Skip to content

Bump the go-dependencies group across 1 directory with 3 updates#1636

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-dependencies-83333663ac
Closed

Bump the go-dependencies group across 1 directory with 3 updates#1636
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-dependencies-83333663ac

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 14, 2026

Bumps the go-dependencies group with 2 updates in the / directory: github.com/containerd/containerd and github.com/google/go-containerregistry.

Updates github.com/containerd/containerd from 1.7.30 to 1.7.31

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.31

Welcome to the v1.7.31 release of containerd!

The thirty-first patch release for containerd 1.7 contains various fixes and updates including a security patch.

Security Updates

Highlights

Container Runtime Interface (CRI)

  • Fix CNI issue where DEL is never executed after a restart (#12931)
  • Sanitize error before gRPC return to prevent possible credential leak in pod events (#12805)
  • Improve error message and add warning when concurrent container creation is detected (#12744)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Samuel Karp
  • Maksym Pavlenko
  • Akhil Mohan
  • Phil Estes
  • Sebastiaan van Stijn
  • Wei Fu
  • Akihiro Suda
  • Alex Chernyakhovsky
  • Chris Henzie
  • Michael Zappa
  • Ricardo Branco
  • Shachar Tal
  • ningmingxiao
  • yashsingh74

Changes

  • Prepare release notes for v1.7.31 (#13221)
    • 7d2662653 Prepare release notes for v1.7.31
  • update github.com/moby/spdystream v0.5.1 (#13220)
    • 3f795c02a update github.com/moby/spdystream v0.5.1
  • update to Go 1.25.9, 1.26.2 (#13200)
    • 7b1e1b17b update to Go 1.25.9, 1.26.2
    • b673f2d42 update golangci-lint to v2.9.0 with go1.26 support

... (truncated)

Commits
  • 96caa5d Merge pull request #13221 from samuelkarp/prepare-release-1.7.31
  • 7d26626 Prepare release notes for v1.7.31
  • 67c7dbc Merge pull request #13220 from samuelkarp/update-spdystream-1.7
  • 3f795c0 update github.com/moby/spdystream v0.5.1
  • 81cf2b4 Merge pull request #13200 from chrishenzie/bump-go-1.25.9-1.7
  • 7b1e1b1 update to Go 1.25.9, 1.26.2
  • b673f2d update golangci-lint to v2.9.0 with go1.26 support
  • d88d851 remove windows/arm from cross build
  • a763407 Ignore warnings for golangci-lint bump
  • 03dcd83 ci: bump golangci from 6.5.2 to 7.0.0
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.4 to 0.21.5

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.5

What's Changed

Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5

Commits
  • 5b80281 build(deps): bump golang.org/x/tools from 0.43.0 to 0.44.0 in the go-deps gro...
  • b99bca2 build(deps): bump aws-actions/configure-aws-credentials (#2257)
  • f8be1d4 update to Go 1.26.2 (#2255)
  • 87ad88b Bump docker/cli v29.4.0, moby/api v1.54.1, moby/client v0.4.0 (#2254)
  • See full diff in compare view

Updates golang.org/x/sys from 0.42.0 to 0.43.0

Commits
  • f33a730 windows: support nil security descriptor on GetNamedSecurityInfo
  • 493d172 cpu: add runtime import in cpu_darwin_arm64_other.go
  • 2c2be75 windows: use syscall.SyscallN in Proc.Call
  • a76ec62 cpu: roll back "use IsProcessorFeaturePresent to calculate ARM64 on windows"
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 14, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 14, 2026 23:12
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 14, 2026
Bumps the go-dependencies group with 3 updates: [github.com/containerd/containerd](https://github.com/containerd/containerd), [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) and [golang.org/x/sys](https://github.com/golang/sys).


Updates `github.com/containerd/containerd` from 1.7.30 to 1.7.31
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.30...v1.7.31)

Updates `github.com/google/go-containerregistry` from 0.21.4 to 0.21.5
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.4...v0.21.5)

Updates `golang.org/x/sys` from 0.42.0 to 0.43.0
- [Commits](golang/sys@v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-version: 1.7.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the go-dependencies group with 3 updates Bump the go-dependencies group across 1 directory with 3 updates Apr 16, 2026
@dependabot dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-83333663ac branch from 76c8a84 to 91c9564 Compare April 16, 2026 16:10
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 21, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 21, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/go-dependencies-83333663ac branch April 21, 2026 23:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants