Skip to content

chore(deps): bump the others group across 1 directory with 14 updates - #2660

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/master/others-2ae17a94c1
Open

chore(deps): bump the others group across 1 directory with 14 updates#2660
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/master/others-2ae17a94c1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the others group with 14 updates in the / directory:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob 1.8.0 1.8.1
github.com/CycloneDX/cyclonedx-go 0.11.0 0.12.0
github.com/aws/aws-sdk-go-v2 1.43.6 1.47.0
github.com/aws/aws-sdk-go-v2/config 1.32.37 1.33.5
github.com/aws/aws-sdk-go-v2/credentials 1.19.36 1.20.5
github.com/aws/aws-sdk-go-v2/service/s3 1.107.2 1.113.1
github.com/aws/aws-sdk-go-v2/service/sts 1.45.6 1.51.0
github.com/google/go-containerregistry 0.21.9 0.22.1
github.com/olekukonko/tablewriter 1.1.4 1.1.5
github.com/package-url/packageurl-go 0.1.6 0.1.7
github.com/sirupsen/logrus 1.10.0 1.10.2
golang.org/x/sync 0.22.0 0.23.0
golang.org/x/term 0.45.0 0.46.0
golang.org/x/text 0.41.0 0.42.0

Updates github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/storage/azblob's releases.

sdk/storage/azblob/v1.8.1

1.8.1 (2026-09-09)

Known Issues

  • The default x-ms-version was updated to 2026-12-06, which is not yet supported by all Azure Storage stamps. Affected storage accounts may return 400 InvalidHeaderValue errors. The rollout is expected to complete across all public regions by early October 2026. In the meantime, either pin to v1.8.0 or inject a per-retry pipeline policy that sets x-ms-version to 2026-10-06.

Breaking Changes

  • DownloadBuffer and DownloadFile now use ETag locking to ensure consistency across parallel chunk requests when the blob size is not specified upfront (i.e., Range.Count is zero). If a blob is modified during a multi-chunk download, subsequent requests will fail with ConditionNotMet instead of silently returning data from mixed blob versions.

Bugs Fixed

  • Fixed CRLF injection vulnerability in Blob Batch subrequest serialization. Header values containing CR or LF characters are now rejected before serialization, preventing header injection in batch requests.
  • Fixed WASM compilation by using heap-allocated buffers on JS targets.
  • Fixed Structured Message CRC64 download validation being skipped when the final payload byte exactly fills the caller's read buffer; the trailing segment footer and message trailer CRC64 are now drained and validated in the same Read.
  • Fixed transient net.Error/io.ErrUnexpectedEOF failures during a Structured Message download not being retried: the decoder now preserves the error chain with %w and the retry reader classifies retryable errors with errors.Is/errors.As.
  • Structured Message download now rejects a response missing the negotiated CRC64 flag instead of silently skipping validation.
  • Fixed the Structured Message encoder emitting a valid, complete message when the source returned a non-EOF error exactly on a segment boundary; such errors are now propagated.
  • Structured Message decoding now rejects a payload that declares fewer segments and appends unvalidated trailing bytes (SMDecode requires the parsed message to consume the entire input, and the streaming decoder validates the consumed byte count against the declared message length).
  • Fixed the Structured Message encoder returning io.EOF when the source ends before the declared content length; a premature EOF is now surfaced as io.ErrUnexpectedEOF so callers do not accept a truncated message.
  • Fixed Structured Message decoder discarding errors (including net.Error and io.EOF) when the returned bytes exactly complete a segment; such errors are now propagated so RetryReader can retry transient failures at segment boundaries.
  • Premature EOF during Structured Message framing reads (header, segment footer, or message trailer) now wraps io.ErrUnexpectedEOF so RetryReader classifies truncated framing as retryable.

Other Changes

  • Optimized DownloadBuffer and DownloadFile to use an initial GET request instead of a HEAD (GetProperties) call for blob size discovery. For small blobs (<=4MB), the entire content is returned in a single request, reducing download latency by ~50%.
  • Updated azcore to v1.23.1.

sdk/storage/azblob/v1.8.1-beta.1

1.8.1-beta.1 (2026-07-24)

Features Added

  • Added support for Structured Message CRC64 content validation on upload and download operations using TransferValidationTypeComputeStructuredMessageCRC64.
  • Added StorageResponseFormat enum (Auto, XML, Arrow) for list blobs operations. Set ResponseFormat on ListBlobsFlatOptions/ListBlobsHierarchyOptions to opt into Apache Arrow format for improved performance. Auto defaults to XML for this release.
  • Added AccessTier, AccessTierInferred, AccessTierChangeTime, and SmartAccessTier fields to blob download response.
  • Blob put operations now return both ContentMD5 and ContentCRC64 in the response when a Content-MD5 header is provided (service version 2026-10-06+).

Bugs Fixed

  • Fixed UploadFile/UploadBuffer responses not including ContentCRC64 when returned by the service.

Other Changes

  • Updated code generator to @autorest/go@4.0.0-preview.80.
  • Default upload/download concurrency is now based on CPU core count (clamped between 8 and 96) instead of the fixed value of 5. Set AZURE_STORAGE_USE_LEGACY_DEFAULT_CONCURRENCY=true to revert to previous defaults.
  • Updated azidentity version to 1.14.0
Commits
  • d5e09ea Prepare azidentity v1.8.1 for release (#23954)
  • af8249d Increment package version after release of storage/azblob (#23940)
  • 8b21042 Increment package version after release of storage/azdatalake (#23958)
  • a44e152 Release storage stg96 azdatalake preview (#23957)
  • b11c1a5 Relax tenant verification for credentials having optional tenant IDs (#23951)
  • e557039 remove erroneous package inclusion during package-properties evaluation (#23948)
  • 0fb4336 Increment package version after release of messaging/azservicebus (#23950)
  • b1480a2 Updating docs.microsoft.com to learn.microsoft.com (#23934)
  • 786b0be Credential chains continue iterating after unexpected IMDS responses (#23894)
  • 7d4721b add liftr base package dep to emitter dep list (#23938)
  • Additional commits viewable in compare view

Updates github.com/CycloneDX/cyclonedx-go from 0.11.0 to 0.12.0

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.12.0

Changelog

Building and Packaging

  • 5dfc64ab963e76da86efe7faae291ed095923484: build(deps): bump actions/checkout from 6.0.2 to 7.0.1 (@​dependabot[bot])
  • 1ede59bde7338f3c399d3fb8496fea1d09a64c4a: build(deps): bump actions/checkout from 6.0.2 to 7.0.1 (@​dependabot[bot])
  • 0802b2051bf0bab06d4292ffe9544f1b81b7d871: build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 (@​dependabot[bot])
  • 912c03326d52e05a11c8b4c04611e645e23a511f: build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (@​dependabot[bot])
  • 3b6942c801ce9089f70ce5d6823f9bc412ff1083: build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (@​dependabot[bot])
  • 14a734c429eb00311801569d0fca83d528f7807b: build(deps): bump github.com/terminalstatic/go-xsd-validate (@​dependabot[bot])
  • c3551dd3988ca16fc885906fdbed9871b97ed15f: build(deps): bump github.com/terminalstatic/go-xsd-validate (@​dependabot[bot])
  • 4598c3a9e8b7a69f9e5c30b4082cce6f12da9ad6: build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.3.0 (@​dependabot[bot])
  • 0d3dc12d273ad6c9bb80d3b00b52908f3df228b0: build(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.3 (@​dependabot[bot])

Others

  • ed2c60ec63e49257c9b943be633157777d70bd97: Encode evidence identity as a single object when downgrading below 1.6 (@​sueun-dev)
  • 3d9769a7919bf961da7c90286e9b6aa8f6389c8f: Strip fields newer than the target spec version when downgrading (@​sueun-dev)
  • cdee31c65c4f9675f81aff69deadae480019030c: chore: bump minimum go version to 1.25 (@​nscuro)
  • b3fcca54d5debbfe3cbf51078bf2c69bf65ed789: chore: harden GHA workflows; add zizmor job (@​nscuro)
  • cbc84f956ef2472a864d055705df0901335bf8fb: chore: refresh goreleaser setup (@​nscuro)
Commits
  • 717afd1 Merge pull request #289 from CycloneDX/go-1.25
  • cdee31c chore: bump minimum go version to 1.25
  • a748788 Merge pull request #288 from CycloneDX/goreleaser-config-update
  • c69efae Merge pull request #287 from CycloneDX/dependabot/github_actions/actions/chec...
  • cbc84f9 chore: refresh goreleaser setup
  • 5dfc64a build(deps): bump actions/checkout from 6.0.2 to 7.0.1
  • 2c4927c Merge pull request #286 from CycloneDX/gha-hardening
  • b3fcca5 chore: harden GHA workflows; add zizmor job
  • 9401da7 Merge pull request #285 from CycloneDX/dependabot/go_modules/github.com/stret...
  • 3b6942c build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.43.6 to 1.47.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.37 to 1.33.5

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.36 to 1.20.5

Commits
  • f2706c8 Release 2023-12-08
  • 1dac0c9 Regenerated Clients
  • cbd9216 Update API model
  • c7357bb fix: reinstate presence of retryer when functional opts run but still respect...
  • c5c34b3 fix: translation of ini service sections into shared config (#2416)
  • b3c7fbf update express cache key (#2414)
  • 9b90af4 fix: add non-vhostable buckets to path when using legacy endpoint resolver (#...
  • 0d643a8 Release 2023-12-07
  • e38b534 Regenerated Clients
  • f394daf Update SDK's smithy-go dependency to v1.19.0
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.2 to 1.113.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.45.6 to 1.51.0

Commits

Updates github.com/google/go-containerregistry from 0.21.9 to 0.22.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.22.1

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.22.0...v0.22.1

v0.22.0

What's Changed

New Contributors

... (truncated)

Commits
  • 8a72a42 remote: copy manifest annotations to referrers fallback tag descriptors (#2441)
  • 5765c35 build(deps): bump the go-deps group across 2 directories with 3 updates (#2439)
  • 969402f fix(mutate): make Time layer updates lazy (#2429)
  • 25c682e flatten: preserve config and layer media types when flattening (#2438)
  • 79af990 remote: add SSRF redirect protection to writer-side HTTP clients (#2432)
  • 4b9b3c7 fix(release): honor declared Go toolchain (#2435)
  • e033b9c fix(build): install binaries to /ko-app and add to PATH (#2424) (#2436)
  • 8bd7902 name: return a helpful error when a reference contains a URL scheme (#2431)
  • 163134d validate: support index attestation manifests and empty configs (#2414)
  • 44f7ea3 fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml (#2434)
  • Additional commits viewable in compare view

Updates github.com/olekukonko/tablewriter from 1.1.4 to 1.1.5

Commits
  • 5f0c87a change readme to v1.1.5
  • 8535cd2 Merge pull request #331 from olekukonko/makawhy
  • 8db545f markdown game
  • 569d938 Merge pull request #330 from olekukonko/makawhy
  • ce371fa Merge pull request #326 from olekukonko/makawhy
  • e1d22bb Merge pull request #329 from team-humaki/fix/global-width-wrap-split
  • c9a710f Merge pull request #327 from youdie006/wrapwords-last-word-hang
  • cbd4eb4 wrap: split Widths.Global across columns
  • 2a7896c Broaden the WrapWords table to the shapes around the last-word case
  • cb595f4 Terminate WrapWords when the last word is wider than the limit
  • Additional commits viewable in compare view

Updates github.com/package-url/packageurl-go from 0.1.6 to 0.1.7

Release notes

Sourced from github.com/package-url/packageurl-go's releases.

v0.1.7

What's Changed

New Contributors

Full Changelog: package-url/packageurl-go@v0.1.6...v0.1.7

Commits
  • c88ed7b Merge pull request #103 from william-elastisys/cpan-optional-namespace
  • 569ee0d make cpan namespace optional
  • 44fc744 Merge pull request #105 from william-elastisys/add-vcpkg-type
  • 9da7353 add support for vcpkg purl-type
  • f5978e9 Merge pull request #93 from czunker/fix/encode-sub-delims-in-path-segments
  • 327d6a6 Percent-encode sub-delimiters in name/version path segments
  • bfacec9 Merge pull request #95 from arpitjain099/fix/npm-missing-name
  • 871407e Reject npm purl with bare scope and no name
  • 85c494e Merge pull request #102 from william-elastisys/homebrew-case-sensitive
  • 16e06cb make brew name and namespace lower-case
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.10.0 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

v1.10.1

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed values implementing error to be used with WithError, WithField, and WithFields.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.

1.10.1

Fixes:

  • Fix a regression introduced in v1.10.0 where TextFormatter could panic when formatting nil or panicking error and fmt.Stringer values.
  • Allow function-backed implementations of error as field values.
Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • 8b673a9 Merge pull request #1583 from thaJeztah/release_1.10.1
  • 0b920ad Merge pull request #1584 from thaJeztah/more_coverage
  • 5e20694 TextFormatter: cover nil pointer method receivers
  • 8312732 update changelog for v1.10.1
  • e987a40 Merge pull request #1582 from thaJeztah/panic_handler
  • 17d574b TextFormatter: recover panics from Error and String methods
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.22.0 to 0.23.0

Commits
  • f75267d semaphore: panic on negative capacity
  • 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates golang.org/x/term from 0.45.0 to 0.46.0

Commits
  • 6226200 go.mod: update golang.org/x dependencies
  • 7c2fb74 term: process bytes returned with a read error
  • 3963fce all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates golang.org/x/text from 0.41.0 to 0.42.0

Commits
  • fafe4a0 go.mod: update golang.org/x dependencies
  • f53c316 unicode/norm: don't truncate runes in the recomposition map key
  • 37867f6 unicode/norm: let any starter block composition in compose
  • 0dd525f unicode/norm: compose non-Hangul runes after a Hangul syllable
  • bac26e5 unicode/norm: avoid improper ErrShortDst return in Form.transform
  • 4f55186 unicode/norm: simplify short source detection in Form.transform
  • a1b6c10 unicode/norm: prevent decomposeSegment from moving backwards
  • cd1cbc9 unicode/bidi: panic rather than log.Panicf
  • a459614 internal/export/idna: fix conformance with optional validation disabled
  • be70a61 internal/export/idna: drop trie field from Profiles
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the others group across 1 directory with 14 updates
5957078 
Bumps the others group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `1.8.0` | `1.8.1` |
| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.11.0` | `0.12.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.6` | `1.47.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.37` | `1.33.5` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.36` | `1.20.5` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.107.2` | `1.113.1` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.45.6` | `1.51.0` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.9` | `0.22.1` |
| [github.com/olekukonko/tablewriter](https://github.com/olekukonko/tablewriter) | `1.1.4` | `1.1.5` |
| [github.com/package-url/packageurl-go](https://github.com/package-url/packageurl-go) | `0.1.6` | `0.1.7` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.10.0` | `1.10.2` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.45.0` | `0.46.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.41.0` | `0.42.0` |



Updates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.8.0...sdk/azidentity/v1.8.1)

Updates `github.com/CycloneDX/cyclonedx-go` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Commits](CycloneDX/cyclonedx-go@v0.11.0...v0.12.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.43.6 to 1.47.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.43.6...v1.47.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.37 to 1.33.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.37...config/v1.33.5)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.36 to 1.20.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.36...service/mq/v1.20.5)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.107.2 to 1.113.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.107.2...service/s3/v1.113.1)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.45.6 to 1.51.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/sts/v1.45.6...service/s3/v1.51.0)

Updates `github.com/google/go-containerregistry` from 0.21.9 to 0.22.1
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.9...v0.22.1)

Updates `github.com/olekukonko/tablewriter` from 1.1.4 to 1.1.5
- [Release notes](https://github.com/olekukonko/tablewriter/releases)
- [Commits](olekukonko/tablewriter@v1.1.4...v1.1.5)

Updates `github.com/package-url/packageurl-go` from 0.1.6 to 0.1.7
- [Release notes](https://github.com/package-url/packageurl-go/releases)
- [Commits](package-url/packageurl-go@v0.1.6...v0.1.7)

Updates `github.com/sirupsen/logrus` from 1.10.0 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.10.0...v1.10.2)

Updates `golang.org/x/sync` from 0.22.0 to 0.23.0
- [Commits](golang/sync@v0.22.0...v0.23.0)

Updates `golang.org/x/term` from 0.45.0 to 0.46.0
- [Commits](golang/term@v0.45.0...v0.46.0)

Updates `golang.org/x/text` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: others
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.113.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: github.com/olekukonko/tablewriter
  dependency-version: 1.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: others
- dependency-name: github.com/package-url/packageurl-go
  dependency-version: 0.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: others
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: others
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: golang.org/x/term
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: golang.org/x/text
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants