Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 10, 2025

Bumps the golang group with 10 updates:

Package From To
github.com/docker/cli 28.5.1+incompatible 28.5.2+incompatible
github.com/docker/docker 28.5.1+incompatible 28.5.2+incompatible
github.com/letsencrypt/boulder 0.20251027.0 0.20251103.0
github.com/moby/buildkit 0.25.1 0.25.2
golang.org/x/oauth2 0.32.0 0.33.0
golang.org/x/sync 0.17.0 0.18.0
golang.org/x/sys 0.37.0 0.38.0
google.golang.org/api 0.254.0 0.255.0
sigs.k8s.io/kustomize/api 0.20.1 0.21.0
sigs.k8s.io/kustomize/kyaml 0.20.1 0.21.0

Updates github.com/docker/cli from 28.5.1+incompatible to 28.5.2+incompatible

Commits
  • ecc6942 Merge pull request #6621 from thaJeztah/28.x_plugin_hide
  • c475c69 Plugin may set itself as hidden
  • 7494d2c cli: allManagementSubCommands: improve handling of plugin stubs
  • 5306df3 Merge pull request #6610 from thaJeztah/28.x_backport_deprecate_builder_utils
  • 5dbaa52 cli/command/image/build: deprecate ResolveAndValidateContextPath util
  • dd832b6 cli/command/image/build: deprecate WriteTempDockerfile util
  • a99e91c cli/command/image/build: deprecate DetectArchiveReader util
  • 579b72a cli/command/image/build: deprecate DefaultDockerfileName const
  • 6fc5891 Merge pull request #6560 from thaJeztah/28.x_backport_deprecations
  • 9af6cbc Merge pull request #6613 from thaJeztah/28.x_bump_go
  • Additional commits viewable in compare view

Updates github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v28.5.2

28.5.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

[!CAUTION] This release contains fixes for three high-severity security vulnerabilities in runc:

All three vulnerabilities ultimately allow (through different methods) for full container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files.

Packaging updates

Bug fixes and enhancements

Deprecations

  • Go-SDK: cli/command/image/build: deprecate DefaultDockerfileName, DetectArchiveReader, WriteTempDockerfile, ResolveAndValidateContextPath. These utilities were only used internally and will be removed in the next release. docker/cli#6610
  • Go-SDK: cli/command/image/build: deprecate IsArchive utility. docker/cli#6560
  • Go-SDK: opts: deprecate ValidateMACAddress. docker/cli#6560
  • Go-SDK: opts: deprecate ListOpts.Delete(). docker/cli#6560
Commits
  • 89c5e8f Merge pull request #51396 from thaJeztah/28.x_backport_api_docs
  • 9b93878 Merge pull request #51395 from thaJeztah/28.x_backport_rootless_reject
  • 6178456 Merge pull request #51398 from vvoland/51397-28.x
  • 0cae4e5 vendor: github.com/moby/buildkit v0.25.2
  • 33cc06f Merge pull request #51394 from vvoland/51393-28.x
  • d525277 api/docs: remove BuildCache.Parent field for API v1.42 and up
  • 2fbc51b dockerd-rootless.sh: reject DOCKERD_ROOTLESS_ROOTLESSKIT_NET=host
  • bd98008 integration-cli: Adjust nofile limits
  • 1967515 Dockerfile: update runc binary to v1.3.3
  • 4489660 Merge pull request #51387 from thaJeztah/28.x_bump_go
  • Additional commits viewable in compare view

Updates github.com/letsencrypt/boulder from 0.20251027.0 to 0.20251103.0

Release notes

Sourced from github.com/letsencrypt/boulder's releases.

v0.20251103.0

What's Changed

New Contributors

Full Changelog: letsencrypt/boulder@v0.20251027.0...v0.20251103.0

Commits
  • a1cf84f Clean up dangling OCSP configs (#8461)
  • abafa0a sfe: Create Salesforce Case at override request form submission time (#8438)
  • d1e5e16 wfe/ra: Periodically load rate limit overrides from the database (#8407)
  • d924a2a Remove Python tests for TLS-ALPN-01 (#8457)
  • 12d5d1c iana: Remove hardcoded multicast prefixes (#8456)
  • 88ed5e7 build(deps): bump the aws group with 3 updates (#8467)
  • cb7786b Deprecate NoPendingAuthzReuse flag (#8458)
  • 313ce53 Use json tags to suppress Account fields in API responses (#8455)
  • 9392b44 Add visibility into nonce redemption failure causes (#8448)
  • 1d86023 sa: NewOrderAndAuthzs checks that nonzero authzs were provided (#8464)
  • See full diff in compare view

Updates github.com/moby/buildkit from 0.25.1 to 0.25.2

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.25.2

Welcome to the v0.25.2 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax
  • Tõnis Tiigi

Notable Changes

  • Update Runc to v1.3.3 #6332

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.25.1

Commits
  • dcc0fe5 Merge pull request #6332 from crazy-max/v0.25_update-runc
  • 5dd52fd dockerfile: update runc to 1.3.3
  • 1030099 Merge pull request #6278 from tonistiigi/v0.25-customenv-test-zerov
  • cb95275 dockerfile: fix customenv test for dockerd
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.32.0 to 0.33.0

Commits

Updates golang.org/x/sync from 0.17.0 to 0.18.0

Commits

Updates golang.org/x/sys from 0.37.0 to 0.38.0

Commits
  • 15129aa cpu: also use MRS instruction in getmmfr1
  • ed38ca2 unix: add SizeofNhmsg and SizeofNexthopGrp
  • 3675c4c cpu: use MRS instruction to read arm64 system registers
  • 2a15272 unix: add consts for ELF handling
  • 6239615 cpu: add HPDS, LOR, PAN detection for arm64
  • ea436ef windows: add iphlpapi routing functions
  • 28c5bda unix: add SetMemPolicy and its mode/flag values
  • b731f78 unix/linux: switch to ubuntu 25.04, Go 1.25.1
  • See full diff in compare view

Updates google.golang.org/api from 0.254.0 to 0.255.0

Release notes

Sourced from google.golang.org/api's releases.

v0.255.0

0.255.0 (2025-11-04)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.255.0 (2025-11-04)

Features

Commits

Updates sigs.k8s.io/kustomize/api from 0.20.1 to 0.21.0

Release notes

Sourced from sigs.k8s.io/kustomize/api's releases.

api/v0.21.0

#5679: implements to replacements value in the structured data #5863: Add regex support for Replacement selectors #5930: feat: add PatchArgs API type to populate patch options #5940: fix: Propagate Namespace correctly to Helm #5942: fix fnplugin storagemounts validation #5958: fix: make AbsorbAll conflict error more verbose #5959: update go 1.24.6 #5961: refactor: nested format string #5962: chore: update dependencies from security alert #5967: Fix infinite loop in HTTP client by validating URLs before requests #5971: fix: performance recession when propagating namespace to helm #6007: Update kyaml to v0.21.0

cmd/config/v0.21.0

#5959: update go 1.24.6 #5962: chore: update dependencies from security alert #6007: Update kyaml to v0.21.0

kyaml/v0.21.0

#5679: implements to replacements value in the structured data #5959: update go 1.24.6 #5961: refactor: nested format string #5962: chore: update dependencies from security alert #5985: fix(kyaml/yaml): minor nil safety fix for RNode.Content etc

Commits
  • 6661fef Merge pull request #6008 from koba1t/pinToCmdConfig
  • 3c59244 Update cmd/config to v0.21.0
  • ade7bd6 Merge pull request #6007 from koba1t/pinToKyaml
  • 0fc7554 Update kyaml to v0.21.0
  • 8761791 fix(kyaml/yaml): minor nil safety fix for RNode.Content etc (#5985)
  • 153a372 Merge pull request #5679 from koba1t/implements_to_replacements_value_in_the_...
  • de01137 Merge pull request #5991 from isarns/fix/labels-without-selector-duplicate-ke...
  • 4d37afe style(cmd-edit-add-label): lint multiple labels without selector test
  • f71e4d7 style(cmd-edit-add-label): lint multiple labels without selector test
  • d427f61 test(cmd-edit-add-label): add multiple labels without selector test
  • Additional commits viewable in compare view

Updates sigs.k8s.io/kustomize/kyaml from 0.20.1 to 0.21.0

Release notes

Sourced from sigs.k8s.io/kustomize/kyaml's releases.

api/v0.21.0

#5679: implements to replacements value in the structured data #5863: Add regex support for Replacement selectors #5930: feat: add PatchArgs API type to populate patch options #5940: fix: Propagate Namespace correctly to Helm #5942: fix fnplugin storagemounts validation #5958: fix: make AbsorbAll conflict error more verbose #5959: update go 1.24.6 #5961: refactor: nested format string #5962: chore: update dependencies from security alert #5967: Fix infinite loop in HTTP client by validating URLs before requests #5971: fix: performance recession when propagating namespace to helm #6007: Update kyaml to v0.21.0

cmd/config/v0.21.0

#5959: update go 1.24.6 #5962: chore: update dependencies from security alert #6007: Update kyaml to v0.21.0

kyaml/v0.21.0

#5679: implements to replacements value in the structured data #5959: update go 1.24.6 #5961: refactor: nested format string #5962: chore: update dependencies from security alert #5985: fix(kyaml/yaml): minor nil safety fix for RNode.Content etc

Commits
  • 6661fef Merge pull request #6008 from koba1t/pinToCmdConfig
  • 3c59244 Update cmd/config to v0.21.0
  • ade7bd6 Merge pull request #6007 from koba1t/pinToKyaml
  • 0fc7554 Update kyaml to v0.21.0
  • 8761791 fix(kyaml/yaml): minor nil safety fix for RNode.Content etc (#5985)
  • 153a372 Merge pull request #5679 from koba1t/implements_to_replacements_value_in_the_...
  • de01137 Merge pull request #5991 from isarns/fix/labels-without-selector-duplicate-ke...
  • 4d37afe style(cmd-edit-add-label): lint multiple labels without selector test
  • f71e4d7 style(cmd-edit-add-label): lint multiple labels without selector test
  • d427f61 test(cmd-edit-add-label): add multiple labels without selector test
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the golang group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/docker/cli](https://github.com/docker/cli) | `28.5.1+incompatible` | `28.5.2+incompatible` |
| [github.com/docker/docker](https://github.com/docker/docker) | `28.5.1+incompatible` | `28.5.2+incompatible` |
| [github.com/letsencrypt/boulder](https://github.com/letsencrypt/boulder) | `0.20251027.0` | `0.20251103.0` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.25.1` | `0.25.2` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.32.0` | `0.33.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.17.0` | `0.18.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.37.0` | `0.38.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.254.0` | `0.255.0` |
| [sigs.k8s.io/kustomize/api](https://github.com/kubernetes-sigs/kustomize) | `0.20.1` | `0.21.0` |
| [sigs.k8s.io/kustomize/kyaml](https://github.com/kubernetes-sigs/kustomize) | `0.20.1` | `0.21.0` |


Updates `github.com/docker/cli` from 28.5.1+incompatible to 28.5.2+incompatible
- [Commits](docker/cli@v28.5.1...v28.5.2)

Updates `github.com/docker/docker` from 28.5.1+incompatible to 28.5.2+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v28.5.1...v28.5.2)

Updates `github.com/letsencrypt/boulder` from 0.20251027.0 to 0.20251103.0
- [Release notes](https://github.com/letsencrypt/boulder/releases)
- [Changelog](https://github.com/letsencrypt/boulder/blob/main/docs/release.md)
- [Commits](letsencrypt/boulder@v0.20251027.0...v0.20251103.0)

Updates `github.com/moby/buildkit` from 0.25.1 to 0.25.2
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.25.1...v0.25.2)

Updates `golang.org/x/oauth2` from 0.32.0 to 0.33.0
- [Commits](golang/oauth2@v0.32.0...v0.33.0)

Updates `golang.org/x/sync` from 0.17.0 to 0.18.0
- [Commits](golang/sync@v0.17.0...v0.18.0)

Updates `golang.org/x/sys` from 0.37.0 to 0.38.0
- [Commits](golang/sys@v0.37.0...v0.38.0)

Updates `google.golang.org/api` from 0.254.0 to 0.255.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.254.0...v0.255.0)

Updates `sigs.k8s.io/kustomize/api` from 0.20.1 to 0.21.0
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.20.1...api/v0.21.0)

Updates `sigs.k8s.io/kustomize/kyaml` from 0.20.1 to 0.21.0
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.20.1...api/v0.21.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 28.5.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/docker/docker
  dependency-version: 28.5.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/letsencrypt/boulder
  dependency-version: 0.20251103.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: golang.org/x/sys
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: google.golang.org/api
  dependency-version: 0.255.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: sigs.k8s.io/kustomize/api
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: sigs.k8s.io/kustomize/kyaml
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 10, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 10, 2025 13:14
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 10, 2025
@mattsanta mattsanta merged commit a4a28e6 into main Nov 13, 2025
18 checks passed
@mattsanta mattsanta deleted the dependabot/go_modules/golang-cfeadb5a65 branch November 13, 2025 14:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size/M

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants