Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 7 updates - #73

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-9e1cf729ee
Open

chore(deps): bump the go-dependencies group across 1 directory with 7 updates#73
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-9e1cf729ee

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 5 updates in the / directory:

Package From To
github.com/google/go-containerregistry 0.21.5 0.21.7
github.com/klauspost/compress 1.18.6 1.19.1
github.com/mattn/go-isatty 0.0.22 0.0.23
github.com/vbauerster/mpb/v8 8.12.0 8.13.0
go.podman.io/image/v5 5.39.2 5.40.0

Updates github.com/google/go-containerregistry from 0.21.5 to 0.21.7

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.7

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.6...v0.21.7

v0.21.6

What's Changed

... (truncated)

Commits
  • c68d899 Bump go version to 1.26.4 (#2350)
  • da61d86 transport: do not re-attach bearer token after cross-host redirect (#2349)
  • 09fe1e5 fix(tarball): normalize paths when matching files (#2334)
  • 5baa399 build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)
  • 97a8a17 fix(transport): apply refreshed bearer token after cross-host redirect (#2337)
  • e963497 internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)
  • 02649ea fix: prevent SSRF in google.List() pagination (#2332)
  • 7204b40 build(deps): bump the actions group across 1 directory with 2 updates (#2344)
  • 4cfaa93 build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)
  • 6849394 pkg/registry: export RedirectError (#2177)
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.6 to 1.19.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.1

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.19.0...v1.19.1

v1.19.0

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.6...v1.19.0

v1.18.7

  • Fix s2.NewDict OOB read.

Security release without other changes.

Full Changelog: klauspost/compress@v1.18.6...v1.18.7

Commits
  • 2602f4a Update changelog for version 1.19.0
  • 983acec add defensive checks
  • 9960386 zstd: Validate SnappyConverter literal copies (#1170)
  • e29d4d3 flate: use Peek instead of ReadByte for the bufio.Reader decode path (#...
  • c0bbc84 zstd: bump avo pin, regenerate arm64 asm (#1167)
  • efdb6ed build(deps): bump the github-actions group with 6 updates (#1166)
  • f0953f9 flate: fix buffer formatting in tests (#1165)
  • ab2e3cc zstd: Add arm64 decoder asm (#1160)
  • bb2723d Merge commit from fork
  • 539243b s2sx: Clean symlink targets (#1163)
  • Additional commits viewable in compare view

Updates github.com/mattn/go-isatty from 0.0.22 to 0.0.23

Commits

Updates github.com/vbauerster/mpb/v8 from 8.12.0 to 8.13.0

Release notes

Sourced from github.com/vbauerster/mpb/v8's releases.

v8.13.0

What's Changed

Full Changelog: vbauerster/mpb@v8.12.1...v8.13.0

v8.12.1

Full Changelog: vbauerster/mpb@v8.12.0...v8.12.1

Commits
  • e1c42ec v8.13.0
  • 2f0a1c4 minor: make renderReq on usage only
  • b920328 minor: save lines in w.terminal branch
  • d8a6e3c go get -u
  • 768529c github actions upd
  • f1937eb refactoring: (*Progress).iterateBars returns error
  • eb0745d minor: field decl shift
  • 27da809 minor: godoc comment
  • 28e0574 refactoring: decl Error on Progress struct
  • 4bbb563 refactoring: decl renderReq and autoRefresh on Progress struct
  • Additional commits viewable in compare view

Updates go.podman.io/image/v5 from 5.39.2 to 5.40.0

Commits
  • 3c2fa91 Bump to c/image v5.40
  • f871d19 Bump to c/storage v1.63.0 in c/image, c/image to v5.40
  • 550f62f Bump c/storage to v1.63.0
  • 4fa1864 Merge pull request #816 from alexlarsson/fix-composefs-verity
  • 32704ef Merge pull request #855 from containers/renovate/github.com-docker-cli-29.x
  • 98ff31a Merge pull request #853 from mheon/containers_conf_documentation_removals
  • 3e16145 Update module github.com/docker/cli to v29.5.1+incompatible
  • 206fff3 Manpage: remove slirp4netns/boltdb references
  • 3592bda Merge pull request #852 from containers/renovate/github.com-onsi-gomega-1.x
  • f04d9c8 Update module github.com/onsi/gomega to v1.41.0
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.50.0 to 0.51.0

Commits
  • b8a14a8 go.mod: update golang.org/x dependencies
  • 9d9d507 x509roots/fallback/bundle: fix bundle test with Go 1.27+
  • fd0b90d acme: include Problem in OrderError.Error
  • b9e5359 pbkdf2: turn into a wrapper for crypto/pbkdf2
  • cc0e4fc hkdf: forward Extract to the standard library
  • a8e9237 x509roots/fallback: update bundle
  • See full diff in compare view

Updates golang.org/x/sync from 0.20.0 to 0.21.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the go-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.5` | `0.21.7` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.6` | `1.19.1` |
| [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) | `0.0.22` | `0.0.23` |
| [github.com/vbauerster/mpb/v8](https://github.com/vbauerster/mpb) | `8.12.0` | `8.13.0` |
| [go.podman.io/image/v5](https://github.com/podman-container-tools/container-libs) | `5.39.2` | `5.40.0` |



Updates `github.com/google/go-containerregistry` from 0.21.5 to 0.21.7
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.5...v0.21.7)

Updates `github.com/klauspost/compress` from 1.18.6 to 1.19.1
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.6...v1.19.1)

Updates `github.com/mattn/go-isatty` from 0.0.22 to 0.0.23
- [Commits](mattn/go-isatty@v0.0.22...v0.0.23)

Updates `github.com/vbauerster/mpb/v8` from 8.12.0 to 8.13.0
- [Release notes](https://github.com/vbauerster/mpb/releases)
- [Commits](vbauerster/mpb@v8.12.0...v8.13.0)

Updates `go.podman.io/image/v5` from 5.39.2 to 5.40.0
- [Release notes](https://github.com/podman-container-tools/container-libs/releases)
- [Commits](podman-container-tools/container-libs@image/v5.39.2...image/v5.40.0)

Updates `golang.org/x/crypto` from 0.50.0 to 0.51.0
- [Commits](golang/crypto@v0.50.0...v0.51.0)

Updates `golang.org/x/sync` from 0.20.0 to 0.21.0
- [Commits](golang/sync@v0.20.0...v0.21.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/mattn/go-isatty
  dependency-version: 0.0.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/vbauerster/mpb/v8
  dependency-version: 8.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.podman.io/image/v5
  dependency-version: 5.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, gomod. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants