Skip to content

Bump the all group across 1 directory with 16 updates - #687

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-64f32e4609
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-64f32e4609

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 16 updates in the / directory:

Package From To
github.com/go-openapi/jsonreference 1.0.2 1.0.3
github.com/go-openapi/strfmt 0.27.2 0.27.4
github.com/go-openapi/validate 1.0.0 1.0.1
github.com/google/certificate-transparency-go 1.3.3 1.4.0
github.com/grpc-ecosystem/grpc-gateway/v2 2.31.0 2.32.0
github.com/sigstore/rekor 1.5.4 1.5.5
github.com/sigstore/sigstore 1.11.0 1.11.1
github.com/sigstore/timestamp-authority/v2 2.1.4 2.2.0
golang.org/x/crypto 0.57.0 0.58.0
golang.org/x/mod 0.41.0 0.42.0
golang.org/x/net 0.59.0 0.61.0
golang.org/x/term 0.46.0 0.47.0
golang.org/x/text 0.42.0 0.43.0
golang.org/x/tools 0.50.0 0.52.0
google.golang.org/genproto/googleapis/api 0.0.0-20260928230214-8a89bd6388cc 0.0.0-20261012220534-4341edf3f941
google.golang.org/genproto/googleapis/rpc 0.0.0-20260928230214-8a89bd6388cc 0.0.0-20261005182115-fad411399dd8

Updates github.com/go-openapi/jsonreference from 1.0.2 to 1.0.3

Release notes

Sourced from github.com/go-openapi/jsonreference's releases.

v1.0.3

1.0.3 - 2026-09-25

Full Changelog: go-openapi/jsonreference@v1.0.2...v1.0.3

4 commits in this release.


Fixed bugs

  • fix: remove repeated default ports from a URL host in linear time by @​fredbi in #123 ...

Security

  • chore(security): upgraded go-openapi/jsonpointer by @​fredbi ...

Updates


People who contributed to this release


jsonreference license terms

License

Commits
  • 90b39fb chore(security): upgraded go-openapi/jsonpointer
  • 01d7aa2 fix: remove repeated default ports from a URL host in linear time (#123)
  • 2b801d1 build(deps): bump github.com/go-openapi/testify/v2
  • d2410e2 build(deps): bump the development-dependencies group with 9 updates
  • See full diff in compare view

Updates github.com/go-openapi/strfmt from 0.27.2 to 0.27.4

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.27.4

0.27.4 - 2026-10-19

Full Changelog: go-openapi/strfmt@v0.27.3...v0.27.4

5 commits in this release.


Miscellaneous tasks

Updates

  • build(deps): bump go.mongodb.org/mongo-driver/v2 from 2.9.1 to 2.9.2 in the other-dependencies group across 1 directory by @​dependabot[bot] in #317 ...
  • build(deps): bump go.mongodb.org/mongo-driver/v2 from 2.9.1 to 2.9.2 in the other-dependencies group across 1 directory by @​dependabot[bot] in #318 ...
  • build(deps): bump the golang-org-dependencies group across 1 directory with 2 updates by @​dependabot[bot] in #316 ...
  • build(deps): bump the development-dependencies group with 10 updates by @​dependabot[bot] in #315 ...

People who contributed to this release


strfmt license terms

License

Per-module changes


enable/mongodb (0.27.4)

Miscellaneous tasks

... (truncated)

Commits
  • f4233e3 chore: prepare release v0.27.4
  • f993be0 build(deps): bump go.mongodb.org/mongo-driver/v2 (#317)
  • f468f40 build(deps): bump go.mongodb.org/mongo-driver/v2 (#318)
  • a4ec59a build(deps): bump the golang-org-dependencies group across 1 directory with 2...
  • 2df7671 build(deps): bump the development-dependencies group with 10 updates
  • aa03419 chore: prepare release v0.27.3
  • 9cf99be fix: reject a duration sum that wraps past 2^64 (#312)
  • 7d71caa doc: updated contributors file
  • a01773a build(deps): bump github.com/go-openapi/errors
  • 2c2378a build(deps): bump the other-dependencies group across 3 directories with 3 up...
  • Additional commits viewable in compare view

Updates github.com/go-openapi/validate from 1.0.0 to 1.0.1

Release notes

Sourced from github.com/go-openapi/validate's releases.

v1.0.1

1.0.1 - 2026-10-20

Full Changelog: go-openapi/validate@v1.0.0...v1.0.1

10 commits in this release.


Documentation

Miscellaneous tasks

Updates


People who contributed to this release


validate license terms

License

Commits
  • 269dfbe chore: update strfmt and golang.org dependencies (#307)
  • 16f7a05 Recursion guard (#306)
  • d16ffd7 chore(deps): bump the go-openapi-dependencies group across 1 directory with 2...
  • 9b52ade chore(deps): bump the development-dependencies group with 9 updates
  • d56dbb5 doc: updated contributors file
  • 534d81d chore(deps): bump github.com/go-openapi/jsonpointer
  • 0ba214d chore(deps): bump github.com/go-openapi/errors
  • a30278f chore(deps): bump github.com/go-openapi/testify/v2
  • ea2780b chore(deps): bump the development-dependencies group with 9 updates
  • 9865f54 chore(deps): bump the go-openapi-dependencies group with 10 updates
  • See full diff in compare view

Updates github.com/google/certificate-transparency-go from 1.3.3 to 1.4.0

Release notes

Sourced from github.com/google/certificate-transparency-go's releases.

v1.4.0

Full Changelog: google/certificate-transparency-go@v1.3.3...v1.4.0

Changelog

Sourced from github.com/google/certificate-transparency-go's changelog.

CERTIFICATE-TRANSPARENCY-GO Changelog

HEAD

  • Bump trillian to v1.8.0, and drop tracing support by @​phbnf
  • Fix tls.Unmarshal decoding a Uint24 field from the start of the buffer instead of the field's offset by @​robstradling
  • Switch Ed25519 import from deprecated golang.org/x/crypto/ed25519 to stdlib crypto/ed25519 by @​JasonPowr
  • Added --emit_proxy_headers flag to ctfe by @​mhutchinson
Commits

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.31.0 to 2.32.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.32.0

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0

Commits
  • 9b13706 Gate strict ** matching from #7412 behind strict_deep_wildcard generator ...
  • e2bc4bb chore(deps): update googleapis digest to a6f4580 (#7526)
  • 796f2c3 chore(deps): update googleapis digest to d7dd444 (#7525)
  • 4f04466 chore(deps): update golang.org/x/exp digest to f0251eb (#7524)
  • a62432a chore(deps): update golang.org/x/exp digest to 2ab7f3c (#7519)
  • 596056e chore(deps): update googleapis digest to b6efa15 (#7520)
  • 52de616 chore(deps): update googleapis digest to 0b2e1ee (#7518)
  • 14c1da7 fix(deps): update google.golang.org/genproto/googleapis/api digest to 4341edf...
  • 9b863f4 chore(deps): update googleapis digest to f5f34cc (#7514)
  • 04c1457 chore(deps): update goreleaser/goreleaser-action digest to a4f02ab (#7515)
  • Additional commits viewable in compare view

Updates github.com/sigstore/rekor from 1.5.4 to 1.5.5

Release notes

Sourced from github.com/sigstore/rekor's releases.

v1.5.5

Changelog

This release is built with Go 1.27.3 and updates the PGP dependency to no longer use the unmaintained x/crypto package.

  • 206912e3cf61ba3fed587896e10d4812411e6913 build releases w/ go 1.27.3 toolchain on golang-cross v1.27.2-0 (#3029)
  • 8ae33bde942047f3f8003a01625c577687c605d9 Replace cyberphone/json-canonicalization with encoding/json/jsontext (#3028)
  • 6da522bd9133aae992a1a725baeb4b093e447a1a Replace hashicorp/go-retryablehttp with std lib retry transport (#2933)
  • 2192dfbb5633472a97c1a8a33bb9167767fc0e32 re-implement pgp v3 signature support (#3018)
  • b7e5e99f66562fbbbba531303efe8f7278e14c17 feat: serve the API over TLS with a configurable TLS policy (#2920)
  • 37d393838e056aa397aa308ceda6f8b6498dcd30 fix broken sigv3 parsing, add tests (#2959)
  • d8bd80452e41ae5be1d792f391531ff742e8246b dsse parsing cpu/memory optimization (#2946)
  • db458f0eefd738dd4dfd0df8b451142b345716a3 ensure invalid treeIDs always return with 400 errors (#2958)
  • 9651c3f007a7afdd45f380b837f34d2e47f6b4f0 use WithCancel ctx for async tasks (#2947)
  • eee7d8d644f5713e3c1ace419425aa3ceadc46d7 Update 413 status code error handling (#2813)

Thanks for all contributors!

Changelog

Sourced from github.com/sigstore/rekor's changelog.

v1.5.5

Features

  • feat: serve the API over TLS with a configurable TLS policy (#2920)

Bug Fixes

  • re-implement pgp v3 signature support (#3018)
  • fix broken PGP sigv3 parsing, add tests (#2959)
  • ensure invalid treeIDs always return with 400 errors (#2958)
  • use WithCancel ctx for async tasks (#2947)
  • Update 413 status code error handling (#2813)

Improvements

  • Replace cyberphone/json-canonicalization with encoding/json/jsontext (#3028)
  • Replace hashicorp/go-retryablehttp with std lib retry transport (#2933)
  • Drop patch version from go directive in go.mod (#3027)
  • Bump sigstore/sigstore to v1.11, bump min Go version to 1.27, modernize code (#2992)
  • bump go-openapi and mysql driver (#2985)
  • remove gocovmerge for go tool cover (#2963)
  • build releases w/ go 1.27.0 toolchain (#2960)
  • dsse parsing cpu/memory optimization (#2946)
  • numerous upgraded dependencies
  • builds use go 1.27 (including JSON, gc improvements)

Contributors

  • Anitha Natarajan
  • Bob Callaway
  • Hayden
  • Radoslav Dimitrov
  • Stef Graces
Commits
  • 206912e build releases w/ go 1.27.3 toolchain on golang-cross v1.27.2-0 (#3029)
  • be7483f add changelog for v1.5.5 (#2961)
  • 8ae33bd Replace cyberphone/json-canonicalization with encoding/json/jsontext (#3028)
  • 6da522b Replace hashicorp/go-retryablehttp with std lib retry transport (#2933)
  • 2192dfb re-implement pgp v3 signature support (#3018)
  • 7a6bb48 build(deps): Bump github.com/go-chi/chi/v5 from 5.3.2 to 5.5.0 (#3022)
  • ec44788 build(deps): Bump golang.org/x/net from 0.59.0 to 0.61.0 (#3023)
  • 7582306 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.8.0 to 2.9.0 (#3024)
  • 504f816 build(deps): Bump cloud.google.com/go/profiler from 0.6.0 to 0.7.0 (#3025)
  • fb3f514 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#3020)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore from 1.11.0 to 1.11.1

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.11.1

What's Changed

v1.11.1 drops the Go version directive to a minor release, 1.27, rather than the patch release, 1.27.0. Dependents will need to remove the patch version .0 from go.mod files, as go mod tidy will not automatically do so.

Full Changelog: sigstore/sigstore@v1.11.0...v1.11.1

Commits
  • 4068921 build(deps): Bump github.com/aws/aws-sdk-go-v2/config (#2420)
  • db8df91 build(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms (#2425)
  • 9ee089f build(deps): Bump golang.org/x/oauth2 from 0.36.0 to 0.37.0 (#2423)
  • 75c0ca3 build(deps): Bump github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0 (#2424)
  • 7885bcb build(deps): Bump github.com/aws/aws-sdk-go-v2 in /pkg/signature/kms/aws (#2426)
  • c350b4a build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2427)
  • c139819 build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2429)
  • 8c97c6a Check private key size in LoadED25519phSigner (#2438)
  • eee22a8 Set go directive to minor version only (go 1.27) (#2436)
  • 957a8a1 build(deps): Bump the all group in /test/e2e with 2 updates (#2434)
  • Additional commits viewable in compare view

Updates github.com/sigstore/timestamp-authority/v2 from 2.1.4 to 2.2.0

Release notes

Sourced from github.com/sigstore/timestamp-authority/v2's releases.

v2.2.0

What's Changed

This release adds experimental support for signing timestamps with ML-DSA, per RFC 9882. Note that the Sigstore client tooling does not yet support ML-DSA signed timestamps.

See https://blog.sigstore.dev/pqc-sigstore/ to learn more about post-quantum cryptography support in Sigstore.

Full Changelog: sigstore/timestamp-authority@v2.1.6...v2.2.0

v2.1.6

Changelog

This release builds with Go 1.27.3 to pick up a recent security fix.

  • 96efaf4e57b47b8cfbb902456e18705719bbc9a1 Bump Go builder version to 1.27.3, bump linter (#1529)

Full Changelog: sigstore/timestamp-authority@v2.1.5...v2.1.6

v2.1.5

What's Changed

Full Changelog: sigstore/timestamp-authority@v2.1.4...v2.1.5

Commits

Updates golang.org/x/crypto from 0.57.0 to 0.58.0

Commits
  • 8fdf07b go.mod: update golang.org/x dependencies
  • 2437861 salsa20: fix keystream reuse in LoongArch LSX tail
  • c3db4df acme: prefer test log helpers in test contexts
  • 4e01a84 acme: adds support for profiles draft
  • 8f0f111 ssh: check that no Unicode-aware string function is used
  • b39ff6d ssh: add certificate algorithms for ML-DSA keys
  • 4465db3 ssh: add the ML-DSA public key algorithms
  • 83e695b ssh: implement ETM mode for CBC ciphers
  • 946083a ssh: only drop a trailing carriage return
  • 543dde9 ssh: accept known_hosts entries with a multi-word comment
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.41.0 to 0.42.0

Commits
  • b5136e5 sumdb/tlog: use recorded responses in TestCertificateTransparency
  • 1e9a5ae go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates golang.org/x/net from 0.59.0 to 0.61.0

Commits
  • c1d31df go.mod: update golang.org/x dependencies
  • 8456a20 quic: properly check for allowed frame types in a packet
  • 18ece0c http2: prevent crash due to HPACK encoder race
  • 2d03f9d http2: avoid 2x refund on stream close with buffered data
  • cc7d34f http2: avoid excessive work on initial window changes
  • 57f4235 http2: apply header limits to Trailer headers too
  • 01e3d03 http2: coalesce dials via wrapped Transport.RoundTrip
  • 2824783 http2: delete malformed framing-related headers
  • b13c0c1 internal/http3: delete HTTP/3 package
  • 520c891 quic: off-path support in loss/congestion/rtt
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.46.0 to 0.47.0

Commits

Updates golang.org/x/text from 0.42.0 to 0.43.0

Commits
  • ac40b0f go.mod: update golang.org/x dependencies
  • 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
  • d0ecd29 secure/bidirule: lazily precompute ASCII table
  • See full diff in compare view

Updates golang.org/x/tools from 0.50.0 to 0.52.0

Commits
  • 16517d9 go.mod: update golang.org/x dependencies
  • a39b773 gopls/internal/cache: fix shadowing bug
  • 2faede3 gopls/internal/test/marker: reorganize undeclared test files
  • dbca0bb go/ssa: support pointer-typed composite literals in all contexts
  • ec72d2b gopls/internal/cache: pass overlays to go mod commands
  • 2c54968 gopls/internal/golang: MoveDeclaration - fix imports for decls in multiple files
  • 1e27b6e internal/cursorutil: promote from gopls, plus other cleanups
  • 2babe1e gopls/internal/lsprpc: adjust dial retry logic
  • a3af45f internal/refactor/inline: reduce void calls in tail position
  • ac4a446 gopls/internal/filewatcher: disable TestStress/fsnotify on 386
  • Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261012220534-4341edf3f941

Commits

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261005182115-fad411399dd8

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `1.0.2` | `1.0.3` |
| [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) | `0.27.2` | `0.27.4` |
| [github.com/go-openapi/validate](https://github.com/go-openapi/validate) | `1.0.0` | `1.0.1` |
| [github.com/google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) | `1.3.3` | `1.4.0` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.31.0` | `2.32.0` |
| [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.5.4` | `1.5.5` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.11.0` | `1.11.1` |
| [github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority) | `2.1.4` | `2.2.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.41.0` | `0.42.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.59.0` | `0.61.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.50.0` | `0.52.0` |
| [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20260928230214-8a89bd6388cc` | `0.0.0-20261012220534-4341edf3f941` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260928230214-8a89bd6388cc` | `0.0.0-20261005182115-fad411399dd8` |



Updates `github.com/go-openapi/jsonreference` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/go-openapi/jsonreference/releases)
- [Commits](go-openapi/jsonreference@v1.0.2...v1.0.3)

Updates `github.com/go-openapi/strfmt` from 0.27.2 to 0.27.4
- [Release notes](https://github.com/go-openapi/strfmt/releases)
- [Commits](go-openapi/strfmt@v0.27.2...v0.27.4)

Updates `github.com/go-openapi/validate` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/go-openapi/validate/releases)
- [Commits](go-openapi/validate@v1.0.0...v1.0.1)

Updates `github.com/google/certificate-transparency-go` from 1.3.3 to 1.4.0
- [Release notes](https://github.com/google/certificate-transparency-go/releases)
- [Changelog](https://github.com/google/certificate-transparency-go/blob/master/CHANGELOG.md)
- [Commits](google/certificate-transparency-go@v1.3.3...v1.4.0)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.31.0 to 2.32.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0)

Updates `github.com/sigstore/rekor` from 1.5.4 to 1.5.5
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](sigstore/rekor@v1.5.4...v1.5.5)

Updates `github.com/sigstore/sigstore` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.11.0...v1.11.1)

Updates `github.com/sigstore/timestamp-authority/v2` from 2.1.4 to 2.2.0
- [Release notes](https://github.com/sigstore/timestamp-authority/releases)
- [Changelog](https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md)
- [Commits](sigstore/timestamp-authority@v2.1.4...v2.2.0)

Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0
- [Commits](golang/crypto@v0.57.0...v0.58.0)

Updates `golang.org/x/mod` from 0.41.0 to 0.42.0
- [Commits](golang/mod@v0.41.0...v0.42.0)

Updates `golang.org/x/net` from 0.59.0 to 0.61.0
- [Commits](golang/net@v0.59.0...v0.61.0)

Updates `golang.org/x/term` from 0.46.0 to 0.47.0
- [Commits](golang/term@v0.46.0...v0.47.0)

Updates `golang.org/x/text` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.42.0...v0.43.0)

Updates `golang.org/x/tools` from 0.50.0 to 0.52.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.50.0...v0.52.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261012220534-4341edf3f941
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261005182115-fad411399dd8
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 1.0.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/strfmt
  dependency-version: 0.27.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/validate
  dependency-version: 1.0.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/google/certificate-transparency-go
  dependency-version: 1.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/sigstore/rekor
  dependency-version: 1.5.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.11.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/timestamp-authority/v2
  dependency-version: 2.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/crypto
  dependency-version: 0.58.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/mod
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/net
  dependency-version: 0.61.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/term
  dependency-version: 0.47.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/tools
  dependency-version: 0.52.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20261012220534-4341edf3f941
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20261005182115-fad411399dd8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team as code owners October 25, 2026 16:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants