Bump the gomod group across 1 directory with 12 updates by dependabot[bot] · Pull Request #4312 · cloudfoundry/korifi

dependabot · 2026-02-27T10:07:21Z

Bumps the gomod group with 11 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2/config	`1.32.7`	`1.32.10`
github.com/aws/aws-sdk-go-v2/service/ecr	`1.55.1`	`1.55.3`
github.com/go-resty/resty/v2	`2.17.1`	`2.17.2`
github.com/google/go-containerregistry	`0.20.7`	`0.21.1`
k8s.io/api	`0.35.0`	`0.35.2`
k8s.io/client-go	`0.35.0`	`0.35.2`
k8s.io/metrics	`0.35.0`	`0.35.2`
k8s.io/pod-security-admission	`0.35.0`	`0.35.2`
sigs.k8s.io/controller-tools	`0.20.0`	`0.20.1`
sigs.k8s.io/gateway-api	`1.4.1`	`1.5.0`
k8s.io/apiextensions-apiserver	`0.35.0`	`0.35.2`

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.7 to 1.32.10

Commits

238dde7 Release 2026-02-23
3a957b9 Regenerated Clients
2972c7d Update endpoints model
aa03794 Update API model
7712be7 Feature add new eventstream implementation to support bedrockruntime#InvokeMo...
da36a98 Release 2026-02-20
9d7b59c Regenerated Clients
e75eb3f Update endpoints model
2c987cd Update API model
766b176 parameterize generate-dev (#3329)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.55.1 to 1.55.3

Commits

6b53348 Release 2024-10-28
784d2d3 Regenerated Clients
7258bd2 Update endpoints model
f322198 Update API model
b65b80a Merge pull request #2852 from RanVaknin/signature-header-parsing-fix
803614d Fixing changelog description and implementation to use TrimSpace
b12c8cf adding changelog
f0caa97 patching GetSignedRequestSignature to cover edge cases with the signature
e058903 drop service/nimble (#2851)
896793a Release 2024-10-25
Additional commits viewable in compare view

Updates github.com/go-resty/resty/v2 from 2.17.1 to 2.17.2

Release notes

Sourced from github.com/go-resty/resty/v2's releases.

v2.17.2

Release Notes

Backport

backport: header deepcopy fix by @jeevatkm in go-resty/resty#1110

Release

release: version bump to v2.17.2 and readme update by @jeevatkm in go-resty/resty#1112

Full Changelog: go-resty/resty@v2.17.1...v2.17.2

Commits

b1b3aaa release: version bump to v2.17.2 and readme update (#1112)
fb4a091 backport: header deepcopy fix (#1110)
See full diff in compare view

Updates github.com/google/go-containerregistry from 0.20.7 to 0.21.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.1

This release fixes a regression in crane introduced in the previous release.

What's Changed

Add WithFileBufferedOpener for file-backed daemon image buffering by @twdamhore in google/go-containerregistry#2214

crane: fix case in auth response json by @aelindeman in google/go-containerregistry#2218

New Contributors

@twdamhore made their first contribution in google/go-containerregistry#2214

@aelindeman made their first contribution in google/go-containerregistry#2218

Full Changelog: google/go-containerregistry@v0.21.0...v0.21.1

v0.21.0

This release updates the minimum Go version to 1.25.6.

What's Changed

fix(mutate): don't skip dir replacements via whiteout in export by @r4f4 in google/go-containerregistry#2191

Improve performance of v1.NewHash by @bmoylan in google/go-containerregistry#2194

Bump the actions group across 1 directory with 4 updates by @dependabot[bot] in google/go-containerregistry#2207

Bump the root-deps group across 1 directory with 7 updates by @dependabot[bot] in google/go-containerregistry#2195

Fix error messages in crane_test.go by @jammie-jelly in google/go-containerregistry#2189

Bump go version across packages to 1.25.6 by @Subserial in google/go-containerregistry#2211

Join go.mod dependency updates by @Subserial in google/go-containerregistry#2212

Bump the go-deps group across 3 directories with 3 updates by @dependabot[bot] in google/go-containerregistry#2213

Disable taint gosec lints by @Subserial in google/go-containerregistry#2215

Update go version used in goreleaser by @Subserial in google/go-containerregistry#2216

New Contributors

@r4f4 made their first contribution in google/go-containerregistry#2191

@jammie-jelly made their first contribution in google/go-containerregistry#2189

Full Changelog: google/go-containerregistry@v0.20.7...v0.21.0

Commits

85f2bf5 crane: fix case in auth response json (#2218)
e971d63 Add WithFileBufferedOpener for file-backed daemon image buffering (#2214)
8e2d6a6 Update go version used in goreleaser (#2216)
b58334f Disable taint gosec lints (#2215)
88b39ed Bump the go-deps group across 3 directories with 3 updates (#2213)
102ac75 join go.mod dependency updates (#2212)
d5817d5 Bump go version across packages to 1.25.6 (#2211)
23f0632 Fix error messages in crane_test.go (#2189)
438abde Bump the root-deps group across 1 directory with 7 updates (#2195)
b6eadd8 Bump the actions group across 1 directory with 4 updates (#2207)
Additional commits viewable in compare view

Updates k8s.io/api from 0.35.0 to 0.35.2

Commits

8a137cd Update dependencies to v0.35.2 tag
See full diff in compare view

Updates k8s.io/apimachinery from 0.35.0 to 0.35.2

Commits

See full diff in compare view

Updates k8s.io/client-go from 0.35.0 to 0.35.2

Commits

a21b329 Update dependencies to v0.35.2 tag
See full diff in compare view

Updates k8s.io/metrics from 0.35.0 to 0.35.2

Commits

0d414fe Update dependencies to v0.35.2 tag
See full diff in compare view

Updates k8s.io/pod-security-admission from 0.35.0 to 0.35.2

Commits

50c5bbd Update dependencies to v0.35.2 tag
See full diff in compare view

Updates sigs.k8s.io/controller-tools from 0.20.0 to 0.20.1

Release notes

Sourced from sigs.k8s.io/controller-tools's releases.

v0.20.1

What's Changed

✨ Support nested pointer to type-aliased slices by @k8s-infra-cherrypick-robot in kubernetes-sigs/controller-tools#1336

Full Changelog: kubernetes-sigs/controller-tools@v0.20.0...v0.20.1

Commits

5d9089d Merge pull request #1336 from k8s-infra-cherrypick-robot/cherry-pick-1331-to-...
852a7e7 update test case
bb8ed8a support nested pointer to type-aliased slices
See full diff in compare view

Updates sigs.k8s.io/gateway-api from 1.4.1 to 1.5.0

Release notes

Sourced from sigs.k8s.io/gateway-api's releases.

v1.5.0

Warning: The Experimental channel CRDs are too large for a standard kubectl apply. To work around this please use kubectl apply --server-side=true instead -- or, even better, use kuberc to make server-side apply the default.

Gateway API v1.5.0

Major Changes Since v1.4.1

Breaking Changes

TLSRoute v1alpha2 and XListenerSet

Since TLSRoute and ListenerSet have graduated to the Standard channel, TLSRoute v1alpha2 and XListenerSet are no longer included in the Experimental channel.

Additionally, note that TLSRoute's CEL validation requires Kubernetes 1.31 or higher.

Upgrades and ValidatingAdmissionPolicy

Gateway API 1.5 introduces a validating admission policy (VAP) called safe-upgrades.gateway.networking.k8s.io to guard against two specific concerns:

It prevents installing Experimental CRDs once you've installed Standard CRDs.

It prevents downgrading to a version prior to 1.5 after you've installed Gateway API 1.5.

These actions can't be known to be safe without detailed knowledge about your application and users. If you need to perform them, delete the safe-upgrades.gateway.networking.k8s.io VAP first.

New Features

In this release, the following major features are moving to the Standard channel and are now considered generally available:

Gateway Client Certificate validation (GEP-91, GEP-3567)

Certificate selection for Gateway TLS origination (GEP-3155)

ListenerSet support (GEP-1713)

HTTPRoute CORS filter (GEP-1767)

TLSRoute v1 (GEP-2643)

Additionally, the ReferenceGrant resource is moving to v1.

Experimental

Gateway/HTTPRoute level authentication (GEP-1494)

Full Changelog

... (truncated)

Commits

3797b63 chore: Update CHANGELOG, version numbers, and approval link for 1.5.0 GA (#4607)
95af031 CHANGELOG and version number updates for 1.5.0-rc.3 (#4605)
b54d6c6 [release-1.5] safe-upgrade: allow installing experimental when no current CRD...
488006c chore: Update for 1.5.0-rc.2 (#4600)
b51d537 conformance: tune and allow configuring polling interval (#4599)
14fdd82 [release-1.5] TLSRoute: Add conformance tests for connection rejection (#4593)
48bfa99 [release-1.5] fix: enable safe-upgrades VAP to permit upgrades of experimenta...
af52d52 [release-1.5] Update CEL validation of allowOrigins (#4595)
64f7573 fix: Update listener set programmed conditions (#4589)
3740ae5 Add missing IgnoreWhitespace: true (#4590)
Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.35.0 to 0.35.2

Commits

79000f4 Update dependencies to v0.35.2 tag
09f0433 Merge pull request #136141 from shwetha-s-poojary/automated-cherry-pick-of-#1...
0089f33 Fixes the flaky test (Issue #132953)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

danail-branekov · 2026-02-27T14:54:45Z

@dependabot rebase

Bumps the gomod group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.7` | `1.32.10` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.55.1` | `1.55.3` | | [github.com/go-resty/resty/v2](https://github.com/go-resty/resty) | `2.17.1` | `2.17.2` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.7` | `0.21.1` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.35.0` | `0.35.2` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.35.0` | `0.35.2` | | [k8s.io/metrics](https://github.com/kubernetes/metrics) | `0.35.0` | `0.35.2` | | [k8s.io/pod-security-admission](https://github.com/kubernetes/pod-security-admission) | `0.35.0` | `0.35.2` | | [sigs.k8s.io/controller-tools](https://github.com/kubernetes-sigs/controller-tools) | `0.20.0` | `0.20.1` | | [sigs.k8s.io/gateway-api](https://github.com/kubernetes-sigs/gateway-api) | `1.4.1` | `1.5.0` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.35.0` | `0.35.2` | Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.7 to 1.32.10 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.32.7...config/v1.32.10) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.55.1 to 1.55.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.55.1...service/ssm/v1.55.3) Updates `github.com/go-resty/resty/v2` from 2.17.1 to 2.17.2 - [Release notes](https://github.com/go-resty/resty/releases) - [Commits](go-resty/resty@v2.17.1...v2.17.2) Updates `github.com/google/go-containerregistry` from 0.20.7 to 0.21.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.20.7...v0.21.1) Updates `k8s.io/api` from 0.35.0 to 0.35.2 - [Commits](kubernetes/api@v0.35.0...v0.35.2) Updates `k8s.io/apimachinery` from 0.35.0 to 0.35.2 - [Commits](kubernetes/apimachinery@v0.35.0...v0.35.2) Updates `k8s.io/client-go` from 0.35.0 to 0.35.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.0...v0.35.2) Updates `k8s.io/metrics` from 0.35.0 to 0.35.2 - [Commits](kubernetes/metrics@v0.35.0...v0.35.2) Updates `k8s.io/pod-security-admission` from 0.35.0 to 0.35.2 - [Commits](kubernetes/pod-security-admission@v0.35.0...v0.35.2) Updates `sigs.k8s.io/controller-tools` from 0.20.0 to 0.20.1 - [Release notes](https://github.com/kubernetes-sigs/controller-tools/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-tools/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-tools@v0.20.0...v0.20.1) Updates `sigs.k8s.io/gateway-api` from 1.4.1 to 1.5.0 - [Release notes](https://github.com/kubernetes-sigs/gateway-api/releases) - [Changelog](https://github.com/kubernetes-sigs/gateway-api/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/gateway-api@v1.4.1...v1.5.0) Updates `k8s.io/apiextensions-apiserver` from 0.35.0 to 0.35.2 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.35.0...v0.35.2) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.55.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/go-resty/resty/v2 dependency-version: 2.17.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: k8s.io/api dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/apimachinery dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/client-go dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/metrics dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/pod-security-admission dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: sigs.k8s.io/controller-tools dependency-version: 0.20.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: sigs.k8s.io/gateway-api dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 27, 2026

dependabot bot force-pushed the dependabot/go_modules/gomod-b3f416c1c7 branch from a6788a9 to 5e203d8 Compare February 27, 2026 14:56

danail-branekov approved these changes Feb 27, 2026

View reviewed changes

danail-branekov merged commit 8809f71 into main Feb 27, 2026
11 checks passed

danail-branekov deleted the dependabot/go_modules/gomod-b3f416c1c7 branch February 27, 2026 16:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the gomod group across 1 directory with 12 updates#4312

Bump the gomod group across 1 directory with 12 updates#4312
danail-branekov merged 1 commit intomainfrom
dependabot/go_modules/gomod-b3f416c1c7

dependabot bot commented on behalf of github Feb 27, 2026 •

edited

Loading

Uh oh!

danail-branekov commented Feb 27, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Feb 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.17.2

Release Notes

Backport

Release

v0.21.1

What's Changed

New Contributors

v0.21.0

What's Changed

New Contributors

v0.20.1

What's Changed

v1.5.0

Gateway API v1.5.0

Major Changes Since v1.4.1

Breaking Changes

TLSRoute v1alpha2 and XListenerSet

Upgrades and ValidatingAdmissionPolicy

New Features

Experimental

Full Changelog

Uh oh!

danail-branekov commented Feb 27, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Feb 27, 2026 •

edited

Loading

TLSRoute `v1alpha2` and XListenerSet