chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #310 · securesign/gitsign

red-hat-konflux · 2026-03-28T02:09:57Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go	indirect	patch	`v1.36.11-20260415201107-50325440f8f2.1` → `v1.36.12-20260825204119-511051f7f437.2`
cloud.google.com/go/auth	indirect	minor	`v0.20.0` → `v0.24.0`
cloud.google.com/go/auth/oauth2adapt	indirect	minor	`v0.2.8` → `v0.3.0`
cloud.google.com/go/compute/metadata	indirect	minor	`v0.9.0` → `v0.10.0`
cloud.google.com/go/iam	indirect	minor	`v1.11.0` → `v1.14.0`
cloud.google.com/go/kms	indirect	minor	`v1.31.0` → `v1.35.0`
cloud.google.com/go/longrunning	indirect	minor	`v1.0.0` → `v1.3.0`
connectrpc.com/connect	indirect	minor	`v1.20.0` → `v1.21.0`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.22.0` → `v1.23.1`	`v1.23.2`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	patch	`v1.14.0` → `v1.14.1`
github.com/Azure/go-ansiterm	indirect	digest	`faa5f7b` → `e937bb4`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.7.2` → `v1.10.0`	`v1.10.1`
github.com/ProtonMail/go-crypto	indirect	minor	`v1.4.1` → `v1.5.1`	`v1.5.2`
github.com/ThalesIgnite/crypto11	indirect	minor	`v1.2.5` → `v1.6.8`
github.com/alibabacloud-go/cr-20160607	indirect	major	`v1.0.1` → `v2.0.0`
github.com/alibabacloud-go/cr-20181201	indirect	major	`v1.0.10` → `v3.2.3`
github.com/alibabacloud-go/darabonba-openapi	indirect	major	`v0.2.1` → `v2.2.4`
github.com/alibabacloud-go/openapi-util	indirect	patch	`v0.1.1` → `v0.1.2`
github.com/alibabacloud-go/tea	indirect	minor	`v1.3.14` → `v1.5.3`
github.com/alibabacloud-go/tea-utils	indirect	major	`v1.4.5` → `v2.0.9`
github.com/aliyun/credentials-go	indirect	patch	`v1.4.10` → `v1.4.13`
github.com/aws/aws-sdk-go-v2	indirect	minor	`v1.42.0` → `v1.47.1`
github.com/aws/aws-sdk-go-v2/config	indirect	minor	`v1.32.25` → `v1.33.6`
github.com/aws/aws-sdk-go-v2/credentials	indirect	minor	`v1.19.24` → `v1.20.6`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	minor	`v1.18.29` → `v1.20.1`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	minor	`v1.4.29` → `v1.5.4`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	indirect	minor	`v2.7.29` → `v2.8.4`
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	minor	`v1.4.30` → `v1.5.4`
github.com/aws/aws-sdk-go-v2/service/ecr	indirect	minor	`v1.55.3` → `v1.66.1`
github.com/aws/aws-sdk-go-v2/service/ecrpublic	indirect	minor	`v1.38.10` → `v1.47.1`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	patch	`v1.13.12` → `v1.13.19`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	minor	`v1.13.29` → `v1.14.4`
github.com/aws/aws-sdk-go-v2/service/kms	indirect	minor	`v1.53.4` → `v1.61.1`
github.com/aws/aws-sdk-go-v2/service/signin	indirect	minor	`v1.2.0` → `v1.10.1`
github.com/aws/aws-sdk-go-v2/service/sso	indirect	minor	`v1.31.3` → `v1.38.1`
github.com/aws/aws-sdk-go-v2/service/ssooidc	indirect	minor	`v1.36.6` → `v1.43.1`
github.com/aws/aws-sdk-go-v2/service/sts	indirect	minor	`v1.43.3` → `v1.51.1`
github.com/aws/smithy-go	indirect	minor	`v1.27.2` → `v1.28.2`
github.com/buildkite/agent/v3	indirect	major	`v3.130.0` → `v4.0.7`	`v4.0.9` (+1)
github.com/buildkite/go-pipeline	indirect	minor	`v0.17.1` → `v0.18.0`	`v0.18.1`
github.com/cenkalti/backoff/v4	indirect	major	`v4.3.0` → `v7.0.0`	`v7.0.1`
github.com/cenkalti/backoff/v5	indirect	major	`v5.0.3` → `v7.0.0`	`v7.0.1`
github.com/cloudflare/circl	indirect	patch	`v1.6.3` → `v1.6.5`
github.com/coreos/go-oidc/v3	require	minor	`v3.20.0` → `v3.21.0`
github.com/cyphar/filepath-securejoin	indirect	minor	`v0.6.1` → `v0.7.0`
github.com/digitorus/pkcs7	indirect	digest	`ffadbf3` → `d678ea5`
github.com/digitorus/timestamp	indirect	digest	`c455327` → `b4b58b9`
github.com/docker/cli	indirect	minor	`v29.5.3+incompatible` → `v29.8.2+incompatible`
github.com/docker/docker-credential-helpers	indirect	patch	`v0.9.5` → `v0.9.9`
github.com/dustin/go-humanize	indirect	minor	`v1.0.1` → `v1.1.0`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/fxamacker/cbor/v2	indirect	patch	`v2.9.0` → `v2.9.4`
github.com/go-chi/chi/v5	indirect	patch	`v5.3.0` → `v5.3.2`
github.com/go-git/gcfg	indirect	major	`v1.5.1-0.20230307220236-3a3c6141e376` → `v2.0.2`
github.com/go-jose/go-jose/v4	indirect	patch	`v4.1.4` → `v4.1.5`
github.com/go-openapi/analysis	indirect	major	`v0.25.5` → `v1.0.0`
github.com/go-openapi/errors	indirect	patch	`v0.22.8` → `v0.22.9`
github.com/go-openapi/jsonpointer	indirect	patch	`v1.0.0` → `v1.0.2`
github.com/go-openapi/jsonreference	indirect	patch	`v1.0.0` → `v1.0.3`
github.com/go-openapi/loads	indirect	patch	`v0.25.0` → `v0.25.3`
github.com/go-openapi/runtime	require	minor	`v0.32.6` → `v0.33.2`
github.com/go-openapi/runtime/server-middleware	indirect	minor	`v0.30.0` → `v0.33.2`
github.com/go-openapi/spec	indirect	major	`v0.22.9` → `v1.0.1`
github.com/go-openapi/strfmt	require	patch	`v0.27.0` → `v0.27.2`
github.com/go-openapi/swag	indirect	minor	`v0.26.1` → `v0.29.2`
github.com/go-openapi/swag/cmdutils	indirect	minor	`v0.26.1` → `v0.29.2`
github.com/go-openapi/swag/conv	require	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/fileutils	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/jsonname	indirect	minor	`v0.26.1` → `v0.29.2`
github.com/go-openapi/swag/jsonutils	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/loading	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/mangling	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/netutils	indirect	minor	`v0.26.1` → `v0.29.2`
github.com/go-openapi/swag/pools	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/stringutils	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/typeutils	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/swag/yamlutils	indirect	minor	`v0.27.3` → `v0.29.2`
github.com/go-openapi/validate	indirect	major	`v0.26.1` → `v1.0.0`
github.com/golang-jwt/jwt/v4	indirect	major	`v4.5.2` → `v5.3.1`
github.com/google/go-containerregistry	indirect	minor	`v0.21.7` → `v0.22.1`
github.com/google/go-github/v88	indirect	major	`v88.0.0` → `v92.0.0`
github.com/google/s2a-go	indirect	patch	`v0.1.9` → `v0.1.10`
github.com/google/trillian	indirect	minor	`v1.7.3` → `v1.8.0`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.16` → `v0.3.22`
github.com/googleapis/gax-go/v2	indirect	minor	`v2.22.0` → `v2.26.2`
github.com/grpc-ecosystem/go-grpc-middleware	indirect	major	`v1.4.0` → `v2.3.4`
github.com/grpc-ecosystem/grpc-gateway/v2	indirect	minor	`v2.29.0` → `v2.31.0`
github.com/hashicorp/hcl	indirect	major	`v1.0.1-vault-7` → `v2.25.0`
github.com/hashicorp/vault/api	indirect	minor	`v1.22.0` → `v1.23.0`
github.com/jedisct1/go-minisign	indirect	digest	`d2f9f49` → `a09352b`
github.com/jellydator/ttlcache/v3	indirect	patch	`v3.4.0` → `v3.4.1`
github.com/klauspost/compress	indirect	minor	`v1.18.6` → `v1.20.1`
github.com/klauspost/cpuid/v2	indirect	minor	`v2.3.0` → `v2.4.0`
github.com/mattn/go-isatty	indirect	patch	`v0.0.20` → `v0.0.24`
github.com/mattn/go-tty	require	major	`v0.0.8` → `v2.0.2`
github.com/oklog/ulid/v2	indirect	patch	`v2.1.1` → `v2.1.2`
github.com/pelletier/go-toml/v2	indirect	minor	`v2.2.4` → `v2.4.3`
github.com/secure-systems-lab/go-securesystemslib	require	patch	`v0.11.0` → `v0.11.1`
github.com/sigstore/cosign/v3	require	patch	`v3.1.2` → `v3.1.3`
github.com/sigstore/protobuf-specs	require	patch	`v0.5.1` → `v0.5.2`
github.com/sigstore/rekor	require	patch	`v1.5.3` → `v1.5.4`
github.com/sigstore/sigstore	require	minor	`v1.10.9-0.20260728171319-05a1d9750eaf` → `v1.11.0`
github.com/sigstore/sigstore-go	require	minor	`v1.2.2` → `v1.3.0`
github.com/sigstore/sigstore/pkg/signature/kms/aws	indirect	minor	`v1.10.8` → `v1.11.0`
github.com/sigstore/sigstore/pkg/signature/kms/azure	indirect	minor	`v1.10.8` → `v1.11.0`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	indirect	minor	`v1.10.8` → `v1.11.0`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	indirect	minor	`v1.10.8` → `v1.11.0`
github.com/sigstore/timestamp-authority/v2	indirect	patch	`v2.1.2` → `v2.1.3`
github.com/sirupsen/logrus	indirect	minor	`v1.9.4` → `v1.10.2`
github.com/skeema/knownhosts	indirect	patch	`v1.3.2` → `v1.3.3`
github.com/spiffe/go-spiffe/v2	indirect	minor	`v2.7.0` → `v2.8.2`
github.com/theupdateframework/go-tuf	indirect	major	`v0.7.0` → `v2.4.2`
github.com/tink-crypto/tink-go-gcpkms/v2	indirect	minor	`v2.2.0` → `v2.4.0`
github.com/tink-crypto/tink-go/v2	indirect	minor	`v2.6.0` → `v2.8.0`
github.com/tjfoc/gmsm	indirect	major	`v1.4.1` → `v2.0.0`
gitlab.com/gitlab-org/api/client-go	indirect	major	`v1.46.0` → `v3.14.0`	`v3.15.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.68.0` → `v0.71.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.69.0` → `v0.71.0`
go.opentelemetry.io/otel	indirect	minor	`v1.44.0` → `v1.46.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.44.0` → `v1.46.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.44.0` → `v1.46.0`
go.step.sm/crypto	indirect	minor	`v0.81.0` → `v0.91.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.4` → `v3.0.5`
go.yaml.in/yaml/v3	indirect	patch	`v3.0.4` → `v3.0.5`
golang.org/x/crypto	indirect	minor	`v0.56.0` → `v0.57.0`
golang.org/x/mod	indirect	minor	`v0.40.0` → `v0.41.0`
golang.org/x/net	indirect	minor	`v0.58.0` → `v0.59.0`
golang.org/x/oauth2	require	minor	`v0.36.0` → `v0.37.0`
golang.org/x/sync	indirect	minor	`v0.22.0` → `v0.23.0`
golang.org/x/sys	indirect	minor	`v0.47.0` → `v0.48.0`
golang.org/x/term	indirect	minor	`v0.45.0` → `v0.46.0`
golang.org/x/text	indirect	minor	`v0.41.0` → `v0.42.0`
golang.org/x/time	indirect	minor	`v0.15.0` → `v0.16.0`
google.golang.org/api	indirect	minor	`v0.286.0` → `v0.299.0`
google.golang.org/grpc	indirect	minor	`v1.82.0` → `v1.84.0`
google.golang.org/protobuf	require	patch	`v1.36.12-0.20260120151049-f2248ac996af` → `v1.36.12`
gopkg.in/evanphx/json-patch.v4	indirect	major	`v4.13.0` → `v5.9.11`
k8s.io/api	indirect	minor	`v0.36.2` → `v0.37.1`
k8s.io/apimachinery	indirect	minor	`v0.36.2` → `v0.37.1`
k8s.io/client-go	indirect	minor	`v0.36.2` → `v0.37.1`
k8s.io/utils	indirect	digest	`b8788ab` → `cf1189d`
sigs.k8s.io/json	indirect	digest	`2d32026` → `11ed52e`
sigs.k8s.io/structured-merge-diff/v6	indirect	major	`v6.3.2` → `v7.0.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

`v0.24.0`

bigquery: Support for the NUMERIC type.
bigtable:
- cbt: Optionally specify columns for read/lookup
- Support instance-level administration.
oslogin: New client for the OS Login API.
pubsub:
- The package is now stable. There will be no further breaking changes.
- Internal changes to improve Subscription.Receive behavior.
storage: Support updating bucket lifecycle config.
spanner: Support struct-typed parameter bindings.
texttospeech: New client for the Text-to-Speech API.

`v0.23.3`: auth: v0.23.3

Bug Fixes

Handle secureconnect helper failures gracefully (c2794c6)
Handle secureconnect helper failures gracefully (#20443) (c2794c6)

`v0.23.2`: auth: v0.23.2

Bug Fixes

auth: Eliminate timing race conditions in grpctransport otel tests (#20175) (#20382) (637505e)

`v0.23.1`: auth: v0.23.1

Bug Fixes

auth: Fix OpenTelemetry test flake in grpctransport (#20191) (e43ce28)

`v0.23.0`

Compare Source

bigquery: Add DDL stats to query statistics.
bigtable:
- cbt: Add cells-per-column limit for row lookup.
- cbt: Make it possible to combine read filters.
dlp: v2beta2 client removed. Use the v2 client instead.
firestore, spanner: Fix compilation errors due to protobuf changes.

`v0.22.0`

Compare Source

bigtable:
- cbt: Support cells per column limit for row read.
- bttest: Correctly handle empty RowSet.
- Fix ReadModifyWrite operation in emulator.
- Fix API path in GetCluster.
bigquery:
- BEHAVIOR CHANGE: Retry on 503 status code.
- Add dataset.DeleteWithContents.
- Add SchemaUpdateOptions for query jobs.
- Add Timeline to QueryStatistics.
- Add more stats to ExplainQueryStage.
- Support Parquet data format.
datastore:
- Support omitempty for times.
dlp:
- BREAKING CHANGE: Remove v1beta1 client. Please migrate to the v2 client,
  which is now out of beta.
- Add v2 client.
firestore:
- BEHAVIOR CHANGE: Treat set({}, MergeAll) as valid.
iam:
- Support JWT signing via SignJwt callopt.
profiler:
- BEHAVIOR CHANGE: PollForSerialOutput returns an error when context.Done.
- BEHAVIOR CHANGE: Increase the initial backoff to 1 minute.
- Avoid returning empty serial port output.
pubsub:
- BEHAVIOR CHANGE: Don't backoff during next retryable error once stream is healthy.
- BEHAVIOR CHANGE: Don't backoff on EOF.
- pstest: Support Acknowledge and ModifyAckDeadline RPCs.
redis:
- Add v1 beta Redis client.
spanner:
- Support SessionLabels.
speech:
- Add api v1 beta1 client.
storage:
- BEHAVIOR CHANGE: Retry reads when retryable error occurs.
- Fix delete of object in requester-pays bucket.
- Support KMS integration.

`v0.21.0`

Compare Source

bigquery:
- Add OpenCensus tracing.
firestore:
- BREAKING CHANGE: If a document does not exist, return a DocumentSnapshot
  whose Exists method returns false. DocumentRef.Get and Transaction.Get
  return the non-nil DocumentSnapshot in addition to a NotFound error.
  DocumentRef.GetAll and Transaction.GetAll return a non-nil
  DocumentSnapshot instead of nil.
- Add DocumentIterator.Stop. Call Stop whenever you are done with a
  DocumentIterator.
- Added Query.Snapshots and DocumentRef.Snapshots, which provide realtime
  notification of updates. See https://cloud.google.com/firestore/docs/query-data/listen.
- Canceling an RPC now always returns a grpc.Status with codes.Canceled.
spanner:
- Add CommitTimestamp, which supports inserting the commit timestamp of a
  transaction into a column.

connectrpc/connect-go (connectrpc.com/connect)

`v1.21.0`

Compare Source

What's Changed

[!IMPORTANT]

This release adds a security-related feature for servers. The new handler option WithRequestGate runs after the request headers are available and before any message is received. Use this new option to register checks (e.g. authentication) that should happen before the request is decompressed or unmarshaled, and before any interceptors are run. See the documentation for details.

Governance

Add pkwarren as a maintainer by @bufdev in #929 🎉

Enhancements

Add WithRequestGate handler option by @emcfarlane in #962
Create release binary for protoc-gen-connect-go by @emcfarlane in #966

Bugfixes

Fix issue with user-agent getting inappropriately injected into request headers by @jhump in #934
Fix client streaming operations blocking indefinitely after context cancellation by @haru0017 in #937
Fix flaky HTTP2 testcase assertion by @emcfarlane in #940
Fix data race and connection leak in duplexHTTPCall by @emcfarlane in #938
Fix off-by-one in WithHTTPGetMaxURLSize URL length check by @fchimpan in #955
Fix connect.WithGRPC typo in the missing client option error by @NotAFlightRisk in #956
Only send a 304 when the request was a GET by @NotAFlightRisk in #957
Fix panic in stream Spec and Peer when client construction failed by @NotAFlightRisk in #959
Fix dropped headers on errStreamingClientConn by @mohit-bhandari45 in #964

New Contributors

@haru0017 made their first contribution in #937
@dongjiang1989 made their first contribution in #945
@fchimpan made their first contribution in #955
@NotAFlightRisk made their first contribution in #956
@mohit-bhandari45 made their first contribution in #964

Full Changelog: connectrpc/connect-go@v1.20.0...v1.21.0

Azure/azure-sdk-for-go (github.com/Azure/azure-sdk-for-go/sdk/azcore)

`v1.23.1`

1.23.1 (2026-08-27)

Other Changes

Upgraded dependencies.

`v1.23.0`

1.23.0 (2026-08-11)

Features Added

Helper method runtime.NewRequestForNextLink for creating requests for pageable operations that uses a next link. It handles absolute and relative next links.

Bugs Fixed

Fixed an issue where runtime.Pager[T].More could return true indefinitely after NextPage failed to retrieve the first page, causing for pager.More() loops to spin. After a page fetch returns an error the Pager now enters a terminal state: More returns false and subsequent NextPage calls return the same error without invoking the fetcher again.

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.10.0`

Compare Source

What's Changed

Resolve Go lint backlog and enforce formatting in CI by @Robbie-Microsoft in #667
Add ClientConfigurer interface by @jhendrixMSFT in #669
Pin GitHub Actions to full-length commit SHAs by @4gust in #677
Normalize sovereign aliases before regional instance discovery by @Robbie-Microsoft in #674
Validate issuer before caching discovered endpoints by @Robbie-Microsoft in #675
Fix proactive refresh grant selection by @4gust in #676
Fix attribute-aware app-token cache isolation by @4gust in #679
Bump SDK SKU version to v1.10.0 by @4gust in #680

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.9.0...v1.10.0

`v1.9.0`

Compare Source

What's Changed

ci: stage MSAL Go pipeline + add Managed Identity IMDS & Azure Arc E2E tests by @gladjohn in #641
Fix intermittent "context canceled" token failures in managed identity retry() by @4gust in #642
Add user-assigned managed identity (UAMI) support for Azure Arc (MSAL.NET #6128 parity) by @gladjohn in #644
Reject legacy RFC 1423 encrypted PEM in CertFromPEM by @Robbie-Microsoft in #645
Harden regional authority validation by @4gust in #650
fix(managedidentity): pin Service Fabric TLS certificate by @4gust in #656
Fix ID token credential type casing by @4gust in #657
Fix WS-Trust endpoint selection helper by @4gust in #655
Prepare MSAL Go 1.9.0 release by @4gust in #658

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.8.0...v1.9.0

`v1.8.0`

Compare Source

What's Changed

Recover from panics in json.Unmarshal to prevent token-cache crashes (fixes #579) by @4gust in #614
fix(base.go): empty partition key causing external cache miss by @MatteoCalabro-TomTom in #615
Add User Federated Identity Credential (user_fic) grant type support by @Avery-Dunn in #619

New Contributors

@MatteoCalabro-TomTom made their first contribution in #615

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.2...1.8.0

ProtonMail/go-crypto (github.com/ProtonMail/go-crypto)

`v1.5.1`

Compare Source

What's Changed

Harden handling of malformed OpenPGP input in #332
Ensure rsa key gen test works with go 1.27 in #334

Full Changelog: ProtonMail/go-crypto@v1.5.0...v1.5.1

`v1.5.0`

Compare Source

What's Changed

Implement ML-KEM, ML-DSA, and SLH-DSA in #316
Bump github.com/cloudflare/circl to 1.6.3 in #302
Ensure generated RSA key primes satisfy P < Q constraint in #305
Add Signature.IssuerKeyVersion field in #310
Fix RSA precompute after prime swap in #317
openpgp: prevent panic when candidate identity has no self-signature in #313
guard nil issuer key id when checking trailing signature in #320
guard nil issuer key id on v2 message read path in #319
Don't panic on unknown AEAD mode in v5/v6 SKESK packets in #322
restrict embedding to embeddable signature types in #325
fix: Malformed session key decoding in PKESK in #330
fix: Do not accept malformed ecdh sk input in #329
fix: Reduce risk of invalid slice access in #331

Full Changelog: ProtonMail/go-crypto@v1.4.1...v1.5.0

ThalesIgnite/crypto11 (github.com/ThalesIgnite/crypto11)

`v1.6.8`

Compare Source

What's Changed

downgrade the go version to 1.25.0 and add go toolchain by @Nicolas-Peiffer in eclipse-keypont#139
fix: restore eclipse-keypont module path; refresh README install command, Go Reference badge and documentation links

Full Changelog: eclipse-keypont/crypto11@v1.6.5...v1.6.8

Module path restored — `github.com/eclipse-keypont/crypto11`

This release restores the correct module path following the repository move from
github.com/ThalesGroup/crypto11 to github.com/eclipse-keypont/crypto11.

Migrating

go get github.com/eclipse-keypont/crypto11@v1.6.8

-import "github.com/ThalesGroup/crypto11"
+import "github.com/eclipse-keypont/crypto11"

The old path is deprecated and frozen at
ThalesGroup/crypto11@v1.6.7.
It will receive no further updates, including security fixes. GitHub still redirects the old
repository URL, but the Go module path must be updated by hand — go get cannot follow it for you.

If you are already on this path: upgrade v1.6.5 → v1.6.8

v1.6.6 and v1.6.7 declare the old module path and exist only to publish the deprecation
notice for github.com/ThalesGroup/crypto11. They are not usable as
github.com/eclipse-keypont/crypto11 and will fail with:

module declares its path as: github.com/ThalesGroup/crypto11
        but was required as: github.com/eclipse-keypont/crypto11

v1.6.8 fixes this, so github.com/eclipse-keypont/crypto11@latest resolves correctly again.

Go version policy

go.mod targets go 1.25.0 with toolchain go1.25.8. The go directive is kept conservative
so this library does not raise the minimum Go version for projects that import it, while
maintainers build and test with the latest patch toolchain. See #137 and #139.

The v1.6.x series is the current stable line. v2.x.y on github.com/eclipse-keypont/crypto11/v2 is in
development (v2.0.0-rc3), which is why pkg.go.dev reports a higher tagged major version.

Donating the ThalesGroup/crypto11 project to the Eclipse Foundation Project KeyPont
Repository migration from github.com/ThalesGroup to github.com/eclipse-keypont. Migration details #138

Full Changelog: eclipse-keypont/crypto11@v1.6.3...v1.6.5

`v1.6.4`

Compare Source

`v1.6.3`

Compare Source

`v1.6.2`

Compare Source

downgrade the go version to 1.25.0 as per thales-transfer#137
add go toolchain

Full Changelog: eclipse-keypont/crypto11@v1.6.0...v1.6.2

`v1.6.1`

Compare Source

`v1.6.0`

Compare Source

What's Changed

Update go1.25.1 by @Nicolas-Peiffer in ThalesGroup#124

Full Changelog: eclipse-keypont/crypto11@v1.5.0...v1.6.0

`v1.5.0`

Compare Source

What's Changed

Fix findkeys error and eval byte nil or len zero by @Nicolas-Peiffer in ThalesGroup#122
Update go1.24.5 by @Nicolas-Peiffer in ThalesGroup#123

Full Changelog: eclipse-keypont/crypto11@v1.4.1...v1.5.0

`v1.4.1`

Compare Source

What's Changed

update to go 1.23.6
fix: underlying library context is reused through reference counting by @ek-1n574 in ThalesGroup#114

New Contributors

@ek-1n574 made their first contribution in ThalesGroup#114

Full Changelog: eclipse-keypont/crypto11@v1.4.0...v1.4.1

`v1.4.0`

Compare Source

What's Changed

upgrade to go1.23.6 by @Nicolas-Peiffer in ThalesGroup#116

New Contributors

@Nicolas-Peiffer made their first contribution in ThalesGroup#116

Full Changelog: eclipse-keypont/crypto11@v1.3.0...v1.4.0

`v1.3.0`

Compare Source

What's Changed

feature: optimized aes cbc support by @IceManGreen in ThalesGroup#107
RSA support for asymmetric decryption by @IceManGreen in ThalesGroup#115

New Contributors

@IceManGreen made their first contribution in ThalesGroup#107

Full Changelog: eclipse-keypont/crypto11@v1.2.1...v1.3.0

alibabacloud-go/cr-20160607 (github.com/alibabacloud-go/cr-20160607)

`v2.0.0`

Compare Source

Generated 2016-06-07 for cr.

alibabacloud-go/cr-20181201 (github.com/alibabacloud-go/cr-20181201)

`v3.2.3`

Compare Source

Update API CreateArtifactLifecycleRule: add request parameters DryRun.
Update API CreateArtifactLifecycleRule: add request parameters EnableDeleteUntaggedManifest.
Update API GetArtifactBuildRule: add response parameters Body.Parameters.Priority.
Update API GetArtifactBuildTask: add response parameters Body.ArtifactCompression.
Update API GetArtifactBuildTask: add response parameters Body.Priority.
Update API GetArtifactBuildTask: add response parameters Body.SourceArtifact.LayerCount.
Update API GetArtifactBuildTask: add response parameters Body.SourceArtifact.Size.
Update API GetArtifactBuildTask: add response parameters Body.TargetArtifact.LayerCount.
Update API GetArtifactBuildTask: add response parameters Body.TargetArtifact.Size.
Update API GetArtifactLifecycleRule: add response parameters Body.DryRun.
Update API GetArtifactLifecycleRule: add response parameters Body.EnableDeleteUntaggedManifest.
Update API GetInstanceUsage: add response parameters Body.PerformanceUnits.
Update API ListArtifactLifecycleRule: add response parameters Body.Rules.$.DryRun.
Update API ListArtifactLifecycleRule: add response parameters Body.Rules.$.EnableDeleteUntaggedManifest.
Update API UpdateArtifactLifecycleRule: add request parameters DryRun.
Update API UpdateArtifactLifecycleRule: add request parameters EnableDeleteUntaggedManifest.

`v3.2.2`

Compare Source

Generated 2018-12-01 for cr.

`v3.2.1`

Compare Source

Generated 2018-12-01 for cr.

`v3.2.0`

Compare Source

Support API CreateInstanceCustomizedDomain.
Support API DeleteInstanceCustomizedDomain.
Support API GetInstanceCustomizedDomain.
Support API UpdateInstanceCustomizedDomain.

`v3.1.3`

Compare Source

Update API CreateInstanceEndpointAclPolicy: add request parameters Entries.
Update API DeleteInstanceEndpointAclPolicy: add request parameters Entries.

`v3.1.2`

Compare Source

Update API CreateRepoSyncRule: add request parameters LinkId.
Update API ListRepoSyncRule: add response parameters Body.SyncRules.$.LinkId.
Update API ListRepoSyncTask: add response parameters Body.SyncTasks.$.LinkId.
Update API ListRepoSyncTask: add response parameters Body.SyncTasks.$.ModifiedTime.

`v3.1.1`

Compare Source

Update API ListRepoBuildRule: add response parameters Body.BuildRules.$.DestArtifactType.

`v3.1.0`

Compare Source

Support API CreateScanRule.
Support API CreateStorageDomainRoutingRule.
Support API DeleteScanRule.
Support API DeleteStorageDomainRoutingRule.
Support API GetScanRule.
Support API GetStorageDomainRoutingRule.
Support API ListScanRule.
Support API UpdateScanRule.
Support API UpdateStorageDomainRoutingRule.

`v3.0.6`

Compare Source

Update API GetArtifactSubscriptionRule: add response parameters Body.SourceDomain.
Update API ListArtifactSubscriptionRule: add response parameters Body.Rules.$.SourceDomain.

`v3.0.5`

Compare Source

Update API GetInstanceVpcEndpoint: add response parameters Body.LinkedVpcs.$.Issue.

`v3.0.4`

Compare Source

Update API GetArtifactLifecycleRule: add response parameters Body.Policies.
Update API ListArtifactLifecycleRule: add response parameters Body.Rules.$.Policies.

`v3.0.3`

Compare Source

Generated 2018-12-01 for cr.

`v3.0.2`

Compare Source

Update API CreateNamespace: add request parameters DefaultRepoConfiguration.
Update API GetNamespace: add response parameters Body.DefaultRepoConfiguration.
Update API ListNamespace: add response parameters Body.Namespaces.$.DefaultRepoConfiguration.
Update API UpdateNamespace: add request parameters DefaultRepoConfiguration.

`v3.0.1`

Compare Source

Update API CreateRepoTagScanTask: add request parameters ScanType.
Update API GetRepoTagScanStatus: add request parameters ScanType.

`v3.0.0`

Compare Source

Support API CancelRepoSyncTask.
Support API CreateArtifactSubscriptionRule.
Support API CreateArtifactSubscriptionTask.
Support API DeleteArtifactSubscriptionRule.
Support API GetArtifactSubscriptionRule.
Support API GetArtifactSubscriptionTask.
Support API GetArtifactSubscriptionTaskResult.
Support API ListArtifactSubscriptionRule.
Support API ListArtifactSubscriptionTask.
Support API UpdateArtifactSubscriptionRule.
Delete API GetRepoTagLayers.
Delete API GetRepoTagManifest.
Update API CreateRepoSyncRule: add request parameters RepoNameFilter.
Update API GetArtifactBuildRule: add response parameters Body.Parameters.PriorityFile.
Update API GetInstanceUsage: add response parameters Body.VpcQuota.
Update API GetInstanceUsage: add response parameters Body.VpcUsage.
Update API GetRepoSyncTask: add response parameters Body.TaskIssue.
Update API ListRepoSyncRule: add response parameters Body.SyncRules.$.RepoNameFilter.
Update API ListRepoSyncTask: add response parameters Body.SyncTasks.$.TaskIssue.

`v2.5.0`

Compare Source

Support API CreateArtifactLifecycleRule.
Support API DeleteArtifactLifecycleRule.
Support API GetArtifactLifecycleRule.
Support API ListArtifactLifecycleRule.
Support API UpdateArtifactLifecycleRule.

`v2.4.0`

Compare Source

Support API ListScanBaselineByTask.
Support API ListScanMaliciousFileByTask.
Update API GetArtifactBuildRule: update response param.
Update API ListRepository: update param RepoStatus.

`v2.3.2`

Compare Source

Generated 2018-12-01 for cr.

`v2.3.1`

Compare Source

Generated 2018-12-01 for cr.

`v2.3.0`

Compare Source

Generated 2018-12-01 for cr.

`v2.2.2`

Compare Source

Generated 2018-12-01 for cr.

`v2.2.1`

Compare Source

Generated 2018-12-01 for cr.

`v2.2.0`

Compare Source

Generated 2018-12-01 for cr.

`v2.1.0`

[Compare Source](https://redirect.github.com/alibabacloud-go/cr-20181201/compare/v2

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-05-30T07:03:08Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Details:

Package	Change
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12-0.20260120151049-f2248ac996af`
`github.com/AzureAD/microsoft-authentication-library-for-go`	`v1.7.0` -> `v1.7.2`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.13.21` -> `v1.13.30`
`github.com/aws/aws-sdk-go-v2/service/signin`	`v1.0.9` -> `v1.4.1`
`github.com/go-openapi/jsonreference`	`v0.21.5` -> `v0.21.6`
`github.com/in-toto/in-toto-golang`	`v0.10.0` -> `v0.11.0`

red-hat-konflux · 2026-07-23T15:06:51Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: github.com/ThalesIgnite/crypto11@v1.6.8: parsing go.mod:
	module declares its path as: github.com/eclipse-keypont/crypto11
	        but was required as: github.com/ThalesIgnite/crypto11

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Mar 28, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 15 times, most recently from a66f023 to a3004fc Compare April 4, 2026 18:35

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 13 times, most recently from 110eda4 to 9cb6998 Compare April 11, 2026 10:09

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 9cb6998 to 86f9d57 Compare April 13, 2026 17:00

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 16 times, most recently from 1e6bc40 to b61cf67 Compare April 25, 2026 22:35

red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 11 times, most recently from bb4cdc6 to 8711075 Compare April 29, 2026 10:30

chore(deps): update go dependencies

2509790

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Navigation Menu

chore(deps): update go dependencies - #310

chore(deps): update go dependencies#310
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps

red-hat-konflux Bot commented Mar 28, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented May 30, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Jul 23, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented Mar 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.23.3: auth: v0.23.3

Bug Fixes

v0.23.2: auth: v0.23.2

Bug Fixes

v0.23.1: auth: v0.23.1

Bug Fixes

What's Changed

Governance

Enhancements

Bugfixes

New Contributors

1.23.1 (2026-08-27)

Other Changes

1.23.0 (2026-08-11)

Features Added

Bugs Fixed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

Module path restored — github.com/eclipse-keypont/crypto11

Migrating

If you are already on this path: upgrade v1.6.5 → v1.6.8

Go version policy

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented May 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

red-hat-konflux Bot commented Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Mar 28, 2026 •

edited

Loading

`v0.23.3`: auth: v0.23.3

`v0.23.2`: auth: v0.23.2

`v0.23.1`: auth: v0.23.1

Module path restored — `github.com/eclipse-keypont/crypto11`

red-hat-konflux Bot commented May 30, 2026 •

edited

Loading

red-hat-konflux Bot commented Jul 23, 2026 •

edited

Loading