Skip to content

chore(deps): Bump the minor-patch group across 1 directory with 28 updates - #2048

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-patch-470a0b4c1a
Open

chore(deps): Bump the minor-patch group across 1 directory with 28 updates#2048
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-patch-470a0b4c1a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-patch group with 28 updates in the / directory:

Package From To
cuelang.org/go 0.16.1 0.17.1
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.22.0 1.24.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.14.0 1.15.0
github.com/aws/aws-sdk-go-v2 1.42.0 1.47.7
github.com/docker/docker-credential-helpers 0.9.5 0.9.12
github.com/docker/go-connections 0.7.0 0.8.2
github.com/go-jose/go-jose/v4 4.1.6 4.1.9
github.com/google/go-containerregistry 0.21.7 0.22.1
github.com/hashicorp/go-rootcerts 1.0.2 1.1.0
github.com/hashicorp/vault/api 1.22.0 1.23.0
github.com/letsencrypt/boulder 0.20260309.0 0.20261105.0
github.com/open-policy-agent/opa 1.17.1 1.22.2
github.com/sigstore/cosign/v3 3.1.3 3.1.4
github.com/sigstore/protobuf-specs 0.5.1 0.5.2
github.com/sigstore/rekor 1.5.3 1.5.4
github.com/sigstore/sigstore 1.10.8 1.11.1
github.com/sigstore/sigstore-go 1.2.2 1.3.0
github.com/sigstore/sigstore/pkg/signature/kms/aws 1.10.8 1.11.1
github.com/sigstore/sigstore/pkg/signature/kms/azure 1.10.8 1.11.1
github.com/sigstore/sigstore/pkg/signature/kms/gcp 1.10.8 1.11.1
github.com/sigstore/sigstore/pkg/signature/kms/hashivault 1.10.8 1.11.1
golang.org/x/net 0.61.0 0.62.0
golang.org/x/time 0.15.0 0.16.0
google.golang.org/grpc 1.83.2 1.84.0
k8s.io/apimachinery 0.36.5 0.37.2
k8s.io/client-go 0.36.5 0.37.2
k8s.io/kube-openapi 0.0.0-20260317180543-43fb72c5454a 0.0.0-20260721132016-d427ff9ee9ad
sigs.k8s.io/release-utils 0.12.4 0.12.5

Updates cuelang.org/go from 0.16.1 to 0.17.1
Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.22.0 to 1.24.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.24.0

1.24.0 (2026-11-02)

Features Added

  • Added tracing.WrapTracer to decorate a tracer while preserving attribute override ordering.
  • Added supporting infrastructure for SSE responses. This includes streaming types, runtime support, and fakes.
  • Added arm.ResourceID.ValidateResourceTypeChain to validate complete resource-type ancestry.

Bugs Fixed

  • Client tracing spans now redact the request URL in error descriptions using the pipeline's query parameter allow list.
  • Retry logging now uses the pipeline's query parameter allow list and redacts request URLs in errors.

Other Changes

  • Upgraded to Go 1.26.0.
  • Upgraded dependencies.

sdk/azcore/v1.23.3

1.23.3 (2026-10-06)

Bugs Fixed

  • Fixed arm.ResourceID.Location being empty when the locations segment uses different casing.

Other Changes

  • Added azure-deprecating to the default set of allowed (non-redacted) response headers for logging.
  • Replaced internal default HTTP client with the one from sdk/internal.

sdk/azcore/v1.23.2

1.23.2 (2026-09-28)

Bugs Fixed

  • Fixed unmarshalling datetime.RFC7231 to use a fixed GMT zone.
Commits
  • e0b565c Prep azcore@v1.24.0 for release (#27899)
  • b8bc42d NO_CI update Go dependencies (#27894)
  • 2a36830 Fix auto-release eligibility for shared CI triggers (#27883)
  • abdfbaf Use global vars for Go versions (#27897)
  • 3e18dc9 [AutoPR sdk-resourcemanager/netapp/armnetapp]-generated-from-SDK Generation -...
  • 7ff7eca [AutoPR sdk-resourcemanager/aiinfraoptimization/armaiinfraoptimization]-gener...
  • a4da5ab [AutoPR sdk-resourcemanager/hybridconnectivity/armhybridconnectivity]-generat...
  • e948fd2 docs: fix typos underlaying -> underlying, similiar -> similar (#27446)
  • 344629a [AutoPR sdk-resourcemanager/storagemover/armstoragemover]-generated-from-SDK ...
  • 70dc4fa [AutoPR sdk-resourcemanager/privatetrafficmanager/armprivatetrafficmanager]-g...
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.0 to 1.15.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.15.0

1.15.0 (2026-10-14)

Features Added

  • ManagedIdentityCredential and DefaultAzureCredential support user-assigned managed identities on Azure Arc when the agent supports them
  • WorkloadIdentityCredential supports identity binding mode via WorkloadIdentityCredentialOptions.EnableAzureProxy

Bugs Fixed

  • ManagedIdentityCredential verifies the Service Fabric endpoint's certificate against IDENTITY_SERVER_THUMBPRINT and rejects redirects

Other Changes

  • On Service Fabric, a custom ClientOptions.Transport must be an *http.Client with a nil Transport or a standard *http.Transport without custom TLS dialing or verification callbacks. Unsupported transports now cause credential construction to fail
  • Upgraded dependencies
Commits
  • bb7200c Update azcore v1.15.0 release date (#23569)
  • d112082 [azopenaiextensions] Pushing release date to Monday (#23565)
  • 9522165 [azopenai] 2024-08-01-preview generation (#23554)
  • 42922c1 [azeventhubs,azservicebus] Applying retry fix to both eventhubs and servicebu...
  • 5df372c Use common OIDC token env vars in post scripts (#23549)
  • 1c2a108 BearerTokenPolicy handles CAE claims challenges by default (#23414)
  • 8759ee6 [azopenaiextensions] Prepping for release tomorrow (#23551)
  • a230ef2 [Search] Remove myself from CODEOWNERS (#23560)
  • a743757 Sync eng/common directory with azure-sdk-tools for PR 9106 (#23555)
  • 7c2d3a7 Use equality function check for persist oidc token step (#23559)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.42.0 to 1.47.7

Commits

Updates github.com/docker/docker-credential-helpers from 0.9.5 to 0.9.12

Release notes

Sourced from github.com/docker/docker-credential-helpers's releases.

v0.9.12

What's Changed

  • secretservice: Fix get_attribute ownership and NULL attribute

Full Changelog: docker/docker-credential-helpers@v0.9.11...v0.9.12

v0.9.11

What's Changed

  • update to go1.26.10
  • secretservice: free buffers returned by get and list
  • build(deps): bump docker/bake-action from 7.4.0 to 7.5.0

Full Changelog: docker/docker-credential-helpers@v0.9.10...v0.9.11

v0.9.10

What's Changed

  • update to go1.26.9
  • build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2
  • build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1
  • build(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0
  • build(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3
  • build(deps): bump the docker-actions group

Full Changelog: docker/docker-credential-helpers@v0.9.9...v0.9.10

v0.9.9

What's Changed

  • update to go1.26.7
  • Dockerfile: update to debian trixie, libgcc-12-dev, ubuntu 24.04 (noble)
  • README: remove Go Report Card badge
  • build(deps): bump docker/* actions
  • build(deps): bump actions/checkout from 6.0.3 to 7.0.1
  • build(deps): bump actions/setup-go from 6.4.0 to 7.0.0
  • build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
  • build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.10.0 to 1.11.0
  • build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2

Full Changelog: docker/docker-credential-helpers@v0.9.8...v0.9.9

v0.9.8

What's Changed

  • update to go1.26.4
  • wincred: inline label, and append to existing
  • build(deps): bump actions/checkout from 6.0.2 to 6.0.3

... (truncated)

Commits
  • 29ae62c Merge pull request #477 from vvoland/secretservice-fix-ownership
  • 8077dee secretservice: Fix prefix matching of attribute names
  • 59a2f25 secretservice: Fix crash on items without cached attributes
  • 6d89904 secretservice: Return an owned copy of item attributes
  • 901c3e7 Merge pull request #474 from locker95/secretservice-free-cgo-buffers
  • 9502455 Merge pull request #476 from thaJeztah/bump_go2
  • d1948b3 Merge pull request #475 from docker/dependabot/github_actions/docker-actions-...
  • eb5849b update to go1.26.10
  • d61b6ab build(deps): bump docker/bake-action
  • 3b640f2 secretservice: free buffers returned by get and list
  • Additional commits viewable in compare view

Updates github.com/docker/go-connections from 0.7.0 to 0.8.2

Release notes

Sourced from github.com/docker/go-connections's releases.

v0.8.2

What's Changed

  • sockets: preserve configured TLS ALPN protocols
  • ci: add dependabot to update actions
  • ci: update runners to Ubuntu 26.04
  • build(deps): bump actions/checkout from 6.0.2 to 7.0.1
  • build(deps): bump actions/setup-go from 6.3.0 to 7.0.0
  • build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.3.0

Full Changelog: docker/go-connections@v0.8.1...v0.8.2

Commits
  • 5032217 Merge pull request #171 from thaJeztah/bump_ubuntu
  • 91e2669 Merge pull request #172 from docker/dependabot/github_actions/golangci/golang...
  • 4825d28 Merge pull request #174 from docker/dependabot/github_actions/actions/setup-g...
  • 36e3075 Merge pull request #173 from docker/dependabot/github_actions/actions/checkou...
  • 745bbf6 build(deps): bump actions/setup-go from 6.3.0 to 7.0.0
  • 76a625d build(deps): bump actions/checkout from 6.0.2 to 7.0.1
  • 3be4490 build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.3.0
  • 61b16f0 Merge pull request #170 from thaJeztah/add_dependabot
  • afe2450 ci: update runners to Ubuntu 26.04
  • 29cd53e ci: add dependabot to update actions
  • Additional commits viewable in compare view

Updates github.com/go-jose/go-jose/v4 from 4.1.6 to 4.1.9

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.9

Fixed

  • OpaqueSigner now supports unrecognized public key types again (#325, fixes a regression in v4.1.5)
  • Parsing a JWK with an unsupported elliptic curve, or a too-big RSA modulus, now returns ErrUnsupportedKeyType (go-jose/go-jose#327)

Full Changelog: go-jose/go-jose@v4.1.8...v4.1.9

v4.1.8

Added

v4.1.7

Fixed Security Issues

Fixed

  • jwk: fix bug in x5c parsing (#311)
  • reject base64-encoded "null" in protected headers (#309)

Deprecated

  • deprecate ParseEncrypted / ParseSigned (#222)
Commits
  • 3c8a86c jwk: return ErrUnsupportedKeyType in more cases (#327)
  • e380088 jwk: return ErrUnsupportedEllipticCurve for unknown EC curves (#279)
  • baa5ec7 opaque: allow unknown public key types in OpaqueSigner (#325)
  • b76fc60 feat(jose): ml-dsa (#282)
  • 59611a1 encoding: remove byteBuffer.toInt() (#321)
  • 6a800bb Limit recipients and signatures in JWE/JWS (#316)
  • aa88aaa limit RSA size in certificate verify (#315)
  • 32e526c encoding: use byteBuffer.bytes() consistently (#320)
  • b419a16 Detect if headers are set by presence in the map (#319)
  • fe7494f json: backport stdlib fix for embedded unexported field (#318)
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.7 to 0.22.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.22.1

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.22.0...v0.22.1

v0.22.0

What's Changed

New Contributors

... (truncated)

Commits
  • 8a72a42 remote: copy manifest annotations to referrers fallback tag descriptors (#2441)
  • 5765c35 build(deps): bump the go-deps group across 2 directories with 3 updates (#2439)
  • 969402f fix(mutate): make Time layer updates lazy (#2429)
  • 25c682e flatten: preserve config and layer media types when flattening (#2438)
  • 79af990 remote: add SSRF redirect protection to writer-side HTTP clients (#2432)
  • 4b9b3c7 fix(release): honor declared Go toolchain (#2435)
  • e033b9c fix(build): install binaries to /ko-app and add to PATH (#2424) (#2436)
  • 8bd7902 name: return a helpful error when a reference contains a URL scheme (#2431)
  • 163134d validate: support index attestation manifests and empty configs (#2414)
  • 44f7ea3 fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml (#2434)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/go-rootcerts from 1.0.2 to 1.1.0

Release notes

Sourced from github.com/hashicorp/go-rootcerts's releases.

v1.1.0

Changes

  • Minimum Go version raised from 1.12 to 1.26 (go.mod).
  • Added copyright and license headers.
  • CI: Go 1.26.10 toolchain, golangci-lint v2.14.0, GitHub Actions updates.

Security

  • CI toolchain updated to fix GO-2025-3503 (net/http NO_PROXY bypass). The library does not import net/http.
Changelog

Sourced from github.com/hashicorp/go-rootcerts's changelog.

v1.1.0 (2026-10-23)

Changes

  • Minimum Go version raised from 1.12 to 1.26 (go.mod).
  • Added copyright and license headers.
  • CI: Go 1.26.10 toolchain, golangci-lint v2.14.0, GitHub Actions updates.

Security

  • CI toolchain updated to fix GO-2025-3503 (net/http NO_PROXY bypass). The library does not import net/http.
Commits
  • 709862d Merge pull request #56 from hashicorp/release-prep/v1.1.0-changelog
  • 3ec617d Update CHANGELOG for v1.1.0
  • 12f4b89 Merge pull request #53 from hashicorp/chore/go-1.27.3
  • 888f2bf Use Go 1.26.10 toolchain and go.mod minimum 1.26
  • b987b14 Set go.mod minimum to 1.27 and update .travis.yml Go version
  • 0bad51b Bump Go toolchain to 1.27.3 and go.mod minimum to 1.27
  • 55ef292 Merge pull request #52 from hashicorp/dependabot/github_actions/actions-b822a...
  • b806422 Merge pull request #50 from hashicorp/compliance/add-headers
  • 3ce8d12 [chore] : Bump the actions group across 1 directory with 3 updates
  • 3c63721 [COMPLIANCE] Add/Update Copyright Headers
  • Additional commits viewable in compare view

Updates github.com/hashicorp/vault/api from 1.22.0 to 1.23.0

Commits
  • d430306 Merge remote-tracking branch 'remotes/from/ce/main'
  • a3bc0a3 (enos): Add LDAP secrets engine blackbox tests to Plugin Scenario (#13072) (#...
  • f8df539 Merge remote-tracking branch 'remotes/from/ce/main'
  • 2b0ec25 VAULT-43444 Addressed races in tests (#13278) (#13285)
  • a097d1f Merge remote-tracking branch 'remotes/from/ce/main'
  • 7e587fd Update vault-plugin-auth-kubernetes to v0.24.1 (#13259) (#13287)
  • 1331818 UI: Fix namespace search showing empty state when namespaces exist (#13257) (...
  • 7b12feb Merge remote-tracking branch 'remotes/from/ce/main'
  • 7d4395c Update vault-plugin-auth-jwt to v0.26.1 (#13242) (#13283)
  • 6d4b615 adds flag to fix chrome in ci (#13279) (#13282)
  • Additional commits viewable in compare view

Updates github.com/letsencrypt/boulder from 0.20260309.0 to 0.20261105.0

Release notes

Sourced from github.com/letsencrypt/boulder's releases.

v0.20261105.0

What's Changed

New Contributors

Full Changelog: letsencrypt/boulder@v0.20261027.0...v0.20261105.0

v0.20261027.0

What's Changed

New Contributors

Full Changelog: letsencrypt/boulder@v0.20261020.1...v0.20261027.0

... (truncated)

Commits
  • 0921d45 build(deps): bump github/codeql-action/autobuild from 4.38.2 to 4.39.1 (#9140)
  • edfb518 Plumb issuance eventIDs from RA to CA/MTCA and log (#9151)
  • 4722950 mtcb: self-verify standalone certificates (#9119)
  • 23def04 sa: return NotFound for invalid serials (#9150)
  • c5616fe t.sh: better Ctrl-C handling (#9131)
  • 7a4dd86 Align our MTC implementation with draft-07 (#9134)
  • bbec683 go-jose: bump to v4.1.8 (#9141)
  • b531f7a Describe in detail why trees.MaxSize is 2^48 - 1 (#9139)
  • af17061 update go-jose to v4.1.7 (#9138)
  • 6d25c4c mirror: Update to Sunlight v0.10.2 and align with tlog-witness v1.1.0 and tlo...
  • Additional commits viewable in compare view

Updates github.com/open-policy-agent/opa from 1.17.1 to 1.22.2

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.22.2

This is a bugfix release for a type checker regression in v1.21.0.

Iterating an empty collection is rejected by the type checker

Policies that iterate a collection known to be empty, such as some x in [] or m[_] where m := {}, were rejected with rego_type_error: undefined ref. Iteration with a non-constant key is valid again, and simply yields nothing. Comparing or unifying the elements of such a collection with a value is accepted as well. Constant keys, like [][0], are still reported as undefined.

Reported by @​kholia.

v1.22.1

This is a bugfix release for a rule indexer regression in v1.21.0.

x in {"a", input.y} never matches for a ref x

allow if {
	input.x in {"a", input.y}
}

For an input of {"x": "b", "y": "b"}, this should evaluate to true. Due to a bug in the rule indexer, the rule body hadn't been returned, and allow thus evaluated to undefined.

Reported by @​kholia.

v1.22.0

This release contains a mix of new features, performance improvements and bug fixes. Notably:

  • New rego.v2 import
  • Configurable log level for HTTP access logs
  • Stricter handling of bundle signature filenames (breaking change)
  • Partial evaluation unrolls every over a known domain

Configurable log level for HTTP access logs

Added --log-level-request (default info) to control the level at which the HTTP server's "Received request."/"Sent response." access log lines are emitted, independent of the general --log-level. Set it to debug to keep those lines out of logs unless --log-level is also turned up.

Authored by @​srenatus

New rego.v2 import (#9224, #9269)

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.22.2

This is a bugfix release for a type checker regression in v1.21.0.

Iterating an empty collection is rejected by the type checker

Policies that iterate a collection known to be empty, such as some x in [] or m[_] where m := {}, were rejected with rego_type_error: undefined ref. Iteration with a non-constant key is valid again, and simply yields nothing. Comparing or unifying the elements of such a collection with a value is accepted as well. Constant keys, like [][0], are still reported as undefined.

Reported by @​kholia.

1.22.1

This is a bugfix release for a rule indexer regression in v1.21.0.

x in {"a", input.y} never matches for a ref x

allow if {
	input.x in {"a", input.y}
}

For an input of {"x": "b", "y": "b"}, this should evaluate to true. Due to a bug in the rule indexer, the rule body hadn't been returned, and allow thus evaluated to undefined.

Reported by @​kholia.

1.22.0

This release contains a mix of new features, performance improvements and bug fixes. Notably:

  • New rego.v2 import
  • Configurable log level for HTTP access logs
  • Stricter handling of bundle signature filenames (breaking change)
  • Partial evaluation unrolls every over a known domain

Configurable log level for HTTP access logs

Added --log-level-request (default info) to control the level at which the HTTP server's "Received request."/"Sent response." access log lines are emitted, independent of the general --log-level. Set it to debug to keep those lines out of logs unless --log-level is also turned up.

Authored by @​srenatus

New rego.v2 import (#9224, #9269)

... (truncated)

Commits

@dependabot
dependabot Bot requested a review from a team as a code owner November 9, 2026 14:19
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 9, 2026
@cpanato

cpanato commented Nov 9, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/minor-patch-470a0b4c1a branch from 79a4c0e to b53939e Compare November 9, 2026 16:03
@cpanato

cpanato commented Nov 9, 2026

Copy link
Copy Markdown
Member

Two failures here, for different reasons:

@cpanato cpanato mentioned this pull request Nov 9, 2026
Open
@dependabot
chore(deps): Bump the minor-patch group across 1 directory with 28 up…
c77cdf5 
…dates

Bumps the minor-patch group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| cuelang.org/go | `0.16.1` | `0.17.1` |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.22.0` | `1.24.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.14.0` | `1.15.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.0` | `1.47.7` |
| [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.9.5` | `0.9.12` |
| [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.7.0` | `0.8.2` |
| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.6` | `4.1.9` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.7` | `0.22.1` |
| [github.com/hashicorp/go-rootcerts](https://github.com/hashicorp/go-rootcerts) | `1.0.2` | `1.1.0` |
| [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) | `1.22.0` | `1.23.0` |
| [github.com/letsencrypt/boulder](https://github.com/letsencrypt/boulder) | `0.20260309.0` | `0.20261105.0` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.17.1` | `1.22.2` |
| [github.com/sigstore/cosign/v3](https://github.com/sigstore/cosign) | `3.1.3` | `3.1.4` |
| [github.com/sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs) | `0.5.1` | `0.5.2` |
| [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.5.3` | `1.5.4` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.10.8` | `1.11.1` |
| [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `1.2.2` | `1.3.0` |
| [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) | `1.10.8` | `1.11.1` |
| [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore) | `1.10.8` | `1.11.1` |
| [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore) | `1.10.8` | `1.11.1` |
| [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore) | `1.10.8` | `1.11.1` |
| [golang.org/x/net](https://github.com/golang/net) | `0.61.0` | `0.62.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.15.0` | `0.16.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.84.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.5` | `0.37.2` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.5` | `0.37.2` |
| [k8s.io/kube-openapi](https://github.com/kubernetes/kube-openapi) | `0.0.0-20260317180543-43fb72c5454a` | `0.0.0-20260721132016-d427ff9ee9ad` |
| [sigs.k8s.io/release-utils](https://github.com/kubernetes-sigs/release-utils) | `0.12.4` | `0.12.5` |



Updates `cuelang.org/go` from 0.16.1 to 0.17.1

Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.22.0 to 1.24.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.22.0...sdk/azcore/v1.24.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.14.0 to 1.15.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.14.0...sdk/azcore/v1.15.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.42.0 to 1.47.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.42.0...v1.47.7)

Updates `github.com/docker/docker-credential-helpers` from 0.9.5 to 0.9.12
- [Release notes](https://github.com/docker/docker-credential-helpers/releases)
- [Commits](docker/docker-credential-helpers@v0.9.5...v0.9.12)

Updates `github.com/docker/go-connections` from 0.7.0 to 0.8.2
- [Release notes](https://github.com/docker/go-connections/releases)
- [Commits](docker/go-connections@v0.7.0...v0.8.2)

Updates `github.com/go-jose/go-jose/v4` from 4.1.6 to 4.1.9
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.6...v4.1.9)

Updates `github.com/google/go-containerregistry` from 0.21.7 to 0.22.1
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.7...v0.22.1)

Updates `github.com/hashicorp/go-rootcerts` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/hashicorp/go-rootcerts/releases)
- [Changelog](https://github.com/hashicorp/go-rootcerts/blob/master/CHANGELOG.md)
- [Commits](hashicorp/go-rootcerts@v1.0.2...v1.1.0)

Updates `github.com/hashicorp/vault/api` from 1.22.0 to 1.23.0
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](hashicorp/vault@api/v1.22.0...api/v1.23.0)

Updates `github.com/letsencrypt/boulder` from 0.20260309.0 to 0.20261105.0
- [Release notes](https://github.com/letsencrypt/boulder/releases)
- [Changelog](https://github.com/letsencrypt/boulder/blob/main/docs/release.md)
- [Commits](letsencrypt/boulder@v0.20260309.0...v0.20261105.0)

Updates `github.com/open-policy-agent/opa` from 1.17.1 to 1.22.2
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.17.1...v1.22.2)

Updates `github.com/sigstore/cosign/v3` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](sigstore/cosign@v3.1.3...v3.1.4)

Updates `github.com/sigstore/protobuf-specs` from 0.5.1 to 0.5.2
- [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md)
- [Commits](sigstore/protobuf-specs@v0.5.1...v0.5.2)

Updates `github.com/sigstore/rekor` from 1.5.3 to 1.5.4
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](sigstore/rekor@v1.5.3...v1.5.4)

Updates `github.com/sigstore/sigstore` from 1.10.8 to 1.11.1
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.8...v1.11.1)

Updates `github.com/sigstore/sigstore-go` from 1.2.2 to 1.3.0
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](sigstore/sigstore-go@v1.2.2...v1.3.0)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.10.8 to 1.11.1
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.8...v1.11.1)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.10.8 to 1.11.1
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.8...v1.11.1)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.10.8 to 1.11.1
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.8...v1.11.1)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.10.8 to 1.11.1
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.8...v1.11.1)

Updates `golang.org/x/net` from 0.61.0 to 0.62.0
- [Commits](golang/net@v0.61.0...v0.62.0)

Updates `golang.org/x/time` from 0.15.0 to 0.16.0
- [Commits](golang/time@v0.15.0...v0.16.0)

Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.2...v1.84.0)

Updates `k8s.io/apimachinery` from 0.36.5 to 0.37.2
- [Commits](kubernetes/apimachinery@v0.36.5...v0.37.2)

Updates `k8s.io/client-go` from 0.36.5 to 0.37.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.5...v0.37.2)

Updates `k8s.io/kube-openapi` from 0.0.0-20260317180543-43fb72c5454a to 0.0.0-20260721132016-d427ff9ee9ad
- [Commits](https://github.com/kubernetes/kube-openapi/commits)

Updates `sigs.k8s.io/release-utils` from 0.12.4 to 0.12.5
- [Release notes](https://github.com/kubernetes-sigs/release-utils/releases)
- [Commits](kubernetes-sigs/release-utils@v0.12.4...v0.12.5)

---
updated-dependencies:
- dependency-name: cuelang.org/go
  dependency-version: 0.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/docker/docker-credential-helpers
  dependency-version: 0.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github.com/docker/go-connections
  dependency-version: 0.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/hashicorp/go-rootcerts
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/hashicorp/vault/api
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/letsencrypt/boulder
  dependency-version: 0.20261105.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.22.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/cosign/v3
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/protobuf-specs
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/rekor
  dependency-version: 1.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/sigstore-go
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: golang.org/x/time
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: k8s.io/client-go
  dependency-version: 0.37.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: k8s.io/kube-openapi
  dependency-version: 0.0.0-20260721132016-d427ff9ee9ad
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: sigs.k8s.io/release-utils
  dependency-version: 0.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/minor-patch-470a0b4c1a branch from b53939e to c77cdf5 Compare November 9, 2026 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cpanato