Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
cpanato
commented
2 weeks ago
Bumps the gomod group with 4 updates: cuelang.org/go, github.com/google/go-containerregistry, github.com/spf13/cobra and go.step.sm/crypto.
Updates
cuelang.org/gofrom 0.9.0 to 0.9.1Updates
github.com/google/go-containerregistryfrom 0.19.1 to 0.19.2Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
1b4e407Add -O shorthand for --omit-digest-tags to crane. (#1958)3764db2Fix windows race condition when writing image with duplicate layers (#1921)39d1148Add Context support to auth methods (#1949)ff385a9feat: mutate platform (#1919)98dd3e9Support podman auth file REGISTRY_AUTH_FILE. (#1914)051d642registry: Implement Range requests for blobs (#1917)0309184Add JSON marshalling funcs for Digest. (#1915)Updates
github.com/spf13/cobrafrom 1.8.0 to 1.8.1Release notes
Sourced from github.com/spf13/cobra's releases.
... (truncated)
Commits
e94f6d0Address golangci-lint deprecation warnings, enable some more linters (#2152)8003b74Remove fully inactivated linters (#2148)5c2c1d6Consistent annotation names (#2140)5a1aceabuild(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4 (#2127)0fc86c2docs: update user guide (#2128)6b5f577More linting (#2099)bd914e5fix: remove deprecated io/ioutils package (#2120)1f80fa2chore: remove repetitive words (#2122)c69ae4cci: test golang 1.22 (#2113)a30cee5build(deps): bump actions/cache from 3 to 4 (#2102)Updates
go.step.sm/cryptofrom 0.47.0 to 0.47.1Commits
e2cd3faMerge pull request #525 from smallstep/dependabot/go_modules/github.com/Azure...a382f8eBump github.com/Azure/azure-sdk-for-go/sdk/azidentity23801dcMerge pull request #520 from smallstep/dependabot/go_modules/github.com/Azure...cfbe03cBump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.11.1 to 1.12.06f42c39Merge pull request #524 from smallstep/dependabot/go_modules/google.golang.or...292b16fBump google.golang.org/api from 0.182.0 to 0.183.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show