chore(deps): bump the go group across 1 directory with 7 updates #710

dependabot · 2025-08-03T15:08:05Z

Bumps the go group with 7 updates in the / directory:

Package	From	To
cuelang.org/go	`0.13.2`	`0.14.0`
github.com/fluxcd/pkg/runtime	`0.74.0`	`0.78.0`
github.com/mikefarah/yq/v4	`4.45.4`	`4.47.1`
github.com/onsi/gomega	`1.37.0`	`1.38.0`
ocm.software/ocm	`0.26.0`	`0.27.0`
sigs.k8s.io/kustomize/api	`0.20.0`	`0.20.1`
sigs.k8s.io/yaml	`1.5.0`	`1.6.0`

Updates cuelang.org/go from 0.13.2 to 0.14.0

Updates github.com/fluxcd/pkg/runtime from 0.74.0 to 0.78.0

Commits

04d916d Merge pull request #997 from cappyzawa/feat/tls-config-from-secret-ref-options
4642dab Prepare for release
27b414e runtime/secrets: add TLSConfigOption support to TLSConfigFromSecretRef
dbf1d22 Merge pull request #995 from cappyzawa/feat/tls-config-options
cb022f7 Prepare for release
488ca09 runtime/secrets: add WithSystemCertPool for CA handling
1c8c7bb Merge pull request #993 from cappyzawa/feat/remove-insecure-parameter
e98aecf Prepare for release
b59d18d runtime/secrets: remove insecure parameter from TLS funcs
44b53bd Merge pull request #992 from fluxcd/ssa-manager-exact-match
Additional commits viewable in compare view

Updates github.com/mikefarah/yq/v4 from 4.45.4 to 4.47.1

Release notes

Sourced from github.com/mikefarah/yq/v4's releases.

v4.47.1 - Merge Anchor fixes (with flag)

Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes

Fixed panic for syntax error when creating a map #2423

Bumped dependencies

v4.46.1 - INI support + bug fixes

Added INI support

Fixed 'add' operator when piped in with no data #2378, #2383, #2384

Fixed delete after slice problem (bad node path) #2387 Thanks @antoinedeschenes

Fixed yq small build Thanks @imzue

Switched to YAML org supported go-yaml!

Bumped dependencies

Changelog

Sourced from github.com/mikefarah/yq/v4's changelog.

4.47.1:

Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes

Fixed panic for syntax error when creating a map #2423

Bumped dependencies

4.46.1:

Added INI support

Fixed 'add' operator when piped in with no data #2378, #2383, #2384

Fixed delete after slice problem (bad node path) #2387 Thanks @antoinedeschenes

Fixed yq small build Thanks @imzue

Switched to YAML org supported go-yaml!

Bumped dependencies

Commits

f03c9dc Bumping version
023c85e Adding test for #2404
a3d9e01 Prepping release notes
ab3be22 Bump github.com/spf13/pflag from 1.0.6 to 1.0.7
93fed3f Bump golang.org/x/net from 0.41.0 to 0.42.0
f42534e Bump github.com/alecthomas/repr from 0.4.0 to 0.5.1
b968963 Merge branch 'stevenwdv-merge-anchor-fix'
92309b1 Fixed test doc gen
d5757fc Working on clarifying docs
db2a455 Fixed tests
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.37.0 to 1.38.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.38.0

1.38.0

Features

gstruct handles extra unexported fields [4ee7ed0]

Fixes

support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]

Fix typo [acd1f55]

Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]

Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]

Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]

Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]

Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]

Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]

Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.38.0

Features

gstruct handles extra unexported fields [4ee7ed0]

Fixes

support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]

Fix typo [acd1f55]

Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]

Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]

Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]

Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]

Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]

Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]

Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

Commits

c1237df v1.38.0
36bbf72 support [] in IgnoringTopFunction function signatures (#851)
4ee7ed0 gstruct handles extra unexported fields
529d408 Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846)
acd1f55 Fix typo
bae65a0 Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835)
8dda91f Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842)
212d812 Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843)
59bd7f9 Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839)
328c729 Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834)
Additional commits viewable in compare view

Updates ocm.software/ocm from 0.26.0 to 0.27.0

Release notes

Sourced from ocm.software/ocm's releases.

v0.27.0

What's Changed

⬆️ Dependencies

chore(deps): bump the go group with 14 updates by @dependabot in open-component-model/ocm#1521

chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in the go_modules group by @dependabot in open-component-model/ocm#1525

chore(deps): bump the go group with 7 updates by @dependabot in open-component-model/ocm#1527

🧰 Maintenance

chore: bump VERSION to 0.27.0-dev by @ocmbot in open-component-model/ocm#1516

Full Changelog: open-component-model/ocm@v0.26...v0.27.0

v0.27.0-rc.1

What's Changed

⬆️ Dependencies

chore(deps): bump the go group with 14 updates by @dependabot in open-component-model/ocm#1521

chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in the go_modules group by @dependabot in open-component-model/ocm#1525

chore(deps): bump the go group with 7 updates by @dependabot in open-component-model/ocm#1527

🧰 Maintenance

chore: bump VERSION to 0.27.0-dev by @ocmbot in open-component-model/ocm#1516

Full Changelog: open-component-model/ocm@v0.26...v0.27.0

Commits

3ff8ed0 chore(deps): bump github/codeql-action from 3.29.1 to 3.29.2 in the ci group ...
1da7ef2 chore: update 'flake.nix' (#1529)
2b06ef5 chore(deps): bump the go group with 7 updates (#1527)
c3fa9d5 chore: update 'flake.nix' (#1526)
6d26cc2 chore(deps): bump the ci group with 2 updates (#1528)
b1b3dc8 chore(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in ...
8f6bd2a chore(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.1 in the ci gro...
b0ba88b chore(deps): bump rojopolis/spellcheck-github-actions from 0.50.0 to 0.51.0 i...
7b3aaee chore: update 'flake.nix' (#1522)
249f68c chore(deps): bump the go group with 14 updates (#1521)
Additional commits viewable in compare view

Updates sigs.k8s.io/kustomize/api from 0.20.0 to 0.20.1

Release notes

Sourced from sigs.k8s.io/kustomize/api's releases.

api/v0.20.1

#5943: drop shlex dependency #5948: Update kyaml to v0.20.1

cmd/config/v0.20.1

#5948: Update kyaml to v0.20.1

kyaml/v0.20.1

No release notes provided.

Commits

8b42cd9 Merge pull request #5949 from koba1t/pinToCmdConfig
5b313f5 Update cmd/config to v0.20.1
792b241 Merge pull request #5948 from koba1t/pinToKyaml
8192ab3 Update kyaml to v0.20.1
87f462a Merge pull request #5943 from koba1t/chore/drop_shlex_dependency
3866a30 introduce one const value that indicate to no quote in ShlexSplit()
5cb1b4e remove shlex dependencies
b612895 add ShlexSplit() as an alternative to shlex.Split()
042a2cf add testcases for shlexsplit
f9ab532 Merge pull request #5937 from koba1t/unpinEverything
Additional commits viewable in compare view

Updates sigs.k8s.io/yaml from 1.5.0 to 1.6.0

Release notes

Sourced from sigs.k8s.io/yaml's releases.

v1.6.0

What's Changed

Add "kyaml" support and yamlfmt by @thockin in kubernetes-sigs/yaml#132

Commits

048d724 Merge pull request #132 from thockin/master
23c836c Bolster tests, mostly in error-handling
2e3340b Add compact output tests
4a4f539 Add test case for tabs in multi-line strings
13509ad Change which methods get a newline and fix tests
59c2c43 Add compact mode so KYAML can be used in more places
abc1add kyaml: Implement escaping closer to YAML spec
7749171 Add a yamlfmt cmd
a932007 Add KYAML support
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | cuelang.org/go | `0.13.2` | `0.14.0` | | [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.74.0` | `0.78.0` | | [github.com/mikefarah/yq/v4](https://github.com/mikefarah/yq) | `4.45.4` | `4.47.1` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.37.0` | `1.38.0` | | [ocm.software/ocm](https://github.com/open-component-model/ocm) | `0.26.0` | `0.27.0` | | [sigs.k8s.io/kustomize/api](https://github.com/kubernetes-sigs/kustomize) | `0.20.0` | `0.20.1` | | [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) | `1.5.0` | `1.6.0` | Updates `cuelang.org/go` from 0.13.2 to 0.14.0 Updates `github.com/fluxcd/pkg/runtime` from 0.74.0 to 0.78.0 - [Commits](fluxcd/pkg@runtime/v0.74.0...runtime/v0.78.0) Updates `github.com/mikefarah/yq/v4` from 4.45.4 to 4.47.1 - [Release notes](https://github.com/mikefarah/yq/releases) - [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt) - [Commits](mikefarah/yq@v4.45.4...v4.47.1) Updates `github.com/onsi/gomega` from 1.37.0 to 1.38.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.37.0...v1.38.0) Updates `ocm.software/ocm` from 0.26.0 to 0.27.0 - [Release notes](https://github.com/open-component-model/ocm/releases) - [Changelog](https://github.com/open-component-model/ocm/blob/main/RELEASE_PROCESS.md) - [Commits](open-component-model/ocm@v0.26...v0.27) Updates `sigs.k8s.io/kustomize/api` from 0.20.0 to 0.20.1 - [Release notes](https://github.com/kubernetes-sigs/kustomize/releases) - [Commits](kubernetes-sigs/kustomize@api/v0.20.0...api/v0.20.1) Updates `sigs.k8s.io/yaml` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: cuelang.org/go dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/pkg/runtime dependency-version: 0.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/mikefarah/yq/v4 dependency-version: 4.47.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/onsi/gomega dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: ocm.software/ocm dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: sigs.k8s.io/kustomize/api dependency-version: 0.20.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: sigs.k8s.io/yaml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: Hilmar Falkenberg <hilmar.falkenberg@sap.com>

dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Aug 3, 2025

dependabot bot requested a review from a team as a code owner August 3, 2025 15:08

dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Aug 3, 2025

hilmarf added 2 commits August 4, 2025 15:07

downgrade github.com/mikefarah/yq/v4 v4.45.4

04fc56a

Signed-off-by: Hilmar Falkenberg <hilmar.falkenberg@sap.com>

Merge branch 'main' into dependabot/go_modules/go-ea62c97a1c

77fe02a

hilmarf enabled auto-merge (squash) August 4, 2025 13:07

hilmarf approved these changes Aug 4, 2025

View reviewed changes

Merge branch 'main' into dependabot/go_modules/go-ea62c97a1c

f3e229a

jakobmoellerdev approved these changes Aug 5, 2025

View reviewed changes

hilmarf merged commit 8c8d8e5 into main Aug 5, 2025
9 checks passed

hilmarf deleted the dependabot/go_modules/go-ea62c97a1c branch August 5, 2025 11:44

ocmbot bot added this to the 2025-Q3 milestone Aug 5, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go group across 1 directory with 7 updates #710

chore(deps): bump the go group across 1 directory with 7 updates #710

Uh oh!

dependabot bot commented on behalf of github Aug 3, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

chore(deps): bump the go group across 1 directory with 7 updates #710

chore(deps): bump the go group across 1 directory with 7 updates #710

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 3, 2025

v4.47.1 - Merge Anchor fixes (with flag)

v4.46.1 - INI support + bug fixes

v1.38.0

1.38.0

Features

Fixes

Maintenance

1.38.0

Features

Fixes

Maintenance

v0.27.0

What's Changed

⬆️ Dependencies

🧰 Maintenance

v0.27.0-rc.1

What's Changed

⬆️ Dependencies

🧰 Maintenance

api/v0.20.1

cmd/config/v0.20.1

kyaml/v0.20.1

v1.6.0

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants