Skip to content

build(deps): bump the all group across 1 directory with 2 updates - #690

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-b7da59e058
Open

build(deps): bump the all group across 1 directory with 2 updates#690
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-b7da59e058

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all group with 1 update in the / directory: github.com/protobom/protobom.

Updates github.com/protobom/protobom from 0.5.9-0.20260808221622-938f35bcd0da to 0.6.1

Release notes

Sourced from github.com/protobom/protobom's releases.

v0.6.1

No release notes provided.

v0.6.0

What's New

This version adds full support for SPDX 3.0.1 as well as the missing serializers/unserializers for spdx 2.2 and tag value serialization. It also adds some important fixes in the graph API as well as fixes to various races across the codebase.

What's Changed

New Contributors

Full Changelog: protobom/protobom@v0.5.8...v0.6.0

Commits

Updates github.com/sirupsen/logrus from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.2

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

  • update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.2

Changed:

  • Update github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency.
Commits
  • 6d6a132 Merge pull request #1586 from thaJeztah/prepare_v1.10.2
  • 4f94653 update changelog for v1.10.2
  • 87434bb Merge pull request #1585 from thaJeztah/bump_testify
  • e7d2120 chore(deps): bump github.com/stretchr/testify v1.12.1
  • See full diff in compare view

@dependabot dependabot Bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Aug 31, 2026
@kubernetes-prow kubernetes-prow Bot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Aug 31, 2026
@kubernetes-prow

kubernetes-prow Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@kubernetes-prow

kubernetes-prow Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign cpanato for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubernetes-prow kubernetes-prow Bot added sig/release Categorizes an issue or PR as relevant to SIG Release. size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Aug 31, 2026
@dependabot dependabot Bot changed the title build(deps): bump the all group with 2 updates build(deps): bump the all group across 1 directory with 2 updates Sep 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/all-b7da59e058 branch from 1aa3687 to d0c3614 Compare September 2, 2026 03:42
@dependabot
build(deps): bump the all group across 1 directory with 2 updates
334506b 
Bumps the all group with 1 update in the / directory: [github.com/protobom/protobom](https://github.com/protobom/protobom).


Updates `github.com/protobom/protobom` from 0.5.9-0.20260808221622-938f35bcd0da to 0.6.1
- [Release notes](https://github.com/protobom/protobom/releases)
- [Commits](https://github.com/protobom/protobom/commits/v0.6.1)

Updates `github.com/sirupsen/logrus` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.10.1...v1.10.2)

---
updated-dependencies:
- dependency-name: github.com/protobom/protobom
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/all-b7da59e058 branch from d0c3614 to 334506b Compare September 4, 2026 03:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jimangel jimangel Awaiting requested review from jimangel
@salaxander salaxander Awaiting requested review from salaxander

Assignees

No one assigned

Labels

area/dependency Issues or PRs related to dependency changes cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. sig/release Categorizes an issue or PR as relevant to SIG Release. size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants