chore: update dependencies #181

renovate · 2025-01-20T03:34:26Z

Update Request | Renovate Bot

This PR contains the following updates:

Package	Type	Update	Change
actions/stale	action	major	`v9.1.0` -> `v10.0.0`
github.com/anchore/syft	require	minor	`v1.28.0` -> `v1.33.0`
github.com/dsseng/syft	replace	major	`v0.0.0-20250703101014-f39c35d156d9` -> `v1.28.0`
github.com/emicklei/dot	require	patch	`v1.9.0` -> `v1.9.1`
github.com/moby/buildkit	require	minor	`v0.23.2` -> `v0.24.0`
github.com/spf13/cobra	require	minor	`v1.9.1` -> `v1.10.1`
github.com/stretchr/testify	require	minor	`v1.10.0` -> `v1.11.1`
golang.org/x/sync	require	minor	`v0.16.0` -> `v0.17.0`

Release Notes

actions/stale (actions/stale)

`v10.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in #1279
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. Release Notes

Enhancement

Introducing sort-by option by @suyashgaonkar in #1254

Dependency Upgrades

Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot[bot] in #1186
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot[bot] in #1201
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in #1226
Upgrade @action/cache from 4.0.2 to 4.0.3 by @suyashgaonkar in #1233
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #1251
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #1277

Documentation changes

Changelog update for recent releases by @suyashgaonkar in #1224
Permissions update in Readme by @ghadimir in #1248

New Contributors

@suyashgaonkar made their first contribution in #1224
@GhadimiR made their first contribution in #1248
@gowridurgad made their first contribution in #1277
@salmanmkc made their first contribution in #1279

Full Changelog: actions/stale@v9...v10.0.0

anchore/syft (github.com/anchore/syft)

`v1.33.0`

Compare Source

Added Features

Modify RpmDBEntry to include modularityLabel for cyclonedx [#4212 @sfc-gh-rmaj]
Add locations onto packages read from Java native image SBOMs [#4186 @rudsberg]

(Full Changelog)

`v1.32.0`

Compare Source

Added Features

Catalog entire build list for Go projects, not just packages listed in go.mod [#432 #4127 @spiffcs]
package.json authors keyword parsing [#2250 #4003 @popey]
Conda ecosystem support (basic) [#4002 @SimeonStoykovQC]

Bug Fixes

When scanning the FFmpeg binary with Syft a new package is now added [#3988 #3994 @popey]
Warn loudly if SQLite driver is not present when needed [#3234 #4150 @kzantow]

Additional Changes

Update dependencies to use go.yaml.in/yaml [#4157 @n-bes]

(Full Changelog)

`v1.31.0`

Compare Source

Added Features

Option to set PackageSupplier in root of SPDX document generated by CLI [#3098 #4131 @spiffcs]

Bug Fixes

closed reader during java binary detection [#4129 @kzantow]
support multiple letters in openssl patch version [#4106 @honigbot]
Can not have license ID [#1964 #4132 @spiffcs]
Syft sometimes reports URL for license value when scanning JARs with a URL in Bundle-License field of manifest [#3186]

(Full Changelog)

`v1.30.0`

Compare Source

Added Features

add binary classifier for hashicorp vault [#4121 @willmurphyscode]

Bug Fixes

fix: update nondeterministic Java archive cataloging and improve groupID [#3521 #4118 @kzantow]

(Full Changelog)

`v1.29.1`

Compare Source

Bug Fixes

Missing license information for tzdata [#4102]
Improve JVM Scan Accuracy for JDK and JRE Detection [#4071 #4046 @kzantow]
Azul JDK classified as Oracle JRE [#3893 #4046 @kzantow]

(Full Changelog)

`v1.29.0`

Compare Source

Added Features

Catalog python uv.lock files [#3268 #3763 @jkugler]

Additional Changes

Pkg Metadata type unmarshal bug [#4043 @houdini91]

(Full Changelog)

dsseng/syft (github.com/dsseng/syft)

emicklei/dot (github.com/emicklei/dot)

`v1.9.1`

Compare Source

do not use exe permission on exported dot files (thx come-maiz)

moby/buildkit (github.com/moby/buildkit)

`v0.24.0`

Compare Source

Welcome to the v0.24.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

Tõnis Tiigi
CrazyMax
Sebastiaan van Stijn
Akihiro Suda
Andrés Delfino
Alberto Contreras
Alberto Garcia Hierro
Anthony Nandaa
Baptiste Girard-Carrabin
Derek McGowan
Justin Chadwell
Kohei Tokunaga
Michael Dwan

Notable Changes

Built-in Dockerfile frontend has been updated to v1.18.0
LLB Git operation now allows controlling if submodules should be initialized (default) or skipped. #6173
Max-parallelism control can now also be set with --max-parallelism daemon flag. #6105
Improve errors when using build arguments in COPY --from flag value. #6153
Debug server now supports new endpoints for inspecting the cache key database and remote cache manifests. In order to debug plaintexts of the cache keys --save-cache-debug needs to be enabled in the daemon. #6076 #6061 #6133
Base Alpine version has been updated to 3.22. #6048
Client now allows configuring exporter content store. #6045
Release binary artifacts now use Git commit time as timestamp. [#6037](https://redirect.git

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-09-02T07:39:25Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`github.com/containerd/containerd/v2`	`v2.1.3` -> `v2.1.4`
`github.com/docker/cli`	`v28.3.1+incompatible` -> `v28.3.3+incompatible`
`github.com/spf13/pflag`	`v1.0.6` -> `v1.0.9`

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/dependencies branch 3 times, most recently from 3354daf to cfde7d9 Compare January 29, 2025 11:14

renovate bot changed the title ~~chore: update dependencies~~ chore: update module github.com/google/go-github/v67 to v68 Jan 29, 2025

renovate bot force-pushed the renovate/dependencies branch 5 times, most recently from 05a83df to 8ea2f28 Compare February 4, 2025 10:27

renovate bot changed the title ~~chore: update module github.com/google/go-github/v67 to v68~~ chore: update module github.com/google/go-github/v67 to v69 Feb 6, 2025

renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from 3ce4e87 to 925275e Compare February 6, 2025 16:24

renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from 4e08731 to 64d4c52 Compare February 16, 2025 12:10

renovate bot changed the title ~~chore: update module github.com/google/go-github/v67 to v69~~ chore: update dependencies Feb 16, 2025

renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from 5e097a7 to 32c2c5d Compare February 20, 2025 03:47

renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from 2c9e01a to 846acb8 Compare March 1, 2025 03:49

renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from c973bcb to ec6b76d Compare March 11, 2025 04:18

renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from db019cf to 15a4a4b Compare March 21, 2025 11:59

renovate bot changed the title ~~chore: update dependencies~~ chore: update module github.com/google/go-github/v67 to v70 Mar 21, 2025

renovate bot force-pushed the renovate/dependencies branch from 15a4a4b to 4217c4c Compare March 26, 2025 23:52

renovate bot changed the title ~~chore: update module github.com/google/go-github/v67 to v70~~ chore: update dependencies Mar 26, 2025

renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from d2056b1 to 9621e53 Compare April 8, 2025 04:05

renovate bot force-pushed the renovate/dependencies branch from 9621e53 to 71db350 Compare April 17, 2025 03:57

renovate bot force-pushed the renovate/dependencies branch from 71db350 to 78eb53a Compare May 1, 2025 16:03

renovate bot force-pushed the renovate/dependencies branch from 78eb53a to 284e8ca Compare May 9, 2025 23:52

renovate bot force-pushed the renovate/dependencies branch from 284e8ca to 434ab79 Compare May 24, 2025 15:52

renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from b846c12 to dfdf523 Compare June 8, 2025 08:34

renovate bot force-pushed the renovate/dependencies branch from dfdf523 to 7b742a7 Compare June 14, 2025 11:50

renovate bot force-pushed the renovate/dependencies branch from 7b742a7 to 6153225 Compare June 22, 2025 03:48

renovate bot force-pushed the renovate/dependencies branch 4 times, most recently from 4e2b1a9 to 4212928 Compare July 9, 2025 13:32

renovate bot force-pushed the renovate/dependencies branch 2 times, most recently from 55fb88a to b56ea0f Compare July 15, 2025 12:05

renovate bot force-pushed the renovate/dependencies branch from b56ea0f to 227c33d Compare July 27, 2025 15:58

renovate bot force-pushed the renovate/dependencies branch 3 times, most recently from 2634856 to 21ec2a8 Compare August 9, 2025 03:24

renovate bot force-pushed the renovate/dependencies branch 3 times, most recently from 3a208d8 to 3e5cfee Compare August 21, 2025 16:13

renovate bot force-pushed the renovate/dependencies branch 3 times, most recently from 05ea0d7 to bd7ffc6 Compare September 2, 2025 07:39

renovate bot force-pushed the renovate/dependencies branch 4 times, most recently from 903ac51 to 5e31832 Compare September 7, 2025 15:24

renovate bot force-pushed the renovate/dependencies branch from 5e31832 to e2d6900 Compare September 15, 2025 16:40

chore: update dependencies

aba4860

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/dependencies branch from e2d6900 to aba4860 Compare September 17, 2025 23:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: update dependencies #181

chore: update dependencies #181

Uh oh!

renovate bot commented Jan 20, 2025 •

edited

Loading

Uh oh!

renovate bot commented Sep 2, 2025 •

edited

Loading

Uh oh!

Uh oh!

chore: update dependencies #181

Are you sure you want to change the base?

chore: update dependencies #181

Uh oh!

Conversation

renovate bot commented Jan 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Breaking Changes

Enhancement

Dependency Upgrades

Documentation changes

New Contributors

Added Features

Added Features

Bug Fixes

Additional Changes

Added Features

Bug Fixes

Added Features

Bug Fixes

Bug Fixes

Added Features

Additional Changes

renovate bot commented Jan 20, 2025 •

edited

Loading