940)

6a6443e5230980a25a887a861f5c455eac46bf35 build(deps): Bump the all group with 4 updates (#2941)

a64a34535a43229d9b18d001f072a64b53a21004 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2935)

f6fa665db64145e254fb8b6ea2605074e96f946e build(deps): Bump golang from 1.26.5 to 1.26.6 in the all group (#2934)

2309dab576448029c276730735ccb76e5de52036 fix pprof arg (#2932)

5a1909af34d1f25c569d127b9b05530b54f02a05 build(deps): Bump the all group across 1 directory with 6 updates (#2925)

d9790726d5be07f40c3e1aa01f7f842b43976a6c build(deps): Bump golang from 3aff665 to 2005724 (#2924)

e1564dc41944a9653b79bf98e00b4ddd46919d45 build(deps): Bump github.com/prometheus/client_golang (#2928)

a497c02c0a0db1817cdb5d865f84576cca3723b6 build(deps): Bump the all group with 4 updates (#2930)

aea3064bdb4fcaa3ec06ee1c66e885fe5dc9073d build(deps): Bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 (#2926)

5486ddaa6db154049646f2cbf4d327145d85eee3 build(deps): Bump go.step.sm/crypto from 0.85.0 to 0.87.0 (#2927)

ebd7339c38c08f3ea865f63bc611b84d6d72f1df build(deps): Bump github.com/redis/go-redis/v9 from 9.20.1 to 9.22.0 (#2929)

d543a4a664465d8b99507fcd720af86539d5b817 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2923)

eaa6d5b3d22096c9bfd7458ca66032df4354aee7 build(deps): upgrade grpc-ecosystem/go-grpc-middleware to v2 (#2921)

1665651737fdea7d588a8bd71a2e5577abd2a928 build(deps): Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml (#2919)

24394e3bb6cceed5f17fa93972aba21b3e26d0f7 remove unused semver type version map (#2918)

3a9dba1565ad62d20004b6edd62c2997b8c71f5e build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 (#2823)

c4d4150e7fbdd45536cb79b32ced752a0c4a59c8 separate read/write sql traffic for indexservice into separate pools (#2914)

99f7844c567c7f37440882414c30970242f9ecf2 test against valkey (#2916)

aef6385ce5132a39b8f9dfe0210e5f2599fef5e9 Change default CLI upload type to hashedrekord (#2885)

1be154f685d656971fe80369cbb4e84ff3233886 fix shadowed err, wrong err label (#2907)

2cdf437463fbfdd0e638c7965b5ca2dcf315f4c5 build(deps): Bump github.com/go-openapi/swag/conv from 0.27.3 to 0.28.0 (#2910)

e7730e022c63ac15673d9138059127bb1ff20c23 build(deps): Bump golang.org/x/mod from 0.37.0 to 0.38.0 (#2911)

df58502b6ba2e74d9687638ee8094ffd3a908a9d build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2909)

730fa3757b2bb19efa4967c079a12dd1d2fc1581 build(deps): Bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.1 (#2912)

ace88208974be7481e44f6e849133a3b74e6e4d4 build(deps): Bump the all group with 4 updates (#2913)

dfe5a1c485c83b265696c1c9ea4399924d9af154 alpine: hash only the bytes read when computing the control.tar.gz digest (#2908)

a8f4a17c5628e2ccca90688086aef6ed87cbb38a Remove unmaintained scripts/createdb.sh dev helper (#2905)

9573f1b131eb20b000f4752233ca63538429c600 test mysql with production dsn strings (#2906)

f3299aac1ff4e1c7278bbbde80cde66f279203bc build(deps): Bump golang.org/x/crypto in /hack/tools (#2882)

cc5737ee991c30c4b300f464f00a74beb4e18acb build(deps): Bump the all group across 1 directory with 6 updates (#2898)

8485b5d69e1976880d0e6d05765e4489888228d4 build(deps): Bump cloud.google.com/go/pubsub from 1.50.2 to 1.51.0 (#2899)

3d80df7ee97108beb93477477ff0a2411528db79 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2897)

09bf9caea7ee3874ac651f3b11375fd8c181b748 create interface for TrillianClient (#2896)

671e78b6fc294999761fbd155e56ae54d1d23b93 build(deps): Bump the all group with 5 updates (#2900)

a00d60ef97b6016afe498c430bbd35a62f9b7fab build(deps): Bump go.step.sm/crypto from 0.77.7 to 0.85.0 (#2901)

ea4ed74526ad20b1a05e89fa387d03c123beafe1 build(deps): Bump actions/setup-go from 6.5.0 to 7.0.0 (#2902)

bde4e86e1e85cfb7ee4d48a7f98c9533051bac22 use more efficient table schema for indexes (#2903)

... (truncated)

Changelog

Sourced from github.com/sigstore/rekor's changelog.

v1.5.4

Features

search: add subject field for SAN-based lookup (#2850)

Change default CLI upload type to hashedrekord (#2885)

separate read/write sql traffic for indexservice into separate pools (#2914)

Bug Fixes

better handle connection issues (#2931)

fix pprof arg (#2932)

fix shadowed err, wrong err label (#2907)

alpine: hash only the bytes read when computing the control.tar.gz digest (#2908)

return a 400 error for invalid TreeID (#2895)

Return the file error instead of the URL error for a missing artifact path (#2872)

Apply proactive hardening against malformed requests (#2945)

Improvements

remove repetitive viper lookups from api endpoints (#2922)

move CI containers to GHCR (#2943)

remove unused semver type version map (#2918)

test against valkey (#2916)

Remove unmaintained scripts/createdb.sh dev helper (#2905)

test mysql with production dsn strings (#2906)

create interface for TrillianClient (#2896)

use more efficient table schema for indexes (#2903)

Migrate off deprecated golang.org/x/crypto/openpgp (#2883)

minimize duplicative JSON parsing while handling entries (#2880)

remove duplicative log entry (#2881)

optimize DSSE memory and cpu while parsing and verifying envs (#2879)

update builder to use go1.26.4 (#2873)

upgrade grpc-ecosystem/go-grpc-middleware to v2 (#2921)

Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml (#2919)

numerous upgraded dependencies

Documentation

docs(cli): add usage examples to rekor-cli commands (#2851)

Contributors

ahmagdyfb

Bob Callaway

Carlos Tadeu Panato Junior

Chiman Jain

Hayden

Jason Hall

Nikhil J

... (truncated)

Commits

a36bd71 add changelog for v1.5.4 release (#2944)
705fc05 Apply proactive hardening against malformed requests (GHSA-843x-px86-vq42) (#...
5789c38 build(deps): Bump github.com/go-swagger/go-swagger from 0.33.2 to 0.36.4 in /...
7dd85d3 better handle connection issues (#2931)
a8544a8 build(deps): Bump github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.4....
ee19b41 remove repetitive viper lookups from api endpoints (#2922)
f3441b5 move CI containers to GHCR (#2943)
d53aa51 build(deps): Bump the all group across 1 directory with 3 updates (#2942)
7af1d7c build(deps): Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#2938)
ed250aa build(deps): Bump cloud.google.com/go/iam from 1.11.0 to 1.13.0 (#2937)
Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.

Commits

6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
4f94653 update changelog for v1.10.2
87434bb Merge pull request #1585 from thaJeztah/bump_testify
e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
See full diff in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.56.0

Commits

86efde5 ssh: reject unexpected message types on established channels
a6cdac6 ssh: drop traffic on undecided channels
39dc44e ssh: don't skip the source-address critical option in CheckCert
afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
89f4e9b x509roots/fallback: update bundle
71488c4 ssh/knownhosts: compare only public key portions for revocation
82adefa ssh: synchronize unexpected response test
c757c98 all: upgrade go directive to at least 1.26.0 [generated]
593c81a ssh: correctly ignore pre-banner lines
46efc8b acme: add crypto.SignMessage test coverage
Additional commits viewable in compare view

Updates k8s.io/api from 0.36.3 to 0.36.4

Commits

9a6751a Update dependencies to v0.36.4 tag
82d8177 Merge pull request #141226 from liggitt/golang-deps-1-36
a3de3f4 Update golang.org/x deps
See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.36.3 to 0.36.4

Commits

88434be Update dependencies to v0.36.4 tag
eab2e40 Merge pull request #141226 from liggitt/golang-deps-1-36
b3cdc3a Update golang.org/x deps
See full diff in compare view

Updates k8s.io/apimachinery from 0.36.3 to 0.36.4

Commits

612c0ec Update dependencies to v0.36.4 tag
5af8c14 Merge pull request #141226 from liggitt/golang-deps-1-36
42e032e Update golang.org/x deps
See full diff in compare view

Updates k8s.io/cli-runtime from 0.36.3 to 0.36.4

Commits

0f6ca00 Update dependencies to v0.36.4 tag
becfcba Merge pull request #141226 from liggitt/golang-deps-1-36
c021c09 Update golang.org/x deps
See full diff in compare view

Updates k8s.io/client-go from 0.36.3 to 0.36.4

Commits

4e24acf Update dependencies to v0.36.4 tag
a92355f Merge pull request #141226 from liggitt/golang-deps-1-36
e8e8834 Update golang.org/x deps
736cbae Merge pull request #141001 from alancaldelas/automated-cherry-pick-of-#140966...
f4108cd client-go: restore FakeCustomStore conformance to cache.Store
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.6` | `1.45.1` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.37` | `1.33.2` | | [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.3.14` | `0.4.2` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.60.6` | `1.63.0` | | [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils) | `1.2.2` | `1.2.3` | | [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.29.0` | `0.29.1` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.19.2` | `1.20.0` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.42.1` | `1.43.0` | | [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.5.3` | `1.5.4` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.10.1` | `1.10.2` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.56.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.43.6 to 1.45.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.43.6...v1.45.1) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.37 to 1.33.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.37...config/v1.33.2) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.36 to 1.20.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.19.36...v1.20.2) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.3.14 to 0.4.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/transfermanager/v0.3.14...feature/s3/transfermanager/v0.4.2) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.60.6 to 1.63.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ecr/v1.60.6...service/s3/v1.63.0) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.107.2 to 1.110.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.107.2...service/s3/v1.110.0) Updates `github.com/aws/smithy-go` from 1.27.8 to 1.28.1 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.27.8...v1.28.1) Updates `github.com/fluxcd/cli-utils` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/fluxcd/cli-utils/releases) - [Commits](fluxcd/cli-utils@v1.2.2...v1.2.3) Updates `github.com/go-openapi/swag/conv` from 0.29.0 to 0.29.1 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.29.0...v0.29.1) Updates `github.com/klauspost/compress` from 1.19.2 to 1.20.0 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.19.2...v1.20.0) Updates `github.com/onsi/gomega` from 1.42.1 to 1.43.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.42.1...v1.43.0) Updates `github.com/sigstore/rekor` from 1.5.3 to 1.5.4 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.5.3...v1.5.4) Updates `github.com/sirupsen/logrus` from 1.10.1 to 1.10.2 - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](sirupsen/logrus@v1.10.1...v1.10.2) Updates `golang.org/x/crypto` from 0.55.0 to 0.56.0 - [Commits](golang/crypto@v0.55.0...v0.56.0) Updates `k8s.io/api` from 0.36.3 to 0.36.4 - [Commits](kubernetes/api@v0.36.3...v0.36.4) Updates `k8s.io/apiextensions-apiserver` from 0.36.3 to 0.36.4 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.36.3...v0.36.4) Updates `k8s.io/apimachinery` from 0.36.3 to 0.36.4 - [Commits](kubernetes/apimachinery@v0.36.3...v0.36.4) Updates `k8s.io/cli-runtime` from 0.36.3 to 0.36.4 - [Commits](kubernetes/cli-runtime@v0.36.3...v0.36.4) Updates `k8s.io/client-go` from 0.36.3 to 0.36.4 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.36.3...v0.36.4) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.33.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.20.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager dependency-version: 0.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.110.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/smithy-go dependency-version: 1.28.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/cli-utils dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-openapi/swag/conv dependency-version: 0.29.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/klauspost/compress dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/onsi/gomega dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/sigstore/rekor dependency-version: 1.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/sirupsen/logrus dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/crypto dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: k8s.io/api dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/apimachinery dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/cli-runtime dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: k8s.io/client-go dependency-version: 0.36.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

…#2098) (#2099) Fixes #2098 that introduces a breaking change. --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot · 2026-09-07T09:17:39Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Sep 6, 2026

dependabot Bot requested a review from a team as a code owner September 6, 2026 08:32

dependabot Bot added kind/dependency dependency update, etc. kind/chore chore, maintenance, etc. labels Sep 6, 2026

github-actions Bot added the size/m Medium label Sep 6, 2026

frewilhelm self-assigned this Sep 7, 2026

frewilhelm mentioned this pull request Sep 7, 2026

chore(deps): bump the go group across 1 directory with 19 updates (fix #2098) #2099

Merged

frewilhelm closed this in #2099 Sep 7, 2026

dependabot Bot deleted the dependabot/go_modules/go-a8ccb91d31 branch September 7, 2026 09:17

Navigation Menu

Uh oh!

chore(deps): bump the go group across 1 directory with 19 updates - #2098

chore(deps): bump the go group across 1 directory with 19 updates#2098
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-a8ccb91d31

dependabot Bot commented on behalf of github Sep 6, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 6, 2026

Release (2026-08-26)

General Highlights

Module Highlights

Release (2026-08-25.2)

General Highlights

Module Highlights

Release (2026-08-25)

General Highlights

Module Highlights

Release (2026-08-21)

General Highlights

Module Highlights

Release (2026-08-14)

General Highlights

Module Highlights

Release (2026-08-07)

v1.2.3

What's Changed

v0.29.1

0.29.1 - 2026-08-21

Testing

Miscellaneous tasks

Updates

People who contributed to this release

Per-module changes

conv (0.29.1)

v1.20.0

What's Changed

New Contributors

v1.43.0

1.43.0

Features

1.43.0

Features

v1.5.4

Changelog

v1.5.4

Features

Bug Fixes

Improvements

Documentation

Contributors

v1.10.2

Logrus v1.10.2

1.10.2

Uh oh!

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant