Skip to content

Bump the go-modules group with 8 updates #1313

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Sep 26, 2025
Merged

Bump the go-modules group with 8 updates #1313

merged 1 commit into from
Sep 26, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 26, 2025

Bumps the go-modules group with 8 updates:

Package From To
github.com/paketo-buildpacks/occam 0.30.0 0.30.1
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp 1.29.0 1.30.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric 0.53.0 0.54.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping 0.53.0 0.54.0
github.com/cyphar/filepath-securejoin 0.4.1 0.5.0
google.golang.org/genproto 0.0.0-20250908214217-97024824d090 0.0.0-20250922171735-9219d122eba9
google.golang.org/genproto/googleapis/api 0.0.0-20250908214217-97024824d090 0.0.0-20250922171735-9219d122eba9
google.golang.org/genproto/googleapis/rpc 0.0.0-20250908214217-97024824d090 0.0.0-20250922171735-9219d122eba9

Updates github.com/paketo-buildpacks/occam from 0.30.0 to 0.30.1

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.30.1

What's Changed

Full Changelog: paketo-buildpacks/occam@v0.30.0...v0.30.1

Commits
  • 3b96b24 chore(deps): updated module github.com/docker/docker from v28.3.3+incompatibl...
  • f005efe chore(deps): updated module github.com/paketo-buildpacks/packit/v2 from v2.24...
  • e7da996 Add support for registry extension images (#433)
  • aa947da chore(deps): updated module github.com/testcontainers/testcontainers-go from ...
  • b9a7a83 Updating github-config
  • See full diff in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp from 1.29.0 to 1.30.0

Release notes

Sourced from github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp's releases.

v1.5.1 and v0.29.1

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.5.0...v1.5.1

v1.5.0 and v0.29.0

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.4.0...v1.5.0

v1.4.0 and v0.28.0

What's Changed

... (truncated)

Commits

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric from 0.53.0 to 0.54.0

Commits

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping from 0.53.0 to 0.54.0

Commits

Updates github.com/cyphar/filepath-securejoin from 0.4.1 to 0.5.0

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.5.0] - 2025-09-26

Let the past die. Kill it if you have to.

NOTE: With this release, some parts of github.com/cyphar/filepath-securejoin are now licensed under the Mozilla Public License (version 2). Please see COPYING.md as well as the the license header in each file for more details.

Breaking

  • The new API introduced in the [0.3.0][] release has been moved to a new subpackage called pathrs-lite. This was primarily done to better indicate the split between the new and old APIs, as well as indicate to users the purpose of this subpackage (it is a less complete version of [libpathrs][]).

    We have added some wrappers to the top-level package to ease the transition, but those are deprecated and will be removed in the next minor release of filepath-securejoin. Users should update their import paths.

    This new subpackage has also been relicensed under the Mozilla Public License (version 2), please see COPYING.md for more details.

Added

  • Most of the key bits the safe procfs API have now been exported and are available in github.com/cyphar/filepath-securejoin/pathrs-lite/procfs. At the moment this primarily consists of a new procfs.Handle API:

    • OpenProcRoot returns a new handle to /proc, endeavouring to make it safe if possible (subset=pid to protect against mistaken write attacks and leaks, as well as using fsopen(2) to avoid racing mount attacks).

      OpenUnsafeProcRoot returns a handle without attempting to create one with subset=pid, which makes it more dangerous to leak. Most users should use OpenProcRoot (even if you need to use ProcRoot as the base of an operation, as filepath-securejoin will internally open a handle when necessary).

    • The (*procfs.Handle).Open* family of methods lets you get a safe O_PATH handle to subpaths within /proc for certain subpaths.

      For OpenThreadSelf, the returned ProcThreadSelfCloser needs to be called after you completely finish using the handle (this is necessary because Go is multi-threaded and ProcThreadSelf references /proc/thread-self which may disappear if we do not runtime.LockOSThread -- ProcThreadSelfCloser is currently equivalent to runtime.UnlockOSThread).

      Note that you cannot open any procfs symlinks (most notably magic-links)

... (truncated)

Commits
  • bb9e81f VERSION: release 0.5.0
  • 17e58e1 CHANGELOG: minor updates
  • cc071b2 hack: properly test ./...
  • a1c1895 CHANGELOG: fix kernel version for open_tree(2)
  • 432c95e doc: minor godoc improvements
  • 90002f2 CHANGELOG: mention MPLv2 in pathrs-lite entry
  • 59fcb8b COPYING: fix reference to pathrs-lite internal pkgs
  • 43797e7 pathrs-lite: add Close to procfs wrapper
  • 2a0e2b6 pathrs-lite: move Reopen impl to internal/procfs
  • 3c5e239 *: update and improve godocs
  • Additional commits viewable in compare view

Updates google.golang.org/genproto from 0.0.0-20250908214217-97024824d090 to 0.0.0-20250922171735-9219d122eba9

Commits

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20250908214217-97024824d090 to 0.0.0-20250922171735-9219d122eba9

Commits

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20250908214217-97024824d090 to 0.0.0-20250922171735-9219d122eba9

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-modules group with 8 updates
05b5252 
Bumps the go-modules group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.30.0` | `0.30.1` |
| [github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `1.29.0` | `1.30.0` |
| [github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `0.53.0` | `0.54.0` |
| [github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `0.53.0` | `0.54.0` |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.4.1` | `0.5.0` |
| [google.golang.org/genproto](https://github.com/googleapis/go-genproto) | `0.0.0-20250908214217-97024824d090` | `0.0.0-20250922171735-9219d122eba9` |
| [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20250908214217-97024824d090` | `0.0.0-20250922171735-9219d122eba9` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250908214217-97024824d090` | `0.0.0-20250922171735-9219d122eba9` |


Updates `github.com/paketo-buildpacks/occam` from 0.30.0 to 0.30.1
- [Release notes](https://github.com/paketo-buildpacks/occam/releases)
- [Commits](paketo-buildpacks/occam@v0.30.0...v0.30.1)

Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-go@detectors/gcp/v1.29.0...detectors/gcp/v1.30.0)

Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric` from 0.53.0 to 0.54.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0)

Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping` from 0.53.0 to 0.54.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0)

Updates `github.com/cyphar/filepath-securejoin` from 0.4.1 to 0.5.0
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.4.1...v0.5.0)

Updates `google.golang.org/genproto` from 0.0.0-20250908214217-97024824d090 to 0.0.0-20250922171735-9219d122eba9
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250908214217-97024824d090 to 0.0.0-20250922171735-9219d122eba9
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250908214217-97024824d090 to 0.0.0-20250922171735-9219d122eba9
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/occam
  dependency-version: 0.30.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp
  dependency-version: 1.30.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric
  dependency-version: 0.54.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping
  dependency-version: 0.54.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-version: 0.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto
  dependency-version: 0.0.0-20250922171735-9219d122eba9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20250922171735-9219d122eba9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20250922171735-9219d122eba9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 26, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 26, 2025 16:02
@dependabot dependabot bot added go Pull requests that update Go code dependencies Pull requests that update a dependency file labels Sep 26, 2025
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Sep 26, 2025
@paketo-bot paketo-bot merged commit 22baab0 into main Sep 26, 2025
9 of 10 checks passed
@paketo-bot paketo-bot deleted the dependabot/go_modules/go-modules-4830da5d1e branch September 26, 2025 16:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@paketo-bot-reviewer paketo-bot-reviewer paketo-bot-reviewer approved these changes

@mhdawson mhdawson Awaiting requested review from mhdawson mhdawson is a code owner automatically assigned from paketo-buildpacks/nodejs-maintainers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code semver:patch A change requiring a patch version bump

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@paketo-bot-reviewer @paketo-bot