chore(deps): bump the common group across 1 directory with 19 updates #9018

dependabot · 2025-06-09T14:49:36Z

Bumps the common group with 15 updates in the / directory:

Package	From	To
github.com/alicebob/miniredis/v2	`2.34.0`	`2.35.0`
github.com/aws/aws-sdk-go-v2/config	`1.29.14`	`1.29.15`
github.com/aws/aws-sdk-go-v2/service/ec2	`1.218.0`	`1.224.1`
github.com/aws/aws-sdk-go-v2/service/ecr	`1.44.0`	`1.44.1`
github.com/aws/aws-sdk-go-v2/service/s3	`1.79.3`	`1.80.1`
github.com/docker/cli	`28.1.1+incompatible`	`28.2.2+incompatible`
github.com/docker/docker	`28.1.1+incompatible`	`28.2.2+incompatible`
github.com/go-git/go-git/v5	`5.16.0`	`5.16.2`
github.com/moby/buildkit	`0.21.1`	`0.22.0`
github.com/open-policy-agent/opa	`1.4.2`	`1.5.1`
github.com/spf13/cast	`1.8.0`	`1.9.2`
golang.org/x/crypto	`0.38.0`	`0.39.0`
golang.org/x/net	`0.40.0`	`0.41.0`
helm.sh/helm/v3	`3.17.3`	`3.18.2`
modernc.org/sqlite	`1.37.0`	`1.38.0`

Updates github.com/alicebob/miniredis/v2 from 2.34.0 to 2.35.0

Release notes

Sourced from github.com/alicebob/miniredis/v2's releases.

drop a go.mod dep, lua fi, BLMOVE XAUTOCLAIM fixes

add Lua redis.setresp({2,3})

embed gopher-json package

fix XAUTOCLAIM (thanks @kgunning)

fix writeXpending (thanks @gnpaone)

fix BLMOVE TTL special case

constants for key types @alyssaruth

Changelog

Sourced from github.com/alicebob/miniredis/v2's changelog.

v2.35.0

add Lua redis.setresp({2,3})

embed gopher-json package

fix XAUTOCLAIM (thanks @kgunning)

fix writeXpending (thanks @gnpaone)

fix BLMOVE TTL special case

constants for key types @alyssaruth

Commits

b5891af prepare v2.35.0
2af9e02 Merge pull request #407 from alicebob/consts
f2de203 constants for key types
dd31bf6 keep the TTL in BLMOVe
958328b simple int test
19c928f Update tests
4363080 Update tests
d6abbe9 Update tests
be97a75 Return empty array instead of nil array in writeXpending
34f130d Merge pull request #400 from keithgunning/xautoclaim-cursor-fix
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.14 to 1.29.15

Commits

4344501 Release 2025-06-06
20a068e Regenerated Clients
d8fdf86 Update endpoints model
73f0a46 Update API model
8238069 Release 2025-06-05
80bbf28 Regenerated Clients
a209c7a Update endpoints model
f882ffa Update API model
6d549a5 add sep-based query-compatible tests for both jsonrpc10 and rpcv2cbor (#3106)
f82629c Release 2025-06-04
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.67 to 1.17.68

Commits

4344501 Release 2025-06-06
20a068e Regenerated Clients
d8fdf86 Update endpoints model
73f0a46 Update API model
8238069 Release 2025-06-05
80bbf28 Regenerated Clients
a209c7a Update endpoints model
f882ffa Update API model
6d549a5 add sep-based query-compatible tests for both jsonrpc10 and rpcv2cbor (#3106)
f82629c Release 2025-06-04
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ec2 from 1.218.0 to 1.224.1

Commits

4344501 Release 2025-06-06
20a068e Regenerated Clients
d8fdf86 Update endpoints model
73f0a46 Update API model
8238069 Release 2025-06-05
80bbf28 Regenerated Clients
a209c7a Update endpoints model
f882ffa Update API model
6d549a5 add sep-based query-compatible tests for both jsonrpc10 and rpcv2cbor (#3106)
f82629c Release 2025-06-04
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.44.0 to 1.44.1

Commits

1433025 Release 2023-11-14
34bafde Regenerated Clients
0d10d76 Update endpoints model
fe8a6c1 Update API model
b3103f2 add support for token file and eks container endpoint in general HTTP provider
f300f13 Release 2023-11-13
d9029e4 Regenerated Clients
f8c9609 Update endpoints model
e7ea0b5 Update API model
5c1b48d feat: ini2 parser (#2365)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.79.3 to 1.80.1

Commits

4344501 Release 2025-06-06
20a068e Regenerated Clients
d8fdf86 Update endpoints model
73f0a46 Update API model
8238069 Release 2025-06-05
80bbf28 Regenerated Clients
a209c7a Update endpoints model
f882ffa Update API model
6d549a5 add sep-based query-compatible tests for both jsonrpc10 and rpcv2cbor (#3106)
f82629c Release 2025-06-04
Additional commits viewable in compare view

Updates github.com/docker/cli from 28.1.1+incompatible to 28.2.2+incompatible

Commits

e6534b4 Merge pull request #6116 from vvoland/vendor-docker
5c3128e vendor: github.com/docker/docker v28.2.2-dev (45873be4ae3f)
879ac3f Merge pull request #6110 from thaJeztah/bump_engine
92fa1e1 vendor: github.com/docker/docker 0e2cc22d36ae (v28.2-dev)
4bec3a6 Merge pull request #6114 from thaJeztah/deprecate_non_compliant_registries
a007d1a Merge pull request #6113 from thaJeztah/config_suppress_err
bbfbd54 docs: deprecated: fallback for non-OCI-compliant registries is removed
2d21e1f cli/config/configfile: explicitly ignore error
bc9be0b Merge pull request #6112 from thaJeztah/bump_tools
3fe7dc5 Dockerfile: update compose to v2.36.2
Additional commits viewable in compare view

Updates github.com/docker/docker from 28.1.1+incompatible to 28.2.2+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

28.2.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 28.2.2 milestone

moby/moby, 28.2.2 milestone

Bug fixes and enhancements

containerd image store: Fix a regression causing docker build --push to fail. This reverts the fix for docker build not persisting overridden images as dangling. moby/moby#50105

Networking

When creating the iptables DOCKER-USER chain, do not add an explicit RETURN rule, allowing users to append as well as insert their own rules. Existing rules are not removed on upgrade, but it won't be replaced after a reboot. moby/moby#50098

28.2.1

Packaging updates

Fix packaging regression in v28.2.0 which broke creating the docker group/user on fresh installations. docker-ce-packaging#1209

28.2.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 28.2.0 milestone

moby/moby, 28.2.0 milestone

Deprecated and removed features, see Deprecated Features.

Changes to the Engine API, see API version history.

[!NOTE] RHEL packages are currently not available and will be released later.

New

Add {{.Platform}} as formatting option for docker ps to show the platform of the image the container is running. docker/cli#6042

Add support for relative parent paths (../) on bind mount sources when using docker run/create with -v/--volume or --mount type=bind options. docker/cli#4966

CDI is now enabled by default. moby/moby#49963

Show discovered CDI devices in docker info. docker/cli#6078

docker image rm: add --platform option to remove a variant from multi-platform images. docker/cli#6109

containerd image store: Initial BuildKit support for building Windows container images on Windows (requires an opt-in with DOCKER_BUILDKIT=1). moby/moby#49740

Bug fixes and enhancements

Add a new log option for fluentd log driver (fluentd-write-timeout), which enables specifying write timeouts for fluentd connections. moby/moby#49911

Add support for DOCKER_AUTH_CONFIG for the experimental --use-api-socket option. docker/cli#6019

Fix docker exec waiting for 10 seconds if a non-existing user or group was specified. moby/moby#49868

Fix docker swarm init ignoring cacert option of --external-ca. docker/cli#5995

Fix an issue where the CLI would not correctly save the configuration file (~/.docker/config.json) if it was a relative symbolic link. docker/cli#5282

Fix containers with --restart always policy using CDI devices failing to start on daemon restart. moby/moby#49990

... (truncated)

Commits

45873be Merge pull request #50105 from jsternberg/revert-build-dangling
7994426 Revert "containerd: images overridden by a build are kept dangling"
f144264 Merge pull request #50090 from corhere/libn/overlay-netip
768cfae Merge pull request #50050 from robmry/nftables_internal_dns
d3289dd Add nftables NAT rules for internal DNS resolver
7a0bf74 Merge pull request #50038 from ctalledo/fix-for-50037
b43afbf Merge pull request #50098 from robmry/remove_docker-user_return_rule
c299ba3 Update worker.Platforms() in builder-next worker.
0e2cc22 Merge pull request #50049 from robmry/nftables_env_var_enable
e37efd4 Merge pull request #50068 from mmorel-35/github.com/containerd/errdefs
Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.16.0 to 5.16.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.16.2

What's Changed

utils: fix diff so subpaths work for sparse checkouts, fixes 1455 to releases/v5.x by @kane8n in go-git/go-git#1567

Full Changelog: go-git/go-git@v5.16.1...v5.16.2

v5.16.1

What's Changed

utils: merkletrie, Fix diff on sparse-checkout index. Fixes #1406 to releases/v5.x by @kane8n in go-git/go-git#1561

New Contributors

@kane8n made their first contribution in go-git/go-git#1561

Full Changelog: go-git/go-git@v5.16.0...v5.16.1

Commits

ed8216c Merge pull request #1567 from kane8n/backport-to-v5-patricsss/fix-1455
4f35eba Merge pull request #1484 from patricsss/patricsss/fix-1455
fd1a836 Merge pull request #1561 from kane8n/backport-to-v5-fix-sparse-checkout-status
c3c8410 Merge pull request #1492 from onee-only/fix-sparse-checkout-status
See full diff in compare view

Updates github.com/moby/buildkit from 0.21.1 to 0.22.0

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.22.0

Welcome to the v0.22.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

Tõnis Tiigi

CrazyMax

Akihiro Suda

Sebastiaan van Stijn

Alberto Garcia Hierro

Anthony Nandaa

Jonathan A. Sternberg

Bertrand Paquet

Gleb Nebolyubov

Justin Chadwell

liulanzheng

Notable Changes

Add checksum support to Git source. #5975

Allow duration based filters on diskusage requests. #5455

Ignore Apple extended file attributes during copy. #5937 tonistiigi/fsutil#235

Support for building overlaybd images. #3867 docs

Improve error message for registry and local cache export when using image-manifest and oci-mediatypes options. #5966

Fix supported platforms reported by the worker. #5968

Fix CDI device request by class annotation. #5969

Fix panic when using a tiny terminal. #5967

CNI plugins have been updated to v1.7.1. #5533

Dependency Changes

github.com/containerd/accelerated-container-image v1.2.3 new

github.com/containerd/containerd/v2 v2.0.4 -> v2.0.5

github.com/docker/cli v28.0.4 -> v28.1.1

github.com/docker/docker v28.0.4 -> v28.1.1

github.com/moby/go-archive 21f3f3385ab7 -> v0.1.0

github.com/moby/sys/atomicwriter v0.1.0 new

github.com/tonistiigi/fsutil 5b74a7ad7583 -> 3f76f8130144

github.com/vbatts/tar-split v0.11.6 -> v0.12.1

Previous release can be found at v0.21.1

v0.22.0-rc2

Welcome to the v0.22.0-rc2 release of buildkit! This is a pre-release of buildkit

... (truncated)

Commits

13cf07c Merge pull request #5979 from crazy-max/v0.22-picks-0.22.0-rc2
a3712e2 allow duration based filters on diskusage requests
93b71cd git: add testcase for checking that adding checksum doesn't break cache
17ae6d0 git: verify checksum early and more tests
13f36e6 dockerfile: implement ADD --checksum=COMMIT_HASH GIT_URL
8e1bbed git source: add AttrGitChecksum
141a4a6 Merge pull request #5533 from crazy-max/update-cni
40e8799 Merge pull request #5923 from crazy-max/run-device-docs
6b3c423 dockerfile: update cni to 1.7.1
4da8760 dockerfile: run device docs
Additional commits viewable in compare view

Updates github.com/open-policy-agent/opa from 1.4.2 to 1.5.1

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.5.1

This is a bug fix release addressing a regression to the walk built-in function, introduced in v1.5.0. See #7656 (authored by @anderseknert reported by @robmyersrobmyers)

v1.5.0

This release contains a mix of new features, performance improvements, and bugfixes. Among others:

Support for AWS SSO credentials provider

Support for signing client assertions with Azure Keyvault

Faster object.get, walk and builtin-function evaluation

Improved guardrails in the parser

Improvements to decision logging

Modernized OPA Website (#7037)

The OPA website has been modernized with a new design and improved user experience.

The new site is based on Docusaurus and React which makes it easier to build live functionality and add non-documentation resources. This lays the groundwork for even more improvements in the future!

Documentation for older OPA versions are still available in the version archive.

Authored by @charlieegan3

Runtime, Tooling, SDK

ast: Only use JSON-escaped literal when needed in ref to string convertion (#7550) reported and authored by @xubinzheng

ast: Parser recursion depth guard (#7568) authored by @thevilledev

ast: Retaining SomeDecl Location field when compiler resolves refs (#7543) authored by @johanfylling

bundle: Setting default rego-version in bundle API (#7588) authored by @johanfylling reported by @xubinzheng

perf: Improved "baseline" metrics of opa bench for trivial queries (#7580) authored by @anderseknert

plugins/decision: Don't drop adaptive uncompressed size limit on upload (#7562) authored by @sspaink

plugins/decision: Set config boundaries to upload_size_limit_bytes (#7563) (authored by @sspaink)

plugins/rest: Add support for AWS SSO credentials provider (#7527) authored by @efiShtain

plugins/rest: Support signing of client assertions with Azure Keyvault (#7462) reported and authored by @Od1nB

plugins/status: Support graceful shutdown timeout (#7576) authored by @sspaink

rego: Don't generate JSON values for wildcard/generated keys in result set (#7567) authored by @anderseknert

runtime: Don't override user set version commit and timestamp (#7471) reported by @kastl-ars authored by @sspaink

Planner, Topdown and Rego

planner: Deal with var-for-function replacement in indirect calls (#5311) authored by @srenatus

topdown: Faster object.get built-in function (#7593) authored by @anderseknert

topdown: Faster walk built-in function (#7612) authored by @anderseknert

topdown: Improved default rule value inlining ( (#1418) authored by @johanfylling

topdown: Improved GraphQL error handling (#7622) reported and authored by @robmyersrobmyers

Docs, Website, Ecosystem

docs: Fix helm-kubernetes-quickstart bundle (#7606) reported and authored by @nejec

docs: Add Swift-OPA to the Ecosystem Page (#7610) authored by @charlieegan3

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.5.1

This is a bug fix release addressing a regression to the walk built-in function, introduced in v1.5.0. See #7656 (authored by @anderseknert reported by @robmyersrobmyers)

1.5.0

This release contains a mix of new features, performance improvements, and bugfixes. Among others:

Support for AWS SSO credentials provider

Support for signing client assertions with Azure Keyvault

Faster object.get, walk and builtin-function evaluation

Improved guardrails in the parser

Improvements to decision logging

Modernized OPA Website (#7037)

The OPA website has been modernized with a new design and improved user experience.

The new site is based on Docusaurus and React which makes it easier to build live functionality and add non-documentation resources. This lays the groundwork for even more improvements in the future!

Documentation for older OPA versions are still available in the version archive.

Authored by @charlieegan3

Runtime, Tooling, SDK

ast: Only use JSON-escaped literal when needed in ref to string convertion (#7550) reported and authored by @xubinzheng

ast: Parser recursion depth guard (#7568) authored by @thevilledev

ast: Retaining SomeDecl Location field when compiler resolves refs (#7543) authored by @johanfylling

bundle: Setting default rego-version in bundle API (#7588) authored by @johanfylling reported by @xubinzheng

perf: Improved "baseline" metrics of opa bench for trivial queries (#7580) authored by @anderseknert

plugins/decision: Don't drop adaptive uncompressed size limit on upload (#7562) authored by @sspaink

plugins/decision: Set config boundaries to upload_size_limit_bytes (#7563) (authored by @sspaink)

plugins/rest: Add support for AWS SSO credentials provider (#7527) authored by @efiShtain

plugins/rest: Support signing of client assertions with Azure Keyvault (#7462) reported and authored by @Od1nB

plugins/status: Support graceful shutdown timeout (#7576) authored by @sspaink

rego: Don't generate JSON values for wildcard/generated keys in result set (#7567) authored by @anderseknert

runtime: Don't override user set version commit and timestamp (#7471) reported by @kastl-ars authored by @sspaink

Planner, Topdown and Rego

planner: Deal with var-for-function replacement in indirect calls (#5311) authored by @srenatus

topdown: Faster object.get built-in function (#7593) authored by @anderseknert

topdown: Faster walk built-in function (#7612) authored by @anderseknert

topdown: Improved default rule value inlining ( (#1418) authored by @johanfylling

topdown: Improved GraphQL error handling (#7622) reported and authored by @robmyersrobmyers

Docs, Website, Ecosystem

... (truncated)

Commits

5421c8e Update CHANGELOG.md
9acf8d1 Prepare v1.5.1 release
a26322e Fix issue where path in walk would get mutated (#7657)
b7d0a13 Prepare v1.5.0 release (#7642)
530579e test: Not modifying global recursion depth limit in parser tests init (#7641)
20fe70e perf: more interning (#7636)
aa81e31 bundle: Setting default rego-version in bundle API (#7630)
707c43d docs: Add redirect for decision_logs type label (#7637)
370e626 ast: Parser recursion depth guard (#7568)
8a75563 docs: Update contribution documentation (#7639)
Additional commits viewable in compare view

Updates github.com/spf13/cast from 1.8.0 to 1.9.2

Release notes

Sourced from github.com/spf13/cast's releases.

v1.9.2

What's Changed

fix: float string to number parsing by @sagikazarmark in spf13/cast#276

Full Changelog: spf13/cast@v1.9.1...v1.9.2

v1.9.1

What's Changed

fix: indirection of typed nils by @sagikazarmark in spf13/cast#273

Full Changelog: spf13/cast@v1.9.0...v1.9.1

v1.9.0

Notable new features 🎉

Casting from type aliases is now supported for basic types

Added generic functions: To/ToE, Must, ToNumber/ToNumberE

Increased test coverage

Converting float numbers from string is now supported

What's Changed

build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot in spf13/cast#248

build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.1 by @dependabot in spf13/cast#247

build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in spf13/cast#245

refactor: move number parsing to generic functions by @sagikazarmark in spf13/cast#250

Improve ToString/ToStringE performance by @ganigeorgiev in spf13/cast#244

Split caste.go into smaller files by @sagikazarmark in spf13/cast#251

refactor: remove unused initial int conversion by @sagikazarmark in spf13/cast#253

Generate code to make maintenance easier by @sagikazarmark in spf13/cast#252

feat: add To and ToNumber functions by @sagikazarmark in spf13/cast#255

build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by @dependabot in spf13/cast#243

Move tests next to their implementation by @sagikazarmark in spf13/cast#256

Refactor number tests by @sagikazarmark in spf13/cast#257

feat: return 0 when casting an empty string to a number by @sagikazarmark in spf13/cast#259

Support converting string float numbers to integer types by @sagikazarmark in spf13/cast#261

Test improvements by @sagikazarmark in spf13/cast#262

Improvements by @sagikazarmark in spf13/cast#263

refactor: return indirection result from indirect function by @sagikazarmark in spf13/cast#264

Slice improvements by @sagikazarmark in spf13/cast#265

refactor: move error message to a constant by @sagikazarmark in spf13/cast#267

chore: improve map cast functions by @sagikazarmark in spf13/cast#269

Resolve aliases by @sagikazarmark in spf13/cast#271

New Contributors

@ganigeorgiev made their first contribution in spf13/cast#244

Full Changelog: spf13/cast@v1.8.0...v1.9.0

Commits

40e8e07 Merge pull request #276 from spf13/improve-string-float
fa4ea64 fix: float string to number parsing
cb5df5f Merge pull request #273 from spf13/fix-indiretion
1b425f3 fix: indirection of typed nils
a79ffed Merge pull request #271 from spf13/alias
3166f3b test: add more alias tests
f8fe065 chore: bump minimum Go version to 1.21
9ffddd4 feat: add alias resolution
a6d26bd feat: add alias resolution function
633e5d0 Merge pull request #269 from spf13/maps
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.38.0 to 0.39.0

Commits

3bf9d2a ssh/test: skip KEX test if unsupported by system SSH client
9bab967 go.mod: update golang.org/x dependencies
4f9f0ca x509roots/fallback: add init time benchmark
eac7cf0 x509roots/fallback: move parsing code to a non-generated file
18228cd acme: return err from deprecated TLS-SNI-[01|02] functions
73f6362 acme: remove dead code
ebc8e46 ssh: add server side support for Diffie Hellman Group Exchange
e944286 ssh: expose negotiated algorithms
78a1fd7 ssh: automatically add [email protected] KEX alias
ac58737 ssh: export supported algorithms
Additional commits viewable in compare view

Updates golang.org/x/mod from 0.24.0 to 0.25.0

Commits

9d33331 x/mod: add the ignore directive
ae88a97 all: change from sort functions to slices functions
See full diff in compare view

Updates golang.org/x/net from 0.40.0 to 0.41.0

Commits

6e41cae go.mod: update golang.org/x dependencies
15f7d40 http2: correctly wrap ErrFrameTooLarge in Framer.ReadFrame
ef33bc0 internal/http3: use bubbled context in synctest tests
919c6bc http2: use an array instead of a map in typeFrameParser
bae01a7 trace: add missing td tag
See full diff in compare view

Updates golang.org/x/sync from 0.14.0 to 0.15.0

Commits

8a14946 errgroup: remove duplicated comment
1869c69 all: replace deprecated ioutil
d1ac909 sync/errgroup: PanicError.Error print stack trace
See full diff in compare view

Updates golang.org/x/text from 0.25.0 to 0.26.0

Commits

8072180 go.mod: update golang.org/x dependencies
6cacac1 go.mod: update tagx:ignore'd golang.org/x dependencies
See full diff in compare view

Updates helm.sh/helm/v3 from 3.17.3 to 3.18.2

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm 3.18.2

Helm v3.18.2 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:

for questions and just to hang out

for discussing PRs, code, and bugs

Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom

Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.2. The common platform binaries are here:

MacOS amd64 (checksum / 8bfc850d4451dccecb01c73bdc844cb1b3ed2f1b90a89fc47e7b1670e1f369ec)

MacOS arm64 (checksum / d82a30d654862668ae1e58dbbba5ea6ed5f84312da59666ef628bf73b2188d39)

Linux amd64 (checksum / c5deada86fe609deefdf40e9cbbe3da2f8cf3f6a4551a0ebe7886dc8fcf98bce)

Linux arm (checksum / a848c9db5e51f7cc4975bcfbba415c30cdfb67e141b6efc0e8b3a66cd89e8607)

Linux arm64 (checksum / 03181a494a0916b370a100a5b2536104963b095be53fb23d1e29b2afb1c7de8d)

Linux i386 (checksum / dae13caca7a24d0adff3f59183a269275522964d75c1e4cbdb0ffaddc659e7bc)

Linux ppc64le (checksum / 1d21b2acdd79a13d20585b61fe90bababdd3f7047530d66aad650869c772b5c3)

Linux s390x (checksum / 382920a48a0800cf2bb67bf6ab403aab15f7631b369bed9df9bdcfdd5ebd5ae9)

Linux riscv64 (checksum / d702db0191e6a4091d631760aded83f809d8d7edf962d5252f1ea46804183ebf)

Windows amd64 (checksum / 49fc2d74a351974ebf544f8252a4e43d7e5f9e0137472415393178c2d3996e9f)

Windows arm64 (checksum / 6ecdf10aa6f356ebb841d1732225437100e65fdb90f99170e1b2e5726e4fd10d)

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached sign...
Description has been truncated

Bumps the common group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.34.0` | `2.35.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.29.14` | `1.29.15` | | [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.218.0` | `1.224.1` | | [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.44.0` | `1.44.1` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.79.3` | `1.80.1` | | [github.com/docker/cli](https://github.com/docker/cli) | `28.1.1+incompatible` | `28.2.2+incompatible` | | [github.com/docker/docker](https://github.com/docker/docker) | `28.1.1+incompatible` | `28.2.2+incompatible` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.0` | `5.16.2` | | [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.21.1` | `0.22.0` | | [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.4.2` | `1.5.1` | | [github.com/spf13/cast](https://github.com/spf13/cast) | `1.8.0` | `1.9.2` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.38.0` | `0.39.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.40.0` | `0.41.0` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.17.3` | `3.18.2` | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.37.0` | `1.38.0` | Updates `github.com/alicebob/miniredis/v2` from 2.34.0 to 2.35.0 - [Release notes](https://github.com/alicebob/miniredis/releases) - [Changelog](https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md) - [Commits](alicebob/miniredis@v2.34.0...v2.35.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.29.14 to 1.29.15 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@config/v1.29.14...config/v1.29.15) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.67 to 1.17.68 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.67...credentials/v1.17.68) Updates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.218.0 to 1.224.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/ec2/v1.218.0...service/ec2/v1.224.1) Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.44.0 to 1.44.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.44.0...service/iot/v1.44.1) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.79.3 to 1.80.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.79.3...service/s3/v1.80.1) Updates `github.com/docker/cli` from 28.1.1+incompatible to 28.2.2+incompatible - [Commits](docker/cli@v28.1.1...v28.2.2) Updates `github.com/docker/docker` from 28.1.1+incompatible to 28.2.2+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v28.1.1...v28.2.2) Updates `github.com/go-git/go-git/v5` from 5.16.0 to 5.16.2 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.16.0...v5.16.2) Updates `github.com/moby/buildkit` from 0.21.1 to 0.22.0 - [Release notes](https://github.com/moby/buildkit/releases) - [Commits](moby/buildkit@v0.21.1...v0.22.0) Updates `github.com/open-policy-agent/opa` from 1.4.2 to 1.5.1 - [Release notes](https://github.com/open-policy-agent/opa/releases) - [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md) - [Commits](open-policy-agent/opa@v1.4.2...v1.5.1) Updates `github.com/spf13/cast` from 1.8.0 to 1.9.2 - [Release notes](https://github.com/spf13/cast/releases) - [Commits](spf13/cast@v1.8.0...v1.9.2) Updates `golang.org/x/crypto` from 0.38.0 to 0.39.0 - [Commits](golang/crypto@v0.38.0...v0.39.0) Updates `golang.org/x/mod` from 0.24.0 to 0.25.0 - [Commits](golang/mod@v0.24.0...v0.25.0) Updates `golang.org/x/net` from 0.40.0 to 0.41.0 - [Commits](golang/net@v0.40.0...v0.41.0) Updates `golang.org/x/sync` from 0.14.0 to 0.15.0 - [Commits](golang/sync@v0.14.0...v0.15.0) Updates `golang.org/x/text` from 0.25.0 to 0.26.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.25.0...v0.26.0) Updates `helm.sh/helm/v3` from 3.17.3 to 3.18.2 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.17.3...v3.18.2) Updates `modernc.org/sqlite` from 1.37.0 to 1.38.0 - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.37.0...v1.38.0) --- updated-dependencies: - dependency-name: github.com/alicebob/miniredis/v2 dependency-version: 2.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.29.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: common - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.17.68 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: common - dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2 dependency-version: 1.224.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr dependency-version: 1.44.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: common - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.80.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: github.com/docker/cli dependency-version: 28.2.2+incompatible dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: github.com/docker/docker dependency-version: 28.2.2+incompatible dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.16.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: common - dependency-name: github.com/moby/buildkit dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: github.com/open-policy-agent/opa dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: github.com/spf13/cast dependency-version: 1.9.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: golang.org/x/crypto dependency-version: 0.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: golang.org/x/mod dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: golang.org/x/net dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: golang.org/x/sync dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: golang.org/x/text dependency-version: 0.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: helm.sh/helm/v3 dependency-version: 3.18.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common - dependency-name: modernc.org/sqlite dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: common ... Signed-off-by: dependabot[bot] <[email protected]>

nikpivkin · 2025-06-10T04:16:07Z

It seems we need to use the new API:

Error: pkg/fanal/image/daemon/containerd.go:268:11: cannot use &container.Config{…} (value of type *container.Config) as *"github.com/moby/docker-image-spec/specs-go/v1".DockerOCIImageConfig value in struct literal
Error: pkg/fanal/image/daemon/image.go:134:34: cannot use img.inspect.Config (variable of type *"github.com/moby/docker-image-spec/specs-go/v1".DockerOCIImageConfig) as *container.Config value in argument to img.imageConfig

knqyf263 · 2025-06-10T06:34:01Z

Yes, I had a look at that.
#8935 (comment)

knqyf263 · 2025-06-13T13:04:35Z

We also need to fix testdocker.
aquasecurity/testdocker#26

dependabot · 2025-06-16T14:55:23Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 9, 2025

dependabot bot requested a review from knqyf263 as a code owner June 9, 2025 14:49

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 9, 2025

dependabot bot closed this Jun 16, 2025

dependabot bot deleted the dependabot/go_modules/common-174967ce38 branch June 16, 2025 14:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the common group across 1 directory with 19 updates #9018

chore(deps): bump the common group across 1 directory with 19 updates #9018

Uh oh!

dependabot bot commented on behalf of github Jun 9, 2025 •

edited

Loading

Uh oh!

nikpivkin commented Jun 10, 2025

Uh oh!

knqyf263 commented Jun 10, 2025

Uh oh!

knqyf263 commented Jun 13, 2025

Uh oh!

dependabot bot commented on behalf of github Jun 16, 2025

Uh oh!

Uh oh!

chore(deps): bump the common group across 1 directory with 19 updates #9018

chore(deps): bump the common group across 1 directory with 19 updates #9018

Uh oh!

Conversation

dependabot bot commented on behalf of github Jun 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

drop a go.mod dep, lua fi, BLMOVE XAUTOCLAIM fixes

v2.35.0

28.2.2

Bug fixes and enhancements

Networking

28.2.1

Packaging updates

28.2.0

New

Bug fixes and enhancements

v5.16.2

What's Changed

v5.16.1

What's Changed

New Contributors

v0.22.0

Contributors

Notable Changes

Dependency Changes

v0.22.0-rc2

v1.5.1

v1.5.0

Modernized OPA Website (#7037)

Runtime, Tooling, SDK

Planner, Topdown and Rego

Docs, Website, Ecosystem

1.5.1

1.5.0

Modernized OPA Website (#7037)

Runtime, Tooling, SDK

Planner, Topdown and Rego

Docs, Website, Ecosystem

v1.9.2

What's Changed

v1.9.1

What's Changed

v1.9.0

Notable new features 🎉

What's Changed

New Contributors

Helm 3.18.2

Installation and Upgrading

Uh oh!

nikpivkin commented Jun 10, 2025

Uh oh!

knqyf263 commented Jun 10, 2025

Uh oh!

knqyf263 commented Jun 13, 2025

Uh oh!

dependabot bot commented on behalf of github Jun 16, 2025

Uh oh!

Uh oh!

dependabot bot commented on behalf of github Jun 9, 2025 •

edited

Loading