chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #607 · securesign/trillian

red-hat-konflux · 2026-03-30T14:47:07Z

This PR contains the following updates:

Package	Type	Update	Change
cloud.google.com/go/auth	indirect	minor	`v0.19.0` → `v0.20.0`
cloud.google.com/go/iam	indirect	minor	`v1.5.3` → `v1.9.0`
cloud.google.com/go/longrunning	indirect	minor	`v0.8.0` → `v0.11.0`
cloud.google.com/go/profiler	indirect	minor	`v0.4.3` → `v0.6.0`
cloud.google.com/go/trace	indirect	minor	`v1.11.7` → `v1.14.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	indirect	minor	`v0.55.0` → `v0.56.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	indirect	minor	`v0.55.0` → `v0.56.0`
github.com/clipperhouse/displaywidth	indirect	minor	`v0.10.0` → `v0.11.0`
github.com/fatih/color	indirect	minor	`v1.18.0` → `v1.19.0`
github.com/google/pprof	indirect	digest	`a15ffb7` → `545e8a4`
github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus	indirect	minor	`v1.0.1` → `v1.1.0`
github.com/imdario/mergo	indirect	patch	`v0.3.4` → `v0.3.16`
github.com/lib/pq	require	patch	`v1.12.0` → `v1.12.3`
github.com/mattn/go-isatty	indirect	patch	`v0.0.20` → `v0.0.21`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.21` → `v0.0.23`
github.com/olekukonko/ll	indirect	patch	`v0.1.6` → `v0.1.8`
github.com/petermattis/goid	indirect	digest	`7c7de50` → `df67b19`
github.com/prometheus/prometheus	indirect	minor	`v0.304.2` → `v0.311.2`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.67.0` → `v0.68.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.67.0` → `v0.68.0`
golang.org/x/crypto	require	minor	`v0.49.0` → `v0.50.0`
golang.org/x/exp	indirect	digest	`7ab1446` → `746e56f`
golang.org/x/mod	indirect	minor	`v0.34.0` → `v0.35.0`
golang.org/x/net	indirect	minor	`v0.52.0` → `v0.53.0`
golang.org/x/sys	require	minor	`v0.42.0` → `v0.43.0`
golang.org/x/term	indirect	minor	`v0.41.0` → `v0.42.0`
golang.org/x/text	indirect	minor	`v0.35.0` → `v0.36.0`
golang.org/x/tools	require	minor	`v0.43.0` → `v0.44.0`
google.golang.org/api	require	minor	`v0.272.0` → `v0.276.0`
google.golang.org/genproto	require	digest	`d00831a` → `afd174a`
google.golang.org/genproto/googleapis/api	require	digest	`d00831a` → `afd174a`
google.golang.org/genproto/googleapis/rpc	require	digest	`6f92a3b` → `afd174a`
k8s.io/kube-openapi	indirect	digest	`5883c5e` → `ec9c827`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

`v0.20.0`

Compare Source

bigquery: Support SchemaUpdateOptions for load jobs.
bigtable:
- Add SampleRowKeys.
- cbt: Support union, intersection GCPolicy.
- Retry admin RPCS.
- Add trace spans to retries.
datastore: Add OpenCensus tracing.
firestore:
- Fix queries involving Null and NaN.
- Allow Timestamp protobuffers for time values.
logging: Add a WriteTimeout option.
spanner: Support Batch API.
storage: Add OpenCensus tracing.

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

`v0.56.0`: v1.32.0/v0.56.0

Compare Source

What's Changed

Support universe domains in collector exporter client configuration by @dashpole in #1097
Don't pass credentials fetched using FindDefaultCredentials by @dashpole in #1098
googleclientauthextension: support Proxy-Authorization header by @lindeskar in #1105
Improve unit tests for gcp auth extension by @dashpole in #1103
Allow providing a context to create the monitoring client by @dashpole in #1096
Add support for go 1.26 by @dashpole in #1107
chore(deps): update module golang.org/x/crypto to v0.45.0 [security] by @renovate-bot in #1102
Don't allow modifying the default scopes by @dashpole in #1109
Ignore versions in the user agent header when comparing fixtures by @dashpole in #1115
Bump go version to resolve govulncheck failures by @dashpole in #1114
Separate out govulncheck into its own CI job by @dashpole in #1113
Normalize user agents in span attributes as well by @dashpole in #1117
fix(deps): update module google.golang.org/grpc to v1.79.3 [security] by @jefferbrecht in #1131
Prepare for v1.32.0/v0.56.0 by @dashpole in #1132

New Contributors

@lindeskar made their first contribution in #1105
@jefferbrecht made their first contribution in #1131

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.55.0...v0.56.0

clipperhouse/displaywidth (github.com/clipperhouse/displaywidth)

`v0.11.0`

Compare Source

fatih/color (github.com/fatih/color)

`v1.19.0`

Compare Source

What's Changed

Bump golang.org/x/sys from 0.25.0 to 0.28.0 by @dependabot[bot] in #246
Fix for issue #230 set/unsetwriter symmetric wrt color support detection by @ataypamart in #243
chore: go mod cleanup by @sashamelentyev in #244
Bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot[bot] in #249
Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by @dependabot[bot] in #248
Update CI and go deps by @fatih in #254
Bump golang.org/x/sys from 0.31.0 to 0.37.0 by @dependabot[bot] in #268
fix: include escape codes in byte counts from Fprint, Fprintf by @qualidafial in #282
Bump golang.org/x/sys from 0.37.0 to 0.40.0 by @dependabot[bot] in #277
fix: add nil check for os.Stdout to prevent panic on Windows services by @majiayu000 in #275
Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0 by @dependabot[bot] in #259
Bump actions/checkout from 4 to 6 by @dependabot[bot] in #273
Optimize Color.Equals performance (O(n²) → O(n)) by @UnSubble in #269
Bump actions/setup-go from 5 to 6 by @dependabot[bot] in #266

New Contributors

@ataypamart made their first contribution in #243
@sashamelentyev made their first contribution in #244
@qualidafial made their first contribution in #282
@majiayu000 made their first contribution in #275
@UnSubble made their first contribution in #269

Full Changelog: fatih/color@v1.18.0...v1.19.0

grpc-ecosystem/go-grpc-middleware (github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus)

`v1.1.0`

[v1.1.0] - 2019-09-12

Added

#226 Support for go modules.
#221 logging/zap add support for gRPC LoggerV2 - kush-patel-hs
#181 Rate Limit support - ceshihao
#161 Retry on server stream call - lonnblad
#152 Exponential backoff functions - polyfloyd
#147 Jaeger support for ctxtags extraction - vporoshok
#184 ctxTags identifies if the call was sampled

Deprecated

#201 golang.org/x/net/context - houz42
#183 Documentation Generation in favour of <godoc.org>.

Fixed

172 Passing ctx into retry and recover - johanbrandhorst
Numerious documentation fixes.

imdario/mergo (github.com/imdario/mergo)

`v0.3.16`: Announcement: v1.0.0 will be released on June 18th

Compare Source

This release doesn't contain code changes.

After 10 years, with many corner cases covered, very few issues pending (at least, comparing them with the usage of the library as part of Docker, Kubernetes, Datadog's agent, etc.), and a very stable API, I think it's time to release a 1.0.0 version.

This version will be released under a vanity URL: dario.cat/mergo

PS: although I'll make sure that github.com/imdario/mergo will be available, I'm going to also change my GitHub handle, so expect for a few minutes to not be able to pull from github.com/imdario as I fork it from the new handle to the old one.

PS2: I'm creating a discussion for this release to make sure we can have a conversation around the topic, and anything else about Mergo that you care about.

`v0.3.15`: Issues #131, #170, #220, and #202 fixed

Compare Source

`v0.3.14`: fix: Respect overwriteWithEmptySrc when merging maps #231

Compare Source

`v0.3.13`: Merging same-type slices supported, YAML upgraded to v3 (only used in tests), and more flexibility for transformers

Compare Source

What's Changed

Fix typo in README.md by @eltociear in #184
Adding StructBot to Mergo in the wild section by @tjpnz in #193
Add Goreleaser to featured projects by @marcauberer in #191
fix: gate transformers on valid non-nil destinations by @zaquestion in #211
Support slices of same type by @heaths in #210
Upgrade yaml to v3 by @imdario in #212

New Contributors

@eltociear made their first contribution in #184
@tjpnz made their first contribution in #193
@marcauberer made their first contribution in #191
@zaquestion made their first contribution in #211
@heaths made their first contribution in #210

Full Changelog: darccio/mergo@0.3.12...v0.3.13

`v0.3.12`: Some bug fixes

Compare Source

Thanks to @abicky and @ndeloof to help to improve Mergo. They fixed issues #90 & #174.

`v0.3.11`

Compare Source

`v0.3.10`: : frozen codebase + next steps

Compare Source

After the broken 0.3.9, I decided to revert the faulty PR #105, reopening the issues #90 and #103. Also, this release includes all the other pending bugs. As it is getting harder to modify the codebase, I decided to freeze it. I'm going to merge only PRs fixing bugs with proper tests.

On the other hand, I will start a new cleanroom implementation. Existing tests will be reviewed and used as "test subjects". Also, I plan to collect real-world examples to use them also as "test subjects" in a separate repository.

In this process, I would like to work from the bottom to the top, focusing on getting the core right. I plan to keep a legacy compatibility layer, but the new API may differ from the current one to allow better maintenance and new features.

Two PR merged to fix bugs. Thanks @requilence, @smgladkovskiy, @vdemeester and @luisdavim for your time!

`v0.3.6`

Compare Source

`v0.3.5`

Compare Source

lib/pq (github.com/lib/pq)

`v1.12.3`

Compare Source

Send datestyle startup parameter, improving compatbility with database engines
that use a different default datestyle such as EnterpriseDB (#1312).

`v1.12.2`

Compare Source

Treat io.ErrUnexpectedEOF as driver.ErrBadConn so database/sql discards the
connection. Since v1.12.0 this could result in permanently broken connections,
especially with CockroachDB which frequently sends partial messages (#1299).

`v1.12.1`

Compare Source

Look for pgpass file in ~/.pgpass instead of ~/.postgresql/pgpass (#1300).
Don't clear password if directly set on pq.Config (#1302).

mattn/go-isatty (github.com/mattn/go-isatty)

`v0.0.21`

Compare Source

mattn/go-runewidth (github.com/mattn/go-runewidth)

`v0.0.23`

Compare Source

`v0.0.22`

Compare Source

olekukonko/ll (github.com/olekukonko/ll)

`v0.1.8`

Compare Source

`v0.1.7`

Compare Source

prometheus/prometheus (github.com/prometheus/prometheus)

`v0.311.2`

Compare Source

`v0.311.1`

Compare Source

`v0.311.0`

Compare Source

`v0.310.0`

Compare Source

`v0.309.1`

Compare Source

`v0.309.0`

Compare Source

`v0.308.1`

Compare Source

`v0.308.0`

Compare Source

`v0.307.3`

Compare Source

`v0.307.2`

Compare Source

`v0.307.1`

Compare Source

`v0.307.0`

Compare Source

`v0.306.0`

Compare Source

`v0.305.2`

Compare Source

`v0.305.1`

Compare Source

`v0.305.0`

Compare Source

googleapis/google-api-go-client (google.golang.org/api)

`v0.276.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3561) (dd3f1bb)
all: Auto-regenerate discovery clients (#3565) (7c11b5a)
all: Auto-regenerate discovery clients (#3566) (54188cf)

`v0.275.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3557) (2b2ef99)
all: Auto-regenerate discovery clients (#3560) (9437d4d)

`v0.274.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3555) (0e634ae)

`v0.273.1`

Compare Source

Bug Fixes

Merge duplicate x-goog-request-params header (#3547) (2008108)

`v0.273.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3542) (a4b4711)
all: Auto-regenerate discovery clients (#3546) (0cacfa8)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-03-30T14:47:09Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go/spanner`	`v1.88.0` -> `v1.89.0`
`cloud.google.com/go/storage`	`v1.56.0` -> `v1.61.3`
`github.com/googleapis/gax-go/v2`	`v2.18.0` -> `v2.20.0`

red-hat-konflux · 2026-04-02T23:45:02Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

16 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go/spanner`	`v1.88.0` -> `v1.89.0`
`k8s.io/klog/v2`	`v2.130.1` -> `v2.140.0`
`cloud.google.com/go/monitoring`	`v1.24.3` -> `v1.26.0`
`cloud.google.com/go/storage`	`v1.56.0` -> `v1.62.0`
`github.com/clipperhouse/uax29/v2`	`v2.6.0` -> `v2.7.0`
`github.com/envoyproxy/go-control-plane/envoy`	`v1.36.0` -> `v1.37.0`
`github.com/go-jose/go-jose/v4`	`v4.1.3` -> `v4.1.4`
`github.com/googleapis/gax-go/v2`	`v2.18.0` -> `v2.21.0`
`go.opentelemetry.io/otel`	`v1.42.0` -> `v1.43.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.40.0` -> `v1.42.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`	`v1.40.0` -> `v1.42.0`
`go.opentelemetry.io/otel/metric`	`v1.42.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk`	`v1.42.0` -> `v1.43.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.42.0` -> `v1.43.0`
`go.opentelemetry.io/otel/trace`	`v1.42.0` -> `v1.43.0`
`go.yaml.in/yaml/v2`	`v2.4.3` -> `v2.4.4`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot added the dependencies label Mar 30, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 11 times, most recently from 05b219b to 8401c48 Compare April 2, 2026 23:44

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 16 times, most recently from c7451de to 1ea621e Compare April 7, 2026 18:26

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 28 times, most recently from 071330f to d7024c8 Compare April 15, 2026 06:33

chore(deps): update go dependencies

163d01e

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch from d7024c8 to 163d01e Compare April 15, 2026 10:45

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update go dependencies#607

chore(deps): update go dependencies#607
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.3from
konflux/mintmaker/release-1.3/go-deps

red-hat-konflux bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

red-hat-konflux bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

red-hat-konflux bot commented Apr 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.56.0: v1.32.0/v0.56.0

What's Changed

New Contributors

What's Changed

New Contributors

[v1.1.0] - 2019-09-12

Added

Deprecated

Fixed

v0.3.16: Announcement: v1.0.0 will be released on June 18th

v0.3.15: Issues #​131, #​170, #​220, and #​202 fixed

v0.3.14: fix: Respect overwriteWithEmptySrc when merging maps #​231

v0.3.13: Merging same-type slices supported, YAML upgraded to v3 (only used in tests), and more flexibility for transformers

What's Changed

New Contributors

v0.3.12: Some bug fixes

v0.3.10: : frozen codebase + next steps

v0.3.9: Support for Struct in Map

v0.3.8: Several PRs merged

Features

Features

Features

Bug Fixes

Features

Configuration

Documentation

Uh oh!

red-hat-konflux bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

Uh oh!

red-hat-konflux bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux bot commented Mar 30, 2026 •

edited

Loading

`v0.56.0`: v1.32.0/v0.56.0

`v0.3.16`: Announcement: v1.0.0 will be released on June 18th

`v0.3.15`: Issues #131, #170, #220, and #202 fixed

`v0.3.14`: fix: Respect overwriteWithEmptySrc when merging maps #231

`v0.3.13`: Merging same-type slices supported, YAML upgraded to v3 (only used in tests), and more flexibility for transformers

`v0.3.12`: Some bug fixes

`v0.3.10`: : frozen codebase + next steps

`v0.3.9`: Support for Struct in Map

`v0.3.8`: Several PRs merged

red-hat-konflux bot commented Mar 30, 2026 •

edited

Loading

red-hat-konflux bot commented Apr 2, 2026 •

edited

Loading