Skip to content

Bump the minor-patch group across 2 directories with 10 updates#637

Merged
codysoyland merged 1 commit into
mainfrom
dependabot/go_modules/minor-patch-56fb9aabed
Jun 3, 2026
Merged

Bump the minor-patch group across 2 directories with 10 updates#637
codysoyland merged 1 commit into
mainfrom
dependabot/go_modules/minor-patch-56fb9aabed

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-patch group with 6 updates in the / directory:

Package From To
github.com/go-openapi/runtime 0.29.3 0.32.3
github.com/google/certificate-transparency-go 1.3.2 1.3.3
github.com/in-toto/attestation 1.1.2 1.2.0
github.com/sigstore/rekor 1.5.0 1.5.2
github.com/sigstore/timestamp-authority/v2 2.0.6 2.1.2
github.com/transparency-dev/formats 0.1.0 0.1.1

Bumps the minor-patch group with 1 update in the /examples/oci-image-verification directory: github.com/google/go-containerregistry.

Updates github.com/go-openapi/runtime from 0.29.3 to 0.32.3

Release notes

Sourced from github.com/go-openapi/runtime's releases.

v0.32.3

0.32.3 - 2026-06-02

Full Changelog: go-openapi/runtime@v0.32.2...v0.32.3

6 commits in this release.


Implemented enhancements

  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...

Documentation

Miscellaneous tasks

Updates


People who contributed to this release


runtime license terms

License

Per-module changes


... (truncated)

Commits
  • 6c3a7fd chore: prepare release v0.32.3
  • 1733ca7 chore: updated dependencies (#479)
  • 7a7ea03 feat(ci): added shared workflow for bot-pr monitoring
  • d4d7f7d doc: updated contributors file
  • 6937b17 build(deps): bump the other-dependencies group across 2 directories with 3 up...
  • 4361051 build(deps): bump the go-openapi-dependencies group across 2 directories with...
  • a357ecf chore: prepare release v0.32.2
  • 10b4d12 fix(client): added a guard to avoid the client to panic (#474)
  • ea80e5a chore: prepare release v0.32.1
  • 01f5c55 doc: documented SkipAuth feature with build tag (#472)
  • Additional commits viewable in compare view

Updates github.com/go-openapi/strfmt from 0.26.1 to 0.26.3

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.26.3

0.26.3 - 2026-05-31

Full Changelog: go-openapi/strfmt@v0.26.2...v0.26.3

15 commits in this release.


Documentation

Miscellaneous tasks

Updates


People who contributed to this release


strfmt license terms

[License][license-url]

... (truncated)

Commits
  • d93543f chore: prepare release v0.26.3
  • 7841767 build(deps): bump the other-dependencies group across 3 directories with 2 up...
  • f041a88 build(deps): bump golang.org/x/net
  • 6ac9968 build(deps): bump the go-openapi-dependencies group across 2 directories with...
  • 1d31844 fix(ci): monitor - work around dependabot identity requirements
  • 1531efc fix(ci): typo in sha
  • cb7dd25 fix(ci): updated shared ci worflows (fix monitor-bot identity)
  • 62db01a fix(ci): updated shared ci worflows (fix monitor-bot permissions)
  • c7cf6fb fix(ci): updated shared ci worflows (fix monitor-bot filter) (#259)
  • c2e3626 doc: updated contributors file
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag/conv from 0.25.5 to 0.26.0

Release notes

Sourced from github.com/go-openapi/swag/conv's releases.

v0.26.0

0.26.0 - 2026-04-15

Full Changelog: go-openapi/swag@v0.25.5...v0.26.0

14 commits in this release.


Implemented enhancements

  • feat(jsonname): added new json name provider more respectful of go co… by @​fredbi in #195 ...

Documentation

Code quality

Miscellaneous tasks

Updates


People who contributed to this release


... (truncated)

Commits
  • 10f02a4 chore: prepare release v0.26.0
  • 543ed20 feat(jsonname): added new json name provider more respectful of go convention...
  • 15feaa1 doc: updated contributors file
  • be70d5e build(deps): bump the go-openapi-dependencies group across 15 directories wit...
  • e3a465d chore: bump go directive to 1.25.0 (#192)
  • 544d0de doc: add portable agentic instructions (#191)
  • 2345c91 doc: update discord link (#190)
  • 6aaa57c build(deps): bump the other-dependencies group across 3 directories with 1 up...
  • 524ef32 build(deps): bump the development-dependencies group with 7 updates
  • 228d6ed ci: fixed dependabot path (#187)
  • Additional commits viewable in compare view

Updates github.com/google/certificate-transparency-go from 1.3.2 to 1.3.3

Release notes

Sourced from github.com/google/certificate-transparency-go's releases.

v1.3.3

What's Changed

CTFE

Tools

Log list library

Submission proxy

Other

Misc

Dependency updates

... (truncated)

Changelog

Sourced from github.com/google/certificate-transparency-go's changelog.

v1.3.3

CTFE

Tools

Log list library

Submission proxy

Other

Misc

Dependency updates

... (truncated)

Commits
  • e8f9317 Support tiled logs in the loglist3 logfilter functions (#1762)
  • f571c2e Cap request body size in submission proxy (#1754)
  • b0a55e9 Bump golangci-lint version to v2.10.1 (#1769)
  • f8d8cda Bump the docker-deps group across 2 directories with 2 updates (#1766)
  • e030cb1 Bump github/codeql-action from 4.32.0 to 4.32.4 in the all-deps group (#1767)
  • 537ff1f Bump the all-deps group with 7 updates (#1768)
  • 8c5792c Remove internal witness (#1765)
  • a599ccc Add FindTiledLog* functions (#1763)
  • 3782b4d Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#1764)
  • a6d1ef5 Bump golang.org/x/crypto from 0.46.0 to 0.47.0 in the all-deps group (#1756)
  • Additional commits viewable in compare view

Updates github.com/in-toto/attestation from 1.1.2 to 1.2.0

Release notes

Sourced from github.com/in-toto/attestation's releases.

v1.2.0

Core Attestation Framework Spec Changes

New / Updated Predicates

Language Bindings Changes

Other Changes

New Contributors

Full Changelog: in-toto/attestation@v1.1.2...v1.2.0

Commits
  • df02077 Add SVR to the list of predicates and fix some issues in the list (#537)
  • cd3e5c7 Merge pull request #536 from marcelamelara/msm-update-maintainers
  • b31d198 Apply suggestions from code review
  • 4527976 Add Aditya as maintainer, move Mikhail and Tom to emeritus
  • 7bfb269 Ensure the Envelope spec meets ITE-5 (#431)
  • ad76f68 Clarify that non-cryptographic digests may use custom value encoding (#517)
  • 071e175 Bump actions/setup-node from 6.2.0 to 6.3.0 (#535)
  • cad7a33 Bump markdownlint-cli from 0.47.0 to 0.48.0 (#533)
  • 913a235 Bump actions/setup-go from 6.2.0 to 6.3.0 (#531)
  • 36c27c1 Merge pull request #530 from in-toto/dependabot/npm_and_yarn/markdown-it-14.1.1
  • Additional commits viewable in compare view

Updates github.com/sigstore/rekor from 1.5.0 to 1.5.2

Release notes

Sourced from github.com/sigstore/rekor's releases.

v1.5.2

Changelog

  • 759b98e2a7c39ea9779b6a51299c5f0f987f8802 alpine: Enforce max size limit on decompression (#2831)
  • c7e77ee26edd8631dd417166907093a9f13b85e5 Support restricting kinds on insertion (#2814)
  • a10818a8778dcb58eb582d00ffda4b2c86bf190b fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#2812)
  • 8a2f3a2dd023b81ad8b63e2f365676ec438dc9fa add checks to ensure returned entries match client inputs to rekor-cli (#2799)
  • 0e88bac01d1173b8b2cbc8ed790106441573bbdb add nil pointer check to resolve fuzzing crash (#2807)
  • 93da954478a2ffb1821d4904a80d9a5cbe268324 client: surface last-response details after retries are exhausted (#2796)
  • 4d67ecd8ec810bc6af9761ad10ebd2ac899cfdbd Fix internal error detail leakage in 500 responses (#2801)
  • b34ca94fc01405cb50acb956cc181d57382a6b2d add defensive check to ensure tid is in config ahead of getting client (#2795)
  • 656c832ab90feef91f5dcc751ae1cb851c73f4bd restapi: include inactiveShards in the homepage total count (#2797)

Thanks for all contributors!

v1.5.1

Changelog

  • 2d46808ce98c3dd26158364ae28f4c49921c9b0d optimize memory for DSSE v0.0.1 processing (#2766)
  • 6de110d1deb7fa2d9145584fd9446608ce1a777c return correct errors in rare failure situations (#2753)
  • 7ff7c692f51d6060c6eebba0480536f5ba28abb5 raise error if decoding hash fails during inclusion proof (#2754)

Thanks for all contributors!

Changelog

Sourced from github.com/sigstore/rekor's changelog.

v1.5.1

Features

  • optimize memory for DSSE v0.0.1 processing (#2766)

Bug Fixes

  • Type assert the entry bundle when verifying inclusion proof (#2755)
  • return correct errors in rare failure situations (#2753)
  • raise error if decoding hash fails during inclusion proof (#2754)
Commits
  • 3b75cd9 build(deps): Bump the all group across 1 directory with 7 updates (#2829)
  • 759b98e alpine: Enforce max size limit on decompression (#2831)
  • c7e77ee Support restricting kinds on insertion (#2814)
  • a10818a fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#...
  • c31f3fc build(deps): Bump cloud.google.com/go/profiler from 0.4.3 to 0.6.0
  • f2a9fb0 build(deps): Bump go.uber.org/zap from 1.27.1 to 1.28.0
  • e3ba248 build(deps): Bump golang in the all group across 1 directory
  • 62e5ddd build(deps): Bump github.com/go-openapi/swag from 0.25.5 to 0.26.0
  • f4f91d5 build(deps): Bump github.com/tink-crypto/tink-go-awskms/v2 to v3 (#2827)
  • 9bc540f build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2820)
  • Additional commits viewable in compare view

Updates github.com/sigstore/timestamp-authority/v2 from 2.0.6 to 2.1.2

Release notes

Sourced from github.com/sigstore/timestamp-authority/v2's releases.

v2.1.2

Changelog

v2.1.2 patches a bug where expired TSA certificates would be rejected, which is not aligned with RFC 3161.

  • 21dff8b84c13344aa4a931d9779c514e4b7f8538 Validate TSA certificate chain at timestamp issuance time (#1384)

v2.1.1

What's Changed

v2.1.1 drops the Go version back down to 1.25.0.

Full Changelog: sigstore/timestamp-authority@v2.1.0...v2.1.1

v2.1.0

What's Changed

Full Changelog: sigstore/timestamp-authority@v2.0.6...v2.1.0

Commits
  • 21dff8b Validate TSA certificate chain at timestamp issuance time (#1384)
  • 1d43d95 chore(deps): bump the gomod group with 2 updates (#1383)
  • c9c7574 Switch utility for PEM encryption (#1378)
  • ca10d92 chore(deps): bump the gomod group with 5 updates (#1381)
  • 918a94f chore(deps): bump cloud.google.com/go/security from 1.24.0 to 1.25.0 (#1382)
  • d9aee1b chore(deps): bump golang from 6df14f4 to 2d6c802 (#1379)
  • f695279 chore(deps): bump golang from 313faae to 6df14f4 (#1368)
  • 5a15c60 chore(deps): bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0 (#1371)
  • b72b967 chore(deps): bump github.com/go-openapi/runtime from 0.31.0 to 0.32.2 (#1377)
  • 1e20100 chore(deps): bump go.step.sm/crypto in the gomod group (#1376)
  • Additional commits viewable in compare view

Updates github.com/transparency-dev/formats from 0.1.0 to 0.1.1

Release notes

Sourced from github.com/transparency-dev/formats's releases.

v0.1.1

What's Changed

Deps

@dependabot dependabot Bot requested a review from a team as a code owner June 2, 2026 15:19
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 2, 2026
@codysoyland

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps the minor-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) | `0.29.3` | `0.32.3` |
| [github.com/google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) | `1.3.2` | `1.3.3` |
| [github.com/in-toto/attestation](https://github.com/in-toto/attestation) | `1.1.2` | `1.2.0` |
| [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.5.0` | `1.5.2` |
| [github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority) | `2.0.6` | `2.1.2` |
| [github.com/transparency-dev/formats](https://github.com/transparency-dev/formats) | `0.1.0` | `0.1.1` |

Bumps the minor-patch group with 1 update in the /examples/oci-image-verification directory: [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry).


Updates `github.com/go-openapi/runtime` from 0.29.3 to 0.32.3
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](go-openapi/runtime@v0.29.3...v0.32.3)

Updates `github.com/go-openapi/strfmt` from 0.26.1 to 0.26.3
- [Release notes](https://github.com/go-openapi/strfmt/releases)
- [Commits](go-openapi/strfmt@v0.26.1...v0.26.3)

Updates `github.com/go-openapi/swag/conv` from 0.25.5 to 0.26.0
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.5...v0.26.0)

Updates `github.com/google/certificate-transparency-go` from 1.3.2 to 1.3.3
- [Release notes](https://github.com/google/certificate-transparency-go/releases)
- [Changelog](https://github.com/google/certificate-transparency-go/blob/master/CHANGELOG.md)
- [Commits](google/certificate-transparency-go@v1.3.2...v1.3.3)

Updates `github.com/in-toto/attestation` from 1.1.2 to 1.2.0
- [Release notes](https://github.com/in-toto/attestation/releases)
- [Commits](in-toto/attestation@v1.1.2...v1.2.0)

Updates `github.com/sigstore/rekor` from 1.5.0 to 1.5.2
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](sigstore/rekor@v1.5.0...v1.5.2)

Updates `github.com/sigstore/timestamp-authority/v2` from 2.0.6 to 2.1.2
- [Release notes](https://github.com/sigstore/timestamp-authority/releases)
- [Changelog](https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md)
- [Commits](sigstore/timestamp-authority@v2.0.6...v2.1.2)

Updates `github.com/transparency-dev/formats` from 0.1.0 to 0.1.1
- [Release notes](https://github.com/transparency-dev/formats/releases)
- [Commits](transparency-dev/formats@v0.1.0...v0.1.1)

Updates `golang.org/x/crypto` from 0.50.0 to 0.52.0
- [Commits](golang/crypto@v0.50.0...v0.52.0)

Updates `github.com/google/go-containerregistry` from 0.20.7 to 0.21.6
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.20.7...v0.21.6)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
  dependency-version: 0.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/go-openapi/strfmt
  dependency-version: 0.26.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github.com/go-openapi/swag/conv
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/google/certificate-transparency-go
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/in-toto/attestation
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/rekor
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github.com/sigstore/timestamp-authority/v2
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: github.com/transparency-dev/formats
  dependency-version: 0.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/minor-patch-56fb9aabed branch from fdb44fe to 9777f19 Compare June 2, 2026 23:13
@codysoyland codysoyland merged commit 40d743a into main Jun 3, 2026
13 checks passed
@codysoyland codysoyland deleted the dependabot/go_modules/minor-patch-56fb9aabed branch June 3, 2026 13:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant