fix(deps): update go deps

Open renovate[bot] opened this issue 6 months ago • 1 comments

This PR contains the following updates:

Package	Type	Update	Change
github.com/charmbracelet/huh/spinner	require	digest	`fe12c0e` -> `31a1db2`
github.com/go-task/task/v3	require	minor	`v3.43.3` -> `v3.44.0`
github.com/moby/buildkit	require	minor	`v0.22.0` -> `v0.23.1`
github.com/urfave/cli/v3	require	patch	`v3.3.3` -> `v3.3.8`
go (source)	toolchain	patch	`1.24.3` -> `1.24.4`
golang.org/x/time	require	minor	`v0.11.0` -> `v0.12.0`
k8s.io/apimachinery	require	patch	`v0.33.1` -> `v0.33.2`

Release Notes

go-task/task (github.com/go-task/task/v3)

`v3.44.0`

Compare Source

Added uuid, randInt and randIntN template functions (#1346, #2225 by @pd93).
Added new CLI_ARGS_LIST array variable which contains the arguments passed to Task after the -- (the same as CLI_ARGS, but an array instead of a string). (#2138, #2139, #2140 by @pd93).
Added toYaml and fromYaml templating functions (#2217, #2219 by @pd93).
Added task field the --list --json output (#2256 by @aleksandersh).
Added the ability to pin included taskfiles by specifying a checksum. This works with both local and remote Taskfiles (#2222, #2223 by @pd93).
When using the Remote Taskfiles experiment, any credentials used in the URL will now be redacted in Task's output (#2100, #2220 by @pd93).
Fixed fuzzy suggestions not working when misspelling a task name (#2192, #2200 by @vmaerten).
Fixed a bug where taskfiles in directories containing spaces created directories in the wrong location (#2208, #2216 by @pd93).
Added support for dual JSON schema files, allowing changes without affecting the current schema. The current schemas will only be updated during releases. (#2211 by @vmaerten).
Improved fingerprint documentation by specifying that the method can be set at the root level to apply to all tasks (#2233 by @vmaerten).
Fixed some watcher regressions after #2048 (#2199, #2202, #2241, #2196 by @wazazaby, #2271 by @andreynering).

moby/buildkit (github.com/moby/buildkit)

`v0.23.1`

Compare Source

Welcome to the v0.23.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

Derek McGowan

Notable Changes

Fix a possible issue where pulling images from some registries that don't handle the Range header correctly(Artifactory) would fail. #6040

Dependency Changes

github.com/containerd/containerd/v2 v2.1.1 -> v2.1.3

Previous release can be found at v0.23.0

`v0.23.0`

Compare Source

Welcome to the v0.23.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

Tõnis Tiigi
CrazyMax
Akihiro Suda
Anthony Nandaa
Austin Vazquez
Brian Goff
Dan Duvall
Jonathan A. Sternberg
Nicolas Schweitzer
Roberto Villarreal
Sebastiaan van Stijn
zfrank

Notable Changes

Add opt-in support for SLSA provenance v1. This is expected to become the default in a future release. #6005 docs
Allow duration based filters on diskusage requests. #5455
Allow authorization secrets to be set per hostname with HTTP_AUTH_HEADER_<host> or HTTP_AUTH_TOKEN_<host>. #6023
Add support for raw mode in the SSH agent provider. #6003
Improve URL joining to prevent malformed GitHub Cache service URLs. #6026 tonistiigi/go-actions-cache#38
Update Runc v1.3.0. #5977
Fix possible "unknown file mode" error when transferring files on Windows (previous fix did not work). #6025
Fix race condition when enabling and disabling privileges in WCOW. #5959
Fix unnecessary registry requests for local image lookups if reference contains a digest. #6029
Fix privileges error for local exporter in WCOW. #6007
Fix OCI export of multi-platform scratch result. #5996
Fix handle not found error during cache export. #5999
Fix type=local,platform-split=true for single platform build to work the same as it would with a multi-platform build. #6007
Fix some data races shown on the race detector. #6006

Dependency Changes

github.com/Microsoft/hcsshim v0.12.9 -> v0.13.0
github.com/containerd/accelerated-container-image v1.2.3 -> v1.3.0
github.com/containerd/console v1.0.4 -> v1.0.5
github.com/containerd/containerd/api v1.8.0 -> v1.9.0
github.com/containerd/containerd/v2 v2.0.5 -> v2.1.1
github.com/containerd/fuse-overlayfs-snapshotter/v2 v2.1.1 -> v2.1.6
github.com/containerd/nydus-snapshotter v0.15.0 -> v0.15.2
github.com/containernetworking/cni v1.2.3 -> v1.3.0
github.com/containernetworking/plugins v1.5.1 -> v1.7.1
github.com/docker/cli v28.1.1 -> v28.2.2
github.com/docker/docker v28.1.1 -> v28.2.2
github.com/fsnotify/fsnotify v1.7.0 -> v1.9.0
github.com/google/pprof a892ee0 -> 27863c8
github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 -> v2.26.1
github.com/in-toto/in-toto-golang v0.5.0 -> v0.9.0
github.com/opencontainers/runtime-spec v1.2.0 -> v1.2.1
github.com/opencontainers/selinux v1.11.1 -> v1.12.0
github.com/prometheus/client_golang v1.20.5 -> v1.22.0
github.com/prometheus/common v0.55.0 -> v0.62.0
github.com/secure-systems-lab/go-securesystemslib v0.4.0 -> v0.6.0
github.com/spdx/tools-golang v0.5.3 -> v0.5.5
github.com/tonistiigi/fsutil 3f76f81 -> 586307a
github.com/tonistiigi/go-actions-cache 3e9a664 -> 388a2ec
github.com/tonistiigi/go-csvvalue ddb21b7 -> 030d3b2
github.com/vishvananda/netlink 084abd9 -> v1.3.1
go.etcd.io/bbolt v1.3.11 -> v1.4.0
go.opentelemetry.io/auto/sdk v1.1.0 new
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0 -> v0.60.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 -> v0.60.0
go.opentelemetry.io/otel v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/metric v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/sdk v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/sdk/metric v1.31.0 -> v1.35.0
go.opentelemetry.io/otel/trace v1.31.0 -> v1.35.0
go.opentelemetry.io/proto/otlp v1.3.1 -> v1.5.0
golang.org/x/sync v0.13.0 -> v0.14.0
golang.org/x/sys v0.32.0 -> v0.33.0
google.golang.org/genproto/googleapis/api 324edc3 -> 56aae31
google.golang.org/genproto/googleapis/rpc 324edc3 -> 56aae31
google.golang.org/grpc v1.69.4 -> v1.72.2
google.golang.org/protobuf v1.35.2 -> v1.36.6
kernel.org/pub/linux/libs/security/libcap/cap v1.2.73 -> v1.2.76
kernel.org/pub/linux/libs/security/libcap/psx v1.2.73 -> v1.2.76

Previous release can be found at v0.22.0

urfave/cli (github.com/urfave/cli/v3)

`v3.3.8`

Compare Source

What's Changed

Remove "alpha" wording around v3 series by @meatballhat in https://github.com/urfave/cli/pull/2155

Full Changelog: https://github.com/urfave/cli/compare/v3.3.7...v3.3.8

`v3.3.7`

Compare Source

What's Changed

fix: add missing IsLocal for BoolWithInverseFlag by @huiyifyj in https://github.com/urfave/cli/pull/2151
Fix OnUsageError Trigger When Error Is Caused by Mutually Exclusive Flags by @Ali-Doustkani in https://github.com/urfave/cli/pull/2152

New Contributors

@Ali-Doustkani made their first contribution in https://github.com/urfave/cli/pull/2152

Full Changelog: https://github.com/urfave/cli/compare/v3.3.6...v3.3.7

`v3.3.6`

Compare Source

What's Changed

Fish completions with identically named sub-commands now work by @bittrance in https://github.com/urfave/cli/pull/2130

Full Changelog: https://github.com/urfave/cli/compare/v3.3.5...v3.3.6

`v3.3.5`

Compare Source

What's Changed

Fix:(issue_2137) Ensure default value for bool with inverse flag is h… by @dearchap in https://github.com/urfave/cli/pull/2138
Fix:(issue_2131) Show help text for BoolWithInverseFlag by @Juneezee in https://github.com/urfave/cli/pull/2142

Full Changelog: https://github.com/urfave/cli/compare/v3.3.4...v3.3.5

`v3.3.4`

Compare Source

What's Changed

Fix Docs(issue_2125) Add PathFlag to StringFlag migration by @dearchap in https://github.com/urfave/cli/pull/2136
fix: remove extraneous space from subcommand help template by @G-Rath in https://github.com/urfave/cli/pull/2140
Fix:(issue_2135) Correct formatting of default subcommand USAGE text by @zzspoon in https://github.com/urfave/cli/pull/2139

New Contributors

@zzspoon made their first contribution in https://github.com/urfave/cli/pull/2139

Full Changelog: https://github.com/urfave/cli/compare/v3.3.3...v3.3.4

golang/go (go)

`v1.24.4`

kubernetes/apimachinery (k8s.io/apimachinery)

`v0.33.2`

Compare Source

Configuration

📅 Schedule: Branch creation - "before 6am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Jun 09 '25 01:06 renovate[bot]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

7 additional dependencies were updated

Details:

Package	Change
`github.com/containerd/console`	`v1.0.4` -> `v1.0.5`
`github.com/containerd/containerd/v2`	`v2.0.5` -> `v2.1.3`
`github.com/in-toto/in-toto-golang`	`v0.5.0` -> `v0.9.0`
`github.com/secure-systems-lab/go-securesystemslib`	`v0.4.0` -> `v0.6.0`
`github.com/tonistiigi/fsutil`	`v0.0.0-20250417144416-3f76f8130144` -> `v0.0.0-20250605211040-586307ad452f`
`github.com/tonistiigi/go-csvvalue`	`v0.0.0-20240710180619-ddb21b71c0b4` -> `v0.0.0-20240814133006-030d3b2625d0`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.56.0` -> `v0.60.0`

Jun 09 '25 01:06 renovate[bot]