Skip to content

chore(deps): bump the go group with 11 updates (fix #2118) - #2120

Merged
frewilhelm merged 3 commits into
open-component-model:mainfrom
frewilhelm:fix-2118
Sep 22, 2026
Merged

frewilhelm merged 3 commits into
open-component-model:mainfrom
frewilhelm:fix-2118

Conversation

@frewilhelm

@frewilhelm frewilhelm commented Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

#2118 upgrades go to 1.27 because of the sigstore bump. However, the new go version fails on different CI pipelines which might be connected to golang/go#81089. Hence, we skip the go upgrade until the fix is backported.

Fixes #2118

Bumps the go group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.4` | `1.33.5` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.4` | `1.20.5` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.4.5` | `0.4.7` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.65.0` | `1.66.0` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.113.0` | `1.113.1` |
| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.3.5` | `2.4.0` |
| [github.com/docker/cli](https://github.com/docker/cli) | `29.8.0+incompatible` | `29.8.1+incompatible` |
| [github.com/fluxcd/pkg/ssa](https://github.com/fluxcd/pkg) | `0.77.0` | `0.78.0` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.10.9` | `1.10.10` |
| [go.podman.io/image/v5](https://github.com/podman-container-tools/container-libs) | `5.41.1` | `5.41.2` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.25.0` | `0.25.1` |


Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.4 to 1.33.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.33.4...config/v1.33.5)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.4 to 1.20.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/mq/v1.20.4...service/mq/v1.20.5)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.4.5 to 0.4.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@feature/s3/transfermanager/v0.4.5...feature/s3/transfermanager/v0.4.7)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.65.0 to 1.66.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.65.0...service/s3/v1.66.0)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.113.0 to 1.113.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.113.0...service/s3/v1.113.1)

Updates `github.com/containerd/containerd/v2` from 2.3.5 to 2.4.0
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.3.5...v2.4.0)

Updates `github.com/docker/cli` from 29.8.0+incompatible to 29.8.1+incompatible
- [Commits](docker/cli@v29.8.0...v29.8.1)

Updates `github.com/fluxcd/pkg/ssa` from 0.77.0 to 0.78.0
- [Commits](fluxcd/pkg@ssa/v0.77.0...ssa/v0.78.0)

Updates `github.com/sigstore/sigstore` from 1.10.9 to 1.10.10
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.9...v1.10.10)

Updates `go.podman.io/image/v5` from 5.41.1 to 5.41.2
- [Release notes](https://github.com/podman-container-tools/container-libs/releases)
- [Commits](podman-container-tools/container-libs@image/v5.41.1...image/v5.41.2)

Updates `sigs.k8s.io/controller-runtime` from 0.25.0 to 0.25.1
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.25.0...v0.25.1)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.33.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.20.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager
  dependency-version: 0.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.113.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/docker/cli
  dependency-version: 29.8.1+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/ssa
  dependency-version: 0.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.10.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: go.podman.io/image/v5
  dependency-version: 5.41.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions github-actions Bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. size/l Large labels Sep 21, 2026
Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
@github-actions github-actions Bot added size/m Medium and removed size/l Large labels Sep 21, 2026
@frewilhelm
frewilhelm marked this pull request as ready for review September 21, 2026 13:53
@frewilhelm
frewilhelm requested a review from a team as a code owner September 21, 2026 13:53
@frewilhelm
frewilhelm enabled auto-merge (squash) September 21, 2026 13:59
@frewilhelm
frewilhelm merged commit edfe339 into open-component-model:main Sep 22, 2026
20 checks passed
frewilhelm added a commit that referenced this pull request Oct 2, 2026
…x 2129) (#2130)

Fixes #2129 by reverting sigstore and go version bump

> the new go version fails on different CI pipelines which might be
connected to golang/go#81089. Hence, we skip
the go upgrade until the fix is backported. (from
#2120)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Frederic Wilhelm <frederic.wilhelm@sap.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. size/m Medium

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants