Bump the go_modules group across 1 directory with 9 updates#1
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
Bump the go_modules group across 1 directory with 9 updates#1dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the go_modules group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.13` | `1.7.29` | | [github.com/docker/docker](https://github.com/docker/docker) | `25.0.3+incompatible` | `25.0.13+incompatible` | | [github.com/docker/cli](https://github.com/docker/cli) | `24.0.7+incompatible` | `29.2.0+incompatible` | | [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.0` | `4.5.2` | | [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux) | `1.11.0` | `1.13.0` | Updates `github.com/containerd/containerd` from 1.7.13 to 1.7.29 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.13...v1.7.29) Updates `github.com/docker/docker` from 25.0.3+incompatible to 25.0.13+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v25.0.3...v25.0.13) Updates `github.com/docker/cli` from 24.0.7+incompatible to 29.2.0+incompatible - [Commits](docker/cli@v24.0.7...v29.2.0) Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Commits](golang-jwt/jwt@v4.5.0...v4.5.2) Updates `github.com/opencontainers/selinux` from 1.11.0 to 1.13.0 - [Release notes](https://github.com/opencontainers/selinux/releases) - [Commits](opencontainers/selinux@v1.11.0...v1.13.0) Updates `golang.org/x/crypto` from 0.18.0 to 0.40.0 - [Commits](golang/crypto@v0.18.0...v0.40.0) Updates `golang.org/x/net` from 0.20.0 to 0.42.0 - [Commits](golang/net@v0.20.0...v0.42.0) Updates `golang.org/x/oauth2` from 0.16.0 to 0.30.0 - [Commits](golang/oauth2@v0.16.0...v0.30.0) Updates `google.golang.org/protobuf` from 1.32.0 to 1.35.2 --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-version: 1.7.29 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/docker/docker dependency-version: 25.0.13+incompatible dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/docker/cli dependency-version: 29.2.0+incompatible dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/golang-jwt/jwt/v4 dependency-version: 4.5.2 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/opencontainers/selinux dependency-version: 1.13.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.40.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.42.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/oauth2 dependency-version: 0.30.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/protobuf dependency-version: 1.35.2 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go_modules group with 5 updates in the / directory:
1.7.131.7.2925.0.3+incompatible25.0.13+incompatible24.0.7+incompatible29.2.0+incompatible4.5.04.5.21.11.01.13.0Updates
github.com/containerd/containerdfrom 1.7.13 to 1.7.29Release notes
Sourced from github.com/containerd/containerd's releases.
... (truncated)
Commits
442cb34Merge commit from forke5cb6ddMerge commit from fork9772966Merge pull request #12486 from dmcgowan/prepare-v1.7.291fc2daaPrepare release notes for v1.7.2993f710aMerge pull request #12480 from k8s-infra-cherrypick-robot/cherry-pick-12475-t...68d04beMerge pull request #12471 from austinvazquez/1_7_update_ci_go_and_images3f5f9f8runc: Update runc binary to v1.3.3667409fci: bump Go 1.24.9, 1.25.3294f8c0Update GHA runners to use latest images for basic binaries buildcf66b41Update GHA runners to use latest image for most jobsUpdates
github.com/docker/dockerfrom 25.0.3+incompatible to 25.0.13+incompatibleRelease notes
Sourced from github.com/docker/docker's releases.
... (truncated)
Commits
165516eMerge pull request #50551 from corhere/backport-25.0/libn/all-the-overlay-fixesf099e91libnetwork: handle coalesced endpoint eventsbace1b8libnetwork/d/overlay: handle coalesced peer updatesf9e5429libn/d/win/overlay: dedupe NetworkDB definitionsfc3df55libn/d/overlay: extract hashable address typesb22872alibnetwork/driverapi: make EventNotify optionalc7e17aelibn/networkdb: report prev value in update eventsd60c71alibnetwork/d/overlay: fix logical race conditionsad54b8flibn/d/overlay: fix encryption race conditions8075689libn/d/overlay: inline secMapWalk into only callerUpdates
github.com/docker/clifrom 24.0.7+incompatible to 29.2.0+incompatibleCommits
0b9d198Merge pull request #6764 from vvoland/update-docker9c9ec73vendor: github.com/moby/moby/client v0.2.2bab3e81vendor: github.com/moby/moby/api v1.53.02e64fc1Merge pull request #6367 from thaJeztah/template_slicejoin1f2ba2aMerge pull request #6760 from thaJeztah/container_create_fix_errore34a342templates: make "join" work with non-string slices and map valuesa86356dMerge pull request #6763 from thaJeztah/bump_mapstructure771660avendor: github.com/go-viper/mapstructure/v2 v2.5.09cff36bMerge pull request #6762 from thaJeztah/bump_x_deps08ed2bccli/command/container: make injecting config.json failures a warningUpdates
github.com/golang-jwt/jwt/v4from 4.5.0 to 4.5.2Release notes
Sourced from github.com/golang-jwt/jwt/v4's releases.
Commits
2f0e9adBackporting 0951d18 to v47b1c1c0Merge commit from forkUpdates
github.com/opencontainers/selinuxfrom 1.11.0 to 1.13.0Release notes
Sourced from github.com/opencontainers/selinux's releases.
... (truncated)
Commits
4be9937Merge pull request #237 from cyphar/selinux-safe-procfsc8cfa6fselinux: migrate to pathrs-lite procfs APIf2424d8Merge pull request #236 from kolyshkin/modernize-ci648ce7fci: add go 1.25916cab9ci: bump golangci-lint to v2.5b42e5c8all: format sources with latest gofumpt74393eaMerge pull request #235 from cyphar/fix-keyring-err-check6ec194bkeyring: fix typo in EACCES check879a755Merge pull request #234 from opencontainers/dependabot/github_actions/actions...3c1bd9abuild(deps): bump actions/setup-go from 5 to 6Updates
golang.org/x/cryptofrom 0.18.0 to 0.40.0Commits
459a9dbgo.mod: update golang.org/x dependencies74e709assh: add AlgorithmNegotiationErrorb3790b8acme: fix TLSALPN01ChallengeCert for IP address identifiers1dc4269acme: add Pebble integration testing97bf787blake2b: implement hash.XOF952517dx509roots/fallback: update bundlec6fce02ssh: refuse to parse certificates that use a certificate as signing key0ae49b8ssh: reject certificate keys used as signature keys for SSH certs3bf9d2assh/test: skip KEX test if unsupported by system SSH client9bab967go.mod: update golang.org/x dependenciesUpdates
golang.org/x/netfrom 0.20.0 to 0.42.0Commits
76358aago.mod: update golang.org/x dependencies6e41caego.mod: update golang.org/x dependencies15f7d40http2: correctly wrap ErrFrameTooLarge in Framer.ReadFrameef33bc0internal/http3: use bubbled context in synctest tests919c6bchttp2: use an array instead of a map in typeFrameParserbae01a7trace: add missing td tag7d6e62ago.mod: update golang.org/x dependenciesea0c1d9internal/timeseries: use built-in max/min to simplify the code3e7a445quic: skip packet numbers for optimistic ack defense3f563d3quic: use an enum for sentPacket stateUpdates
golang.org/x/oauth2from 0.16.0 to 0.30.0Commits
cf14319oauth2: fix expiration time window check32d34efinternal: include clientID in auth style cache key2d34e30oauth2: replace a magic number with AuthStyleUnknown696f7b3all: modernize with doc links and any471209boauth2: drop dependency on go-cmp6968da2oauth2: sync Token.ExpiresIn from internal Tokend2c4e0aoauth2: context instead of golang.org/x/net/context in doc883dc3cendpoints: add various endpoints from stale CLs1c06e87all: make use of oauth.Token.ExpiresIn65c15a3oauth2: remove extra periodUpdates
google.golang.org/protobuffrom 1.32.0 to 1.35.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.