chore(deps): update go modules (non-major) by renovate[bot] · Pull Request #43 · roberteggl/github-deployment-bridge

renovate · 2026-08-27T22:37:56Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/fluxcd/helm-controller/api	`v1.6.3` → `v1.6.4`
github.com/fluxcd/kustomize-controller/api	`v1.9.4` → `v1.9.5`
github.com/google/go-containerregistry	`v0.21.9` → `v0.22.1`
k8s.io/api	`v0.36.4` → `v0.37.0`
k8s.io/apimachinery	`v0.36.4` → `v0.37.0`
k8s.io/client-go	`v0.36.4` → `v0.37.0`
modernc.org/sqlite	`v1.57.0` → `v1.58.0`
sigs.k8s.io/controller-runtime	`v0.24.1` → `v0.25.0`

Release Notes

fluxcd/helm-controller (github.com/fluxcd/helm-controller/api)

`v1.6.4`

Compare Source

Changelog

v1.6.4 changelog

Container images

docker.io/fluxcd/helm-controller:v1.6.4
ghcr.io/fluxcd/helm-controller:v1.6.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.

fluxcd/kustomize-controller (github.com/fluxcd/kustomize-controller/api)

`v1.9.5`

Compare Source

Changelog

v1.9.5 changelog

Container images

docker.io/fluxcd/kustomize-controller:v1.9.5
ghcr.io/fluxcd/kustomize-controller:v1.9.5

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC.
To verify the images and their provenance (SLSA level 3), please see the security documentation.

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.22.1`

Compare Source

What's Changed

Reject non-canonical IP literals in all SSRF guards by @shaggyinsomniac in #2426
daemon: fix stale docker/docker reference in WithClient docs by @BobDu in #2428
build(deps): bump the go-deps group across 2 directories with 4 updates by @dependabot[bot] in #2422
authn: do not overwrite AuthConfig.Auth when username and password are empty by @nileshpatil6 in #2420
build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in #2423
Support pulling images by sha512 digest by @BobDu in #2427
Allow empty label and annotation values in crane mutate by @theadsingh in #2418
fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml by @tprussak in #2434
validate: support index attestation manifests and empty configs by @Subserial in #2414
name: improve error when parsing a reference with a URL scheme by @locker95 in #2431
fix(build): install binaries to /ko-app and add to PATH (#2424) by @tprussak in #2436
fix(release): honor declared Go toolchain by @rksharma-owg in #2435
remote: apply checkRedirectSSRF to writer-side HTTP clients by @locker95 in #2432
flatten: preserve config and layer media types when flattening by @Subserial in #2438
fix(mutate): make Time layer updates lazy by @amarkdotdev in #2429
build(deps): bump the go-deps group across 2 directories with 3 updates by @dependabot[bot] in #2439
remote: copy manifest annotations to referrers fallback tag descriptors by @codysoyland in #2441

New Contributors

@shaggyinsomniac made their first contribution in #2426
@BobDu made their first contribution in #2428
@nileshpatil6 made their first contribution in #2420
@theadsingh made their first contribution in #2418
@locker95 made their first contribution in #2431
@rksharma-owg made their first contribution in #2435
@codysoyland made their first contribution in #2441

Full Changelog: google/go-containerregistry@v0.22.0...v0.22.1

`v0.22.0`

Compare Source

What's Changed

mutate: let Time and Canonical take tarball.LayerOption by @mzihlmann in #2403
build: add multi-architecture Cloud Build configurations for crane, gcrane, and krane by @tprussak in #2412
remote: resolve push-check credentials against the repository by @mzihlmann in #2411
Allow single-character repository paths by @semx in #2407
fix: add missing substitutions and workspace cleanup to new build files by @tprussak in #2413
remote: retry failed Puller and Pusher initialization by @iahsanGill in #2406
build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in #2405
build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in #2415
go.mod: bump Go version + add toolchain directive to replace .go-version file by @Subserial in #2416
fix: Fix new build options and provenance by @tprussak in #2417
fix(build): unify new build flow into cloudbuild_v2.yaml by @tprussak in #2419

New Contributors

@mzihlmann made their first contribution in #2403
@tprussak made their first contribution in #2412
@semx made their first contribution in #2407

Full Changelog: google/go-containerregistry@v0.21.9...v0.21.10

kubernetes/api (k8s.io/api)

`v0.37.0`

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

`v0.37.0`

Compare Source

kubernetes/client-go (k8s.io/client-go)

`v0.37.0`

Compare Source

cznic/sqlite (modernc.org/sqlite)

`v1.58.0`

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

`v0.25.0`

Compare Source

Highlights

This version of controller-runtime introduces a new experimental ReadYourWritesConsistency feature,
which ensures that all writes are reflected in subsequent reads from the default cache-backed client.
Stale client reads are arguably the biggest source of friction and sometimes bugs for controller
authors, providing this functionality at the library level eliminates that class of problems entirely.

Try it out by setting Client.EnableReadYourWritesConsistency: new(true) in your manager
and leave any feedback you may have on the tracking issue.

⚠️ Breaking Changes

Dependencies: Bump to k8s.io/* v1.37 (#3579 #3575 #3567 #3561 #3547 #3529 #3524)
Events: Add new EventRecorder interface (#3509)

✨ New Features

Client: Add a read-your-own-writes client (#3472)
Fakeclient: Add WithGlobalResourceVersionCounter (#3581)
Fakeclient: Add scale subresource support for Apply (#3569)
Metrics: Allow opt-in for client-go REST client metrics (#3510)
Metrics: Allow overriding client-go REST client metrics latency histogram buckets (#3573)
Source: Add TypedInformer source (#3520)
Webhooks: Allow to disable the webhook server by setting the port to -1 (#3481)

🐛 Bug Fixes

Cache: Fix goroutine leaks in cache Start() methods (#3565)
Client: Fix regression in Apply typed error handling (#3515)
Controller: Unlock when Controller.Start() returns with error (#3545)
Envtest: Fix envtest process stop on Windows (#3519)
Fakeclient: Allow updating managedFields through Update (#3585)
Fakeclient: Fix AddIndex panic when wrapped with an interceptor (#3583)
Fakeclient: Fix PartialObjectMeta handling (#3571)
Fakeclient: Support scale subresource get/update for unstructured objects (#3546)
Fakeclient: Update object on subresource apply (#3570)
PriorityQueue: Fix PriorityQueue deadlock on shutdown (#3540)
Testing/Process: Fix process Stop timeout error handling (#3523)

🌱 Others

LeaderElection: Pass Managers Logger to Leader Elector via Context (#3576)

🌱 CI & linters

Add copyright header validation & fix findings (#3544)
Bump to golangci-lint v2.12.1 (#3514)
Bump to golangci-lint v2.12.2 (#3532)
Bump to golangci-lint v2.13.1 (#3580)
Declare contents: read permissions for pr-verify action (#3517)
Revert "Migrate away from custom GitHub action approval workflow" (#3528)

📖 Additionally, there have been 7 contributions to our documentation and book. (#3513, #3521, #3531, #3551, #3562, #3563, #3566)

Dependencies

Added

github.com/go-openapi/swag/cmdutils: v0.27.1
github.com/go-openapi/swag/conv: v0.27.1
github.com/go-openapi/swag/fileutils: v0.27.1
github.com/go-openapi/swag/jsonutils/fixtures_test: v0.27.1
github.com/go-openapi/swag/jsonutils: v0.27.1
github.com/go-openapi/swag/loading: v0.27.1
github.com/go-openapi/swag/mangling: v0.27.1
github.com/go-openapi/swag/netutils: v0.27.1
github.com/go-openapi/swag/pools: v0.27.1
github.com/go-openapi/swag/stringutils: v0.27.1
github.com/go-openapi/swag/typeutils: v0.27.1
github.com/go-openapi/swag/yamlutils: v0.27.1
github.com/go-openapi/testify/enable/yaml/v2: v2.6.0
github.com/go-openapi/testify/v2: v2.6.0

Changed

github.com/Azure/go-ansiterm: 306776e → faa5f7b
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.30.0 → v1.32.0
github.com/antlr4-go/antlr/v4: v4.13.0 → v4.13.1
github.com/cncf/xds/go: ee656c7 → dba9d58
github.com/envoyproxy/go-control-plane/envoy: v1.36.0 → v1.37.0
github.com/envoyproxy/protoc-gen-validate: v1.3.0 → v1.3.3
github.com/fxamacker/cbor/v2: v2.9.0 → v2.9.1
github.com/go-jose/go-jose/v4: v4.1.3 → v4.1.4
github.com/go-openapi/jsonpointer: v0.21.0 → v1.0.0
github.com/go-openapi/jsonreference: v0.20.2 → v1.0.0
github.com/go-openapi/swag: v0.23.0 → v0.27.1
github.com/golang-jwt/jwt/v5: v5.3.0 → v5.3.1
github.com/google/cel-go: v0.26.0 → v0.29.2
github.com/grpc-ecosystem/grpc-gateway/v2: v2.27.7 → v2.29.0
github.com/klauspost/compress: v1.18.0 → v1.19.0
github.com/moby/term: v0.5.0 → v0.5.2
github.com/prometheus/client_golang: v1.23.2 → v1.24.0
github.com/prometheus/common: v0.67.5 → v0.70.0
github.com/prometheus/procfs: v0.19.2 → v0.21.1
github.com/sirupsen/logrus: v1.9.3 → v1.9.4
github.com/spf13/pflag: v1.0.9 → v1.0.10
github.com/stretchr/objx: v0.5.2 → v0.5.3
go.etcd.io/bbolt: v1.4.3 → v1.5.0
go.etcd.io/etcd/api/v3: v3.6.8 → v3.7.0
go.etcd.io/etcd/client/pkg/v3: v3.6.8 → v3.7.0
go.etcd.io/etcd/client/v3: v3.6.8 → v3.7.0
go.etcd.io/etcd/pkg/v3: v3.6.8 → v3.7.0
go.etcd.io/etcd/server/v3: v3.6.8 → v3.7.0
go.etcd.io/raft/v3: v3.6.0 → v3.7.0
go.opentelemetry.io/contrib/detectors/gcp: v1.39.0 → v1.43.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.65.0 → v0.68.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.65.0 → v0.69.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.40.0 → v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.40.0 → v1.44.0
go.opentelemetry.io/otel/metric: v1.41.0 → v1.44.0
go.opentelemetry.io/otel/sdk/metric: v1.40.0 → v1.44.0
go.opentelemetry.io/otel/sdk: v1.40.0 → v1.44.0
go.opentelemetry.io/otel/trace: v1.41.0 → v1.44.0
go.opentelemetry.io/otel: v1.41.0 → v1.44.0
go.opentelemetry.io/proto/otlp: v1.9.0 → v1.10.0
go.yaml.in/yaml/v2: v2.4.3 → v2.4.4
golang.org/x/crypto: v0.47.0 → v0.54.0
golang.org/x/exp: 944ab1f → 746e56f
golang.org/x/mod: v0.32.0 → v0.37.0
golang.org/x/net: v0.49.0 → v0.57.0
golang.org/x/oauth2: v0.34.0 → v0.36.0
golang.org/x/sync: v0.19.0 → v0.22.0
golang.org/x/sys: v0.40.0 → v0.47.0
golang.org/x/telemetry: bd525da → 59b4966
golang.org/x/term: v0.39.0 → v0.45.0
golang.org/x/text: v0.33.0 → v0.40.0
golang.org/x/time: v0.14.0 → v0.15.0
golang.org/x/tools: v0.41.0 → v0.47.0
gonum.org/v1/gonum: v0.16.0 → v0.17.0
google.golang.org/genproto/googleapis/api: 8636f87 → 3dc84a4
google.golang.org/genproto/googleapis/rpc: 8636f87 → 3dc84a4
google.golang.org/grpc: v1.79.3 → v1.82.1
k8s.io/api: v0.36.0 → v0.37.0
k8s.io/apiextensions-apiserver: v0.36.0 → v0.37.0
k8s.io/apimachinery: v0.36.0 → v0.37.0
k8s.io/apiserver: v0.36.0 → v0.37.0
k8s.io/client-go: v0.36.0 → v0.37.0
k8s.io/code-generator: v0.36.0 → v0.37.0
k8s.io/component-base: v0.36.0 → v0.37.0
k8s.io/gengo/v2: ec3ebc5 → 25e2208
k8s.io/kms: v0.36.0 → v0.37.0
k8s.io/kube-openapi: 43fb72c → d427ff9
k8s.io/streaming: v0.36.0 → v0.37.0
k8s.io/utils: b8788ab → be93311
sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.34.0 → v0.36.0
sigs.k8s.io/structured-merge-diff/v6: v6.3.2 → v6.4.2

Removed

github.com/creack/pty: v1.1.9
github.com/gogo/protobuf: v1.3.2
github.com/josharian/intern: v1.0.0
github.com/kr/pty: v1.1.1
github.com/mailru/easyjson: v0.7.7
github.com/matttproud/golang_protobuf_extensions: v1.0.1
github.com/stoewer/go-strcase: v1.3.0

Thanks to all our contributors! 😊

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-08-27T22:38:00Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

14 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=2 days

Details:

Package	Change
`github.com/docker/cli`	`v29.6.2+incompatible` -> `v29.7.2+incompatible`
`github.com/fluxcd/pkg/apis/kustomize`	`v1.19.1` -> `v1.19.2`
`github.com/fxamacker/cbor/v2`	`v2.9.0` -> `v2.9.1`
`github.com/go-openapi/jsonpointer`	`v0.21.0` -> `v1.0.0`
`github.com/go-openapi/jsonreference`	`v0.20.2` -> `v1.0.0`
`github.com/go-openapi/swag`	`v0.23.0` -> `v0.27.1`
`github.com/klauspost/compress`	`v1.19.1` -> `v1.19.2`
`golang.org/x/time`	`v0.14.0` -> `v0.15.0`
`k8s.io/apiextensions-apiserver`	`v0.36.2` -> `v0.37.0`
`k8s.io/kube-openapi`	`v0.0.0-20260317180543-43fb72c5454a` -> `v0.0.0-20260721132016-d427ff9ee9ad`
`k8s.io/utils`	`v0.0.0-20260210185600-b8788abfbbc2` -> `v0.0.0-20260626114624-be93311217bd`
`modernc.org/libc`	`v1.74.4` -> `v1.75.6`
`modernc.org/memory`	`v1.11.0` -> `v1.12.1`
`sigs.k8s.io/structured-merge-diff/v6`	`v6.3.3` -> `v6.4.2`

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot requested a review from roberteggl as a code owner August 27, 2026 22:37

renovate Bot added the dependencies label Aug 27, 2026

renovate Bot enabled auto-merge (squash) August 27, 2026 22:37

renovate Bot force-pushed the renovate/go-modules-(non-major) branch from c4408d3 to 4c8384c Compare August 28, 2026 19:41

renovate Bot changed the title ~~chore(deps): update module github.com/google/go-containerregistry to v0.22.0~~ chore(deps): update go modules (non-major) Aug 28, 2026

renovate Bot force-pushed the renovate/go-modules-(non-major) branch 3 times, most recently from c218f3e to 9515264 Compare August 29, 2026 20:43

renovate Bot changed the title ~~chore(deps): update go modules (non-major)~~ chore(deps): update go modules (non-major) to v0.37.0 Aug 29, 2026

renovate Bot force-pushed the renovate/go-modules-(non-major) branch from 9515264 to b94125f Compare August 30, 2026 00:28

renovate Bot changed the title ~~chore(deps): update go modules (non-major) to v0.37.0~~ chore(deps): update go modules (non-major) Aug 30, 2026

renovate Bot force-pushed the renovate/go-modules-(non-major) branch from b94125f to 9c79b2c Compare September 1, 2026 10:16

renovate Bot changed the title ~~chore(deps): update go modules (non-major)~~ chore(deps): update go modules (non-major) to v0.37.0 Sep 1, 2026

renovate Bot force-pushed the renovate/go-modules-(non-major) branch from 9c79b2c to 8ae8671 Compare September 1, 2026 17:54

renovate Bot changed the title ~~chore(deps): update go modules (non-major) to v0.37.0~~ chore(deps): update go modules (non-major) Sep 1, 2026

renovate Bot force-pushed the renovate/go-modules-(non-major) branch 6 times, most recently from ccea0d7 to c0b1113 Compare September 6, 2026 01:42

roberteggl approved these changes Sep 8, 2026

View reviewed changes

renovate Bot force-pushed the renovate/go-modules-(non-major) branch from c0b1113 to 2ec3cfd Compare September 8, 2026 20:42

chore(deps): update go modules (non-major)

378b7f6

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/go-modules-(non-major) branch from 2ec3cfd to 378b7f6 Compare September 9, 2026 01:10

renovate Bot merged commit 5c58773 into main Sep 9, 2026
14 checks passed

renovate Bot deleted the renovate/go-modules-(non-major) branch September 9, 2026 07:00

Navigation Menu

chore(deps): update go modules (non-major) - #43

chore(deps): update go modules (non-major)#43
renovate[bot] merged 1 commit into
mainfrom
renovate/go-modules-(non-major)

renovate Bot commented Aug 27, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 27, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Aug 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changelog

Container images

Changelog

Container images

What's Changed

New Contributors

What's Changed

New Contributors

Highlights

⚠️ Breaking Changes

✨ New Features

🐛 Bug Fixes

🌱 Others

🌱 CI & linters

Dependencies

Added

Changed

Removed

Configuration

Uh oh!

renovate Bot commented Aug 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Aug 27, 2026 •

edited

Loading

renovate Bot commented Aug 27, 2026 •

edited

Loading