Update go modules (release-v0.7) (minor) #2892

renovate · 2025-08-28T13:20:11Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
cuelang.org/go	`v0.13.2` -> `v0.15.1`	require	minor
cuelang.org/go	`v0.11.1` -> `v0.15.1`	require	minor
github.com/conforma/go-containerregistry	`6f40a37` -> `3459088`	replace	digest
github.com/cyberphone/json-canonicalization	`ba74d44` -> `19d51d7`	require	digest
github.com/go-git/go-billy/v5	`v5.6.0` -> `v5.7.0`	require	minor
github.com/go-git/go-git/v5	`v5.13.2` -> `v5.16.4`	require	minor
github.com/go-git/go-git/v5	`v5.13.0` -> `v5.16.4`	require	minor
github.com/go-openapi/strfmt	`v0.23.0` -> `v0.25.0`	require	minor
github.com/golangci/golangci-lint	`v1.63.4` -> `v1.64.8`	require	minor
github.com/google/addlicense	`v1.1.1` -> `v1.2.0`	require	minor
github.com/in-toto/in-toto-golang	`8e29660` -> `1df2f04`	require	digest
github.com/konflux-ci/application-api	`e7eb2ec` -> `555a927`	require	digest
github.com/open-policy-agent/conftest	`v0.62.0` -> `v0.66.0`	require	minor
github.com/open-policy-agent/opa	`v1.6.0` -> `v1.12.1`	require	minor
github.com/pkg/diff	`20ebb0f` -> `4e6772a`	require	digest
github.com/sigstore/cosign/v2	`v2.4.1` -> `v2.6.1`	require	minor
github.com/sigstore/rekor	`v1.3.6` -> `v1.4.3`	require	minor
github.com/sigstore/sigstore	`v1.8.9` -> `v1.10.3`	require	minor
github.com/spf13/afero	`v1.14.0` -> `v1.15.0`	require	minor
github.com/spf13/cobra	`v1.9.1` -> `v1.10.2`	require	minor
github.com/spf13/viper	`v1.20.1` -> `v1.21.0`	require	minor
github.com/tektoncd/chains	`v0.22.2` -> `v0.26.0`	require	minor
github.com/tektoncd/cli	`v0.38.0` -> `v0.42.0`	require	minor
github.com/testcontainers/testcontainers-go	`v0.34.0` -> `v0.40.0`	require	minor
github.com/testcontainers/testcontainers-go/modules/registry	`v0.34.0` -> `v0.40.0`	require	minor
github.com/wiremock/go-wiremock	`v1.11.0` -> `v1.14.0`	require	minor
golang.org/x/benchmarks	`a2b48b6` -> `523919e`	require	digest
golang.org/x/exp	`7e4ce0a` -> `944ab1f`	require	digest
golang.org/x/exp	`2d47ceb` -> `944ab1f`	require	digest
golang.org/x/net	`v0.44.0` -> `v0.48.0`	require	minor
golang.org/x/sync	`v0.17.0` -> `v0.19.0`	require	minor
gotest.tools/gotestsum	`v1.12.1` -> `v1.13.0`	require	minor
helm.sh/helm/v3	`v3.18.5` -> `v3.19.4`	require	minor
k8s.io/api	`v0.34.2` -> `v0.35.0`	require	minor
k8s.io/apiextensions-apiserver	`v0.34.2` -> `v0.35.0`	require	minor
k8s.io/apimachinery	`v0.34.2` -> `v0.35.0`	require	minor
k8s.io/client-go	`v0.34.2` -> `v0.35.0`	require	minor
k8s.io/kube-openapi	`f3f2b99` -> `4e65d59`	require	digest
k8s.io/kubernetes	`v1.34.2` -> `v1.35.0`	require	minor
sigs.k8s.io/kind	`v0.26.0` -> `v0.31.0`	require	minor
sigs.k8s.io/kustomize/api	`v0.20.1` -> `v0.21.0`	require	minor
sigs.k8s.io/kustomize/kustomize/v5	`v5.7.1` -> `v5.8.0`	require	minor
sigs.k8s.io/kustomize/kyaml	`v0.20.1` -> `v0.21.0`	require	minor

Release Notes

cue-lang/cue (cuelang.org/go)

`v0.15.1`

Compare Source

Evaluator

Fix an evalv3 regression first introduced in v0.11.0 where the and built-in function started evaluating its arguments too eagerly, causing failures in cue def.

Fix an evalv3 regression where closedness info could be lost when using a comprehension.

Fix a bug where the evaluator would panic on alias cycles with dynamic fields rather than giving a good error.

LSP

Formatting standalone CUE files - either without a package name, or outside of a CUE module - now works correctly.

Fix a bug where trying to use "find references" on a CUE module with nested modules would cause a hang.

Fix a bug where resolving path roots did not work correctly in the presence of struct embeddings.

`cmd/cue`

Fix a regression in v0.15.0 where cue get go no longer skipped generating CUE files without any declarations.

Go API

Fix a bug in the subsume package where a struct with a pattern constraint did not subsume a closed struct with a matching field.

Rename the bootstrap build tag used in the internal/filetypes package to cuebootstrap to avoid conflicts with build tags in other Go modules.

Full list of changes since v0.15.0

bump pinnedReleaseGo and LanguageVersion for v0.15.1 by @mvdan in 350755e
lsp/fscache: improve removal of phantom package decls by @cuematthew in bcc9a45
internal/lsp: format standalone files without phantom pkg names by @cuematthew in bf16055
lsp/definitions: correct resolution of path roots by @cuematthew in e64569f
lsp/definitions: add test to show faulty resolution by @cuematthew in f2076ae
lsp/cache: stop nested modules from breaking find-references by @cuematthew in 6d75085
internal/core/compile: don't panic on an alias cycle with a dynamic field by @mvdan in cf6c597
internal/core/compile: revert and to use Func instead of RawFunc by @mvdan in 37e8637
cue/testdata: add test case for #3719 by @mvdan in de5328e
internal/core/subsume: fix duplicate logic for pattern constraints by @mvdan in a229275
internal/core/subsume: add test cases for pattern constraints by @mvdan in bca0a55
internal/filetypes: use a less generic bootstrap build tag by @mvdan in 94f2f0e
cmd/cue: do not emit empty CUE files in get go again by @mvdan in 819474c
cmd/cue: test that we don't emit empty CUE files without --outfile by @mvdan in e61516d
internal/core/adt: check removed scope per conjunct by @mvdan in 2e8e111
cue/testdata: add a test case for #4180 by @mvdan in f81118c

`v0.15.0`

Compare Source

Changes which may break some users are marked below with: ⚠️

Note that this release no longer includes a checksums.txt asset; GitHub now provide digests natively.

LSP

This release includes the initial version of cue lsp - with support for "go to definition", "find references", rename, code completion, hover documentation, and code formatting.

See our Getting Started wiki page for instructions on how to set it up with your editor.

Please report any bugs or missing features you encounter via the Issue tracker or via the #lsp channels on Discord or Slack.

Language

`explicitopen` experiment for `#A...`

The explicitopen per-file experiment enables the posfix ... operator to explicitly open closed structs, allowing additional fields to be added. This change simplifies CUE's semantics, reduces user confusion, and enables clearer expression of type extensibility patterns.

You can try this experiment by following our how-to guide. For more information, see the proposal on GitHub and the spec change patch.

`aliasv2` experiment

The aliasv2 per-file experiment implements the new "postfix aliases" syntax, and introduces a "self" predeclared identifier referring to the innermost surrounding struct or list.

You can try this experiment by following our how-to guide. For more information, see the proposal on GitHub and the spec change patch.

Other experiments

⚠️ With its proposal accepted, the keepvalidators global experiment is now stable, meaning that CUE_EXPERIMENT=keepvalidators is always enabled.

With its proposal accepted, the structcmp per-file experiment is now stable with language.version at v0.15.0 or later, meaning that the @experiment(structcmp) attribute is unnecessary as it's always enabled.

Evaluator

⚠️ Removing `evalv2`

The old evalv2 evaluator, which previously could be re-enabled via CUE_EXPERIMENT=evalv3=0, is now deleted. The new evalv3 evaluator has been on by default since v0.13.0, and at this point our entire test suite including Unity is working.

Removing the old evaluator reduces significant load on development, as we were able to clear out 4000 lines of code, and simplify the internal types and code structure. This is a necessary step to unblock ongoing feature and performance work in the evaluator.

As a bonus, because the old and new evaluators shared many core evaluator types, removing the fields only used by the old evaluator yields modest memory usage improvements of around 4-6%.

Performance

Evaluating concrete CUE values no longer involves dependency analysis; this should result in modest speed improvements when marshaling to YAML, via either cue export -e expr -o yaml or yaml.Marshal.

Dependency analysis now avoids computing references more than once, which resolves an expontential performance issue for some configurations using chains of CUE references.

Add caching to a part of the typochecker algorithm; this has been measured to provide performance improvements of up to 30% on a few large projects.

cue/parser now reuses more memory, which results in parsing performance improvements of up to 30% and memory savings of up to 50%, especially when loading large CUE data files.

Other changes

File embedding via the @embed attribute has gained an allowEmptyGlob option, to allow glob patterns to match zero files without causing an error.

The evaluator now shows all user errors created with the error builtin when they can be related to a disjunction failure. Previously, the evaluator would try to only show user errors directly part of a disjunction error, but that caused too many omissions.

Some error positions which were lost in the transition from evalv2 to evalv3 have been reintroduced.

Fix a bug where required fields in a definition might not be enforced when unifying with an inline struct in an expression, such as (#RequiresFoo & {bar: "baz"}).bar.

Fix a regression introduced in v0.12.0 where incomplete errors were not being handled consistently if they directly involved the top-level value.

A number of panics and error regressions in the evaluator which were reported since v0.14 have been fixed; thank you to all who reported these.

`cmd/cue`

A new cue help experiments command is introduced to document all available per-file and global experiments.

The cue fix --exp flag is introduced to rewrite files or packages to use new and experimental semantics with @experiment attributes.

cue mod mirror now copies OCI referrers between registries, which ensures that artifacts like signatures and attestations which reference modules being mirrored are copied as well.

cue mod resolve gains a --deps flag that lists all dependencies of the current module and which registries they resolve to.

cue get go gains an --outfile flag to generate exactly one CUE file for a single Go package, which can be useful when integrating cue get go into build systems like Bazel.

Fix a regression introduced in v0.9.0 where loading a qualified pattern like ./...:pkgname no longer filtered files based on the package name given.

cue get go now stops on any Go package loading error. Trying to continue in the presence of syntax or type-checking errors could lead to generating incorrect CUE.

Encodings

Initial support for encoding CUE schemas as JSON Schema is added. This includes a new encoding/jsonschema.Generate Go API, as well as CLI support via cue def --out jsonschema. This is currently very experimental, and many features are missing. For now, it can only generate a single version of JSON Schema, draft/2020-12.

The YAML library in the archived Go module gopkg.in/yaml.v3 has been replaced by go.yaml.in/yaml/v3, an active fork now maintained by the YAML organization.

cue exp gengotypes is improved to handle more edge cases with CUE package imports which could result in broken Go code.

The Protobuf decoder has been tweaked to not require files such as google/protobuf/timestamp.proto to exist on disk, given that they are mapped to CUE standard library APIs directly.

The Protobuf decoder has also been tweaked to support fully qualified references such as my.pkg.name.MessageName.

A bug is fixed in the TOML decoder where sub-table keys could incorrectly lead to duplicate key errors.

Standard library

The net package has gained new AddIP and AddIPCIDR functions to add numerical offsets to IP addresses or CIDR networks.

The Atoi, ParseInt, and ParseUint functions in the strconv package now work on integers with unlimited precision, like the rest of the CUE evaluator, rather than just a maximum of 64 bits.

Go API

The new cue.Value.IsClosed and cue.Value.IsClosedRecursively methods report whether a value has been closed at the top level or recursively, which is useful information when writing schema encodings.

The new cue.Patterns and cue.Selector.Pattern APIs allow introspecting pattern constraints in CUE struct values.

The new encoding/yaml.Decoder API allows decoding a stream of YAML documents, given that existing APIs did not support streams of multiple YAML documents.

encoding/json gains JSON Pointer APIs, which are already useful in packages like encoding/jsonschema.

cue/ast introduces PostfixExpr to support upcoming additions to the language syntax.

cue/ast introduces StringLabelNeedsQuoting to determine whether a string label needs to be quoted when used in CUE syntax.

cue/ast introduces NewStringLabel to create an ast.Label as either an unquoted identifier or a quoted string, depending on whether the string label needs quoting.

tools/fix has gained new APIs to fix configs to use an active experiment, as well as fixing configs to a newer language version.

cue introduces a Path.Append convenience method.

⚠️ cue/build.Instance.Match is removed, given that it was never set to any value at any point since it was added.

cue/token is adjusted so that node positions within a file never result in an offset which is outside the bounds of the file. This could easily lead to subtle bugs or panics when using node position offsets.

⚠️ The cue/token.Pos.Before method is now rewritten to match cue/token.Pos.Compare, given that it always returned "false" for positions from different files. The method is now deprecated as well.

cue/errors is adjusted so that Positions only collects printable positions, to prevent printing empty positions in the CLI.

cue/ast deprecates the File.Imports field in favor of the File.ImportSpecs iterator method. The iterator method File.ImportDecls is also introduced for completeness.

⚠️ The long-deprecated cue.ResolveReferences option API is now removed.

cue/parser.DeprecationError.Version is deprecated, as tracking CUE language versions via integers has not been used since v0.4.3, and the mechanism was never properly documented.

Full list of changes since v0.14.0

tools/fix: fix several issues with explicitopen rewrite by @mpvl in 4aad065
tools/fix: add some test cases by @mpvl in 3b2b9b4
internal/core/adt: add __reclose by @mpvl in f8bf47a
doc/ref: clarify exact meaning of value for match* builtins by @mpvl in a650c53
internal/ci/base: cue fmt files by @mpvl in ab19f98
lsp/definitions: fix find-references (UsagesForOffset) by @cuematthew in 27f5797
internal/core/dep: fix dependencies on spread operator by @mpvl in 5634c58
internal/core/dep: add test for spread operator by @mpvl in f1cd0d2
internal/core/export: handle spread operator by @mpvl in 52f26f9
doc/ref/spec.md: document matchN and machIf by @mpvl in 020764b
cue/parser: fix too restrictive parser test by @mpvl in 7d69171
cue/ast/astutil: handle patching of some references in Apply by @mpvl in b979ace
cue/ast/astutil: include Sanitize in TestApply by @mpvl in 57c6f9f
tools/fix: do not add spread operator to lists by @mpvl in 7e9a83e
all: remove two error results which are always nil by @mvdan in 6ed9b98
all: remove three func results which are never used by @mvdan in eca4996
cmd/cue: remove unused addInjectionFlags parameter by @mvdan in 083dd03
internal/core/adt: make CloseInfo.AncestorPositions an iterator by @mvdan in 82c321f
CONTRIBUTING: discourage SSH for Gerrit more actively by @mvdan in 2e7e5af
pkg/path: fix test failures when executed with -count N by @roman-mazur in 1bfde52
internal/source: simplify ReadAll by @mvdan in cc3d92d
internal/source: avoid a NopCloser if src is already a Closer by @mvdan in 6d58d63
cue/ast/astutil: avoid walking to the root to reuse scopes by @mvdan in 4ba9572
lsp/fscache: set version on token.File by @cuematthew in e79d2ea
internal/lsp: simplify processing of package imports by @cuematthew in bbf6f4f
cue/ast/astutil: assume LetClause.Expr and Alias.Expr are non-nil by @mvdan in a77e741
cue/ast/astutil: reuse scope allocations by @mvdan in e5706db
cue/ast: do not allocate in SetComments when it's a no-op by @mvdan in d88bc99
cue/parser: reuse commentState allocations by @mvdan in 1e30ed2
all: replace two uses of astutil.ParseImportPath by @mvdan in 2dcf1d8
cue: use Vertex.SingleConjunct in Value.Source by @mvdan in dea3faa
cue/load: ensure that Config.ModuleRoot is clean, like Config.Dir by @mvdan in 14472be
cue/load: correctly handle the filesystem root as Config.ModuleRoot by @mvdan in d7a839b
encoding/jsonschema: avoid redundant patternProperties in Generate by @rogpeppe in a8385f8
cmd/cue: update help text to reflect renamed experiment by @jpluscplusm in 7d0090a
cmd/cue/cmd: add --deps flag to 'cue mod resolve' by @rogpeppe in 15afd50
cue/load: add test case showing an error when Config.ModuleRoot=="/" by @mvdan in 44dba4e
internal/ci/goreleaser: actually disable checksum generation by @mvdan in 93c434c
all: remove two obsolete and commented-out APIs by @mvdan in 25322ae
lsp/definitions: call pos.Offset() directly by @cuematthew in 64182de
internal/lsp: support standalone files with imports in modules by @cuematthew in 7dcbdf6
internal/lsp: add support for rename by @cuematthew in 24300be
internal/lsp: support references with definitions by @cuematthew in 6feb520
cmd/cue: adjust cue get go --outfile logic by @mvdan in 6491013
cue/token: rewrite Pos.Before in terms of Pos.Compare by @mvdan in 6c2aa6a
cue/token: don't unpack line info in Pos.Compare by @mvdan in 9623737
cue/token: remove unnecessary Pos.file nil checks by @mvdan in 852de61
cue/token: don't unpack line info in Pos.Offset by @mvdan in 8972e06
cue/token: don't unpack line info in Pos.Filename by @mvdan in 6543708
cue/token: reuse File.Offset in File.position by @mvdan in f4ba49b
cue/ast/astutil: use go fix -inline on ImportPathName by @mvdan in 1850e9b
internal/core/layer: rudimentary implementation of layers by @mpvl in 654b5c0
internal/core/adt: set t.id only once by @mpvl in aae1e07
internal/lsp: wire UsagesForOffset into the LSP by @cuematthew in bdc3901
lsp/definitions: implement UsagesForOffset by @cuematthew in 5303c60
lsp/definitions: add ability to reset definitions analysis by @cuematthew in aba5ee2
lsp/rangeset: add String methods by @cuematthew in bfe4aba
encoding/yaml: add Decoder for streaming YAML documents by @mpvl in 738e6e4
all: start leveraging go fix -inline by @mvdan in 70d6a9c
all: go fix -inline ./... by @mvdan in 279e355
all: rename aliasandself experiment to aliasv2 by @mpvl in b85644f
encoding/jsonschema: explicit close handling by @rogpeppe in a94cfbc
encoding/jsonschema: add tests by @rogpeppe in 2606457
internal/ci: don't let "---" lines break git commit trailers by @mvdan in e735c99
mod/modregistry: mirror referrers in Client.Mirror by @rogpeppe in f0d24a9
all: go fix -slicescontains ./... by @mvdan in 7b65843
all: go fix -stringsseq ./... by @mvdan in 2895806
internal/core/adt: treat equality bound as open validator by @mpvl in 15f2a53
internal/core/adt: add tests for Issue 4142 by [@mpvl](https:

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-08-28T13:20:14Z

ℹ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

57 additional dependencies were updated

Details:

Package	Change
`github.com/evanphx/json-patch/v5`	`v5.9.0` -> `v5.9.11`
`github.com/go-git/go-billy/v5`	`v5.6.0` -> `v5.6.2`
`github.com/tektoncd/pipeline`	`v0.66.0` -> `v1.3.1`
`github.com/Azure/go-ansiterm`	`v0.0.0-20230124172434-306776ec8161` -> `v0.0.0-20250102033503-faa5f7b0171c`
`github.com/ProtonMail/go-crypto`	`v1.1.3` -> `v1.1.6`
`github.com/cloudflare/circl`	`v1.4.0` -> `v1.6.1`
`github.com/cyphar/filepath-securejoin`	`v0.3.1` -> `v0.4.1`
`github.com/docker/cli`	`v28.2.2+incompatible` -> `v28.3.3+incompatible`
`github.com/emicklei/go-restful/v3`	`v3.12.1` -> `v3.12.2`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/go-jose/go-jose/v4`	`v4.0.5` -> `v4.1.0`
`github.com/go-openapi/errors`	`v0.22.0` -> `v0.22.1`
`github.com/go-openapi/swag`	`v0.23.0` -> `v0.23.1`
`github.com/go-viper/mapstructure/v2`	`v2.2.1` -> `v2.3.0`
`github.com/golang/groupcache`	`v0.0.0-20210331224755-41bb18bfe9da` -> `v0.0.0-20241129210726-2c02b8208cf8`
`github.com/golang/snappy`	`v0.0.4` -> `v1.0.0`
`github.com/google/cel-go`	`v0.22.0` -> `v0.26.0`
`github.com/google/certificate-transparency-go`	`v1.2.1` -> `v1.3.2`
`github.com/google/gnostic-models`	`v0.6.9-0.20230804172637-c7be7c783f49` -> `v0.7.0`
`github.com/in-toto/attestation`	`v1.1.0` -> `v1.1.2`
`github.com/jonboulle/clockwork`	`v0.4.0` -> `v0.5.0`
`github.com/magiconair/properties`	`v1.8.7` -> `v1.8.10`
`github.com/mailru/easyjson`	`v0.7.7` -> `v0.9.0`
`github.com/mattn/go-colorable`	`v0.1.13` -> `v0.1.14`
`github.com/mitchellh/mapstructure`	`v1.5.0` -> `v1.5.1-0.20231216201459-8508981c8b6c`
`github.com/moby/term`	`v0.5.0` -> `v0.5.2`
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`
`github.com/pjbgf/sha1cd`	`v0.3.0` -> `v0.3.2`
`github.com/prometheus/common`	`v0.62.0` -> `v0.63.0`
`github.com/rogpeppe/go-internal`	`v1.13.1` -> `v1.14.1`
`github.com/sigstore/protobuf-specs`	`v0.3.2` -> `v0.5.0`
`github.com/skeema/knownhosts`	`v1.3.0` -> `v1.3.1`
`github.com/spf13/pflag`	`v1.0.6` -> `v1.0.7`
`go.mongodb.org/mongo-driver`	`v1.16.1` -> `v1.17.3`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.60.0` -> `v0.61.0`
`go.opentelemetry.io/otel`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/metric`	`v1.36.0` -> `v1.37.0`
`golang.org/x/crypto`	`v0.38.0` -> `v0.40.0`
`golang.org/x/sync`	`v0.15.0` -> `v0.16.0`
`golang.org/x/sys`	`v0.33.0` -> `v0.35.0`
`golang.org/x/term`	`v0.32.0` -> `v0.34.0`
`golang.org/x/text`	`v0.25.0` -> `v0.27.0`
`golang.org/x/time`	`v0.11.0` -> `v0.12.0`
`gomodules.xyz/jsonpatch/v2`	`v2.4.0` -> `v2.5.0`
`google.golang.org/api`	`v0.215.0` -> `v0.242.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250519155744-55703ea1f237` -> `v0.0.0-20250603155806-513f23925822`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250519155744-55703ea1f237` -> `v0.0.0-20250603155806-513f23925822`
`google.golang.org/grpc`	`v1.72.2` -> `v1.74.2`
`google.golang.org/protobuf`	`v1.36.6` -> `v1.36.7`
`k8s.io/apiextensions-apiserver`	`v0.31.0` -> `v0.32.7`
`k8s.io/apiserver`	`v0.32.3` -> `v0.32.7`
`k8s.io/component-base`	`v0.32.3` -> `v0.32.7`
`k8s.io/kube-openapi`	`v0.0.0-20241105132330-32ad38e42d3f` -> `v0.0.0-20250710124328-f3f2b991d03b`
`k8s.io/utils`	`v0.0.0-20241104100929-3ea5e8cea738` -> `v0.0.0-20250604170112-4c0f3b243397`
`knative.dev/pkg`	`v0.0.0-20240815051656-89743d9bbf7c` -> `v0.0.0-20250415155312-ed3e2158b883`
`sigs.k8s.io/json`	`v0.0.0-20241010143419-9aa6b5e7a4b3` -> `v0.0.0-20241014173422-cfa47c3a1cc8`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

88 additional dependencies were updated

Details:

Package	Change
`github.com/spf13/pflag`	`v1.0.6` -> `v1.0.7`
`cel.dev/expr`	`v0.20.0` -> `v0.24.0`
`cloud.google.com/go`	`v0.116.0` -> `v0.121.2`
`cloud.google.com/go/auth`	`v0.13.0` -> `v0.16.2`
`cloud.google.com/go/auth/oauth2adapt`	`v0.2.6` -> `v0.2.8`
`cloud.google.com/go/iam`	`v1.2.2` -> `v1.5.2`
`cloud.google.com/go/monitoring`	`v1.21.2` -> `v1.24.2`
`github.com/Azure/go-ansiterm`	`v0.0.0-20230124172434-306776ec8161` -> `v0.0.0-20250102033503-faa5f7b0171c`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.26.0` -> `v1.27.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric`	`v0.48.1` -> `v0.53.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping`	`v0.48.1` -> `v0.53.0`
`github.com/ProtonMail/go-crypto`	`v1.1.5` -> `v1.1.6`
`github.com/aws/aws-sdk-go`	`v1.55.5` -> `v1.55.7`
`github.com/aws/aws-sdk-go-v2`	`v1.30.5` -> `v1.36.5`
`github.com/aws/aws-sdk-go-v2/config`	`v1.27.33` -> `v1.29.17`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.17.32` -> `v1.17.70`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.16.13` -> `v1.16.32`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.3.17` -> `v1.3.36`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.17` -> `v2.6.36`
`github.com/aws/aws-sdk-go-v2/internal/ini`	`v1.8.1` -> `v1.8.3`
`github.com/aws/aws-sdk-go-v2/service/ecr`	`v1.32.2` -> `v1.40.3`
`github.com/aws/aws-sdk-go-v2/service/ecrpublic`	`v1.25.4` -> `v1.31.2`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.11.4` -> `v1.12.4`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.11.19` -> `v1.12.17`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.22.7` -> `v1.25.5`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.26.7` -> `v1.30.3`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.30.7` -> `v1.34.0`
`github.com/aws/smithy-go`	`v1.20.4` -> `v1.22.4`
`github.com/awslabs/amazon-ecr-credential-helper/ecr-login`	`v0.0.0-20240826150212-5dc58b6e29f8` -> `v0.9.1`
`github.com/cloudflare/circl`	`v1.4.0` -> `v1.6.1`
`github.com/cncf/xds/go`	`v0.0.0-20250121191232-2f005788dc42` -> `v0.0.0-20250501225837-2ac532fd4443`
`github.com/coreos/go-oidc/v3`	`v3.11.0` -> `v3.14.1`
`github.com/cyberphone/json-canonicalization`	`v0.0.0-20231217050601-ba74d44ecf5f` -> `v0.0.0-20241213102144-19d51d7fe467`
`github.com/cyphar/filepath-securejoin`	`v0.3.6` -> `v0.4.1`
`github.com/dgraph-io/badger/v4`	`v4.7.0` -> `v4.8.0`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/go-openapi/errors`	`v0.22.0` -> `v0.22.1`
`github.com/go-openapi/swag`	`v0.23.0` -> `v0.23.1`
`github.com/golang/groupcache`	`v0.0.0-20210331224755-41bb18bfe9da` -> `v0.0.0-20241129210726-2c02b8208cf8`
`github.com/google/cel-go`	`v0.21.0` -> `v0.26.0`
`github.com/google/certificate-transparency-go`	`v1.2.1` -> `v1.3.2`
`github.com/google/gnostic-models`	`v0.6.9-0.20230804172637-c7be7c783f49` -> `v0.7.0`
`github.com/google/s2a-go`	`v0.1.8` -> `v0.1.9`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.4` -> `v0.3.6`
`github.com/googleapis/gax-go/v2`	`v2.14.1` -> `v2.14.2`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.26.3` -> `v2.27.1`
`github.com/hashicorp/go-retryablehttp`	`v0.7.7` -> `v0.7.8`
`github.com/jmespath/go-jmespath`	`v0.4.0` -> `v0.4.1-0.20220621161143-b0104c826a24`
`github.com/mailru/easyjson`	`v0.7.7` -> `v0.9.0`
`github.com/mitchellh/mapstructure`	`v1.5.0` -> `v1.5.1-0.20231216201459-8508981c8b6c`
`github.com/moby/term`	`v0.5.0` -> `v0.5.2`
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`
`github.com/prometheus/common`	`v0.62.0` -> `v0.63.0`
`github.com/sergi/go-diff`	`v1.3.2-0.20230802210424-5b0b94c5c0d3` -> `v1.4.0`
`github.com/sigstore/fulcio`	`v1.6.3` -> `v1.7.1`
`github.com/sigstore/protobuf-specs`	`v0.3.2` -> `v0.5.0`
`github.com/tchap/go-patricia/v2`	`v2.3.2` -> `v2.3.3`
`github.com/vektah/gqlparser/v2`	`v2.5.28` -> `v2.5.30`
`github.com/yusufpapurcu/wmi`	`v1.2.3` -> `v1.2.4`
`go.etcd.io/etcd/client/pkg/v3`	`v3.6.3` -> `v3.6.4`
`go.etcd.io/etcd/client/v3`	`v3.6.3` -> `v3.6.4`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.34.0` -> `v1.36.0`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.60.0` -> `v0.61.0`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.61.0` -> `v0.62.0`
`go.opentelemetry.io/otel`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/metric`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/sdk`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/trace`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/proto/otlp`	`v1.6.0` -> `v1.7.0`
`go.step.sm/crypto`	`v0.51.2` -> `v0.67.0`
`golang.org/x/sys`	`v0.33.0` -> `v0.35.0`
`golang.org/x/term`	`v0.32.0` -> `v0.34.0`
`golang.org/x/text`	`v0.26.0` -> `v0.28.0`
`golang.org/x/time`	`v0.11.0` -> `v0.12.0`
`golang.org/x/tools`	`v0.34.0` -> `v0.36.0`
`google.golang.org/api`	`v0.215.0` -> `v0.242.0`
`google.golang.org/genproto`	`v0.0.0-20241118233622-e639e219e697` -> `v0.0.0-20250505200425-f936aa4a68b2`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250519155744-55703ea1f237` -> `v0.0.0-20250603155806-513f23925822`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250519155744-55703ea1f237` -> `v0.0.0-20250603155806-513f23925822`
`google.golang.org/grpc`	`v1.72.2` -> `v1.74.2`
`k8s.io/api`	`v0.32.3` -> `v0.34.0`
`k8s.io/utils`	`v0.0.0-20241104100929-3ea5e8cea738` -> `v0.0.0-20250604170112-4c0f3b243397`
`sigs.k8s.io/json`	`v0.0.0-20241010143419-9aa6b5e7a4b3` -> `v0.0.0-20241014173422-cfa47c3a1cc8`
`sigs.k8s.io/release-utils`	`v0.8.4` -> `v0.12.0`

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

158 additional dependencies were updated

Details:

Package	Change
`4d63.com/gocheckcompilerdirectives`	`v1.2.1` -> `v1.3.0`
`4d63.com/gochecknoglobals`	`v0.2.1` -> `v0.2.2`
`cel.dev/expr`	`v0.20.0` -> `v0.24.0`
`cloud.google.com/go`	`v0.116.0` -> `v0.121.1`
`cloud.google.com/go/auth`	`v0.13.0` -> `v0.16.2`
`cloud.google.com/go/auth/oauth2adapt`	`v0.2.6` -> `v0.2.8`
`cloud.google.com/go/compute/metadata`	`v0.6.0` -> `v0.7.0`
`cloud.google.com/go/firestore`	`v1.17.0` -> `v1.18.0`
`cloud.google.com/go/iam`	`v1.2.2` -> `v1.5.2`
`cloud.google.com/go/kms`	`v1.20.1` -> `v1.22.0`
`cloud.google.com/go/longrunning`	`v0.6.2` -> `v0.6.7`
`cloud.google.com/go/monitoring`	`v1.21.2` -> `v1.24.2`
`cloud.google.com/go/storage`	`v1.49.0` -> `v1.55.0`
`github.com/4meepo/tagalign`	`v1.4.1` -> `v1.4.2`
`github.com/Azure/azure-sdk-for-go/sdk/azcore`	`v1.16.0` -> `v1.18.0`
`github.com/Azure/azure-sdk-for-go/sdk/azidentity`	`v1.8.0` -> `v1.10.1`
`github.com/Azure/azure-sdk-for-go/sdk/internal`	`v1.10.0` -> `v1.11.1`
`github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys`	`v1.1.0` -> `v1.3.1`
`github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal`	`v1.0.1` -> `v1.1.1`
`github.com/AzureAD/microsoft-authentication-library-for-go`	`v1.3.2` -> `v1.4.2`
`github.com/Crocmagnon/fatcontext`	`v0.5.3` -> `v0.7.1`
`github.com/GaijinEntertainment/go-exhaustruct/v3`	`v3.3.0` -> `v3.3.1`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.26.0` -> `v1.27.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric`	`v0.48.1` -> `v0.53.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping`	`v0.48.1` -> `v0.53.0`
`github.com/IBM/sarama`	`v1.43.3` -> `v1.45.1`
`github.com/Masterminds/semver/v3`	`v3.3.0` -> `v3.3.1`
`github.com/OpenPeeDeeP/depguard/v2`	`v2.2.0` -> `v2.2.1`
`github.com/ProtonMail/go-crypto`	`v1.0.0` -> `v1.1.5`
`github.com/alingse/nilnesserr`	`v0.1.1` -> `v0.1.2`
`github.com/aws/aws-sdk-go`	`v1.55.5` -> `v1.55.7`
`github.com/aws/aws-sdk-go-v2`	`v1.30.4` -> `v1.36.5`
`github.com/aws/aws-sdk-go-v2/config`	`v1.27.31` -> `v1.29.17`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.17.30` -> `v1.17.70`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.16.12` -> `v1.16.32`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.3.16` -> `v1.3.36`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.16` -> `v2.6.36`
`github.com/aws/aws-sdk-go-v2/internal/ini`	`v1.8.1` -> `v1.8.3`
`github.com/aws/aws-sdk-go-v2/service/ecr`	`v1.32.2` -> `v1.40.3`
`github.com/aws/aws-sdk-go-v2/service/ecrpublic`	`v1.25.4` -> `v1.31.2`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.11.4` -> `v1.12.4`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.11.18` -> `v1.12.17`
`github.com/aws/aws-sdk-go-v2/service/kms`	`v1.35.5` -> `v1.41.2`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.22.5` -> `v1.25.5`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.26.5` -> `v1.30.3`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.30.5` -> `v1.34.0`
`github.com/aws/smithy-go`	`v1.20.4` -> `v1.22.4`
`github.com/awslabs/amazon-ecr-credential-helper/ecr-login`	`v0.0.0-20240826150212-5dc58b6e29f8` -> `v0.9.1`
`github.com/catenacyber/perfsprint`	`v0.7.1` -> `v0.8.2`
`github.com/cncf/xds/go`	`v0.0.0-20250121191232-2f005788dc42` -> `v0.0.0-20250501225837-2ac532fd4443`
`github.com/coreos/go-oidc/v3`	`v3.11.0` -> `v3.14.1`
`github.com/cpuguy83/go-md2man/v2`	`v2.0.6` -> `v2.0.7`
`github.com/cyberphone/json-canonicalization`	`v0.0.0-20231217050601-ba74d44ecf5f` -> `v0.0.0-20241213102144-19d51d7fe467`
`github.com/docker/cli`	`v28.2.2+incompatible` -> `v28.3.3+incompatible`
`github.com/docker/docker`	`v28.2.2+incompatible` -> `v28.3.3+incompatible`
`github.com/emicklei/go-restful/v3`	`v3.12.1` -> `v3.12.2`
`github.com/evanphx/json-patch/v5`	`v5.9.0` -> `v5.9.11`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/gdamore/tcell/v2`	`v2.7.4` -> `v2.8.1`
`github.com/ghostiam/protogetter`	`v0.3.8` -> `v0.3.9`
`github.com/go-chi/chi/v5`	`v5.1.0` -> `v5.2.2`
`github.com/go-critic/go-critic`	`v0.11.5` -> `v0.12.0`
`github.com/go-openapi/errors`	`v0.22.0` -> `v0.22.1`
`github.com/go-openapi/swag`	`v0.23.0` -> `v0.23.1`
`github.com/golang/groupcache`	`v0.0.0-20210331224755-41bb18bfe9da` -> `v0.0.0-20241129210726-2c02b8208cf8`
`github.com/golang/snappy`	`v0.0.4` -> `v1.0.0`
`github.com/golangci/dupl`	`v0.0.0-20180902072040-3e9179ac440a` -> `v0.0.0-20250308024227-f665c8d69b32`
`github.com/golangci/gofmt`	`v0.0.0-20241223200906-057b0627d9b9` -> `v0.0.0-20250106114630-d62b90e6713d`
`github.com/golangci/revgrep`	`v0.5.3` -> `v0.8.0`
`github.com/google/cel-go`	`v0.23.2` -> `v0.26.0`
`github.com/google/certificate-transparency-go`	`v1.2.1` -> `v1.3.2`
`github.com/google/gnostic-models`	`v0.6.9` -> `v0.7.0`
`github.com/google/go-containerregistry`	`v0.20.2` -> `v0.20.6`
`github.com/google/s2a-go`	`v0.1.8` -> `v0.1.9`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.4` -> `v0.3.6`
`github.com/googleapis/gax-go/v2`	`v2.14.1` -> `v2.14.2`
`github.com/gostaticanalysis/comment`	`v1.4.2` -> `v1.5.0`
`github.com/gostaticanalysis/forcetypeassert`	`v0.1.0` -> `v0.2.0`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.26.3` -> `v2.27.1`
`github.com/hashicorp/go-retryablehttp`	`v0.7.7` -> `v0.7.8`
`github.com/hashicorp/go-secure-stdlib/parseutil`	`v0.1.8` -> `v0.2.0`
`github.com/hashicorp/go-sockaddr`	`v1.0.6` -> `v1.0.7`
`github.com/hashicorp/vault/api`	`v1.14.0` -> `v1.16.0`
`github.com/jmespath/go-jmespath`	`v0.4.0` -> `v0.4.1-0.20220621161143-b0104c826a24`
`github.com/jonboulle/clockwork`	`v0.4.0` -> `v0.5.0`
`github.com/karamaru-alpha/copyloopvar`	`v1.1.0` -> `v1.2.1`
`github.com/kisielk/errcheck`	`v1.8.0` -> `v1.9.0`
`github.com/kkHAIKE/contextcheck`	`v1.1.5` -> `v1.1.6`
`github.com/ktr0731/go-fuzzyfinder`	`v0.8.0` -> `v0.9.0`
`github.com/ldez/exptostd`	`v0.3.1` -> `v0.4.2`
`github.com/ldez/gomoddirectives`	`v0.6.0` -> `v0.6.1`
`github.com/ldez/grignotin`	`v0.7.0` -> `v0.9.0`
`github.com/mailru/easyjson`	`v0.7.7` -> `v0.9.0`
`github.com/matoous/godox`	`v0.0.0-20240105082147-c5b5e0e7c0c0` -> `v1.1.0`
`github.com/mattn/go-colorable`	`v0.1.13` -> `v0.1.14`
`github.com/mgechev/revive`	`v1.5.1` -> `v1.7.0`
`github.com/mitchellh/mapstructure`	`v1.5.0` -> `v1.5.1-0.20231216201459-8508981c8b6c`
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`
`github.com/nunnatsa/ginkgolinter`	`v0.18.4` -> `v0.19.1`
`github.com/pierrec/lz4/v4`	`v4.1.21` -> `v4.1.22`
`github.com/polyfloyd/go-errorlint`	`v1.7.0` -> `v1.7.1`
`github.com/prometheus/common`	`v0.62.0` -> `v0.63.0`
`github.com/secure-systems-lab/go-securesystemslib`	`v0.8.0` -> `v0.9.0`
`github.com/securego/gosec/v2`	`v2.21.4` -> `v2.22.2`
`github.com/sigstore/cosign/v2`	`v2.4.0` -> `v2.5.3`
`github.com/sigstore/fulcio`	`v1.6.3` -> `v1.7.1`
`github.com/sigstore/protobuf-specs`	`v0.3.2` -> `v0.5.0`
`github.com/sigstore/rekor`	`v1.3.6` -> `v1.3.10`
`github.com/sigstore/sigstore`	`v1.8.8` -> `v1.9.5`
`github.com/sigstore/sigstore/pkg/signature/kms/aws`	`v1.8.8` -> `v1.9.5`
`github.com/sigstore/sigstore/pkg/signature/kms/azure`	`v1.8.8` -> `v1.9.5`
`github.com/sigstore/sigstore/pkg/signature/kms/gcp`	`v1.8.8` -> `v1.9.5`
`github.com/tdakkota/asciicheck`	`v0.3.0` -> `v0.4.1`
`github.com/tektoncd/hub`	`v1.18.0` -> `v1.22.2`
`github.com/tektoncd/pipeline`	`v0.66.0` -> `v1.3.1`
`github.com/tektoncd/triggers`	`v0.29.0` -> `v0.33.0`
`github.com/tetafro/godot`	`v1.4.20` -> `v1.5.0`
`github.com/uudashr/iface`	`v1.3.0` -> `v1.3.1`
`go-simpler.org/sloglint`	`v0.7.2` -> `v0.9.0`
`go.mongodb.org/mongo-driver`	`v1.16.1` -> `v1.17.3`
`go.opentelemetry.io/contrib/detectors/gcp`	`v1.34.0` -> `v1.36.0`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.60.0` -> `v0.61.0`
`go.opentelemetry.io/otel`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/metric`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/sdk`	`v1.36.0` -> `v1.37.0`
`go.opentelemetry.io/otel/trace`	`v1.36.0` -> `v1.37.0`
`go.step.sm/crypto`	`v0.51.2` -> `v0.67.0`
`go.yaml.in/yaml/v3`	`v3.0.3` -> `v3.0.4`
`goa.design/goa/v3`	`v3.18.2` -> `v3.21.1`
`gocloud.dev`	`v0.39.0` -> `v0.40.0`
`gocloud.dev/docstore/mongodocstore`	`v0.39.0` -> `v0.40.0`
`gocloud.dev/pubsub/kafkapubsub`	`v0.39.0` -> `v0.40.0`
`golang.org/x/exp/typeparams`	`v0.0.0-20241108190413-2d47ceb2692f` -> `v0.0.0-20250210185358-939b2ce775ac`
`golang.org/x/mod`	`v0.25.0` -> `v0.26.0`
`golang.org/x/oauth2`	`v0.29.0` -> `v0.30.0`
`golang.org/x/sys`	`v0.34.0` -> `v0.35.0`
`golang.org/x/term`	`v0.33.0` -> `v0.34.0`
`golang.org/x/time`	`v0.11.0` -> `v0.12.0`
`gomodules.xyz/jsonpatch/v2`	`v2.4.0` -> `v2.5.0`
`google.golang.org/api`	`v0.215.0` -> `v0.241.0`
`google.golang.org/genproto`	`v0.0.0-20241118233622-e639e219e697` -> `v0.0.0-20250505200425-f936aa4a68b2`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250519155744-55703ea1f237` -> `v0.0.0-20250603155806-513f23925822`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250519155744-55703ea1f237` -> `v0.0.0-20250603155806-513f23925822`
`google.golang.org/grpc`	`v1.72.2` -> `v1.74.2`
`google.golang.org/protobuf`	`v1.36.6` -> `v1.36.7`
`honnef.co/go/tools`	`v0.5.1` -> `v0.6.1`
`k8s.io/api`	`v0.33.3` -> `v0.33.4`
`k8s.io/apimachinery`	`v0.33.3` -> `v0.33.4`
`k8s.io/client-go`	`v0.33.3` -> `v0.33.4`
`k8s.io/kube-openapi`	`v0.0.0-20250318190949-c8a335a9a2ff` -> `v0.0.0-20250710124328-f3f2b991d03b`
`k8s.io/utils`	`v0.0.0-20241104100929-3ea5e8cea738` -> `v0.0.0-20250604170112-4c0f3b243397`
`knative.dev/pkg`	`v0.0.0-20240815051656-89743d9bbf7c` -> `v0.0.0-20250415155312-ed3e2158b883`
`sigs.k8s.io/json`	`v0.0.0-20241010143419-9aa6b5e7a4b3` -> `v0.0.0-20241014173422-cfa47c3a1cc8`
`sigs.k8s.io/kustomize/api`	`v0.19.0` -> `v0.20.1`
`sigs.k8s.io/kustomize/cmd/config`	`v0.19.0` -> `v0.20.1`
`sigs.k8s.io/kustomize/kyaml`	`v0.19.0` -> `v0.20.1`
`sigs.k8s.io/release-utils`	`v0.8.4` -> `v0.11.1`
`sigs.k8s.io/yaml`	`v1.5.0` -> `v1.6.0`

File name: tools/kubectl/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

28 additional dependencies were updated

Details:

Package	Change
`github.com/emicklei/go-restful/v3`	`v3.12.1` -> `v3.12.2`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/google/gnostic-models`	`v0.6.9-0.20230804172637-c7be7c783f49` -> `v0.7.0`
`github.com/google/go-cmp`	`v0.6.0` -> `v0.7.0`
`github.com/gorilla/websocket`	`v1.5.3` -> `v1.5.4-0.20250319132907-e064f32e3674`
`github.com/jonboulle/clockwork`	`v0.4.0` -> `v0.5.0`
`github.com/klauspost/compress`	`v1.17.9` -> `v1.18.0`
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`
`github.com/onsi/ginkgo/v2`	`v2.20.0` -> `v2.21.0`
`github.com/onsi/gomega`	`v1.34.1` -> `v1.35.1`
`github.com/prometheus/client_golang`	`v1.20.2` -> `v1.22.0`
`github.com/prometheus/common`	`v0.58.0` -> `v0.62.0`
`github.com/spf13/cobra`	`v1.8.1` -> `v1.9.1`
`github.com/spf13/pflag`	`v1.0.6-0.20210604193023-d5e0c0615ace` -> `v1.0.6`
`golang.org/x/net`	`v0.36.0` -> `v0.38.0`
`golang.org/x/sync`	`v0.11.0` -> `v0.12.0`
`golang.org/x/sys`	`v0.30.0` -> `v0.31.0`
`golang.org/x/term`	`v0.29.0` -> `v0.30.0`
`golang.org/x/text`	`v0.22.0` -> `v0.23.0`
`golang.org/x/time`	`v0.6.0` -> `v0.9.0`
`google.golang.org/protobuf`	`v1.34.2` -> `v1.36.5`
`k8s.io/kube-openapi`	`v0.0.0-20240903163716-9e1beecbcb38` -> `v0.0.0-20250710124328-f3f2b991d03b`
`k8s.io/utils`	`v0.0.0-20240902221715-702e33fdd3c3` -> `v0.0.0-20250604170112-4c0f3b243397`
`sigs.k8s.io/json`	`v0.0.0-20221116044647-bc3834ca7abd` -> `v0.0.0-20241014173422-cfa47c3a1cc8`
`sigs.k8s.io/kustomize/api`	`v0.17.3` -> `v0.20.1`
`sigs.k8s.io/kustomize/kustomize/v5`	`v5.4.3` -> `v5.7.1`
`sigs.k8s.io/kustomize/kyaml`	`v0.17.2` -> `v0.20.1`
`sigs.k8s.io/yaml`	`v1.4.0` -> `v1.6.0`

renovate · 2025-08-28T15:46:30Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: acceptance/go.sum

Command failed: go get -t ./...
go: module github.com/sigstore/sigstore@v1.10.3 requires go >= 1.25.0; switching to go1.25.5
go: downloading go1.25.5 (linux/amd64)
go: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off

File name: go.sum

Command failed: go get -t ./...
go: module github.com/open-policy-agent/conftest@v0.66.0 requires go >= 1.25.3; switching to go1.25.5
go: downloading go1.25.5 (linux/amd64)
go: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off

File name: tools/go.sum

Command failed: go get -t ./...
go: module github.com/open-policy-agent/conftest@v0.66.0 requires go >= 1.25.3; switching to go1.25.5
go: downloading go1.25.5 (linux/amd64)
go: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off

File name: tools/kubectl/go.sum

Command failed: go get -t ./...
go: module k8s.io/kubernetes@v1.35.0 requires go >= 1.25.0; switching to go1.25.5
go: downloading go1.25.5 (linux/amd64)
go: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off

renovate bot added release-v0.7 renovate labels Aug 28, 2025

renovate bot added the release-v0.7 label Aug 28, 2025

renovate bot force-pushed the renovate/release-v0.7-go-modules branch from f9f8c3d to e83ef2c Compare August 28, 2025 15:46

renovate bot force-pushed the renovate/release-v0.7-go-modules branch 5 times, most recently from 333af65 to 9f56139 Compare September 4, 2025 14:01

renovate bot changed the title ~~Update go modules (release-v0.7) (minor)~~ Update go modules (release-v0.7) Sep 4, 2025

renovate bot force-pushed the renovate/release-v0.7-go-modules branch from 9f56139 to 390251a Compare September 4, 2025 14:37

renovate bot changed the title ~~Update go modules (release-v0.7)~~ Update go modules (release-v0.7) (minor) Sep 4, 2025

renovate bot force-pushed the renovate/release-v0.7-go-modules branch 2 times, most recently from 59455c4 to 12f6581 Compare September 5, 2025 08:55

renovate bot changed the title ~~Update go modules (release-v0.7) (minor)~~ Update go modules (release-v0.7) Sep 5, 2025

renovate bot force-pushed the renovate/release-v0.7-go-modules branch from 12f6581 to 2bb5847 Compare September 5, 2025 13:03

renovate bot changed the title ~~Update go modules (release-v0.7)~~ Update go modules (release-v0.7) (minor) Sep 5, 2025

renovate bot force-pushed the renovate/release-v0.7-go-modules branch 11 times, most recently from 9ecff16 to 954f192 Compare September 10, 2025 21:56

renovate bot force-pushed the renovate/release-v0.7-go-modules branch 4 times, most recently from 8ca68b0 to 5c771d2 Compare December 1, 2025 22:01

renovate bot force-pushed the renovate/release-v0.7-go-modules branch 3 times, most recently from f4c2d1f to 4fa0e5a Compare December 8, 2025 17:16

github-actions bot added the size: L label Dec 8, 2025

renovate bot force-pushed the renovate/release-v0.7-go-modules branch 2 times, most recently from 44f9aaf to 529b65e Compare December 9, 2025 15:50

github-actions bot added size: M and removed size: L labels Dec 9, 2025

renovate bot force-pushed the renovate/release-v0.7-go-modules branch 7 times, most recently from 319c8c6 to 4f83444 Compare December 15, 2025 09:35

renovate bot force-pushed the renovate/release-v0.7-go-modules branch 9 times, most recently from b6bba87 to bc15967 Compare December 19, 2025 21:59

Update go modules

81876e4

renovate bot force-pushed the renovate/release-v0.7-go-modules branch from bc15967 to 81876e4 Compare December 22, 2025 01:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update go modules (release-v0.7) (minor) #2892

Update go modules (release-v0.7) (minor) #2892

renovate bot commented Aug 28, 2025 •

edited

Loading

Uh oh!

renovate bot commented Aug 28, 2025

Uh oh!

renovate bot commented Aug 28, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Update go modules (release-v0.7) (minor) #2892

Are you sure you want to change the base?

Update go modules (release-v0.7) (minor) #2892

Conversation

renovate bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.15.1

Evaluator

LSP

cmd/cue

Go API

v0.15.0

LSP

Language

explicitopen experiment for #A...

aliasv2 experiment

Other experiments

Evaluator

⚠️ Removing evalv2

Performance

Other changes

cmd/cue

Encodings

Standard library

Go API

Configuration

Uh oh!

renovate bot commented Aug 28, 2025

ℹ Artifact update notice

File name: acceptance/go.mod

File name: go.mod

File name: tools/go.mod

File name: tools/kubectl/go.mod

Uh oh!

renovate bot commented Aug 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: acceptance/go.sum

File name: go.sum

File name: tools/go.sum

File name: tools/kubectl/go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Aug 28, 2025 •

edited

Loading

`v0.15.1`

`cmd/cue`

`v0.15.0`

`explicitopen` experiment for `#A...`

`aliasv2` experiment

⚠️ Removing `evalv2`

`cmd/cue`

renovate bot commented Aug 28, 2025 •

edited

Loading