Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 21, 2025

Bumps the all group with 13 updates in the /acceptance directory:

Package From To
cuelang.org/go 0.11.1 0.12.0
github.com/enterprise-contract/enterprise-contract-controller/api 0.1.79 0.1.84
github.com/evanphx/json-patch/v5 5.9.0 5.9.11
github.com/gkampitakis/go-snaps 0.5.7 0.5.11
github.com/go-git/go-billy/v5 5.6.0 5.6.2
github.com/go-git/go-git/v5 5.13.0 5.14.0
github.com/google/go-containerregistry 0.20.2 0.20.3
github.com/otiai10/copy 1.14.0 1.14.1
github.com/sigstore/cosign/v2 2.4.1 2.4.3
github.com/tektoncd/cli 0.38.0 0.40.0
github.com/testcontainers/testcontainers-go 0.34.0 0.35.0
sigs.k8s.io/kind 0.26.0 0.27.0
sigs.k8s.io/kustomize/api 0.18.0 0.19.0

Updates cuelang.org/go from 0.11.1 to 0.12.0

Updates github.com/enterprise-contract/enterprise-contract-controller/api from 0.1.79 to 0.1.84

Release notes

Sourced from github.com/enterprise-contract/enterprise-contract-controller/api's releases.

API Release api/v0.1.84

What's Changed

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.83...api/v0.1.84

API Release api/v0.1.83

What's Changed

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.82...api/v0.1.83

API Release api/v0.1.82

What's Changed

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.81...api/v0.1.82

API Release api/v0.1.81

What's Changed

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.80...api/v0.1.81

API Release api/v0.1.80

What's Changed

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.79...api/v0.1.80

Commits
  • 14dbd07 Merge pull request #487 from enterprise-contract/dependabot/github_actions/ac...
  • 9f76a92 Merge pull request #486 from enterprise-contract/dependabot/github_actions/gi...
  • 47475ab Bump actions/download-artifact from 4.1.8 to 4.1.9
  • e357751 Bump github/codeql-action from 3.28.10 to 3.28.11
  • 6f293a9 Merge pull request #470 from enterprise-contract/dependabot/github_actions/ac...
  • 3bbb0b4 Merge pull request #480 from enterprise-contract/dependabot/github_actions/ac...
  • c84deab Merge pull request #481 from enterprise-contract/dependabot/github_actions/gi...
  • 0a8bb0c Merge pull request #482 from enterprise-contract/dependabot/github_actions/os...
  • cb28e70 Merge pull request #485 from enterprise-contract/dependabot/github_actions/co...
  • 0c1d3d1 Bump codecov/codecov-action from 5.1.2 to 5.4.0
  • Additional commits viewable in compare view

Updates github.com/evanphx/json-patch/v5 from 5.9.0 to 5.9.11

Release notes

Sourced from github.com/evanphx/json-patch/v5's releases.

v5.9.11

What's Changed

Full Changelog: evanphx/json-patch@v5.9.10...v5.9.11

v5.9.10

What's Changed

New Contributors

Full Changelog: evanphx/json-patch@v5.9.0...v5.9.10

Commits
  • 84a4bb1 Merge pull request #209 from skitt/export-errs-v5
  • 7a7a88a Export errBadJSONDoc and errBadJSONPatch errors
  • bd18525 Upgrade go-flags
  • 42f26cb Fix spacing
  • 0a3482b Merge pull request #206 from koba1t/remove_unmaintained_error_pkg
  • 106306d remove unmaintained errors pkg
  • e7cfbbb Merge pull request #203 from skitt/drop-gopkgin-v5
  • 61e1ad7 Drop the reference to gopkg.in for v5
  • See full diff in compare view

Updates github.com/gkampitakis/go-snaps from 0.5.7 to 0.5.11

Release notes

Sourced from github.com/gkampitakis/go-snaps's releases.

v0.5.11

What's Changed

New Contributors

Full Changelog: gkampitakis/go-snaps@v0.5.10...v0.5.11

v0.5.10

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.9...v0.5.10

v0.5.9

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.8...v0.5.9

Kudos to @​orloffv for this issue gkampitakis/go-snaps#116

v0.5.8

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.7...v0.5.8

Commits

Updates github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.2

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.6.2

What's Changed

New Contributors

Full Changelog: go-git/go-billy@v5.6.1...v5.6.2

v5.6.1

What's Changed

Full Changelog: go-git/go-billy@v5.6.0...v5.6.1

Commits
  • 9f8b16d Merge pull request #103 from pjbgf/bump-deps
  • 783f58c build: Bump dependencies
  • 0009381 Merge pull request #102 from JAORMX/iofs-extra-interfaces-v5
  • 21beb15 Enable the iofs adapter to also return other interfaces from io/fs
  • a6c6b50 Merge pull request #95 from pjbgf/pre-release
  • f4615d3 build: Remove test_js workflow
  • ae8b61b build: Bump workflows Go versions
  • b412339 build: Align dependabot settings with go-git
  • d982317 build: Bump Go to 1.21 and dependencies
  • 9ca623c Merge pull request #91 from go-git/dependabot/github_actions/github/codeql-ac...
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.13.0 to 5.14.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.14.0

What's Changed

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/[email protected] which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: go-git/go-git@v5.13.2...v5.14.0

v5.13.2

What's Changed

Full Changelog: go-git/go-git@v5.13.1...v5.13.2

v5.13.1

What's Changed

Full Changelog: go-git/go-git@v5.13.0...v5.13.1

Commits
  • 863c621 Merge pull request #1436 from pjbgf/v5-bumps
  • 2e69e81 build: Bump dependencies
  • b2c1ec9 build: Bump Go versions
  • 2c68247 Merge pull request #1383 from go-git/dependabot/go_modules/github.com/ProtonM...
  • d462c2e Merge pull request #1359 from BeChris/issue1150-v5
  • 32ac23a Merge pull request #1392 from go-git/dependabot/go_modules/github.com/pjbgf/s...
  • 93e635a build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2
  • b2bb975 git: worktree_status, took into account code review remarks
  • 518ac88 git: worktree_status, fix adding dot slash files to working tree (backported ...
  • 21b3150 build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.20.2 to 0.20.3

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.3

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.2...v0.20.3

Commits

Updates github.com/otiai10/copy from 1.14.0 to 1.14.1

Commits
  • 5ef5923 Revert "CopyMethod" since it's not ready
  • 49b0b59 Merge pull request #164 from eth-p/feat-copymethod-api
  • f530620 ci: Allow triggering Go workflow manually
  • b4dd789 refactor: Split common code out of CopyBytes
  • 9205813 feat: Add FileCopyMethod option / API
  • 2f93b8f Merge pull request #159 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • 87072f3 Bump golang.org/x/sys from 0.23.0 to 0.24.0
  • d0690cb Merge pull request #158 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • b87119d Bump golang.org/x/sys from 0.22.0 to 0.23.0
  • 355527c Merge pull request #157 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • Additional commits viewable in compare view

Updates github.com/sigstore/cosign/v2 from 2.4.1 to 2.4.3

Release notes

Sourced from github.com/sigstore/cosign/v2's releases.

v2.4.3

Features

  • Bump sigstore/sigstore to support KMS plugins (#4073)
  • Enable fetching signatures without remote get. (#4047)
  • Feat/file flag completion improvements (#4028)
  • Update builder to use go1.23.6 (#4052)

Bug Fixes

  • fix parsing error in --only for cosign copy (#4049)

Cleanup

  • Refactor verifyNewBundle into library function (#4013)
  • fix comment typo and imports order (#4061)
  • sync comment with parameter name in function signature (#4063)
  • sort properly Go imports (#4071)

Contributors

  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • Cody Soyland
  • Dmitry Savintsev
  • Hayden B
  • Tomasz Janiszewski
  • Ville Skyttä

v2.4.2

Features

  • Updated open-policy-agent to 1.1.0 library (#4036)
    • Note that only Rego v0 policies are supported at this time
  • Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  • Add support for verifying root checksum in cosign initialize (#3953)
  • Detect if user supplied a valid protobuf bundle (#3931)
  • Add a log message if user doesn't provide --trusted-root (#3933)
  • Support mTLS towards container registry (#3922)
  • Add bundle create helper command (#3901)
  • Add trusted-root create helper command (#3876)

Bug Fixes

  • fix: set tls config while retaining other fields from default http transport (#4007)
  • policy fuzzer: ignore known panics (#3993)
  • Fix for multiple WithRemote options (#3982)
  • Add nightly conformance test workflow (#3979)
  • Fix copy --only for signatures + update/align docs (#3904)

... (truncated)

Changelog

Sourced from github.com/sigstore/cosign/v2's changelog.

v2.4.3

Features

  • Bump sigstore/sigstore to support KMS plugins (#4073)
  • Enable fetching signatures without remote get. (#4047)
  • Feat/file flag completion improvements (#4028)
  • Update builder to use go1.23.6 (#4052)

Bug Fixes

  • fix parsing error in --only for cosign copy (#4049)

Cleanup

  • Refactor verifyNewBundle into library function (#4013)
  • fix comment typo and imports order (#4061)
  • sync comment with parameter name in function signature (#4063)
  • sort properly Go imports (#4071)

Contributors

  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • Cody Soyland
  • Dmitry Savintsev
  • Hayden B
  • Tomasz Janiszewski
  • Ville Skyttä

v2.4.2

Features

  • Updated open-policy-agent to 1.1.0 library (#4036)
    • Note that only Rego v0 policies are supported at this time
  • Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  • Add support for verifying root checksum in cosign initialize (#3953)
  • Detect if user supplied a valid protobuf bundle (#3931)
  • Add a log message if user doesn't provide --trusted-root (#3933)
  • Support mTLS towards container registry (#3922)
  • Add bundle create helper command (#3901)
  • Add trusted-root create helper command (#3876)

Bug Fixes

  • fix: set tls config while retaining other fields from default http transport (#4007)
  • policy fuzzer: ignore known panics (#3993)
  • Fix for multiple WithRemote options (#3982)
  • Add nightly conformance test workflow (#3979)

... (truncated)

Commits
  • 6a7abbf chore(deps): bump the gomod group across 1 directory with 4 updates (#4074)
  • 0b69cc5 chore(deps): bump github.com/buildkite/agent/v3 from 3.91.0 to 3.92.1 (#4066)
  • 3564b3e chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4065)
  • d6aeeb2 Enable fetching signatures without remote get. (#4047)
  • 26d0ee5 Bump sigstore/sigstore to support KMS plugins (#4073)
  • 5181623 chore(deps): bump golangci/golangci-lint-action in the actions group (#4070)
  • c1b1a78 chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (#4067)
  • a0b20b7 sort properly Go imports (#4071)
  • b4be5f7 chore(deps): bump google.golang.org/api from 0.220.0 to 0.221.0 (#4068)
  • 01fde81 sync comment with parameter name in function signature (#4063)
  • Additional commits viewable in compare view

Updates github.com/sigstore/rekor from 1.3.6 to 1.3.9

Release notes

Sourced from github.com/sigstore/rekor's releases.

v1.3.9

Changelog

  • f3db95b2bb18be7e1904fa25d1bcdb7d55caa73a Cache checkpoint for inactive shards (#2332)
  • f875aa2d39b2bcef0e84e43a6153447bed0077f6 Support per-shard signing keys (#2330)

Thanks for all contributors!

v1.3.8

Changelog

Please see https://github.com/sigstore/rekor/blob/main/CHANGELOG.md for changes included in this release.

New Contributors

Full Changelog: sigstore/rekor@v1.3.7...v1.3.8

v1.3.7

Changelog

Please see https://github.com/sigstore/rekor/blob/main/CHANGELOG.md for changes included in this release.

Thanks for all contributors!

Changelog

Sourced from github.com/sigstore/rekor's changelog.

v1.3.9

Features

  • Cache checkpoint for inactive shards (#2332)
  • Support per-shard signing keys (#2330)

Contributors

  • Hayden B

v1.3.8

Bug Fixes

  • fix zizmor issues (#2298)
  • remove unneeded value in log message (#2282)

Quality Enhancements

  • chore: relax go directive to permit 1.22.x
  • fetch minisign from homebrew instead of custom ppa (#2329)
  • fix(ci): simplify GOVERSION extraction
  • chore(deps): bump actions pins to latest
  • Updates go and golangci-lint (#2302)
  • update builder to use go1.23.4 (#2301)
  • clean up spaces
  • log request body on 500 error to aid debugging (#2283)

Contributors

  • Appu Goundan
  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • Dominic Evans
  • sgpinkus

v1.3.7

New Features

  • log request body on 500 error to aid debugging (#2283)
  • Add support for signing with Tink keyset (#2228)
  • Add public key hash check in Signed Note verification (#2214)
  • update Trillian TLS configuration (#2202)
  • Add TLS support for Trillian server (#2164)
  • Replace docker-compose with plugin if available (#2153)
  • Add flags to backfill script (#2146)
  • Unset DisableKeepalive for backfill HTTP client (#2137)
  • Add script to delete indexes from Redis (#2120)

... (truncated)

Commits
  • b67ee82 build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.0
  • 40f29ba build(deps): Bump golang from 51a6466 to 8c10f21
  • 2497b42 build(deps): Bump google/cloud-sdk from 506.0.0 to 507.0.0
  • ac42c19 build(deps): Bump google.golang.org/api from 0.217.0 to 0.218.0
  • 10e8115 build(deps): Bump the all group with 3 updates
  • 2f182a1 build(deps): Bump google.golang.org/protobuf in the all group
  • f3db95b Cache checkpoint for inactive shards (#2332)
  • 1cb78ca build(deps): Bump google/cloud-sdk from 505.0.0 to 506.0.0
  • b68f6bb build(deps): Bump google.golang.org/api from 0.216.0 to 0.217.0
  • 15c696c build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.2.0 to 2.3.0
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore from 1.8.9 to 1.8.15

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.8.15

What's Changed

Full Changelog: sigstore/sigstore@v1.8.14...v1.8.15

v1.8.14

What's Changed

This is the same content as v1.8.13, with a CI/CD fix.

v1.8.13

What's Changed

Full Changelog: sigstore/sigstore@v1.8.12...v1.8.13

v1.8.12

What's Changed

... (truncated)

Commits
  • 0c5004e build(deps): Bump golang.org/x/oauth2 from 0.25.0 to 0.26.0 (#1968)
  • 08ccf77 build(deps): Bump github.com/aws/aws-sdk-go-v2 in /pkg/signature/kms/aws (#1970)
  • 9720b04 build(deps): Bump golangci/golangci-lint-action (#1984)
  • ce0fa17 fix: cliplugin: return ErrorProviderNotFound when calling Get with a path (#1...
  • a5ada3f check concrete type for non-nil (#1983)
  • 75b85e2 pkg/signature: fix RSA PSS 3072 key size in algorithm registry (#1981)
  • 351b102 export variable (#1978)
  • 0a1ec6f build(deps): Bump golang.org/x/oauth2 in /pkg/signature/kms/gcp (#1973)
  • a806b7e build(deps): Bump github.com/hashicorp/vault/api (#1974)
  • a235f11 build(deps): Bump localstack/localstack in /test/e2e in the all group (#1965)
  • Additional commits viewable in compare view

Updates github.com/tektoncd/cli from 0.38.0 to 0.40.0

Release notes

Sourced from github.com/tektoncd/cli's releases.

v0.40.0 Release 🎉

This release comes with support for Pipelines LTS v0.68.0, Triggers v0.31.0, Chains v0.24.0 and Hub v1.20.0 CLI. This release contains bug fix around logs and list commands of pipelinerun and taskrun.

ChangeLog 📋

Fixes 🐛

Misc 🔨

Bumps the all group with 13 updates in the /acceptance directory:

| Package | From | To |
| --- | --- | --- |
| cuelang.org/go | `0.11.1` | `0.12.0` |
| [github.com/enterprise-contract/enterprise-contract-controller/api](https://github.com/enterprise-contract/enterprise-contract-controller) | `0.1.79` | `0.1.84` |
| [github.com/evanphx/json-patch/v5](https://github.com/evanphx/json-patch) | `5.9.0` | `5.9.11` |
| [github.com/gkampitakis/go-snaps](https://github.com/gkampitakis/go-snaps) | `0.5.7` | `0.5.11` |
| [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.0` | `5.6.2` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.0` | `5.14.0` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.2` | `0.20.3` |
| [github.com/otiai10/copy](https://github.com/otiai10/copy) | `1.14.0` | `1.14.1` |
| [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.4.1` | `2.4.3` |
| [github.com/tektoncd/cli](https://github.com/tektoncd/cli) | `0.38.0` | `0.40.0` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.34.0` | `0.35.0` |
| [sigs.k8s.io/kind](https://github.com/kubernetes-sigs/kind) | `0.26.0` | `0.27.0` |
| [sigs.k8s.io/kustomize/api](https://github.com/kubernetes-sigs/kustomize) | `0.18.0` | `0.19.0` |



Updates `cuelang.org/go` from 0.11.1 to 0.12.0

Updates `github.com/enterprise-contract/enterprise-contract-controller/api` from 0.1.79 to 0.1.84
- [Release notes](https://github.com/enterprise-contract/enterprise-contract-controller/releases)
- [Commits](enterprise-contract/enterprise-contract-controller@api/v0.1.79...api/v0.1.84)

Updates `github.com/evanphx/json-patch/v5` from 5.9.0 to 5.9.11
- [Release notes](https://github.com/evanphx/json-patch/releases)
- [Commits](evanphx/json-patch@v5.9.0...v5.9.11)

Updates `github.com/gkampitakis/go-snaps` from 0.5.7 to 0.5.11
- [Release notes](https://github.com/gkampitakis/go-snaps/releases)
- [Commits](gkampitakis/go-snaps@v0.5.7...v0.5.11)

Updates `github.com/go-git/go-billy/v5` from 5.6.0 to 5.6.2
- [Release notes](https://github.com/go-git/go-billy/releases)
- [Commits](go-git/go-billy@v5.6.0...v5.6.2)

Updates `github.com/go-git/go-git/v5` from 5.13.0 to 5.14.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.13.0...v5.14.0)

Updates `github.com/google/go-containerregistry` from 0.20.2 to 0.20.3
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.20.2...v0.20.3)

Updates `github.com/otiai10/copy` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/otiai10/copy/releases)
- [Commits](otiai10/copy@v1.14.0...v1.14.1)

Updates `github.com/sigstore/cosign/v2` from 2.4.1 to 2.4.3
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](sigstore/cosign@v2.4.1...v2.4.3)

Updates `github.com/sigstore/rekor` from 1.3.6 to 1.3.9
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](sigstore/rekor@v1.3.6...v1.3.9)

Updates `github.com/sigstore/sigstore` from 1.8.9 to 1.8.15
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.8.9...v1.8.15)

Updates `github.com/tektoncd/cli` from 0.38.0 to 0.40.0
- [Release notes](https://github.com/tektoncd/cli/releases)
- [Changelog](https://github.com/tektoncd/cli/blob/main/releases.md)
- [Commits](tektoncd/cli@v0.38.0...v0.40.0)

Updates `github.com/tektoncd/pipeline` from 0.66.0 to 0.68.0
- [Release notes](https://github.com/tektoncd/pipeline/releases)
- [Changelog](https://github.com/tektoncd/pipeline/blob/main/releases.md)
- [Commits](tektoncd/pipeline@v0.66.0...v0.68.0)

Updates `github.com/testcontainers/testcontainers-go` from 0.34.0 to 0.35.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.34.0...v0.35.0)

Updates `golang.org/x/exp` from 0.0.0-20240823005443-9b4947da3948 to 0.0.0-20241108190413-2d47ceb2692f
- [Commits](https://github.com/golang/exp/commits)

Updates `k8s.io/api` from 0.31.4 to 0.32.2
- [Commits](kubernetes/api@v0.31.4...v0.32.2)

Updates `k8s.io/apimachinery` from 0.31.4 to 0.32.2
- [Commits](kubernetes/apimachinery@v0.31.4...v0.32.2)

Updates `k8s.io/client-go` from 0.31.4 to 0.32.2
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.31.4...v0.32.2)

Updates `sigs.k8s.io/kind` from 0.26.0 to 0.27.0
- [Release notes](https://github.com/kubernetes-sigs/kind/releases)
- [Commits](kubernetes-sigs/kind@v0.26.0...v0.27.0)

Updates `sigs.k8s.io/kustomize/api` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.18.0...api/v0.19.0)

Updates `sigs.k8s.io/kustomize/kyaml` from 0.18.1 to 0.19.0
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@kyaml/v0.18.1...api/v0.19.0)

---
updated-dependencies:
- dependency-name: cuelang.org/go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/enterprise-contract/enterprise-contract-controller/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/evanphx/json-patch/v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/gkampitakis/go-snaps
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-git/go-billy/v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/google/go-containerregistry
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/otiai10/copy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/cosign/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/rekor
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/tektoncd/cli
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/tektoncd/pipeline
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/exp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sigs.k8s.io/kind
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sigs.k8s.io/kustomize/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sigs.k8s.io/kustomize/kyaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 21, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jun 16, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 16, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/acceptance/all-ecac36751f branch June 16, 2025 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant