Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 11 updates - #296

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-d433e358e4
Open

chore(deps): bump the go-dependencies group across 1 directory with 11 updates#296
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-d433e358e4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown

Bumps the go-dependencies group with 10 updates in the / directory:

Package From To
carvel.dev/kapp-controller 0.60.3 0.60.4
github.com/argoproj/argo-events 1.9.10 1.9.11
github.com/cert-manager/cert-manager 1.21.0 1.21.1
github.com/fluxcd/kustomize-controller/api 1.9.2 1.9.4
github.com/fluxcd/source-controller/api 1.9.2 1.9.3
github.com/go-logr/logr 1.4.3 1.4.4
github.com/shipwright-io/build 0.20.4 0.20.7
k8s.io/api 0.36.2 0.36.3
k8s.io/client-go 0.36.2 0.36.3
knative.dev/serving 0.49.1 0.50.0

Updates carvel.dev/kapp-controller from 0.60.3 to 0.60.4

Release notes

Sourced from carvel.dev/kapp-controller's releases.

v0.60.4

Installation of kctrl

By downloading binary from the release

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/kctrl-linux-amd64
# Move the binary in to your PATH
mv kctrl-linux-amd64 /usr/local/bin/kctrl
# Make the binary executable
chmod +x /usr/local/bin/kctrl

Via Homebrew (macOS or Linux)

$ brew tap carvel-dev/carvel
$ brew install kctrl
$ kctrl version

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt.pem
curl -LO https://github.com/carvel-dev/kapp-controller/releases/download/v0.60.4/checksums.txt.sig
Verify the checksums file
cosign verify-blob checksums.txt --bundle release/checksums.json --certificate-identity-regexp=https://github.com/carvel-dev --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature. For instance, if you are using Linux on an AMD64 architecture:

# Verify the binary using the checksums file
sha256sum -c checksums.txt --ignore-missing

... (truncated)

Commits
  • 651cb15 Merge pull request #1845 from sameerforge/topic/sameerkh/fix-watchlist-downst...
  • e05009b fix: disable WatchList feature gate in packaging apiserver
  • 62c4c28 Merge pull request #1840 from himsngh/himsngh/1839
  • 392d9b5 chore: address review comments
  • 3a75188 [1839] Fix: Truncate status.deploy.stdout as it can exceed etcd's 2 MiB limit...
  • See full diff in compare view

Updates github.com/argoproj/argo-events from 1.9.10 to 1.9.11

Release notes

Sourced from github.com/argoproj/argo-events's releases.

v1.9.11

Major Changes

  • feat: Add readiness probes to EventBus StatefulSet (#3894)
  • feat: support GitHub App authentication for Sensor git triggers (#4018)
  • feat(logging): support warn log level via LOG_LEVEL=warn (#4019)
  • feat: make Kubernetes leader election timeouts configurable via env vars (#4029)
  • feat: Add kafka msk iam support (#3963)
  • fix: avoid duplicate slashes in formatted webhook URLs (#4056)
  • fix: Initialize Prometheus Counters to 0 when service(s) start (#3906)
  • fix: reduce lame_duck_duration to 30s to fit within terminationGracePeriodSeconds (#3959)

Pull Requests

argoproj/argo-events@v1.9.10...v1.9.11

Installation

kubectl create namespace argo-events
kubectl apply -n argo-events -f https://github.com/argoproj/argo-events/releases/download/v1.9.11/install.yaml
Install validating webhook (optional)
kubectl apply -n argo-events -f https://github.com/argoproj/argo-events/releases/download/v1.9.11/install-validating-webhook.yaml

Full Changelog: argoproj/argo-events@v1.9.10...v1.9.11

Changelog

Sourced from github.com/argoproj/argo-events's changelog.

v1.9.11 (2026-07-13)

  • d13fde07 Update manifests to v1.9.11
  • 2fd343bf chore(deps): bump github.com/go-swagger/go-swagger from 0.34.0 to 0.34.1 (#4076)
  • 7e3ef00f chore(deps): bump github.com/go-swagger/go-swagger from 0.33.2 to 0.34.0 (#4070)
  • 6abcfccc chore(deps): bump github.com/minio/minio-go/v7 from 7.1.0 to 7.2.0 (#4069)
  • 234b5e94 chore(deps): bump github.com/slack-go/slack from 0.23.1 to 0.24.0 (#4071)
  • 19fbcb16 chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#4061)
  • f0d6c705 chore(deps): bump google.golang.org/api from 0.279.0 to 0.280.0 (#4060)
  • e3b2684c fix: avoid duplicate slashes in formatted webhook URLs (#4056)
  • 063d2ca7 feat: Add kafka msk iam support (#3963)
  • c3e00da2 chore(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 (#4057)
  • 7348272f chore(deps): bump google.golang.org/api from 0.278.0 to 0.279.0 (#4051)
  • 6e82e30f chore(deps): bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.6.1 to 1.6.2 (#4055)
  • b7190c9f chore(deps): bump github.com/fsnotify/fsnotify from 1.10.0 to 1.10.1 (#4053)
  • 60714229 chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 (#4052)
  • 9c0f4f3a chore(deps): bump github.com/slack-go/slack from 0.23.0 to 0.23.1 (#4049)
  • d2613313 chore(deps): bump golang.org/x/tools from 0.44.0 to 0.45.0 (#4045)
  • 3122782c chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 (#4044)
  • c0e2d8c3 chore(deps): bump github.com/tidwall/gjson from 1.18.0 to 1.19.0 (#4048)
  • 01d76790 chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 (#4046)
  • 99df1c69 chore(deps): bump cloud.google.com/go/iam from 1.10.0 to 1.11.0 (#4047)
  • 9a49c370 chore(deps): bump google.golang.org/api from 0.277.0 to 0.278.0 (#4042)
  • eec24345 chore(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#4040)
  • 99f8ca54 chore(deps): bump github.com/nats-io/nats.go from 1.51.0 to 1.52.0 (#4041)
  • 621e8d65 chore(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#4039)
  • 8891384d chore(deps): bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.0 (#4036)
  • 62f52f1d chore(deps): bump go.uber.org/zap from 1.27.1 to 1.28.0 (#4034)
  • 4e31de3d chore(deps): bump github.com/minio/minio-go/v7 from 7.0.100 to 7.1.0 (#4033)
  • 135f7853 chore(deps): bump cloud.google.com/go/iam from 1.9.0 to 1.10.0 (#4032)
  • 39613b8c chore(deps): bump google.golang.org/api from 0.276.0 to 0.277.0 (#4031)
  • 57dcd9df feat: make Kubernetes leader election timeouts configurable via env vars (#4029)
  • ccafbdd5 docs(triggers): show triggering an existing WorkflowTemplate (#4027)
  • ce508d60 feat(logging): support warn log level via LOG_LEVEL=warn (#4019)
  • 84376f1f feat: support GitHub App authentication for Sensor git triggers (#4018)
  • 60d5318c fix(sensor): bump action_retries_failed_total on async trigger failures (#4002)
  • 9cdeb370 chore(deps): bump github.com/slack-go/slack from 0.22.0 to 0.23.0 (#4025)
  • 103b119f chore(deps): bump github.com/rabbitmq/amqp091-go from 1.10.0 to 1.11.0 (#4026)
  • 6f9d97d8 chore(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 (#4022)
  • ac4fd0be fix(bitbucketserver): replace %w with %v in Logger.Errorf call (#3990)
  • 08f7efc2 chore(deps): bump cloud.google.com/go/pubsub/v2 from 2.5.1 to 2.6.0 (#4017)
  • b9bdf3f9 chore(deps): bump softprops/action-gh-release from 2 to 3 (#4010)
  • 8a4fc100 chore(deps): bump cloud.google.com/go/iam from 1.8.0 to 1.9.0 (#4016)
  • 935b6e7d chore(deps): bump google.golang.org/api from 0.275.0 to 0.276.0 (#4015)
  • fa78e2c8 chore(deps): bump github.com/slack-go/slack from 0.21.1 to 0.22.0 (#4012)
  • b6561e3a chore(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.28.0 to 2.29.0 (#4014)
  • 39e8ddb9 chore(deps): bump github.com/nats-io/nats.go from 1.50.0 to 1.51.0 (#4013)
  • 95641232 chore(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 (#4009)
  • 4cd66fa1 chore(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1 (#4008)
  • 9c0c1964 chore(deps): bump cloud.google.com/go/iam from 1.7.0 to 1.8.0 (#3996)

... (truncated)

Commits
  • d13fde0 Update manifests to v1.9.11
  • c21d491 chore: bunch of dep upgrades (#4104)
  • 2fd343b chore(deps): bump github.com/go-swagger/go-swagger from 0.34.0 to 0.34.1 (#4076)
  • 7e3ef00 chore(deps): bump github.com/go-swagger/go-swagger from 0.33.2 to 0.34.0 (#4070)
  • 6abcfcc chore(deps): bump github.com/minio/minio-go/v7 from 7.1.0 to 7.2.0 (#4069)
  • 234b5e9 chore(deps): bump github.com/slack-go/slack from 0.23.1 to 0.24.0 (#4071)
  • 19fbcb1 chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#4061)
  • f0d6c70 chore(deps): bump google.golang.org/api from 0.279.0 to 0.280.0 (#4060)
  • e3b2684 fix: avoid duplicate slashes in formatted webhook URLs (#4056)
  • 063d2ca feat: Add kafka msk iam support (#3963)
  • Additional commits viewable in compare view

Updates github.com/cert-manager/cert-manager from 1.21.0 to 1.21.1

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.21.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.21.1 fixes a controller panic for Certificates with spec.renewal.policy: Disabled, a regression in 1.21.0 which caused log spam and dropped Secret informer events, Issuers and ClusterIssuers getting stuck at Ready=False (InvalidSolver) when a referenced ACME DNS-01 solver Secret is created after the Issuer, and the commented Gateway API example in the Helm chart values. It also updates several dependencies to fix reported security vulnerabilities.

All users should upgrade.

Changes by Kind

Bug or Regression

  • Avoid controller panic if a Certificate sets spec.renewal.policy=Disabled (#9038, @​sklirg)
  • Fix Issuer/ClusterIssuer stuck at Ready=False/InvalidSolver after a missing ACME DNS-01 solver Secret is created (#9083, @​SebTardif)
  • Fix log spam and dropped Secret informer events for non-cert-manager Secrets, caused by a generics regression introduced in 1.21.0. (#9037, @​wallrj-cyberark)
  • Fixed the commented Gateway API config example in the Helm chart values to use gatewayAPI.enabled instead of the invalid gatewayAPI.enable. (#9012, @​mateenali66)

Other (Cleanup or Flake)

  • Bump golang.org/x/text to v0.40.0 to fix a reported security vulnerability (#9039, @​wallrj-cyberark)
  • Bump google.golang.org/grpc to v1.82.1 to fix a reported security vulnerability (#9063)
  • Bump github.com/google/cel-go to v0.29.0 to fix a reported security vulnerability (#9072)
  • Bump go.opentelemetry.io/otel to v1.44.0 to fix a reported security vulnerability (#9073)
  • Update distroless base images (#9000, #9025)
Commits
  • 24e3319 Merge pull request #9083 from cert-manager-bot/cherry-pick-9042-to-release-1.21
  • 4de10f8 docs: TODO to index issuers by Secret for Secret-event scaling
  • f7a2c7f Say ClusterIssuer, not issuer, in clusterissuers error message
  • 947571d Return the external SecretKeySelector type from RequiredDNS01SolverSecrets
  • 536dcc3 Remove untestable expectErr field from RequiredDNS01SolverSecrets tests
  • 61b071f Cover the remaining DNS-01 providers in RequiredDNS01SolverSecrets tests
  • 7c31735 Extract shared ACME DNS-01 solver secret helper
  • 616ed4c Re-queue Issuer/ClusterIssuer on ACME DNS-01 solver Secret events
  • f1a152a Merge pull request #9073 from cert-manager/renovate/release-1.21-go-go.opente...
  • 0e50d3a Merge pull request #9072 from cert-manager/renovate/release-1.21-go-github.co...
  • Additional commits viewable in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.9.2 to 1.9.4

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.9.4

Changelog

v1.9.4 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.9.4
  • ghcr.io/fluxcd/kustomize-controller:v1.9.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.9.3

Changelog

v1.9.3 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.9.3
  • ghcr.io/fluxcd/kustomize-controller:v1.9.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.9.4

Release date: 2026-07-23

This patch release fixes a spec.images entry that sets only some of the image fields discarding the remaining fields already declared for the same image in the kustomization.yaml at spec.path, e.g. overriding only newName produced an untagged image reference.

Fixes:

  • Update fluxcd/pkg dependencies #1714

1.9.3

Release date: 2026-07-13

This patch release fixes a regression introduced in v1.9.2 where a Kustomization with openapi.path pointing to a URL failed to reconcile with failed to read OpenAPI schema.

Fixes:

  • Update fluxcd/pkg dependencies #1703
Commits

Updates github.com/fluxcd/source-controller/api from 1.9.2 to 1.9.3

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.9.3

Changelog

v1.9.3 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.9.3
  • ghcr.io/fluxcd/source-controller:v1.9.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.9.3

Release date: 2026-07-13

This patch release fixes the HelmChart CRD description for .status.url, which was copy-pasted from Bucket and pointed users at BucketStatus.Artifact instead of HelmChartStatus.Artifact.

Improvements:

  • Fix HelmChartStatus.URL doc-comment referencing BucketStatus #2110
Commits
  • ed61ebd Merge pull request #2111 from fluxcd/release-v1.9.3
  • 03a1208 Release v1.9.3
  • f1e431a Add changelog entry for v1.9.3
  • deec0f1 Merge pull request #2110 from fluxcd/backport-2109-to-release/v1.9.x
  • 048ce5c docs: regenerate API reference after doc-comment fix
  • 2b0b313 Fix HelmChartStatus.URL doc-comment referencing BucketStatus
  • See full diff in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits
  • 96a9aba Fix lint
  • 51c6302 Better implementation of pointer recursion checking
  • c667114 funcr: Handle and test recursive values
  • f7ffadb Add benchmark for pointer args
  • e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
  • 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
  • 0b40896 build(deps): bump github/codeql-action/upload-sarif
  • 77f671b Bump to Go 1.26
  • cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
  • 3832a11 build(deps): bump github/codeql-action/upload-sarif
  • Additional commits viewable in compare view

Updates github.com/shipwright-io/build from 0.20.4 to 0.20.7

Release notes

Sourced from github.com/shipwright-io/build's releases.

Shipwright Build release v0.20.7

Release changes since v0.20.6

None. This is a rebuild of all components to address vulnerabilities in the base images and Go dependencies.

To see a list of addressed vulnerabilities, please refer to shipwright-io/build#2267

Features

Fixes

API Changes

Docs

Misc

#2272 by @​SaschaSchwarze0: Update github.com/klauspost/compress from v1.18.5 to v1.18.7 to address GHSA-259r-337f-4rfw

#2269 by @​SaschaSchwarze0: Update go.opentelemetry.io/otel from v1.43.0 to v1.44.0

Shipwright Build release v0.20.6

Release changes since v0.20.5

None. This is a rebuild of all components to address vulnerabilities in the base images and Go dependencies.

To see a list of addressed vulnerabilities, please refer to shipwright-io/build#2260

Features

Fixes

API Changes

Docs

Misc

#2262 by @​SaschaSchwarze0: Update golang.org/x/net from v0.55.0 to v0.56.0 to address CVE-2026-46600 / Update golang.org/x/text from v0.37.0 to v0.39.0 to address CVE-2026-56852

Shipwright Build release v0.20.5

Release changes since v0.20.4

None. This is a rebuild of all components to address vulnerabilities in the base images.

To see a list of addressed vulnerabilities, please refer to shipwright-io/build#2253

Features

Fixes

... (truncated)

Commits
  • e28e221 Merge pull request #2272 from SaschaSchwarze0/sascha-compress
  • b85f714 Update github.com/klauspost/compress from v1.18.5 to v1.18.7 to address GHSA-...
  • f597445 Merge pull request #2269 from SaschaSchwarze0/sascha-otel-v0.20
  • 724a0dd Update otel packages
  • 1ec3d3a Merge pull request #2262 from SaschaSchwarze0/sascha-vuln-fixes-v0.20
  • 4cc966b Update golang.org/x/net from v0.55.0 to v0.56.0 to address CVE-2026-46600
  • See full diff in compare view

Updates k8s.io/api from 0.36.2 to 0.36.3

Commits
  • 3fde3c4 Update dependencies to v0.36.3 tag
  • 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/apimachinery from 0.36.2 to 0.36.3

Commits
  • 40bf4b2 Update dependencies to v0.36.3 tag
  • 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/client-go from 0.36.2 to 0.36.3

Commits
  • 44a8af2 Update dependencies to v0.36.3 tag
  • f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates knative.dev/serving from 0.49.1 to 0.50.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-dependencies group across 1 directory with 1…
b3bcd0e 
…1 updates

Bumps the go-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [carvel.dev/kapp-controller](https://github.com/carvel-dev/kapp-controller) | `0.60.3` | `0.60.4` |
| [github.com/argoproj/argo-events](https://github.com/argoproj/argo-events) | `1.9.10` | `1.9.11` |
| [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.21.0` | `1.21.1` |
| [github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller) | `1.9.2` | `1.9.4` |
| [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.9.2` | `1.9.3` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.3` | `1.4.4` |
| [github.com/shipwright-io/build](https://github.com/shipwright-io/build) | `0.20.4` | `0.20.7` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.2` | `0.36.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.2` | `0.36.3` |
| [knative.dev/serving](https://github.com/knative/serving) | `0.49.1` | `0.50.0` |



Updates `carvel.dev/kapp-controller` from 0.60.3 to 0.60.4
- [Release notes](https://github.com/carvel-dev/kapp-controller/releases)
- [Commits](carvel-dev/kapp-controller@v0.60.3...v0.60.4)

Updates `github.com/argoproj/argo-events` from 1.9.10 to 1.9.11
- [Release notes](https://github.com/argoproj/argo-events/releases)
- [Changelog](https://github.com/argoproj/argo-events/blob/master/CHANGELOG.md)
- [Commits](argoproj/argo-events@v1.9.10...v1.9.11)

Updates `github.com/cert-manager/cert-manager` from 1.21.0 to 1.21.1
- [Release notes](https://github.com/cert-manager/cert-manager/releases)
- [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md)
- [Commits](cert-manager/cert-manager@v1.21.0...v1.21.1)

Updates `github.com/fluxcd/kustomize-controller/api` from 1.9.2 to 1.9.4
- [Release notes](https://github.com/fluxcd/kustomize-controller/releases)
- [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/kustomize-controller@v1.9.2...v1.9.4)

Updates `github.com/fluxcd/source-controller/api` from 1.9.2 to 1.9.3
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.9.2...v1.9.3)

Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.3...v1.4.4)

Updates `github.com/shipwright-io/build` from 0.20.4 to 0.20.7
- [Release notes](https://github.com/shipwright-io/build/releases)
- [Commits](shipwright-io/build@v0.20.4...v0.20.7)

Updates `k8s.io/api` from 0.36.2 to 0.36.3
- [Commits](kubernetes/api@v0.36.2...v0.36.3)

Updates `k8s.io/apimachinery` from 0.36.2 to 0.36.3
- [Commits](kubernetes/apimachinery@v0.36.2...v0.36.3)

Updates `k8s.io/client-go` from 0.36.2 to 0.36.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.2...v0.36.3)

Updates `knative.dev/serving` from 0.49.1 to 0.50.0
- [Release notes](https://github.com/knative/serving/releases)
- [Commits](knative/serving@v0.49.1...v0.50.0)

---
updated-dependencies:
- dependency-name: carvel.dev/kapp-controller
  dependency-version: 0.60.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/argoproj/argo-events
  dependency-version: 1.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/cert-manager/cert-manager
  dependency-version: 1.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/fluxcd/kustomize-controller/api
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-version: 1.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/shipwright-io/build
  dependency-version: 0.20.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: knative.dev/serving
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants