Skip to content

Update go modules (main) (minor)#1632

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-go-modules
Open

Update go modules (main) (minor)#1632
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-go-modules

Conversation

@renovate

@renovate renovate Bot commented Jan 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/conforma/go-containerregistry v0.20.7-0.20251103083939-3459088e4bae → v0.21.7 age adoption passing confidence
github.com/open-policy-agent/conftest v0.66.0 → v0.68.2 age adoption passing confidence
github.com/open-policy-agent/opa v1.12.3 → v1.18.2 age adoption passing confidence
github.com/open-policy-agent/regal v0.37.0 → v0.42.0 age adoption passing confidence
github.com/tektoncd/cli v0.42.1 → v0.45.0 age adoption passing confidence

Release Notes

conforma/go-containerregistry (github.com/conforma/go-containerregistry)

v0.21.7

Compare Source

open-policy-agent/conftest (github.com/open-policy-agent/conftest)

v0.68.2

Compare Source

Changelog
OPA Changes
Other Changes

v0.68.1

Compare Source

Changelog
Bug Fixes

v0.68.0

Compare Source

Changelog
New Features
Bug Fixes
OPA Changes
Other Changes

v0.67.1

Compare Source

Changelog
Bug Fixes
Other Changes

v0.67.0

Compare Source

Changelog
Bug Fixes
OPA Changes
Other Changes
open-policy-agent/opa (github.com/open-policy-agent/opa)

v1.18.2

Compare Source

This release includes a bug fix for a opa fmt regression introduced in v1.18.0.

The original fix for #​8557 had the formatter enforce newlines in single-item collections (arrays, objects, sets) rather than merely honoring existing ones. As a result, running opa fmt on already-formatted policies could introduce a large number of unwanted changes. This patch release restores the intended behavior: only newlines already present in the source determine whether a single-item collection is formatted on one line or across multiple lines.

Fixes

v1.18.1

Compare Source

This release fixes a memory leak introduced in OPA v1.17.0. It is advised to update if you notice excess memory usage when running OPA server.

Fixes

v1.18.0

Compare Source

This release contains a mix of bugfixes and small features. Notably:

  • A breaking fix to the outbound User-Agent header so it conforms to RFC 9110 (see below)
  • Container-aware resource limits: automatic GOMAXPROCS is restored and automatic GOMEMLIMIT is now supported
  • Several opa fmt correctness fixes
  • Improvements to opa test --coverage (ranges in report, inline rule head tracking, conjunction-expression coverage)
Breaking: Fix User-Agent according to RFC9110 (#​8792)

OPA's outbound HTTP requests (bundle, discovery, decision log, status, http.send, AWS KMS/ECR)
previously sent User-Agent: Open Policy Agent/<version> (<os>, <arch>), which is not a valid
RFC 9110 User-Agent value because the product token cannot contain spaces. The header is now
Open-Policy-Agent/<version> (<os>, <arch>). Server-side log filters or WAF rules that
exact-match the old string will need to be updated.

Authored by @​sspaink, reported by @​SpecLad

Runtime, SDK, Tooling
Compiler, Topdown and Rego
Docs, Website, Ecosystem
Miscellaneous
  • benchmarks: smaller tweaks (#​8759) authored by @​srenatus
  • benchmarks: split off script, emit markdown table (#​8812) authored by @​srenatus
  • benchmarks: use details+summary comments for benchlab results (#​8811) authored by @​srenatus
  • capabilities: Integrate 1.17.1 patch release (#​8798) authored by @​sspaink
  • chore: tidy go.mod to remove untagged versions (#​8791) authored by @​thaJeztah
  • e2e: Add proto schemas for the IR plan and bundle manifest (#​8766) reported and authored by @​sspaink
  • gha: deduplicate change-detection output in pr CI checks (#​8808) authored by @​sspaink
  • nightly: use regal@​main (#​8735) authored by @​srenatus
  • workflow: remove tests from docker (edge) image build (#​8721) authored by @​srenatus
  • workflows: bring back docker edge tags for post-merge (#​8718) authored by @​srenatus
  • workflows: use go-version-file with actions/setup-go (#​8751) authored by @​srenatus
  • Dependency updates; notably:
    • build(deps): Add github.com/KimMachineGun/automemlimit v0.7.5
    • build(deps): Add go.uber.org/automaxprocs v1.6.0
    • build(deps): Bump github.com/dgraph-io/badger/v4 from v4.9.1 to v4.9.2
    • build(deps): Bump github.com/vektah/gqlparser/v2 from v2.5.33 to v2.5.34
    • build(deps): Bump go.opentelemetry.io/contrib/bridges/prometheus from v0.68.0 to v0.69.0
    • build(deps): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from v0.68.0 to v0.69.0
    • build(deps): Bump go.opentelemetry.io/otel from v1.43.0 to v1.44.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from v1.43.0 to v1.44.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from v1.43.0 to v1.44.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from v1.43.0 to v1.44.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from v1.43.0 to v1.44.0
    • build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from v1.43.0 to v1.44.0
    • build(deps): Bump go.opentelemetry.io/otel/sdk from v1.43.0 to v1.44.0
    • build(deps): Bump go.opentelemetry.io/otel/sdk/metric from v1.43.0 to v1.44.0
    • build(deps): Bump go.opentelemetry.io/otel/trace from v1.43.0 to v1.44.0
    • build(deps): Bump golang.org/x/sync from v0.20.0 to v0.21.0
    • build(deps): Bump golang.org/x/text from v0.37.0 to v0.38.0
    • build(deps): Bump google.golang.org/grpc from v1.81.0 to v1.81.1
    • build(deps): Bump gopkg.in/ini.v1 from v1.67.2 to v1.67.3
    • build(deps): Bump oras.land/oras-go/v2 from v2.6.0 to v2.6.1
    • build(deps): bump golang.org/x/crypto to v0.52.0 and golang.org/x/net to v0.55.0 (#​8745) authored by @​BGebken
    • build: bump go 1.26.3 -> 1.26.4 (#​8726) authored by @​srenatus

v1.17.1

Compare Source

This release uses the latest version of Go (1.26.4) to build OPA, fixing stdlib vulnerabilities in code that OPA's HTTP handler and crypto builtins use:

It is otherwise the same code as v1.17.0.

Note that users building their own OPA binaries and images already control the Golang version, so this is not relevant for them.

Miscellaneous
  • build: bump go 1.26.3 -> 1.26.4 (authored by @​srenatus)

v1.17.0

Compare Source

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • A new future.keywords.not import that adds improved semantics to the not keyword.
  • Rule Labels in Decision Logs
  • Published json schema for IR and bundle manifest
  • Dropped automaxprocs and x/net dependencies
Improved Negation Semantics (#​8387)

This OPA release introduces a new future.keywords.not import
that fixes a long-standing semantic issue with negation in Rego.

Without the import, the compiler expands a negated composite expression like
not f(g(input.x)) into a series of sub-expressions evaluated before the
not:

__local0__ = input.x
g(__local0__, __local1__)
not f(__local1__)

If any sub-expression fails — for example, input.x is undefined or g
produces an undefined result — the entire rule fails rather than the not succeeding.
This is unintuitive: the user's intent is "the condition does not hold," but
an undefined intermediate value causes a silent failure instead of the expected
not result.

With import future.keywords.not, composite-expression negation wraps the full compiler
expansion in an implicit body:

not { __local0__ = input.x; g(__local0__, __local1__); f(__local1__) }

Now, if any sub-expression is undefined or fails, the body is unsatisfiable
and the not expression succeeds; matching the intuition that "the condition does not hold."

NOTE:

Users are recommended to import future.keywords.not whenever the not keyword is used in a policy.

Authored by @​johanfylling

Rule Labels in Decision Logs (#​2089)

Rule annotations now support a labels field. Labels from all successfully evaluated
rules are collected and included in each decision log entry as a top-level rule_labels
array. Each element is the merged label map for one successfully evaluated rule, with
inner-scope-wins precedence across the rule's annotation chain
(subpackages < package < document < rule). Merged maps are deduplicated
across rules so that identical label sets collapse to a single entry.

# METADATA
# scope: package

# labels:
#   service: authz

#   severity: info
package myapp

# METADATA

# labels:
#   severity: low

#   team: platform
allow if input.role == "admin"

The resulting decision log entry will contain:

{"rule_labels": [{"service": "authz", "severity": "low", "team": "platform"}]}

Note how severity: info from the package scope is overridden by severity: low from
the rule scope. Queries against rule_labels can now rely on each entry carrying the
full label context for a single rule, rather than one entry per contributing scope.

Both the runtime and the Go SDK now process metadata annotations by default.

Authored by @​srenatus, reported by @​tsandall

Runtime, SDK, Tooling
Compiler, Topdown and Rego
Docs, Website, Ecosystem
Miscellaneous
  • ast,storage/inmem: Add inmem.NewFromASTObject and add missing string case to ast.InternedValue (#​8707) authored by @​anderseknert
  • build: go install -> go install tool to control checksums (#​8646) authored by @​srenatus
  • build: Push edge binaries to bucket (#​8668) authored by @​charlieegan3
  • workflows: Fix benchmarks workflow (replace action, avoid stackoverflow) (#​8655) authored by @​srenatus
  • workflows: Note improvements in benchmark comments (#​8673) authored by @​srenatus
  • Generate a JSON Schema for the IR plan (#​8662) authored by @​sspaink reported by @​kroekle
  • Generate a JSON Schema for the bundle manifest (#​8661) authored by @​sspaink reported by @​kroekle
  • Dependency updates; notably:
    • build(deps): Remove automaxprocs dependency (#​8696) authored by @​anderseknert
    • build(deps): Remove direct x/net dependency (#​8697) authored by @​anderseknert
    • build(deps): Bump github.com/bytecodealliance/wasmtime-go from 43.0.2 to 44.0.0 (8652) authored by @​srenatus
    • build(deps): Bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1
    • build(deps): Bump github.com/huandu/go-sqlbuilder from 1.40.2 to 1.41.0
    • build(deps): Bump github.com/lestrrat-go/jwx/v3 from 3.1.0 to 3.1.1
    • build(deps): Bump github.com/vektah/gqlparser/v2 from 2.5.32 to 2.5.33
    • build(deps): Bump google.golang.org/grpc from 1.80.0 to 1.81.0
    • build(deps): Bump gopkg.in/ini.v1 from 1.67.1 to 1.67.2

v1.16.2

Compare Source

This release updates the version of Go used to build the OPA binaries and images to 1.26.3;
addressing a number of vulnerabilities.

v1.16.1

Compare Source

This is a patch release addressing a regression in the plugin manager that may cause the service to hang on shutdown (#​8590).

v1.16.0

Compare Source

[!WARNING]

A regression has been found in the plugin manager, which may cause the service to hang on shutdown.
Users are advised to go directly to v1.16.1.

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • New uri.parse and uri.is_valid built-in functions
  • Data API Request/Response Metadata
  • Prometheus metrics exported via OTLP
  • Formatter improvements

NOTE:

In v1.15.x, OPA was dropping logs for bundle downloads, print() calls and other plugin-originated logs.
Users are advised to update, v1.16.0 fixes this bug in (#​8544).

New uri.parse and uri.is_valid built-in functions (#​8263)

Two new built-in functions have been added: uri.parse for parsing a given URI, and uri.is_valid for verifying the structure of a given URI.

uri.parse

Parses a URI and returns an object containing its components according to RFC 3986. Empty components are omitted.

package example

test_uri if {
	uri.parse("https://example.com:8080/api?q=1#top") == {
		"scheme": "https",
		"hostname": "example.com",
		"port": "8080",
		"path": "/api",
		"raw_path": "/api",
		"raw_query": "q=1",
		"fragment": "top",
	}
}
uri.is_valid

Returns true if the input can be parsed as a URI, false otherwise.

package example

deny contains "invalid URI" if {
    not uri.is_valid("http://[invalid")
}

Authored by @​charlieegan3 reported by @​anivar

Data API Request/Response Metadata (#​8570)

Wrapping projects can now attach custom metadata to Data API requests and have evaluation produce response metadata.

Two distinct metadata paths are introduced:

  • Request metadata: parsed from extra top-level keys in the request body, made available to builtins via BuiltinContext.RequestMetadata. Logged in the decision log under Custom["request_metadata"].

  • Response metadata: a separate map (BuiltinContext.ResponseMetadata) that builtins can populate during evaluation. Only included in the API response and decision log if non-empty.

In vanilla OPA, no builtins write response metadata, so responses are unchanged. The request metadata map is only allocated when the request carries extra fields; the response map is one empty map per request.

To avoid conflicts with future OPA top-level keys, callers should use a namespaced key: {"input": {...}, "com.example.opa/md": {...}}.

Request with metadata:

curl -H 'Content-Type: application/json' \
  -d '{"input": {"user": "alice"}, "com.example.opa/metadata": {"corp-id": "acme-42"}}' \
  http://localhost:8181/v1/data/example/allow

Response (response metadata included if, for example, set by a custom builtin):

{
  "decision_id": "04789f85-de5a-477b-8aa5-6d59d7742135",
  "result": true,
  "com.example.opa/response": {
    "snapshot_version": "v3"
  }
}

Decision log entry:

{
  "custom": {
    "request_metadata": {
      "com.example.opa/metadata": {
        "corp-id": "acme-42"
      }
    },
    "response_metadata": {
      "com.example.opa/response": {
        "snapshot_version": "v3"
      }
    }
  },
  "decision_id": "04789f85-de5a-477b-8aa5-6d59d7742135",
  "input": { "user": "alice" },
  "msg": "Decision Log",
  "path": "example/allow",
  "result": true
}

Authored by @​srenatus

Runtime, SDK, Tooling
Compiler, Topdown and Rego
Docs, Website, Ecosystem
  • docs: Add aggregates examples for count and sum built-in

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/main-go-modules branch 3 times, most recently from 6530ff8 to 6421e02 Compare February 5, 2026 09:04
@renovate

renovate Bot commented Feb 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 14 additional dependencies were updated

Details:

Package Change
github.com/docker/cli v29.2.0+incompatible -> v29.5.3+incompatible
github.com/klauspost/compress v1.18.2 -> v1.18.6
go.opentelemetry.io/otel v1.39.0 -> v1.41.0
go.opentelemetry.io/otel/metric v1.39.0 -> v1.41.0
go.opentelemetry.io/otel/trace v1.39.0 -> v1.41.0
golang.org/x/crypto v0.47.0 -> v0.51.0
golang.org/x/mod v0.31.0 -> v0.36.0
golang.org/x/net v0.49.0 -> v0.54.0
golang.org/x/oauth2 v0.34.0 -> v0.36.0
golang.org/x/sync v0.19.0 -> v0.21.0
golang.org/x/sys v0.40.0 -> v0.44.0
golang.org/x/term v0.39.0 -> v0.43.0
golang.org/x/text v0.33.0 -> v0.37.0
golang.org/x/tools v0.40.0 -> v0.45.0
File name: docs/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.6 -> 1.25.0
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.4
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 141 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.5 -> 1.26.5
cloud.google.com/go v0.121.6 -> v0.123.0
cloud.google.com/go/auth v0.18.0 -> v0.20.0
cloud.google.com/go/iam v1.5.3 -> v1.7.0
github.com/CycloneDX/cyclonedx-go v0.9.3 -> v0.10.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 -> v1.31.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.54.0 -> v0.55.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.54.0 -> v0.55.0
github.com/anchore/go-struct-converter v0.0.0-20230627203149-c72ef8859ca9 -> v0.1.0
github.com/arl/statsviz v0.7.2 -> v0.8.0
github.com/aws/aws-sdk-go-v2 v1.41.0 -> v1.41.7
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.2 -> v1.7.8
github.com/aws/aws-sdk-go-v2/config v1.32.5 -> v1.32.17
github.com/aws/aws-sdk-go-v2/credentials v1.19.5 -> v1.19.16
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.16 -> v1.18.23
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.16 -> v1.4.23
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.16 -> v2.7.23
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.12 -> v1.4.24
github.com/aws/aws-sdk-go-v2/service/ecr v1.51.2 -> v1.55.3
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.2 -> v1.38.10
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4 -> v1.13.9
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.3 -> v1.9.13
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.16 -> v1.13.23
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.12 -> v1.19.21
github.com/aws/aws-sdk-go-v2/service/s3 v1.89.1 -> v1.97.3
github.com/aws/aws-sdk-go-v2/service/signin v1.0.4 -> v1.0.11
github.com/aws/aws-sdk-go-v2/service/sso v1.30.7 -> v1.30.17
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.12 -> v1.35.21
github.com/clipperhouse/displaywidth v0.6.0 -> v0.11.0
github.com/clipperhouse/uax29/v2 v2.3.0 -> v2.7.0
github.com/cloudflare/circl v1.6.1 -> v1.6.3
github.com/cncf/xds/go v0.0.0-20251022180443-0feb69152e9f -> v0.0.0-20260202195803-dba9d589def2
github.com/cyphar/filepath-securejoin v0.5.0 -> v0.6.0
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 -> v4.4.1
github.com/dgraph-io/badger/v4 v4.8.0 -> v4.9.2
github.com/dgraph-io/ristretto/v2 v2.3.0 -> v2.4.0
github.com/docker/cli v29.0.3+incompatible -> v29.5.3+incompatible
github.com/docker/docker-credential-helpers v0.9.4 -> v0.9.5
github.com/emicklei/proto v1.14.2 -> v1.14.3
github.com/envoyproxy/go-control-plane/envoy v1.35.0 -> v1.37.0
github.com/envoyproxy/protoc-gen-validate v1.2.1 -> v1.3.3
github.com/fatih/color v1.18.0 -> v1.19.0
github.com/fsnotify/fsnotify v1.9.0 -> v1.10.1
github.com/fxamacker/cbor/v2 v2.9.0 -> v2.9.1
github.com/go-chi/chi/v5 v5.2.4 -> v5.2.5
github.com/go-jose/go-jose/v4 v4.1.3 -> v4.1.4
github.com/go-openapi/analysis v0.24.1 -> v0.25.0
github.com/go-openapi/errors v0.22.6 -> v0.22.7
github.com/go-openapi/jsonpointer v0.22.4 -> v0.23.1
github.com/go-openapi/jsonreference v0.21.4 -> v0.21.5
github.com/go-openapi/loads v0.23.2 -> v0.23.3
github.com/go-openapi/runtime v0.29.2 -> v0.31.0
github.com/go-openapi/spec v0.22.3 -> v0.22.4
github.com/go-openapi/strfmt v0.25.0 -> v0.26.2
github.com/go-openapi/swag v0.25.4 -> v0.26.0
github.com/go-openapi/swag/cmdutils v0.25.4 -> v0.26.0
github.com/go-openapi/swag/conv v0.25.4 -> v0.26.0
github.com/go-openapi/swag/fileutils v0.25.4 -> v0.26.0
github.com/go-openapi/swag/jsonname v0.25.4 -> v0.26.0
github.com/go-openapi/swag/jsonutils v0.25.4 -> v0.26.0
github.com/go-openapi/swag/loading v0.25.4 -> v0.26.0
github.com/go-openapi/swag/mangling v0.25.4 -> v0.26.0
github.com/go-openapi/swag/netutils v0.25.4 -> v0.26.0
github.com/go-openapi/swag/stringutils v0.25.4 -> v0.26.0
github.com/go-openapi/swag/typeutils v0.25.4 -> v0.26.0
github.com/go-openapi/swag/yamlutils v0.25.4 -> v0.26.0
github.com/go-openapi/validate v0.25.1 -> v0.25.2
github.com/go-viper/mapstructure/v2 v2.4.0 -> v2.5.0
github.com/goccy/go-json v0.10.5 -> v0.10.6
github.com/google/cel-go v0.26.1 -> v0.28.1
github.com/google/flatbuffers v25.9.23+incompatible -> v25.12.19+incompatible
github.com/google/go-containerregistry v0.20.7 -> v0.21.7
github.com/google/go-jsonnet v0.21.0 -> v0.22.0
github.com/google/pprof v0.0.0-20251007162407-5df77e3f7d1d -> v0.0.0-20260402051712-545e8a4df936
github.com/googleapis/enterprise-certificate-proxy v0.3.9 -> v0.3.15
github.com/googleapis/gax-go/v2 v2.16.0 -> v2.22.0
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 -> v2.29.0
github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.65 -> v2.0.0-beta.72
github.com/hashicorp/go-getter v1.8.3 -> v1.8.6
github.com/huandu/go-sqlbuilder v1.38.1 -> v1.41.0
github.com/in-toto/attestation v1.1.2 -> v1.2.0
github.com/klauspost/compress v1.18.2 -> v1.18.6
github.com/lestrrat-go/dsig v1.0.0 -> v1.3.0
github.com/lestrrat-go/httprc/v3 v3.0.1 -> v3.0.5
github.com/lestrrat-go/jwx/v3 v3.0.12 -> v3.1.1
github.com/letsencrypt/boulder v0.20251110.0 -> v0.20260420.0
github.com/mattn/go-isatty v0.0.20 -> v0.0.22
github.com/mattn/go-runewidth v0.0.19 -> v0.0.23
github.com/miekg/pkcs11 v1.1.1 -> v1.1.2
github.com/moby/buildkit v0.26.3 -> v0.29.0
github.com/morikuni/aec v1.0.0 -> v1.1.0
github.com/olekukonko/errors v1.1.0 -> v1.3.0
github.com/olekukonko/ll v0.1.3 -> v0.1.8
github.com/olekukonko/tablewriter v1.1.2 -> v1.1.4
github.com/open-policy-agent/opa v1.12.1 -> v1.18.2
github.com/prometheus/common v0.67.4 -> v0.67.5
github.com/prometheus/procfs v0.19.2 -> v0.20.1
github.com/protocolbuffers/txtpbfmt v0.0.0-20251016062345-16587c79cd91 -> v0.0.0-20260217160748-a481f6a22f94
github.com/secure-systems-lab/go-securesystemslib v0.10.0 -> v0.11.0
github.com/sigstore/cosign/v2 v2.6.2 -> v2.6.4
github.com/sigstore/protobuf-specs v0.5.0 -> v0.5.1
github.com/sigstore/rekor v1.5.0 -> v1.5.2
github.com/sigstore/sigstore v1.10.4 -> v1.10.8
github.com/spdx/tools-golang v0.5.5 -> v0.5.7
github.com/tektoncd/pipeline v1.3.1 -> v1.12.2
github.com/tektoncd/triggers v0.33.0 -> v0.35.1-0.20260401091813-1aad8a1898ec
github.com/valyala/fastjson v1.6.4 -> v1.6.10
github.com/vektah/gqlparser/v2 v2.5.31 -> v2.5.35
go.opentelemetry.io/auto/sdk v1.2.1 -> v1.2.1
go.opentelemetry.io/contrib/detectors/gcp v1.38.0 -> v1.42.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0 -> v0.68.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 -> v0.69.0
go.opentelemetry.io/otel v1.39.0 -> v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.38.0 -> v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.38.0 -> v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.38.0 -> v1.44.0
go.opentelemetry.io/otel/metric v1.39.0 -> v1.44.0
go.opentelemetry.io/otel/sdk v1.39.0 -> v1.44.0
go.uber.org/zap v1.27.1 -> v1.28.0
go.yaml.in/yaml/v2 v2.4.3 -> v2.4.4
golang.org/x/crypto v0.47.0 -> v0.53.0
golang.org/x/exp v0.0.0-20250911091902-df9299821621 -> v0.0.0-20260410095643-746e56fc9e2f
golang.org/x/mod v0.31.0 -> v0.37.0
golang.org/x/net v0.49.0 -> v0.56.0
golang.org/x/oauth2 v0.34.0 -> v0.36.0
golang.org/x/sync v0.19.0 -> v0.22.0
golang.org/x/sys v0.40.0 -> v0.46.0
golang.org/x/term v0.39.0 -> v0.44.0
google.golang.org/api v0.260.0 -> v0.277.0
google.golang.org/genproto v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260406210006-6f92a3bedf2d
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260526163538-3dc84a4a5aaa
google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 -> v0.0.0-20260526163538-3dc84a4a5aaa
google.golang.org/grpc v1.78.0 -> v1.81.1
gopkg.in/ini.v1 v1.67.1 -> v1.67.3
k8s.io/api v0.35.0 -> v0.35.6
k8s.io/apiextensions-apiserver v0.34.2 -> v0.35.5
k8s.io/apimachinery v0.35.0 -> v0.35.6
k8s.io/client-go v0.35.0 -> v0.35.6
k8s.io/klog/v2 v2.130.1 -> v2.140.0
knative.dev/pkg v0.0.0-20250415155312-ed3e2158b883 -> v0.0.0-20260329160701-396dbaacd652
oras.land/oras-go/v2 v2.6.0 -> v2.6.1
sigs.k8s.io/release-utils v0.12.3 -> v0.12.4

@codecov

codecov Bot commented Feb 5, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate
renovate Bot force-pushed the renovate/main-go-modules branch 3 times, most recently from 7f6a07a to 4f6e0d5 Compare February 18, 2026 13:04
@renovate
renovate Bot force-pushed the renovate/main-go-modules branch from 4f6e0d5 to cf70ec7 Compare February 23, 2026 14:13
@github-actions github-actions Bot added size: L and removed size: XS labels Feb 23, 2026
@renovate
renovate Bot force-pushed the renovate/main-go-modules branch 4 times, most recently from 903a958 to 915f933 Compare February 26, 2026 21:59
@github-actions github-actions Bot added size: XL and removed size: L labels Feb 26, 2026
@renovate
renovate Bot force-pushed the renovate/main-go-modules branch 3 times, most recently from 8051b1b to b414ed3 Compare March 9, 2026 13:05
@renovate
renovate Bot force-pushed the renovate/main-go-modules branch 3 times, most recently from 5c9e490 to 6625ab3 Compare March 19, 2026 14:20
@renovate
renovate Bot force-pushed the renovate/main-go-modules branch 3 times, most recently from e54a0a3 to 830dcc8 Compare March 27, 2026 02:28
@fullsend-ai-review fullsend-ai-review Bot added go Pull requests that update Go code dependencies Pull requests that update a dependency file labels Jun 25, 2026
@renovate
renovate Bot force-pushed the renovate/main-go-modules branch from 8b963ab to 29b5e67 Compare June 26, 2026 19:18
@renovate renovate Bot changed the title Update go modules (main) Update go modules (main) (minor) Jun 26, 2026
@fullsend-ai-review

fullsend-ai-review Bot commented Jun 26, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 7:21 PM UTC · Completed 7:29 PM UTC
Commit: 47d3320 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@renovate
renovate Bot force-pushed the renovate/main-go-modules branch from 29b5e67 to e67cadb Compare June 29, 2026 14:15
@fullsend-ai-review

fullsend-ai-review Bot commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:17 PM UTC · Completed 2:26 PM UTC
Commit: 47d3320 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@renovate
renovate Bot force-pushed the renovate/main-go-modules branch from e67cadb to 4ce3d86 Compare July 2, 2026 15:52
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 2, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 3:55 PM UTC · Completed 3:59 PM UTC
Commit: 47d3320 · View workflow run →

@fullsend-ai-review
fullsend-ai-review Bot dismissed stale reviews from themself July 2, 2026 15:59

Superseded by updated review

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review fullsend-ai-review Bot added the ready-for-merge All reviewers approved — ready to merge label Jul 2, 2026
@renovate
renovate Bot force-pushed the renovate/main-go-modules branch from 4ce3d86 to 874cf4d Compare July 12, 2026 17:13
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 12, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 5:14 PM UTC · Completed 5:21 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 7:16 PM UTC · Completed 7:21 PM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 22, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 12:55 PM UTC · Completed 1:02 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 24, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:56 AM UTC · Completed 5:04 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@renovate

renovate Bot commented Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: module github.com/open-policy-agent/conftest@v0.68.2 requires go >= 1.25.8; switching to go1.25.12
go: downloading go1.25.12 (linux/amd64)
go: module github.com/open-policy-agent/regal@v0.42.0 requires go >= 1.26; switching to go1.26.5
go: github.com/tektoncd/hub@v1.24.0: reading github.com/tektoncd/hub/go.mod at revision v1.24.0: unknown revision v1.24.0

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 24, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:18 PM UTC · Completed 2:26 PM UTC
Commit: 87c4a29 · View workflow run →

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@fullsend-ai-review fullsend-ai-review[bot] fullsend-ai-review[bot] approved these changes
Reviewers whose approvals may not affect merge requirements

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code main ready-for-merge All reviewers approved — ready to merge renovate size: L

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants