Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 14, 2025

Bumps the go group with 18 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.40.1 1.41.0
github.com/aws/aws-sdk-go-v2/config 1.32.3 1.32.5
github.com/aws/aws-sdk-go-v2/credentials 1.19.3 1.19.5
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.20.13 1.20.15
github.com/aws/aws-sdk-go-v2/service/ecr 1.54.2 1.54.4
github.com/aws/aws-sdk-go-v2/service/s3 1.93.0 1.93.2
github.com/docker/cli 29.1.2+incompatible 29.1.3+incompatible
github.com/onsi/ginkgo/v2 2.27.2 2.27.3
github.com/onsi/gomega 1.38.2 1.38.3
golang.org/x/net 0.47.0 0.48.0
golang.org/x/oauth2 0.33.0 0.34.0
golang.org/x/text 0.31.0 0.32.0
helm.sh/helm/v3 3.19.2 3.19.4
k8s.io/api 0.34.2 0.34.3
k8s.io/apiextensions-apiserver 0.34.2 0.34.3
k8s.io/apimachinery 0.34.2 0.34.3
k8s.io/cli-runtime 0.34.2 0.34.3
k8s.io/client-go 0.34.2 0.34.3

Updates github.com/aws/aws-sdk-go-v2 from 1.40.1 to 1.41.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.3 to 1.32.5

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.3 to 1.19.5

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.20.13 to 1.20.15

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.54.2 to 1.54.4

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.93.0 to 1.93.2

Commits

Updates github.com/docker/cli from 29.1.2+incompatible to 29.1.3+incompatible

Commits
  • f52814d Merge pull request #6705 from vvoland/list-fix
  • 0f03c31 image/list: Fix dangling=false handling
  • 1e25906 cli/tree: Remove unused all field
  • 4d6fc33 Merge pull request #6704 from vvoland/list-fix
  • 09a4664 image/tree: Add golden test
  • 0d88411 image/tree: Remove --all flag check for untagged images in non-expanded view
  • b315983 image/tree: Fix width calculation for untagged images
  • 150a25b image/tree: Extract untagged image name to const
  • 67f5e34 image: Fix dangling image detection with graphdrivers
  • d96b786 Merge pull request #6702 from thaJeztah/bump_compress
  • Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.27.3

2.27.3

Fixes

report exit result in case of failure [1c9f356] fix data race [ece19c8]

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.27.3

Fixes

report exit result in case of failure [1c9f356] fix data race [ece19c8]

Commits

Updates github.com/onsi/gomega from 1.38.2 to 1.38.3

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.38.3

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

Commits
  • a3ca2ca v1.38.3
  • 4dada36 fix failing have http tests
  • d40c691 make string formatitng more consistent for users who use format.Object directly
  • 2a37b46 doc: fix typos
  • ee26170 docs: fix HaveValue example
  • cc85c05 Bump actions/setup-go from 5 to 6 (#866)
  • 8905788 Bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.3 (#865)
  • 67552c5 chore: apply fixes from Go modernize command
  • See full diff in compare view

Updates golang.org/x/net from 0.47.0 to 0.48.0

Commits
  • 35e1306 go.mod: update golang.org/x dependencies
  • 7c36036 http2, webdav, websocket: fix %q verb uses with wrong type
  • ec11ecc trace: fix data race in RenderEvents
  • bff14c5 http2: don't PING a responsive server when resetting a stream
  • 88a6421 dns/dnsmessage: avoid use of "strings" and "math" in dns/dnsmessage
  • 123d099 http2: support net/http.Transport.NewClientConn
  • 346cc61 webdav: relax test to check for any redirect status, not just 301
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.33.0 to 0.34.0

Commits

Updates golang.org/x/text from 0.31.0 to 0.32.0

Commits
  • 0dd57a6 go.mod: update golang.org/x dependencies
  • 087616b transform: fix %q verb use with wrong type
  • 16f85a7 all: eliminate vet diagnostics
  • See full diff in compare view

Updates helm.sh/helm/v3 from 3.19.2 to 3.19.4

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.19.4 is a security fix for a Go CVE in the previous tag. This patch release rebuilds the Helm v3.19.3 release with the latest Go toolchain, to fix the Go CVE. Users are encouraged to upgrade.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.5 and 4.0.4 are the next patch releases and will be on January 14, 2026
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • Use latest patch release of Go in releases 7cfb6e486dac026202556836bb910c37d847793e (Matt Farina)
  • chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 59c951f309511dcb017900b6a19836e5bcbade04 (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin d45f3f15dfbc05320add596102ce3ae220825ff1 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 d4595449c7bd2a82f1ae23b11711f2b7b219ed32 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 becd3876eb126cb83d8571e6e3826645e941d400 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates edb1579fd0d9ed81fb451ce03c68bd6365374173 (dependabot[bot])

Helm v3.19.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

... (truncated)

Commits
  • 7cfb6e4 Use latest patch release of Go in releases
  • 59c951f chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0
  • d45f3f1 chore(deps): bump github.com/cyphar/filepath-securejoin
  • d459544 chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0
  • becd387 chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0
  • edb1579 chore(deps): bump the k8s-io group with 7 updates
  • See full diff in compare view

Updates k8s.io/api from 0.34.2 to 0.34.3

Commits

Updates k8s.io/apiextensions-apiserver from 0.34.2 to 0.34.3

Commits

Updates k8s.io/apimachinery from 0.34.2 to 0.34.3

Commits

Updates k8s.io/cli-runtime from 0.34.2 to 0.34.3

Commits

Updates k8s.io/client-go from 0.34.2 to 0.34.3

Commits
  • 3892804 Update dependencies to v0.34.3 tag
  • ab04e77 Merge pull request #135592serathius/automated-cherry-pick-of-#135580
  • 25da701 Use transformer in consistency checker
  • 0c76ee5 Add unit tests for Data Consistency Detector
  • cc3d9d0 Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO ...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Dec 14, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 14, 2025 08:10
@dependabot dependabot bot added kind/dependency dependency update, etc. kind/chore chore, maintenance, etc. labels Dec 14, 2025
@github-actions github-actions bot added the size/m Medium label Dec 14, 2025
@frewilhelm
Copy link
Contributor

@dependabot rebase

Bumps the go group with 18 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.40.1` | `1.41.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.3` | `1.32.5` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.3` | `1.19.5` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.20.13` | `1.20.15` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.54.2` | `1.54.4` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.93.0` | `1.93.2` |
| [github.com/docker/cli](https://github.com/docker/cli) | `29.1.2+incompatible` | `29.1.3+incompatible` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.27.2` | `2.27.3` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.38.2` | `1.38.3` |
| [golang.org/x/net](https://github.com/golang/net) | `0.47.0` | `0.48.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.33.0` | `0.34.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.31.0` | `0.32.0` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.2` | `3.19.4` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.34.2` | `0.34.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.2` | `0.34.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.34.2` | `0.34.3` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.34.2` | `0.34.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.2` | `0.34.3` |


Updates `github.com/aws/aws-sdk-go-v2` from 1.40.1 to 1.41.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.40.1...v1.41.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.3 to 1.32.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.32.3...v1.32.5)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.3 to 1.19.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/pi/v1.19.3...service/m2/v1.19.5)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.20.13 to 1.20.15
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/emr/v1.20.13...service/emr/v1.20.15)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.54.2 to 1.54.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.54.2...service/s3/v1.54.4)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.93.0 to 1.93.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.93.0...service/s3/v1.93.2)

Updates `github.com/docker/cli` from 29.1.2+incompatible to 29.1.3+incompatible
- [Commits](docker/cli@v29.1.2...v29.1.3)

Updates `github.com/onsi/ginkgo/v2` from 2.27.2 to 2.27.3
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.27.2...v2.27.3)

Updates `github.com/onsi/gomega` from 1.38.2 to 1.38.3
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.2...v1.38.3)

Updates `golang.org/x/net` from 0.47.0 to 0.48.0
- [Commits](golang/net@v0.47.0...v0.48.0)

Updates `golang.org/x/oauth2` from 0.33.0 to 0.34.0
- [Commits](golang/oauth2@v0.33.0...v0.34.0)

Updates `golang.org/x/text` from 0.31.0 to 0.32.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.31.0...v0.32.0)

Updates `helm.sh/helm/v3` from 3.19.2 to 3.19.4
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.19.2...v3.19.4)

Updates `k8s.io/api` from 0.34.2 to 0.34.3
- [Commits](kubernetes/api@v0.34.2...v0.34.3)

Updates `k8s.io/apiextensions-apiserver` from 0.34.2 to 0.34.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.34.2...v0.34.3)

Updates `k8s.io/apimachinery` from 0.34.2 to 0.34.3
- [Commits](kubernetes/apimachinery@v0.34.2...v0.34.3)

Updates `k8s.io/cli-runtime` from 0.34.2 to 0.34.3
- [Commits](kubernetes/cli-runtime@v0.34.2...v0.34.3)

Updates `k8s.io/client-go` from 0.34.2 to 0.34.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.2...v0.34.3)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-version: 1.20.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.54.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.93.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/docker/cli
  dependency-version: 29.1.3+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.27.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/text
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.19.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/api
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/cli-runtime
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-21f0993544 branch from 5ad46dd to d56327d Compare December 15, 2025 09:34
@frewilhelm frewilhelm enabled auto-merge (squash) December 15, 2025 09:35
@frewilhelm frewilhelm merged commit 83baa85 into main Dec 15, 2025
26 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/go-21f0993544 branch December 15, 2025 09:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. size/m Medium

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants