deps: update Go dependencies #3676

renovate · 2025-03-04T11:49:35Z

This PR contains the following updates:

Package	Change	Type	Update
cloud.google.com/go/compute	`v1.33.0` -> `v1.34.0`	require	minor
cloud.google.com/go/secretmanager	`v1.14.4` -> `v1.14.5`	require	patch
github.com/Azure/azure-sdk-for-go/sdk/azidentity	`v1.8.1` -> `v1.8.2`	require	patch
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets	`v1.3.0` -> `v1.3.1`	require	patch
github.com/aws/aws-sdk-go-v2	`v1.36.1` -> `v1.36.3`	require	patch
github.com/aws/aws-sdk-go-v2/config	`v1.29.6` -> `v1.29.9`	require	patch
github.com/aws/aws-sdk-go-v2/credentials	`v1.17.59` -> `v1.17.62`	require	patch
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	`v1.16.28` -> `v1.16.30`	require	patch
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`v1.17.59` -> `v1.17.65`	require	patch
github.com/aws/aws-sdk-go-v2/service/autoscaling	`v1.51.12` -> `v1.52.1`	require	minor
github.com/aws/aws-sdk-go-v2/service/cloudfront	`v1.44.9` -> `v1.45.1`	require	minor
github.com/aws/aws-sdk-go-v2/service/ec2	`v1.202.4` -> `v1.207.1`	require	minor
github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2	`v1.43.12` -> `v1.44.1`	require	minor
github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi	`v1.25.18` -> `v1.26.1`	require	minor
github.com/aws/aws-sdk-go-v2/service/s3	`v1.75.4` -> `v1.78.1`	require	minor
github.com/aws/aws-sdk-go-v2/service/secretsmanager	`v1.34.18` -> `v1.35.1`	require	minor
github.com/aws/smithy-go	`v1.22.2` -> `v1.22.3`	require	patch
github.com/bazelbuild/buildtools	`ad48c76` -> `bc03ae5`	require	digest
github.com/bazelbuild/rules_go	`v0.52.0` -> `v0.53.0`	require	minor
github.com/foxboron/go-uefi	`19dc140` -> `69fb7db`	require	digest
github.com/go-playground/validator/v10	`v10.24.0` -> `v10.25.0`	require	minor
github.com/google/go-sev-guest	`v0.12.2-0.20250205052930-65042ded71f9` -> `v0.13.0`	require	minor
github.com/google/go-tpm-tools	`v0.4.4` -> `v0.4.5`	require	patch
github.com/gophercloud/gophercloud/v2	`v2.4.0` -> `v2.6.0`	require	minor
github.com/gophercloud/utils/v2	`v2.0.0-20250205065254-a1bff20237e7` -> `v2.0.0-20250212084022-725b94822eeb`	require	patch
github.com/grpc-ecosystem/go-grpc-middleware/v2	`v2.2.0` -> `v2.3.0`	require	minor
github.com/hashicorp/go-kms-wrapping/wrappers/azurekeyvault/v2	`v2.0.13` -> `v2.0.14`	require	patch
github.com/hashicorp/terraform-plugin-framework	`v1.13.0` -> `v1.14.1`	require	minor
github.com/hashicorp/terraform-plugin-framework-validators	`v0.16.0` -> `v0.17.0`	require	minor
github.com/regclient/regclient	`v0.8.0` -> `v0.8.2`	require	patch
github.com/rogpeppe/go-internal	`v1.13.1` -> `v1.14.1`	require	minor
github.com/siderolabs/talos/pkg/machinery	`v1.9.3` -> `v1.9.4`	require	patch
github.com/sigstore/sigstore	`v1.8.12` -> `v1.9.0`	require	minor
github.com/spf13/cobra	`v1.8.1` -> `v1.9.1`	require	minor
golang.org/x/crypto	`v0.32.0` -> `v0.35.0`	require	minor
golang.org/x/exp	`e0ece0d` -> `dead583`	require	digest
golang.org/x/tools	`v0.29.0` -> `v0.30.0`	require	minor
google.golang.org/api	`v0.220.0` -> `v0.223.0`	require	minor
google.golang.org/grpc	`v1.70.0` -> `v1.71.0`	require	minor
google.golang.org/protobuf	`v1.36.4` -> `v1.36.5`	require	patch
helm.sh/helm/v3	`v3.17.0` -> `v3.17.1`	require	patch
k8s.io/api	`v0.32.1` -> `v0.32.2`	require	patch
k8s.io/apiextensions-apiserver	`v0.32.1` -> `v0.32.2`	require	patch
k8s.io/apimachinery	`v0.32.1` -> `v0.32.2`	require	patch
k8s.io/apiserver	`v0.32.1` -> `v0.32.2`	require	patch
k8s.io/client-go	`v0.32.1` -> `v0.32.2`	require	patch
k8s.io/cloud-provider	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/cluster-bootstrap	`v0.32.1` -> `v0.32.2`	require	patch
k8s.io/controller-manager	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/cri-client	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/csi-translation-lib	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/dynamic-resource-allocation	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/endpointslice	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/externaljwt	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/kube-aggregator	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/kube-controller-manager	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/kube-proxy	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/kube-scheduler	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/kubelet	`v0.32.1` -> `v0.32.2`	require	patch
k8s.io/legacy-cloud-providers	`v0.30.9` -> `v0.30.10`	replace	patch
k8s.io/mount-utils	`v0.32.1` -> `v0.32.2`	require	patch
k8s.io/pod-security-admission	`v0.32.1` -> `v0.32.2`	replace	patch
k8s.io/sample-apiserver	`v0.32.1` -> `v0.32.2`	replace	patch
sigs.k8s.io/controller-runtime	`v0.20.1` -> `v0.20.2`	require	patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

`v1.36.3`

Compare Source

`v1.36.2`

Compare Source

aws/smithy-go (github.com/aws/smithy-go)

`v1.22.3`

Compare Source

bazelbuild/rules_go (github.com/bazelbuild/rules_go)

`v0.53.0`

Compare Source

`WORKSPACE` code

load("@&#8203;bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "b78f77458e77162f45b4564d6b20b6f92f56431ed59eaaab09e7819d1d850313",
    urls = [
        "https://mirror.bazel.build/github.com/bazel-contrib/rules_go/releases/download/v0.53.0/rules_go-v0.53.0.zip",
        "https://github.com/bazel-contrib/rules_go/releases/download/v0.53.0/rules_go-v0.53.0.zip",
    ],
)

load("@&#8203;io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

go_rules_dependencies()

go_register_toolchains(version = "1.24.0")

What's Changed

Improve the comment for go_sdk.host() in the installation docs by @stefanobaghino in https://github.com/bazel-contrib/rules_go/pull/4230
Use same Go SDK as Gazelle for go_bazel_test by @fmeum in https://github.com/bazel-contrib/rules_go/pull/4231
Allow .so files to have more extensions by @matshch in https://github.com/bazel-contrib/rules_go/pull/4232
Update documentation reference by @phst in https://github.com/bazel-contrib/rules_go/pull/4237
Update protoc plugins to support Protobuf Editions by @mering in https://github.com/bazel-contrib/rules_go/pull/4236
Fix bullet point format in readme by @bluec0re in https://github.com/bazel-contrib/rules_go/pull/4239
sdk: remove logic for Bazel versions below 6.4.0 by @sluongng in https://github.com/bazel-contrib/rules_go/pull/4238
Add new setting //go/toolchain:sdk_name to allow the selection of a specific Go toolchain by @bluec0re in https://github.com/bazel-contrib/rules_go/pull/4242
Mention dev_dependency in go_sdk.host error by @fmeum in https://github.com/bazel-contrib/rules_go/pull/4246
Keep order for PATH components by @lukasoyen in https://github.com/bazel-contrib/rules_go/pull/4252
Reporting subtests as they finish by @linzhp in https://github.com/bazel-contrib/rules_go/pull/4250
Capturing elapsed time of interrupted test cases due to timeout by @linzhp in https://github.com/bazel-contrib/rules_go/pull/4253
Fix upgrade-dep patching system by @stevebarrau in https://github.com/bazel-contrib/rules_go/pull/4254
Rewrite examples and new user documentation by [@jayconrod](https://redirect.github.com/jayconr

Configuration

📅 Schedule: Branch creation - "before 8am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-03-04T11:49:37Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

41 additional dependencies were updated

Details:

Package	Change
`github.com/google/go-tdx-guest`	`v0.3.1` -> `v0.3.2-0.20241009005452-097ee70d0843`
`cel.dev/expr`	`v0.19.0` -> `v0.19.1`
`cloud.google.com/go`	`v0.118.1` -> `v0.118.2`
`cloud.google.com/go/auth`	`v0.14.1` -> `v0.15.0`
`github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal`	`v1.1.0` -> `v1.1.1`
`github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream`	`v1.6.8` -> `v1.6.10`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.3.32` -> `v1.3.34`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.32` -> `v2.6.34`
`github.com/aws/aws-sdk-go-v2/internal/ini`	`v1.8.2` -> `v1.8.3`
`github.com/aws/aws-sdk-go-v2/internal/v4a`	`v1.3.32` -> `v1.3.34`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.12.2` -> `v1.12.3`
`github.com/aws/aws-sdk-go-v2/service/internal/checksum`	`v1.5.6` -> `v1.6.2`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.12.13` -> `v1.12.15`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.18.13` -> `v1.18.15`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.24.15` -> `v1.25.1`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.28.14` -> `v1.29.1`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.33.14` -> `v1.33.17`
`github.com/cncf/xds/go`	`v0.0.0-20240905190251-b4127c9b8d78` -> `v0.0.0-20241223141626-cff3c89139a3`
`github.com/cpuguy83/go-md2man/v2`	`v2.0.4` -> `v2.0.6`
`github.com/docker/cli`	`v27.1.1+incompatible` -> `v27.5.0+incompatible`
`github.com/docker/docker-credential-helpers`	`v0.7.0` -> `v0.8.2`
`github.com/envoyproxy/go-control-plane/envoy`	`v1.32.3` -> `v1.32.4`
`github.com/envoyproxy/protoc-gen-validate`	`v1.1.0` -> `v1.2.1`
`github.com/evanphx/json-patch/v5`	`v5.9.0` -> `v5.9.11`
`github.com/go-jose/go-jose/v4`	`v4.0.2` -> `v4.0.5`
`github.com/google/go-cmp`	`v0.6.0` -> `v0.7.0`
`github.com/google/go-configfs-tsm`	`v0.2.2` -> `v0.3.3-0.20240919001351-b4b5b84fdcbc`
`github.com/google/go-containerregistry`	`v0.20.2` -> `v0.20.3`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.33.0` -> `v1.34.0`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.58.0` -> `v0.59.0`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.58.0` -> `v0.59.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.32.0` -> `v1.34.0`
`golang.org/x/net`	`v0.34.0` -> `v0.35.0`
`golang.org/x/oauth2`	`v0.25.0` -> `v0.27.0`
`golang.org/x/term`	`v0.28.0` -> `v0.29.0`
`golang.org/x/time`	`v0.9.0` -> `v0.10.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250124145028-65684f501c47` -> `v0.0.0-20250219182151-9fdb1cabc7b2`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250127172529-29210b9bc287` -> `v0.0.0-20250219182151-9fdb1cabc7b2`
`k8s.io/cli-runtime`	`v0.32.0` -> `v0.32.1`
`k8s.io/component-base`	`v0.32.1` -> `v0.32.2`
`k8s.io/kubectl`	`v0.32.0` -> `v0.32.1`

File name: hack/tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

7 additional dependencies were updated

Details:

Package	Change
`golang.org/x/crypto`	`v0.32.0` -> `v0.33.0`
`golang.org/x/mod`	`v0.22.0` -> `v0.23.0`
`golang.org/x/net`	`v0.34.0` -> `v0.35.0`
`golang.org/x/sync`	`v0.10.0` -> `v0.11.0`
`golang.org/x/sys`	`v0.29.0` -> `v0.30.0`
`golang.org/x/term`	`v0.28.0` -> `v0.29.0`
`golang.org/x/text`	`v0.21.0` -> `v0.22.0`

netlify · 2025-03-04T11:50:01Z

✅ Deploy Preview for constellation-docs canceled.

Name	Link
🔨 Latest commit	`6c0e0e6`
🔍 Latest deploy log	https://app.netlify.com/sites/constellation-docs/deploys/67c843840447da0008f0248d

Signed-off-by: Daniel Weiße <[email protected]>

renovate · 2025-03-05T12:16:19Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Signed-off-by: Daniel Weiße <[email protected]>

github-actions · 2025-03-05T12:53:51Z

Coverage report

Package	Old	New	Trend
bootstrapper/initproto	0.00%	0.00%	🚧
debugd/service	0.00%	0.00%	🚧
disk-mapper/recoverproto	0.00%	0.00%	🚧
internal/versions/components	47.10%	47.10%	🚧
joinservice/joinproto	0.00%	0.00%	🚧
keyservice/keyserviceproto	0.00%	0.00%	🚧
upgrade-agent/upgradeproto	0.00%	0.00%	🚧
verify/verifyproto	0.00%	0.00%	🚧

renovate bot requested a review from katexochen as a code owner March 4, 2025 11:49

renovate bot added the dependencies Pull requests that update a dependency file label Mar 4, 2025

renovate bot force-pushed the renovate/go-dependencies branch from e51a96a to ebcd33f Compare March 4, 2025 22:50

daniel-weisse self-assigned this Mar 5, 2025

deps: update Go dependencies

e828da8

renovate bot force-pushed the renovate/go-dependencies branch 2 times, most recently from e828da8 to eb06293 Compare March 5, 2025 12:01

daniel-weisse added 3 commits March 5, 2025 13:14

deps: keep google/go-tpm-tools at v0.4.4

6ff5fa7

Signed-off-by: Daniel Weiße <[email protected]>

deps: upgrade rules_go to v0.53.0

0bcbc2a

Signed-off-by: Daniel Weiße <[email protected]>

deps: re-generate files

72cd3a3

Signed-off-by: Daniel Weiße <[email protected]>

daniel-weisse force-pushed the renovate/go-dependencies branch from eb06293 to 72cd3a3 Compare March 5, 2025 12:15

daniel-weisse requested review from daniel-weisse and 3u13r as code owners March 5, 2025 12:15

deps: upgrade go-jose/v3 to v3.0.4

6c0e0e6

Signed-off-by: Daniel Weiße <[email protected]>

daniel-weisse approved these changes Mar 5, 2025

View reviewed changes

daniel-weisse merged commit 84075ca into main Mar 5, 2025
9 checks passed

daniel-weisse deleted the renovate/go-dependencies branch March 5, 2025 13:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: update Go dependencies #3676

deps: update Go dependencies #3676

Uh oh!

renovate bot commented Mar 4, 2025 •

edited

Loading

Uh oh!

renovate bot commented Mar 4, 2025 •

edited

Loading

Uh oh!

netlify bot commented Mar 4, 2025 •

edited

Loading

Uh oh!

renovate bot commented Mar 5, 2025

Uh oh!

github-actions bot commented Mar 5, 2025

Uh oh!

Uh oh!

Uh oh!

deps: update Go dependencies #3676

deps: update Go dependencies #3676

Uh oh!

Conversation

renovate bot commented Mar 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.36.3

v1.36.2

v1.22.3

v0.53.0

WORKSPACE code

What's Changed

Configuration

Uh oh!

renovate bot commented Mar 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

File name: hack/tools/go.mod

Uh oh!

netlify bot commented Mar 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for constellation-docs canceled.

Uh oh!

renovate bot commented Mar 5, 2025

Edited/Blocked Notification

Uh oh!

github-actions bot commented Mar 5, 2025

Coverage report

Uh oh!

Uh oh!

Uh oh!

renovate bot commented Mar 4, 2025 •

edited

Loading

`v1.36.3`

`v1.36.2`

`v1.22.3`

`v0.53.0`

`WORKSPACE` code

renovate bot commented Mar 4, 2025 •

edited

Loading

netlify bot commented Mar 4, 2025 •

edited

Loading