Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the go-modules group across 1 directory with 41 updates #750

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 8, 2024

Bumps the go-modules group with 21 updates in the / directory:

Package From To
github.com/CycloneDX/cyclonedx-go 0.7.2 0.8.0
github.com/Microsoft/go-winio 0.6.1 0.6.2
github.com/klauspost/compress 1.17.6 1.17.8
github.com/knqyf263/go-rpmdb 0.0.0-20230301153543-ba94b245509b 0.1.0
github.com/onsi/gomega 1.31.1 1.33.1
github.com/paketo-buildpacks/occam 0.18.2 0.18.5
github.com/paketo-buildpacks/packit/v2 2.12.0 2.14.0
github.com/shopspring/decimal 1.3.1 1.4.0
github.com/spdx/tools-golang 0.5.3 0.5.4
github.com/sylabs/sif/v2 2.15.1 2.16.0
github.com/Microsoft/hcsshim 0.11.4 0.12.3
github.com/cenkalti/backoff/v4 4.2.1 4.3.0
github.com/cloudflare/circl 1.3.7 1.3.8
github.com/containerd/containerd 1.7.13 1.7.16
github.com/cyphar/filepath-securejoin 0.2.4 0.2.5
github.com/distribution/reference 0.5.0 0.6.0
github.com/go-git/go-git/v5 5.11.0 5.12.0
github.com/sassoftware/go-rpmutils 0.3.0 0.4.0
github.com/shirou/gopsutil/v3 3.24.1 3.24.4
github.com/tklauser/go-sysconf 0.3.13 0.3.14
google.golang.org/protobuf 1.33.0 1.34.1

Updates github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.8.0

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.8.0

This release ships with almost complete support for v1.5 of the CycloneDX specification.

The only exception being the extended data flow support, as used in SaaS BOMs.

Unfortunately, there are also breaking changes in this release:

  • The type of Metadata.Tools has changed from *[]Tool to *ToolsChoice, to facilitate the deprecation of Tool in the spec
    • ToolsChoice holds both legacy *[]Tool, as well as the new *[]Component and *[]Service fields
    • The Tool type, as well as the ToolsChoice.Tools field are marked as deprecated
    • During encoding and decoding, it is asserted that only one of both options can be present, in accordance with the "One of" constraint of the spec
    • When encoding to lower spec versions than v1.5 (using EncodeVersion), Components and Services are automatically converted to legacy Tools
    • It is strongly recommended to use Components and Services. However, when consuming BOMs, applications should still expect legacy Tools to be present, and handle them accordingly.

Changelog

Fixes

  • 64eb0c84b3d909db47c5154c17d075f68b0c85ae: fix: remove format linters that require extra tooling (@​nscuro)

Building and Packaging

  • 696aa66151e800a672c9ec860f30d8716ae6a025: build(deps): bump actions/checkout from 3.5.3 to 4.1.0 (@​dependabot[bot])
  • b50b319d1580d5b624cfc866bc108b589b328157: build(deps): bump actions/checkout from 4.1.0 to 4.1.1 (@​dependabot[bot])
  • 5cad1b0a7dad106950790fad960be5f7e62b2110: build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 (@​dependabot[bot])
  • b0910619560e5b0b0fae51dc97c4a343983873fb: build(deps): bump gitpod/workspace-go from d3603c7 to 94ae638 (@​dependabot[bot])
  • 9e310b6d641245c89aa01f07a21b50c38f04b087: build(deps): bump gitpod/workspace-go from f37c673 to d3603c7 (@​dependabot[bot])
  • 89494fd98291ca8115e02cab78e2e47360352f00: build(deps): bump goreleaser/goreleaser-action from 4.4.0 to 5.0.0 (@​dependabot[bot])

Others

  • 61dd91e0bbe730454bef42bc0c1b0a3f97411c02: feat(spec1-5): add support for machine learning (@​nscuro)
  • f831960f0887c1f60681924e4d4382cd4bb52ff0: feat(spec1-5): update valid-vulnerability test snapshots (@​nscuro)
  • ffc9a4eb9204f5a31b7fb1d6cd907e6cc3e93578: ci: enable more linters (@​mmorel-35)
  • 3feda7530db8c959381261e44a96b201f79f908c: feat(spec1-5): add additional external reference types (@​nscuro)
  • bd66a368c5116c0420f49157a217e71cde1544be: feat(spec1-5): add support for CVSSv4 scoring method (@​nscuro)
  • d597bb9076e1856b9f2d3bb9d420728df8d43d9a: feat(spec1-5): add support for firstIssued and lastUpdated in vuln analysis (@​nscuro)
  • 2ae5445d02b8e6e7391a8a0eb4d1a5bb8a6f377c: feat(spec1-5): add support for additional compositions and composition identity (@​nscuro)
  • f856daa3212521eaf5f1dd69424b9c98eee2db52: feat(spec1-5): add support for formulation (@​nscuro)
  • 2fbde0e17ac5876ff525ccdc9d1eebf90918d306: feat(spec1-5): add support for identity, occurrences, and callstack evidence (@​nscuro)
  • 745a35a73d395923303817de650a60fe82cf8ec8: feat(spec1-5): add support for licensing (@​nscuro)
  • b02255f3784c608100b2ae3d1123e41500a50ff3: feat(spec1-5): add support for lifecycles (@​nscuro)
  • fe3a9040862e5fa088e84efb004fd9e338a783d7: feat(spec1-5): add support for ssvc scoring method (@​nscuro)
  • 7d2713f4459184df4628b839e4c01bae7fd6abcf: feat(spec1-5): add support for vulnerability proof of concept (@​nscuro)
  • 25b250ac0efea93283362584394a16ca602e260f: feat(spec1-5): add support for vulnerability rejected timestamps (@​nscuro)
  • c7a84ac4ba209f5860b1aedffa2f1e71414e4508: feat(spec1-5): handle deprecation of tools (@​nscuro)
Commits
  • b9654ae Merge pull request #90 from CycloneDX/spec-v1.5
  • 64eb0c8 fix: remove format linters that require extra tooling
  • c7a84ac feat(spec1-5): handle deprecation of tools
  • f856daa feat(spec1-5): add support for formulation
  • 2fbde0e feat(spec1-5): add support for identity, occurrences, and callstack evidence
  • 61dd91e feat(spec1-5): add support for machine learning
  • f831960 feat(spec1-5): update valid-vulnerability test snapshots
  • fe3a904 feat(spec1-5): add support for ssvc scoring method
  • 7d2713f feat(spec1-5): add support for vulnerability proof of concept
  • 2ae5445 feat(spec1-5): add support for additional compositions and composition identity
  • Additional commits viewable in compare view

Updates github.com/Microsoft/go-winio from 0.6.1 to 0.6.2

Release notes

Sourced from github.com/Microsoft/go-winio's releases.

v0.6.2

What's Changed

New Contributors

Full Changelog: microsoft/go-winio@v0.6.1...v0.6.2

Commits

Updates github.com/klauspost/compress from 1.17.6 to 1.17.8

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.8

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.7...v1.17.8

v1.17.7

What's Changed

Full Changelog: klauspost/compress@v1.17.6...v1.17.7

Commits
  • c0ff47e Update README.md
  • 657dc16 chore: remove repetitive words (#946)
  • 3f77d8c build(deps): bump the github-actions group with 1 update (#944)
  • de4073a zstd: Add RLE detection+encoding (#938)
  • 165be36 zstd: Reject blocks where reserved values are not 0 (#885)
  • 4f3f95b ci: Add testing replacement (#935)
  • 3976394 build(deps): bump the github-actions group with 1 update (#934)
  • 4d78e54 Remove sed for internal/fuzz/helpers.go (#933)
  • 46c00ca doc: Remove an excess word in a documentation comment (#932)
  • 1e2b275 tests: Rename fuzz helpers back. (#931)
  • Additional commits viewable in compare view

Updates github.com/knqyf263/go-rpmdb from 0.0.0-20230301153543-ba94b245509b to 0.1.0

Commits

Updates github.com/onsi/gomega from 1.31.1 to 1.33.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.33.1

1.33.1

Fixes

  • fix confusing eventually docs [3a66379]

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]

v1.33.0

1.33.0

Features

Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]
  • Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]
  • Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]

v1.32.0

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.33.1

Fixes

  • fix confusing eventually docs [3a66379]

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]

1.33.0

Features

Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]
  • Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]
  • Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

Commits
  • 8a658bb v1.33.1
  • e9bc35a Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
  • 3a66379 fix confusing eventually docs
  • f2e65fc v1.33.0
  • 02e8706 docs: Receive(POINTER, MATCHER)
  • ec1f186 feat: receiver matcher accepting (POINTER, MATCHER), includes unit tests
  • 9999deb Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745)
  • cb5ff21 Bump github-pages from 229 to 230 in /docs (#735)
  • bac6596 Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746)
  • 4379951 v1.32.0
  • Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/occam from 0.18.2 to 0.18.5

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.18.5

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.18.4...v0.18.5

v0.18.4

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.18.3...v0.18.4

v0.18.3

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.18.2...v0.18.3

Commits
  • f23ed80 use go 1.20 (#288)
  • 4e0efea remove toolchain from go.mod
  • ea10e39 update fakes
  • 059d6bc Bump github.com/google/go-containerregistry from 0.14.0 to 0.19.1
  • 1f22679 Bump github.com/docker/docker
  • 37cf400 Bump github.com/onsi/gomega from 1.30.0 to 1.32.0
  • 122482e Bump github.com/testcontainers/testcontainers-go from 0.26.0 to 0.30.0 (#285)
  • 393f58f Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  • See full diff in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.12.0 to 2.14.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.14.0

What's Changed

New Contributors

Full Changelog: paketo-buildpacks/packit@v2.13.0...v2.14.0

v2.13.0

What's Changed

New Contributors

Full Changelog: paketo-buildpacks/packit@v2.12.0...v2.13.0

Commits
  • 13393ec Support reading service bindings from VCAP_SERVICES env var (#566)
  • 35d8f76 Bump github.com/onsi/gomega from 1.33.0 to 1.33.1
  • ce376b7 Fixes mirror bug when originalHost is excluded (#569)
  • 4c9f338 Allows users to set a dependency mirror (#563)
  • 4e9c21d Bump github.com/onsi/gomega from 1.32.0 to 1.33.0
  • dd77ec5 Bump github.com/ulikunitz/xz from 0.5.11 to 0.5.12
  • 95b8056 Bump github.com/onsi/gomega from 1.31.1 to 1.32.0
  • 777a503 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  • c1b785b Bump github.com/google/uuid from 1.5.0 to 1.6.0
  • b31dc83 Bump github.com/onsi/gomega from 1.31.0 to 1.31.1
  • Additional commits viewable in compare view

Updates github.com/shopspring/decimal from 1.3.1 to 1.4.0

Release notes

Sourced from github.com/shopspring/decimal's releases.

v1.4.0

Full Changelog can be found in CHANGELOG.md

New Contributors

Changelog

Sourced from github.com/shopspring/decimal's changelog.

Decimal v1.4.0

BREAKING

  • Drop support for Go version older than 1.10 #361

FEATURES

  • Add implementation of natural logarithm #339 #357
  • Add improved implementation of power operation #358
  • Add Compare method which forwards calls to Cmp #346
  • Add NewFromBigRat constructor #288
  • Add NewFromUint64 constructor #352

ENHANCEMENTS

  • Migrate to Github Actions #245 #340
  • Fix examples for RoundDown, RoundFloor, RoundUp, and RoundCeil #285 #328 #341
  • Use Godoc standard to mark deprecated Equals and StringScaled methods #342
  • Removed unnecessary min function for RescalePair method #265
  • Avoid reallocation of initial slice in MarshalBinary (GobEncode) #355
  • Optimize NumDigits method #301 #356
  • Optimize BigInt method #359
  • Support scanning uint64 #131 #364
  • Add docs section with alternative libraries #363

BUGFIXES

  • Fix incorrect calculation of decimal modulo #258 #317
  • Allocate new(big.Int) in Copy method to deeply clone it #278
  • Fix overflow edge case in QuoRem method #322
Commits

Updates github.com/spdx/tools-golang from 0.5.3 to 0.5.4

Release notes

Sourced from github.com/spdx/tools-golang's releases.

v0.5.4

What's Changed

New Contributors

Full Changelog: spdx/tools-golang@v0.5.3...v0.5.4

Commits
  • aa7bfad fix(2.2 json): remove emtpy packageVerificationCode (#223)
  • 8baafa1 build(deps): Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#235)
  • 44984eb build(deps): Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#228)
  • be01c4e feat: add external reference category "OTHER" (#229)
  • 254541c build(deps): Bump actions/setup-go from 4 to 5 (#232)
  • 0c0f394 fix(verification): don't create empty ExcludedFiles array (#230)
  • be2fd61 build(deps): Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 (#226)
  • 7f95b01 fix: stop escaping HTML (#224)
  • See full diff in compare view

Updates github.com/sylabs/sif/v2 from 2.15.1 to 2.16.0

Release notes

Sourced from github.com/sylabs/sif/v2's releases.

v2.16.0

This release drops support for Go 1.20.

What's Changed

Full Changelog: sylabs/sif@v2.15.2...v2.16.0

v2.15.2

What's Changed

Full Changelog: sylabs/sif@v2.15.1...v2.15.2

Commits
  • 796011b Merge pull request #351 from tri-adam/go-1.22
  • df206d4 refactor: simplify minID calculation
  • 7ad27b6 refactor: simplify slice logic
  • 096293c chore: bump module Go version to 1.21
  • dd1e34c build(deps): bump github.com/google/go-containerregistry (#356)
  • 7d96323 build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 (#355)
  • 0ab3a72 build(deps): bump github.com/sigstore/sigstore from 1.8.1 to 1.8.2 (#354)
  • 7cb9507 Merge pull request #353 from tri-adam/go-1.22-ci
  • 5f2a42d ci: test against Go 1.22
  • 7cf41e5 Merge pull request #352 from tri-adam/fix-lint
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.19.0 to 0.22.0

Commits
  • d042a39 go.mod: update golang.org/x dependencies
  • b92bf94 ssh: respect MaxAuthTries also for "none" auth attempts
  • 6f79b5a ssh: add server side multi-step authentication
  • 8d0d405 x/crypto/chacha20: cleanup chacha_ppc64le.s
  • b91329d all: remove redundant words in comments and fix some typos
  • 7067223 go.mod: update golang.org/x dependencies
  • 0d2316b ssh/test: work around for TestCiphers failures on macOS
  • 0aab8d0 all: update go.mod x/net dependency
  • 5bead59 ocsp: don't use iota for externally defined constants
  • 1a86580 x/crypto/internal/poly1305: improve sum_ppc64le.s
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.21.0 to 0.24.0

Commits
  • 7bbe320 go.mod: update golang.org/x dependencies
  • c48da13 http2: fix TestServerContinuationFlood flakes
  • 762b58d http2: fix tipos in comment
  • ba87210 http2: close connections when receiving too many headers
  • ebc8168 all: fix some typos
  • 3678185 http2: make TestCanonicalHeaderCacheGrowth faster
  • 448c44f http2: remove clientTester
  • c7877ac http2: convert the remaining clientTester tests to testClientConn
  • d8870b0 http2: use synthetic time in TestIdleConnTimeout
  • d73acff http2: only set up deadline when Server.IdleTimeout is positive
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.6.0 to 0.7.0

Commits

Updates golang.org/x/sys from 0.17.0 to 0.19.0

Commits
  • cabba82 windows: use uint32 for serial comm flags for consistency
  • 1a50d97 windows: add serial comm functions
  • 95f07ec x/sys/windows: add func windows.DisconnectNamedPipe(handle Handle) (err error)
  • 4be02d3 unix: expose mmap calls on z/OS
  • 360f961 unix: add API for fsconfig system call
  • 7ff74af unix: drop go version tags for unsupported versions
  • 6b4eab5 unix: suppress ENOMEM errors from sysctl's implementing Uname(uname *Utsname)...
  • 2f2cc5d unix: update IFLA and NETKIT constants with Linux kernel 6.7
  • See full diff in compa...

    Description has been truncated

Bumps the go-modules group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.7.2` | `0.8.0` |
| [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio) | `0.6.1` | `0.6.2` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.6` | `1.17.8` |
| [github.com/knqyf263/go-rpmdb](https://github.com/knqyf263/go-rpmdb) | `0.0.0-20230301153543-ba94b245509b` | `0.1.0` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.31.1` | `1.33.1` |
| [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.18.2` | `0.18.5` |
| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.12.0` | `2.14.0` |
| [github.com/shopspring/decimal](https://github.com/shopspring/decimal) | `1.3.1` | `1.4.0` |
| [github.com/spdx/tools-golang](https://github.com/spdx/tools-golang) | `0.5.3` | `0.5.4` |
| [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.15.1` | `2.16.0` |
| [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.11.4` | `0.12.3` |
| [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) | `4.2.1` | `4.3.0` |
| [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.7` | `1.3.8` |
| [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.13` | `1.7.16` |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.2.4` | `0.2.5` |
| [github.com/distribution/reference](https://github.com/distribution/reference) | `0.5.0` | `0.6.0` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.11.0` | `5.12.0` |
| [github.com/sassoftware/go-rpmutils](https://github.com/sassoftware/go-rpmutils) | `0.3.0` | `0.4.0` |
| [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) | `3.24.1` | `3.24.4` |
| [github.com/tklauser/go-sysconf](https://github.com/tklauser/go-sysconf) | `0.3.13` | `0.3.14` |
| google.golang.org/protobuf | `1.33.0` | `1.34.1` |



Updates `github.com/CycloneDX/cyclonedx-go` from 0.7.2 to 0.8.0
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml)
- [Commits](CycloneDX/cyclonedx-go@v0.7.2...v0.8.0)

Updates `github.com/Microsoft/go-winio` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/Microsoft/go-winio/releases)
- [Commits](microsoft/go-winio@v0.6.1...v0.6.2)

Updates `github.com/klauspost/compress` from 1.17.6 to 1.17.8
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.6...v1.17.8)

Updates `github.com/knqyf263/go-rpmdb` from 0.0.0-20230301153543-ba94b245509b to 0.1.0
- [Commits](https://github.com/knqyf263/go-rpmdb/commits/v0.1.0)

Updates `github.com/onsi/gomega` from 1.31.1 to 1.33.1
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.31.1...v1.33.1)

Updates `github.com/paketo-buildpacks/occam` from 0.18.2 to 0.18.5
- [Release notes](https://github.com/paketo-buildpacks/occam/releases)
- [Commits](paketo-buildpacks/occam@v0.18.2...v0.18.5)

Updates `github.com/paketo-buildpacks/packit/v2` from 2.12.0 to 2.14.0
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.12.0...v2.14.0)

Updates `github.com/shopspring/decimal` from 1.3.1 to 1.4.0
- [Release notes](https://github.com/shopspring/decimal/releases)
- [Changelog](https://github.com/shopspring/decimal/blob/master/CHANGELOG.md)
- [Commits](shopspring/decimal@v1.3.1...v1.4.0)

Updates `github.com/spdx/tools-golang` from 0.5.3 to 0.5.4
- [Release notes](https://github.com/spdx/tools-golang/releases)
- [Changelog](https://github.com/spdx/tools-golang/blob/main/RELEASE-NOTES.md)
- [Commits](spdx/tools-golang@v0.5.3...v0.5.4)

Updates `github.com/sylabs/sif/v2` from 2.15.1 to 2.16.0
- [Release notes](https://github.com/sylabs/sif/releases)
- [Changelog](https://github.com/sylabs/sif/blob/main/.goreleaser.yml)
- [Commits](sylabs/sif@v2.15.1...v2.16.0)

Updates `golang.org/x/crypto` from 0.19.0 to 0.22.0
- [Commits](golang/crypto@v0.19.0...v0.22.0)

Updates `golang.org/x/net` from 0.21.0 to 0.24.0
- [Commits](golang/net@v0.21.0...v0.24.0)

Updates `golang.org/x/sync` from 0.6.0 to 0.7.0
- [Commits](golang/sync@v0.6.0...v0.7.0)

Updates `golang.org/x/sys` from 0.17.0 to 0.19.0
- [Commits](golang/sys@v0.17.0...v0.19.0)

Updates `github.com/Microsoft/hcsshim` from 0.11.4 to 0.12.3
- [Release notes](https://github.com/Microsoft/hcsshim/releases)
- [Commits](microsoft/hcsshim@v0.11.4...v0.12.3)

Updates `github.com/cenkalti/backoff/v4` from 4.2.1 to 4.3.0
- [Commits](cenkalti/backoff@v4.2.1...v4.3.0)

Updates `github.com/cloudflare/circl` from 1.3.7 to 1.3.8
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](cloudflare/circl@v1.3.7...v1.3.8)

Updates `github.com/containerd/containerd` from 1.7.13 to 1.7.16
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.13...v1.7.16)

Updates `github.com/cyphar/filepath-securejoin` from 0.2.4 to 0.2.5
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Commits](cyphar/filepath-securejoin@v0.2.4...v0.2.5)

Updates `github.com/distribution/reference` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/distribution/reference/releases)
- [Commits](distribution/reference@v0.5.0...v0.6.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.12.0)

Updates `github.com/golang/protobuf` from 1.5.3 to 1.5.4
- [Release notes](https://github.com/golang/protobuf/releases)
- [Commits](golang/protobuf@v1.5.3...v1.5.4)

Updates `github.com/google/go-containerregistry` from 0.19.0 to 0.19.1
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.19.0...v0.19.1)

Updates `github.com/sassoftware/go-rpmutils` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/sassoftware/go-rpmutils/releases)
- [Commits](sassoftware/go-rpmutils@v0.3.0...v0.4.0)

Updates `github.com/sergi/go-diff` from 1.3.1 to 1.3.2-0.20230802210424-5b0b94c5c0d3
- [Commits](https://github.com/sergi/go-diff/commits)

Updates `github.com/shirou/gopsutil/v3` from 3.24.1 to 3.24.4
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v3.24.1...v3.24.4)

Updates `github.com/skeema/knownhosts` from 1.2.1 to 1.2.2
- [Commits](skeema/knownhosts@v1.2.1...v1.2.2)

Updates `github.com/testcontainers/testcontainers-go` from 0.27.0 to 0.30.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.27.0...v0.30.0)

Updates `github.com/tklauser/go-sysconf` from 0.3.13 to 0.3.14
- [Release notes](https://github.com/tklauser/go-sysconf/releases)
- [Commits](tklauser/go-sysconf@v0.3.13...v0.3.14)

Updates `github.com/tklauser/numcpus` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/tklauser/numcpus/releases)
- [Commits](tklauser/numcpus@v0.7.0...v0.8.0)

Updates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.12
- [Commits](ulikunitz/xz@v0.5.11...v0.5.12)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.48.0 to 0.49.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.48.0...zpages/v0.49.0)

Updates `go.opentelemetry.io/otel` from 1.23.0 to 1.24.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.23.0...v1.24.0)

Updates `go.opentelemetry.io/otel/metric` from 1.23.0 to 1.24.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.23.0...v1.24.0)

Updates `go.opentelemetry.io/otel/trace` from 1.23.0 to 1.24.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.23.0...v1.24.0)

Updates `golang.org/x/exp` from 0.0.0-20230510235704-dd950f8aeaea to 0.0.0-20231006140011-7918f672742d
- [Commits](https://github.com/golang/exp/commits)

Updates `golang.org/x/mod` from 0.15.0 to 0.17.0
- [Commits](golang/mod@v0.15.0...v0.17.0)

Updates `golang.org/x/text` from 0.14.0 to 0.15.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.14.0...v0.15.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20231120223509-83a465c0220f to 0.0.0-20240123012728-ef4313101c80
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.61.0...v1.62.0)

Updates `google.golang.org/protobuf` from 1.33.0 to 1.34.1

---
updated-dependencies:
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Microsoft/go-winio
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/knqyf263/go-rpmdb
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/occam
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/shopspring/decimal
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/spdx/tools-golang
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/sylabs/sif/v2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sync
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/Microsoft/hcsshim
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cenkalti/backoff/v4
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cloudflare/circl
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/containerd/containerd
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/distribution/reference
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/golang/protobuf
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/google/go-containerregistry
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/sassoftware/go-rpmutils
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sergi/go-diff
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/shirou/gopsutil/v3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/skeema/knownhosts
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/tklauser/go-sysconf
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/tklauser/numcpus
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/ulikunitz/xz
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/exp
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner May 8, 2024 06:18
@dependabot dependabot bot added the failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow label May 8, 2024
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label May 8, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github May 16, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this May 16, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-modules-5d8af5bba8 branch May 16, 2024 16:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow semver:patch A change requiring a patch version bump
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant