Skip to content

chore(deps): bump the common group across 1 directory with 25 updates #10067

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

chore(deps): bump the common group across 1 directory with 25 updates #10067

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026 •
edited
Loading

Bumps the common group with 20 updates in the / directory:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.20.0 1.21.0
github.com/BurntSushi/toml 1.5.0 1.6.0
github.com/GoogleCloudPlatform/docker-credential-gcr/v2 2.1.30 2.1.31
github.com/bmatcuk/doublestar/v4 4.9.1 4.9.2
github.com/containerd/containerd/v2 2.2.0 2.2.1
github.com/go-viper/mapstructure/v2 2.4.0 2.5.0
github.com/gocsaf/csaf/v3 3.5.0 3.5.1
github.com/hashicorp/go-getter 1.8.3 1.8.4
github.com/open-policy-agent/opa 1.11.0 1.12.3
github.com/secure-systems-lab/go-securesystemslib 0.9.1 0.10.0
github.com/sirupsen/logrus 1.9.4-0.20230606125235-dd1b4c2e81af 1.9.4
github.com/spdx/tools-golang 0.5.5 0.5.7
github.com/tetratelabs/wazero 1.10.1 1.11.0
github.com/zclconf/go-cty-yaml 1.1.0 1.2.0
golang.org/x/mod 0.31.0 0.32.0
golang.org/x/tools 0.40.0 0.41.0
helm.sh/helm/v3 3.19.2 3.19.5
k8s.io/api 0.34.2 0.35.0
modernc.org/sqlite 1.40.1 1.44.1
github.com/nikolalohinski/gonja/v2 2.4.2 2.5.1

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.20.0 to 1.21.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.21.0

1.21.0 (2026-01-12)

Features Added

  • Added runtime/datetime package which provides specialized time type wrappers for serializing and deserializing time values in various formats used by Azure services.

Other Changes

  • Aligned cloud.AzureGovernment and cloud.AzureChina audience values with Azure CLI
Commits

Updates github.com/BurntSushi/toml from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.6.0

TOML 1.1 is now enabled by default. The TOML changelog has an overview of changes: https://github.com/toml-lang/toml/blob/main/CHANGELOG.md

Also two small fixes:

  • Encode large floats as exponent syntax so that round-tripping things like 5e+22 is correct.

  • Using duplicate array keys would not give an error:

    arr = [1]
arr = [2]

    This will now correctly give a "Key 'arr' has already been defined" error.

Commits
  • 5253492 Enable TOML 1.1 by default (#457)
  • e954445 Reject duplicate arrays (#455)
  • 6b16cbd Update toml-test test cases from upstream (#456)
  • 011fa2b Ensure constant format strings in wf calls
  • 4b439bf Remove itemNil
  • a473c12 Add test for out of range float64
  • b535ff8 Add some boring tests for lex.go
  • 6011ef0 Remove unreachable condition in lexTableNameStart
  • c8ca9e6 Remove unreachable condition
  • 1121f81 Make tomlv read from stdin
  • Additional commits viewable in compare view

Updates github.com/GoogleCloudPlatform/docker-credential-gcr/v2 from 2.1.30 to 2.1.31

Release notes

Sourced from github.com/GoogleCloudPlatform/docker-credential-gcr/v2's releases.

v2.1.31

What's Changed

Full Changelog: GoogleCloudPlatform/docker-credential-gcr@v2.1.30...v2.1.31

Commits

Updates github.com/bmatcuk/doublestar/v4 from 4.9.1 to 4.9.2

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Fixed Handling of Paths With Meta Chars Using Alts

@​toga4 submitted a PR that fixed a small bug with the way paths were handled when the pattern used {alts}: if some part of the on-disk path that came before the {alt} included meta characters (say, a directory name that included the character ?), these meta characters were not escaped when they were passed back through the globbing routines. This caused doublestar to interpret them as actual meta characters, rather than a fixed-string path as it should have. Nice find, @​toga4 !

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.9.1...v4.9.2

Commits
  • 3dc8306 Merge branch 'toga4-fix-brace-exp-with-meta'
  • 4db19e2 fix tests
  • 4ef2b00 fix: escape meta characters in paths during brace expansion
  • b191bb9 test: add failing tests for brace expansion with meta char directories
  • 9fded31 notes about globbing
  • See full diff in compare view

Updates github.com/containerd/containerd/v2 from 2.2.0 to 2.2.1

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.2.1

Welcome to the v2.2.1 release of containerd!

The first patch release for containerd 2.2 contains various fixes and improvements.

Highlights

Container Runtime Interface (CRI)

  • Redact all query parameters in CRI error logs (#12546)

Image Distribution

  • Fix image defaults on Darwin to usable configuration (#12544)
  • Fix possible panic from WithMediaTypeKeyPrefix (#12516)

Runtime

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Krisztian Litkey
  • Markus Lehtonen
  • Akihiro Suda
  • Mike Brown
  • Sebastiaan van Stijn
  • Derek McGowan
  • Heran Yang
  • Wei Fu
  • Phil Estes
  • Samuel Karp
  • Austin Vazquez
  • Sascha Grunert
  • Akhil Mohan
  • Andrey Noskov
  • Brian Goff
  • CrazyMax
  • Davanum Srinivas
  • Gaurav Ghildiyal
  • Neeraj Krishna Gopalakrishna
  • Paweł Gronowski
  • Tariq Ibrahim
  • TomerLev
  • Tõnis Tiigi
  • bo.jiang

... (truncated)

Commits
  • dea7da5 Merge pull request #12677 from dmcgowan/prepare-2.2.1
  • f6bae1f Prepare release notes for v2.2.1
  • b77253f Merge pull request #12701 from k8s-infra-cherrypick-robot/cherry-pick-12699-t...
  • c22cf5d cri,nri: pass any linux security profile to plugins.
  • d7532de cri,nri: pass any linux RDT constraints to plugins.
  • ef36e61 cri,nri: pass any linux net devices to plugins.
  • d56faf4 cri,nri: pass any linux scheduler attributes to plugins.
  • e1824d2 cri,nri: pass any linux I/O priority to plugins.
  • 01d5490 go.{mod,sum}: bump NRI deps to v0.11.0, re-vendor.
  • 815932a Merge pull request #12697 from thaJeztah/release_2.2_backport_bump_semconv
  • Additional commits viewable in compare view

Updates github.com/go-viper/mapstructure/v2 from 2.4.0 to 2.5.0

Release notes

Sourced from github.com/go-viper/mapstructure/v2's releases.

v2.5.0

What's Changed

New Contributors

Full Changelog: go-viper/mapstructure@v2.4.0...v2.5.0

Commits
  • 9aa3f77 Merge pull request #166 from go-viper/unmarshal2
  • ae32a61 doc: add more documentation
  • 320c8c9 test: cover unmarshaler to map
  • 5b22829 feat: add unmarshaler interface
  • fd74c75 Merge pull request #137 from andreev-fn/opt-root-name
  • dee4661 Merge pull request #59 from DarkiT/main
  • 5605df4 chore: cover more test cases, fix edge cases, add docs
  • 6166631 fix(mapstructure): add multi-tag support and regression tests
  • 6471aa6 Merge pull request #149 from thespags/main
  • dbffaaa chore: add more tests and clarification to the documentation
  • Additional commits viewable in compare view

Updates github.com/gocsaf/csaf/v3 from 3.5.0 to 3.5.1

Release notes

Sourced from github.com/gocsaf/csaf/v3's releases.

v3.5.1

This is minor fix correcting a wrong validation test around the name and version of the engine.

What's Changed

New Contributors

Full Changelog: gocsaf/csaf@v3.5.0...v3.5.1

Commits

Updates github.com/hashicorp/go-getter from 1.8.3 to 1.8.4

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.8.4

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.8.3...v1.8.4

Commits
  • 576ab86 [chore] : Bump the go group across 1 directory with 12 updates (#575)
  • efec2db Merge pull request #574 from hashicorp/dependabot/github_actions/actions-36c6...
  • 7ccb947 [chore] : Bump the actions group across 1 directory with 6 updates
  • 228ad65 fix: allow downloading S3 files from MinIO over http (#570)
  • 5cb8b18 Merge pull request #567 from hashicorp/dependabot/github_actions/actions-92ca...
  • f358fa6 Merge pull request #571 from hashicorp/compliance/update-headers
  • 376d40c [COMPLIANCE] Update Copyright and License Headers
  • 9d34fba [chore] : Bump the actions group across 1 directory with 3 updates
  • fd63a33 Merge pull request #566 from hashicorp/compliance/update-headers
  • ac8218d [COMPLIANCE] Update Copyright and License Headers
  • Additional commits viewable in compare view

Updates github.com/open-policy-agent/opa from 1.11.0 to 1.12.3

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.12.3

This is a bug fix release addressing two issues:

Bundle polling is being misconfigured when discovery bundle is updated (#8215)

This is an issue where the polling interval for discovery (discovery.polling.min_delay_seconds and discovery.polling.max_delay_seconds) were misinterpreted on reconfiguration, causing extremely long update intervals.

Reported by @​loganmiller-chime, authored by @​sspaink

Decision log size buffer buffer_size_limit_bytes misconfigured during reconfiguration (#8213)

This is a regression in the decision log, where the decision_logs.reporting.buffer_size_limit_bytes was mistakenly assigned the value of decision_logs.reporting.upload_size_limit_bytes during reconfiguration. This issue is only present when decision_logs.reporting.buffer_type is set to size, which is the default value.

Authored by @​sspaink

v1.12.2

This bug fix release address issues found in the new string interpolation feature

v1.12.1

This bug fix release reverts a change to regex.replace that unintentionally changed its behaviour for anchored regular expressions.

  • Revert "topdown: make regex.replace respect cancellation" (authored by @​srenatus)

v1.12.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • Support for String Interpolation in the Rego language
  • Faster compilation and runtime
  • Fixes published in the v1.11.1 release

String Interpolation (#4733)

The Rego language has been extended to support String Interpolation, which provides a readable means to compose strings containing dynamic values determined at evaluation time.

An interpolated string is composed of a template-string containing zero or more template-expressions that evaluates to a value at evaluation time.

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.12.3

This is a bug fix release addressing two issues:

Bundle polling is being misconfigured when discovery bundle is updated (#8215)

This is an issue where the polling interval for discovery (discovery.polling.min_delay_seconds and discovery.polling.max_delay_seconds) were misinterpreted on reconfiguration, causing extremely long update intervals.

Reported by @​loganmiller-chime, authored by @​sspaink

Decision log size buffer

buffer_size_limit_bytes misconfigured during reconfiguration (#8213)

This is a regression in the decision log, where the decision_logs.reporting.buffer_size_limit_bytes was mistakenly assigned the value of decision_logs.reporting.upload_size_limit_bytes during reconfiguration. This issue is only present when decision_logs.reporting.buffer_type is set to size, which is the default value.

Authored by @​sspaink

1.12.2

This bug fix release address issues found in the new string interpolation feature

1.12.1

This bug fix release reverts a change to regex.replace that unintentionally changed its behaviour for anchored regular expressions.

  • Revert "topdown: make regex.replace respect cancellation" (authored by @​srenatus)

1.12.0

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • Support for string interpolation in the Rego language
  • Faster compilation and runtime
  • Fixes published in the v1.11.1 release

String Interpolation (#4733)

The Rego language has been extended to support String Interpolation, which provides a readable means to compose strings containing dynamic values determined at evaluation time.

An interpolated string is composed of a template-string containing zero or more template-expressions that evaluates to a value at evaluation time. The $ character prefix identifies a template-string, and template-expressions are declared by being enclosed in curly-braces ({, }).

... (truncated)

Commits

Updates github.com/secure-systems-lab/go-securesystemslib from 0.9.1 to 0.10.0

Commits
  • 93d7e1c Merge pull request #139 from secure-systems-lab/dependabot/github_actions/gol...
  • b2fe7df Merge pull request #138 from secure-systems-lab/dependabot/github_actions/act...
  • 7e9f79e chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.2.0
  • 1552d12 chore(deps): bump actions/setup-go from 5.5.0 to 6.1.0
  • d1d5111 Merge pull request #137 from secure-systems-lab/dependabot/go_modules/golang....
  • 04d651e Merge pull request #136 from secure-systems-lab/dependabot/github_actions/act...
  • 145f8c2 chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0
  • e8de185 Merge pull request #127 from secure-systems-lab/dependabot/go_modules/github....
  • a50b13e chore(deps): bump actions/checkout from 6.0.0 to 6.0.1
  • c24bdce chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.4-0.20230606125235-dd1b4c2e81af to 1.9.4

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.9.4

Notable changes

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

Commits

Updates github.com/spdx/tools-golang from 0.5.5 to 0.5.7

Release notes

Sourced from github.com/spdx/tools-golang's releases.

v0.5.7

What's Changed

New Contributors

Full Changelog: spdx/tools-golang@v0.5.6...v0.5.7

v0.5.6

What's Changed

New Contributors

Full Changelog: spdx/tools-golang@v0.5.5...v0.5.6

Changelog

Sourced from github.com/spdx/tools-golang's changelog.

0.5.7

0.5.7 released on: 2026-01-12

What's Changed

  • Fail parsing if the required prefix isn't present for IDs by @​awyeth in #275

New Contributors

Contributors

0.5.6

0.5.6 released on: 2025-12-23

What's Changed

New Contributors

Contributors

Commits
  • 28116d2 fix: fail parsing if the required prefix isn't present for IDs (#275)
  • 3d64f16 build(deps): Bump actions/checkout from 5 to 6 (#271)
  • 254d7a7 fix: Fix prefixDocumentId() to use correct prefix (#272)
  • e6786a8 fix: ExternalDocumentRef in JSON serialization (#269)
  • 49501ad build(deps): Bump github.com/anchore/go-struct-converter from 0.0.0-202211181...
  • e95cf7f build(deps): Bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 (#259)
  • eabe60c build(deps): Bump actions/checkout from 4 to 5 (#260)
  • 72d8e33 build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#264)
  • d6b5d35 build(deps): Bump actions/setup-go from 5 to 6 (#265)
  • 916d962 build(deps): Bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 (#258)
  • Additional commits viewable in compare view

Updates github.com/tetratelabs/wazero from 1.10.1 to 1.11.0

Release notes

Sourced from github.com/tetratelabs/wazero's releases.

v1.11.0

Hi wazero friends! The new release of wazero v1.11.0 has arrived.

This release is a small "break with the past" it the sense that we added one go.mod dependency to wazero: golang.org/x/sys; read the rational for why.

Behavioral changes

Bug fixes

New Contributors

Full Changelog: wazero/wazero@v1.10.1...v1.11.0

Commits

Updates github.com/zclconf/go-cty-yaml from 1.1.0 to 1.2.0

Changelog

Sourced from github.com/zclconf/go-cty-yaml's changelog.

1.2.0 (December 17, 2025)

  • The YAML decoder now has more complete support for tag:yaml.org,2002:merge, including support for merging a sequence of mappings rather than just a single mapping.

    Unfortunately the specification for this tag is terse and incomplete, and other existing implementations disagree even with the few behaviors that are described in the specification, so this library implements behavior that matches existing implementations while diverging slightly from the spec:

    • The untagged scalar value << is resolved as tag:yaml.org,2002:merge only in the mapping key position. In all other positions it's resolved as a normal string, "<<". Writing out the tag explicitly instead of using the shorthand is allowed in mapping key position and rejected as an error in all other positions.
    • Multiple merge keys can appear in the same mapping, and will each be handled separately as if they had all been written as a single merge.
    • Later mentions of a key override earlier mentions of a key in all cases. This is the main deviation from the spec text: the spec requires that the earliest mention of each key takes priority when merging, but that is the opposite of the normal behavior for duplicate keys in a mapping (without merging) and other implementations seem to ignore that exception.

    There are a few other implementations that disagree with what this library implements. That's unfortunate, but unavoidable because existing implementations are in conflict with one another already. The choices in this implementation were based on a survey of various other popular implementatins and will not be changed in a breaking way after this release.

Commits

Updates golang.org/x/crypto from 0.46.0 to 0.47.0

Commits
  • 506e022 go.mod: update golang.org/x dependencies
  • 7dacc38 chacha20poly1305: error out in fips140=only mode
  • See full diff in compare view

Updates golang.org/x/mod from 0.31.0 to 0.32.0

Commits

Updates golang.org/x/net from 0.48.0 to 0.49.0

Commits
  • d977772 go.mod: update golang.org/x dependencies
  • eea413e internal/http3: use go1.25 synctest.Test instead of go1.24 synctest.Run
  • 9ace223 websocket: add missing call to resp.Body.Close
  • 7d3dbb0 http2: buffer the most recently received PRIORITY_UPDATE frame
  • See full diff in compare view

Updates golang.org/x/term from 0.38.0 to 0.39.0

Commits

@dependabot
chore(deps): bump the common group across 1 directory with 25 updates
913ce1b 
Bumps the common group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.20.0` | `1.21.0` |
| [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) | `1.5.0` | `1.6.0` |
| [github.com/GoogleCloudPlatform/docker-credential-gcr/v2](https://github.com/GoogleCloudPlatform/docker-credential-gcr) | `2.1.30` | `2.1.31` |
| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.9.1` | `4.9.2` |
| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.2.0` | `2.2.1` |
| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.4.0` | `2.5.0` |
| [github.com/gocsaf/csaf/v3](https://github.com/gocsaf/csaf) | `3.5.0` | `3.5.1` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.8.3` | `1.8.4` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.11.0` | `1.12.3` |
| [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) | `0.9.1` | `0.10.0` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4-0.20230606125235-dd1b4c2e81af` | `1.9.4` |
| [github.com/spdx/tools-golang](https://github.com/spdx/tools-golang) | `0.5.5` | `0.5.7` |
| [github.com/tetratelabs/wazero](https://github.com/tetratelabs/wazero) | `1.10.1` | `1.11.0` |
| [github.com/zclconf/go-cty-yaml](https://github.com/zclconf/go-cty-yaml) | `1.1.0` | `1.2.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.31.0` | `0.32.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.40.0` | `0.41.0` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.2` | `3.19.5` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.34.2` | `0.35.0` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.40.1` | `1.44.1` |
| [github.com/nikolalohinski/gonja/v2](https://github.com/nikolalohinski/gonja) | `2.4.2` | `2.5.1` |



Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.20.0...sdk/azcore/v1.21.0)

Updates `github.com/BurntSushi/toml` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/BurntSushi/toml/releases)
- [Commits](BurntSushi/toml@v1.5.0...v1.6.0)

Updates `github.com/GoogleCloudPlatform/docker-credential-gcr/v2` from 2.1.30 to 2.1.31
- [Release notes](https://github.com/GoogleCloudPlatform/docker-credential-gcr/releases)
- [Commits](GoogleCloudPlatform/docker-credential-gcr@v2.1.30...v2.1.31)

Updates `github.com/bmatcuk/doublestar/v4` from 4.9.1 to 4.9.2
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.9.1...v4.9.2)

Updates `github.com/containerd/containerd/v2` from 2.2.0 to 2.2.1
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.2.0...v2.2.1)

Updates `github.com/go-viper/mapstructure/v2` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/go-viper/mapstructure/releases)
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md)
- [Commits](go-viper/mapstructure@v2.4.0...v2.5.0)

Updates `github.com/gocsaf/csaf/v3` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/gocsaf/csaf/releases)
- [Changelog](https://github.com/gocsaf/csaf/blob/main/docs/release-process-hints.md)
- [Commits](gocsaf/csaf@v3.5.0...v3.5.1)

Updates `github.com/hashicorp/go-getter` from 1.8.3 to 1.8.4
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Commits](hashicorp/go-getter@v1.8.3...v1.8.4)

Updates `github.com/open-policy-agent/opa` from 1.11.0 to 1.12.3
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.11.0...v1.12.3)

Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.9.1 to 0.10.0
- [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases)
- [Commits](secure-systems-lab/go-securesystemslib@v0.9.1...v0.10.0)

Updates `github.com/sirupsen/logrus` from 1.9.4-0.20230606125235-dd1b4c2e81af to 1.9.4
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sirupsen/logrus/commits/v1.9.4)

Updates `github.com/spdx/tools-golang` from 0.5.5 to 0.5.7
- [Release notes](https://github.com/spdx/tools-golang/releases)
- [Changelog](https://github.com/spdx/tools-golang/blob/main/RELEASE-NOTES.md)
- [Commits](spdx/tools-golang@v0.5.5...v0.5.7)

Updates `github.com/tetratelabs/wazero` from 1.10.1 to 1.11.0
- [Release notes](https://github.com/tetratelabs/wazero/releases)
- [Commits](wazero/wazero@v1.10.1...v1.11.0)

Updates `github.com/zclconf/go-cty-yaml` from 1.1.0 to 1.2.0
- [Changelog](https://github.com/zclconf/go-cty-yaml/blob/master/CHANGELOG.md)
- [Commits](zclconf/go-cty-yaml@v1.1.0...v1.2.0)

Updates `golang.org/x/crypto` from 0.46.0 to 0.47.0
- [Commits](golang/crypto@v0.46.0...v0.47.0)

Updates `golang.org/x/mod` from 0.31.0 to 0.32.0
- [Commits](golang/mod@v0.31.0...v0.32.0)

Updates `golang.org/x/net` from 0.48.0 to 0.49.0
- [Commits](golang/net@v0.48.0...v0.49.0)

Updates `golang.org/x/term` from 0.38.0 to 0.39.0
- [Commits](golang/term@v0.38.0...v0.39.0)

Updates `golang.org/x/text` from 0.32.0 to 0.33.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.32.0...v0.33.0)

Updates `golang.org/x/tools` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.40.0...v0.41.0)

Updates `helm.sh/helm/v3` from 3.19.2 to 3.19.5
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.19.2...v3.19.5)

Updates `k8s.io/api` from 0.34.2 to 0.35.0
- [Commits](kubernetes/api@v0.34.2...v0.35.0)

Updates `k8s.io/utils` from 0.0.0-20250820121507-0af2bda4dd1d to 0.0.0-20251002143259-bc988d571ff4
- [Commits](https://github.com/kubernetes/utils/commits)

Updates `modernc.org/sqlite` from 1.40.1 to 1.44.1
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.40.1...v1.44.1)

Updates `github.com/nikolalohinski/gonja/v2` from 2.4.2 to 2.5.1
- [Commits](NikolaLohinski/gonja@v2.4.2...v2.5.1)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/BurntSushi/toml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/GoogleCloudPlatform/docker-credential-gcr/v2
  dependency-version: 2.1.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-version: 4.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/go-viper/mapstructure/v2
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/gocsaf/csaf/v3
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/secure-systems-lab/go-securesystemslib
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/spdx/tools-golang
  dependency-version: 0.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: github.com/tetratelabs/wazero
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/zclconf/go-cty-yaml
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/crypto
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/mod
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/net
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/term
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/text
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: golang.org/x/tools
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.19.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: k8s.io/api
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20251002143259-bc988d571ff4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: common
- dependency-name: modernc.org/sqlite
  dependency-version: 1.44.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
- dependency-name: github.com/nikolalohinski/gonja/v2
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: common
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jan 19, 2026
@dependabot dependabot bot requested a review from knqyf263 as a code owner January 19, 2026 16:48
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jan 19, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 22, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 22, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/common-732a79c7a4 branch January 22, 2026 06:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@knqyf263 knqyf263 Awaiting requested review from knqyf263 knqyf263 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants