Skip to content

Update go modules (release-v0.8) (patch)#1729

Open
renovate[bot] wants to merge 1 commit into
release-v0.8from
renovate/release-v0.8-patch-go-modules
Open

Update go modules (release-v0.8) (patch)#1729
renovate[bot] wants to merge 1 commit into
release-v0.8from
renovate/release-v0.8-patch-go-modules

Conversation

@renovate

@renovate renovate Bot commented May 16, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/conforma/cli v0.8.108v0.8.129 age adoption passing confidence
github.com/conforma/go-containerregistry v0.20.7-0.20251103083939-3459088e4baev0.20.7 age adoption passing confidence
github.com/tektoncd/cli v0.42.1v0.42.2 age adoption passing confidence
oras.land/oras v1.3.0v1.3.2 age adoption passing confidence

Release Notes

conforma/cli (github.com/conforma/cli)

v0.8.129

Compare Source

v0.8.123

Compare Source

v0.8.122

Compare Source

v0.8.120

Compare Source

conforma/go-containerregistry (github.com/conforma/go-containerregistry)

v0.20.7

Compare Source

tektoncd/cli (github.com/tektoncd/cli)

v0.42.2

Compare Source

v0.42.2 Release 🎉

This patch release addresses the following CVEs: CVE-2026-33186, CVE-2026-33810, CVE-2025-61729 and CVE-2025-61726.

Changelog

Full Changelog: tektoncd/cli@v0.42.1...v0.42.2


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot enabled auto-merge (squash) May 16, 2026 00:50
@renovate

renovate Bot commented May 16, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 16 additional dependencies were updated

Details:

Package Change
cloud.google.com/go/auth v0.17.0 -> v0.18.0
cloud.google.com/go/monitoring v1.24.2 -> v1.24.3
github.com/go-chi/chi/v5 v5.2.3 -> v5.2.4
github.com/go-openapi/errors v0.22.5 -> v0.22.6
github.com/go-openapi/spec v0.22.2 -> v0.22.3
github.com/googleapis/enterprise-certificate-proxy v0.3.7 -> v0.3.9
github.com/googleapis/gax-go/v2 v2.15.0 -> v2.16.0
github.com/mattn/go-runewidth v0.0.16 -> v0.0.19
github.com/olekukonko/ll v0.0.9 -> v0.1.3
github.com/olekukonko/tablewriter v1.1.0 -> v1.1.2
github.com/sigstore/rekor v1.4.3 -> v1.5.0
github.com/sirupsen/logrus v1.9.4-0.20230606125235-dd1b4c2e81af -> v1.9.4
google.golang.org/api v0.258.0 -> v0.260.0
google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9 -> v0.0.0-20251202230838-ff82c1b0f217
gopkg.in/ini.v1 v1.67.0 -> v1.67.1
sigs.k8s.io/release-utils v0.12.2 -> v0.12.3
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 24 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.5 -> 1.26.2
cloud.google.com/go/auth v0.17.0 -> v0.18.0
cloud.google.com/go/firestore v1.18.0 -> v1.20.0
cloud.google.com/go/longrunning v0.6.7 -> v0.7.0
cloud.google.com/go/monitoring v1.24.2 -> v1.24.3
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 -> v1.31.0
github.com/cncf/xds/go v0.0.0-20251022180443-0feb69152e9f -> v0.0.0-20251210132809-ee656c7534f5
github.com/envoyproxy/go-control-plane/envoy v1.35.0 -> v1.36.0
github.com/envoyproxy/protoc-gen-validate v1.2.1 -> v1.3.0
github.com/go-chi/chi/v5 v5.2.3 -> v5.2.4
github.com/go-openapi/errors v0.22.5 -> v0.22.6
github.com/go-openapi/spec v0.22.2 -> v0.22.3
github.com/googleapis/enterprise-certificate-proxy v0.3.7 -> v0.3.9
github.com/googleapis/gax-go/v2 v2.15.0 -> v2.16.0
github.com/olekukonko/ll v0.1.2 -> v0.1.3
github.com/olekukonko/tablewriter v1.1.0 -> v1.1.2
github.com/sigstore/rekor v1.4.3 -> v1.5.0
github.com/sirupsen/logrus v1.9.4-0.20230606125235-dd1b4c2e81af -> v1.9.4
go.opentelemetry.io/contrib/detectors/gcp v1.38.0 -> v1.39.0
google.golang.org/api v0.258.0 -> v0.260.0
google.golang.org/genproto v0.0.0-20250922171735-9219d122eba9 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 -> v0.0.0-20260120221211-b8f7ae30c516
google.golang.org/grpc v1.78.0 -> v1.80.0
gopkg.in/ini.v1 v1.67.0 -> v1.67.1
sigs.k8s.io/release-utils v0.12.2 -> v0.12.3

@renovate renovate Bot force-pushed the renovate/release-v0.8-patch-go-modules branch from 73a8b63 to e2219b2 Compare June 26, 2026 19:20
@fullsend-ai-review

fullsend-ai-review Bot commented Jun 26, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 7:23 PM UTC · Completed 7:28 PM UTC
Commit: 47d3320 · View workflow run →

@fullsend-ai-review

Copy link
Copy Markdown

Looks good to me

@fullsend-ai-review fullsend-ai-review Bot added the ready-for-merge All reviewers approved — ready to merge label Jun 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ready-for-merge All reviewers approved — ready to merge release-v0.8 renovate size: XXL

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants