chore: update dependencies by renovate[bot] · Pull Request #567 · siderolabs/extensions

renovate · 2024-12-25T18:54:47Z

ℹ️ Note

This PR body was truncated due to platform limits.

Update Request | Renovate Bot

This PR contains the following updates:

Package	Type	Update	Change
actions/stale	action	digest	`9971854` → `b5d41d4`
fosrl/newt		patch	`1.10.0` → `1.10.1`
git://git.kernel.org/pub/scm/utils/mdadm/mdadm.git		minor	`4.4` → `4.5`
github.com/anchore/syft	indirect	minor	`v1.28.0` → `v1.42.1`
github.com/dsseng/grype	replace	digest	`2197792` → `9b7e8e2`
github.com/dsseng/syft	replace	minor	`v1.26.2-0.20250703101014-f39c35d156d9` → `v1.42.1`
github.com/gomodule/redigo	replace	major	`v0.0.0-20150301180006-535138d7bcd7` → `v1.9.3`
google/gvisor		patch	`20260202.0` → `20260223.0`
https://github.com/spinkube/containerd-shim-spin.git		minor	`v0.22.0` → `v0.23.0`
https://gitlab.gnome.org/GNOME/glib.git		patch	`2.87.2` → `2.87.3`
intel/Intel-Linux-Processor-Microcode-Data-Files		patch	`20260210` → `20260227`
netbirdio/netbird		minor	`0.65.3` → `0.66.0`
systemd/systemd		minor	`259.1` → `259.2`
tailscale/tailscale		patch	`1.94.1` → `1.94.2`
youki-dev/youki		minor	`0.5.7` → `0.6.0`

Release Notes

fosrl/newt (fosrl/newt)

`v1.10.1`

Compare Source

Container Images

GHCR: ghcr.io/fosrl/newt@sha256:dc3a6ce4c290d36393a9db6662afd826260e3c8552b19359193a6b311988d3d2
Docker Hub: docker.io/fosrl/newt@sha256:dc3a6ce4c290d36393a9db6662afd826260e3c8552b19359193a6b311988d3d2
Digest: sha256:dc3a6ce4c290d36393a9db6662afd826260e3c8552b19359193a6b311988d3d2

What's Changed

Generate random passwords for users

Full Changelog: fosrl/newt@v1.10.1...1.10.1

anchore/syft (github.com/anchore/syft)

`v1.42.1`

Compare Source

Bug Fixes

Use redhat as namespace for hummingbird rpms [#4615 @scoheb]
False Positive: Emacs snap package version CVE-2024-39331 [#4485]

Additional Changes

call cleanup on tmpfile and replace some io.ReadAlls with streams [#4629 @willmurphyscode]
bumps go mod version to 1.25; ci takes latest patch [#4628 @spiffcs]

(Full Changelog)

`v1.42.0`

Compare Source

Added Features

Add support for scanning GGUF models from OCI registries [#4335 @spiffcs]
yarn lockfile scan doesnt catch dev dependencies [#4548 #4549 @rezmoss]

Additional Changes

CPE detection for APK libavif to use aomedia vendor [#4597 @naag]

(Full Changelog)

`v1.41.2`

Compare Source

Bug Fixes

further improve go binary classifier, including windows [#4593 @kzantow]
Wrong format in license [#4233 #4588 @spiffcs]
Cannot detect installation of Qt6 [#4467 #4550 @rezmoss]
bug: Syft mis-identifies binary as deb inside a snap [#4486 #4500 @popey]

(Full Changelog)

`v1.41.1`

Compare Source

Bug Fixes

[Bug Report] Missing some dependencies on cyclonedx formatted SBOM using syft [#4562 #4573 @spiffcs]

(Full Changelog)

`v1.41.0`

Compare Source

Added Features

detect Debian version from /etc/debian_version [#4569 @kzantow]

Bug Fixes

correctly report supporting evidence for binary packages [#4558 @kzantow]

(Full Changelog)

`v1.40.1`

Compare Source

[!Important]
This release bumps github.com/containerd/containerd to v2, which will cause compiler errors if used alongside other dependencies that use v1 of containerd. See anchore/stereoscope#495 for a detailed discussion.

Bug Fixes

mongodb binary not detected manual/source install [#4540 #4541 @rezmoss]

(Full Changelog)

`v1.40.0`

Compare Source

Added Features

Exclude development or test dependencies for PNPM Package type [#4430 #4487 @rezmoss]
Catalog istio binary (pilot-discovery, pilot-agent) [#4508 #4521 @witchcraze]
Catalog envoy binary [#4506 #4530 @witchcraze]
Catalog grafana binary [#4505 #4516 @witchcraze]
Add a binary classifier for valkey [#3400 #4509 @witchcraze]

Bug Fixes

old bitnami images without spdx files arent getting picked up correctly in the catalog [#4529 #4532 @rezmoss]
wrong traefik rc versions at binary detection [#3535 #4499 @rezmoss]
FromPOSIX() in internals\windows\path.go assumes that all Windows root paths must have a colon terminator [#4070 #4075 @luissantosHCIT]
binary cataloger is picking up the go version instead of the actual binary version in traefik experimental images [#4498 #4499 @rezmoss]

(Full Changelog)

`v1.39.0`

Compare Source

Added Features

add support for Gemfile.next.lock [#4457 @HatiCode]
Command output to give more information on what catalogers look for and what they can find [#4155 #4317 @wagoodman]
Support reading lzma compressed .go.buildinfo sections with upx [#4411 #4480 @wagoodman]
Specify specific snap revision to pull [#4389 #4439 @VictorHuu]
Cannot detect embedded deps.json metadata in single-file .NET binaries [#4344 #4375 @rezmoss]
ELF note cataloger does not pick up OS field, but should [#4384 #4438 @VictorHuu]

Bug Fixes

remove debug print statement in dependency parser [#4412 @cgreeno]
dotnet-deps cataloger should skip project references with type "project" when building the sbom [#4423 #4436 @rezmoss]
File digests not computed when using --base-path [#4410 #4478 @wagoodman]
Syft should not define subpaths by default in PURLs [#4394 #4395 @rezmoss]
go: valid purl but incorrect name [#1737 #4395 @rezmoss]
Incorrect Go module PURL generation when module path contains /vN (e.g. /v5) [#4316 #4395 @rezmoss]
Failing to convert npm repository information correctly to SPDX [#4362 #4390 @kendrickm]

(Full Changelog)

`v1.38.2`

Compare Source

Bug Fixes

drop cpe from gguf [#4383 @spiffcs]
emit lua rockspec dependencies in metadata [#4376 @willmurphyscode]
Invalid SBOMs are created when GO replace directive is used [#4415 #4419 @VictorHuu]
Incorrect CPE for Vercel's Next js [#4443 #4450 @willmurphyscode]
v1.38.0 generates empty sbom for tgz sources [#4416 #4421 @VictorHuu]
Syft: The dependency graph does not include all Requires-Dist relationships defined in the package’s METADATA file [#4401 #4408 @willmurphyscode]

(Full Changelog)

`v1.38.1`

Compare Source

`v1.38.0`

Compare Source

Added Features

add support for cataloging GGUF models [#4184 #4279 @spiffcs]
Support scanning a list of CPEs [#3890 #4207 @chovanecadam]
Syft does not detect Elixir binary on system [#4333 #4334 @rezmoss]

Bug Fixes

Support extras statements in Python PDM cataloger [#4352 @wagoodman]
Preserve --from argument order [#4350 @wagoodman]
SBOM generated by Syft 1.28 contains license elements missing id or name (causing CycloneDX parser error) [#4363]
empty PURL output in dependency snapshot format breaks sbom-action [#4311]
Interface includes constraint elements, can only be used in type parameters [#4346]
Upgrade github.com/nwaples/rardecode@v1.1.3 to 2.2.1 [#4338]
Upgrade to Golang 1.25.4 [#4341]

Additional Changes

migrate syft to use mholt/archives instead of anchore fork [#4029 @Rupikz]
Add license enrichment from pypi to python packages [#4295 @timols]
license file search [#4327 @kzantow]

(Full Changelog)

`v1.37.0`

Compare Source

Added Features

Refactor fileresolver to not require base path [#4298 @Rupikz]
Describe cataloger capabilities via test observations [#4318 @wagoodman]
Support Java resource adapter extension .far as a Java archive [#4183 #4193 @kyounghunJang]
Add Java resource adapter extension ".rar" as supported Java archive [#4136 #4137 @thomassui]

Bug Fixes

fix empty PURL Github format [#4312 @rezmoss]
Canonicalize Ghostscript CPE/PURL for ghostscript packages from PE Binaries [#4308 @kdt523]
Respect "rpmmod" PURL qualifier [#4314 @willmurphyscode]
fix dpkg packages that are in deinstalled state should not be in SBOM [#3063 #4231 @rkirk-nos]

(Full Changelog)

`v1.36.0`

Compare Source

Added Features

Add the ability to fetch remote licenses for pnpm-lock.yaml files [#4286 @timols]
support universal (fat) mach-o binary files [#4278 @JoeyShapiro]
pdm support [#2709 #4234 @paulslaby]

Bug Fixes

Remove duplicate image source providers [#4289 @Rupikz]
syft can't extract go module information from executables on Windows [#4271 #4285 @JoeyShapiro]

(Full Changelog)

`v1.35.0`

Compare Source

`v1.34.2`

Compare Source

Bug Fixes

Extract zip archive with multiple entries [#4283 @Rupikz]
panic while resolving maven properties in archive parser [#4288 #4290 @kzantow]

(Full Changelog)

`v1.34.1`

Compare Source

Added Features

feat: enhance setup.py parser to handle unquoted dependencies [#4255 @HalaAli198]
feat: support for identifying ffmpeg/libav libraries [#4227 @popey]
feat: PNPM latest lockfile (version 9.0) [#3927 #4256 @bernardoamc]
Add Windows ARM64 releases [#4179 #4237 @compnerd]

Bug Fixes

fix: SBOM CPE mismatch for Qt5 causes Grype to miss CVE matches [#4036 #4093 @hawkaii]
fix: use of manifest files present in Snap packages when generating SBOMs [#4147 #4151 @popey]
fix: Pom xml only archive parser [#4272 @douglasclarke]

(Full Changelog)

`v1.34.0`

Compare Source

`v1.33.0`

Compare Source

Added Features

Modify RpmDBEntry to include modularityLabel for cyclonedx [#4212 @sfc-gh-rmaj]
Add locations onto packages read from Java native image SBOMs [#4186 @rudsberg]

(Full Changelog)

`v1.32.0`

Compare Source

Added Features

Catalog entire build list for Go projects, not just packages listed in go.mod [#432 #4127 @spiffcs]
package.json authors keyword parsing [#2250 #4003 @popey]
Conda ecosystem support (basic) [#4002 @SimeonStoykovQC]

Bug Fixes

When scanning the FFmpeg binary with Syft a new package is now added [#3988 #3994 @popey]
Warn loudly if SQLite driver is not present when needed [#3234 #4150 @kzantow]

Additional Changes

Update dependencies to use go.yaml.in/yaml [#4157 @n-bes]

(Full Changelog)

`v1.31.0`

Compare Source

Added Features

Option to set PackageSupplier in root of SPDX document generated by CLI [#3098 #4131 @spiffcs]

Bug Fixes

closed reader during java binary detection [#4129 @kzantow]
support multiple letters in openssl patch version [#4106 @honigbot]
Can not have license ID [#1964 #4132 @spiffcs]
Syft sometimes reports URL for license value when scanning JARs with a URL in Bundle-License field of manifest [#3186]

(Full Changelog)

`v1.30.0`

Compare Source

Added Features

add binary classifier for hashicorp vault [#4121 @willmurphyscode]

Bug Fixes

fix: update nondeterministic Java archive cataloging and improve groupID [#3521 #4118 @kzantow]

(Full Changelog)

`v1.29.1`

Compare Source

Bug Fixes

Missing license information for tzdata [#4102]
Improve JVM Scan Accuracy for JDK and JRE Detection [#4071 #4046 @kzantow]
Azul JDK classified as Oracle JRE [#3893 #4046 @kzantow]

(Full Changelog)

`v1.29.0`

Compare Source

Added Features

Catalog python uv.lock files [#3268 #3763 @jkugler]

Additional Changes

Pkg Metadata type unmarshal bug [#4043 @houdini91]

(Full Changelog)

dsseng/syft (github.com/dsseng/syft)

gomodule/redigo (github.com/gomodule/redigo)

`v1.9.3`

Compare Source

v1.9.3 Release Notes (2025-10-08T17:29:42Z)

Changelog

Features

7364aae: feat: simple string keys in ScanStruct (#692) (@stevenh)
a81b603: feat: valkey schema support (#689) (@stevenh)

Bug fixes

ad5af85: fix: latency tests (#685) (@elboulangero)
04a54d8: fix: server-path not being honored (#686) (@elboulangero)

Chores

247f6c0: chore: fix function name in comment (#668) (@rustfix)

Documentation

4646571: docs: add related project for otel go agent (#679) (@123liuziming)
45d4010: docs: note support for Valkey (#683) (@asafpamzn)

Full Changelog

`v1.9.2`

Compare Source

v1.9.2 Release Notes (2024-02-25T12:54:41Z)

Changelog

Bug fixes

e05a63b: fix: bump go version to 1.17 (#666) (@stevenh)

Continuous Integration

4c535aa: ci: fix go caching (#667) (@stevenh)

Full Changelog

`v1.9.1`

Compare Source

v1.9.1 Release Notes (2024-02-20T23:51:27Z)

Changelog

Chores

162ed02: chore: retract v1.8.10 (#664) (@stevenh)

Continuous Integration

cfabb1f: ci: remove deprecated goreleaser option (#663) (@stevenh)

Full Changelog

`v1.9.0`

v1.9.0 Release Notes (2024-02-20T21:32:43Z)

Changelog

Features

1d393b3: feat: add TestOnBorrowContext (#660) (@vasayxtx)

Bug fixes

78e255f: fix: test goroutine leaks (#643) (@stevenh)

Chores

9f0d2e9: chore: remove debug check (#659) (@stevenh)
8b1c13e: chore: run test server with enable-debug-command (#654) (@elboulangero)
a60882b: chore: update testify (#653) (@stevenh)
9129745: chore: update github actions and fix tests (#657) (@stevenh)

Continuous Integration

1bfd3c1: ci: add goreleaser, update action and go versions (#662) (@stevenh)

New Contributors

@elboulangero made their first contribution in #654
@vasayxtx made their first contribution in #660

Full Changelog

`v1.8.9`

Compare Source

v1.8.9 Release Notes (2022-07-06)

Bug Fixes

Anonymous field pointers (#622) (f1e923c7)
correct do script error check (#563) (d3b4cc3b)
respect ctx in cmds run in DialContext (#620) (95c091f7)
error message for SlowLog conversion (#612) (bcef0d82)
update golangci-lint for golang 1.18 (#616) (222ca62c)
correct instructions for detecting DialReadTimeout (#601) (8eb56255)

Chores

remove go1.7 and below support (#623) (2c2a5c2c)
refactor map helpers to reduce duplication (#606) (5b789c6c)
add go test action (#607) (dc675762)

Features

add support for latency command parsing (#614) (d6854479)
add Float64Map (#605) (dbebed54)
add RequestContext to PubSubConn (#603) (3eb07749)

`v1.8.8`

Compare Source

v1.8.8 Release Notes (2022-01-04)

Bug Fixes

surface underlying error for slice / map helpers (#580) (a83ebbee)

`v1.8.7`

Compare Source

v1.8.7 Release Notes (2022-01-04)

Bug Fixes

retract tagged versions (#590) (2fd670f4, closes #585)
modules: upgrade testify (cc6be488)

`v1.8.6`

Compare Source

v1.8.6 Release Notes (2021-12-02)

Features

Add DoContext and ReceiveContext (#537) (56d64483)
Implement DialURLContext(...) (#574) (bf63cd5f)

Bug Fixes

Surface underlying error for slice / map helpers (070ce41a)
DoContext call to DoWithTimeout (#576) (574218b5, closes #575)

`v1.8.5`

Compare Source

v1.8.5 Release Notes (2021-06-10)

Bug Fixes

DialURL compatibility with redis-cli (#566) (46992b0f)

`v1.8.4`

Compare Source

v1.8.4 Release Notes (2021-02-18)

Chores

Add clog config (#555) (72af8129)
Enable golangci-lint and fix errors (#554) (dbd3ec6d)
Remove unnecessary blank (_) identifier (#551) (e2bc6dba)
remove redundant type conversion (#541) (8a8dbfb3)
docs: update godoc links (#482) (9e4eba01)

`v1.8.3`

Compare Source

New Features

Add TLS Handshake timeout support (#530)

Fixes

Typo in Float64 documentation (#515)
GetContext must return errorConn (#494)
Correct type in Ints documentation (#528)
Open connection count (#527)
Add end of terms and conditions in LICENSE (#531)
Revert "fix: go get example in README.md (#488)" (#497)
travis-ci: Remove older versions of go (#516)
go get example in README.md (#488)

Chores

Remove unneeded ctx == nil check (#498)
Remove unneeded loop check (#524)
Improve ScanStruct performance (#523)
Improve readability of lazyInit (#522)

Thanks to the following contributors to this release:
Hanjun Kim, Homer Huang, Jeremy Wiebe, Rohan Verma, Stan Hu, ppphp and xyb

`v1.8.2`

Compare Source

New Features

Context dial support (#476)
Support for ACL logins (#480)
Support for Anonymous field pointers to AddFlat (#490)
Scanner support for ScanSlice (#489)

Fixes

Handle pool get ctx cancellation promptly ([#47

renovate · 2025-12-18T13:45:40Z

ℹ️ Artifact update notice

File name: internal/grype-scan/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

113 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.5` -> `1.25`
`cel.dev/expr`	`v0.16.1` -> `v0.24.0`
`cloud.google.com/go`	`v0.116.0` -> `v0.123.0`
`cloud.google.com/go/auth`	`v0.13.0` -> `v0.17.0`
`cloud.google.com/go/auth/oauth2adapt`	`v0.2.6` -> `v0.2.8`
`cloud.google.com/go/compute/metadata`	`v0.7.0` -> `v0.9.0`
`cloud.google.com/go/iam`	`v1.2.2` -> `v1.5.3`
`cloud.google.com/go/monitoring`	`v1.21.2` -> `v1.24.2`
`cloud.google.com/go/storage`	`v1.49.0` -> `v1.58.0`
`dario.cat/mergo`	`v1.0.1` -> `v1.0.2`
`github.com/BurntSushi/toml`	`v1.5.0` -> `v1.6.0`
`github.com/CycloneDX/cyclonedx-go`	`v0.9.2` -> `v0.10.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.25.0` -> `v1.29.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric`	`v0.48.1` -> `v0.54.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping`	`v0.48.1` -> `v0.54.0`
`github.com/Microsoft/hcsshim`	`v0.11.7` -> `v0.14.0-rc.1`
`github.com/ProtonMail/go-crypto`	`v1.2.0` -> `v1.3.0`
`github.com/STARRY-S/zip`	`v0.2.1` -> `v0.2.3`
`github.com/anchore/go-collections`	`v0.0.0-20240216171411-9321230ce537` -> `v0.0.0-20251016125210-a3c352120e8c`
`github.com/anchore/go-struct-converter`	`v0.0.0-20221118182256-c68fdcfa2092` -> `v0.1.0`
`github.com/anchore/stereoscope`	`v0.1.6` -> `v0.1.20`
`github.com/andybalholm/brotli`	`v1.1.2-0.20250424173009-453214e765f3` -> `v1.2.0`
`github.com/bmatcuk/doublestar/v4`	`v4.8.1` -> `v4.10.0`
`github.com/bodgit/sevenzip`	`v1.6.0` -> `v1.6.1`
`github.com/charmbracelet/bubbles`	`v0.21.0` -> `v0.21.1`
`github.com/charmbracelet/bubbletea`	`v1.3.6` -> `v1.3.10`
`github.com/charmbracelet/colorprofile`	`v0.2.3-0.20250311203215-f60798e515dc` -> `v0.4.1`
`github.com/charmbracelet/x/ansi`	`v0.9.3` -> `v0.11.5`
`github.com/charmbracelet/x/cellbuf`	`v0.0.13-0.20250311204145-2c3ea96c31dd` -> `v0.0.15`
`github.com/charmbracelet/x/term`	`v0.2.1` -> `v0.2.2`
`github.com/cncf/xds/go`	`v0.0.0-20240905190251-b4127c9b8d78` -> `v0.0.0-20250501225837-2ac532fd4443`
`github.com/containerd/containerd/api`	`v1.8.0` -> `v1.10.0`
`github.com/containerd/continuity`	`v0.4.4` -> `v0.4.5`
`github.com/containerd/platforms`	`v0.2.1` -> `v1.0.0-rc.2`
`github.com/containerd/stargz-snapshotter/estargz`	`v0.16.3` -> `v0.18.1`
`github.com/containerd/typeurl/v2`	`v2.2.0` -> `v2.2.3`
`github.com/cyphar/filepath-securejoin`	`v0.4.1` -> `v0.6.0`
`github.com/diskfs/go-diskfs`	`v1.6.1-0.20250601133945-2af1c7ece24c` -> `v1.7.0`
`github.com/docker/cli`	`v28.3.0+incompatible` -> `v29.2.0+incompatible`
`github.com/docker/docker`	`v28.3.2+incompatible` -> `v28.5.2+incompatible`
`github.com/docker/docker-credential-helpers`	`v0.9.3` -> `v0.9.4`
`github.com/docker/go-connections`	`v0.5.0` -> `v0.6.0`
`github.com/envoyproxy/go-control-plane`	`v0.13.1` -> `v0.13.4`
`github.com/envoyproxy/protoc-gen-validate`	`v1.1.0` -> `v1.2.1`
`github.com/fatih/color`	`v1.17.0` -> `v1.18.0`
`github.com/fsnotify/fsnotify`	`v1.8.0` -> `v1.9.0`
`github.com/gabriel-vasile/mimetype`	`v1.4.9` -> `v1.4.12`
`github.com/github/go-spdx/v2`	`v2.3.3` -> `v2.3.6`
`github.com/go-git/go-billy/v5`	`v5.6.2` -> `v5.7.0`
`github.com/go-git/go-git/v5`	`v5.16.2` -> `v5.16.5`
`github.com/go-viper/mapstructure/v2`	`v2.3.0` -> `v2.5.0`
`github.com/goccy/go-yaml`	`v1.18.0` -> `v1.19.2`
`github.com/gohugoio/hashstructure`	`v0.5.0` -> `v0.6.0`
`github.com/google/go-containerregistry`	`v0.20.6` -> `v0.20.7`
`github.com/google/s2a-go`	`v0.1.8` -> `v0.1.9`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.4` -> `v0.3.7`
`github.com/googleapis/gax-go/v2`	`v2.14.1` -> `v2.15.0`
`github.com/gookit/color`	`v1.5.4` -> `v1.6.0`
`github.com/hashicorp/go-getter`	`v1.7.8` -> `v1.8.4`
`github.com/hashicorp/go-version`	`v1.7.0` -> `v1.8.0`
`github.com/hashicorp/hcl/v2`	`v2.23.0` -> `v2.24.0`
`github.com/jedib0t/go-pretty/v6`	`v6.6.7` -> `v6.7.8`
`github.com/klauspost/compress`	`v1.18.0` -> `v1.18.2`
`github.com/lucasb-eyer/go-colorful`	`v1.2.0` -> `v1.3.0`
`github.com/mattn/go-runewidth`	`v0.0.16` -> `v0.0.19`
`github.com/mholt/archives`	`v0.1.3` -> `v0.1.5`
`github.com/minio/minlz`	`v1.0.0` -> `v1.0.1`
`github.com/moby/sys/signal`	`v0.7.0` -> `v0.7.1`
`github.com/moby/sys/user`	`v0.3.0` -> `v0.4.0`
`github.com/ncruces/go-strftime`	`v0.1.9` -> `v1.0.0`
`github.com/nwaples/rardecode/v2`	`v2.1.0` -> `v2.2.0`
`github.com/olekukonko/errors`	`v0.0.0-20250405072817-4e6d85265da6` -> `v1.1.0`
`github.com/olekukonko/ll`	`v0.0.8` -> `v0.1.4-0.20260115111900-9e59c2286df0`
`github.com/olekukonko/tablewriter`	`v1.0.8` -> `v1.1.3`
`github.com/opencontainers/runtime-spec`	`v1.1.0` -> `v1.3.0`
`github.com/opencontainers/selinux`	`v1.11.0` -> `v1.13.1`
`github.com/pelletier/go-toml/v2`	`v2.2.3` -> `v2.2.4`
`github.com/sorairolake/lzip-go`	`v0.3.5` -> `v0.3.8`
`github.com/spdx/tools-golang`	`v0.5.5` -> `v0.5.7`
`github.com/spf13/afero`	`v1.14.0` -> `v1.15.0`
`github.com/spf13/cobra`	`v1.9.1` -> `v1.10.2`
`github.com/spf13/pflag`	`v1.0.6` -> `v1.0.9`
`github.com/sylabs/sif/v2`	`v2.21.1` -> `v2.22.0`
`github.com/ulikunitz/xz`	`v0.5.12` -> `v0.5.15`
`github.com/vbatts/go-mtree`	`v0.5.4` -> `v0.7.0`
`github.com/vbatts/tar-split`	`v0.12.1` -> `v0.12.2`
`github.com/zclconf/go-cty`	`v1.14.0` -> `v1.16.3`
`go.opentelemetry.io/auto/sdk`	`v1.1.0` -> `v1.2.1`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.29.0` -> `v1.36.0`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.54.0` -> `v0.63.0`
`go.opentelemetry.io/otel`	`v1.36.0` -> `v1.39.0`
`go.opentelemetry.io/otel/metric`	`v1.36.0` -> `v1.39.0`
`go.opentelemetry.io/otel/sdk`	`v1.36.0` -> `v1.39.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.36.0` -> `v1.39.0`
`go.opentelemetry.io/otel/trace`	`v1.36.0` -> `v1.39.0`
`golang.org/x/crypto`	`v0.40.0` -> `v0.47.0`
`golang.org/x/exp`	`v0.0.0-20250408133849-7e4ce0ab07d0` -> `v0.0.0-20251023183803-a4bb9ffd2546`
`golang.org/x/mod`	`v0.26.0` -> `v0.32.0`
`golang.org/x/net`	`v0.42.0` -> `v0.49.0`
`golang.org/x/oauth2`	`v0.30.0` -> `v0.33.0`
`golang.org/x/sync`	`v0.16.0` -> `v0.19.0`
`golang.org/x/sys`	`v0.34.0` -> `v0.40.0`
`golang.org/x/term`	`v0.33.0` -> `v0.39.0`
`golang.org/x/text`	`v0.27.0` -> `v0.33.0`
`golang.org/x/time`	`v0.12.0` -> `v0.14.0`
`golang.org/x/tools`	`v0.35.0` -> `v0.41.0`
`google.golang.org/api`	`v0.215.0` -> `v0.256.0`
`google.golang.org/genproto`	`v0.0.0-20241118233622-e639e219e697` -> `v0.0.0-20250922171735-9219d122eba9`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20241209162323-e6fa225c2576` -> `v0.0.0-20251111163417-95abcf5c77ba`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20241223144023-3abc09e42ca8` -> `v0.0.0-20251111163417-95abcf5c77ba`
`google.golang.org/grpc`	`v1.67.3` -> `v1.76.0`
`google.golang.org/protobuf`	`v1.36.4` -> `v1.36.10`
`modernc.org/libc`	`v1.65.10` -> `v1.67.6`
`modernc.org/sqlite`	`v1.38.0` -> `v1.44.3`

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/dependencies branch 3 times, most recently from 5ba679a to 8b58a61 Compare December 31, 2024 20:44

renovate bot force-pushed the renovate/dependencies branch 4 times, most recently from 490052d to 23754db Compare January 9, 2025 12:01

renovate bot force-pushed the renovate/dependencies branch 6 times, most recently from c9a1639 to 5aabad4 Compare January 17, 2025 07:19

renovate bot force-pushed the renovate/dependencies branch 5 times, most recently from 6e3a52e to 3c9057e Compare January 25, 2025 12:15

renovate bot force-pushed the renovate/dependencies branch 5 times, most recently from 37862c0 to ade8620 Compare February 5, 2025 00:08

renovate bot force-pushed the renovate/dependencies branch 7 times, most recently from 88a8ea0 to 849332e Compare February 12, 2025 12:33

renovate bot force-pushed the renovate/dependencies branch 8 times, most recently from dee5df0 to 2ed628e Compare March 10, 2025 09:42

renovate bot force-pushed the renovate/dependencies branch from 2ed628e to 8833055 Compare March 10, 2025 20:32

smira closed this Apr 2, 2025

smira deleted the renovate/dependencies branch April 2, 2025 13:51

smira restored the renovate/dependencies branch April 2, 2025 15:12

smira reopened this Apr 2, 2025

talos-bot added the status/ok-to-test label Apr 2, 2025

talos-bot added this to Planning Apr 2, 2025

github-project-automation bot moved this to To Do in Planning Apr 2, 2025

talos-bot moved this from To Do to In Review in Planning Apr 2, 2025

smira force-pushed the renovate/dependencies branch from 8833055 to 9d222f7 Compare April 2, 2025 15:42

smira removed this from Planning Apr 2, 2025

renovate bot force-pushed the renovate/dependencies branch 3 times, most recently from 95295d4 to 66ab4f9 Compare April 6, 2025 11:50

renovate bot force-pushed the renovate/dependencies branch 5 times, most recently from 929d827 to 83bdebd Compare April 17, 2025 13:15

renovate bot force-pushed the renovate/dependencies branch from 83bdebd to 1e5f791 Compare April 19, 2025 11:22

chore: update dependencies

7de5dc9

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update dependencies#567

chore: update dependencies#567
renovate[bot] wants to merge 1 commit intomainfrom
renovate/dependencies

renovate bot commented Dec 25, 2024 •

edited

Loading

Uh oh!

renovate bot commented Dec 18, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate bot commented Dec 25, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Container Images

What's Changed

Bug Fixes

Additional Changes

Added Features

Additional Changes

Bug Fixes

Bug Fixes

Added Features

Bug Fixes

Bug Fixes

Added Features

Bug Fixes

Added Features

Bug Fixes

Bug Fixes

Added Features

Bug Fixes

Additional Changes

Added Features

Bug Fixes

Added Features

Bug Fixes

Bug Fixes

Added Features

Bug Fixes

Added Features

Added Features

Bug Fixes

Additional Changes

Added Features

Bug Fixes

Added Features

Bug Fixes

Bug Fixes

Added Features

Additional Changes

v1.9.3 Release Notes (2025-10-08T17:29:42Z)

Changelog

Features

Bug fixes

Chores

Documentation

v1.9.2 Release Notes (2024-02-25T12:54:41Z)

Changelog

Bug fixes

Continuous Integration

v1.9.1 Release Notes (2024-02-20T23:51:27Z)

Changelog

Chores

Continuous Integration

v1.9.0 Release Notes (2024-02-20T21:32:43Z)

Changelog

Features

Bug fixes

Chores

Continuous Integration

New Contributors

v1.8.9 Release Notes (2022-07-06)

Bug Fixes

Chores

Features

v1.8.8 Release Notes (2022-01-04)

Bug Fixes

v1.8.7 Release Notes (2022-01-04)

Bug Fixes

v1.8.6 Release Notes (2021-12-02)

Features

Bug Fixes

v1.8.5 Release Notes (2021-06-10)

Bug Fixes

v1.8.4 Release Notes (2021-02-18)

Chores

Uh oh!

renovate bot commented Dec 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

renovate bot commented Dec 25, 2024 •

edited

Loading

renovate bot commented Dec 18, 2025 •

edited

Loading