Skip to content

Bump the go-modules group with 4 updates - #1726

Merged
pacostas merged 2 commits into
mainfrom
dependabot/go_modules/go-modules-11714d8c04
Oct 9, 2026
Merged

pacostas merged 2 commits into
mainfrom
dependabot/go_modules/go-modules-11714d8c04

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 4 updates: cloud.google.com/go/storage, github.com/anchore/stereoscope, github.com/anchore/syft and github.com/aws/aws-sdk-go-v2/service/s3.

Updates cloud.google.com/go/storage from 1.68.0 to 1.69.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.69.0

1.69.0 (2026-10-01)

Features

Bug Fixes

  • storage: Add App Hub storage.googleapis.com prefix to destination.id (#20569) (2bca92a)
  • storage: Follow-ups for read stall retry (#20577) (24eacd5)
  • storage: Update PartSize documentation and optimize cleanup (#19930) (3d09abf)
  • various: Address format directive issues (#20547) (e2e1047)
Commits
  • 1b10ddf chore: release main (#20515)
  • e6a8b83 chore: address stale grpc dependency declarations (#20539)
  • 56ce1ca test(spanner): unflake TestIntegration_DbRemovalIsFatal across all channels (...
  • 5300f6a chore(main): release storage 1.68.0 (#20537)
  • 8a55dee fix(storage): minor documentation fixes (#20531)
  • 19651ea feat(google/cloud/backupdr/v1beta): add backupdr (#20534)
  • c5626ad feat(google/cloud/networkservices/v1beta1): add networkservices (#20533)
  • e6f37a3 feat: update API sources and regenerate (#20526)
  • 6f663ea chore(storage): add TryGet to BufferPool and clean up global memory limit (#2...
  • be88c6a test(spanner): unflake TestIntegration_DbRemovalRecovery as TestIntegration_D...
  • Additional commits viewable in compare view

Updates github.com/anchore/stereoscope from 0.3.2 to 0.3.3

Release notes

Sourced from github.com/anchore/stereoscope's releases.

v0.3.3

Bug Fixes

Dependencies

95 dependency changes (49 updated, 41 added, 5 removed). 4 vulnerabilities remediated.

🟢 Remediated (4)

Toolchains (1)

  • Go minimum version: 1.26.3 → 1.26.8
  • github.com/Microsoft/hcsshim v0.15.0-rc.1 → v0.15.0-rc.4
  • github.com/anchore/go-logger v0.1.1 → v0.2.0
  • github.com/aws/aws-sdk-go-v2 v1.41.2 → v1.41.7
  • github.com/aws/aws-sdk-go-v2/config v1.32.10 → v1.32.17
  • github.com/aws/aws-sdk-go-v2/credentials v1.19.10 → v1.19.16
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.18 → v1.18.23
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.18 → v1.4.23
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.18 → v2.7.23
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.5 → v1.13.9
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.18 → v1.13.23
  • github.com/aws/aws-sdk-go-v2/service/signin v1.0.6 → v1.0.11
  • github.com/aws/aws-sdk-go-v2/service/sso v1.30.11 → v1.30.17
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.15 → v1.35.21
  • github.com/aws/aws-sdk-go-v2/service/sts v1.41.7 → v1.42.1
  • github.com/aws/smithy-go v1.24.1 → v1.25.1
  • github.com/containerd/containerd/api v1.11.1 → v1.12.0
  • github.com/containerd/containerd/v2 v2.3.5 → v2.4.1 (🟢 remediated GHSA-pg57-6jwg-q645)
  • github.com/containerd/log v0.1.0 → v0.2.0
  • github.com/containerd/ttrpc v1.2.8 → v1.2.9
  • github.com/containerd/typeurl/v2 v2.2.3 → v2.3.0
  • github.com/docker/cli v29.8.0+incompatible → v29.8.1+incompatible
  • github.com/docker/docker-credential-helpers v0.9.5 → v0.9.8
  • github.com/erofs/go-erofs v0.3.0 → v0.3.1
  • github.com/felixge/httpsnoop v1.0.4 → v1.1.0
  • github.com/go-logr/logr v1.4.3 → v1.4.4
  • github.com/golang/mock v1.1.1 → v1.7.0-rc.1

... (truncated)

Commits
  • 6af6ad0 chore(deps): update anchore dependencies (#677)
  • e952f58 fix(imagetest): write fixture tars atomically (#712)
  • d3da8d4 chore(deps): bump github.com/containerd/containerd/v2 (#711)
  • c3518f8 chore(deps): bump github.com/containerd/containerd/v2 (#710)
  • b9ab5ba chore(deps): bump github.com/docker/cli (#709)
  • e94b8e3 chore(deps): bump go.podman.io/image/v5 from 5.40.0 to 5.41.2 (#708)
  • d44e89a chore(deps): bump github.com/containerd/containerd/v2 (#706)
  • fc2d54a chore(deps): bump github.com/sigstore/fulcio from 1.8.5 to 1.8.6 (#702)
  • f9bf87b Adding container-storage as a provider for daemonless Podman and Buildah Supp...
  • bfcd7fa fix(test): correct hardlink expectations for podman-built images (#701)
  • Additional commits viewable in compare view

Updates github.com/anchore/syft from 1.52.0 to 1.53.0

Commits
  • ae649b0 chore(deps): update anchore dependencies (#5304)
  • f76ae8e feat: report the perl interpreter as a cpan package (#5132)
  • 509f1a1 fix(java): filter Tomcat server CPE for embedded EL (#5322)
  • 8d5567c feat: catalog CPAN distributions installed by perl clients (#5131)
  • d61c2ca fix(binary): correct traefik version detection on big-endian arches (#5281)
  • 0bbcff1 Fix hang when scanning a Java resource adapter (.rar) file (#5348)
  • f21e439 chore(deps): update SPDX license list (#5315)
  • c511d50 fix: match opensource.org license URLs across SPDX URL forms (#5361)
  • fdeb78f Speed up unit tests in CI (#5360)
  • 6ac7afb Fix missing file hashes when running on windows system (#5341)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.4 to 1.114.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 4 updates: [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go), [github.com/anchore/stereoscope](https://github.com/anchore/stereoscope), [github.com/anchore/syft](https://github.com/anchore/syft) and [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2).


Updates `cloud.google.com/go/storage` from 1.68.0 to 1.69.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@compute/v1.68.0...compute/v1.69.0)

Updates `github.com/anchore/stereoscope` from 0.3.2 to 0.3.3
- [Release notes](https://github.com/anchore/stereoscope/releases)
- [Changelog](https://github.com/anchore/stereoscope/blob/main/RELEASE.md)
- [Commits](anchore/stereoscope@v0.3.2...v0.3.3)

Updates `github.com/anchore/syft` from 1.52.0 to 1.53.0
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v1.52.0...v1.53.0)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.113.4 to 1.114.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.113.4...service/s3/v1.114.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.69.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/anchore/stereoscope
  dependency-version: 0.3.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/syft
  dependency-version: 1.53.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.114.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 8, 2026
@dependabot
dependabot Bot requested review from a team as code owners October 8, 2026 16:56
@dependabot dependabot Bot added the go Pull requests that update Go code label Oct 8, 2026
@dependabot
dependabot Bot requested review from pacostas and removed request for a team October 8, 2026 16:56
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 8, 2026
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Oct 8, 2026
@pacostas
pacostas merged commit 303cf3b into main Oct 9, 2026
11 checks passed
@pacostas
pacostas deleted the dependabot/go_modules/go-modules-11714d8c04 branch October 9, 2026 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code semver:patch A change requiring a patch version bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants