Skip to content

🌱 Bump the gomod group across 2 directories with 18 updates#5006

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomod-a674d80248
Open

🌱 Bump the gomod group across 2 directories with 18 updates#5006
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomod-a674d80248

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026 •
edited
Loading

Bumps the gomod group with 12 updates in the / directory:

Package From To
cloud.google.com/go/bigquery 1.73.1 1.75.0
cloud.google.com/go/pubsub 1.50.1 1.50.2
github.com/bradleyfalzon/ghinstallation/v2 2.17.0 2.18.0
github.com/go-git/go-git/v5 5.16.5 5.17.2
github.com/google/go-containerregistry 0.21.0 0.21.3
github.com/moby/buildkit 0.26.3 0.29.0
go.yaml.in/yaml/v2 2.4.3 2.4.4
gocloud.dev 0.44.0 0.45.0
mvdan.cc/sh/v3 3.12.0 3.13.0
github.com/in-toto/attestation 1.1.2 1.2.0
github.com/onsi/ginkgo/v2 2.28.0 2.28.1
gitlab.com/gitlab-org/api/client-go 1.41.0 1.46.0

Bumps the gomod group with 2 updates in the /tools directory: github.com/golangci/golangci-lint/v2 and github.com/goreleaser/goreleaser/v2.

Updates cloud.google.com/go/bigquery from 1.73.1 to 1.75.0

Commits
  • 9cde8ab chore(main): release spanner 1.75.0 (#11551)
  • d7671ec feat(spanner): make randIDForProcess hexadecimal in x-goog-spanner-request-id...
  • a8f16ef fix(spanner): inject "x-goog-spanner-request-id" into outgoing client context...
  • 59fe58a docs(monitoring/apiv3): remove extra fenced code block markers (#11535)
  • bfb6c05 chore(main): release pubsub 1.47.0 (#11547)
  • 46d6ed4 feat(pubsub): support new forms of topic ingestion (#11537)
  • 0dd7d3d feat(storage): wrap NotFound errors for buckets and objects (#11519)
  • 8fc5a87 chore: bump cloud.google.com/go dep (#11541)
  • 1a214c9 chore: release main (#11467)
  • 24b3a20 chore(main): release 0.118.1 (#11539)
  • Additional commits viewable in compare view

Updates cloud.google.com/go/pubsub from 1.50.1 to 1.50.2

Commits
  • e2bbf19 chore: librarian release pull request: 20260331T202405Z (#14314)
  • 4e6350f chore: librarian release pull request: 20260331T201226Z (#14312)
  • 7c26e42 chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /interna...
  • e5b2057 chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /internal/g...
  • 97d824d feat(firestore): add WithAlwaysUseImplicitOrderBy option (#14260)
  • eb1fe4c chore: librarian release pull request: 20260331T193117Z (#14310)
  • 8a34364 feat(bigtable): check alts if we return permission denied for pingandwarm (#...
  • 98a546d chore: update version.go template (#14307)
  • efb8c17 chore: add biglake and hive (#14306)
  • 4c0232a fix(pubsub): check for nil concurrency control span (#14303)
  • Additional commits viewable in compare view

Updates github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0

Release notes

Sourced from github.com/bradleyfalzon/ghinstallation/v2's releases.

v2.18.0

What's Changed

Full Changelog: bradleyfalzon/ghinstallation@v2.17.0...v2.18.0

Commits
  • 1237274 Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0
  • c9c5e67 Bump actions/checkout from 5.0.0 to 6.0.2
  • f5640e5 Update google/go-github to v84
  • 6e26acb drop deprecated go versions
  • 0e0f2d4 fix lints
  • bc61e9f apply best practices to ci
  • ee71ad0 bump golangci-lint to v2.10
  • 4ec07cc add go 1.25 and 1.26 to tests
  • 8f035f2 bump github.com/google/go-github to v83
  • a2705da Bump actions/checkout from 4.2.2 to 5.0.0
  • See full diff in compare view

Updates github.com/go-git/go-git/v5 from 5.16.5 to 5.17.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.17.2

What's Changed

⚠️ This release fixes a bug (go-git/go-git#1942) that blocked some users from upgrading to v5.17.1. Thanks @​pskrbasu for reporting it. 🙇

Full Changelog: go-git/go-git@v5.17.1...v5.17.2

v5.17.1

What's Changed

Full Changelog: go-git/go-git@v5.17.0...v5.17.1

v5.17.0

What's Changed

Full Changelog: go-git/go-git@v5.16.5...v5.17.0

Commits
  • 45ae193 Merge pull request #1944 from go-git/fix-perms
  • fda4f74 storage: filesystem/dotgit, Skip writing pack files that already exist on disk
  • 2212dc7 Merge pull request #1941 from go-git/renovate/releases/v5.x-go-github.com-go-...
  • ebb2d7d build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY]
  • 5e23dfd Merge pull request #1937 from pjbgf/idx-v5
  • 6b38a32 Merge pull request #1935 from pjbgf/index-v5
  • cd757fc plumbing: format/idxfile, Fix version and fanout checks
  • 3ec0d70 plumbing: format/index, Fix tree extension invalidated entry parsing
  • dbe10b6 plumbing: format/index, Align V2/V3 long name and V4 prefix encoding with Git
  • e9b65df plumbing: format/index, Improve v4 entry name validation
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.0 to 0.21.3

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.3

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.2...v0.21.3

v0.21.2

What's Changed

Full Changelog: google/go-containerregistry@v0.21.1...v0.21.2

v0.21.1

This release fixes a regression in crane introduced in the previous release.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.0...v0.21.1

Commits
  • 3888fb8 bump golang to 1.25.7 (#2236)
  • f439624 tarball: detect symlink cycles in extractFileFromTar (#2232)
  • 400c263 mutate: reject path traversal and symlink escape in Extract (#2227)
  • 47eedc9 Bump goreleaser/goreleaser-action in the actions group (#2220)
  • be0a845 Bump the go-deps group across 4 directories with 7 updates (#2233)
  • e916301 migrate to github.com/moby/moby modules (#2228)
  • 8b2478e Adds local file support to the crane index subcommand (#2223)
  • 9e0ccb0 Better handle redirects to https in ping (#2225)
  • 85f2bf5 crane: fix case in auth response json (#2218)
  • e971d63 Add WithFileBufferedOpener for file-backed daemon image buffering (#2214)
  • See full diff in compare view

Updates github.com/moby/buildkit from 0.26.3 to 0.29.0

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.29.0

Welcome to the v0.29.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi
  • CrazyMax
  • David Karlsson
  • Akihiro Suda
  • Sebastiaan van Stijn
  • Brian Ristuccia
  • Jonathan A. Sternberg
  • Mateusz Gozdek
  • Natnael Gebremariam

Notable Changes

  • Builtin Dockerfile frontend has been updated to v1.23.0 changelog
  • Git sources can now initialize all files from a Git checkout with commit time in the LLB API for better reproducibility. See Dockerfile changelog for how to enable this in the Dockerfile frontend #6600
  • Various file access operations in Git and HTTP sources have been hardened for improved security #6613
  • Frontends can now report updated SOURCE_DATE_EPOCH with result metadata that can be used by exporters #6601
  • Fix possible panic when listing build history after recent deletions #6614
  • Fix possible issue where builds from Git repositories could start to fail after submodule rename #6563
  • Fix possible process lifecycle event ordering issue in interactive container API that could cause deadlocks in the client #6531
  • Fix regression where build progress skipped the message about layers being pushed to the registry #6587
  • Fix possible cgroup initialization failure in BuildKit container image entrypoint on some environments #6585
  • Fix issue with resolving symlinks via file access methods of the Gateway API #6559
  • Fix possible "parent snapshot does not exist" error when exporting images in parallel #6558
  • Fix possible panic from zstd compression #6599
  • Fix issue where cache imports from an uninitialized local cache tag could fail the build #6554
  • Included CNI plugins have been updated to v1.9.1 #6583
  • Included QEMU emulator support has been updated to v10.2.1 #6580
  • Runc container runtime has been updated to v1.3.5 #6625

Dependency Changes

  • github.com/aws/aws-sdk-go-v2 v1.41.1 -> v1.41.4
  • github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4 -> v1.7.5
  • github.com/aws/aws-sdk-go-v2/config v1.32.7 -> v1.32.12
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.7 -> v1.19.12
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.17 -> v1.18.20
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.17 -> v1.4.20
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.17 -> v2.7.20
  • github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 -> v1.8.6
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 -> v1.13.7

... (truncated)

Commits
  • 8543ce4 Merge pull request #6634 from moby/dependabot/github_actions/crazy-max-dot-gi...
  • 1154c7e Merge pull request #6635 from moby/dependabot/github_actions/codecov/codecov-...
  • 326e4d1 Merge pull request #6637 from moby/dependabot/github_actions/github/codeql-ac...
  • 676cdfa Merge pull request #6636 from moby/dependabot/github_actions/actions/setup-go...
  • 1dd2e50 build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
  • 21fb771 build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
  • 06b36e5 build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0
  • 969f5e4 build(deps): bump the crazy-max-dot-github group with 2 updates
  • f8fd302 Merge pull request #6623 from crazy-max/zizmor
  • a103fb6 Merge pull request #6625 from thaJeztah/bump_runc_1.3
  • Additional commits viewable in compare view

Updates go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4

Commits
  • 43b627a Replace gopkg.in/check.v1 with the standard testing library
  • See full diff in compare view

Updates gocloud.dev from 0.44.0 to 0.45.0

Release notes

Sourced from gocloud.dev's releases.

v0.45.0

What's Changed

New Contributors

Full Changelog: google/go-cloud@v0.44.0...v0.45.0

Commits
  • 7cc909b all: prerelease (#3664)
  • 31e3651 blob/s3blob: map S3 403 errors to PermissionDenied code (#3663)
  • c8f1226 all: update NATS dependency (#3662)
  • ac4bb89 all: Upgrade GitHub Actions for Node 24 compatibility (#3660)
  • 1497536 secrets/gcpkms: Add support for Additional Authenticated Data (AAD) (#3659)
  • 113974a all: Upgrade go.opentelemetry.io/otel/sdk to v1.40.0 (#3657)
  • 0b41d48 build(deps): bump the go_modules group across 2 directories with 1 update (#3...
  • 4c421d0 all: Update to go 1.26 (#3653)
  • b84d07f all: run go 1.26's go fix (#3654)
  • ae3c665 blob/gcsblob: derive universe domain from credentials (#3652)
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.34.0 to 0.35.0

Commits
  • 7ca2c6d go.mod: update golang.org/x dependencies
  • 73d1ba9 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates mvdan.cc/sh/v3 from 3.12.0 to 3.13.0

Release notes

Sourced from mvdan.cc/sh/v3's releases.

v3.13.0

This release introduces support for Zsh in the parser and formatter, which was tracked in issue #120 alongside the label https://github.com/mvdan/sh/labels/zsh. While support is not complete, it should be far enough for many use cases.

This release also drops support for Go 1.24 and includes many other enhancements:

  • cmd/shfmt
    • Exit with a non-zero status when -l prints any filenames
    • shfmt -version is now derived from the git current tag, dropping the -ldflags workaround
  • syntax
    • New nodes types and node fields are introduced alongside LangZsh
    • LangVariant is now a bitset, allowing the use of sets like "Bash-like"
    • Add InteractiveSeq and StmtsSeq iterator methods for Parser
    • Stop exposing the internal buffer in Printer via struct embedding
    • Support the use of brace expansions like declare {a,b}_c=value
    • Fix a bug where POSIX and Bash incorrectly allowed empty command lists
  • interp
    • Add support for shopt -s dotglob and shopt -s extglob
    • Add support for simple uses of !(expr) extended glob patterns
    • Support more builtin flags for declare, type, read
    • Fix various bugs relating to nulls, errors, and arrays
  • expand
    • Add Config.DotGlob and Config.ExtGlob for the interpreter
    • Add Variable.Flags to get the one-character declare flags
    • Do not force env vars on Windows to be uppercase
    • Fix various bugs relating to glob pattern matching
  • pattern
    • Add GlobLeadingDot and ExtendedOperators for the interpreter
    • Add NegExtGlobError to mark the use of !(expr) negation patterns

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.26.1 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

Note that this release no longer includes a sha256sums.txt asset; GitHub now provide digests natively.

Changelog

Sourced from mvdan.cc/sh/v3's changelog.

Changelog

Commits
  • 5c4d285 cmd/shfmt: bump Go and Alpine in the Dockerfile
  • 1ae455b update golang.org/x/sys
  • cb484d3 syntax: apply gopls warning suggestion
  • 64d9126 syntax: gofmt -w
  • 55d279f syntax: simplify zsh logic on left parentheses
  • 1cf3c19 syntax: support alternations in zsh test expressions
  • 0f0636e syntax: support parsing extended globs in zsh
  • a173247 syntax: parse and format zsh >! redirects as >|
  • d6bf6c9 syntax: rename ParamExp.Plus to IsSet
  • b612daa cmd/shfmt: simplify flag value code
  • Additional commits viewable in compare view

Updates github.com/in-toto/attestation from 1.1.2 to 1.2.0

Release notes

Sourced from github.com/in-toto/attestation's releases.

v1.2.0

Core Attestation Framework Spec Changes

New / Updated Predicates

Language Bindings Changes

Other Changes

New Contributors

Full Changelog: in-toto/attestation@v1.1.2...v1.2.0

Commits
  • df02077 Add SVR to the list of predicates and fix some issues in the list (#537)
  • cd3e5c7 Merge pull request #536 from marcelamelara/msm-update-maintainers
  • b31d198 Apply suggestions from code review
  • 4527976 Add Aditya as maintainer, move Mikhail and Tom to emeritus
  • 7bfb269 Ensure the Envelope spec meets ITE-5 (#431)
  • ad76f68 Clarify that non-cryptographic digests may use custom value encoding (#517)
  • 071e175 Bump actions/setup-node from 6.2.0 to 6.3.0 (#535)
  • cad7a33 Bump markdownlint-cli from 0.47.0 to 0.48.0 (#533)
  • 913a235 Bump actions/setup-go from 6.2.0 to 6.3.0 (#531)
  • 36c27c1 Merge pull request #530 from in-toto/dependabot/npm_and_yarn/markdown-it-14.1.1
  • Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.28.1

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

Commits

Updates gitlab.com/gitlab-org/api/client-go from 1.41.0 to 1.46.0

Release notes

Sourced from gitlab.com/gitlab-org/api/client-go's releases.

v1.46.0

1.46.0

🚀 Features

1.46.0 (2026-03-01)

v1.45.0

1.45.0

🚀 Features

🔄 Other Changes

1.45.0 (2026-02-27)

Bug Fixes

  • test: Use epic IID instead of ID in DeleteEpic cleanup. (49dea05)
Changelog

Sourced from gitlab.com/gitlab-org/api/client-go's changelog.

1.46.0

🚀 Features

1.46.0 (2026-03-01)

1.45.0

🚀 Features

🔄 Other Changes

1.45.0 (2026-02-27)

Bug Fixes

  • test: Use epic IID instead of ID in DeleteEpic cleanup. (49dea05)

1.44.0

🚀 Features

  • Implement runner controller instance-level runner scope support (!2765) by Timo Furrer

🔄 Other Changes

1.44.0 (2026-02-26)

1.43.0

🚀 Features

... (truncated)

Commits
  • da7b8a7 chore(release): 1.46.0 [skip ci]
  • 072590b Merge branch 'Update_Urls_and_add-missing' into 'main'
  • 8b63461 Update urls and add missing
  • 0abd5ce chore(release): 1.45.0 [skip ci]
  • 6f5a6da Merge branch 'issue_#2237' into 'main'
  • 06094f9 Add LockMembershipsToSAML support to Application Settings
  • 37ff76b Merge branch 'fforster/epic-cleanup' into 'main'
  • 49dea05 fix(test): Use epic IID instead of ID in DeleteEpic cleanup.
  • 1e294d4 chore(release): 1.44.0 [skip ci]
  • 69b78fe Merge branch 'rc-runner-scopes' into 'main'
  • Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.59.0 to 1.61.3

Commits
  • 35cd86a chore: librarian release pull request: 20260313T045834Z (#14170)
  • 428b228 docs(storage): Fix godoc formatting (#14169)
  • e56381c feat(vertexai): Support AgentEngine for Agent Development Kit (#14168)
  • d38abf9 feat(auth): add OpenTelemetry gRPC and HTTP wrappers for T4 tracing (#14133)
  • 9f56e9f chore: librarian release pull request: 20260312T071057Z (#14164)
  • 2dc8c9f chore: librarian release pull request: 20260312T041544Z (#14162)
  • aeffa93 feat(pubsub/v2): add keep alive support (#13457)
  • bb64998 feat(bigtable): add load balancing penalty for channel (#14149)
  • 704a21f Revert "Revert "chore: librarian release pull request: 20260311T074420Z"" (#1...
  • b1b0586 Revert "chore: librarian release pull request: 20260311T074420Z" (#14157)
  • Additional commits viewable in compare view

Updates github.com/go-git/go-billy/v5 from 5.7.0 to 5.8.0

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.8.0

What's Changed

Full Changelog: go-git/go-billy@v5.7.0...v5.8.0

Commits
  • 8662784 Merge pull request #187 from pjbgf/windows-rename
  • f387d62 build: Update test workflow to rely on oldstable/stable
  • 915dae9 polyfill: Add support for Chmod
  • f3d5600 osfs: Create dir for BoundOS Tempfiles
  • 247a741 Merge pull request #183 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...
  • 1c0c9d5 build: Update module golang.org/x/net to v0.45.0 [SECURITY]
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits
  • 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates github.com/onsi/ginkgo/v2 from 2.28.0 to 2.28.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.28.1

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent wit...

Description has been truncated

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 6, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 6, 2026 08:31
@dependabot dependabot bot requested review from AdamKorcz and spencerschrock and removed request for a team April 6, 2026 08:31
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 6, 2026
@dependabot dependabot bot had a problem deploying to integration-test April 6, 2026 08:31 Failure
@dosubot dosubot bot added the size:L This PR changes 100-499 lines, ignoring generated files. label Apr 6, 2026
@dependabot dependabot bot force-pushed the dependabot/go_modules/gomod-a674d80248 branch from 00fd2dd to 58047d5 Compare April 13, 2026 08:45
@dependabot dependabot bot had a problem deploying to integration-test April 13, 2026 08:45 Failure
@dependabot
🌱 Bump the gomod group across 2 directories with 18 updates
4626578 
Bumps the gomod group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) | `1.73.1` | `1.75.0` |
| [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) | `1.50.1` | `1.50.2` |
| [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) | `2.17.0` | `2.18.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.5` | `5.17.2` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.0` | `0.21.3` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.26.3` | `0.29.0` |
| [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.3` | `2.4.4` |
| [gocloud.dev](https://github.com/google/go-cloud) | `0.44.0` | `0.45.0` |
| [mvdan.cc/sh/v3](https://github.com/mvdan/sh) | `3.12.0` | `3.13.0` |
| [github.com/in-toto/attestation](https://github.com/in-toto/attestation) | `1.1.2` | `1.2.0` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.28.0` | `2.28.1` |
| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `1.41.0` | `1.46.0` |

Bumps the gomod group with 2 updates in the /tools directory: [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint) and [github.com/goreleaser/goreleaser/v2](https://github.com/goreleaser/goreleaser).


Updates `cloud.google.com/go/bigquery` from 1.73.1 to 1.75.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@bigquery/v1.73.1...spanner/v1.75.0)

Updates `cloud.google.com/go/pubsub` from 1.50.1 to 1.50.2
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v1.50.1...pubsub/v1.50.2)

Updates `github.com/bradleyfalzon/ghinstallation/v2` from 2.17.0 to 2.18.0
- [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases)
- [Commits](bradleyfalzon/ghinstallation@v2.17.0...v2.18.0)

Updates `github.com/go-git/go-git/v5` from 5.16.5 to 5.17.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.16.5...v5.17.2)

Updates `github.com/google/go-containerregistry` from 0.21.0 to 0.21.3
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.0...v0.21.3)

Updates `github.com/moby/buildkit` from 0.26.3 to 0.29.0
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.26.3...v0.29.0)

Updates `go.yaml.in/yaml/v2` from 2.4.3 to 2.4.4
- [Commits](yaml/go-yaml@v2.4.3...v2.4.4)

Updates `gocloud.dev` from 0.44.0 to 0.45.0
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.44.0...v0.45.0)

Updates `golang.org/x/text` from 0.34.0 to 0.35.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.34.0...v0.35.0)

Updates `mvdan.cc/sh/v3` from 3.12.0 to 3.13.0
- [Release notes](https://github.com/mvdan/sh/releases)
- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)
- [Commits](mvdan/sh@v3.12.0...v3.13.0)

Updates `github.com/in-toto/attestation` from 1.1.2 to 1.2.0
- [Release notes](https://github.com/in-toto/attestation/releases)
- [Commits](in-toto/attestation@v1.1.2...v1.2.0)

Updates `github.com/onsi/ginkgo/v2` from 2.28.0 to 2.28.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.28.1)

Updates `gitlab.com/gitlab-org/api/client-go` from 1.41.0 to 1.46.0
- [Release notes](https://gitlab.com/gitlab-org/api/client-go/tags)
- [Changelog](https://gitlab.com/gitlab-org/api/client-go/blob/main/CHANGELOG.md)
- [Commits](https://gitlab.com/gitlab-org/api/client-go/compare/v1.41.0...v1.46.0)

Updates `cloud.google.com/go/storage` from 1.59.0 to 1.61.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.59.0...storage/v1.61.3)

Updates `github.com/go-git/go-billy/v5` from 5.7.0 to 5.8.0
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.7.0...v5.8.0)

Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0
- [Commits](golang/oauth2@v0.35.0...v0.36.0)

Updates `github.com/onsi/ginkgo/v2` from 2.28.0 to 2.28.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.0...v2.28.1)

Updates `github.com/golangci/golangci-lint/v2` from 2.10.1 to 2.11.4
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md)
- [Commits](golangci/golangci-lint@v2.10.1...v2.11.4)

Updates `github.com/goreleaser/goreleaser/v2` from 2.12.2 to 2.15.2
- [Release notes](https://github.com/goreleaser/goreleaser/releases)
- [Commits](goreleaser/goreleaser@v2.12.2...v2.15.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-version: 1.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: cloud.google.com/go/pubsub
  dependency-version: 1.50.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/bradleyfalzon/ghinstallation/v2
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.17.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: gocloud.dev
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/text
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: mvdan.cc/sh/v3
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/in-toto/attestation
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: gitlab.com/gitlab-org/api/client-go
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.61.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/go-git/go-billy/v5
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/golangci/golangci-lint/v2
  dependency-version: 2.11.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/goreleaser/goreleaser/v2
  dependency-version: 2.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/gomod-a674d80248 branch from 58047d5 to 4626578 Compare April 20, 2026 09:05
@dependabot dependabot bot had a problem deploying to integration-test April 20, 2026 09:05 Failure
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@spencerschrock spencerschrock Awaiting requested review from spencerschrock spencerschrock is a code owner automatically assigned from ossf/scorecard-maintainers

@AdamKorcz AdamKorcz Awaiting requested review from AdamKorcz AdamKorcz is a code owner automatically assigned from ossf/scorecard-maintainers

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size:L This PR changes 100-499 lines, ignoring generated files.

Projects

OpenSSF Scorecard
Status: No status

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants