Bump the all group across 1 directory with 23 updates by dependabot[bot] · Pull Request #1424 · tektoncd/chains

dependabot · 2025-08-26T03:02:09Z

Bumps the all group with 15 updates in the / directory:

Package	From	To
cloud.google.com/go/compute/metadata	`0.7.0`	`0.8.0`
cloud.google.com/go/storage	`1.55.0`	`1.56.1`
github.com/google/addlicense	`1.1.1`	`1.2.0`
github.com/in-toto/archivista	`0.9.3`	`0.10.0`
github.com/secure-systems-lab/go-securesystemslib	`0.9.0`	`0.9.1`
github.com/sigstore/rekor	`1.3.10`	`1.4.0`
github.com/spiffe/go-spiffe/v2	`2.5.0`	`2.6.0`
github.com/stretchr/testify	`1.10.0`	`1.11.0`
github.com/tektoncd/pipeline	`1.0.0`	`1.3.1`
gocloud.dev	`0.41.0`	`0.43.0`
gocloud.dev/docstore/mongodocstore	`0.41.0`	`0.43.0`
gocloud.dev/pubsub/kafkapubsub	`0.41.0`	`0.43.0`
k8s.io/api	`0.33.2`	`0.33.4`
k8s.io/client-go	`0.33.2`	`0.33.4`
k8s.io/code-generator	`0.33.1`	`0.33.4`

Updates cloud.google.com/go/compute/metadata from 0.7.0 to 0.8.0

Release notes

Sourced from cloud.google.com/go/compute/metadata's releases.

apps: v0.8.0

0.8.0 (2025-07-09)

Features

apps: New client(s) (#12540) (8df9ea2)

compute/metadata: v0.8.0

0.8.0 (2025-08-06)

Features

compute/metadata: Add Options.UseDefaultClient (#12657) (1a88209), refs #11078

managedkafka: v0.8.0

0.8.0 (2025-08-14)

Features

managedkafka: New clients (#12710) (d6571b9)

Changelog

Sourced from cloud.google.com/go/compute/metadata's changelog.

v0.8.0

profiler package added.

storage:

Retry Objects.Insert call.

Add ProgressFunc to WRiter.

pubsub: breaking changes:

Publish is now asynchronous (announcement).

Subscription.Pull replaced by Subscription.Receive, which takes a callback (announcement).

Message.Done replaced with Message.Ack and Message.Nack.

Commits

e11d9d1 rpcreplay: file format and I/O
f5c3fe2 profiler: Add Cloud Profiler runtime agent for Go.
87cc1d2 rpcreplay: package doc
b4e9a38 storage: retry Objects.Insert call
9a04fc8 trace: respond with trace context to report the sampling options
e8b5f2c spanner: Increased the maximum allowed sending and recieving msg size to 100 MB
dd88571 bigtable: Fix documentation for timestamp range filters
c60d02f pubsub: clarify that Topic is goroutine-safe
69931d8 bigquery: get streaming buffer info
7d132fe bigtable: Fix GCRuleToString when GcRule is nil
Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.55.0 to 1.56.1

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.56.1

1.56.1 (2025-08-19)

Bug Fixes

storage: Fix redirect logic in MRD (#12733) (9f369f9)

storage: Pass all user options to NewService (#12615) (77cdb83)

storage: ZB Reader redirect support (#12703) (3c7ea5c)

storage: v1.56.0

1.56.0 (2025-07-24)

Features

storage/control: Update BUILD configs to support rest transportation for all client (116a33a)

Bug Fixes

storage: Avoid integration test segfaults. (#12419) (a9dec07)

storage: Current object generation takeover. (#12383) (9ca8e01)

storage: Fix MultiRangeDownloader deadlock (#12548) (2eb23bb)

storage: Remove object length limit for unfinalized reads (#12489) (5566d7d)

Performance Improvements

storage: Zero copy for MultiRangeDownloader (#12542) (a5e6a68)

Documentation

storage/internal: Fix broken link for message CustomPlacementConfig (9614487)

storage: Fix typo in storage/doc.go (#12391) (bf74408)

storage: Improve error inspection documentation (#12301) (420da1a)

Commits

286e26c chore(main): release storage 1.56.1 (#12632)
59a94d6 feat(aiplatform): add data foundry service synthetic data generation API for ...
76be65b chore(all): update deps (#12726)
9f369f9 fix(storage): fix redirect logic in MRD (#12733)
e876d62 chore: release main (#12723)
f1de706 feat(compute): Update Compute Engine v1beta API to revision 20250729 (#1084) ...
1bc6c98 feat(geminidataanalytics): new client (#12729)
3c7ea5c fix(storage): ZB Reader redirect support (#12703)
2346cf1 fix(bigtable): Ignore errors while creating monitoring client and disable met...
67b0320 feat(bigquery): load job and external table opts for custom time format, null...
Additional commits viewable in compare view

Updates github.com/google/addlicense from 1.1.1 to 1.2.0

Release notes

Sourced from github.com/google/addlicense's releases.

v1.2.0

This is the first full release after a period of dormancy for the project. Support for several file types has been added, plus some internal cleanup.

What's Changed

fix(readme): Update the docs to show current year by @xorima in google/addlicense#140

Add support for TOML configuration files by @kupiakos in google/addlicense#144

Support *.BUILD files by @pmeric in google/addlicense#145

Adding support for the j2 format. by @sjswerdlow in google/addlicense#146

feature: add pre-commit support by @Thomy90 in google/addlicense#138

style: Each language in a case on its own line by @flwyd in google/addlicense#174

Add Powershell Support [ps1, psm1] by @JackStuart in google/addlicense#165

feat: add support for .htm files by @CalebAlbers in google/addlicense#121

Fix test: expected copyright year must be 2018 by @flwyd in google/addlicense#178

Upgrade GitHub workflows by @flwyd in google/addlicense#180

Fix ignore on Windows by @06393993 in google/addlicense#157

Add support for BUILD.bazel files by @pmeric in google/addlicense#151

Add support for Rackup (.ru) config files by @CalebAlbers in google/addlicense#120

Add .bash and .zsh extensions by @CalebAlbers in google/addlicense#122

Add support for nix scripts by @06393993 in google/addlicense#156

Reformat TestLicenseHeader to one filetype per line by @flwyd in google/addlicense#181

Add AWK, Elixir, Julia, Lua, Raku, Scheme, & Vim by @flwyd in google/addlicense#182

Add .graphql support by @SleepySquash in google/addlicense#111

Add .less support by @gnugomez in google/addlicense#184

Wrap the MIT License template to ensure the generated license fits into 80 characters by @XuehaiPan in google/addlicense#185

feat(buck): add support for buck2 files (#188) by @yesudeep in google/addlicense#187

Cython files Support by @Spill-Tea in google/addlicense#192

Goreleaser config update by @Spill-Tea in google/addlicense#193

Adding support for the gradle file extension by @tfroseman in google/addlicense#194

New Contributors

@xorima made their first contribution in google/addlicense#140

@kupiakos made their first contribution in google/addlicense#144

@pmeric made their first contribution in google/addlicense#145

@sjswerdlow made their first contribution in google/addlicense#146

@Thomy90 made their first contribution in google/addlicense#138

@JackStuart made their first contribution in google/addlicense#165

@CalebAlbers made their first contribution in google/addlicense#121

@06393993 made their first contribution in google/addlicense#157

@SleepySquash made their first contribution in google/addlicense#111

@gnugomez made their first contribution in google/addlicense#184

@yesudeep made their first contribution in google/addlicense#187

@Spill-Tea made their first contribution in google/addlicense#192

@tfroseman made their first contribution in google/addlicense#194

Full Changelog: google/addlicense@v1.1.1...v1.2.0

v1.2.0-rc0

This is the first release candidate after a period of dormancy for the project. Please test this release, particularly in automated workflows. If no issues are discovered, we plan to create a 1.2.0 release in the next couple weeks.

What's Changed

... (truncated)

Commits

b289835 Merge pull request #194 from tfroseman/gradle_support
825d788 used incorrect autoformat settings that failed to pass golangci-lint
b81d68d Adding support for the gradle file extension
30db631 Goreleaser config update (#193)
3d89fa3 feat(cython): Support cython files. Include test data. (#192)
0175042 feat(buck): add support for buck2 files (#188) (#187)
1a754c1 Wrap the MIT License template to a width of 77 to ensure the generated licens...
cc56a2c Add .less support (#184)
499ed7f Add .graphql support (#111)
e80cdac Add AWK, Elixir, Julia, Lua, Raku, Scheme, & Vim (#182)
Additional commits viewable in compare view

Updates github.com/in-toto/archivista from 0.9.3 to 0.10.0

Release notes

Sourced from github.com/in-toto/archivista's releases.

v0.10.0

Changelog

What's Changed

chore: bump github.com/in-toto/go-witness from 0.8.4 to 0.8.6 by @dependabot[bot] in in-toto/archivista#562

feat: dsse and subject resolvers use new order by fields by @kriscoleman in in-toto/archivista#604

New Contributors

@kriscoleman made their first contribution in in-toto/archivista#604

Full Changelog: in-toto/archivista@v0.9.3...v0.10.0

Commits

b8fdaaa feat(archivista): dsse and subject resolvers use new order by fields (#604)
7f4f5fd chore: bump the github-actions group with 2 updates (#606)
840cb2a build: Update pre-commit hooks (#605)
a16236a chore: bump golang from 1.24.5-alpine to 1.24.6-alpine (#603)
d5419a0 chore: bump entgo.io/ent from 0.14.4 to 0.14.5 (#601)
3381f67 chore: bump entgo.io/contrib from 0.6.0 to 0.7.0 (#602)
291914c chore: bump github.com/swaggo/swag from 1.16.5 to 1.16.6 (#600)
9f2f17b chore: bump the github-actions group with 2 updates (#599)
6741785 build: Update pre-commit hooks (#598)
95db938 chore: bump github.com/99designs/gqlgen from 0.17.76 to 0.17.78 (#597)
Additional commits viewable in compare view

Updates github.com/in-toto/go-witness from 0.8.4 to 0.8.6

Commits

0c8bb30 fix: update gitleaks and fix config usage (#499)
bd01443 feat: add ability to pass headers to archivista client (#498)
e0990ed chore: bump github.com/open-policy-agent/opa from 1.4.0 to 1.4.2 (#495)
d6d6d68 chore: bump actions/setup-go from 5.4.0 to 5.5.0 (#496)
15ff04a chore: bump actions/dependency-review-action from 4.6.0 to 4.7.0 (#497)
a0ece0d chore: bump github.com/open-policy-agent/opa from 1.1.0 to 1.4.0 in the go_mo...
a799b23 chore: bump github/codeql-action from 3.28.16 to 3.28.17 (#492)
cc3c452 chore: bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 (#491)
fe21e80 chore: bump github.com/aws/aws-sdk-go from 1.55.6 to 1.55.7 (#489)
3e1d242 Update release workflow triggers for efficeincy and witness version (#494)
Additional commits viewable in compare view

Updates github.com/secure-systems-lab/go-securesystemslib from 0.9.0 to 0.9.1

Commits

a1a33cd Merge pull request #120 from secure-systems-lab/dependabot/github_actions/dom...
4f201c1 Merge pull request #122 from rosstimothy/tross/remove_testing
5d1cc26 Move hexDecode test helper into a test file
ebae973 Merge pull request #121 from secure-systems-lab/dependabot/go_modules/golang....
551dff1 chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0
50ac487 chore(deps): bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
9d9f015 Merge pull request #117 from secure-systems-lab/dependabot/go_modules/golang....
9aa50ea chore(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0
3e526e2 Merge pull request #115 from secure-systems-lab/dependabot/go_modules/golang....
a1093e6 Merge pull request #116 from secure-systems-lab/dependabot/github_actions/act...
Additional commits viewable in compare view

Updates github.com/sigstore/rekor from 1.3.10 to 1.4.0

Release notes

Sourced from github.com/sigstore/rekor's releases.

v1.4.0

Changelog

d7d31f0250d4b98ce0be3837fef9510b59e57cb7 changelog for v1.4.0 release (#2550)

455d37ba5e51e18dda1ce9a2a87192af64a4663d enable retries and timeouts on GCP KMS calls (#2548)

bfc05e00d6bf22e8feea027d924fc69ff5164820 allow configuring gRPC default service config for trillian client load balancing & timeouts (#2549)

6b4e26047637f8f1c4a35d9b4555d800ca486742 remove stable checkpoint feature (#2537)

5d5f29982b41b094b05f125c4febe87a7de1b94c build(deps): Bump sigs.k8s.io/release-utils from 0.11.1 to 0.12.0

9a34ce9a8514a326e52c0f5bc13826bd698215a3 build(deps): Bump golang.org/x/net from 0.41.0 to 0.42.0 (#2544)

7d62779748126b6539a3d5bf7c8a695109070287 build(deps): Bump the all group with 3 updates (#2545)

e2f2f076074164852f4dc09e6ec6320176a0da62 fix lints

82d72158ca3d72556d03eb1e27a8df4fa450cb50 bump golangci-lint to v2.2.x

47a75e6134470b1657c84f722efc7514acf27526 use go1.24.5 to build rekor

7fec2dbcf68b95dcf1590065b7fb5ca119883853 build(deps): Bump google.golang.org/api from 0.238.0 to 0.242.0 (#2543)

d5c8e57db2150aa645b463149ac9a96a04b41866 build(deps): Bump golang.org/x/sync from 0.15.0 to 0.16.0 (#2541)

a7a03565421b532e19dcb635e6203313a34c5ab6 build(deps): Bump github.com/spf13/pflag in the all group (#2542)

802db4d87b871fd2163ed92d3e4ce9c7fc08a065 build(deps): Bump github.com/sigstore/protobuf-specs from 0.4.3 to 0.5.0

d920fad17c98aff21d98036db6a4820542f7d18d move context handling in trillian RPC calls to be request based and idiomatic (#2536)

4b09ef5b15074a73ce4fad7efd2f74a3463bfb9f build(deps): Bump github.com/go-viper/mapstructure/v2 (#2522)

959ea43513a968c20964c79071e8c11a37f87b8b build(deps): Bump golang from 1.24.4 to 1.24.5 in the all group (#2534)

8931ff31a78fcd419fe5b2666058f18f3558989e build(deps): Bump the all group with 2 updates (#2518)

df0a4ce2c81484ae32b1cd90a2d48f7160a94e88 build(deps): Bump the all group with 2 updates (#2524)

2fab95aeb7c731531bcf6d59435d2e7246e2a086 build(deps): Bump sigstore/scaffolding/trillian_log_server (#2527)

4221cb87b2ddb28c7ccb0607956d763c4154dd63 build(deps): Bump sigstore/scaffolding/trillian_log_signer (#2526)

6c27e6870e162e3cd1446950662e349ddf556421 build(deps): Bump github.com/go-viper/mapstructure/v2 in /hack/tools (#2523)

3f8d1e636fbf7fe636a6532715f07319bcf94d90 backoff pubsub emulator to last-known good (#2535)

422e8ec73cfdfee1bdbce2798413470876a2eae8 build(deps): Bump golang from db5d0af to 10c1318

c0f3b8c639cb52bb2fa760465ad7d49e2ff19570 build(deps): Bump sigstore/cosign-installer in the all group

795d4c7c118398ac40e717e4c7d22b750e780f02 build(deps): Bump google.com/cloudsdktool/google-cloud-cli

3ef026fdf72370a3941680009d0c23d1033cc222 build(deps): Bump google.golang.org/api from 0.237.0 to 0.238.0

18a6ae453af5a7baef13672ef81f003774bcbe7b build(deps): Bump go.step.sm/crypto from 0.66.0 to 0.67.0

1ef8b666115e6f93f80c74ce2b4cae67a529d1fc build(deps): Bump github/codeql-action in the all group

2e5d89fff33cfb9788ca15d33c35b5c6d05858de build(deps): Bump google.golang.org/api from 0.236.0 to 0.237.0

fa8712143722430cac8df0a7a8213d410b5e314a build(deps): Bump the all group with 7 updates

20979b6ecf086f693de2739cc4a3e3b99c8644f3 Update GoReleaser configurations (#2511)

8d71b4957b9fce2341a1bbd00fe5bfd47d7e5b2e update builder to use go1.24.4

03a287435c7a540a1058f7cb24f1492619448723 build(deps): Bump google.golang.org/grpc from 1.72.2 to 1.73.0

b0db66ffe217499a56ecc9d9ee0d08d0d469517a build(deps): Bump golang.org/x/net from 0.40.0 to 0.41.0

7dcea62add3d73a9b889e1f3e01d8f715dae9b0e build(deps): Bump github.com/redis/go-redis/v9 from 9.9.0 to 9.10.0

ea15859fb04fea5b6cff5e35dccf91d42b634fe4 build(deps): Bump google.golang.org/api from 0.235.0 to 0.236.0

47939200c1d10f0f2ad2d98fdca929d9e78c0281 build(deps): Bump golang from 1.24.3 to 1.24.4 in the all group

0613f7fa4371512abc12a80fe13c5341b0c3f8ac build(deps): Bump github.com/go-swagger/go-swagger

bce34fc5e7e464ce484d29dc71e97aa299f77ae8 build(deps): Bump github/codeql-action in the all group

946bdf5f3cd6c54801eb50fc7a42383d9f7be8f4 build(deps): Bump google.com/cloudsdktool/google-cloud-cli

5c131cf1b8ce1b7fec8241e83c66d2403833446c build(deps): Bump github.com/google/rpmpack from 0.6.0 to 0.7.0

4f4dbc7bf7a87278541286606693ca7acc48e5c2 build(deps): Bump github.com/redis/go-redis/v9 from 9.8.0 to 9.9.0

4a3e683abfa64f5ddb5023894aaa4d3a8fe15337 build(deps): Bump google.com/cloudsdktool/google-cloud-cli

6a0305e857d7954fa697de86b01c48b41e78c785 build(deps): Bump go.step.sm/crypto from 0.64.0 to 0.66.0

cad3eb60ec25977e407d2b39cdd98e6234c53995 build(deps): Bump google.golang.org/api from 0.234.0 to 0.235.0

5097431e7b2c27acc0b686939d065c85acd23414 build(deps): Bump golang from 4c0a181 to 81bf592

1a4c8e53fc6739286421d33a0c8e72dcc17c86ea build(deps): Bump google.golang.org/api from 0.233.0 to 0.234.0

... (truncated)

Changelog

Sourced from github.com/sigstore/rekor's changelog.

v1.4.0

This is a minor version release given the removal of the stable checkpoint feature. To our knowledge, this was not used effectively anywhere and therefore was removed from Rekor v1. Witnessing will be added as part of the upcoming Rekor v2 release.

Features

enable retries and timeouts on GCP KMS calls (#2548)

allow configuring gRPC default service config for trillian client load balancing & timeouts (#2549)

move context handling in trillian RPC calls to be request based and idiomatic (#2536)

Fixes

Fix docker compose up --wait failing when Trillian server isn't healthy (#2473)

better mysql healthcheck (#2459)

numerous upgraded dependencies, including moving to go 1.24

Removed

remove stable checkpoint feature (#2537)

Don't initialize index storage with stable checkpoint publishing (#2486)

Contributors

Bob Callaway

Carlos Tadeu Panato Junior

Emmanuel Ferdman

Hayden B

Ramon Petgrave

Commits

d7d31f0 changelog for v1.4.0 release (#2550)
455d37b enable retries and timeouts on GCP KMS calls (#2548)
bfc05e0 allow configuring gRPC default service config for trillian client load balanc...
6b4e260 remove stable checkpoint feature (#2537)
5d5f299 build(deps): Bump sigs.k8s.io/release-utils from 0.11.1 to 0.12.0
9a34ce9 build(deps): Bump golang.org/x/net from 0.41.0 to 0.42.0 (#2544)
7d62779 build(deps): Bump the all group with 3 updates (#2545)
e2f2f07 fix lints
82d7215 bump golangci-lint to v2.2.x
47a75e6 use go1.24.5 to build rekor
Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.9.5 to 1.9.6-0.20250729224751-181c5d3339b3

Commits

See full diff in compare view

Updates github.com/spiffe/go-spiffe/v2 from 2.5.0 to 2.6.0

Release notes

Sourced from github.com/spiffe/go-spiffe/v2's releases.

v2.6.0

Changed

Minimum Go version is now go1.24.0, following our support policy.

Other dependency updates.

Changelog

Sourced from github.com/spiffe/go-spiffe/v2's changelog.

[2.6.0] - 2025-08-21

Changed

Minimum Go version is now go1.24.0, following our support policy.

Other dependency updates.

Commits

c6d0af3 v2.6.0 changelog (#353)
57dee70 Bump google.golang.org/grpc from 1.73.0 to 1.74.2 (#348)
d49b642 Bump supported Go version and add policy (#352)
f8be7ff Bump google.golang.org/protobuf from 1.36.6 to 1.36.7 (#350)
237e1a9 Bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.2 (#349)
7cfd523 Bump actions/checkout from 4 to 5 (#351)
84a48c0 Bump google.golang.org/grpc from 1.72.0 to 1.73.0 (#345)
42bdd19 Bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.1 (#347)
20a1a11 Fix invalid examples link in README.md (#342)
14db48a Bump google.golang.org/grpc from 1.71.1 to 1.72.0 (#340)
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in stretchr/testify#1614

Lazily render mock diff output on successful match by @mikeauclair in stretchr/testify#1615

assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in stretchr/testify#1427

assert: add IsNotType by @bartventer in stretchr/testify#1730

assert.JSONEq: shortcut if same strings by @dolmen in stretchr/testify#1754

assert.YAMLEq: shortcut if same strings by @dolmen in stretchr/testify#1755

assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in stretchr/testify#1761

suite: faster methods filtering (internal refactor) by @dolmen in stretchr/testify#1758

Fixes

assert.ErrorAs: log target type by @craig65535 in stretchr/testify#1345

Fix failure message formatting for Positive and Negative asserts in stretchr/testify#1062

Improve ErrorIs message when error is nil but an error was expected by @tsioftas in stretchr/testify#1681

fix Subset/NotSubset when calling with mixed input types by @siliconbrain in stretchr/testify#1729

Improve ErrorAs failure message when error is nil by @ccoVeille in stretchr/testify#1734

mock.AssertNumberOfCalls: improve error msg by @3scalation in stretchr/testify#1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in stretchr/testify#1688

Replace deprecated io/ioutil with io and os by @alexandear in stretchr/testify#1684

Document consequences of calling t.FailNow() by @greg0ire in stretchr/testify#1710

chore: update docs for Unset #1621 by @techfg in stretchr/testify#1709

README: apply gofmt to examples by @alexandear in stretchr/testify#1687

refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in stretchr/testify#1674

Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in stretchr/testify#1716

Update documentation for the Error function in assert or require package by @architagr in stretchr/testify#1675

assert: remove deprecated build constraints by @alexandear in stretchr/testify#1671

assert: apply gofumpt to internal test suite by @ccoVeille in stretchr/testify#1739

CI: fix shebang in .ci.*.sh scripts by @dolmen in stretchr/testify#1746

assert,require: enable parallel testing on (almost) all top tests by @dolmen in stretchr/testify#1747

suite.Passed: add one more status test report by @Ararsa-Derese in stretchr/testify#1706

Add Helper() method in internal mocks and assert.CollectT by @dolmen in stretchr/testify#1423

assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in stretchr/testify#1742

mock: enable parallel testing on internal testsuite by @dolmen in stretchr/testify#1756

suite: cleanup use of 'testing' internals at runtime by @dolmen in stretchr/testify#1751

assert: check test failure message for Empty and NotEmpty by @ccoVeille in stretchr/testify#1745

deps: fix dependency cycle with objx (again) by @dolmen in stretchr/testify#1567

assert.Empty: comprehensive doc of "Empty"-ness rules by @dolmen in stretchr/testify#1753

doc: improve godoc of top level 'testify' package by @dolmen in stretchr/testify#1760

assert.ErrorAs: simplify retrieving the type name by @ccoVeille in stretchr/testify#1740

assert.EqualValues: improve test coverage to 100% by @dolmen in stretchr/testify#1763

suite.Run: simplify running of Setup/TeardownSuite by @renzoarreaza in stretchr/testify#1769

assert.CallerInfo: micro optimization by using LastIndexByte by @dolmen in stretchr/testify#1767

assert.CallerInfo: micro cleanup by @dolmen in stretchr/testify#1768

assert: refactor TestFileExists and TestDirExists tests to enable parallel testing by @dolmen in stretchr/testify#1766

... (truncated)

Commits

b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
69831f3 build(deps): bump actions/checkout from 4 to 5
a53be35 Improve captureTestingT helper
aafb604 mock: improve formatting of error message
7218e03 improve error msg
929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
bc7459e suite: faster filtering of methods (-testify.m)
7d37b5c suite: refactor methodFilter
c58bc90 Merge pull request #1764 from stretchr/dolmen/suite-refactor-stats-for-readab...
87101a6 suite.Run: refactor handling of stats
Additional commits viewable in compare view

Updates github.com/tektoncd/pipeline from 1.0.0 to 1.3.1

Release notes

Sourced from github.com/tektoncd/pipeline's releases.

Tekton Pipeline release v1.3.1 LTS "Maine Coon Melfina"

-Docs @ v1.3.1 -Examples @ v1.3.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v1.3.1/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a77b37b5b643558bf2653e7f5a4673c506372b8892e9c8634dc7cae29721d15de

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a77b37b5b643558bf2653e7f5a4673c506372b8892e9c8634dc7cae29721d15de
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v1.3.1/release.yaml
REKOR_UUID=108e9186e8c5677a77b37b5b643558bf2653e7f5a4673c506372b8892e9c8634dc7cae29721d15de
Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.3.1@sha256:" + .digest.sha256')
Download the release file
curl "$RELEASE_FILE" > release.yaml
For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

... (truncated)

Changelog

Sourced from github.com/tektoncd/pipeline's changelog.

Tekton Pipeline Releases

Release Frequency

Tekton Pipelines follows the Tekton community [release policy][release-policy] as follows:

Versions are numbered according to semantic versioning: vX.Y.Z

A new release is produced on a monthly basis

Four releases a year are chosen for long term support (LTS). All remaining releases are supported for approximately 1 month (until the next release is produced)

LTS releases take place in January, April, July and October every year

The first Tekton Pipelines LTS release will be v0.41.0 in October 2022

Releases happen towards the middle of the month, between the 13th and the 20th, depending on week-ends and readiness

Tekton Pipelines produces nightly builds, publicly available on gcr.io/tekton-nightly.

Transition Process

Before release v0.41 Tekton Pipelines has worked on the basis of an undocumented support period of four months, which will be maintained for the releases between v0.37 and v0.40.

Release Process

Tekton Pipeline releases are made of YAML manifests and container images. Manifests are published to cloud object-storage as well as [GitHub][tekton-pipeline-releases]. Container images are signed by [Sigstore][sigstore] via [Tekton Chains][tekton-chains]; signatures can be verified through the [public key][chains-public-key] hosted by the Tekton Chains project.

Further documentation available:

The Tekton Pipeline [release process][tekton-releases-docs]

[Installing Tekton][tekton-installation]

Standard for [release notes][release-notes-standards]

Release

v1.3 (LTS)

Latest Release: [v1.3.1][v1.3-1] (2025-08-05) ([docs][v1.3-1-docs], [examples][v1.3-1-examples])

Initial Release: [v1.3.0][v1.3-0] (2025-08-04)

End of Life: 2026-08-04

Patch Releases: [v1.3.01][v1.3-0] [v1.3.1][v1.3-1]

v1.0 (LTS)

... (truncated)

CommitsDescription has been truncated

Bumps the all group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/compute/metadata](https://github.com/googleapis/google-cloud-go) | `0.7.0` | `0.8.0` | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.55.0` | `1.56.1` | | [github.com/google/addlicense](https://github.com/google/addlicense) | `1.1.1` | `1.2.0` | | [github.com/in-toto/archivista](https://github.com/in-toto/archivista) | `0.9.3` | `0.10.0` | | [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) | `0.9.0` | `0.9.1` | | [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.3.10` | `1.4.0` | | [github.com/spiffe/go-spiffe/v2](https://github.com/spiffe/go-spiffe) | `2.5.0` | `2.6.0` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.0` | | [github.com/tektoncd/pipeline](https://github.com/tektoncd/pipeline) | `1.0.0` | `1.3.1` | | [gocloud.dev](https://github.com/google/go-cloud) | `0.41.0` | `0.43.0` | | [gocloud.dev/docstore/mongodocstore](https://github.com/google/go-cloud) | `0.41.0` | `0.43.0` | | [gocloud.dev/pubsub/kafkapubsub](https://github.com/google/go-cloud) | `0.41.0` | `0.43.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.33.2` | `0.33.4` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.33.2` | `0.33.4` | | [k8s.io/code-generator](https://github.com/kubernetes/code-generator) | `0.33.1` | `0.33.4` | Updates `cloud.google.com/go/compute/metadata` from 0.7.0 to 0.8.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@v0.7.0...v0.8.0) Updates `cloud.google.com/go/storage` from 1.55.0 to 1.56.1 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@spanner/v1.55.0...storage/v1.56.1) Updates `github.com/google/addlicense` from 1.1.1 to 1.2.0 - [Release notes](https://github.com/google/addlicense/releases) - [Changelog](https://github.com/google/addlicense/blob/master/.goreleaser.yaml) - [Commits](google/addlicense@v1.1.1...v1.2.0) Updates `github.com/in-toto/archivista` from 0.9.3 to 0.10.0 - [Release notes](https://github.com/in-toto/archivista/releases) - [Changelog](https://github.com/in-toto/archivista/blob/main/.goreleaser.yaml) - [Commits](in-toto/archivista@v0.9.3...v0.10.0) Updates `github.com/in-toto/go-witness` from 0.8.4 to 0.8.6 - [Release notes](https://github.com/in-toto/go-witness/releases) - [Changelog](https://github.com/in-toto/go-witness/blob/main/.goreleaser.yaml) - [Commits](in-toto/go-witness@v0.8.4...v0.8.6) Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.9.0 to 0.9.1 - [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases) - [Commits](secure-systems-lab/go-securesystemslib@v0.9.0...v0.9.1) Updates `github.com/sigstore/rekor` from 1.3.10 to 1.4.0 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.3.10...v1.4.0) Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.9.5 to 1.9.6-0.20250729224751-181c5d3339b3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](https://github.com/sigstore/sigstore/commits) Updates `github.com/spiffe/go-spiffe/v2` from 2.5.0 to 2.6.0 - [Release notes](https://github.com/spiffe/go-spiffe/releases) - [Changelog](https://github.com/spiffe/go-spiffe/blob/main/CHANGELOG.md) - [Commits](spiffe/go-spiffe@v2.5.0...v2.6.0) Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.10.0...v1.11.0) Updates `github.com/tektoncd/pipeline` from 1.0.0 to 1.3.1 - [Release notes](https://github.com/tektoncd/pipeline/releases) - [Changelog](https://github.com/tektoncd/pipeline/blob/main/releases.md) - [Commits](tektoncd/pipeline@v1.0.0...v1.3.1) Updates `gocloud.dev` from 0.41.0 to 0.43.0 - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](google/go-cloud@v0.41.0...v0.43.0) Updates `gocloud.dev/docstore/mongodocstore` from 0.41.0 to 0.43.0 - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](google/go-cloud@v0.41.0...v0.43.0) Updates `gocloud.dev/pubsub/kafkapubsub` from 0.41.0 to 0.43.0 - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](google/go-cloud@v0.41.0...v0.43.0) Updates `golang.org/x/crypto` from 0.40.0 to 0.41.0 - [Commits](golang/crypto@v0.40.0...v0.41.0) Updates `golang.org/x/exp` from 0.0.0-20250408133849-7e4ce0ab07d0 to 0.0.0-20250506013437-ce4c2cf36ca6 - [Commits](https://github.com/golang/exp/commits) Updates `google.golang.org/grpc` from 1.73.0 to 1.75.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.73.0...v1.75.0) Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.7 Updates `k8s.io/api` from 0.33.2 to 0.33.4 - [Commits](kubernetes/api@v0.33.2...v0.33.4) Updates `k8s.io/apimachinery` from 0.33.2 to 0.33.4 - [Commits](kubernetes/apimachinery@v0.33.2...v0.33.4) Updates `k8s.io/client-go` from 0.33.2 to 0.33.4 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.33.2...v0.33.4) Updates `k8s.io/code-generator` from 0.33.1 to 0.33.4 - [Commits](kubernetes/code-generator@v0.33.1...v0.33.4) Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.6.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.4.0...v1.6.0) --- updated-dependencies: - dependency-name: cloud.google.com/go/compute/metadata dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: cloud.google.com/go/storage dependency-version: 1.56.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/google/addlicense dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/in-toto/archivista dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/in-toto/go-witness dependency-version: 0.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/secure-systems-lab/go-securesystemslib dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/rekor dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp dependency-version: 1.9.6-0.20250729224751-181c5d3339b3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/spiffe/go-spiffe/v2 dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/stretchr/testify dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/tektoncd/pipeline dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: gocloud.dev dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: gocloud.dev/docstore/mongodocstore dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: gocloud.dev/pubsub/kafkapubsub dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/crypto dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/exp dependency-version: 0.0.0-20250506013437-ce4c2cf36ca6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: google.golang.org/grpc dependency-version: 1.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: google.golang.org/protobuf dependency-version: 1.36.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/api dependency-version: 0.33.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/apimachinery dependency-version: 0.33.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/client-go dependency-version: 0.33.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/code-generator dependency-version: 0.33.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: sigs.k8s.io/yaml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]>

jkhelil · 2025-08-26T12:02:37Z

/approve

tekton-robot · 2025-08-26T12:02:44Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: jkhelil
To complete the pull request process, please assign chuangw6 after the PR has been reviewed.
You can assign the PR to them by writing /assign @chuangw6 in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

jkhelil · 2025-08-26T12:03:38Z

/lgtm

tekton-robot · 2025-08-26T12:03:41Z

@jkhelil: changing LGTM is restricted to collaborators

Details

In response to this:

/lgtm

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

PuneetPunamiya · 2025-08-26T12:05:38Z

/lgtm

tekton-robot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Aug 26, 2025

tekton-robot requested review from PuneetPunamiya and wlynch August 26, 2025 03:02

tekton-robot assigned PuneetPunamiya Aug 26, 2025

tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Aug 26, 2025

PuneetPunamiya merged commit d767227 into main Aug 26, 2025
12 of 13 checks passed

dependabot bot deleted the dependabot/go_modules/all-bdb0af7abb branch August 26, 2025 12:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all group across 1 directory with 23 updates#1424

Bump the all group across 1 directory with 23 updates#1424
PuneetPunamiya merged 1 commit intomainfrom
dependabot/go_modules/all-bdb0af7abb

dependabot bot commented on behalf of github Aug 26, 2025

Uh oh!

jkhelil commented Aug 26, 2025

Uh oh!

tekton-robot commented Aug 26, 2025

Uh oh!

jkhelil commented Aug 26, 2025

Uh oh!

tekton-robot commented Aug 26, 2025

Uh oh!

PuneetPunamiya commented Aug 26, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

dependabot bot commented on behalf of github Aug 26, 2025

apps: v0.8.0

0.8.0 (2025-07-09)

Features

compute/metadata: v0.8.0

0.8.0 (2025-08-06)

Features

managedkafka: v0.8.0

0.8.0 (2025-08-14)

Features

v0.8.0

storage: v1.56.1

1.56.1 (2025-08-19)

Bug Fixes

storage: v1.56.0

1.56.0 (2025-07-24)

Features

Bug Fixes

Performance Improvements

Documentation

v1.2.0

What's Changed

New Contributors

v1.2.0-rc0

What's Changed

v0.10.0

Changelog

What's Changed

New Contributors

v1.4.0

Changelog

v1.4.0

Features

Fixes

Removed

Contributors

v2.6.0

Changed

[2.6.0] - 2025-08-21

Changed

v1.11.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

Tekton Pipeline release v1.3.1 LTS "Maine Coon Melfina"

Installation one-liner

Attestation

Changes

Features

Tekton Pipeline Releases

Release Frequency

Transition Process

Release Process

Release

v1.3 (LTS)

v1.0 (LTS)

Uh oh!

jkhelil commented Aug 26, 2025

Uh oh!

tekton-robot commented Aug 26, 2025

Uh oh!

jkhelil commented Aug 26, 2025

Uh oh!

tekton-robot commented Aug 26, 2025

Uh oh!

PuneetPunamiya commented Aug 26, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants