Skip to content

chore(deps): update go dependencies#74

Open
red-hat-konflux[bot] wants to merge 1 commit into
tech-previewfrom
konflux/mintmaker/tech-preview/go-deps
Open

chore(deps): update go dependencies#74
red-hat-konflux[bot] wants to merge 1 commit into
tech-previewfrom
konflux/mintmaker/tech-preview/go-deps

Conversation

@red-hat-konflux
Copy link
Copy Markdown

@red-hat-konflux red-hat-konflux Bot commented May 19, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
github.com/ThalesGroup/crypto11 require patch v1.6.0v1.6.1
github.com/go-openapi/analysis indirect patch v0.25.0v0.25.1
github.com/go-openapi/runtime indirect minor v0.31.0v0.32.2
github.com/go-openapi/runtime/server-middleware indirect minor v0.30.0v0.32.2
github.com/go-openapi/strfmt indirect patch v0.26.2v0.26.3
github.com/jedisct1/go-minisign indirect digest d2f9f49a09352b
github.com/sigstore/rekor indirect patch v1.5.1v1.5.2
github.com/sigstore/sigstore require patch v1.10.6v1.10.8
github.com/sigstore/timestamp-authority/v2 indirect minor v2.0.6v2.1.0
github.com/theupdateframework/go-tuf indirect major v0.7.0v2.4.2
github.com/theupdateframework/go-tuf/v2 indirect patch v2.4.1v2.4.2
go.opentelemetry.io/otel require minor v1.43.0v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace indirect minor v1.43.0v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp require minor v1.43.0v1.44.0
go.opentelemetry.io/otel/metric indirect minor v1.43.0v1.44.0
go.opentelemetry.io/otel/sdk require minor v1.43.0v1.44.0
go.opentelemetry.io/otel/trace require minor v1.43.0v1.44.0
golang.org/x/crypto require minor v0.51.0v0.52.0
golang.org/x/net indirect minor v0.54.0v0.55.0
golang.org/x/sys indirect minor v0.44.0v0.45.0
google.golang.org/genproto/googleapis/api indirect digest aa98bba3dc84a4
google.golang.org/genproto/googleapis/rpc indirect digest aa98bba3dc84a4

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

ThalesGroup/crypto11 (github.com/ThalesGroup/crypto11)

v1.6.1

Compare Source

go-openapi/analysis (github.com/go-openapi/analysis)

v0.25.1

Compare Source

0.25.1 - 2026-05-25

Full Changelog: go-openapi/analysis@v0.25.0...v0.25.1

16 commits in this release.


Implemented enhancements
Documentation
Updates

People who contributed to this release

analysis license terms

License

Per-module changes


internal/testintegration (0.25.1)

Implemented enhancements
Updates
go-openapi/runtime (github.com/go-openapi/runtime)

v0.32.2

Compare Source

0.32.2 - 2026-05-27

Full Changelog: go-openapi/runtime@v0.32.1...v0.32.2

2 commits in this release.


Fixed bugs
Miscellaneous tasks

People who contributed to this release

runtime license terms

License

Per-module changes

client-middleware/opentracing (0.32.2)
Miscellaneous tasks

v0.32.1

Compare Source

0.32.1 - 2026-05-25

Full Changelog: go-openapi/runtime@v0.32.0...v0.32.1

3 commits in this release.


Documentation
Code quality
Miscellaneous tasks

People who contributed to this release

runtime license terms

License

Per-module changes


client-middleware/opentracing (0.32.1)

Miscellaneous tasks

v0.32.0

Compare Source

0.32.0 - 2026-05-25

Full Changelog: go-openapi/runtime@v0.31.0...v0.32.0

8 commits in this release.


Fixed bugs
  • refactor(client/otel): pivot OpenTelemetry transport to SubmitContext by @​fredbi ...
  • fix(middleware): bind formData file params from urlencoded bodies by @​fredbi ...
Documentation
Code quality
  • ci: add unsafe-skipauth tagged-build workflow with coverage by @​fredbi ...
  • feat(middleware): build-tag-gated SetSkipAuth for dev-mode auth bypass by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

runtime license terms

License

Per-module changes


client-middleware/opentracing (0.32.0)

Miscellaneous tasks
Updates

docs/examples (0.32.0)

Miscellaneous tasks
Updates

server-middleware (0.32.0)

Updates
go-openapi/strfmt (github.com/go-openapi/strfmt)

v0.26.3

0.26.3 - 2026-05-31

Full Changelog: go-openapi/strfmt@v0.26.2...v0.26.3

15 commits in this release.


Documentation
Miscellaneous tasks
Updates

People who contributed to this release

strfmt license terms

License

Per-module changes


enable/mongodb (0.26.3)

Miscellaneous tasks
Updates

internal/testintegration (0.26.3)

Miscellaneous tasks
Updates
sigstore/rekor (github.com/sigstore/rekor)

v1.5.2

Compare Source

Changelog

  • 759b98e alpine: Enforce max size limit on decompression (#​2831)
  • c7e77ee Support restricting kinds on insertion (#​2814)
  • a10818a fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#​2812)
  • 8a2f3a2 add checks to ensure returned entries match client inputs to rekor-cli (#​2799)
  • 0e88bac add nil pointer check to resolve fuzzing crash (#​2807)
  • 93da954 client: surface last-response details after retries are exhausted (#​2796)
  • 4d67ecd Fix internal error detail leakage in 500 responses (#​2801)
  • b34ca94 add defensive check to ensure tid is in config ahead of getting client (#​2795)
  • 656c832 restapi: include inactiveShards in the homepage total count (#​2797)
Thanks for all contributors!
sigstore/sigstore (github.com/sigstore/sigstore)

v1.10.8

Compare Source

What's Changed
  • Support standard PKCS#8 encrypted private key decryption in #​2333

Full Changelog: sigstore/sigstore@v1.10.7...v1.10.8

v1.10.7

Compare Source

What's Changed
  • add functional options to DSSE to improve memory usage, validation in #​2326
  • Extend PEM private key unmarshalling to support legacy format in #​2332

Full Changelog: sigstore/sigstore@v1.10.6...v1.10.7

sigstore/timestamp-authority (github.com/sigstore/timestamp-authority/v2)

v2.1.0

Compare Source

What's Changed

  • Bound path and HTTP method metric label cardinality to prevent OOM in #​1374
  • Fix spec violations in policy, EKU, and hash verification in #​1375

Full Changelog: sigstore/timestamp-authority@v2.0.6...v2.1.0

theupdateframework/go-tuf (github.com/theupdateframework/go-tuf)

v2.4.2

Compare Source

What's Changed
New Contributors

Full Changelog: theupdateframework/go-tuf@v2.4.1...v2.4.2

v2.4.1

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.4.0...v2.4.1

v2.4.0

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.3.1...v2.4.0

v2.3.1

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.3.0...v2.3.1

v2.3.0

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.2.0...v2.3.0

v2.2.0

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.1.1...v2.2.0

v2.1.1

Compare Source

What's Changed

Fixed a regression that can fail clients using the DefaultFetcher{} directly without using the constructor.

  • Set a default HTTP client for DefaultFetcher in DownloadFile method if none is set by @​malancas in #​686

Full Changelog: theupdateframework/go-tuf@v2.1.0...v2.1.1

v2.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: theupdateframework/go-tuf@v2.0.2...v2.1.0

v2.0.2

Compare Source

What's Changed

Full Changelog: theupdateframework/go-tuf@v2.0.1...v2.0.2

v2.0.1

Compare Source

What's Changed

Security
Other

Full Changelog: theupdateframework/go-tuf@v2.0.0...v2.0.1

v2.0.0

Compare Source

Breaking changes

  • This is the first release of go-tuf v2 and it's a complete re-write indicated by the new major version.
  • We also decided to leave go-tuf as a library only.

What's Changed


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 13 times, most recently from 3024d23 to e819092 Compare May 26, 2026 22:17
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 11 times, most recently from a24df00 to 7dd32c7 Compare May 31, 2026 02:48
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch from 7dd32c7 to 5fafbde Compare May 31, 2026 10:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants