Skip to content

build(deps): Bump the all group with 12 updates#2847

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-75bb2860a2
Open

build(deps): Bump the all group with 12 updates#2847
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-75bb2860a2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 12 updates:

Package From To
github.com/go-openapi/errors 0.22.7 0.22.8
github.com/go-openapi/runtime 0.32.2 0.32.3
github.com/go-openapi/spec 0.22.4 0.22.5
github.com/go-openapi/strfmt 0.26.2 0.26.3
github.com/go-openapi/swag 0.26.0 0.26.1
github.com/go-openapi/validate 0.25.2 0.25.3
github.com/sigstore/sigstore 1.10.6 1.10.8
github.com/go-openapi/swag/conv 0.26.0 0.26.1
github.com/sigstore/sigstore/pkg/signature/kms/aws 1.10.6 1.10.8
github.com/sigstore/sigstore/pkg/signature/kms/azure 1.10.6 1.10.8
github.com/sigstore/sigstore/pkg/signature/kms/gcp 1.10.6 1.10.8
github.com/sigstore/sigstore/pkg/signature/kms/hashivault 1.10.6 1.10.8

Updates github.com/go-openapi/errors from 0.22.7 to 0.22.8

Release notes

Sourced from github.com/go-openapi/errors's releases.

v0.22.8

0.22.8 - 2026-05-31

Full Changelog: go-openapi/errors@v0.22.7...v0.22.8

13 commits in this release.


Implemented enhancements

  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...

Documentation

Code quality

Miscellaneous tasks

Updates


People who contributed to this release


errors license terms

... (truncated)

Commits
  • a677038 feat(ci): added shared workflow for bot-pr monitoring
  • 0cda362 chore(deps): bump the development-dependencies group across 1 directory with ...
  • 7d9a134 chore(deps): bump github.com/go-openapi/testify/v2
  • e810af9 chore(deps): bump github.com/go-openapi/testify/v2
  • 921874f chore(deps): bump the development-dependencies group with 7 updates
  • b78497c doc: updated contributors file
  • e1888b7 chore(deps): bump github.com/go-openapi/testify/v2
  • 3e93bcb chore(deps): bump the development-dependencies group with 7 updates
  • b00e83e chore: bump go directive to 1.25.0 (#102)
  • 53f8970 doc: add portable agentic instructions (#101)
  • Additional commits viewable in compare view

Updates github.com/go-openapi/runtime from 0.32.2 to 0.32.3

Release notes

Sourced from github.com/go-openapi/runtime's releases.

v0.32.3

0.32.3 - 2026-06-02

Full Changelog: go-openapi/runtime@v0.32.2...v0.32.3

6 commits in this release.


Implemented enhancements

  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...

Documentation

Miscellaneous tasks

Updates


People who contributed to this release


runtime license terms

License

Per-module changes


... (truncated)

Commits
  • 6c3a7fd chore: prepare release v0.32.3
  • 1733ca7 chore: updated dependencies (#479)
  • 7a7ea03 feat(ci): added shared workflow for bot-pr monitoring
  • d4d7f7d doc: updated contributors file
  • 6937b17 build(deps): bump the other-dependencies group across 2 directories with 3 up...
  • 4361051 build(deps): bump the go-openapi-dependencies group across 2 directories with...
  • See full diff in compare view

Updates github.com/go-openapi/spec from 0.22.4 to 0.22.5

Release notes

Sourced from github.com/go-openapi/spec's releases.

v0.22.5

0.22.5 - 2026-05-31

Full Changelog: go-openapi/spec@v0.22.4...v0.22.5

16 commits in this release.


Implemented enhancements

  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...

Documentation

Code quality

Miscellaneous tasks

Updates


People who contributed to this release

... (truncated)

Commits
  • 45b7fe1 feat(ci): added shared workflow for bot-pr monitoring
  • 9715006 build(deps): bump the development-dependencies group across 1 directory with ...
  • 5c73b50 build(deps): bump the go-openapi-dependencies group with 2 updates
  • 596087b build(deps): bump the development-dependencies group across 1 directory with ...
  • a5d0895 build(deps): bump the go-openapi-dependencies group with 2 updates
  • a2d9c41 build(deps): bump github.com/go-openapi/jsonpointer
  • 1d7d651 build(deps): bump the go-openapi-dependencies group with 6 updates
  • c5c7103 doc: updated contributors file
  • 2b49290 build(deps): bump the go-openapi-dependencies group with 2 updates
  • 2e5142b build(deps): bump the development-dependencies group with 7 updates
  • Additional commits viewable in compare view

Updates github.com/go-openapi/strfmt from 0.26.2 to 0.26.3

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.26.3

0.26.3 - 2026-05-31

Full Changelog: go-openapi/strfmt@v0.26.2...v0.26.3

15 commits in this release.


Documentation

Miscellaneous tasks

Updates


People who contributed to this release


strfmt license terms

[License][license-url]

... (truncated)

Commits
  • d93543f chore: prepare release v0.26.3
  • 7841767 build(deps): bump the other-dependencies group across 3 directories with 2 up...
  • f041a88 build(deps): bump golang.org/x/net
  • 6ac9968 build(deps): bump the go-openapi-dependencies group across 2 directories with...
  • 1d31844 fix(ci): monitor - work around dependabot identity requirements
  • 1531efc fix(ci): typo in sha
  • cb7dd25 fix(ci): updated shared ci worflows (fix monitor-bot identity)
  • 62db01a fix(ci): updated shared ci worflows (fix monitor-bot permissions)
  • c7cf6fb fix(ci): updated shared ci worflows (fix monitor-bot filter) (#259)
  • c2e3626 doc: updated contributors file
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag from 0.26.0 to 0.26.1

Release notes

Sourced from github.com/go-openapi/swag's releases.

v0.26.1

0.26.1 - 2026-06-07

Full Changelog: go-openapi/swag@v0.26.0...v0.26.1

12 commits in this release.


Implemented enhancements

  • feat(loading): sandbox local loading with WithRoot (GHSA-v2xp-g8xf-22pf) by @​fredbi in #203 ...
  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...

Documentation

Miscellaneous tasks

Security

  • doc(loading): document security implications of using the loader by @​fredbi in #207 ...

Updates


People who contributed to this release


swag license terms

... (truncated)

Commits
  • 85923a5 chore: prepare release v0.26.1
  • 336c586 doc(loading): document security implications of using the loader (#207)
  • 92ec622 doc: updated contributors file
  • 3f77c79 doc: aligned with org docs (#205)
  • 40578b5 build(deps): bump the development-dependencies group with 8 updates
  • eefaba1 feat(loading): sandbox local loading with WithRoot (GHSA-v2xp-g8xf-22pf) (#203)
  • 2e99502 feat(ci): added shared workflow for bot-pr monitoring
  • cafd10f build(deps): bump the go-openapi-dependencies group across 15 directories wit...
  • 660dd54 build(deps): bump the development-dependencies group with 7 updates
  • e089511 build(deps): bump the go-openapi-dependencies group across 15 directories wit...
  • Additional commits viewable in compare view

Updates github.com/go-openapi/validate from 0.25.2 to 0.25.3

Release notes

Sourced from github.com/go-openapi/validate's releases.

v0.25.3

0.25.3 - 2026-05-31

Full Changelog: go-openapi/validate@v0.25.2...v0.25.3

17 commits in this release.


Implemented enhancements

  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...

Documentation

Miscellaneous tasks

Updates


People who contributed to this release


... (truncated)

Commits
  • 5bff947 chore: updated deps (#254)
  • 83c7e8d chore(deps): bump the development-dependencies group across 1 directory with ...
  • 8434d39 feat(ci): added shared workflow for bot-pr monitoring
  • 71d6405 chore(deps): bump github.com/go-openapi/analysis
  • 8c7a365 chore(deps): bump github.com/go-openapi/testify/v2
  • 80870d1 chore(deps): bump the go-openapi-dependencies group with 2 updates
  • f08e1a2 chore(deps): bump github.com/go-openapi/jsonpointer
  • 8918dce chore(deps): bump the development-dependencies group with 7 updates
  • 86798f8 chore(deps): bump the go-openapi-dependencies group with 5 updates
  • af6ab3f chore(deps): bump github.com/go-openapi/testify/v2
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore from 1.10.6 to 1.10.8

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.10.8

What's Changed

Full Changelog: sigstore/sigstore@v1.10.7...v1.10.8

v1.10.7

What's Changed

Full Changelog: sigstore/sigstore@v1.10.6...v1.10.7

Commits
  • c761681 Support standard PKCS#8 encrypted private key decryption (#2333)
  • 005faf9 Extend PEM private key unmarshalling to support legacy format (#2332)
  • e70e4ed add functional options to DSSE to improve memory usage, validation (#2326)
  • 899684d build(deps): Bump github.com/letsencrypt/boulder (#2307)
  • 181dc40 build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2308)
  • 2c141a7 build(deps): Bump golangci/golangci-lint-action in the all group (#2328)
  • b6c0214 build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (#2329)
  • 2ff50c9 build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (#2330)
  • d0204c3 build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (#2331)
  • afdf897 build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (#2312)
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag/conv from 0.26.0 to 0.26.1

Release notes

Sourced from github.com/go-openapi/swag/conv's releases.

v0.26.1

0.26.1 - 2026-06-07

Full Changelog: go-openapi/swag@v0.26.0...v0.26.1

12 commits in this release.


Implemented enhancements

  • feat(loading): sandbox local loading with WithRoot (GHSA-v2xp-g8xf-22pf) by @​fredbi in #203 ...
  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...

Documentation

Miscellaneous tasks

Security

  • doc(loading): document security implications of using the loader by @​fredbi in #207 ...

Updates


People who contributed to this release


swag license terms

... (truncated)

Commits
  • 85923a5 chore: prepare release v0.26.1
  • 336c586 doc(loading): document security implications of using the loader (#207)
  • 92ec622 doc: updated contributors file
  • 3f77c79 doc: aligned with org docs (#205)
  • 40578b5 build(deps): bump the development-dependencies group with 8 updates
  • eefaba1 feat(loading): sandbox local loading with WithRoot (GHSA-v2xp-g8xf-22pf) (#203)
  • 2e99502 feat(ci): added shared workflow for bot-pr monitoring
  • cafd10f build(deps): bump the go-openapi-dependencies group across 15 directories wit...
  • 660dd54 build(deps): bump the development-dependencies group with 7 updates
  • e089511 build(deps): bump the go-openapi-dependencies group across 15 directories wit...
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.6 to 1.10.8

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/aws's releases.

v1.10.8

What's Changed

Full Changelog: sigstore/sigstore@v1.10.7...v1.10.8

v1.10.7

What's Changed

Full Changelog: sigstore/sigstore@v1.10.6...v1.10.7

Commits
  • c761681 Support standard PKCS#8 encrypted private key decryption (#2333)
  • 005faf9 Extend PEM private key unmarshalling to support legacy format (#2332)
  • e70e4ed add functional options to DSSE to improve memory usage, validation (#2326)
  • 899684d build(deps): Bump github.com/letsencrypt/boulder (#2307)
  • 181dc40 build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2308)
  • 2c141a7 build(deps): Bump golangci/golangci-lint-action in the all group (#2328)
  • b6c0214 build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (#2329)
  • 2ff50c9 build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (#2330)
  • d0204c3 build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (#2331)
  • afdf897 build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp (#2312)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.6 to 1.10.8

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/azure's releases.

v1.10.8

What's Changed

Full Changelog: sigstore/sigstore@v1.10.7...v1.10.8

v1.10.7

What's Changed

Full Changelog: sigstore/sigstore@v1.10.6...v1.10.7

Commits
  • c761681 Support standard PKCS#8 encrypted private key decryption (#2333)
  • 005faf9 Extend PEM private key unmarshalling to support legacy format (#2332)
  • e70e4ed add functional options to DSSE to improve memory usage, validation (#2326)
  • 899684d build(deps): Bump github.com/letsencrypt/boulder (#2307)
  • 181dc40 build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2308)
  • 2c141a7 build(deps): Bump golangci/golangci-lint-action in the all group (#2328)
  • b6c0214 build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.1 (#2329)
  • 2ff50c9 build(deps): Bump actions/dependency-review-action from 4.8.3 to 5.0.0 (#2330)
  • d0204c3 build(deps): Bump hashicorp/vault from 1.21.4 to 2.0.1 in /test/e2e (#2331)

Bumps the all group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/errors](https://github.com/go-openapi/errors) | `0.22.7` | `0.22.8` |
| [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) | `0.32.2` | `0.32.3` |
| [github.com/go-openapi/spec](https://github.com/go-openapi/spec) | `0.22.4` | `0.22.5` |
| [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) | `0.26.2` | `0.26.3` |
| [github.com/go-openapi/swag](https://github.com/go-openapi/swag) | `0.26.0` | `0.26.1` |
| [github.com/go-openapi/validate](https://github.com/go-openapi/validate) | `0.25.2` | `0.25.3` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |
| [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.26.0` | `0.26.1` |
| [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |
| [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |
| [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |
| [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore) | `1.10.6` | `1.10.8` |


Updates `github.com/go-openapi/errors` from 0.22.7 to 0.22.8
- [Release notes](https://github.com/go-openapi/errors/releases)
- [Commits](go-openapi/errors@v0.22.7...v0.22.8)

Updates `github.com/go-openapi/runtime` from 0.32.2 to 0.32.3
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](go-openapi/runtime@v0.32.2...v0.32.3)

Updates `github.com/go-openapi/spec` from 0.22.4 to 0.22.5
- [Release notes](https://github.com/go-openapi/spec/releases)
- [Commits](go-openapi/spec@v0.22.4...v0.22.5)

Updates `github.com/go-openapi/strfmt` from 0.26.2 to 0.26.3
- [Release notes](https://github.com/go-openapi/strfmt/releases)
- [Commits](go-openapi/strfmt@v0.26.2...v0.26.3)

Updates `github.com/go-openapi/swag` from 0.26.0 to 0.26.1
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.26.0...v0.26.1)

Updates `github.com/go-openapi/validate` from 0.25.2 to 0.25.3
- [Release notes](https://github.com/go-openapi/validate/releases)
- [Commits](go-openapi/validate@v0.25.2...v0.25.3)

Updates `github.com/sigstore/sigstore` from 1.10.6 to 1.10.8
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.6...v1.10.8)

Updates `github.com/go-openapi/swag/conv` from 0.26.0 to 0.26.1
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.26.0...v0.26.1)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.10.6 to 1.10.8
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.6...v1.10.8)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.10.6 to 1.10.8
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.6...v1.10.8)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.10.6 to 1.10.8
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.6...v1.10.8)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.10.6 to 1.10.8
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.6...v1.10.8)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/errors
  dependency-version: 0.22.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/runtime
  dependency-version: 0.32.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/spec
  dependency-version: 0.22.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/strfmt
  dependency-version: 0.26.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/swag
  dependency-version: 0.26.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/validate
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.10.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/swag/conv
  dependency-version: 0.26.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws
  dependency-version: 1.10.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure
  dependency-version: 1.10.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp
  dependency-version: 1.10.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault
  dependency-version: 1.10.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 8, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 8, 2026 11:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants