Skip to content

chore(deps): bump the go-minor-patch group across 1 directory with 31 updates - #126

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-b2660a2a35
Open

chore(deps): bump the go-minor-patch group across 1 directory with 31 updates#126
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-patch-b2660a2a35

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor-patch group with 18 updates in the / directory:

Package From To
chainguard.dev/apko 1.2.7 1.2.30
chainguard.dev/melange 0.48.2 0.56.5
cloud.google.com/go/iam 1.7.0 1.12.0
github.com/DataDog/datadog-go/v5 5.8.3 5.9.0
github.com/Masterminds/semver/v3 3.4.0 3.5.0
github.com/anchore/clio 0.0.0-20250715152405-a0fa658e5084 0.1.1
github.com/anchore/grype 0.110.0 0.116.1
github.com/anthropics/anthropic-sdk-go 1.30.0 1.61.0
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.22.12 1.22.37
github.com/aws/aws-sdk-go-v2/service/ecr 1.56.2 1.60.2
github.com/go-openapi/strfmt 0.26.1 0.27.0
github.com/jackc/pgx/v5 5.9.2 5.10.0
github.com/sigstore/cosign/v2 2.6.2 2.6.4
github.com/sigstore/fulcio 1.8.5 1.8.8
github.com/sigstore/rekor 1.5.1 1.5.3
github.com/testcontainers/testcontainers-go 0.41.0 0.43.0
github.com/testcontainers/testcontainers-go/modules/minio 0.41.0 0.43.0
github.com/testcontainers/testcontainers-go/modules/postgres 0.41.0 0.43.0

Updates chainguard.dev/apko from 1.2.7 to 1.2.30

Release notes

Sourced from chainguard.dev/apko's releases.

Release v1.2.30

Changelog

  • fb242aae1655d1d624b1d5a1f55058d6cac1b30a Regenerate apko-discover.lock.json golden file (#2350)
  • 897c2adc9fd10cc04786676cd98262549747fd8e Use slices.Concat in TestWriteCABundleChecksumsNoBundles (#2349)
  • 791213007763a79b86f53bf2b4a7bf0da1d16c5b Write sha256 checksum sidecar next to CA bundles (#2331)
  • fc1a1d7bece22da50b832e873b053f998c8e304b build(deps): bump chainguard-dev/actions/setup-registry from 1.6.28 to 1.6.29 (#2358)
  • 1005f24d5f2acb90f461f25202b7d50bfd49dc78 build(deps): bump chainguard.dev/sdk from 0.1.140 to 0.1.145 (#2346)
  • 14f167a7d91723e3cd841480118d02bdeb295035 build(deps): bump chainguard.dev/sdk from 0.1.145 to 0.1.156 (#2351)
  • 502643080cb38d339c5804fe7e62c9a5bd46b6d5 build(deps): bump chainguard.dev/sdk from 0.1.156 to 0.1.158 (#2359)
  • d07b3946c78fb802a4e601d4932dd7ebfe9aef0b build(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 (#2348)
  • d9d82bb9fe99345538fe6da1131274b707e1e509 build(deps): bump github/codeql-action/analyze from 4.37.2 to 4.37.3 (#2355)
  • 9b446b089eb0663c81083d10492fb7ba93eb1ad5 build(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 (#2347)
  • d2a91dd82eedc6be584594617eb18258a70d6d88 build(deps): bump github/codeql-action/init from 4.37.2 to 4.37.3 (#2354)
  • 601fe67e0a493c04f0cb6425faaa961ed2e2f08e build(deps): bump google.golang.org/api from 0.289.0 to 0.290.0 (#2353)
  • 9a16d91b5eb0de7bd208ff281bf2f33582b18d0a build(deps): bump k8s.io/apimachinery from 0.36.2 to 0.36.3 (#2352)
  • 56ecb155dc32182729d2a5a589e48a30a28aab5e build(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 (#2356)
  • 54341626ed3cfd72aaaacfae8706369bad7aea85 chore(harden-runner): allow apple endpoints to OSX builds (#2361)

Release v1.2.29

Changelog

  • e3915900849d95b35f1f5b7c7401922505332152 Allow GitHub verified signatures in source policy (#2332)

Release v1.2.28

Changelog

  • 461d02cacfce07a4feceb57d10eedda8f7261038 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#2341)
  • 1a98f08fb07cd849bfa20edb0a312971b1064ed9 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#2335)
  • 8922bbd145e70e4d7572852bccd1b1f467f7e9c7 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.27 to 1.6.28 (#2343)
  • 8cf5556b2bb129740c0b605fd077603123470474 build(deps): bump chainguard.dev/sdk from 0.1.127 to 0.1.138 (#2340)
  • bee9883f6227bf6ac12798e04361f857b4ba5298 build(deps): bump chainguard.dev/sdk from 0.1.138 to 0.1.140 (#2344)
  • bed83b762204bea3f247ada4a67318a7de18014a build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (#2345)
  • 906c1577c077536c8b474a6756f39c2fefbd3c74 build(deps): bump github/codeql-action/analyze from 4.37.0 to 4.37.1 (#2339)
  • 31842dfcb0554df6e9d6b0f5950d80304f6c0c36 build(deps): bump github/codeql-action/init from 4.37.0 to 4.37.1 (#2338)
  • 534ebdcdf20ee5db82308930434856b8da9c0440 build(deps): bump go.step.sm/crypto from 0.84.1 to 0.85.0 (#2334)
  • bb243a92114b948a98dfce0708353cedc7be28e2 build(deps): bump google.golang.org/api from 0.288.0 to 0.289.0 (#2337)
  • 9345f17813b3f4ca06282688abdc87352cac767a build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in the go_modules group across 1 directory (#2342)
  • 2200a73fefc60bb8c88ab397cf2b601c64c953e7 build(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 (#2333)

Release v1.2.27

Changelog

  • 63234ece20c46ae2105a80889b04e752d9b08ad2 build(deps): bump chainguard.dev/sdk from 0.1.119 to 0.1.127 (#2330)

Release v1.2.26

Changelog

  • 18cd01e343fdac81d88853ac96d260c935572032 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.26 to 1.6.27 (#2329)
  • 118c5375c64206daa2a36af74c2926d5e06ec9af build(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0 (#2327)
  • e7f12d4d6017380ca368dc7c82bb56a32b157155 build(deps): bump github/codeql-action/init from 4.36.3 to 4.37.0 (#2326)
  • aa9ca73ff643f4139a3dde081b7857d4ccfddccd chore(release): add more arches (#2242)

Release v1.2.25

Changelog

... (truncated)

Commits
  • 5026430 build(deps): bump chainguard.dev/sdk from 0.1.156 to 0.1.158 (#2359)
  • fc1a1d7 build(deps): bump chainguard-dev/actions/setup-registry from 1.6.28 to 1.6.29...
  • 5434162 chore(harden-runner): allow apple endpoints to OSX builds (#2361)
  • 897c2ad Use slices.Concat in TestWriteCABundleChecksumsNoBundles (#2349)
  • d2a91dd build(deps): bump github/codeql-action/init from 4.37.2 to 4.37.3 (#2354)
  • 601fe67 build(deps): bump google.golang.org/api from 0.289.0 to 0.290.0 (#2353)
  • d9d82bb build(deps): bump github/codeql-action/analyze from 4.37.2 to 4.37.3 (#2355)
  • 9a16d91 build(deps): bump k8s.io/apimachinery from 0.36.2 to 0.36.3 (#2352)
  • 14f167a build(deps): bump chainguard.dev/sdk from 0.1.145 to 0.1.156 (#2351)
  • 56ecb15 build(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 (#2356)
  • Additional commits viewable in compare view

Updates chainguard.dev/melange from 0.48.2 to 0.56.5

Release notes

Sourced from chainguard.dev/melange's releases.

Release v0.56.5

What's Changed

Full Changelog: chainguard-dev/melange@v0.56.4...v0.56.5

Release v0.56.4

What's Changed

Full Changelog: chainguard-dev/melange@v0.56.3...v0.56.4

Release v0.56.3

What's Changed

Full Changelog: chainguard-dev/melange@v0.56.2...v0.56.3

Release v0.56.2

What's Changed

Full Changelog: chainguard-dev/melange@v0.56.1...v0.56.2

Release v0.56.1

What's Changed

Full Changelog: chainguard-dev/melange@v0.56.0...v0.56.1

Release v0.56.0

What's Changed

... (truncated)

Commits
  • 5550831 build(deps): bump chainguard.dev/apko from 1.2.27 to 1.2.29 in the gomod grou...
  • e807790 build(deps): bump the actions group with 2 updates (#2604)
  • 2e7fde6 build(deps): bump github.com/ulikunitz/xz in the gomod group (#2602)
  • 8c15ef8 build(deps): bump the gomod group with 2 updates (#2601)
  • 5c00098 build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 (#2600)
  • b30b3d0 build(deps): bump the gomod group with 2 updates (#2597)
  • df96e3b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#2599)
  • 44ad06d build(deps): bump the actions group with 2 updates (#2598)
  • 9ebf436 chore(goreleaser): enable more builds (#2539)
  • 2111153 build(deps): bump the gomod group with 2 updates (#2595)
  • Additional commits viewable in compare view

Updates cloud.google.com/go/iam from 1.7.0 to 1.12.0

Release notes

Sourced from cloud.google.com/go/iam's releases.

optimization: v1.12.0

1.12.0 (2026-07-13)

Features

support: v1.12.0

1.12.0 (2026-07-13)

Features

shopping: v1.12.0

1.12.0 (2026-07-20)

Features

cloudquotas: v1.12.0

1.12.0 (2026-07-23)

Features

securesourcemanager: v1.10.0

1.10.0 (2026-07-13)

Features

pubsublite: v1.10.0

1.10.0 (2026-07-15)

Features

vmwareengine: v1.9.0

... (truncated)

Changelog

Sourced from cloud.google.com/go/iam's changelog.

1.7.0 (2023-01-31)

Features

  • documentai: Add REST client (06a54a1)
  • documentai: Added advanced_ocr_options field in OcrConfig (45c70e3)
  • documentai: Added field_mask field in DocumentOutputConfig.GcsOutputConfig in document_io.proto (2a0b1ae)
  • documentai: Added font_family to document.proto feat: added ImageQualityScores message to document.proto feat: added PropertyMetadata and EntityTypeMetadata to document_schema.proto (9c5d6c8)
  • documentai: Added TrainProcessorVersion, EvaluateProcessorVersion, GetEvaluation, and ListEvaluations v1beta3 APIs feat: added evaluation.proto feat: added document_schema field in ProcessorVersion processor.proto feat: added image_quality_scores field in Document.Page in document.proto feat: added font_family field in Document.Style in document.proto (ac0c5c2)
  • documentai: Exposed GetProcessorType to v1 (447afdd)
  • documentai: Exposed GetProcessorType to v1beta3 (447afdd)
  • documentai: Rewrite signatures in terms of new location (3c4b2b3)
  • documentai: Rewrite signatures in terms of new types for betas (9f303f9)
  • documentai: Start generating proto message types (563f546)
  • documentai: Start generating stubs dir (de2d180)

1.6.0 (2023-01-26)

Features

  • documentai/apiv1beta3: Add REST transport (f7b0822)
  • documentai: Add REST client (06a54a1)
  • documentai: Added field_mask field in DocumentOutputConfig.GcsOutputConfig in document_io.proto (2a0b1ae)
  • documentai: Added font_family to document.proto feat: added ImageQualityScores message to document.proto feat: added PropertyMetadata and EntityTypeMetadata to document_schema.proto (9c5d6c8)
  • documentai: Added TrainProcessorVersion, EvaluateProcessorVersion, GetEvaluation, and ListEvaluations v1beta3 APIs feat: added evaluation.proto feat: added document_schema field in ProcessorVersion processor.proto feat: added image_quality_scores field in Document.Page in document.proto feat: added font_family field in Document.Style in document.proto (ac0c5c2)
  • documentai: Exposed GetProcessorType to v1 (447afdd)
  • documentai: Exposed GetProcessorType to v1beta3 (447afdd)
  • documentai: Rewrite signatures in terms of new location (3c4b2b3)
  • documentai: Rewrite signatures in terms of new types for betas (9f303f9)
  • documentai: Start generating proto message types (563f546)
  • documentai: Start generating stubs dir (de2d180)

1.5.0 (2023-01-26)

⚠ BREAKING CHANGES

  • documentai: Changed the name field for ProcessRequest and BatchProcessorRequest to accept * so the name field can accept Processor and ProcessorVersion.

Features

  • documentai/apiv1beta3: Add REST transport (f7b0822)
  • documentai: Add REST client (06a54a1)
  • documentai: Added field_mask field in DocumentOutputConfig.GcsOutputConfig in document_io.proto (2a0b1ae)
  • documentai: Added field_mask to ProcessRequest object in document_processor_service.proto feat: Added parent_ids to Revision object in document.proto feat: Added integer_values, float_values and non_present to Entity object in document.proto feat: Added corrected_key_text, correct_value_text to FormField object in document.proto feat: Added OperationMetadata resource feat!: Added Processor Management and Processor Version support to v1 library (370e23e)
  • documentai: Added font_family to document.proto feat: added ImageQualityScores message to document.proto feat: added PropertyMetadata and EntityTypeMetadata to document_schema.proto (9c5d6c8)
  • documentai: Added TrainProcessorVersion, EvaluateProcessorVersion, GetEvaluation, and ListEvaluations v1beta3 APIs feat: added evaluation.proto feat: added document_schema field in ProcessorVersion processor.proto feat: added image_quality_scores field in Document.Page in document.proto feat: added font_family field in Document.Style in document.proto (ac0c5c2)
  • documentai: Exposed GetProcessorType to v1 (447afdd)

... (truncated)

Commits
  • 42e0099 chore: release main (#8087)
  • 3abdfa1 feat(orchestration/airflow/service): added RPCs StopAirflowCommand, ExecuteAi...
  • 39f9c9d Revert "fix(datastore): Handling nil slices in save and query (#8043)" (#8086)
  • c9b272b chore: release main (#8080)
  • fd27617 feat(gkebackup): add operation, location, iampolicy mixin methods (#8083)
  • fc23ae4 chore(firestore): gofmt query.go (#8084)
  • 5f24d17 fix(firestore): do not trace iterator.Done error (#8082)
  • fa91b47 chore(firestore): Add bloom filter related comments (#8079)
  • 210584d fix(firestore): Cleanup integration test resources (#8057)
  • 36f01e9 fix(datastore): Handling nil slices in save and query (#8043)
  • Additional commits viewable in compare view

Updates github.com/DataDog/datadog-go/v5 from 5.8.3 to 5.9.0

Release notes

Sourced from github.com/DataDog/datadog-go/v5's releases.

v5.9.0

See the Changelog for the details.

Changelog

Sourced from github.com/DataDog/datadog-go/v5's changelog.

5.9.0 / 2026-06-24

  • [IMPROVEMENT] Improve aggregator performance: inline shard allocation, FNV-1a metric context hashing, and cache-line padding on shards. See #389[].
  • [IMPROVEMENT] Make externalEnv an atomic to reduce lock contention on the sampling hot path. See #380[], thanks [@​KowalskiThomas][].
  • [IMPROVEMENT] Optimize origin-detection condition check order. See #381[], thanks [@​KowalskiThomas][].
  • [BUGFIX] Fix payload length calculation for aggregated metrics to prevent datagram truncation when container ID, external env, or cardinality are set. See #368[].
  • [BUGFIX] Fix data race when reading the origin-detection container ID. See #379[], thanks [@​KowalskiThomas][].
  • [BUGFIX] Fix telemetry metrics not using the client's configured cardinality setting. See #367[].
  • [BUGFIX] Replace vulnerable logrus v1.7.0 transitive dependency (CVE-2025-65637). See #358[], thanks [@​nadavshatz][].
Commits

Updates github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.5.0

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

Changelog

Commits
  • 8b89c86 Merge pull request #287 from mattfarina/fix-da-issues
  • 29d51d0 Fixing some quality issues
  • 87f651d Merge pull request #286 from mattfarina/update-devcontainer
  • 158a685 Updating gitignore for devcontainers
  • 7e83c08 Merge pull request #284 from Masterminds/dependabot/github_actions/golangci/g...
  • 697e27f Merge pull request #283 from Masterminds/dependabot/github_actions/actions/ca...
  • 1591f8e Merge pull request #282 from Masterminds/dependabot/github_actions/github/cod...
  • 3f5ff17 Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0
  • 04baa33 Bump actions/cache from 4.2.3 to 5.0.5
  • 45939fe Bump github/codeql-action from 4.35.1 to 4.35.2
  • Additional commits viewable in compare view

Updates github.com/anchore/clio from 0.0.0-20250715152405-a0fa658e5084 to 0.1.1

Release notes

Sourced from github.com/anchore/clio's releases.

v0.1.1

Additional Changes

Dependencies

20 dependency changes (18 updated, 2 removed). 1 vulnerability remediated.

🟢 Remediated (1)

Toolchains (1)

  • Go minimum version: 1.24.01.25.0
  • dario.cat/mergo v1.0.1v1.0.2
  • github.com/anchore/fangs v0.0.0-a269841v0.1.1
  • github.com/anchore/go-homedir v0.0.0-c296685v0.1.1
  • github.com/anchore/go-logger v0.0.0-07ae343v0.1.1
  • github.com/anchore/go-make v0.1.0v0.8.0
  • github.com/fsnotify/fsnotify v1.8.0v1.9.0
  • github.com/go-viper/mapstructure/v2 v2.4.0v2.5.0
  • github.com/gookit/color v1.6.0v1.6.1
  • github.com/pelletier/go-toml/v2 v2.2.3v2.2.4
  • github.com/sagikazarmark/locafero v0.7.0v0.11.0
  • github.com/sourcegraph/conc v0.3.0v0.3.1-0.5f936ab
  • github.com/spf13/afero v1.12.0v1.15.0
  • github.com/spf13/cast v1.7.1v1.10.0
  • github.com/spf13/viper v1.20.0v1.21.0
  • golang.org/x/mod v0.34.0v0.37.0
  • golang.org/x/sys v0.41.0v0.46.0 (🟢 remediated GO-2026-5024)
  • golang.org/x/term v0.40.0v0.44.0
  • golang.org/x/text v0.23.0v0.28.0
  • go.uber.org/atomic v1.9.0

... (truncated)

Commits

Updates github.com/anchore/grype from 0.110.0 to 0.116.1

Release notes

Sourced from github.com/anchore/grype's releases.

v0.116.1

Bug Fixes

Dependencies

30 dependency changes (30 updated). 1 vulnerability remediated.

🟢 Remediated (1)

  • github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0v1.32.0
  • github.com/anchore/stereoscope v0.2.2v0.3.0
  • github.com/anchore/syft v1.48.0v1.50.0
  • github.com/cncf/xds/go v0.0.0-ee656c7v0.0.0-dba9d58
  • github.com/containerd/containerd/v2 v2.3.2v2.3.3
  • github.com/docker/cli v29.5.3+incompatiblev29.6.1+incompatible
  • github.com/envoyproxy/go-control-plane/envoy v1.36.0v1.37.0
  • github.com/envoyproxy/protoc-gen-validate v1.3.0v1.3.3
  • github.com/gkampitakis/go-snaps v0.5.22v0.5.23
  • github.com/gpustack/gguf-parser-go v0.24.1v0.25.0
  • github.com/moby/moby/api v1.54.2v1.55.0
  • github.com/moby/moby/client v0.4.1v0.5.0
  • github.com/pelletier/go-toml/v2 v2.3.1v2.4.3
  • go.opentelemetry.io/contrib/detectors/gcp v1.39.0v1.43.0
  • golang.org/x/crypto v0.53.0v0.54.0
  • golang.org/x/mod v0.37.0v0.38.0
  • golang.org/x/net v0.56.0v0.57.0
  • golang.org/x/sync v0.21.0v0.22.0
  • golang.org/x/sys v0.46.0v0.47.0
  • golang.org/x/term v0.44.0v0.45.0
  • golang.org/x/text v0.39.0v0.40.0
  • golang.org/x/tools v0.47.0v0.48.0
  • google.golang.org/genproto/googleapis/api v0.0.0-9d38bb4v0.0.0-afd174a
  • google.golang.org/genproto/googleapis/rpc v0.0.0-6f92a3bv0.0.0-afd174a
  • google.golang.org/grpc v1.80.0v1.82.1 (🟢 remediated GHSA-hrxh-6v49-42gf)
  • modernc.org/cc/v4 v4.28.4v4.29.0
  • modernc.org/ccgo/v4 v4.34.4v4.34.6
  • modernc.org/gc/v3 v3.1.3v3.1.4

... (truncated)

Commits
  • 30394f1 chore(deps): update anchore dependencies (#3590)
  • 545d914 chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 (#3600)
  • d875145 ensure channel parsing is consistent (#3603)
  • ba11c44 Scope Go GHSA twins by shared CVE (#3592)
  • 072fe59 chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 (#3598)
  • 8c4b39f chore(deps): bump github/codeql-action/upload-sarif (#3599)
  • e280ea7 chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#3597)
  • 4562c55 fix(version): do not cache a comparator that failed to build (#3567)
  • ccf53d6 fix(distro): prevent panic on empty version after trimming "v" prefix (#3589)
  • 44ad33f chore(deps): update anchore dependencies (#3577)
  • Additional commits viewable in compare view

Updates github.com/anchore/stereoscope from 0.1.22 to 0.3.0

Release notes

Sourced from github.com/anchore/stereoscope's releases.

v0.3.0

Added Features

Bug Fixes

Dependencies

14 dependency changes (14 updated).

  • github.com/containerd/containerd/v2 v2.3.2v2.3.3
  • github.com/docker/cli v29.5.3+incompatiblev29.6.1+incompatible
  • github.com/gkampitakis/go-snaps v0.5.22v0.5.23
  • github.com/moby/moby/api v1.54.2v1.55.0
  • github.com/moby/moby/client v0.4.1v0.5.0
  • github.com/pelletier/go-toml/v2 v2.3.1v2.4.3
  • golang.org/x/crypto v0.53.0v0.54.0
  • golang.org/x/mod v0.37.0v0.38.0
  • golang.org/x/net v0.56.0v0.57.0
  • golang.org/x/sync v0.21.0v0.22.0
  • golang.org/x/sys v0.46.0v0.47.0
  • golang.org/x/term v0.44.0v0.45.0
  • golang.org/x/text v0.38.0v0.40.0
  • golang.org/x/tools v0.46.0v0.48.0

(Full Changelog)

v0.2.2

Dependencies

28 dependency changes (26 updated, 2 removed). 6 vulnerabilities remediated.

🟢 Remediated (6)

... (truncated)

Commits
  • e46db95 fix: preserve effective URL after HTTP redirects in registry client (#461)
  • 3d1c7c6 Skip comment and blank lines when parsing known_hosts (#634)
  • 1e33344 chore(deps): bump anchore/workflows/.github/workflows/check-gate.yaml (#640)
  • 119305b Remove references to make bootstrap (#646)
  • c49e20f file: do not treat a bare .wh. as a whiteout marker (#647)
  • e314419 feat: add multi-platform OCI image support (#548)
  • 4afcb22 chore(deps): bump github.com/pelletier/go-toml/v2 from 2.4.2 to 2.4.3 (#651)
  • b2b9dc0 chore(deps): bump golang.org/x/tools from 0.47.0 to 0.48.0 (#650)
  • 68b171c chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.22 to 0.5.23 (#652)
  • 9aa4855 chore(deps): bump github.com/containerd/containerd/v2 (#648)
  • Additional commits viewable in compare view

Updates github.com/anchore/syft from 1.42.3 to 1.50.0

Release notes

Sourced from github.com/anchore/syft's releases.

v1.50.0

Added Features

Bug Fixes

  • Fix Cargo PURLs for local workspace packages [PR #5105 @​3nesdeniz]
  • Decode golang symbols [PR #5089 @​wagoodman]
  • CPE vendor field incorrectly includes publisher URL for SUSE RPM packages [Issue #5073] [PR #5081 @​Eljees]
  • apk-db-cataloger silently drops the entire APK catalog when one installed-DB field exceeds 64 KB [Issue

@dependabot @github

dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, go, securebuild-worker. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from a team as a code owner July 6, 2026 16:18
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-minor-patch-b2660a2a35 branch 2 times, most recently from f9e3983 to c1b7744 Compare July 20, 2026 16:15
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-minor-patch-b2660a2a35 branch from c1b7744 to cf1e0aa Compare July 27, 2026 16:17
… updates

Bumps the go-minor-patch group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [chainguard.dev/apko](https://github.com/chainguard-dev/apko) | `1.2.7` | `1.2.30` |
| [chainguard.dev/melange](https://github.com/chainguard-dev/melange) | `0.48.2` | `0.56.5` |
| [cloud.google.com/go/iam](https://github.com/googleapis/google-cloud-go) | `1.7.0` | `1.12.0` |
| [github.com/DataDog/datadog-go/v5](https://github.com/DataDog/datadog-go) | `5.8.3` | `5.9.0` |
| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.4.0` | `3.5.0` |
| [github.com/anchore/clio](https://github.com/anchore/clio) | `0.0.0-20250715152405-a0fa658e5084` | `0.1.1` |
| [github.com/anchore/grype](https://github.com/anchore/grype) | `0.110.0` | `0.116.1` |
| [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.30.0` | `1.61.0` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.22.12` | `1.22.37` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.56.2` | `1.60.2` |
| [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) | `0.26.1` | `0.27.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |
| [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.6.2` | `2.6.4` |
| [github.com/sigstore/fulcio](https://github.com/sigstore/fulcio) | `1.8.5` | `1.8.8` |
| [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.5.1` | `1.5.3` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.41.0` | `0.43.0` |
| [github.com/testcontainers/testcontainers-go/modules/minio](https://github.com/testcontainers/testcontainers-go) | `0.41.0` | `0.43.0` |
| [github.com/testcontainers/testcontainers-go/modules/postgres](https://github.com/testcontainers/testcontainers-go) | `0.41.0` | `0.43.0` |



Updates `chainguard.dev/apko` from 1.2.7 to 1.2.30
- [Release notes](https://github.com/chainguard-dev/apko/releases)
- [Changelog](https://github.com/chainguard-dev/apko/blob/main/NEWS.md)
- [Commits](chainguard-dev/apko@v1.2.7...v1.2.30)

Updates `chainguard.dev/melange` from 0.48.2 to 0.56.5
- [Release notes](https://github.com/chainguard-dev/melange/releases)
- [Changelog](https://github.com/chainguard-dev/melange/blob/main/NEWS.md)
- [Commits](chainguard-dev/melange@v0.48.2...v0.56.5)

Updates `cloud.google.com/go/iam` from 1.7.0 to 1.12.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.7.0...kms/v1.12.0)

Updates `github.com/DataDog/datadog-go/v5` from 5.8.3 to 5.9.0
- [Release notes](https://github.com/DataDog/datadog-go/releases)
- [Changelog](https://github.com/DataDog/datadog-go/blob/master/CHANGELOG.md)
- [Commits](DataDog/datadog-go@v5.8.3...v5.9.0)

Updates `github.com/Masterminds/semver/v3` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](Masterminds/semver@v3.4.0...v3.5.0)

Updates `github.com/anchore/clio` from 0.0.0-20250715152405-a0fa658e5084 to 0.1.1
- [Release notes](https://github.com/anchore/clio/releases)
- [Commits](https://github.com/anchore/clio/commits/v0.1.1)

Updates `github.com/anchore/grype` from 0.110.0 to 0.116.1
- [Release notes](https://github.com/anchore/grype/releases)
- [Changelog](https://github.com/anchore/grype/blob/main/RELEASE.md)
- [Commits](anchore/grype@v0.110.0...v0.116.1)

Updates `github.com/anchore/stereoscope` from 0.1.22 to 0.3.0
- [Release notes](https://github.com/anchore/stereoscope/releases)
- [Changelog](https://github.com/anchore/stereoscope/blob/main/RELEASE.md)
- [Commits](anchore/stereoscope@v0.1.22...v0.3.0)

Updates `github.com/anchore/syft` from 1.42.3 to 1.50.0
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v1.42.3...v1.50.0)

Updates `github.com/anthropics/anthropic-sdk-go` from 1.30.0 to 1.61.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-go/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-go@v1.30.0...v1.61.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.41.5 to 1.42.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.41.5...v1.42.1)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.14 to 1.32.30
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.14...config/v1.32.30)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.14 to 1.19.29
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.14...credentials/v1.19.29)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.22.12 to 1.22.37
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/mq/v1.22.12...feature/s3/manager/v1.22.37)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.56.2 to 1.60.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.56.2...service/ssm/v1.60.2)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.98.0 to 1.106.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.98.0...service/s3/v1.106.2)

Updates `github.com/go-openapi/strfmt` from 0.26.1 to 0.27.0
- [Release notes](https://github.com/go-openapi/strfmt/releases)
- [Commits](go-openapi/strfmt@v0.26.1...v0.27.0)

Updates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.7
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.5...v0.21.7)

Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.9.2...v5.10.0)

Updates `github.com/sigstore/cosign/v2` from 2.6.2 to 2.6.4
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](sigstore/cosign@v2.6.2...v2.6.4)

Updates `github.com/sigstore/fulcio` from 1.8.5 to 1.8.8
- [Release notes](https://github.com/sigstore/fulcio/releases)
- [Changelog](https://github.com/sigstore/fulcio/blob/main/CHANGELOG.md)
- [Commits](sigstore/fulcio@v1.8.5...v1.8.8)

Updates `github.com/sigstore/rekor` from 1.5.1 to 1.5.3
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](sigstore/rekor@v1.5.1...v1.5.3)

Updates `github.com/sigstore/sigstore` from 1.10.5 to 1.10.8
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.5...v1.10.8)

Updates `github.com/testcontainers/testcontainers-go` from 0.41.0 to 0.43.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.41.0...v0.43.0)

Updates `github.com/testcontainers/testcontainers-go/modules/minio` from 0.41.0 to 0.43.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.41.0...v0.43.0)

Updates `github.com/testcontainers/testcontainers-go/modules/postgres` from 0.41.0 to 0.43.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.41.0...v0.43.0)

Updates `go.uber.org/zap` from 1.27.1 to 1.28.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.1...v1.28.0)

Updates `golang.org/x/crypto` from 0.52.0 to 0.54.0
- [Commits](golang/crypto@v0.52.0...v0.54.0)

Updates `google.golang.org/api` from 0.276.0 to 0.290.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.276.0...v0.290.0)

Updates `google.golang.org/genproto` from 0.0.0-20260319201613-d00831a3d3e7 to 0.0.0-20260406210006-6f92a3bedf2d
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12-0.20260120151049-f2248ac996af

---
updated-dependencies:
- dependency-name: chainguard.dev/apko
  dependency-version: 1.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: chainguard.dev/melange
  dependency-version: 0.56.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: cloud.google.com/go/iam
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/anchore/clio
  dependency-version: 0.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/anchore/grype
  dependency-version: 0.115.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/anchore/stereoscope
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/anchore/syft
  dependency-version: 1.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/anthropics/anthropic-sdk-go
  dependency-version: 1.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-version: 1.22.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.58.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.104.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/DataDog/datadog-go/v5
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/go-openapi/strfmt
  dependency-version: 0.26.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/Masterminds/semver/v3
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/sigstore/cosign/v2
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/sigstore/fulcio
  dependency-version: 1.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/sigstore/rekor
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.10.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/testcontainers/testcontainers-go/modules/minio
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/testcontainers/testcontainers-go/modules/postgres
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.uber.org/zap
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: google.golang.org/api
  dependency-version: 0.286.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: google.golang.org/genproto
  dependency-version: 0.0.0-20260406210006-6f92a3bedf2d
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12-0.20260120151049-f2248ac996af
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-minor-patch-b2660a2a35 branch from cf1e0aa to 8f4ebf6 Compare August 3, 2026 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants