Skip to content

Bump the all group across 1 directory with 16 updates#1359

Merged
PuneetPunamiya merged 1 commit intomainfrom
dependabot/go_modules/all-eacb8ffebc
May 30, 2025
Merged

Bump the all group across 1 directory with 16 updates#1359
PuneetPunamiya merged 1 commit intomainfrom
dependabot/go_modules/all-eacb8ffebc

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 21, 2025 •
edited
Loading

Bumps the all group with 11 updates in the / directory:

Package From To
cloud.google.com/go/compute/metadata 0.6.0 0.7.0
cloud.google.com/go/storage 1.52.0 1.54.0
github.com/google/go-containerregistry 0.20.3 0.20.4
github.com/in-toto/archivista 0.9.1 0.9.3
github.com/sigstore/sigstore/pkg/signature/kms/aws 1.9.1 1.9.4
github.com/sigstore/sigstore/pkg/signature/kms/azure 1.9.1 1.9.4
github.com/sigstore/sigstore/pkg/signature/kms/gcp 1.9.1 1.9.4
github.com/sigstore/sigstore/pkg/signature/kms/hashivault 1.9.1 1.9.4
k8s.io/api 0.32.2 0.33.1
k8s.io/client-go 0.32.2 0.33.1
k8s.io/code-generator 0.32.2 0.33.1

Updates cloud.google.com/go/compute/metadata from 0.6.0 to 0.7.0

Release notes

Sourced from cloud.google.com/go/compute/metadata's releases.

compute/metadata: v0.7.0

0.7.0 (2025-05-13)

Features

  • compute/metadata: Allow canceling GCE detection (#11786) (78100fe)
Changelog

Sourced from cloud.google.com/go/compute/metadata's changelog.

v0.7.0

  • Release of a client library for Spanner. See the blog post. Note that although the Spanner service is beta, the Go client library is alpha.
Commits
  • 2e6a95e pubsub: fix flaky streaming retry test
  • 581b839 pubsub: check early if streaming iterator is already drained
  • cc13a9b spanner: fix time.Time comparisons for upcoming Go1.9 monotonic times
  • 1ba9ec4 spanner: remove most logging from tests
  • 11737a0 spanner: skip some tests in short mode
  • 7bcba8a datastore: DRY up loading entity code
  • df9740f regenerate toolkit client
  • 960c768 trace: export tracing scopes
  • 8b0ab47 logadmin: retry on CreateMetric and UpdateMetric
  • 2066696 trace: clarify how gRPC options work
  • Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.52.0 to 1.54.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.54.0

1.54.0 (2025-05-12)

Features

Bug Fixes

storage: v1.53.0

1.53.0 (2025-05-02)

Features

  • storage/control: Add Anywhere cache control APIs (83ae06c)

Bug Fixes

Documentation

  • storage/control: Added comments for Anywhere cache messages (83ae06c)
Commits

Updates github.com/google/go-containerregistry from 0.20.3 to 0.20.4

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.4

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.4

Commits

Updates github.com/in-toto/archivista from 0.9.1 to 0.9.3

Release notes

Sourced from github.com/in-toto/archivista's releases.

v0.9.3

Changelog

v0.9.2

Changelog

Commits
  • 36d6e6d chore: bump the github-actions group with 2 updates (#558)
  • d082fb5 chore: bump github.com/vektah/gqlparser/v2 from 2.5.26 to 2.5.27 (#557)
  • 4622a01 chore: bump golang from 1.24.2-alpine to 1.24.3-alpine (#556)
  • de1993c chore: bump github.com/open-policy-agent/opa from 1.1.0 to 1.4.0 (#553)
  • b11e53f feat: add ability to pass headers when making requests to archivista (#554)
  • ee2e37e chore: bump github.com/99designs/gqlgen from 0.17.70 to 0.17.73 (#552)
  • 1187777 build: Update pre-commit hooks (#549)
  • 8733c41 Update version of witness for run action (#555)
  • be4bf1c chore: bump the github-actions group with 2 updates (#550)
  • 5a4f7c7 chore: bump github.com/in-toto/go-witness from 0.8.3 to 0.8.4 (#551)
  • Additional commits viewable in compare view

Updates github.com/in-toto/go-witness from 0.8.1 to 0.8.4

Commits
  • 714eb45 fix: use sha384 for signing proof of possession challenge from fulcio (#490)
  • 05c3487 chore: bump softprops/action-gh-release from 2.2.1 to 2.2.2 (#484)
  • 147c000 chore: bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9 (#483)
  • cdbdc9f chore: bump golang.org/x/net from 0.37.0 to 0.38.0 in the go_modules group (#...
  • 55f7c61 feat: add secretscan attestor to detect secrets in products (#463)
  • 9e8ad50 feat: Implement system packages attestation for Debian and RPM backends (#421)
  • e9d3eea chore: bump github/codeql-action from 3.28.14 to 3.28.15 (#479)
  • e1c3b0f chore: bump golangci/golangci-lint-action from 6.5.0 to 7.0.0 (#451)
  • f7617db chore: bump github.com/aws/aws-sdk-go-v2/config from 1.29.13 to 1.29.14 (#478)
  • 511b0bc chore: bump k8s.io/client-go from 0.28.3 to 0.28.15 (#466)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.9.1 to 1.9.4

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/aws's releases.

v1.9.4

What's Changed

Full Changelog: sigstore/sigstore@v1.9.3...v1.9.4

v1.9.3

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.2...v1.9.3

v1.9.2

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.1...v1.9.2

Commits
  • 0c2ec3a Update to use Tink v2.3.0 API (#2069)
  • 8f79f87 Add a Name field to the TargetFile struct (#2068)
  • 0923918 Update signing algorithm policy (#2066)
  • d49b18c build(deps): Bump cloud.google.com/go/kms (#2067)
  • 844f42d build(deps): Bump golang.org/x/net in /pkg/signature/kms/hashivault (#2064)
  • 2f15489 build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2057)
  • 6e3c093 build(deps): Bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 (#2052)
  • 20f1b38 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.3.0 to 2.4.0 (#2053)
  • ca90b6d build(deps): Bump github.com/coreos/go-oidc/v3 from 3.13.0 to 3.14.1 (#2055)
  • fcf4f5d build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#2059)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.9.1 to 1.9.4

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/azure's releases.

v1.9.4

What's Changed

Full Changelog: sigstore/sigstore@v1.9.3...v1.9.4

v1.9.3

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.2...v1.9.3

v1.9.2

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.1...v1.9.2

Commits
  • 0c2ec3a Update to use Tink v2.3.0 API (#2069)
  • 8f79f87 Add a Name field to the TargetFile struct (#2068)
  • 0923918 Update signing algorithm policy (#2066)
  • d49b18c build(deps): Bump cloud.google.com/go/kms (#2067)
  • 844f42d build(deps): Bump golang.org/x/net in /pkg/signature/kms/hashivault (#2064)
  • 2f15489 build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2057)
  • 6e3c093 build(deps): Bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 (#2052)
  • 20f1b38 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.3.0 to 2.4.0 (#2053)
  • ca90b6d build(deps): Bump github.com/coreos/go-oidc/v3 from 3.13.0 to 3.14.1 (#2055)
  • fcf4f5d build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#2059)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.9.1 to 1.9.4

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/gcp's releases.

v1.9.4

What's Changed

Full Changelog: sigstore/sigstore@v1.9.3...v1.9.4

v1.9.3

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.2...v1.9.3

v1.9.2

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.1...v1.9.2

Commits
  • 0c2ec3a Update to use Tink v2.3.0 API (#2069)
  • 8f79f87 Add a Name field to the TargetFile struct (#2068)
  • 0923918 Update signing algorithm policy (#2066)
  • d49b18c build(deps): Bump cloud.google.com/go/kms (#2067)
  • 844f42d build(deps): Bump golang.org/x/net in /pkg/signature/kms/hashivault (#2064)
  • 2f15489 build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2057)
  • 6e3c093 build(deps): Bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 (#2052)
  • 20f1b38 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.3.0 to 2.4.0 (#2053)
  • ca90b6d build(deps): Bump github.com/coreos/go-oidc/v3 from 3.13.0 to 3.14.1 (#2055)
  • fcf4f5d build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#2059)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.9.1 to 1.9.4

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/hashivault's releases.

v1.9.4

What's Changed

Full Changelog: sigstore/sigstore@v1.9.3...v1.9.4

v1.9.3

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.2...v1.9.3

v1.9.2

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.9.1...v1.9.2

Commits
  • 0c2ec3a Update to use Tink v2.3.0 API (#2069)
  • 8f79f87 Add a Name field to the TargetFile struct (#2068)
  • 0923918 Update signing algorithm policy (#2066)
  • d49b18c build(deps): Bump cloud.google.com/go/kms (#2067)
  • 844f42d build(deps): Bump golang.org/x/net in /pkg/signature/kms/hashivault (#2064)
  • 2f15489 build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2057)
  • 6e3c093 build(deps): Bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 (#2052)
  • 20f1b38 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.3.0 to 2.4.0 (#2053)
  • ca90b6d build(deps): Bump github.com/coreos/go-oidc/v3 from 3.13.0 to 3.14.1 (#2055)
  • fcf4f5d build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#2059)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.37.0 to 0.38.0

Commits
  • aae6e61 go.mod: update golang.org/x dependencies
  • 9c1aa6a ssh/test: reset the random source before capturing a recording
  • 8819902 ssh/test: enable Diffie-Hellman key exchange algorithms
  • 3f311e4 acme: return error from pre-authorization when unsupported
  • 1f7c62c ssh/test: skip unsupported tests on js/wasm
  • a5f8048 acme/autocert: use standard functions to pick the cache directory
  • 958cde8 Revert "chacha20: add loong64 SIMD implementation"
  • 51f005c Revert "salsa20: add loong64 SIMD implementation"
  • 7c35866 Revert "argon2: add loong64 SIMD implementation"
  • 0091fc8 Revert "blake2s: add loong64 SIMD implementation"
  • Additional commits viewable in compare view

Updates golang.org/x/exp from 0.0.0-20250210185358-939b2ce775ac to 0.0.0-20250218142911-aa4b98e5adaa

Commits

Updates google.golang.org/grpc from 1.71.1 to 1.72.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.72.0

Dependencies

  • Minimum supported Go version is now 1.23 (#8108)

API Changes

  • resolver: add experimental AddressMapV2 with generics to ultimately replace AddressMap. Deprecate AddressMap for deletion (#8187)
  • resolver: convert EndpointMap in place to use generics (#8189)

New Features

  • xds: add grpc.xds_client.server_failure counter metric on xDS client to record connectivity errors (#8203)
  • balancer/rls: allow maxAge to exceed 5 minutes if staleAge is set in the LB policy configuration (#8137)
  • ringhash: implement gRFC A76 improvements. (#8159)
  • pickfirst: The new pick first LB policy is made the default. The new LB policy implements the Happy Eyeballs algorithm. To disable the new policy set the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST to false (case insensitive).

Bug Fixes

  • xds: fix support for circuit breakers and load reporting in LOGICAL_DNS clusters (#8169, #8170)
  • xds/cds: improve RPC error messages when resources are not found (#8122)
  • balancer/priority: fix race that could leak balancers and goroutines during shutdown (#8095)
  • stats/opentelemetry: fix trace attributes message sequence numbers to start from 0 (#8237)
  • balancer/pickfirstleaf: fix panic if deprecated Address.Metadata field is set to a non-comparable value by ignoring the field (#8227)

Behavior Changes

  • transport: make servers send an HTTP/2 RST_STREAM frame to cancel a stream when the deadline expires (#8071)

Documentation

  • stats: clarify the expected sequence of events on a stats handler (#7885)

Release 1.71.2

Bug Fixes

  • client: HTTP Proxy connections are no longer attempted for addresses with non-TCP network types. (#8215)
Commits
  • a43eba6 Change version to 1.72.0 (#8218)
  • 48f48c1 balancer/pickfirstleaf: Avoid reading Address.Metadata (#8227) (#8259)
  • fd6f585 Cherry-pick #8159 and #8243 to v1.72.x (#8255)
  • 79ca174 stats/opentelemetry: fix trace attributes message sequence numbers to start f...
  • 57a2605 xdsclient: fix TestServerFailureMetrics_BeforeResponseRecv test to wait for w...
  • 5edab9e xdsclient: add grpc.xds_client.server_failure counter mertric (#8203)
  • 78ba661 regenerate protos (#8208)
  • 6819ed7 delegatingresolver: Stop calls into delegates once the parent resolver is clo...
  • a51009d resolver: convert EndpointMap to use generics (#8189)
  • b0d1203 resolver: create AddressMapV2 with generics to replace AddressMap (#8187)
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.32.2 to 0.33.1

Commits
  • 04f698e Update dependencies to v0.33.1 tag
  • 16cedc7 Merge pull request #131088 from atiratree/rename-terminating-replicas-fg
  • dc88679 Merge pull request #131103 from ahrtr/etcd_sdk_20250328
  • 4a456a2 bump etcd 3.5.21 sdk
  • 96e38c9 rename DeploymentPodReplacementPolicy FG to DeploymentReplicaSetTerminatingRe...
  • c21a017 Merge pull request #129970 from mortent/AddResourceV1beta2API
  • d0673db Run make update
  • 118546d Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...
  • f9401a3 Merge pull request #130797 from jm-franc/configurable-tolerance
  • 9b3e544 Generated UPDATE_COMPATIBILITY_FIXTURE_DATA
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.32.4 to 0.33.1

Commits
  • 173776a Merge pull request #131708tigrato/automated-cherry-pick-of-#131702
  • a3d1fde fix: fixes a possible panic in NewYAMLToJSONDecoder
  • 955939f bump etcd 3.5.21 sdk
  • e8a77bd Merge pull request #130910 from googs1025/fix/datarace
  • 7e8c77e Merge pull request #130906 from serathius/streaming-validation
  • 27fd396 flake: fix data race for func TestBackoff_Step
  • 8bcc6f1 Update kube-openapi and integrate streaming tags validation
  • 6ce776c Merge pull request #130857 from thockin/kk_small_vg_diffs
  • f2c94d6 Comment on origin and JSON schema
  • b63ba07 Use origin in validateFalse's own test
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.32.2 to 0.33.1

Commits
  • e7397e5 Update dependencies to v0.33.1 tag
  • ecbbb06 bump etcd 3.5.21 sdk
  • 2086688 Merge pull request #129970 from mortent/AddResourceV1beta2API
  • dba34c7 Run make update
  • e359642 Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...
  • 3bf0a05 Merge pull request #130797 from jm-franc/configurable-tolerance
  • 7a03a3b Generated files
  • 1676beb Refresh autogenerated files following the configurable tolerance updates.
  • 387edb8 Merge pull request #130967 from aojea/listers
  • 21dc3b4 benchmark to show inefficient linear search lookup
  • Additional commits viewable in compare view

Updates k8s.io/code-generator from 0.32.2 to 0.33.1

Commits
  • 2fa273f Update dependencies to v0.33.1 tag
  • ed11973 bump etcd 3.5.21 sdk
  • cf96b45 Merge pull request #130906 from serathius/streaming-validation
  • 5177d2e Update kube-openapi and integrate streaming tags validation
  • c65ee9f Merge pull request #130857 from thockin/kk_small_vg_diffs
  • 17f8907 Fix pkg names != dir in tests
  • 17556f0 Fix import groupings
  • 036eb3b Fix whitespace in validateFalse test fixture
  • f922e9c Merge pull request #130827 from thockin/kk_refactor_FunctionGen
  • f758526 Merge pull request #130795 from thockin/kk_emit_comments_before_validations
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
k8s.io/apimachinery [>= 0.23.a, < 0.24]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all group across 1 directory with 16 updates
3515e61 
Bumps the all group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/compute/metadata](https://github.com/googleapis/google-cloud-go) | `0.6.0` | `0.7.0` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.52.0` | `1.54.0` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.3` | `0.20.4` |
| [github.com/in-toto/archivista](https://github.com/in-toto/archivista) | `0.9.1` | `0.9.3` |
| [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) | `1.9.1` | `1.9.4` |
| [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore) | `1.9.1` | `1.9.4` |
| [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore) | `1.9.1` | `1.9.4` |
| [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore) | `1.9.1` | `1.9.4` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.32.2` | `0.33.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.32.2` | `0.33.1` |
| [k8s.io/code-generator](https://github.com/kubernetes/code-generator) | `0.32.2` | `0.33.1` |



Updates `cloud.google.com/go/compute/metadata` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@v0.6.0...v0.7.0)

Updates `cloud.google.com/go/storage` from 1.52.0 to 1.54.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.52.0...spanner/v1.54.0)

Updates `github.com/google/go-containerregistry` from 0.20.3 to 0.20.4
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.20.3...v0.20.4)

Updates `github.com/in-toto/archivista` from 0.9.1 to 0.9.3
- [Release notes](https://github.com/in-toto/archivista/releases)
- [Changelog](https://github.com/in-toto/archivista/blob/main/.goreleaser.yaml)
- [Commits](in-toto/archivista@v0.9.1...v0.9.3)

Updates `github.com/in-toto/go-witness` from 0.8.1 to 0.8.4
- [Release notes](https://github.com/in-toto/go-witness/releases)
- [Changelog](https://github.com/in-toto/go-witness/blob/main/.goreleaser.yaml)
- [Commits](in-toto/go-witness@v0.8.1...v0.8.4)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.9.1 to 1.9.4
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.9.1...v1.9.4)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.9.1 to 1.9.4
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.9.1...v1.9.4)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.9.1 to 1.9.4
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.9.1...v1.9.4)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.9.1 to 1.9.4
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.9.1...v1.9.4)

Updates `golang.org/x/crypto` from 0.37.0 to 0.38.0
- [Commits](golang/crypto@v0.37.0...v0.38.0)

Updates `golang.org/x/exp` from 0.0.0-20250210185358-939b2ce775ac to 0.0.0-20250218142911-aa4b98e5adaa
- [Commits](https://github.com/golang/exp/commits)

Updates `google.golang.org/grpc` from 1.71.1 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.71.1...v1.72.0)

Updates `k8s.io/api` from 0.32.2 to 0.33.1
- [Commits](kubernetes/api@v0.32.2...v0.33.1)

Updates `k8s.io/apimachinery` from 0.32.4 to 0.33.1
- [Commits](kubernetes/apimachinery@v0.32.4...v0.33.1)

Updates `k8s.io/client-go` from 0.32.2 to 0.33.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.32.2...v0.33.1)

Updates `k8s.io/code-generator` from 0.32.2 to 0.33.1
- [Commits](kubernetes/code-generator@v0.32.2...v0.33.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/compute/metadata
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/in-toto/archivista
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/in-toto/go-witness
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: golang.org/x/crypto
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/exp
  dependency-version: 0.0.0-20250218142911-aa4b98e5adaa
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: google.golang.org/grpc
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: k8s.io/api
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: k8s.io/client-go
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: k8s.io/code-generator
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Used by dependabot - identifies all PRs created by dependabot kind/misc Categorizes issue or PR as a miscellaneuous one. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesnt merit a release note. labels May 21, 2025
@tekton-robot
Copy link

tekton-robot commented May 21, 2025

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a tektoncd member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@tekton-robot
Copy link

tekton-robot commented May 21, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign priyawadhwa after the PR has been reviewed.
You can assign the PR to them by writing /assign @priyawadhwa in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label May 21, 2025
@PuneetPunamiya PuneetPunamiya merged commit 3fcd2cb into main May 30, 2025
15 of 16 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/all-eacb8ffebc branch May 30, 2025 05:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chitrangpatel chitrangpatel Awaiting requested review from chitrangpatel

@lcarva lcarva Awaiting requested review from lcarva

Assignees

No one assigned

Labels

dependencies Used by dependabot - identifies all PRs created by dependabot kind/misc Categorizes issue or PR as a miscellaneuous one. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesnt merit a release note. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@tekton-robot @PuneetPunamiya