Skip to content

Bump the go-deps group across 1 directory with 7 updates#1607

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-deps-a0a47eb207
Open

Bump the go-deps group across 1 directory with 7 updates#1607
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-deps-a0a47eb207

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 27, 2026

Bumps the go-deps group with 7 updates in the / directory:

Package From To
cloud.google.com/go/kms 1.25.0 1.26.0
github.com/fluxcd/cli-utils 0.37.1-flux.1 0.37.2-flux.1
github.com/fluxcd/pkg/auth 0.38.2 0.39.0
github.com/fluxcd/pkg/runtime 0.100.2 0.102.0
github.com/fluxcd/pkg/ssa 0.67.1 0.69.0
github.com/google/cel-go 0.26.1 0.27.0
golang.org/x/net 0.50.0 0.51.0

Updates cloud.google.com/go/kms from 1.25.0 to 1.26.0

Release notes

Sourced from cloud.google.com/go/kms's releases.

retail 1.26.0

1.26.0 (2026-01-29)

Features

  • add a user_attributes field in SearchRequest that can be used for personalization (PiperOrigin-RevId: 861314205) (d8ea738a)

  • add a model_scores field in SearchResponse.results to expose model quality signals (PiperOrigin-RevId: 861314205) (d8ea738a)

kms: v1.26.0

v1.26.0 (2026-02-19)

Features

  • Introduced the RetiredResource resource to track records of deleted keys and prevent the reuse of their resource names (PiperOrigin-RevId: 868670725) (d3eb851d)

  • Added ListRetiredResources and GetRetiredResource RPCs to manage and view these records (PiperOrigin-RevId: 868670725) (d3eb851d)

  • Added DeleteCryptoKey and DeleteCryptoKeyVersion RPCs to permanently remove resources (PiperOrigin-RevId: 868670725) (d3eb851d)

  • Add KeyProjectResolutionMode to AutokeyConfig to support project-level configurations (PiperOrigin-RevId: 870858133) (d3eb851d)

  • Add support for project level key usage tracking (PiperOrigin-RevId: 871667322) (d3eb851d)

  • Add more post-quantum (PQ) signature algorithms to CryptoKeyVersion (PiperOrigin-RevId: 870858133) (d3eb851d)

Documentation

  • Clarify supported resources for the crypto_key_backend field in ImportJob (PiperOrigin-RevId: 870858133) (d3eb851d)

  • Update documentation for AutokeyAdmin service and messages to support folder and project-level configurations (PiperOrigin-RevId: 870858133) (d3eb851d)

Changelog

Sourced from cloud.google.com/go/kms's changelog.

1.26.0 (2024-02-21)

Features

  • documentai: A new field schema_override is added to message ProcessOptions (#9400) (a86aa8e)
  • documentai: A new message FoundationModelTuningOptions is added (7e6c208)
Commits
  • 8ebb896 chore: librarian release pull request: 20251010T200657Z (#13107)
  • befb302 test(internal/postprocessor): skip test that expects certain live config (#13...
  • 1930511 testing(internal/godocfx): convert equality check to a diff check (#13089)
  • e6b9d41 chore: migrate compute/metadata to Librarian (#13009)
  • 6259aee fix(storage): skip download of file outside of target dir (#12945)
  • bafd691 perf(bigtable): parallelize the exportTimeSeries function (#13004)
  • 2b75879 chore: release main (#13082)
  • 9157a71 chore: bump changed modules (#13083)
  • a93d961 fix: upgrade gRPC service registration func (#13079)
  • 75c95f3 chore: librarian generate pull request: 20251009T073841Z (#13080)
  • Additional commits viewable in compare view

Updates github.com/fluxcd/cli-utils from 0.37.1-flux.1 to 0.37.2-flux.1

Commits
  • aeb0ebe Merge pull request #23 from fluxcd/k8s-1.35.1
  • 655fbc4 Update dependencies to Kubernetes v1.35.1
  • 05291d6 Merge pull request #22 from fluxcd/fix-kstatus-polling-pending-pods
  • 28dac90 fix: exclude transient pod failures from controller status
  • See full diff in compare view

Updates github.com/fluxcd/pkg/auth from 0.38.2 to 0.39.0

Commits
  • 572c0fc Merge pull request #1058 from fluxcd/dependabot/github_actions/ci-30d17f4058
  • ac6c615 build(deps): bump the ci group across 1 directory with 4 updates
  • 7dedb99 Merge pull request #1067 from fluxcd/git-unify
  • 0e641e6 git: merge gogit module into git module
  • fd7874f Merge pull request #1055 from yozel/yozel/bug-fix
  • 2cd3485 Fix incorrect metadata patch generation
  • f92d4c6 Merge pull request #1064 from fluxcd/gh-refactor
  • 6b57946 git: refactor GitHub App auth to use go-github direclty
  • 3f44dbd Merge pull request #1063 from fluxcd/test-chunks
  • 387d652 Revert "Use large runners for tests"
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.100.2 to 0.102.0

Commits
  • 197b0fd Merge pull request #1120 from fluxcd/release-main
  • 7c22edb Fix release preview workflow
  • cf1b387 Prepare for release
  • 21b9098 Merge pull request #1118 from alvaroaleman/disable-clientside
  • efbb0c9 Kubeconfig: Disable clientside ratelimtier if flowcontrol is supported
  • 0ce88c6 Merge pull request #1110 from fluxcd/release-main
  • 66c8a30 Prepare for release
  • 1737eab cmd: fix not removing v prefix
  • 52bc1ed Merge pull request #1116 from fluxcd/cmd-bump
  • 5537abd cmd: introduce command for bumping modules in controller repos
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/ssa from 0.67.1 to 0.69.0

Commits
  • 0ce88c6 Merge pull request #1110 from fluxcd/release-main
  • 66c8a30 Prepare for release
  • 1737eab cmd: fix not removing v prefix
  • 52bc1ed Merge pull request #1116 from fluxcd/cmd-bump
  • 5537abd cmd: introduce command for bumping modules in controller repos
  • b1df0c1 Merge pull request #1112 from fluxcd/ssa-err-msg
  • b69e69a ssa: fix timeout error not mentioning object
  • f6b5193 Merge pull request #1111 from fluxcd/FeatureGateDirectSourceFetch
  • 199624d runtime: Add FeatureGateDirectSourceFetch
  • 49af223 Merge pull request #1108 from fluxcd/fix-cmd
  • Additional commits viewable in compare view

Updates github.com/google/cel-go from 0.26.1 to 0.27.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.27.0

Release Summary

This release focuses on improving developer tooling and stability. Key highlights include significant enhancements to the REPL (YAML configuration support and parse-only evaluation), the addition of cost estimation for regex operations, and improved test coverage reporting.

On the stability front, this release addresses race conditions in reference types, improves namespace resolution, and ensures formatting directives align strictly with the CEL specification.

Note: This release includes a breaking change regarding how types are handled as variables. Please review the "Breaking Changes" section below.

⚠ Breaking Changes

Remove types as variables: The logic for handling types has been relaxed to support safe rollout of feature packages which introduce new types whose names may collide with existing variables. Please review your policies if you relied on types behaving strictly as variables in previous versions. [PR #1262](google/cel-go#1262)

Features & Enhancements

REPL & Tooling

Core Library

  • Regex Costing: Added support for cost estimation and tracking within the regex library. [PR #1200](google/cel-go#1200)

  • JSON Type Exposure: Exposed CEL JSON types to assist developers in converting to native values. [PR #1261](google/cel-go#1261)

  • Policy Composition: Source information is now preserved during CEL policy composition, aiding in debugging. [PR #1253](google/cel-go#1253)

Extensibility:

  • Updated extension option factory to resolve by ID (#1249).

  • Refactored match output compiling to accept user-defined logic (#1246).

  • Exposed Match source ID to callers (#1227).

Build & Maintenance

Bug Fixes

... (truncated)

Commits
  • 450089b Preserve source information during CEL policy composition. (#1253)
  • c66b313 Remove types as variables to allow user-defined variables to shadow type decl...
  • bff3a72 Expose the CEL JSON types to assist with conversion to native values (#1261)
  • 559cbc9 Remove errant diff checked into a prior PR (#1260)
  • fe26efa Simplify the disambiguation logic to a single boolean (#1263)
  • 52280ba Clean up unused source info after checker rewrites the AST. (#1258)
  • 3cb5705 Namespace resolution fix (#1256)
  • 409bcbe Refactor match output compiling to accept user-defined logic. (#1246)
  • e9f15ea Enable two var comprehension conformance tests. (#1255)
  • 057fa1a Add parse only evaluation to REPL (#1254)
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.50.0 to 0.51.0

Commits
  • 60b3f6f internal/http3: prevent Server handler from writing longer body than declared
  • b0ca456 internal/http3: fix Write in Server Handler returning the wrong value
  • 1558ba7 publicsuffix: update to 2026-02-06
  • 4e1c745 internal/http3: make Server response include headers that can be inferred
  • 19f580f http2: fix nil panic in typeFrameParser for unassigned frame types
  • 818aad7 internal/http3: add server to client trailer header support
  • c1bbe1a internal/http3: add client to server trailer header support
  • 29181b8 all: remove go1.25 and older build constraints
  • 8109305 all: upgrade go directive to at least 1.25.0 [generated]
  • 0b37bdf quic: don't run TestStreamsCreateConcurrency in synctest bubble
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) | `1.25.0` | `1.26.0` |
| [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils) | `0.37.1-flux.1` | `0.37.2-flux.1` |
| [github.com/fluxcd/pkg/auth](https://github.com/fluxcd/pkg) | `0.38.2` | `0.39.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.100.2` | `0.102.0` |
| [github.com/fluxcd/pkg/ssa](https://github.com/fluxcd/pkg) | `0.67.1` | `0.69.0` |
| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.26.1` | `0.27.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.50.0` | `0.51.0` |



Updates `cloud.google.com/go/kms` from 1.25.0 to 1.26.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@dlp/v1.25.0...dlp/v1.26.0)

Updates `github.com/fluxcd/cli-utils` from 0.37.1-flux.1 to 0.37.2-flux.1
- [Commits](fluxcd/cli-utils@v0.37.1-flux.1...v0.37.2-flux.1)

Updates `github.com/fluxcd/pkg/auth` from 0.38.2 to 0.39.0
- [Commits](fluxcd/pkg@auth/v0.38.2...git/v0.39.0)

Updates `github.com/fluxcd/pkg/runtime` from 0.100.2 to 0.102.0
- [Commits](fluxcd/pkg@runtime/v0.100.2...runtime/v0.102.0)

Updates `github.com/fluxcd/pkg/ssa` from 0.67.1 to 0.69.0
- [Commits](fluxcd/pkg@ssa/v0.67.1...ssa/v0.69.0)

Updates `github.com/google/cel-go` from 0.26.1 to 0.27.0
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.26.1...v0.27.0)

Updates `golang.org/x/net` from 0.50.0 to 0.51.0
- [Commits](golang/net@v0.50.0...v0.51.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/kms
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/cli-utils
  dependency-version: 0.37.2-flux.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/auth
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-version: 0.102.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/ssa
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/google/cel-go
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/net
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency label Feb 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants