Skip to content

Bump the security group across 1 directory with 3 updates - #452

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/security-68e0f7e88e
Open

Bump the security group across 1 directory with 3 updates#452
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/security-68e0f7e88e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the security group with 3 updates in the / directory: github.com/replicatedhq/kotskinds, github.com/stretchr/testify and helm.sh/helm/v3.

Updates github.com/replicatedhq/kotskinds from 0.0.0-20260513164854-d3c205b56eb4 to 0.1.0

Commits

Updates github.com/stretchr/testify from 1.11.1 to 1.12.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

... (truncated)

Commits
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • d2699be _codegen: modernize
  • a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
  • Additional commits viewable in compare view

Updates helm.sh/helm/v3 from 3.21.3 to 3.21.4

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #32303 by @​mahesh-sadupalli
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #32463 by @​karan-vk
  • [dev-v3 backport] fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158- #32535 by @​scottrigby
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061- #32536 by @​scottrigby
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #32308

Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 813176c51bb5c181dbbd7901298ddcc104cd3417 (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 b6aa8b1d71140347f75ef0b77fac91f28ffe10b3 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 57ce7aeec1eb82422c5c349dfadda20ea3f743fe (Scott Rigby)
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449c76f66e55064ae4503a6e7adae21dcfa9 (Karan V)
  • fix(engine): prevent Files.Lines panic on empty file 955dfab1e6bdd70b5ccd7b932b2d500e9e26566c (Mahesh Sadupalli)

... (truncated)

Commits
  • 813176c chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308)
  • b6aa8b1 [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061
  • 57ce7ae fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158
  • ab71449 fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932
  • 955dfab fix(engine): prevent Files.Lines panic on empty file
  • See full diff in compare view

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/security-68e0f7e88e branch from 946ec0a to 255ba92 Compare August 18, 2026 19:48
Bumps the security group with 3 updates in the / directory: [github.com/replicatedhq/kotskinds](https://github.com/replicatedhq/kotskinds), [github.com/stretchr/testify](https://github.com/stretchr/testify) and [helm.sh/helm/v3](https://github.com/helm/helm).


Updates `github.com/replicatedhq/kotskinds` from 0.0.0-20260513164854-d3c205b56eb4 to 0.1.0
- [Commits](https://github.com/replicatedhq/kotskinds/commits)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.0)

Updates `helm.sh/helm/v3` from 3.21.3 to 3.21.4
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.21.3...v3.21.4)

---
updated-dependencies:
- dependency-name: github.com/replicatedhq/kotskinds
  dependency-version: 0.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/security-68e0f7e88e branch from 255ba92 to 95f5d49 Compare August 19, 2026 00:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants