fix(deps): update go minor/patch updates by renovate[bot] · Pull Request #48 · taking/kubemigrate

renovate · 2026-04-26T01:10:41Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/labstack/echo/v4	`v4.15.1` → `v4.15.4`
github.com/labstack/echo/v5	`v5.1.0` → `v5.3.1`
github.com/minio/minio-go/v7	`v7.0.100` → `v7.3.0`
helm.sh/helm/v3	`v3.20.2` → `v3.22.0`
helm.sh/helm/v4	`v4.1.4` → `v4.3.0`
k8s.io/api	`v0.35.3` → `v0.37.0`
k8s.io/apiextensions-apiserver	`v0.35.3` → `v0.37.0`
k8s.io/apimachinery	`v0.35.3` → `v0.37.0`
k8s.io/cli-runtime	`v0.35.3` → `v0.37.0`
k8s.io/client-go	`v0.35.3` → `v0.37.0`
sigs.k8s.io/controller-runtime	`v0.23.3` → `v0.25.1`

Release Notes

labstack/echo (github.com/labstack/echo/v4)

`v4.15.4`

Compare Source

Security

Fixes GHSA-vfp3-v2gw-7wfq: an encoded path separator (%2F or %5C) in a static file URL could bypass route-level middleware (e.g. authentication on a sibling route) and disclose static files. Both StaticDirectoryHandler (used by Static/StaticFS) and the Static middleware are affected. Backport of the v5 fix (#3016, released in v5.2.1). Thanks to @a-tt-om and @oran-gugu for reporting.

Make serving static file releated methods and middleware not unescape path by default - so how the way Router interprets paths and Static methods/middleware is consistent.

Given following situation:

// 0.
// given folder structure:
// private.txt
// public/
// public/index.html
// public/text.txt
// public/admin/private.txt

// 1. share `public/` folder contents from the server root. This folder actually contains subfolder `admin` which
// contents we want to forbid from downloading
e.Static("/", "public")

// 2. naively assume that everything under /admin folder is now forbidden
e.GET("/admin/*", func(c *Context) error {
    return ErrForbidden
})

Then requests to /admin%2fprivate.txt would not be matched to GET /admin/* route (routing does not look unescaped path) and static file serving will use unescaped path to serve the file.

Note: this way of "guarding" subfolders will never work for for paths like /assets/../admin%2fprivate.txt which will path.Clean("/assets/../admin%2fprivate.txt") to /admin/private.txt and are servable if static file serving is configured to unescape paths.

If you want to guard routes - use middlewares on Static* methods and before Static middleware.

Breaking change / migration: If you serve files whose names contain URL-encoded characters (e.g., /hello%20world.txt → hello world.txt), you must now opt in:

	e := echo.New()
	e.EnablePathUnescapingStaticFiles = true  // <-- enable old behavior
	e.Static("/", "public")

for static middleware

	e.Use(middleware.StaticWithConfig(middleware.StaticConfig{
		EnablePathUnescaping: true, // <-- enable old behavior
	}))

Full Changelog: labstack/echo@v4.15.3...v4.15.4

`v4.15.3`: - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)

Compare Source

Security

fix(static): reject encoded path separators that bypass route-level middleware by @vishr in #3011

Fixes GHSA-vfp3-v2gw-7wfq: an encoded path separator (%2F or %5C) in a static file URL could bypass route-level middleware (e.g. authentication on a sibling route) and disclose static files. Both StaticDirectoryHandler (used by Static/StaticFS) and the Static middleware are affected. Backport of the v5 fix (#3009, released in v5.2.0). Thanks to @a-tt-om and @oran-gugu for reporting.

Full Changelog: labstack/echo@v4.15.2...v4.15.3

`v4.15.2`: - Context.Scheme() header validation

Compare Source

Security

Context.Scheme() should validate values taken from header by @aldas in #2962

Thanks to @shblue21 for reporting this issue.

Full Changelog: labstack/echo@v4.15.1...v4.15.2

minio/minio-go (github.com/minio/minio-go/v7)

`v7.3.0`

Compare Source

What's Changed

fix: surface UploadPartCopy part checksum in CopyPartResult by @allanrogerr in #2245
fix: enable TraceOn will cause OOM when putting a large object by @jiuker in #2251
fix: Stat() returns Size 0 for RDMA GET objects by @harshavardhana in #2263
fix: accept endpoint URLs that already include a scheme by @allanrogerr in #2262
feat: make IAM credentials expiry window customizable by @allanrogerr in #2261
feat: expose response headers via ObjectInfo.Headers from StatObject/GetObject by @allanrogerr in #2259
fix: honor io.Seeker contract in Object.Seek by @allanrogerr in #2258
fix: treat HTTP 202 Accepted as success in executeMethod by @allanrogerr in #2252
Mark PutObjectFanOut as being deprecated by @klauspost in #2265
fix: disable retries for non-seekable PutObject readers by @allanrogerr in #2253
feat: add SetCannedBucketPolicy by @jiuker in #2248
fix: add guard check for avoiding potential panic by @ProjectMutilation in #2268
fix: always emit Filter or Prefix in lifecycle rule XML by @allanrogerr in #2254
fix: add UserMetadataStripped to list results by @allanrogerr in #2256
feat: add AWS SSO credential provider to FileAWSCredentials by @allanrogerr in #2257
fix: Object is not traced when the request returns an error by @jiuker in #2249
feat: add fetchOwner options for listV2 by @jiuker in #2264
Update regex pattern allowing for optional space before expiry-date by @pgreenland in #2224
fix: getObject with range request and then stat would not return the correct range size by @jiuker in #2267
ci: add Dependabot for GitHub Actions, pin RDMA tag by @allanrogerr in #2276
rdma: reject buffers over the 4 GiB cuObject registration limit by @harshavardhana in #2278
build(deps): bump the actions group with 2 updates by @dependabot[bot] in #2279
Add end-to-end checksum verification on GetObject by @jiuker in #2272
fix: declare aws-chunked content encoding on streaming uploads by @allanrogerr in #2277
fix: return delete-marker ObjectInfo from StatObject alongside the error by @allanrogerr in #2273
build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #2280
Add AIStor Lifecycle Compression by @klauspost in #2281
feat: propagate caller context through credential providers by @allanrogerr in #2275
rdma: build against libs3rdma, and fix the size guard's off-by-one by @harshavardhana in #2283

New Contributors

@allanrogerr made their first contribution in #2245
@ProjectMutilation made their first contribution in #2268
@pgreenland made their first contribution in #2224

Full Changelog: minio/minio-go@v7.2.1...v7.3.0

`v7.2.1`

Compare Source

`v7.2.0`

Compare Source

What's Changed

Use go tool for ci-lint check by @klauspost in #2229
Rename github.com/go-ini/ini to gopkg.in/ini.v1 by @ramondeklein in #2232
Add RDMA / NVIDIA GPU Direct Storage support by @harshavardhana in #2233

Full Changelog: minio/minio-go@v7.1.0...v7.2.0

`v7.1.0`

Compare Source

What's Changed

GetObjectAttributes: Add missing checksum & type by @klauspost in #2217
support x-minio-source-time header for getobject / statObject by @jiuker in #2219
Add new AWS checksums by @klauspost in #2221

Full Changelog: minio/minio-go@v7.0.100...v7.1.0

helm/helm (helm.sh/helm/v3)

`v3.22.0`: Helm v3.22.0

Compare Source

Helm v3.22.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

primarily dependency updates and k8s-io group to 0.37.0

Installation and Upgrading

Download Helm v3.22.0. The common platform binaries are here:

MacOS amd64 (checksum / bd1d09f316558dda23698527859600936fed1371021ce0f2272d66b2fdcfa69c)
MacOS arm64 (checksum / 4c9982a6cdeb458b60258df66b55398ca5b19293f6877faffe2909ad6f23dfe0)
Linux amd64 (checksum / 1e4ab49e429626cf6c6958d914248b78c9730803c2751b87627e171dc800e7bb)
Linux arm (checksum / 695793765e2246824a7c859562886f79b1cc89d99420c89f940590440f7129ee)
Linux arm64 (checksum / f14e804dfee240f55525b667488fe9adca349e63e00c9af634c0beb1421ac310)
Linux i386 (checksum / b96b7a125cc7d38aa952a78b16e96d05426cd9791dd013be51ebab1c203d6729)
Linux loong64 (checksum / BlobNotFoundThe specified blob does not exist.
RequestId:8c31497a-101e-0042-27b6-404cb4000000
Time:2026-09-09T23:55:30.1192401Z)
Linux ppc64le (checksum / fa304f47163a19f4e275fe4e890465a8a80a6f26ce4772c6b1649355c995def1)
Linux s390x (checksum / 3f2cfd73018dcb9c25814e89c5946a362a8b951d8cce03152138d8cb28abcbff)
Linux riscv64 (checksum / 50f84d698daac65bded677c61db7138e082b23e667a3cabeff4fd2521614e498)
Windows amd64 (checksum / 899615865726d39f9b245e71e848c5bf4adc7ed33a8c43ede660facb48151b43)
Windows arm64 (checksum / 75a331a3b03d11aed6369bdf6a1f8f9d33635bc820de5cd6025a581292046805)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)

Changelog

chore(deps): bump the k8s-io group across 1 directory with 6 updates 144ca65 (dependabot[bot])
bump version to 3.22 (#32606) b5de8bb (Scott Rigby)
fix: set [pull,push] scope when helm push to a registry(use token auth) (backport) (#32362) 9dbcb9f (kimsungmin1)
chore(deps): bump the github-actions group across 1 directory with 4 updates (#32575) 665ab55 (dependabot[bot])
chore(deps): bump the k8s-io group with 7 updates (#32573) 0841093 (dependabot[bot])
chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32563) d0569c7 (dependabot[bot])
chore(deps): bump the github-actions group across 1 directory with 4 updates (#32557) bcbdb1e (dependabot[bot])
chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#32554) 6cdcc8f (dependabot[bot])
chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#32542) 158719f (dependabot[bot])
[dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 (#32536) a442b8c (Scott Rigby)
fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 (#32535) adab0ef (Scott Rigby)
chore(deps): bump the github-actions group with 4 updates (#32524) c068b54 (dependabot[bot])
chore(deps): bump the github-actions group with 4 updates 74271c4 (dependabot[bot])
chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 1c50d2f (dependabot[bot])
chore(deps): bump the github-actions group with 4 updates (#32509) 8821540 (dependabot[bot])
chore(deps): bump actions/stale in the github-actions group (#32488) 05a2798 (dependabot[bot])
chore(deps): bump ossf/scorecard-action in the github-actions group (#32461) c27e757 (dependabot[bot])
fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 bd392c6 (Karan V)
chore(deps): bump the k8s-io group with 7 updates 66a6f56 (dependabot[bot])
chore(deps): bump the github-actions group with 4 updates 7cd0125 (dependabot[bot])
chore(deps): bump github/codeql-action/upload-sarif (#32449) 79330fc (dependabot[bot])
chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 (#32446) b29c730 (dependabot[bot])
chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 973bb34 (dependabot[bot])
chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 e25efcf (dependabot[bot])
chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 98e547f (dependabot[bot])
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#32412) 7f4b72a (dependabot[bot])
chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 (#32381) 2cf1437 (dependabot[bot])
chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#32383) 270f73b (dependabot[bot])
chore(deps): bump github/codeql-action/upload-sarif (#32382) 9e3a010 (dependabot[bot])
ci: auto-label PRs targeting dev-v3 (#32340) c9ed0ca (Benoit Tigeot)
chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#32331) b842ddf (dependabot[bot])
chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#32332) f6047c9 (dependabot[bot])
chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0 (#32357) f2f6bf6 (dependabot[bot])
chore(deps): bump actions/checkout from 4.2.2 to 7.0.0 (#32368) 69f70a8 (dependabot[bot])
chore(deps): bump actions/stale from 9.0.0 to 10.4.0 (#32369) c95222a (dependabot[bot])
chore(deps): bump actions/setup-go from 5.1.0 to 6.5.0 (#32358) fc71f51 (dependabot[bot])
chore(deps): bump github/codeql-action/upload-sarif (#32360) 6596318 (dependabot[bot])
chore(deps): bump github/codeql-action/init from 3.26.6 to 4.37.0 (#32359) 5d9943c (dependabot[bot])
chore(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#32356) a3d7a6c (dependabot[bot])
chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.3.0 (#32354) 8e19970 (dependabot[bot])
chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#32353) 24ef09a (dependabot[bot])
chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 (#32310) 8082dd4 (dependabot[bot])
chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 2c24490 (dependabot[bot])
chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#32306) 953d280 (dependabot[bot])
fix(engine): prevent Files.Lines panic on empty file c02a9ae (Mahesh Sadupalli)
Apply suggestions from code review 093015b (Benoit Tigeot)
fix: drop containerd v1 dep to resolve govulncheck CVEs a061886 (Benoit Tigeot)
chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 f979836 (dependabot[bot])
chore(deps): bump github.com/cyphar/filepath-securejoin c444665 (dependabot[bot])
chore(deps): bump the k8s-io group with 2 updates 1bf9b5f (dependabot[bot])
fixes b7a0fd0 (Matheus Pimenta)
chore(deps): bump the k8s-io group across 1 directory with 2 updates 119a7d9 (dependabot[bot])
fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 2fb05f8 (Terry Howe)
chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 acc867b (dependabot[bot])
chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 b920935 (dependabot[bot])
chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 5b5ef19 (dependabot[bot])
chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 af67af8 (dependabot[bot])
Update .github/env ceb9a62 (Terry Howe)
ci: bump golangci-lint to v2.11.3 for go 1.26 0ed92f0 (Terry Howe)
chore: bump go to 1.26 c678c0c (Terry Howe)
chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 12c4d45 (dependabot[bot])
chore(deps): bump github.com/distribution/distribution/v3 a0f9711 (dependabot[bot])
chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 995c31e (dependabot[bot])
chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 8c17168 (dependabot[bot])
chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 fe141bd (dependabot[bot])
chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 980836f (dependabot[bot])
fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 1dde6c7 (Terry Howe)
chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 0162fed (dependabot[bot])
chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 a664a58 (dependabot[bot])
[v3] Bump to version v3.21 (#32103) 3033a77 (George Jenkins)
[v3 backport] Fix rollback for missing resources 0a47573 (Feruzjon Muyassarov)
fix(action): avoid nil REST client getter panic when installing CRDs 711a4ea (sergiochan)

`v3.21.4`: Helm v3.21.4

Compare Source

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #32303 by @mahesh-sadupalli
fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #32463 by @karan-vk
[dev-v3 backport] fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158- #32535 by @scottrigby
[dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061- #32536 by @scottrigby
chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #32308

Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

MacOS amd64 (checksum / 9173d05edf9592c6be1d0412ffafd935448dfc7a63c2bc732b8c67e55503e8a8)
MacOS arm64 (checksum / 6e0bf5eb6daafc2b1ec34bb5ba04ef103f3afc16192fb19805c2924d7ea1033f)
Linux amd64 (checksum / 61f88ab166748cb19604d7884cb100ae9ccb13804ddeb98e08af167eacbb6a14)
Linux arm (checksum / b02709eab565cfcee8acdb10c143daf05ab06d994baeb85e63976513367925a7)
Linux arm64 (checksum / b54c04b4e0b2540bbdc08c17a121dab70e9a2ed0de5705528fec68a5fd3b85a7)
Linux i386 (checksum / 71280742be811c7d9d6b4546125f185ba01c6fd967e47491766b0055a0570cf5)
Linux ppc64le (checksum / ba4e4f440b6992f119160e3ceea29d80158546c9241748332ffa1cfdfbb0bd8f)
Linux s390x (checksum / 321de1ff6fe57a9a5eca6b56d78d6959babe295ec7aab49af1a0d2bcfc02dfc8)
Linux riscv64 (checksum / fef3ec7e1ddafe8927253ad79f2f8e3ac41f3f92328eb2c23bd4513b4421e5d9)
Windows amd64 (checksum / 268a7b98b313403055e4f31807aeaac529c90e1188acd7857ae3e960b0f67cce)
Windows arm64 (checksum / e23545fff21ef04853a9540925dd73c4b9caaa24ee7fdd8482b1ee626a4eecc9)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 813176c (dependabot[bot])
[dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 b6aa8b1 (Scott Rigby)
fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 57ce7ae (Scott Rigby)
fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449 (Karan V)
fix(engine): prevent Files.Lines panic on empty file 955dfab (Mahesh Sadupalli)

Full Changelog: helm/helm@v3.21.3...v3.21.4

`v3.21.3`: Helm v3.21.3

Compare Source

Helm v3.21.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.21.3. The common platform binaries are here:

MacOS amd64 (checksum / 76d0db4730b05d3d625eee11e80f0721b32b4d8422f4e5d093de6337bf3ac9f8)
MacOS arm64 (checksum / 19879a848cad832b7a1ac24b767a481d20fb3b95ab53a220849649422ada144e)
Linux amd64 (checksum / 15e041a93a590dce8100f39385cd98c84a765c9e36aeeb9e2dc6ff9e4769e2e0)
Linux arm (checksum / 60f3106ba5e24371af51574fccf489d382d2f59c56ce566d02f2a6f00bf4fb3b)
Linux arm64 (checksum / 67f58155079ff9ffab98ba5c88daff0ed9b542f3a4732f5dd426dde7dd0f5244)
Linux i386 (checksum / 95e7ef76d4631f30e3f6c17d4355420878ca85771dbe7deb7b797521007aebe4)
Linux ppc64le (checksum / c8657c0f77b7d3e2f9508c4a9a545b5862d01690f2a528fbbe659a3a4d534382)
Linux s390x (checksum / d6c2dd29b32da1cb9dfef5af0cb93a1f391beca4e714779186330681b39f4b59)
Linux riscv64 (checksum / ff063cc304a60af858242aa71b5635852d65aa7d3301a46eca17a31c54e8d994)
Windows amd64 (checksum / ff490897e07e976c65a9bd7690cfc139b35ba5e8f25d00eaf1e53a30f1ad3f62)
Windows arm64 (checksum / 1d409b98f99a38704ccb3f0917cbad2417ed53f75751902b6bd84447803b69a9)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

Apply suggestions from code review 1ad6e68 (Benoit Tigeot)
fix: drop containerd v1 dep to resolve govulncheck CVEs 037733e (Benoit Tigeot)
chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 d3e178b (dependabot[bot])

`v3.21.2`: Helm v3.21.2

Compare Source

Helm v3.21.2 is a patch release to correct bump the Kubernetes client libraries (client-go, etc) to match the expected Kubernetes v1.36 release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Update Kubernetes client libraries to v1.36

Installation and Upgrading

Download Helm v3.21.2. The common platform binaries are here:

MacOS amd64 (checksum / 82ac9105e657267cb029b5bf27ed28e35db104777328a036a84d345046f9f329)
MacOS arm64 (checksum / aea537342b4c03cf58e089cb8dc99468087bb1a0218531df40462faca3f6c5d3)
Linux amd64 (checksum / 0a745198de24545d0055cd8414bc8d2ba10363ef5f5d38369ea1b399671cc083)
Linux arm (checksum / d6c5ea4a0c0d8b68a525caa4fe969c5db5627365c66dc2878fe72ac1d6325f15)
Linux arm64 (checksum / bbd559fc0547f1d96ccbc68fe4f1cb98f01808f36538139e669369066b781267)
Linux i386 (checksum / 4f1d9f68c884cc143fc768d583c32cf23317713fc1e8ccbf309bb1d1ddafa15f)
Linux ppc64le (checksum / 8f0e57e13260e0c0008fec80629b560dc8891281ba3f0cd5d57895b8a5f76d8e)
Linux s390x (checksum / daf652ddbf37d5e896187d1ccc1f2868df8f261c1af5b5f2f1639022623aeefb)
Linux riscv64 (checksum / 9e4dbd48868bf92835dd0de11387b1d82636330740b8943064da233b12791964)
Windows amd64 (checksum / 5f346e3338617e9fd1b8c216065383061bdb3bde26cb6b3abc8ce0481354a513)
Windows arm64 (checksum / e77859867482549e5613255605e7680bc72b308ea62b91ecc4626ed4ba116670)

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

3.21.3 will contain only bug fixes.
3.22.0 is the next (and final) Helm 3 feature release

Changelog

chore(deps): bump the k8s-io group with 2 updates 1259634 (dependabot[bot])
fixes b52e276 (Matheus Pimenta)
chore(deps): bump the k8s-io group across 1 directory with 2 updates 3342dbf (dependabot[bot])

Full Changelog: helm/helm@v3.21.1...v3.21.2

`v3.21.1`: Helm v3.21.1

Compare Source

Helm v3.21.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Fixed nil pointer panic that could happen with helm template in ClientOnly flows. Now correctly returns a template error #31920
Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #32152
Bumped Go from 1.25 to 1.26 #32168
Dependency version updates

Installation and Upgrading

Download Helm v3.21.1. The common platform binaries are here:

MacOS amd64 (checksum / dd353172bc8cef8c1845501043b82224520a79ff8b2cd4388ec5bfa060ce96b9)
MacOS arm64 (checksum / 779ac09ad0cf333b12402555a32bd26174462384aba2f5a3845876f45d34146a)
Linux amd64 (checksum / a349c62d6ab2d5d11f044fc0d3afa6deed7d27cc7d5c351f536b169d9fc2cc1a)
Linux arm (checksum / ae52acbd13d1efa0d787aa679519da813c114c1b29b68e09a781fe258fc5c696)
Linux arm64 (checksum / 9b3deeecb56c4795aa806858fa4d6388c049e3edfcd771723bd12c1cbef66893)
Linux i386 (checksum / 1901a40be004699a2ac2cf05874bd84dfbed1f791327a0bc65c351d537b0f139)
Linux ppc64le (checksum / 136daecc0f4650158b2adedf14f29022402d92fd111041e55b4038c3df97c3bb)
Linux s390x (checksum / e5601b71342cba12ffd504c03c710769134fbec5bbdea6c90c859506e54d7591)
Linux riscv64 (checksum / e22b20fe16f6bd0d9729034ae76a9e81708bd94b0aa9628f617dc3dfbe876a2b)
Windows amd64 (checksum / e9d0dbeac9c9923c1b444ac4a1fc8e59d9f9afbeb30b4b6e9a00ac60a45b9459)
Windows arm64 (checksum / 9b8b803b27a5c1bdcbc75bcf8d1bf45c8f2ffede8ae29bed3ec093746b9807f9)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

fix(action): avoid nil REST client getter panic when installing CRDs c56dd00 (sergiochan)
fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 702529f (Terry Howe)
chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 178e120 (dependabot[bot])
chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 dcf35f8 (dependabot[bot])
chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 44aff8b (dependabot[bot])
chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 ae2f31f (dependabot[bo

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 3am on sunday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-08-06T21:00:52Z

ℹ️ Artifact update notice

File name: example/complete/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

16 additional dependencies were updated

Details:

Package	Change
`github.com/Masterminds/semver/v3`	`v3.4.0` -> `v3.5.0`
`github.com/fatih/color`	`v1.18.0` -> `v1.19.0`
`github.com/klauspost/compress`	`v1.18.2` -> `v1.19.2`
`github.com/klauspost/cpuid/v2`	`v2.2.11` -> `v2.4.0`
`github.com/mattn/go-runewidth`	`v0.0.15` -> `v0.0.23`
`github.com/rivo/uniseg`	`v0.4.4` -> `v0.4.7`
`github.com/sirupsen/logrus`	`v1.9.3` -> `v1.9.4`
`github.com/tinylib/msgp`	`v1.6.1` -> `v1.6.4`
`go.yaml.in/yaml/v3`	`v3.0.4` -> `v3.0.5`
`golang.org/x/crypto`	`v0.47.0` -> `v0.55.0`
`golang.org/x/net`	`v0.49.0` -> `v0.58.0`
`golang.org/x/sync`	`v0.19.0` -> `v0.22.0`
`golang.org/x/sys`	`v0.40.0` -> `v0.47.0`
`golang.org/x/term`	`v0.39.0` -> `v0.45.0`
`golang.org/x/text`	`v0.33.0` -> `v0.41.0`
`helm.sh/helm/v3`	`v3.20.1` -> `v3.20.2`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

39 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.25.1` -> `1.26.0`
`k8s.io/api`	`v0.35.3` -> `v0.36.4`
`github.com/Masterminds/semver/v3`	`v3.4.0` -> `v3.5.0`
`github.com/cyphar/filepath-securejoin`	`v0.6.1` -> `v0.7.0`
`github.com/emicklei/go-restful/v3`	`v3.12.2` -> `v3.13.0`
`github.com/fatih/color`	`v1.18.0` -> `v1.19.0`
`github.com/klauspost/compress`	`v1.18.2` -> `v1.19.2`
`github.com/klauspost/cpuid/v2`	`v2.2.11` -> `v2.4.0`
`github.com/labstack/gommon`	`v0.4.2` -> `v0.5.0`
`github.com/lib/pq`	`v1.10.9` -> `v1.12.3`
`github.com/mattn/go-colorable`	`v0.1.14` -> `v0.1.15`
`github.com/mattn/go-isatty`	`v0.0.20` -> `v0.0.22`
`github.com/mattn/go-runewidth`	`v0.0.15` -> `v0.0.23`
`github.com/moby/spdystream`	`v0.5.0` -> `v0.5.1`
`github.com/rivo/uniseg`	`v0.4.4` -> `v0.4.7`
`github.com/sirupsen/logrus`	`v1.9.3` -> `v1.9.4`
`github.com/tinylib/msgp`	`v1.6.1` -> `v1.6.4`
`go.yaml.in/yaml/v2`	`v2.4.3` -> `v2.4.4`
`go.yaml.in/yaml/v3`	`v3.0.4` -> `v3.0.5`
`golang.org/x/crypto`	`v0.47.0` -> `v0.55.0`
`golang.org/x/mod`	`v0.32.0` -> `v0.38.0`
`golang.org/x/net`	`v0.49.0` -> `v0.58.0`
`golang.org/x/oauth2`	`v0.34.0` -> `v0.36.0`
`golang.org/x/sync`	`v0.19.0` -> `v0.22.0`
`golang.org/x/sys`	`v0.40.0` -> `v0.47.0`
`golang.org/x/term`	`v0.39.0` -> `v0.45.0`
`golang.org/x/text`	`v0.33.0` -> `v0.41.0`
`golang.org/x/time`	`v0.14.0` -> `v0.15.0`
`golang.org/x/tools`	`v0.41.0` -> `v0.48.0`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260128011058-8636f8732409` -> `v0.0.0-20260414002931-afd174a4e478`
`google.golang.org/grpc`	`v1.78.0` -> `v1.82.1`
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12-0.20260120151049-f2248ac996af`
`k8s.io/apiserver`	`v0.35.3` -> `v0.36.4`
`k8s.io/component-base`	`v0.35.3` -> `v0.36.4`
`k8s.io/klog/v2`	`v2.130.1` -> `v2.140.0`
`k8s.io/kube-openapi`	`v0.0.0-20250910181357-589584f1c912` -> `v0.0.0-20260317180543-43fb72c5454a`
`k8s.io/kubectl`	`v0.35.1` -> `v0.36.2`
`k8s.io/utils`	`v0.0.0-20251002143259-bc988d571ff4` -> `v0.0.0-20260210185600-b8788abfbbc2`
`oras.land/oras-go/v2`	`v2.6.0` -> `v2.6.1`
`sigs.k8s.io/structured-merge-diff/v6`	`v6.3.2-0.20260122202528-d9cc6641c482` -> `v6.3.3`

renovate · 2026-08-20T21:58:27Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: example/complete/go.sum

go: module k8s.io/api@v0.37.0 requires go >= 1.26.0; switching to go1.26.8
go: downloading go1.26.8 (linux/amd64)
go: downloading github.com/minio/minio-go/v7 v7.3.0
go: downloading k8s.io/api v0.37.0
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/dustin/go-humanize v1.0.1
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/klauspost/compress v1.19.2
go: downloading github.com/klauspost/crc32 v1.3.0
go: downloading github.com/minio/crc64nvme v1.1.1
go: downloading github.com/minio/md5-simd v1.1.2
go: downloading github.com/zeebo/xxh3 v1.1.0
go: downloading go.yaml.in/yaml/v3 v3.0.5
go: downloading golang.org/x/net v0.58.0
go: downloading helm.sh/helm/v3 v3.20.2
go: downloading k8s.io/cli-runtime v0.35.3
go: downloading k8s.io/client-go v0.35.3
go: downloading k8s.io/apiextensions-apiserver v0.35.3
go: downloading k8s.io/apimachinery v0.37.0
go: downloading github.com/vmware-tanzu/velero v1.17.0
go: downloading sigs.k8s.io/controller-runtime v0.23.3
go: downloading github.com/labstack/echo/v4 v4.15.1
go: downloading k8s.io/klog/v2 v2.140.0
go: downloading golang.org/x/sys v0.47.0
go: downloading github.com/klauspost/cpuid/v2 v2.4.0
go: downloading gopkg.in/ini.v1 v1.67.3
go: downloading golang.org/x/crypto v0.55.0
go: downloading github.com/rs/xid v1.6.0
go: downloading github.com/tinylib/msgp v1.6.4
go: downloading github.com/joho/godotenv v1.5.1
go: downloading github.com/Masterminds/semver/v3 v3.5.0
go: downloading github.com/Masterminds/sprig/v3 v3.3.0
go: downloading github.com/gosuri/uitable v0.0.4
go: downloading github.com/pkg/errors v0.9.1
go: downloading golang.org/x/term v0.45.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading sigs.k8s.io/yaml v1.6.0
go: downloading github.com/spf13/pflag v1.0.10
go: downloading github.com/spf13/cobra v1.10.2
go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0
go: downloading k8s.io/utils v0.0.0-20260626114624-be93311217bd
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading sigs.k8s.io/randfill v1.0.0
go: downloading github.com/evanphx/json-patch/v5 v5.9.11
go: downloading github.com/evanphx/json-patch v5.9.11+incompatible
go: downloading github.com/labstack/gommon v0.4.2
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.4.2
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/philhofer/fwd v1.2.0
go: downloading golang.org/x/text v0.41.0
go: downloading dario.cat/mergo v1.0.1
go: downloading github.com/Masterminds/goutils v1.1.1
go: downloading github.com/huandu/xstrings v1.5.0
go: downloading github.com/mitchellh/copystructure v1.2.0
go: downloading github.com/shopspring/decimal v1.4.0
go: downloading github.com/spf13/cast v1.7.0
go: downloading github.com/fatih/color v1.19.0
go: downloading github.com/cyphar/filepath-securejoin v0.6.1
go: downloading github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
go: downloading github.com/BurntSushi/toml v1.6.0
go: downloading github.com/gobwas/glob v0.2.3
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading k8s.io/kubectl v0.35.1
go: downloading github.com/containerd/containerd v1.7.30
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading oras.land/oras-go/v2 v2.6.0
go: downloading github.com/Masterminds/squirrel v1.5.4
go: downloading github.com/jmoiron/sqlx v1.4.0
go: downloading github.com/lib/pq v1.10.9
go: downloading github.com/rubenv/sql-migrate v1.8.1
go: downloading github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de
go: downloading github.com/moby/term v0.5.2
go: downloading github.com/google/gnostic-models v0.7.0
go: downloading go.yaml.in/yaml/v2 v2.4.4
go: downloading golang.org/x/sync v0.22.0
go: downloading sigs.k8s.io/kustomize/api v0.21.1
go: downloading sigs.k8s.io/kustomize/kyaml v0.21.1
go: downloading google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af
go: downloading github.com/inconshreveable/mousetrap v1.1.0
go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
go: downloading github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79
go: downloading github.com/peterbourgon/diskv v2.0.1+incompatible
go: downloading github.com/fxamacker/cbor/v2 v2.9.1
go: downloading golang.org/x/oauth2 v0.34.0
go: downloading golang.org/x/time v0.15.0
go: downloading github.com/mattn/go-colorable v0.1.14
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/valyala/fasttemplate v1.2.2
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/mitchellh/reflectwalk v1.0.2
go: downloading github.com/mattn/go-runewidth v0.0.23
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading k8s.io/component-base v0.35.3
go: downloading github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f
go: downloading github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
go: downloading k8s.io/apiserver v0.35.3
go: downloading github.com/containerd/log v0.1.0
go: downloading github.com/containerd/platforms v0.2.1
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/lann/builder v0.0.0-20180802200727-47ae307949d0
go: downloading github.com/go-gorp/gorp/v3 v3.1.0
go: downloading github.com/go-openapi/swag v0.27.1
go: downloading github.com/go-openapi/jsonreference v1.0.0
go: downloading github.com/google/btree v1.1.3
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/valyala/bytebufferpool v1.0.0
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
go: downloading github.com/clipperhouse/uax29/v2 v2.7.0
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/chai2010/gettext-go v1.0.2
go: downloading github.com/MakeNowJust/heredoc v1.0.0
go: downloading github.com/mitchellh/go-wordwrap v1.0.1
go: downloading github.com/russross/blackfriday/v2 v2.1.0
go: downloading github.com/containerd/errdefs v0.3.0
go: downloading google.golang.org/grpc v1.78.0
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0
go: downloading github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c
go: downloading github.com/go-openapi/jsonpointer v1.0.0
go: downloading github.com/go-openapi/swag/cmdutils v0.27.1
go: downloading github.com/go-openapi/swag/conv v0.27.1
go: downloading github.com/go-openapi/swag/fileutils v0.27.1
go: downloading github.com/go-openapi/swag/jsonutils v0.27.1
go: downloading github.com/go-openapi/swag/loading v0.27.1
go: downloading github.com/go-openapi/swag/mangling v0.27.1
go: downloading github.com/go-openapi/swag/netutils v0.27.1
go: downloading github.com/go-openapi/swag/stringutils v0.27.1
go: downloading github.com/go-openapi/swag/typeutils v0.27.1
go: downloading github.com/go-openapi/swag/yamlutils v0.27.1
go: downloading github.com/blang/semver/v4 v4.0.0
go: downloading github.com/go-errors/errors v1.5.1
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409
go: downloading github.com/emicklei/go-restful/v3 v3.13.0
go: downloading github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00
go: downloading github.com/xlab/treeprint v1.2.0
go: downloading github.com/go-openapi/swag/pools v0.27.1
go: complete-example imports
	github.com/taking/kubemigrate/pkg/client/velero imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/autoscaling/v2beta1: cannot find module providing package k8s.io/api/autoscaling/v2beta1
go: complete-example imports
	github.com/taking/kubemigrate/pkg/client/velero imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/autoscaling/v2beta2: cannot find module providing package k8s.io/api/autoscaling/v2beta2
go: complete-example imports
	github.com/taking/kubemigrate/pkg/client/velero imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/scheduling/v1alpha1: cannot find module providing package k8s.io/api/scheduling/v1alpha1

File name: example/kubernetes/go.sum

go: module k8s.io/api@v0.37.0 requires go >= 1.26.0; switching to go1.26.8
go: downloading golang.org/x/net v0.57.0
go: downloading golang.org/x/crypto v0.54.0
go: downloading go.yaml.in/yaml/v3 v3.0.4
go: downloading golang.org/x/text v0.40.0
go: kubernetes-example imports
	github.com/taking/kubemigrate/pkg/client/kubernetes imports
	k8s.io/client-go/kubernetes imports
	k8s.io/client-go/kubernetes/typed/autoscaling/v2beta1 imports
	k8s.io/api/autoscaling/v2beta1: cannot find module providing package k8s.io/api/autoscaling/v2beta1
go: kubernetes-example imports
	github.com/taking/kubemigrate/pkg/client/kubernetes imports
	k8s.io/client-go/kubernetes imports
	k8s.io/client-go/kubernetes/typed/autoscaling/v2beta2 imports
	k8s.io/api/autoscaling/v2beta2: cannot find module providing package k8s.io/api/autoscaling/v2beta2
go: kubernetes-example imports
	github.com/taking/kubemigrate/pkg/client/kubernetes imports
	k8s.io/client-go/kubernetes imports
	k8s.io/client-go/kubernetes/typed/scheduling/v1alpha1 imports
	k8s.io/api/scheduling/v1alpha1: cannot find module providing package k8s.io/api/scheduling/v1alpha1

renovate Bot force-pushed the renovate/go-minorpatch-updates branch from 1c2add7 to 0415899 Compare April 27, 2026 05:02

renovate Bot changed the title ~~fix(deps): update go minor/patch updates to v0.36.0~~ fix(deps): update go minor/patch updates Apr 27, 2026

renovate Bot force-pushed the renovate/go-minorpatch-updates branch 2 times, most recently from ac97065 to 3ff5376 Compare May 1, 2026 20:29

renovate Bot force-pushed the renovate/go-minorpatch-updates branch 5 times, most recently from 8ea7f96 to cca4f46 Compare May 17, 2026 09:10

renovate Bot force-pushed the renovate/go-minorpatch-updates branch from cca4f46 to 57b23f2 Compare May 27, 2026 09:58

renovate Bot force-pushed the renovate/go-minorpatch-updates branch 5 times, most recently from 4d9a02c to de30892 Compare June 18, 2026 01:13

renovate Bot force-pushed the renovate/go-minorpatch-updates branch 6 times, most recently from 2e6a6d4 to ccfe0da Compare June 26, 2026 16:16

renovate Bot force-pushed the renovate/go-minorpatch-updates branch 3 times, most recently from a9f0e78 to a8681bc Compare July 9, 2026 23:16

renovate Bot force-pushed the renovate/go-minorpatch-updates branch from a8681bc to bb6b666 Compare July 13, 2026 03:29

renovate Bot force-pushed the renovate/go-minorpatch-updates branch 4 times, most recently from 5dcd700 to 192f5a0 Compare July 25, 2026 04:27

renovate Bot force-pushed the renovate/go-minorpatch-updates branch from 192f5a0 to a5eef61 Compare July 29, 2026 21:14

renovate Bot force-pushed the renovate/go-minorpatch-updates branch from a5eef61 to 2a53806 Compare July 30, 2026 00:53

renovate Bot force-pushed the renovate/go-minorpatch-updates branch from 2a53806 to 21207c8 Compare August 6, 2026 21:00

renovate Bot force-pushed the renovate/go-minorpatch-updates branch 5 times, most recently from 17a1d5f to 5c3024d Compare August 13, 2026 23:10

renovate Bot force-pushed the renovate/go-minorpatch-updates branch 7 times, most recently from acd2a0a to c2fe51f Compare August 20, 2026 21:58

renovate Bot force-pushed the renovate/go-minorpatch-updates branch 5 times, most recently from b234372 to 04784f4 Compare August 29, 2026 01:03

renovate Bot force-pushed the renovate/go-minorpatch-updates branch 2 times, most recently from b4bb658 to 248557a Compare September 10, 2026 02:06

fix(deps): update go minor/patch updates

c255be6

renovate Bot force-pushed the renovate/go-minorpatch-updates branch from 248557a to c255be6 Compare September 14, 2026 05:30

Navigation Menu

fix(deps): update go minor/patch updates - #48

fix(deps): update go minor/patch updates#48
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-minorpatch-updates

renovate Bot commented Apr 26, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 6, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 20, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Apr 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.15.4

v4.15.3: - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)

Security

v4.15.2: - Context.Scheme() header validation

v7.3.0

What's Changed

New Contributors

v7.2.1

v7.2.0

What's Changed

v7.1.0

What's Changed

v3.22.0: Helm v3.22.0

Notable Changes

Installation and Upgrading

What's Next

Changelog

v3.21.4: Helm v3.21.4

Notable Changes

Installation and Upgrading

What's Next

Changelog

v3.21.3: Helm v3.21.3

Installation and Upgrading

What's Next

Changelog

v3.21.2: Helm v3.21.2

Notable Changes

Installation and Upgrading

What's Next

Changelog

v3.21.1: Helm v3.21.1

Notable Changes

Installation and Upgrading

What's Next

Changelog

Configuration

Uh oh!

renovate Bot commented Aug 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: example/complete/go.mod

File name: go.mod

Uh oh!

renovate Bot commented Aug 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: example/complete/go.sum

File name: example/kubernetes/go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Apr 26, 2026 •

edited

Loading

`v4.15.4`

`v4.15.3`: - Static encoded-separator route bypass fix (GHSA-vfp3-v2gw-7wfq)

`v4.15.2`: - Context.Scheme() header validation

`v7.3.0`

`v7.2.1`

`v7.2.0`

`v7.1.0`

`v3.22.0`: Helm v3.22.0

`v3.21.4`: Helm v3.21.4

`v3.21.3`: Helm v3.21.3

`v3.21.2`: Helm v3.21.2

`v3.21.1`: Helm v3.21.1

renovate Bot commented Aug 6, 2026 •

edited

Loading

renovate Bot commented Aug 20, 2026 •

edited

Loading