Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the go-modules group across 1 directory with 45 updates #776

Closed
wants to merge 2 commits into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 13, 2024

Bumps the go-modules group with 26 updates in the / directory:

Package From To
github.com/BurntSushi/toml 1.3.2 1.4.0
github.com/CycloneDX/cyclonedx-go 0.7.2 0.9.0
github.com/Microsoft/go-winio 0.6.1 0.6.2
github.com/docker/docker-credential-helpers 0.8.1 0.8.2
github.com/klauspost/compress 1.17.6 1.17.9
github.com/knqyf263/go-rpmdb 0.0.0-20230301153543-ba94b245509b 0.1.1
github.com/onsi/gomega 1.31.1 1.33.1
github.com/paketo-buildpacks/occam 0.18.2 0.18.7
github.com/shopspring/decimal 1.3.1 1.4.0
github.com/spdx/tools-golang 0.5.3 0.5.4
github.com/sylabs/sif/v2 2.15.1 2.16.0
github.com/vbatts/go-mtree 0.5.3 0.5.4
github.com/Microsoft/hcsshim 0.11.4 0.12.4
github.com/cenkalti/backoff/v4 4.2.1 4.3.0
github.com/cloudflare/circl 1.3.7 1.3.9
github.com/cyphar/filepath-securejoin 0.2.4 0.2.5
github.com/distribution/reference 0.5.0 0.6.0
github.com/gabriel-vasile/mimetype 1.4.3 1.4.4
github.com/go-git/go-git/v5 5.11.0 5.12.0
github.com/go-logr/logr 1.4.1 1.4.2
github.com/huandu/xstrings 1.4.0 1.5.0
github.com/sassoftware/go-rpmutils 0.3.0 0.4.0
github.com/shirou/gopsutil/v3 3.24.1 3.24.5
github.com/tklauser/go-sysconf 0.3.13 0.3.14
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.49.0 0.52.0
google.golang.org/protobuf 1.33.0 1.34.2

Updates github.com/BurntSushi/toml from 1.3.2 to 1.4.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.4.0

This version requires Go 1.18

  • Add toml.Marshal() (#405)

  • Require 2-digit hour (#320)

  • Wrap UnmarshalTOML() and UnmarshalText() return values in ParseError for position information (#398)

  • Fix inline tables with dotted keys inside inline arrays (e.g. k=[{a.b=1}]) (#400)

Commits
  • 1e2c053 Undeprecate PrimitiveDecode and MetaData.PrimitiveDecode()
  • f8f7e48 Update toml-test
  • 9a80667 Add -json flag to tomlv
  • 3203540 fuzz: move fuzz_targets from oss-fuzz (#406)
  • 77ce858 Add Marshal Function (#405)
  • 0e879cb Fix panic when trying to set subkey for a value that's not a table
  • c299e75 Update toml-test
  • 4223137 Fix inline tables with dotted keys inside inline arrays (#400)
  • 45e7e49 Update toml-test
  • c320c2d Fix utf8.RuneError test
  • Additional commits viewable in compare view

Updates github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.9.0

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.9.0

Changelog

Features

  • 729c284798ebe341ced210b661362f77d68cd655: feat: Add CycloneDX 1.6 fields swhid and omniborId (@​snyk-tim)
  • b5d35959767efce95f50e96bf752c47fbe374496: feat: add manufacturer and authors (@​snyk-tim)
  • c52e698d2fe3fbd60df6ff397f44e7b0ea15a4bc: feat: raise baseline go version to 1.20 (@​nscuro)

Fixes

  • 9166e10fdecaadd8a97ceed9636261d351d90a65: fix: ioutil -> io (@​nscuro)
  • 349fc8cd072e90d81c0328f1d9dab16aa30fcf60: fix: add bom-ref to OrganizationalEntity/Contact (@​snyk-tim)
  • c97da90e259e0051e02e07300c75ad5e37a0311b: fix: handle breaking changes in skywalking-eyes (@​nscuro)

Building and Packaging

  • ec6291e9ce9efbbb5d0010de4d8668fcbd05d148: build(deps): bump actions/checkout from 4.1.1 to 4.1.5 (@​dependabot[bot])
  • 899fe391ca4d756f1d5ba84478d3bc8795003cba: build(deps): bump actions/checkout from 4.1.5 to 4.1.6 (@​dependabot[bot])
  • 8674ed5ecc38b65e03908b5a74308c95039068a9: build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 (@​dependabot[bot])
  • db3a1144a2ce30b85e5985d2755fa3e4a81c5ca8: build(deps): bump apache/skywalking-eyes from 0.4.0 to 0.6.0 (@​dependabot[bot])
  • a3bd05518575f14d917685a02c689f81eedaad5c: build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (@​dependabot[bot])
  • 1179dd9051112c3b44a6cc577964c7d501a7258b: build(deps): bump gitpod/workspace-go from 8b9a0f6 to 8d15123 (@​dependabot[bot])
  • d98494ea11dbb6550705d46d2473aa2a4a18e642: build(deps): bump gitpod/workspace-go from 9118b93 to 8b9a0f6 (@​dependabot[bot])
  • 1e2a3a09e86d720729a3ab7ec55ed3ffa75164a5: build(deps): bump gitpod/workspace-go from 94ae638 to 9118b93 (@​dependabot[bot])
  • d4d6e35fcfb08d14589b4a693aac3f28978b640b: build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 (@​dependabot[bot])
  • 521d1ce7b555013f2b78d8c4a21954815863ab44: build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1 (@​dependabot[bot])
  • f1ebafe5e2d2af3a3d551eb23c583a93b7ebccbf: build(deps): bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 (@​dependabot[bot])

Others

  • 16d2143b3d74b77af8a309b331e1bc46a445f495: Fix(1.6): Added missing omitempty in NistQuantumSecurityLevel (@​Petzys)
  • ffec473428073e1266169e97c1c64de95e89981b: chore: add license header (@​mcombuechen)
  • 1f8fdcc0047611a8baacfcd214c5ba3821fefd51: feat(1.6): add BOM.Declarations (@​mcombuechen)
  • 62b53429289d6cc6884b111256588150e3fed308: feat(1.6): add BOM.Definitions (@​mcombuechen)
  • c33b9cb58eaa14e89740182fbde2a0cc888bc457: feat(1.6): add CBOM types (@​Petzys)
  • 10e10c8bc8fcac6f90c914828786f11e404919b8: feat(1.6): add JSON schema, XML namespace (@​mcombuechen)
  • 2dc599a8ad0f2be20e9bfc55ba75764758e6c7b8: feat(1.6): add License.Acknowledgement (@​mcombuechen)
  • 7a32fde7e9e9e5fb44f8f8aafadd83a21ff82aaf: feat(1.6): add PostalAddress type (@​mcombuechen)
  • b8e4529773c3d12b172729567574ea6201231682: feat(1.6): add SpecVersion for v1.6 (@​mcombuechen)
  • c8778287f29dd21bff18a4f27f71f495de7b4991: feat(1.6): add environmentalConsiderations (@​mcombuechen)
  • e0e9c670e1617adbdd147cff7cc0747769a4e723: feat(1.6): add schema definitions for CycloneDX 1.6 (@​mcombuechen)
  • b1636c2d6bb8aca4161402958a8d894aab7d66b5: feat(1.6): extend EvidenceOccurrence (@​mcombuechen)
  • b4b3b94a60b1665c1d0492744032a9375ef751b1: fix(1.6): convert occurrences of OrganizationalEntity (@​mcombuechen)
  • 9332ca660b772bc538b3c274ceb3d9f81caa0eb8: fix(1.6): fix json, xml labels on BOM.Definitions (@​mcombuechen)

v0.8.0

This release ships with almost complete support for v1.5 of the CycloneDX specification.

The only exception being the extended data flow support, as used in SaaS BOMs.

Unfortunately, there are also breaking changes in this release:

  • The type of Metadata.Tools has changed from *[]Tool to *ToolsChoice, to facilitate the deprecation of Tool in the spec
    • ToolsChoice holds both legacy *[]Tool, as well as the new *[]Component and *[]Service fields
    • The Tool type, as well as the ToolsChoice.Tools field are marked as deprecated
    • During encoding and decoding, it is asserted that only one of both options can be present, in accordance with the "One of" constraint of the spec
    • When encoding to lower spec versions than v1.5 (using EncodeVersion), Components and Services are automatically converted to legacy Tools

... (truncated)

Commits
  • 98a070d Merge pull request #184 from CycloneDX/go-1.20
  • 07eb476 Merge pull request #139 from CycloneDX/dependabot/github_actions/apache/skywa...
  • 9166e10 fix: ioutil -> io
  • c97da90 fix: handle breaking changes in skywalking-eyes
  • c52e698 feat: raise baseline go version to 1.20
  • b1ff85b Merge pull request #181 from CycloneDX/dependabot/docker/gitpod/workspace-go-...
  • 64d6336 Merge pull request #182 from CycloneDX/spec/1.6
  • 199cd18 Merge pull request #183 from snyk/fix/convert-lic-header
  • ffec473 chore: add license header
  • 1179dd9 build(deps): bump gitpod/workspace-go from 8b9a0f6 to 8d15123
  • Additional commits viewable in compare view

Updates github.com/Microsoft/go-winio from 0.6.1 to 0.6.2

Release notes

Sourced from github.com/Microsoft/go-winio's releases.

v0.6.2

What's Changed

New Contributors

Full Changelog: microsoft/go-winio@v0.6.1...v0.6.2

Commits

Updates github.com/docker/docker-credential-helpers from 0.8.1 to 0.8.2

Release notes

Sourced from github.com/docker/docker-credential-helpers's releases.

v0.8.2

What's Changed

Full Changelog: docker/docker-credential-helpers@v0.8.1...v0.8.2

Commits
  • 6b9df3e Merge pull request #323 from thaJeztah/pass_simplify_get
  • dc10c50 Merge pull request #317 from docker/dependabot/github_actions/softprops/actio...
  • 896eb37 build(deps): bump softprops/action-gh-release to 2.0.5
  • a14669f pass: Get: remove redundant stat
  • 74840b3 Merge pull request #322 from thaJeztah/pass_dry
  • d3ef442 pass: add utilities for encoding/decoding serverURL
  • f64d6b1 Merge pull request #321 from thaJeztah/fix_pass_errors
  • 1bb9aa3 pass: return correct error, and ignore empty stores on list
  • 73b9e5d Merge pull request #320 from thaJeztah/update_gha
  • 0c43fed update to go1.21.10
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.17.6 to 1.17.9

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.9

What's Changed

Full Changelog: klauspost/compress@v1.17.8...v1.17.9

v1.17.8

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.7...v1.17.8

v1.17.7

What's Changed

Full Changelog: klauspost/compress@v1.17.6...v1.17.7

Commits
  • 7ae2138 Upgrade zlib to upstream (#971)
  • 0396178 zstd: BuildDict fails with RLE table (#951)
  • 8411e1d zip: Upgrade to 1.22.4 upstream (#970)
  • d9f6f55 build(deps): bump the github-actions group across 1 directory with 2 updates ...
  • 5f7dd25 flate, zstd: Shave some bytes off amd64 matchLen (#963)
  • 3a0faf3 Fix arm64 vet issues (#964)
  • 8bd3916 s2: Reduce ReadFrom temporary allocations (#949)
  • c0ff47e Update README.md
  • 657dc16 chore: remove repetitive words (#946)
  • 3f77d8c build(deps): bump the github-actions group with 1 update (#944)
  • Additional commits viewable in compare view

Updates github.com/knqyf263/go-rpmdb from 0.0.0-20230301153543-ba94b245509b to 0.1.1

Commits

Updates github.com/onsi/gomega from 1.31.1 to 1.33.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.33.1

1.33.1

Fixes

  • fix confusing eventually docs [3a66379]

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]

v1.33.0

1.33.0

Features

Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]
  • Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]
  • Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]

v1.32.0

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.33.1

Fixes

  • fix confusing eventually docs [3a66379]

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]

1.33.0

Features

Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]
  • Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]
  • Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

Commits
  • 8a658bb v1.33.1
  • e9bc35a Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
  • 3a66379 fix confusing eventually docs
  • f2e65fc v1.33.0
  • 02e8706 docs: Receive(POINTER, MATCHER)
  • ec1f186 feat: receiver matcher accepting (POINTER, MATCHER), includes unit tests
  • 9999deb Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745)
  • cb5ff21 Bump github-pages from 229 to 230 in /docs (#735)
  • bac6596 Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746)
  • 4379951 v1.32.0
  • Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/occam from 0.18.2 to 0.18.7

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.18.7

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.18.6...v0.18.7

v0.18.6

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.18.5...v0.18.6

v0.18.5

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.18.4...v0.18.5

v0.18.4

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.18.3...v0.18.4

v0.18.3

What's Changed

... (truncated)

Commits
  • aff3030 Buildpack packaging should always target linux
  • 7b8692d Updates go mod toolchain version to 1.22.4
  • ddf2781 Bump github.com/docker/docker
  • e9fee75 Adds support of buildpackages in buildpack store and updates freezer (#302)
  • dda57be Updating github-config
  • f0b937b Use stable go version everywhere.
  • 354d744 Bump to go 1.21
  • 64bc107 Updating github-config
  • d00fe4b Bump github.com/docker/docker
  • 37502e4 Bump github.com/testcontainers/testcontainers-go from 0.30.0 to 0.31.0
  • Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.12.0 to 2.14.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.14.0

What's Changed

New Contributors

Full Changelog: paketo-buildpacks/packit@v2.13.0...v2.14.0

v2.13.0

What's Changed

New Contributors

Full Changelog: paketo-buildpacks/packit@v2.12.0...v2.13.0

Commits
  • 13393ec Support reading service bindings from VCAP_SERVICES env var (#566)
  • 35d8f76 Bump github.com/onsi/gomega from 1.33.0 to 1.33.1
  • ce376b7 Fixes mirror bug when originalHost is excluded (#569)
  • 4c9f338 Allows users to set a dependency mirror (#563)
  • 4e9c21d Bump github.com/onsi/gomega from 1.32.0 to 1.33.0
  • dd77ec5 Bump github.com/ulikunitz/xz from 0.5.11 to 0.5.12
  • 95b8056 Bump github.com/onsi/gomega from 1.31.1 to 1.32.0
  • 777a503 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  • c1b785b Bump github.com/google/uuid from 1.5.0 to 1.6.0
  • b31dc83 Bump github.com/onsi/gomega from 1.31.0 to 1.31.1
  • Additional commits viewable in compare view

Updates github.com/shopspring/decimal from 1.3.1 to 1.4.0

Release notes

Sourced from github.com/shopspring/decimal's releases.

v1.4.0

Full Changelog can be found in CHANGELOG.md

New Contributors

Changelog

Sourced from github.com/shopspring/decimal's changelog.

Decimal v1.4.0

BREAKING

  • Drop support for Go version older than 1.10 #361

FEATURES

  • Add implementation of natural logarithm #339 #357
  • Add improved implementation of power operation #358
  • Add Compare method which forwards calls to Cmp #346
  • Add NewFromBigRat constructor #288
  • Add NewFromUint64 constructor #352

ENHANCEMENTS

  • Migrate to Github Actions #245 #340
  • Fix examples for RoundDown, RoundFloor, RoundUp, and RoundCeil #285 #328 #341
  • Use Godoc standard to mark deprecated Equals and StringScaled methods #342
  • Removed unnecessary min function for RescalePair method #265
  • Avoid reallocation of initial slice in MarshalBinary (GobEncode) #355
  • Optimize NumDigits method #301 #356
  • Optimize BigInt method #359
  • Support scanning uint64 #131 #364
  • Add docs section with alternative libraries #363

BUGFIXES

  • Fix incorrect calculation of decimal modulo #258 #317
  • Allocate new(big.Int) in Copy method to deeply clone it #278
  • Fix overflow edge case in QuoRem method #322
Commits

Updates `git...

Description has been truncated

Bumps the go-modules group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) | `1.3.2` | `1.4.0` |
| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.7.2` | `0.9.0` |
| [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio) | `0.6.1` | `0.6.2` |
| [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.8.1` | `0.8.2` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.6` | `1.17.9` |
| [github.com/knqyf263/go-rpmdb](https://github.com/knqyf263/go-rpmdb) | `0.0.0-20230301153543-ba94b245509b` | `0.1.1` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.31.1` | `1.33.1` |
| [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.18.2` | `0.18.7` |
| [github.com/shopspring/decimal](https://github.com/shopspring/decimal) | `1.3.1` | `1.4.0` |
| [github.com/spdx/tools-golang](https://github.com/spdx/tools-golang) | `0.5.3` | `0.5.4` |
| [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.15.1` | `2.16.0` |
| [github.com/vbatts/go-mtree](https://github.com/vbatts/go-mtree) | `0.5.3` | `0.5.4` |
| [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.11.4` | `0.12.4` |
| [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) | `4.2.1` | `4.3.0` |
| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.7` | `1.3.9` |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.2.4` | `0.2.5` |
| [github.com/distribution/reference](https://github.com/distribution/reference) | `0.5.0` | `0.6.0` |
| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.3` | `1.4.4` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.11.0` | `5.12.0` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.1` | `1.4.2` |
| [github.com/huandu/xstrings](https://github.com/huandu/xstrings) | `1.4.0` | `1.5.0` |
| [github.com/sassoftware/go-rpmutils](https://github.com/sassoftware/go-rpmutils) | `0.3.0` | `0.4.0` |
| [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) | `3.24.1` | `3.24.5` |
| [github.com/tklauser/go-sysconf](https://github.com/tklauser/go-sysconf) | `0.3.13` | `0.3.14` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.49.0` | `0.52.0` |
| google.golang.org/protobuf | `1.33.0` | `1.34.2` |



Updates `github.com/BurntSushi/toml` from 1.3.2 to 1.4.0
- [Release notes](https://github.com/BurntSushi/toml/releases)
- [Commits](BurntSushi/toml@v1.3.2...v1.4.0)

Updates `github.com/CycloneDX/cyclonedx-go` from 0.7.2 to 0.9.0
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml)
- [Commits](CycloneDX/cyclonedx-go@v0.7.2...v0.9.0)

Updates `github.com/Microsoft/go-winio` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/Microsoft/go-winio/releases)
- [Commits](microsoft/go-winio@v0.6.1...v0.6.2)

Updates `github.com/docker/docker-credential-helpers` from 0.8.1 to 0.8.2
- [Release notes](https://github.com/docker/docker-credential-helpers/releases)
- [Commits](docker/docker-credential-helpers@v0.8.1...v0.8.2)

Updates `github.com/klauspost/compress` from 1.17.6 to 1.17.9
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.6...v1.17.9)

Updates `github.com/knqyf263/go-rpmdb` from 0.0.0-20230301153543-ba94b245509b to 0.1.1
- [Commits](https://github.com/knqyf263/go-rpmdb/commits/v0.1.1)

Updates `github.com/onsi/gomega` from 1.31.1 to 1.33.1
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.31.1...v1.33.1)

Updates `github.com/paketo-buildpacks/occam` from 0.18.2 to 0.18.7
- [Release notes](https://github.com/paketo-buildpacks/occam/releases)
- [Commits](paketo-buildpacks/occam@v0.18.2...v0.18.7)

Updates `github.com/paketo-buildpacks/packit/v2` from 2.12.0 to 2.14.0
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.12.0...v2.14.0)

Updates `github.com/shopspring/decimal` from 1.3.1 to 1.4.0
- [Release notes](https://github.com/shopspring/decimal/releases)
- [Changelog](https://github.com/shopspring/decimal/blob/master/CHANGELOG.md)
- [Commits](shopspring/decimal@v1.3.1...v1.4.0)

Updates `github.com/spdx/tools-golang` from 0.5.3 to 0.5.4
- [Release notes](https://github.com/spdx/tools-golang/releases)
- [Changelog](https://github.com/spdx/tools-golang/blob/main/RELEASE-NOTES.md)
- [Commits](spdx/tools-golang@v0.5.3...v0.5.4)

Updates `github.com/sylabs/sif/v2` from 2.15.1 to 2.16.0
- [Release notes](https://github.com/sylabs/sif/releases)
- [Changelog](https://github.com/sylabs/sif/blob/main/.goreleaser.yml)
- [Commits](sylabs/sif@v2.15.1...v2.16.0)

Updates `github.com/vbatts/go-mtree` from 0.5.3 to 0.5.4
- [Release notes](https://github.com/vbatts/go-mtree/releases)
- [Changelog](https://github.com/vbatts/go-mtree/blob/main/releases.md)
- [Commits](vbatts/go-mtree@v0.5.3...v0.5.4)

Updates `golang.org/x/crypto` from 0.22.0 to 0.24.0
- [Commits](golang/crypto@v0.22.0...v0.24.0)

Updates `golang.org/x/net` from 0.21.0 to 0.24.0
- [Commits](golang/net@v0.21.0...v0.24.0)

Updates `golang.org/x/sync` from 0.6.0 to 0.7.0
- [Commits](golang/sync@v0.6.0...v0.7.0)

Updates `golang.org/x/sys` from 0.19.0 to 0.21.0
- [Commits](golang/sys@v0.19.0...v0.21.0)

Updates `github.com/ForestEckhardt/freezer` from 0.0.12 to 0.1.0
- [Release notes](https://github.com/ForestEckhardt/freezer/releases)
- [Commits](ForestEckhardt/freezer@v0.0.12...v0.1.0)

Updates `github.com/Microsoft/hcsshim` from 0.11.4 to 0.12.4
- [Release notes](https://github.com/Microsoft/hcsshim/releases)
- [Commits](microsoft/hcsshim@v0.11.4...v0.12.4)

Updates `github.com/cenkalti/backoff/v4` from 4.2.1 to 4.3.0
- [Commits](cenkalti/backoff@v4.2.1...v4.3.0)

Updates `github.com/cloudflare/circl` from 1.3.7 to 1.3.9
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](cloudflare/circl@v1.3.7...v1.3.9)

Updates `github.com/cyphar/filepath-securejoin` from 0.2.4 to 0.2.5
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Commits](cyphar/filepath-securejoin@v0.2.4...v0.2.5)

Updates `github.com/distribution/reference` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/distribution/reference/releases)
- [Commits](distribution/reference@v0.5.0...v0.6.0)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.3...v1.4.4)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.12.0)

Updates `github.com/go-logr/logr` from 1.4.1 to 1.4.2
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.1...v1.4.2)

Updates `github.com/google/go-containerregistry` from 0.19.0 to 0.19.1
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.19.0...v0.19.1)

Updates `github.com/huandu/xstrings` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/huandu/xstrings/releases)
- [Commits](huandu/xstrings@v1.4.0...v1.5.0)

Updates `github.com/sassoftware/go-rpmutils` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/sassoftware/go-rpmutils/releases)
- [Commits](sassoftware/go-rpmutils@v0.3.0...v0.4.0)

Updates `github.com/sergi/go-diff` from 1.3.1 to 1.3.2-0.20230802210424-5b0b94c5c0d3
- [Commits](https://github.com/sergi/go-diff/commits)

Updates `github.com/shirou/gopsutil/v3` from 3.24.1 to 3.24.5
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v3.24.1...v3.24.5)

Updates `github.com/skeema/knownhosts` from 1.2.1 to 1.2.2
- [Commits](skeema/knownhosts@v1.2.1...v1.2.2)

Updates `github.com/tklauser/go-sysconf` from 0.3.13 to 0.3.14
- [Release notes](https://github.com/tklauser/go-sysconf/releases)
- [Commits](tklauser/go-sysconf@v0.3.13...v0.3.14)

Updates `github.com/tklauser/numcpus` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/tklauser/numcpus/releases)
- [Commits](tklauser/numcpus@v0.7.0...v0.8.0)

Updates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.12
- [Commits](ulikunitz/xz@v0.5.11...v0.5.12)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.49.0 to 0.52.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.49.0...zpages/v0.52.0)

Updates `go.opentelemetry.io/otel` from 1.24.0 to 1.27.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.27.0)

Updates `go.opentelemetry.io/otel/metric` from 1.24.0 to 1.27.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.27.0)

Updates `go.opentelemetry.io/otel/trace` from 1.24.0 to 1.27.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.27.0)

Updates `golang.org/x/exp` from 0.0.0-20230510235704-dd950f8aeaea to 0.0.0-20231006140011-7918f672742d
- [Commits](https://github.com/golang/exp/commits)

Updates `golang.org/x/mod` from 0.16.0 to 0.17.0
- [Commits](golang/mod@v0.16.0...v0.17.0)

Updates `golang.org/x/text` from 0.14.0 to 0.16.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.14.0...v0.16.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20231120223509-83a465c0220f to 0.0.0-20240123012728-ef4313101c80
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.61.0...v1.62.0)

Updates `google.golang.org/protobuf` from 1.33.0 to 1.34.2

---
updated-dependencies:
- dependency-name: github.com/BurntSushi/toml
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Microsoft/go-winio
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/docker/docker-credential-helpers
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/knqyf263/go-rpmdb
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/occam
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/shopspring/decimal
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/spdx/tools-golang
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/sylabs/sif/v2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/vbatts/go-mtree
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sync
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/ForestEckhardt/freezer
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Microsoft/hcsshim
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cenkalti/backoff/v4
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cloudflare/circl
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/distribution/reference
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/go-logr/logr
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/google/go-containerregistry
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/huandu/xstrings
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sassoftware/go-rpmutils
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sergi/go-diff
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/shirou/gopsutil/v3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/skeema/knownhosts
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/tklauser/go-sysconf
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/tklauser/numcpus
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/ulikunitz/xz
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/exp
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner June 13, 2024 06:56
@dependabot dependabot bot added the failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow label Jun 13, 2024
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Jun 13, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 20, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 20, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-modules-3a81be829a branch June 20, 2024 06:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow semver:patch A change requiring a patch version bump
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants