Update Go deps by renovate[bot] · Pull Request #64 · cerbos/reimage

renovate · 2026-03-30T00:59:25Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/golangci/golangci-lint/v2	`v2.3.0` → `v2.12.2`
github.com/google/go-containerregistry	`v0.21.7` → `v0.21.9`
github.com/goreleaser/goreleaser/v2	`v2.16.0` → `v2.17.1`
golang.org/x/vuln	`v1.6.0` → `v1.7.0`
google.golang.org/api	`v0.291.0` → `v0.293.0`
google.golang.org/protobuf	`v1.36.12-0.20260120151049-f2248ac996af` → `v1.36.12`

Release Notes

golangci/golangci-lint (github.com/golangci/golangci-lint/v2)

`v2.12.2`

Compare Source

Released on 2026-05-06

Linters bug fixes
- gomodguard_v2: fix blocked configuration
- gomodguard_v2: from 2.1.0 to 2.1.3
- iface: from 1.4.1 to 1.4.2

`v2.12.1`

Compare Source

Released on 2026-05-01

Linters bug fixes
- gomodguard_v2: fix panic with migration suggestion
Misc.
- fix install.sh script (if you are still using an URL based on the branch master, please update to use https://golangci-lint.run/install.sh)

`v2.12.0`

Compare Source

Released on 2026-05-01

New linters
- Add clickhouselint linter https://github.com/ClickHouse/clickhouse-go-linter
Linters new features or changes
- dupl: from f665c8d to c99c5cf (extended detection)
- funcorder: from 0.5.0 to 0.6.0 (new option: function)
- goconst: add an option to ignore strings from tests
- goconst: from 1.8.2 to 1.10.0 (extended detection)
- gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)
- gosec: from 619ce21 to 2.26.1 (new checks: G124, G708, G709, G710)
- govet: add inline analyzer
- makezero: from 2.1.0 to 2.2.1 (support slice type aliases)
- paralleltest: expose checkcleanup option
- sloglint: from 0.11.1 to 0.12.0 (new options: allowed-keys, custom-funcs)
- wsl_v5: from 5.6.0 to 5.8.0 (new option: cuddle-max-statements; new checks: after-decl, after-defer, after-expr, after-go, cuddle-group)
Linters bug fixes
- forbidigo: from 2.3.0 to 2.3.1
- godot: from 1.5.4 to 1.5.6
- govet-modernize: from 0.43.0 to 0.44.0
- ireturn: from 0.4.0 to 0.4.1
- rowserrcheck: from 1.1.1 to c5f79b8
Misc.
- Decrease cache entropy
- Embed the JSON schema in the binary
- Filter env vars when cloning the repository with the custom command

`v2.11.4`

Compare Source

Released on 2026-03-22

Linters bug fixes
- govet-modernize: from 0.42.0 to 0.43.0
- noctx: from 0.5.0 to 0.5.1
- sqlclosecheck: from 0.5.1 to 0.6.0

`v2.11.3`

Compare Source

Released on 2026-03-10

Linters bug fixes
- gosec: from v2.24.7 to 619ce21

`v2.11.2`

Compare Source

Released on 2026-03-07

Fixes
- fmt: fix error when using the fmt command with explicit paths.

`v2.11.1`

Compare Source

Released on 2026-03-06

Due to an error related to AUR, some artifacts of the v2.11.0 release have not been published.

This release contains the same things as v2.11.0.

`v2.11.0`

Compare Source

Released on 2026-03-06

Linters new features or changes
- errcheck: from 1.9.0 to 1.10.0 (exclude crypto/rand.Read by default)
- gosec: from 2.23.0 to 2.24.6 (new rules: G113, G118, G119, G120, G121, G122, G123, G408, G707)
- noctx: from 0.4.0 to 0.5.0 (new detection: httptest.NewRequestWithContext)
- prealloc: from 1.0.2 to 1.1.0
- revive: from 1.14.0 to 1.15.0 (⚠️ Breaking change: package-related checks moved from var-naming to a new rule package-naming)
Linters bug fixes
- gocognit: from 1.2.0 to 1.2.1
- gosec: from 2.24.6 to 2.24.7
- unqueryvet: from 1.5.3 to 1.5.4

`v2.10.1`

Compare Source

Released on 2026-02-17

Fixes
- buildssa panic

`v2.10.0`

Compare Source

Released on 2026-02-17

Linters new features or changes
- ginkgolinter: from 0.22.0 to 0.23.0
- gosec: from 2.22.11 to 2.23.0 (new rules: G117, G602, G701, G702, G703, G704, G705, G706)
- staticcheck: from 0.6.1 to 0.7.0
Linters bug fixes
- godoclint: from 0.11.1 to 0.11.2

`v2.9.0`

Compare Source

Released on 2026-02-10

Enhancements
- 🎉 go1.26 support
Linters new features or changes
- arangolint: from 0.3.1 to 0.4.0 (new rule: detect potential query injections)
- ginkgolinter: from 0.21.2 to 0.22.0 (support for wrappers)
- golines: from 0.14.0 to 0.15.0
- misspell: from 0.7.0 to 0.8.0
- unqueryvet: from 1.4.0 to 1.5.3 (new options: check-n1, check-sql-injection, check-tx-leaks, allow, custom-rules)
- wsl: from 5.3.0 to 5.6.0 (new rule: after-block)
Linters bug fixes
- modernize: from 0.41.0 to 0.42.0
- prealloc: from 1.0.1 to 1.0.2
- protogetter: from 0.3.18 to 0.3.20
Misc.
- Log information about files when configuration verification
- Emit an error when no linters enabled
- Do not collect VCS information when loading code

`v2.8.0`

Compare Source

Released on 2026-01-07

Linters new features or changes
- godoc-lint: from 0.10.2 to 0.11.1 (new rule: require-stdlib-doclink)
- golines: from 442fd00 to 0.14.0
- gomoddirectives: from 0.7.1 to 0.8.0
- gosec: from daccba6 to 2.22.11 (new rule: G116)
- modernize: from 0.39.0 to 0.40.0 (new analyzers: stringscut, unsafefuncs)
- prealloc: from 1.0.0 to 1.0.1 (message changes)
- unqueryvet: from 1.3.0 to 1.4.0 (new options: check-aliased-wildcard, check-string-concat, check-format-strings, check-string-builder, check-subqueries, ignored-functions, sql-builders)
Linters bug fixes
- go-critic: from 0.14.2 to 0.14.3
- go-errorlint: from 1.8.0 to 1.9.0
- govet: from 0.39.0 to 0.40.0
- protogetter: from 0.3.17 to 0.3.18
- revive: add missing enable-default-rules setting
Documentation
- docs: split installation page

`v2.7.2`

Compare Source

Released on 2025-12-07

Linter bug fixes
- gosec: from 2.22.10 to daccba6

`v2.7.1`

Compare Source

Released on 2025-12-04

Linter bug fixes
- modernize: disable stringscut analyzer

`v2.7.0`

Compare Source

Bug fixes
- fix: clone args used by custom command
Linters new features or changes
- no-sprintf-host-port: from 0.2.0 to 0.3.1 (ignore string literals without a colon)
- unqueryvet: from 1.2.1 to 1.3.0 (handles const and var declarations)
- revive: from 1.12.0 to 1.13.0 (new option: enable-default-rules, new rules: forbidden-call-in-wg-go, unnecessary-if, inefficient-map-lookup)
- modernize: from 0.38.0 to 0.39.0 (new analyzers: plusbuild, stringscut)
Linters bug fixes
- perfsprint: from 0.10.0 to 0.10.1
- wrapcheck: from 2.11.0 to 2.12.0
- godoc-lint: from 0.10.1 to 0.10.2
Misc.
- Add some flags to the custom command
Documentation
- docs: split changelog v1 and v2

`v2.6.2`

Compare Source

Released on 2025-11-14

Bug fixes
- fmt command with symlinks
- use file depending on build configuration to invalidate cache
Linters bug fixes
- testableexamples: from 1.0.0 to 1.0.1
- testpackage: from 1.1.1 to 1.1.2

`v2.6.1`

Compare Source

`v2.6.0`

Compare Source

New linters
- Add modernize analyzer suite
Linters new features or changes
- arangolint: from 0.2.0 to 0.3.1
- dupword: from 0.1.6 to 0.1.7 (new option comments-only)
- go-critic: from 0.13.0 to 0.14.0 (new rules/checkers: zeroByteRepeat, dupOption)
- gofumpt: from 0.9.1 to 0.9.2 ("clothe" naked returns is now controlled by the extra-rules option)
- perfsprint: from 0.9.1 to 0.10.0 (new options: concat-loop, loop-other-ops)
- wsl: from 5.2.0 to 5.3.0
Linters bug fixes
- dupword: from 0.1.6 to 0.1.7
- durationcheck: from 0.0.10 to 0.0.11
- exptostd: from 0.4.4 to 0.4.5
- fatcontext: from 0.8.1 to 0.9.0
- forbidigo: from 2.1.0 to 2.3.0
- ginkgolinter: from 0.21.0 to 0.21.2
- godoc-lint: from 0.10.0 to 0.10.1
- gomoddirectives: from 0.7.0 to 0.7.1
- gosec: from 2.22.8 to 2.22.10
- makezero: from 2.0.1 to 2.1.0
- nilerr: from 0.1.1 to 0.1.2
- paralleltest: from 1.0.14 to 1.0.15
- protogetter: from 0.3.16 to 0.3.17
- unparam: from 0df0534 to 5beb8c8
Misc.
- fix: ignore some files to hash the version for custom build

`v2.5.0`

Compare Source

New linters
- Add godoclint linter https://github.com/godoc-lint/godoc-lint
- Add unqueryvet linter https://github.com/MirrexOne/unqueryvet
- Add iotamixing linter https://github.com/AdminBenni/iota-mixing
Linters new features or changes
- embeddedstructfieldcheck: from 0.3.0 to 0.4.0 (new option: empty-line)
- err113: from aea10b5 to 0.1.1 (skip internals of Is methods for error type)
- ginkgolinter: from 0.20.0 to 0.21.0 (new option: force-tonot)
- gofumpt: from 0.8.0 to 0.9.1 (new rule is to "clothe" naked returns for the sake of clarity)
- ineffassign: from 0.1.0 to 0.2.0 (new option: check-escaping-errors)
- musttag: from 0.13.1 to 0.14.0 (support interface methods)
- revive: from 1.11.0 to 1.12.0 (new options: identical-ifelseif-branches, identical-ifelseif-conditions, identical-switch-branches, identical-switch-conditions, package-directory-mismatch, unsecure-url-scheme, use-waitgroup-go, useless-fallthrough)
- thelper: from 0.6.3 to 0.7.1 (skip t.Helper in functions passed to synctest.Test)
- wsl: from 5.1.1 to 5.2.0 (improvements related to subexpressions)
Linters bug fixes
- asciicheck: from 0.4.1 to 0.5.0
- errname: from 1.1.0 to 1.1.1
- fatcontext: from 0.8.0 to 0.8.1
- go-printf-func-name: from 0.1.0 to 0.1.1
- godot: from 1.5.1 to 1.5.4
- gosec: from 2.22.7 to 2.22.8
- nilerr: from 0.1.1 to a temporary fork
- nilnil: from 1.1.0 to 1.1.1
- protogetter: from 0.3.15 to 0.3.16
- tagliatelle: from 0.7.1 to 0.7.2
- testifylint: from 1.6.1 to 1.6.4
Misc.
- fix: "no export data" errors are now handled as a standard typecheck error
Documentation
- Improve nolint section about syntax

`v2.4.0`

Compare Source

Enhancements
- 🎉 go1.25 support
Linters new features or changes
- exhaustruct: from v3.3.1 to 4.0.0 (new options: allow-empty, allow-empty-rx, allow-empty-returns, allow-empty-declarations)
Linters bug fixes
- godox: trim filepath from report messages
- staticcheck: allow empty options
- tagalign: from 1.4.2 to 1.4.3
Documentation
- 🌟 New website (with a search engine)

`v2.3.1`

Compare Source

Linters bug fixes
- gci: from 0.13.6 to 0.13.7
- gosec: from 2.22.6 to 2.22.7
- noctx: from 0.3.5 to 0.4.0
- wsl: from 5.1.0 to 5.1.1
- tagliatelle: force upper case for custom initialisms

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.21.9`

Compare Source

What's Changed

actions: pin slsa generator by version by @Subserial in #2395
fix: prevent data race on scope refreshes within remote.writer by @Subserial in #2396
fix: remove '.' from unsafe path prefixes by @Subserial in #2400
build(deps): bump the actions group with 3 updates by @dependabot[bot] in #2398

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

`v0.21.8`

Compare Source

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in #2353
build(deps): bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /cmd/krane by @dependabot[bot] in #2367
build(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /pkg/authn/k8schain by @dependabot[bot] in #2368
build(deps): bump golang.org/x/net from 0.49.0 to 0.55.0 in /pkg/authn/kubernetes by @dependabot[bot] in #2363
build(deps): bump the go-deps group across 3 directories with 7 updates by @dependabot[bot] in #2377
build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in #2375
Reject unsafe Windows archive paths in Extract by @Haihan-Jiang in #2330
feat(goreleaser): add loong64 build support for crane/gcrane/krane by @xuxiaowei-com-cn in #2358
Document tag and digest reference semantics by @Haihan-Jiang in #2325
remote: release pull limiter slot when body is read to EOF by @knQzx in #2373
tarball: bounds-check layer index in uncompressed LayerByDiffID by @arpitjain099 in #2370
authn: read Podman auth from XDG config by @vigneshakaviki in #2379
transport: per-host bearer token exchange on cross-host redirect by @amitzig in #2360
mutate: bounds-check layer index when building rebase addendums by @arpitjain099 in #2371
fix(daemon): copy ExposedPorts from source config in computeImageConfig by @x64vps in #2356
feat(remote): add WithReferrersTagFallback option by @kevinmdavis in #2366
mutate: apply opaque-directory whiteouts (.wh..wh..opq) in Extract by @sadmanf in #2372
tarball: use correct file extension for zstd/uncompressed by @milas in #2382
build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 in the go-deps group across 1 directory by @dependabot[bot] in #2380
actions: update actions to be pinned by hash by @Subserial in #2384
Bump go version to 1.26.5 by @Subserial in #2388

New Contributors

@xuxiaowei-com-cn made their first contribution in #2358
@knQzx made their first contribution in #2373
@arpitjain099 made their first contribution in #2370
@vigneshakaviki made their first contribution in #2379
@amitzig made their first contribution in #2360
@x64vps made their first contribution in #2356
@kevinmdavis made their first contribution in #2366
@sadmanf made their first contribution in #2372

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

goreleaser/goreleaser (github.com/goreleaser/goreleaser/v2)

`v2.17.1`

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.17.

Changelog

Bug fixes

a734383: fix(builder/go): parse GORISCV64 and GOPPC64 for riscv64 and ppc64le targets (#6698) (@upuddu)
dfc7f06: fix(builders/go): sort targets (@caarlos0)
7630cd1: fix(deps): go1.26.5 (@caarlos0)
9dbb266: fix(notary): poll notarization status every 10s, not 10ns (#6726) (@caarlos0)
1ebf881: fix: anchor goarm64 validation regex to reject invalid values (#6727) (@semx)
70f6921: fix: migrate from deprecated s3/manager to s3/transfermanager (#6706) (@joeyberkovitz)

Documentation updates

eafb0ec: docs(users): update charm domain (#6699) (@andreynering)
ae4debb: docs: add /.well-known/security.txt (RFC 9116) (#6710) (@kobihikri)
d3764c8: docs: fix typo (@caarlos0)
742ae5f: docs: move images to a bucket (#6691) (@caarlos0)
55a466e: docs: publish to GitLab package registries with the http upload pipe (#6697) (@ajuijas)
65240d8: docs: update users (@caarlos0)

Other work

0eb5b0f: chore(ci): update dependabot config (@caarlos0)
4bcb2a5: chore(ci): update deps (@caarlos0)
5f3f435: chore: auto-update generated files (#6693) (@goreleaserbot)
9b85924: chore: auto-update generated files (#6694) (@goreleaserbot)
1aab79e: chore: auto-update generated files (#6700) (@goreleaserbot)
11d0150: chore: auto-update generated files (#6705) (@goreleaserbot)
5747ca7: chore: auto-update generated files (#6707) (@goreleaserbot)
83f4c19: chore: auto-update generated files (#6730) (@goreleaserbot)
f3a0e63: chore: svu config (@caarlos0)

Full Changelog: goreleaser/goreleaser@v2.17.0...v2.17.1

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

Find examples and commented usage of all options in our website.
Reach out on Discord, Twitter, and Telegram!

`v2.17.0`

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.17.

Changelog

New Features

31d4279: feat(brew,cask,krew,nix,scoop,winget): default pull request branch name (#6685) (@caarlos0)
e5f075b: feat(dockers/v2): retry build (@caarlos0)
cd5f16b: feat(nfpm): support msix packages (#6647) (@umaidshahid and @caarlos0)
43be34a: feat(scm): allow a custom token on the release repository (#6689) (@caarlos0)
5ed70f2: feat(winget): allow configuring the manifest locale (#6680) (@caarlos0)
6f7175a: feat: Allow GOARM softfloat and hardfloat (#6198) (@MDr164 and @caarlos0)

Security updates

b985ca8: sec(deps): bump go-pkcs12 to v0.7.2 (GO-2026-5052) (#6683) (@caarlos0)
7c73b82: sec(deps): update golang.org/x/net (@caarlos0)

Bug fixes

7d602ff: fix(builders): reject empty target string (#6679) (@sueun-dev)
355d706: fix(client): skip merge-upstream when target repo is not a fork (#6646) (@jamessawle and @caarlos0)
944bbb2: fix(deps): drop dep on docker/docker (#6682) (@caarlos0)
a85ce26: fix(mcp): clean subfolder path (#6649) (@caarlos0)
99a7173: fix(nfpm): produce valid arch for Termux packages (#6668) (@bltavares and @caarlos0)
7200ec7: fix(winget): default head branch to a versioned template (#6684) (@Sanjays2402)
6645820: fix: return error when go.mod is unreadable in CheckGoModPipe (#6644) (@SebTardif)

Documentation updates

da7ce30: docs(casks): fix private-repo example broken by Homebrew 5.1.14 (#6639) (@caarlos0)
09ebd03: docs(nfpm): note tilde ConventionalFileName (@caarlos0)
ab7481e: docs: doc authoring skill (@caarlos0)
b945ca3: docs: fix (@caarlos0)
7e87fd3: docs: fix "lets" -> "let's" in quick-start guide (#6661) (@s3onghyun)
698dae5: docs: fix typo in notarize.md (#6655) (@albertchae)
f09c887: docs: good bye discord (@caarlos0)
2642319: docs: improve home (@caarlos0)
6b7710e: docs: updates (@caarlos0)

Other work

2e6f200: chore: auto-update generated files (#6662) (@goreleaserbot)
4bd4e38: chore: auto-update generated files (#6671) (@goreleaserbot)
dcf5a6b: chore: auto-update generated files (#6675) (@goreleaserbot)
baf110d: chore: auto-update generated files (#6688) (@goreleaserbot)
3fa8a94: chore: godoc (@caarlos0)

Full Changelog: goreleaser/goreleaser@v2.16.0...v2.17.0

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

Find examples and commented usage of all options in our website.
Reach out on Discord, Twitter, and Telegram!

googleapis/google-api-go-client (google.golang.org/api)

`v0.293.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3689) (82ee53b)
all: Auto-regenerate discovery clients (#3691) (07e3f98)
all: Auto-regenerate discovery clients (#3692) (8ab2586)
all: Auto-regenerate discovery clients (#3693) (3ca7257)
all: Auto-regenerate discovery clients (#3694) (6855532)
all: Auto-regenerate discovery clients (#3696) (b7d7362)
all: Auto-regenerate discovery clients (#3697) (9f826b1)

`v0.292.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3682) (b70719b)
all: Auto-regenerate discovery clients (#3684) (c9bc778)
all: Auto-regenerate discovery clients (#3685) (8140ddf)
all: Auto-regenerate discovery clients (#3687) (57047fb)
all: Auto-regenerate discovery clients (#3688) (256abd7)

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-03-30T00:59:28Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

108 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.26.3` -> `1.26.5`
`charm.land/lipgloss/v2`	`v2.0.3` -> `v2.0.5`
`cloud.google.com/go/auth`	`v0.22.0` -> `v0.23.0`
`github.com/4meepo/tagalign`	`v1.4.2` -> `v1.4.3`
`github.com/Abirdcfly/dupword`	`v0.1.6` -> `v0.1.7`
`github.com/Antonboom/errname`	`v1.1.0` -> `v1.1.1`
`github.com/Antonboom/nilnil`	`v1.1.0` -> `v1.1.1`
`github.com/Antonboom/testifylint`	`v1.6.1` -> `v1.6.4`
`github.com/Azure/azure-sdk-for-go/sdk/azcore`	`v1.21.1` -> `v1.22.0`
`github.com/Azure/azure-sdk-for-go/sdk/azidentity`	`v1.13.1` -> `v1.14.0`
`github.com/Djarvur/go-err113`	`v0.0.0-20210108212216-aea10b59be24` -> `v0.1.1`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.32.0` -> `v1.33.0`
`github.com/alecthomas/chroma/v2`	`v2.19.0` -> `v2.24.1`
`github.com/alexkohler/prealloc`	`v1.0.0` -> `v1.1.0`
`github.com/ashanbrown/forbidigo/v2`	`v2.1.0` -> `v2.3.1`
`github.com/ashanbrown/makezero/v2`	`v2.0.1` -> `v2.2.1`
`github.com/aws/aws-sdk-go-v2`	`v1.41.9` -> `v1.43.0`
`github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream`	`v1.7.11` -> `v1.7.14`
`github.com/aws/aws-sdk-go-v2/config`	`v1.32.20` -> `v1.32.31`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.19.19` -> `v1.19.30`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.18.25` -> `v1.18.31`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.4.25` -> `v1.4.31`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.25` -> `v2.7.31`
`github.com/aws/aws-sdk-go-v2/internal/v4a`	`v1.4.26` -> `v1.4.32`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.13.10` -> `v1.13.13`
`github.com/aws/aws-sdk-go-v2/service/internal/checksum`	`v1.9.18` -> `v1.9.24`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.13.25` -> `v1.13.31`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.19.25` -> `v1.19.32`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.102.2` -> `v1.106.0`
`github.com/aws/aws-sdk-go-v2/service/signin`	`v1.1.1` -> `v1.5.0`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.30.19` -> `v1.33.0`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.36.2` -> `v1.38.0`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.42.3` -> `v1.45.0`
`github.com/aws/smithy-go`	`v1.26.0` -> `v1.27.3`
`github.com/bombsimon/wsl/v5`	`v5.1.0` -> `v5.8.0`
`github.com/butuzov/ireturn`	`v0.4.0` -> `v0.4.1`
`github.com/caarlos0/log`	`v0.6.0` -> `v0.6.2`
`github.com/catenacyber/perfsprint`	`v0.9.1` -> `v0.10.1`
`github.com/charithe/durationcheck`	`v0.0.10` -> `v0.0.11`
`github.com/coreos/go-oidc/v3`	`v3.18.0` -> `v3.20.0`
`github.com/daixiang0/gci`	`v0.13.6` -> `v0.13.7`
`github.com/dlclark/regexp2`	`v1.11.5` -> `v1.12.0`
`github.com/ghostiam/protogetter`	`v0.3.15` -> `v0.3.20`
`github.com/go-critic/go-critic`	`v0.13.0` -> `v0.14.3`
`github.com/gofrs/flock`	`v0.12.1` -> `v0.13.0`
`github.com/golangci/dupl`	`v0.0.0-20250308024227-f665c8d69b32` -> `v0.0.0-20260401084720-c99c5cf5c202`
`github.com/golangci/go-printf-func-name`	`v0.1.0` -> `v0.1.1`
`github.com/golangci/golines`	`v0.0.0-20250217134842-442fd0091d95` -> `v0.15.0`
`github.com/golangci/misspell`	`v0.7.0` -> `v0.8.0`
`github.com/google/ko`	`v0.18.2-0.20260407063826-ae9c7272d7de` -> `v0.19.1`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.19` -> `v0.3.20`
`github.com/gordonklaus/ineffassign`	`v0.1.0` -> `v0.2.0`
`github.com/goreleaser/nfpm/v2`	`v2.46.3` -> `v2.47.0`
`github.com/goreleaser/quill`	`v0.0.0-20260503024558-dbc159c51d43` -> `v0.0.0-20260630015114-8310f3e9a321`
`github.com/gostaticanalysis/nilerr`	`v0.1.1` -> `v0.1.2`
`github.com/jgautheron/goconst`	`v1.8.2` -> `v1.10.0`
`github.com/karamaru-alpha/copyloopvar`	`v1.2.1` -> `v1.2.2`
`github.com/kisielk/errcheck`	`v1.9.0` -> `v1.10.0`
`github.com/kulti/thelper`	`v0.6.3` -> `v0.7.1`
`github.com/kunwardeep/paralleltest`	`v1.0.14` -> `v1.0.15`
`github.com/ldez/exptostd`	`v0.4.4` -> `v0.4.5`
`github.com/ldez/gomoddirectives`	`v0.7.0` -> `v0.8.0`
`github.com/ldez/grignotin`	`v0.9.0` -> `v0.10.1`
`github.com/ldez/tagliatelle`	`v0.7.1` -> `v0.7.2`
`github.com/manuelarte/embeddedstructfieldcheck`	`v0.3.0` -> `v0.4.0`
`github.com/manuelarte/funcorder`	`v0.5.0` -> `v0.6.0`
`github.com/maratori/testableexamples`	`v1.0.0` -> `v1.0.1`
`github.com/maratori/testpackage`	`v1.1.1` -> `v1.1.2`
`github.com/mattn/go-mastodon`	`v0.0.11` -> `v0.0.13`
`github.com/mgechev/revive`	`v1.11.0` -> `v1.15.0`
`github.com/moby/moby/api`	`v1.54.2` -> `v1.55.0`
`github.com/moby/moby/client`	`v0.4.1` -> `v0.5.1`
`github.com/modelcontextprotocol/registry`	`v1.7.9` -> `v1.8.0`
`github.com/nunnatsa/ginkgolinter`	`v0.20.0` -> `v0.23.0`
`github.com/quasilyte/go-ruleguard`	`v0.4.4` -> `v0.4.5`
`github.com/quasilyte/go-ruleguard/dsl`	`v0.3.22` -> `v0.3.23`
`github.com/ryanrolds/sqlclosecheck`	`v0.5.1` -> `v0.6.0`
`github.com/securego/gosec/v2`	`v2.22.6` -> `v2.26.1`
`github.com/sigstore/cosign/v3`	`v3.0.6` -> `v3.1.1`
`github.com/slack-go/slack`	`v0.24.0` -> `v0.27.0`
`github.com/sonatard/noctx`	`v0.3.5` -> `v0.5.1`
`github.com/sourcegraph/go-diff`	`v0.7.0` -> `v0.8.0`
`github.com/spiffe/go-spiffe/v2`	`v2.6.0` -> `v2.7.0`
`github.com/stbenjam/no-sprintf-host-port`	`v0.2.0` -> `v0.3.1`
`github.com/tetafro/godot`	`v1.5.1` -> `v1.5.6`
`github.com/timakin/bodyclose`	`v0.0.0-20241222091800-1db5c5ca4d67` -> `v0.0.0-20260129054331-73d1f95b84b4`
`github.com/tomarrell/wrapcheck/v2`	`v2.11.0` -> `v2.12.0`
`github.com/ulikunitz/xz`	`v0.5.15` -> `v0.5.16`
`github.com/uudashr/gocognit`	`v1.2.0` -> `v1.2.1`
`github.com/uudashr/iface`	`v1.4.1` -> `v1.4.2`
`go-simpler.org/musttag`	`v0.13.1` -> `v0.14.0`
`go-simpler.org/sloglint`	`v0.11.1` -> `v0.12.0`
`go.augendre.info/arangolint`	`v0.2.0` -> `v0.4.0`
`go.augendre.info/fatcontext`	`v0.8.0` -> `v0.9.0`
`gocloud.dev`	`v0.45.0` -> `v0.46.0`
`golang.org/x/crypto`	`v0.54.0` -> `v0.55.0`
`golang.org/x/exp/typeparams`	`v0.0.0-20250620022241-b7579e27df2b` -> `v0.0.0-20260209203927-2842357ff358`
`golang.org/x/mod`	`v0.38.0` -> `v0.39.0`
`golang.org/x/net`	`v0.57.0` -> `v0.58.0`
`golang.org/x/telemetry`	`v0.0.0-20260717140457-bdb89881bb75` -> `v0.0.0-20260811182544-a038080d80e5`
`golang.org/x/text`	`v0.40.0` -> `v0.41.0`
`golang.org/x/tools`	`v0.48.0` -> `v0.49.0`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260727163830-6c54dddc4772` -> `v0.0.0-20260807164820-c8921c73eeea`
`google.golang.org/grpc`	`v1.82.1` -> `v1.83.0`
`honnef.co/go/tools`	`v0.6.1` -> `v0.7.0`
`mvdan.cc/gofumpt`	`v0.8.0` -> `v0.9.2`
`mvdan.cc/unparam`	`v0.0.0-20250301125049-0df0534333a4` -> `v0.0.0-20251027182757-5beb8c8f8f15`
`sigs.k8s.io/kind`	`v0.31.0` -> `v0.32.0`
`software.sslmate.com/src/go-pkcs12`	`v0.7.1` -> `v0.7.3`

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot added area/dependencies bots kind/chore labels Mar 30, 2026

renovate Bot force-pushed the renovate/go-deps branch 7 times, most recently from 31ce6f0 to d28071d Compare April 5, 2026 16:53

renovate Bot force-pushed the renovate/go-deps branch 7 times, most recently from d73855e to 199b513 Compare April 13, 2026 22:35

renovate Bot force-pushed the renovate/go-deps branch 9 times, most recently from 7c55ecd to 4f36ed5 Compare April 20, 2026 02:00

renovate Bot force-pushed the renovate/go-deps branch 3 times, most recently from 55d822a to 5f1b602 Compare May 2, 2026 17:54

renovate Bot force-pushed the renovate/go-deps branch 10 times, most recently from c226189 to 6892c62 Compare May 11, 2026 15:44

renovate Bot force-pushed the renovate/go-deps branch 16 times, most recently from a02a5d9 to 895bdd1 Compare May 16, 2026 21:00

Update Go deps

1947506

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Navigation Menu

Uh oh!

Update Go deps - #64

Update Go deps#64
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-deps

renovate Bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

Announcement

Changelog

Bug fixes

Documentation updates

Other work

Helping out

Where to go next?

Announcement

Changelog

New Features

Security updates

Bug fixes

Documentation updates

Other work

Helping out

Where to go next?

Features

Features

Configuration

Uh oh!

renovate Bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 30, 2026 •

edited

Loading

renovate Bot commented Mar 30, 2026 •

edited

Loading