Skip to content

deps: bump the production-dependencies group with 16 updates - #699

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/production-dependencies-3b44227f8b
Open

deps: bump the production-dependencies group with 16 updates#699
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/production-dependencies-3b44227f8b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 16 updates:

Package From To
buf.build/go/protovalidate 1.3.0 1.4.0
github.com/go-jose/go-jose/v4 4.1.4 4.1.5
github.com/moby/moby/api 1.55.0 1.56.0
google.golang.org/api 0.294.0 0.297.0
github.com/ebitengine/purego 0.10.2 0.11.0
github.com/googleapis/enterprise-certificate-proxy 0.3.20 0.3.21
github.com/googleapis/gax-go/v2 2.24.0 2.24.1
github.com/klauspost/compress 1.19.2 1.20.0
github.com/moby/moby/client 0.5.1 0.6.0
github.com/prometheus/client_model 0.6.2 0.6.3
github.com/prometheus/common 0.70.1 0.71.0
github.com/prometheus/procfs 0.21.1 0.22.0
github.com/shirou/gopsutil/v4 4.26.7 4.26.8
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.70.0 0.71.0
golang.org/x/crypto 0.55.0 0.56.0
golang.org/x/exp 0.0.0-20260718201538-764159d718ef 0.0.0-20260820142414-ca536658362e

Updates buf.build/go/protovalidate from 1.3.0 to 1.4.0

Release notes

Sourced from buf.build/go/protovalidate's releases.

v1.4.0

What's Changed

Full Changelog: bufbuild/protovalidate-go@v1.3.0...v1.4.0

Commits
  • 5c72b38 Bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.36.12-...
  • aa3ed84 Update deps and minimum Go version to 1.26 (#337)
  • ff9e432 Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 in the go group (#336)
  • 99a2379 Bump the go group with 4 updates (#334)
  • See full diff in compare view

Updates github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.5

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.5

Fixed security issues

  • cipher/cbc_hmac: don't panic on empty ciphertext (#292)
  • cipher/cbc_hmac: don't panic on invalid key (#291)
  • json: limit stack depth (#290)
  • jwt: reject out-of-range NumericDate values (#278)
  • Check alg against pubkey curve during verify. (#293)
  • Reject malformed Ed25519 JWKs (#250)
  • jws: choose verification key per-signature (#243)

Changed

  • Verify OpaqueSigner's Public() return is public (#260)
  • jws: skip signature on ErrJWKSKidNotFound (#248)
  • Handle JWE JSON without protected header (#240)
  • jws: don't strip internal whitespace before parsing JSON (#239)
  • jws: fewer calls to OpaqueSigner.Public() (#224)
  • Return a specific error when parsing empty string (#216)
  • Reject typed nil at Verify time (#285)
Commits

Updates github.com/moby/moby/api from 1.55.0 to 1.56.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.0

1.56.0

Changelog

  • GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538
  • POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463
  • api/docs: sync API docs v1.25 - v1.55. moby/moby#53246
  • api/swagger: Align Healthcheck name with Go struct. moby/moby#53567
  • api/types/plugin: Deprecated plugin.Privileges sorting methods in favor of slices.SortFunc. moby/moby#53511
  • api/types/plugin: fix Privileges Swap implementation. moby/moby#53510
  • api: Bump to 1.56. moby/moby#53425
  • api: document Task.NetworksAttachments in the swagger definition. moby/moby#53082
  • api: remove gotest.tools from tests. moby/moby#53535
  • api: swagger: Use int64 for build query params. moby/moby#53520
  • api: use blackbox testing. moby/moby#53525
  • Fix API reference documenting an unsupported names filter for GET /configs. moby/moby#53447
Commits
  • 9b2179d Merge pull request #53572 from vvoland/api-docs-cut
  • 575cf82 Merge pull request #53571 from thaJeztah/bump_tools
  • 20beedb api/docs: Cut v1.56
  • bb86302 Merge pull request #53569 from vvoland/afvsock-lsm
  • 65be55a Merge pull request #53513 from thaJeztah/daemon_fix_list
  • 0af79c4 Merge pull request #53570 from vvoland/process-release
  • 7d1ce6a Merge pull request #53568 from renovate-bot/renovate/github.com-mdlayher-sock...
  • 0df1a00 Dockerfile: update cli v29.7.2, compose v5.5.1, buildx v0.37.0
  • e1d06bd Drop replace rules
  • b40d37e Merge pull request #53359 from vvoland/ext-namegenerator
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.294.0 to 0.297.0

Release notes

Sourced from google.golang.org/api's releases.

v0.297.0

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

v0.296.0

0.296.0 (2026-08-31)

Features

v0.295.0

0.295.0 (2026-08-28)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.297.0 (2026-09-01)

Features

  • Move to go1.26.0 as the lowest supported go version (#3724) (7770e01)

0.296.0 (2026-08-31)

Features

0.295.0 (2026-08-28)

Features

Commits

Updates github.com/ebitengine/purego from 0.10.2 to 0.11.0

Release notes

Sourced from github.com/ebitengine/purego's releases.

v0.11.0

  • Require Go 1.25 or later (#469)
  • Support structs on Windows amd64/arm64, Android, iOS, loong64, and ppc64le (#237, #466, #473, #475)
  • Support structs as arguments and return values in callbacks (#225, #418)
  • Add NetBSD (amd64, arm64) as a Tier 2 platform (#349)
  • Support the ARM soft-float ABI (#490)
  • Support linux/s390x without Cgo (#422)
  • Support up to 32 arguments on 64-bit platforms (#425)
  • Add cstrings.NSStringToString (#438)
  • Fix some bugs
Commits
  • 11ec78d all: v0.11.0 released
  • 63002e0 purego: apply go fix modernizations (#504)
  • f389379 all: use range-over-int in counting loops (#503)
  • 749871c all: use structs.HostLayout on structs that must match the C ABI (#502)
  • a66c0b0 purego: fix returning a C function pointer as a Go func (#500)
  • f2f4202 objc: encode 64-bit integers as q and Q (#499)
  • 7d5f4c2 .github/workflows: test against Go 1.27 (#498)
  • f9d41fc purego: support arm soft-float abi (#494)
  • 0960e99 all: remove zcallback_*.s from the external code list (#496)
  • 4862512 .github/workflows: test against 1.27-rc2 (#495)
  • Additional commits viewable in compare view

Updates github.com/googleapis/enterprise-certificate-proxy from 0.3.20 to 0.3.21

Release notes

Sourced from github.com/googleapis/enterprise-certificate-proxy's releases.

v0.3.21

What's Changed

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.20...v0.3.21

Commits
  • 3afb37a chore: Routing to readyzHandler only when the request is a local check (#228)
  • 1d9e38c feat: Migrate from ServeMux to HandlerFunc to avoid collapsing // to / for ht...
  • 88a7cab chore: Set LogLevel off when ENABLE_ENTERPRISE_CERTIFICATE_LOGS is set to Fal...
  • 82da9ba chore: Bump version from v0.3.20 to v0.3.21 (#224)
  • fdd44ad fix: fix pkcs11 cert chain logic (#213)
  • 0c9499c feat: Add support for verbosity control for logging (#222)
  • See full diff in compare view

Updates github.com/googleapis/gax-go/v2 from 2.24.0 to 2.24.1

Release notes

Sourced from github.com/googleapis/gax-go/v2's releases.

v2.24.1

2.24.1 (2026-09-03)

Bug Fixes

  • split implementation of ProtoJSONStream for 1.27 and later (#532) (d0623a1)
Commits
  • 269185f chore(main): release 2.24.1 (#533)
  • d0623a1 fix: split implementation of ProtoJSONStream for 1.27 and later (#532)
  • 6c77ee3 chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 (#529)
  • 3f35182 chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /v2 (#528)
  • See full diff in compare view

Updates github.com/klauspost/compress from 1.19.2 to 1.20.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.0

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.19.2...v1.20.0

Commits
  • 9d8ccb1 flate: Writer with a preset dictionary emits the dictionary into the output s...
  • f93f23a build(deps): bump the github-actions group with 6 updates (#1200)
  • 42f9d96 xpress: add Microsoft XPRESS (MS-XCA) decompression (#1195)
  • 629c2ea zstd/huff0: break false partial-register dependencies in seqdec/4X decoders (...
  • ba74977 ci: test against go1.27.x, drop go1.24.x (#1198)
  • f5c1529 zstd/huff0: pin avo peephole folds, regenerate arm64 (#1199)
  • 73508b2 s2: arm64 assembly encoders, lowered from the amd64 avo program (#1187)
  • 0e43f04 xxhash: bound input of non-preemptive assembly (#1196)
  • 4005c15 s2: clamp the Go EncodeBetter skip to match the assembly (#1190)
  • dd6de45 gzhttp: limit jitter hash to jitterBuffer bytes (#1192)
  • Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.5.1 to 0.6.0

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.0

0.6.0

Changelog

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.0 (2013-08-22)

  • Runtime: Load authConfig only when needed and fix useless WARNING
  • Runtime: Add lxc-conf flag to allow custom lxc options
  • Runtime: Fix race conditions in parallel pull
  • Runtime: Improve CMD, ENTRYPOINT, and attach docs.
  • Documentation: Small fix to docs regarding adding docker groups
  • Documentation: Add MongoDB image example
  • Builder: Add USER instruction do Dockerfile
  • Documentation: updated default -H docs
  • Remote API: Sort Images by most recent creation date.
  • Builder: Add workdir support for the Buildfile
  • Runtime: Add an option to set the working directory
  • Runtime: Show tag used when image is missing
  • Documentation: Update readme with dependencies for building
  • Documentation: Add instructions for creating and using the docker group
  • Remote API: Reworking opaque requests in registry module
  • Runtime: Fix Graph ByParent() to generate list of child images per parent image.
  • Runtime: Add Image name to LogEvent tests
  • Documentation: Add sudo to examples and installation to documentation
  • Hack: Bash Completion: Limit commands to containers of a relevant state
  • Remote API: Add image name in /events
  • Runtime: Apply volumes-from before creating volumes
  • Runtime: Make docker run handle SIGINT/SIGTERM
  • Runtime: Prevent crash when .dockercfg not readable
  • Hack: Add docker dependencies coverage testing into docker-ci
  • Runtime: Add -privileged flag and relevant tests, docs, and examples
  • Packaging: Docker-brew 0.5.2 support and memory footprint reduction
  • Runtime: Install script should be fetched over https, not http.
  • Packaging: Add new docker dependencies into docker-ci
  • Runtime: Use Go 1.1.2 for dockerbuilder
  • Registry: Improve auth push
  • Runtime: API, issue 1471: Use groups for socket permissions
  • Documentation: PostgreSQL service example in documentation
  • Contrib: bash completion script
  • Tests: Improve TestKillDifferentUser to prevent timeout on buildbot
  • Documentation: Fix typo in docs for docker run -dns
  • Documentation: Adding a reference to ps -a
  • Runtime: Correctly detect IPv4 forwarding
  • Packaging: Revert "docker.upstart: avoid spawning a sh process"
  • Runtime: Use ranged for loop on channels
  • Runtime: Fix typo: fmt.Sprint -> fmt.Sprintf
  • Tests: Fix typo in TestBindMounts (runContainer called without image)
  • Runtime: add websocket support to /container//attach/ws
  • Runtime: Mount /dev/shm as a tmpfs
  • Builder: Only count known instructions as build steps
  • Builder: Fix docker build and docker events output
  • Runtime: switch from http to https for get.docker.io
  • Tests: Improve TestGetContainersTop so it does not rely on sleep
  • Packaging: Docker-brew and Docker standard library
  • Testing: Add some tests in server and utils

... (truncated)

Commits
  • f4a4f1c Bump to 0.6.0
  • f925edd Merge pull request #1525 from griff/1503-fix
  • 12715c8 Merge pull request #1609 from jpetazzo/release-docker-with-docker
  • 326dadd Merge pull request #1565 from dotcloud/only_load_authconfig_when_needed
  • a3510c9 Merge pull request #1560 from dotcloud/439-allow-lxc-args
  • 262d57e Merge pull request #1623 from mhennings/1592-fix-race-conditions-in-parallel-...
  • 551092f Add lxc-conf flag to allow custom lxc options
  • 3f802f4 Fix race conditions in parallel pull
  • 0b9c8e2 Merge pull request #1596 from metalivedev/1149-easyfixes
  • 42fe550 Merge pull request #1614 from denibertovic/docs
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_model from 0.6.2 to 0.6.3

Release notes

Sourced from github.com/prometheus/client_model's releases.

v0.6.3

What's Changed

New Contributors

Full Changelog: prometheus/client_model@v0.6.2...v0.6.3

What's Changed

... (truncated)

Commits

Updates github.com/prometheus/common from 0.70.1 to 0.71.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.71.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.70.1...v0.71.0

Commits
  • 9a4aff0 build(deps): bump github.com/stretchr/testify in /assets (#979)
  • 483bb89 Update dependabot config (#978)
  • d29e1ea build(deps): bump golang.org/x/net (#975)
  • e531bd2 build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 (#976)
  • bc3fc3a build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (#977)

Bumps the production-dependencies group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [buf.build/go/protovalidate](https://github.com/bufbuild/protovalidate-go) | `1.3.0` | `1.4.0` |
| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.4` | `4.1.5` |
| [github.com/moby/moby/api](https://github.com/moby/moby) | `1.55.0` | `1.56.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.294.0` | `0.297.0` |
| [github.com/ebitengine/purego](https://github.com/ebitengine/purego) | `0.10.2` | `0.11.0` |
| [github.com/googleapis/enterprise-certificate-proxy](https://github.com/googleapis/enterprise-certificate-proxy) | `0.3.20` | `0.3.21` |
| [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go) | `2.24.0` | `2.24.1` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.19.2` | `1.20.0` |
| [github.com/moby/moby/client](https://github.com/moby/moby) | `0.5.1` | `0.6.0` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.2` | `0.6.3` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.70.1` | `0.71.0` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.21.1` | `0.22.0` |
| [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.26.7` | `4.26.8` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.70.0` | `0.71.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.56.0` |
| [golang.org/x/exp](https://github.com/golang/exp) | `0.0.0-20260718201538-764159d718ef` | `0.0.0-20260820142414-ca536658362e` |


Updates `buf.build/go/protovalidate` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/bufbuild/protovalidate-go/releases)
- [Commits](bufbuild/protovalidate-go@v1.3.0...v1.4.0)

Updates `github.com/go-jose/go-jose/v4` from 4.1.4 to 4.1.5
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.4...v4.1.5)

Updates `github.com/moby/moby/api` from 1.55.0 to 1.56.0
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@api/v1.55.0...api/v1.56.0)

Updates `google.golang.org/api` from 0.294.0 to 0.297.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.294.0...v0.297.0)

Updates `github.com/ebitengine/purego` from 0.10.2 to 0.11.0
- [Release notes](https://github.com/ebitengine/purego/releases)
- [Commits](ebitengine/purego@v0.10.2...v0.11.0)

Updates `github.com/googleapis/enterprise-certificate-proxy` from 0.3.20 to 0.3.21
- [Release notes](https://github.com/googleapis/enterprise-certificate-proxy/releases)
- [Commits](googleapis/enterprise-certificate-proxy@v0.3.20...v0.3.21)

Updates `github.com/googleapis/gax-go/v2` from 2.24.0 to 2.24.1
- [Release notes](https://github.com/googleapis/gax-go/releases)
- [Commits](googleapis/gax-go@v2.24.0...v2.24.1)

Updates `github.com/klauspost/compress` from 1.19.2 to 1.20.0
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.19.2...v1.20.0)

Updates `github.com/moby/moby/client` from 0.5.1 to 0.6.0
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.6.0/CHANGELOG.md)
- [Commits](moby/moby@v0.5.1...v0.6.0)

Updates `github.com/prometheus/client_model` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.2...v0.6.3)

Updates `github.com/prometheus/common` from 0.70.1 to 0.71.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.70.1...v0.71.0)

Updates `github.com/prometheus/procfs` from 0.21.1 to 0.22.0
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.21.1...v0.22.0)

Updates `github.com/shirou/gopsutil/v4` from 4.26.7 to 4.26.8
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.26.7...v4.26.8)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.70.0 to 0.71.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.70.0...zpages/v0.71.0)

Updates `golang.org/x/crypto` from 0.55.0 to 0.56.0
- [Commits](golang/crypto@v0.55.0...v0.56.0)

Updates `golang.org/x/exp` from 0.0.0-20260718201538-764159d718ef to 0.0.0-20260820142414-ca536658362e
- [Commits](https://github.com/golang/exp/commits)

---
updated-dependencies:
- dependency-name: buf.build/go/protovalidate
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/moby/moby/api
  dependency-version: 1.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.297.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/ebitengine/purego
  dependency-version: 0.11.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/googleapis/enterprise-certificate-proxy
  dependency-version: 0.3.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/googleapis/gax-go/v2
  dependency-version: 2.24.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.20.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.71.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.22.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.71.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/exp
  dependency-version: 0.0.0-20260820142414-ca536658362e
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants