Skip to content

Comments

Bump the go-dependencies group across 1 directory with 7 updates#239

Closed
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/go_modules/go-dependencies-c389f8daa5
Closed

Bump the go-dependencies group across 1 directory with 7 updates#239
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/go_modules/go-dependencies-c389f8daa5

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 19, 2026

Bumps the go-dependencies group with 6 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go-v2/config 1.32.7 1.32.9
github.com/aws/aws-sdk-go-v2/service/ec2 1.287.0 1.290.0
github.com/aws/aws-sdk-go-v2/service/ecr 1.55.1 1.55.2
github.com/fluxcd/source-controller/api 1.7.4 1.8.0
github.com/hashicorp/hc-install 0.9.2 0.9.3
github.com/hashicorp/terraform-exec 0.24.0 0.25.0

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.7 to 1.32.9

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.7 to 1.19.9

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ec2 from 1.287.0 to 1.290.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.55.1 to 1.55.2

Commits

Updates github.com/fluxcd/source-controller/api from 1.7.4 to 1.8.0

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.8.0

Changelog

v1.8.0 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.8.0
  • ghcr.io/fluxcd/source-controller:v1.8.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.8.0

Release date: 2026-02-17

This minor release comes with Helm v4 support, cosign v3 verification, and various improvements.

⚠️ The v1beta2 APIs were removed. Before upgrading the CRDs, Flux users must run flux migrate to migrate the cluster storage off v1beta2.

HelmChart

The HelmChart controller now uses Helm v4. The HelmRepository type oci has been moved to maintenance mode, users should migrate to OCIRepository.

CRD validation for v1 has been aligned with v1beta2 so that invalid specs are rejected at admission time.

OCIRepository

The OCIRepository controller now supports verifying artifacts signed with both cosign v2 and cosign v3.

GitRepository

The github provider now supports looking up the GitHub App installation ID automatically, removing the need to configure it manually.

General updates

In addition, the Kubernetes dependencies have been updated to v1.35.0 and the controller is now built with Go 1.26.

Improvements:

  • Upgrade Helm to v4 #1953 #1958 #1980
  • Discover cosign v3 NewBundleFormat for verification #1961
  • Introduce support for looking up GH app installation ID #1963
  • Remove deprecated APIs in group source.toolkit.fluxcd.io/v1beta2 #1983
  • Docs: Move HelmRepository type oci to maintenance mode #1985
  • sourcev1: align CRD validation with v1beta2 #1944
  • Various dependency updates

... (truncated)

Commits
  • 7fbbcd6 Merge pull request #1988 from fluxcd/release-v1.8.0
  • 7664502 Release v1.8.0
  • d812004 Add changelog entry for v1.8.0
  • a73fcfc Merge pull request #1987 from fluxcd/update-pkg-deps/main
  • c32dfc1 Update fluxcd/pkg dependencies
  • 2bbbffc Merge pull request #1986 from fluxcd/cmd-bump
  • 94ca3b5 Introduce workflow for bumping fluxcd/pkg deps
  • 9f6d639 Merge pull request #1985 from fluxcd/hr-oci-maintenance
  • 79727ec Docs: Move HelmRepository type oci to maintenance mode
  • e3fb3e7 Merge pull request #1984 from fluxcd/go-1.26
  • Additional commits viewable in compare view

Updates github.com/hashicorp/hc-install from 0.9.2 to 0.9.3

Release notes

Sourced from github.com/hashicorp/hc-install's releases.

v0.9.3

DEPENDENCIES:

  • build(deps): bump github.com/go-git/go-git/v5 from 5.14.0 to 5.16.5 (#294, #296, #302, #306, #321, #327, #342)
  • build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.7 to 0.7.8 (#307)
  • build(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0 (#332)
  • build(deps): bump github.com/ProtonMail/go-crypto from 1.1.6 to 1.3.0 (#295, #301)
  • build(deps): bump golang.org/x/crypto from 0.37.0 to 0.45.0 (#326)
  • build(deps): bump golang.org/x/mod from 0.24.0 to 0.33.0 (#303, #309, #315, #319, #322, #325, #335, #338, #343)

INTERNAL:

  • go: bump version from 1.24.2 to 1.24.13 (#318, #331, #344)
Commits
  • 08dbb4f github/release: Update Slack channel reference (#347)
  • f8f2e09 Prepare for 0.9.3 release (#346)
  • f8cc5ed go: bump version to 1.24.13 (#344)
  • fe07af6 Update copyright headers to IBM (#345)
  • b6ac954 build(deps): bump golang.org/x/mod from 0.32.0 to 0.33.0 (#343)
  • 9543c11 build(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 (#342)
  • a6d0e0a build(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the github-actions-...
  • 17a8292 build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 in the github-actions-...
  • 78824a8 build(deps): bump golang.org/x/mod from 0.31.0 to 0.32.0 (#338)
  • e7288fa build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 in the github-a...
  • Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-exec from 0.24.0 to 0.25.0

Release notes

Sourced from github.com/hashicorp/terraform-exec's releases.

v0.25.0

NOTES:

  • bump Go compatibility from 1.23 to 1.24 (in-line with Go's support policy) (#548, #557)

ENHANCEMENTS:

  • tfexec: Added provider reattach support to all terraform workspace subcommands (#556)
  • tfexec: Add -generate-config-out to the (Terraform).Plan() method (#563)
  • Add support for providers mirror subcommand (#551)

DEPENDENCIES:

  • build(deps): bump golang.org/x/crypto from 0.36.0 to 0.45.0 (#547)
  • build(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0 (#552)
  • build(deps): bump github.com/hashicorp/hc-install from 0.9.2 to 0.9.3 (#566)
  • build(deps): bump github.com/hashicorp/terraform-json from 0.27.1 to 0.27.2 (#542)
  • build(deps): bump github.com/zclconf/go-cty from 1.16.4 to 1.17.0 (#535)
Changelog

Sourced from github.com/hashicorp/terraform-exec's changelog.

0.25.0 (February 16, 2026)

NOTES:

  • bump Go compatibility from 1.23 to 1.24 (in-line with Go's support policy) (#548, #557)

ENHANCEMENTS:

  • tfexec: Added provider reattach support to all terraform workspace subcommands (#556)
  • tfexec: Add -generate-config-out to the (Terraform).Plan() method (#563)
  • Add support for providers mirror subcommand (#551)

DEPENDENCIES:

  • build(deps): bump golang.org/x/crypto from 0.36.0 to 0.45.0 (#547)
  • build(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0 (#552)
  • build(deps): bump github.com/hashicorp/hc-install from 0.9.2 to 0.9.3 (#566)
  • build(deps): bump github.com/hashicorp/terraform-json from 0.27.1 to 0.27.2 (#542)
  • build(deps): bump github.com/zclconf/go-cty from 1.16.4 to 1.17.0 (#535)
Commits
  • 02b5829 v0.25.0 [skip ci]
  • b5cbff5 Update Changelog in preparation for 0.25.0 (#567)
  • d15fcb4 build(deps): bump github.com/zclconf/go-cty from 1.16.4 to 1.17.0 (#535)
  • c99d7b5 build(deps): bump github.com/hashicorp/terraform-json from 0.27.1 to 0.27.2 (...
  • 77206c5 Simplify buildEnv: use maps.Copy for populating the map. (#546)
  • 9495f7b build(deps): bump github.com/hashicorp/hc-install from 0.9.2 to 0.9.3 (#566)
  • f1a5a8b Update copyright headers to IBM (#565)
  • 9141118 Add providers mirror subcommand (#551)
  • e9f5952 init: Add godoc comments for ForceCopy to mention that it's equivalent to `...
  • 8c2278b feat: add -generate-config-out option to plan (#563)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

brooke-hamilton and others added 2 commits February 11, 2026 21:42
Signed-off-by: Brooke Hamilton <45323234+brooke-hamilton@users.noreply.github.com>
Bumps the go-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.7` | `1.32.9` |
| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.287.0` | `1.290.0` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.55.1` | `1.55.2` |
| [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.7.4` | `1.8.0` |
| [github.com/hashicorp/hc-install](https://github.com/hashicorp/hc-install) | `0.9.2` | `0.9.3` |
| [github.com/hashicorp/terraform-exec](https://github.com/hashicorp/terraform-exec) | `0.24.0` | `0.25.0` |



Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.7 to 1.32.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@v1.32.7...config/v1.32.9)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.7 to 1.19.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/m2/v1.19.7...service/m2/v1.19.9)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.287.0 to 1.290.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/ec2/v1.287.0...service/ec2/v1.290.0)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.55.1 to 1.55.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.55.1...service/s3/v1.55.2)

Updates `github.com/fluxcd/source-controller/api` from 1.7.4 to 1.8.0
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.7.4...v1.8.0)

Updates `github.com/hashicorp/hc-install` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/hashicorp/hc-install/releases)
- [Commits](hashicorp/hc-install@v0.9.2...v0.9.3)

Updates `github.com/hashicorp/terraform-exec` from 0.24.0 to 0.25.0
- [Release notes](https://github.com/hashicorp/terraform-exec/releases)
- [Changelog](https://github.com/hashicorp/terraform-exec/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-exec@v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-version: 1.290.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.55.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/hashicorp/hc-install
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/hashicorp/terraform-exec
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Feb 19, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 20, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 20, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/go-dependencies-c389f8daa5 branch February 20, 2026 22:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant