Skip to content

build(deps): bump chainguard.dev/apko from 1.2.44 to 1.3.1 - #479

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/chainguard.dev/apko-1.3.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/chainguard.dev/apko-1.3.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps chainguard.dev/apko from 1.2.44 to 1.3.1.

Release notes

Sourced from chainguard.dev/apko's releases.

Release v1.3.1

Changelog

  • b52413b7bb6f873589ad029ef6c94a4f08347166 Addressing processor architecture in documentation (#988)
  • 0ae03fcc34d97c0fc42fe4dc49ae3f96969d0b7c Fix: Respect --log-level flag for SBOM deduplication logs (#1901)
  • 7b1fab7ea6c9c7c07351c200928c0abe2122e2a5 Typo fix to README.md (#998)
  • 38315bf3765f0c0d53dc7951616c732b50c0987b build(deps): bump chainguard-dev/actions/setup-registry from 1.6.34 to 1.6.35 (#2490)
  • 6ed7cb270eb838bb3bee8b4fe6c696ab0bfcef90 build(deps): bump chainguard.dev/sdk from 0.1.248 to 0.1.257 (#2489)
  • 29b489cfd0dfb2b34ad90310444446f5da2fe980 docs(README): add alternative installation method using mise (#1923)
  • d83bd1cbff32195ca4161ad4bf13c96bd6496a10 fix(build): clone opts before appending to avoid cross-config stomp in concurrent resolves (#2487)
  • 0a729934d64cace1405b8092898431e3326d3920 fix: redact runtime repository credentials (#2220)

Release v1.3.0

Changelog

  • 95c706df574c1b080a5b00a9bda493e07b058f5d build(deps): bump chainguard.dev/sdk from 0.1.245 to 0.1.248 (#2476)
  • 4ee352f5fb14e1d109a72391264deefb2b5111b8 build(deps): bump go.step.sm/crypto from 0.89.0 to 0.90.0 (#2475)
  • 7b323876faa6cfdb31587ba133e02be4ceaa72f0 build(deps): bump golang.org/x/oauth2 from 0.36.0 to 0.37.0 (#2477)
  • c9b4f165f63c3557946466f218d1940c2488cfdc build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 (#2474)
  • 0e705a93fb5084747c3a988a20a7b196ea8a25d1 build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 (#2473)
  • 825716ae9a2e80ba3af5cf0ec6eda1584e39a539 build(deps): bump golang.org/x/time from 0.15.0 to 0.16.0 (#2472)
  • 9e66cfb01cf05256157b43c0187b67a8b79035be feat(metrics): record compression cache hits and misses (#2486)

Release v1.2.45

Changelog

  • dbd5dd9cdb5d092d526a16b96711620f9d482665 apk: bound global caches with LRU eviction (#2463)
  • f29526071f75b43c479bd70a865b02e9e0227cdb apk: stop bypassing the resolver cache for superseded indexes (#2462)
  • 113b9eca69395eafe718676a9ea430ced3f0b597 build(deps): bump chainguard.dev/sdk from 0.1.224 to 0.1.228 (#2460)
  • b80cbbcac7b9e4712853ffebcf18ee49229a5c3a build(deps): bump chainguard.dev/sdk from 0.1.228 to 0.1.245 (#2469)
  • 14b8ae358c496173795d615fb69e6b1f8c49cff4 build(deps): bump github.com/google/go-containerregistry from 0.22.0 to 0.22.1 (#2468)
  • c1bb2597cad2077f06afdd100c2a6518a863bb4d build(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (#2470)
  • 2be1e7e8aade041151a1f3b32df745da34c869d2 build(deps): bump google.golang.org/api from 0.295.0 to 0.296.0 (#2459)
  • 1f1c2a159b345818650a13e89d6d4e9302805b69 build(deps): bump google.golang.org/api from 0.296.0 to 0.297.0 (#2471)
  • 9e7bbc4359d33b02df8cb5cf89262c77aaa51f25 fix(build): reapply pgzip concurrency cap after Reset, fix layer fd leak (#2478)
Commits
  • 38315bf build(deps): bump chainguard-dev/actions/setup-registry from 1.6.34 to 1.6.35...
  • 6ed7cb2 build(deps): bump chainguard.dev/sdk from 0.1.248 to 0.1.257 (#2489)
  • 0a72993 fix: redact runtime repository credentials (#2220)
  • 7b1fab7 Typo fix to README.md (#998)
  • b52413b Addressing processor architecture in documentation (#988)
  • 29b489c docs(README): add alternative installation method using mise (#1923)
  • 0ae03fc Fix: Respect --log-level flag for SBOM deduplication logs (#1901)
  • d83bd1c fix(build): clone opts before appending to avoid cross-config stomp in concur...
  • 9e66cfb feat(metrics): record compression cache hits and misses (#2486)
  • c9b4f16 build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 (#2474)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/chainguard.dev/apko-1.3.1 branch from c22abd0 to 763a4cc Compare September 16, 2026 14:54
Bumps [chainguard.dev/apko](https://github.com/chainguard-dev/apko) from 1.2.44 to 1.3.1.
- [Release notes](https://github.com/chainguard-dev/apko/releases)
- [Changelog](https://github.com/chainguard-dev/apko/blob/main/NEWS.md)
- [Commits](chainguard-dev/apko@v1.2.44...v1.3.1)

---
updated-dependencies:
- dependency-name: chainguard.dev/apko
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/chainguard.dev/apko-1.3.1 branch from 763a4cc to 3d354b5 Compare September 16, 2026 15:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants