Skip to content

chore(deps): bump the minor group with 4 updates - #4297

Open
dependabot[bot] wants to merge 1 commit into
release-4.5from
dependabot/go_modules/release-4.5/minor-2ac5fdbe25
Open

chore(deps): bump the minor group with 4 updates#4297
dependabot[bot] wants to merge 1 commit into
release-4.5from
dependabot/go_modules/release-4.5/minor-2ac5fdbe25

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor group with 4 updates: github.com/google/go-containerregistry, golang.org/x/crypto, tags.cncf.io/container-device-interface and tags.cncf.io/container-device-interface/specs-go.

Updates github.com/google/go-containerregistry from 0.22.0 to 0.22.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.22.1

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.22.0...v0.22.1

Commits
  • 8a72a42 remote: copy manifest annotations to referrers fallback tag descriptors (#2441)
  • 5765c35 build(deps): bump the go-deps group across 2 directories with 3 updates (#2439)
  • 969402f fix(mutate): make Time layer updates lazy (#2429)
  • 25c682e flatten: preserve config and layer media types when flattening (#2438)
  • 79af990 remote: add SSRF redirect protection to writer-side HTTP clients (#2432)
  • 4b9b3c7 fix(release): honor declared Go toolchain (#2435)
  • e033b9c fix(build): install binaries to /ko-app and add to PATH (#2424) (#2436)
  • 8bd7902 name: return a helpful error when a reference contains a URL scheme (#2431)
  • 163134d validate: support index attestation manifests and empty configs (#2414)
  • 44f7ea3 fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml (#2434)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.56.0

Commits
  • 86efde5 ssh: reject unexpected message types on established channels
  • a6cdac6 ssh: drop traffic on undecided channels
  • 39dc44e ssh: don't skip the source-address critical option in CheckCert
  • afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
  • 89f4e9b x509roots/fallback: update bundle
  • 71488c4 ssh/knownhosts: compare only public key portions for revocation
  • 82adefa ssh: synchronize unexpected response test
  • c757c98 all: upgrade go directive to at least 1.26.0 [generated]
  • 593c81a ssh: correctly ignore pre-banner lines
  • 46efc8b acme: add crypto.SignMessage test coverage
  • Additional commits viewable in compare view

Updates tags.cncf.io/container-device-interface from 1.1.0 to 1.1.1

Release notes

Sourced from tags.cncf.io/container-device-interface's releases.

specs-go/v1.1.1

What's Changed

Full Changelog: cncf-tags/container-device-interface@specs-go/v1.1.0...specs-go/v1.1.1

v1.1.1

What's Changed

... (truncated)

Commits
  • cb98bcf Merge pull request #361 from elezar/bump-v1.1.1
  • 3757e39 Bump version to v1.1.1
  • 73444d1 Merge pull request #344 from thaJeztah/cdi_cleans
  • 65a7147 pkg/cdi: ignore unrelated filesystem events
  • 73e8572 pkg/cdi: handle fsnotify operations as a bitmask
  • 1a0198b pkg/cdi: watch for Create events on all platforms
  • 0656473 pkg/cdi: simplify restoration of removed directory watches
  • 72f9410 Merge pull request #358 from thaJeztah/cdi_cleans_step2
  • 23b69d2 Merge pull request #359 from thaJeztah/bump_fsnotify
  • d50fc58 chore(deps): github.com/fsnotify/fsnotify v1.7.0
  • Additional commits viewable in compare view

Updates tags.cncf.io/container-device-interface/specs-go from 1.1.0 to 1.1.1

Release notes

Sourced from tags.cncf.io/container-device-interface/specs-go's releases.

specs-go/v1.1.1

What's Changed

Full Changelog: cncf-tags/container-device-interface@specs-go/v1.1.0...specs-go/v1.1.1

v1.1.1

What's Changed

... (truncated)

Commits
  • cb98bcf Merge pull request #361 from elezar/bump-v1.1.1
  • 3757e39 Bump version to v1.1.1
  • 73444d1 Merge pull request #344 from thaJeztah/cdi_cleans
  • 65a7147 pkg/cdi: ignore unrelated filesystem events
  • 73e8572 pkg/cdi: handle fsnotify operations as a bitmask
  • 1a0198b pkg/cdi: watch for Create events on all platforms
  • 0656473 pkg/cdi: simplify restoration of removed directory watches
  • 72f9410 Merge pull request #358 from thaJeztah/cdi_cleans_step2
  • 23b69d2 Merge pull request #359 from thaJeztah/bump_fsnotify
  • d50fc58 chore(deps): github.com/fsnotify/fsnotify v1.7.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the minor group with 4 updates
3070df4 
Bumps the minor group with 4 updates: [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry), [golang.org/x/crypto](https://github.com/golang/crypto), [tags.cncf.io/container-device-interface](https://github.com/cncf-tags/container-device-interface) and [tags.cncf.io/container-device-interface/specs-go](https://github.com/cncf-tags/container-device-interface).


Updates `github.com/google/go-containerregistry` from 0.22.0 to 0.22.1
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.22.0...v0.22.1)

Updates `golang.org/x/crypto` from 0.55.0 to 0.56.0
- [Commits](golang/crypto@v0.55.0...v0.56.0)

Updates `tags.cncf.io/container-device-interface` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/cncf-tags/container-device-interface/releases)
- [Changelog](https://github.com/cncf-tags/container-device-interface/blob/main/RELEASE.md)
- [Commits](cncf-tags/container-device-interface@v1.1.0...v1.1.1)

Updates `tags.cncf.io/container-device-interface/specs-go` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/cncf-tags/container-device-interface/releases)
- [Changelog](https://github.com/cncf-tags/container-device-interface/blob/main/RELEASE.md)
- [Commits](cncf-tags/container-device-interface@v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: golang.org/x/crypto
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: tags.cncf.io/container-device-interface
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: tags.cncf.io/container-device-interface/specs-go
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants