Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps the go-modules group with 26 updates in the / directory:

Package From To
github.com/paketo-buildpacks/packit/v2 2.25.0 2.25.2
cloud.google.com/go/auth 0.16.5 0.17.0
cloud.google.com/go/iam 1.5.2 1.5.3
cloud.google.com/go/monitoring 1.24.2 1.24.3
github.com/CycloneDX/cyclonedx-go 0.9.2 0.9.3
github.com/anchore/go-struct-converter 0.0.0-20250211213226-cce56d595160 0.1.0
github.com/aws/aws-sdk-go-v2/service/internal/checksum 1.8.9 1.9.0
github.com/aws/aws-sdk-go-v2/service/s3 1.88.3 1.88.4
github.com/docker/cli 28.4.0+incompatible 28.5.1+incompatible
github.com/docker/docker-credential-helpers 0.9.3 0.9.4
github.com/go-git/go-git/v5 5.16.2 5.16.3
github.com/go-jose/go-jose/v4 4.1.2 4.1.3
github.com/gohugoio/hashstructure 0.5.0 0.6.0
github.com/hashicorp/go-getter 1.8.1 1.8.2
github.com/nwaples/rardecode/v2 2.1.1 2.2.1
github.com/olekukonko/ll 0.1.1 0.1.2
github.com/shirou/gopsutil/v4 4.25.8 4.25.9
github.com/skeema/knownhosts 1.3.1 1.3.2
golang.org/x/crypto 0.42.0 0.43.0
golang.org/x/mod 0.28.0 0.29.0
golang.org/x/oauth2 0.31.0 0.32.0
golang.org/x/time 0.13.0 0.14.0
golang.org/x/tools 0.37.0 0.38.0
google.golang.org/api 0.250.0 0.252.0
google.golang.org/grpc 1.75.1 1.76.0
modernc.org/sqlite 1.39.0 1.39.1

Updates github.com/paketo-buildpacks/packit/v2 from 2.25.0 to 2.25.2

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.25.2

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.25.1...v2.25.2

v2.25.1

What's Changed

Full Changelog: paketo-buildpacks/packit@v2.25.0...v2.25.1

Commits

Updates cloud.google.com/go/auth from 0.16.5 to 0.17.0

Release notes

Sourced from cloud.google.com/go/auth's releases.

auth 0.17.0

0.17.0 (2025-10-02)

Features

  • add trust boundary support for external accounts (#12864) (a67a146)

  • Add trust boundary support for service accounts and impersonation (HTTP/gRPC) (#11870) (5c2b665)

Changelog

Sourced from cloud.google.com/go/auth's changelog.

v0.17.0

  • firestore BREAKING CHANGES:
    • Remove UpdateMap and UpdateStruct; rename UpdatePaths to Update. Change docref.UpdateMap(ctx, map[string]interface{}{"a.b", 1}) to docref.Update(ctx, []firestore.Update{{Path: "a.b", Value: 1}})

      Change docref.UpdateStruct(ctx, []string{"Field"}, aStruct) to docref.Update(ctx, []firestore.Update{{Path: "Field", Value: aStruct.Field}})

    • Rename MergePaths to Merge; require args to be FieldPaths

    • A value stored as an integer can be read into a floating-point field, and vice versa.

  • bigtable/cmd/cbt:
    • Support deleting a column.
    • Add regex option for row read.
  • spanner: Mark stable.
  • storage:
    • Add Reader.ContentEncoding method.
    • Fix handling of SignedURL headers.
  • bigquery:
    • If Uploader.Put is called with no rows, it returns nil without making a call.
    • Schema inference supports the "nullable" option in struct tags for non-required fields.
    • TimePartitioning supports "Field".

v0.16.0

  • Other bigquery changes:

    • JobIterator.Next returns *Job; removed JobInfo (BREAKING CHANGE).
    • UseStandardSQL is deprecated; set UseLegacySQL to true if you need Legacy SQL.
    • Uploader.Put will generate a random insert ID if you do not provide one.
    • Support time partitioning for load jobs.
    • Support dry-run queries.
    • A Job remembers its last retrieved status.
    • Support retrieving job configuration.
    • Support labels for jobs and tables.
    • Support dataset access lists.
    • Improve support for external data sources, including data from Bigtable and Google Sheets, and tables with external data.
    • Support updating a table's view configuration.
    • Fix uploading civil times with nanoseconds.
  • storage:

    • Support PubSub notifications.

... (truncated)

Commits
  • 050b16d all: update version and README
  • def6812 storage: fix SignedURL integration test
  • ff434d4 all: make tests pass with go1.10beta1
  • ad7ff91 storage: add header sanitisation for SignedURL.
  • b97d364 internal/fields: fix test to match next Go version
  • 6856ba4 bigquery: support inference of nullable fields
  • 5fa930e bigquery: support time-partitioning field
  • 9cfa4d0 bigtable: link to the cbt installation instructions in the cbt docs
  • 3051b91 datatransfer: move into bigquery dir
  • 5733118 firestore: remove UpdateMap and UpdateStruct
  • Additional commits viewable in compare view

Updates cloud.google.com/go/iam from 1.5.2 to 1.5.3

Release notes

Sourced from cloud.google.com/go/iam's releases.

iam: v1.5.3

1.5.3 (2025-10-08)

Bug Fixes

  • iam: Upgrade gRPC service registration func (9dd3adf)
Commits

Updates cloud.google.com/go/monitoring from 1.24.2 to 1.24.3

Release notes

Sourced from cloud.google.com/go/monitoring's releases.

monitoring: v1.24.3

1.24.3 (2025-10-08)

Bug Fixes

  • monitoring: Upgrade gRPC service registration func (9dd3adf)
Commits

Updates github.com/CycloneDX/cyclonedx-go from 0.9.2 to 0.9.3

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.9.3

Changelog

Fixes

  • 6636ce32f8b15a5104fda6636937e91d62d647e7: fix: .component.data was not a slice as per CycloneDX schema #242 (@​madpah)
  • 3e0f245f7b936eb38e16d0518a2a0020c0d69223: fix: add missing properties (@​rdghe)

Building and Packaging

  • 24c8c33dd36390754b63f9ab056b2bf62b1eb70f: build(deps): bump actions/setup-go from 5.2.0 to 5.4.0 (@​dependabot[bot])
  • 5fcf097fbdcedb6832989d0a74195f0698b48de8: build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 (@​dependabot[bot])
  • edea8aedbc8467a478ac4b11d587c9bdff68f0dd: build(deps): bump apache/skywalking-eyes from 0.6.0 to 0.7.0 (@​dependabot[bot])
  • f32eebc413c71327df4fd6f264aa9f22e6e8cce1: build(deps): bump gitpod/workspace-go from 4702df2 to 8985eb7 (@​dependabot[bot])
  • 7fdaa7fc2b0fe25ff5eb17d57bede84131415674: build(deps): bump gitpod/workspace-go from 6932342 to 4702df2 (@​dependabot[bot])
  • d62ea3cd450cbd3aebcbf9a50c8d12b2e4187b13: build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 (@​dependabot[bot])
  • 4709461dea7961fbd824e433b3c68217ff856122: build(deps): bump goreleaser/goreleaser-action from 6.1.0 to 6.3.0 (@​dependabot[bot])
Commits
  • 72e4629 Merge pull request #243 from madpah/fix/component-data-schema
  • 6636ce3 fix: .component.data was not a slice as per CycloneDX schema #242
  • a39bf6b Merge pull request #232 from CycloneDX/dependabot/github_actions/actions/setu...
  • cff8cd5 Merge pull request #233 from CycloneDX/dependabot/docker/gitpod/workspace-go-...
  • 6a93b76 Merge pull request #234 from rdghe/fix/add-missing-properties
  • 3e0f245 fix: add missing properties
  • f32eebc build(deps): bump gitpod/workspace-go from 4702df2 to 8985eb7
  • 5fcf097 build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
  • 75427c8 Merge pull request #222 from CycloneDX/dependabot/docker/gitpod/workspace-go-...
  • 551624d Merge pull request #217 from CycloneDX/dependabot/github_actions/apache/skywa...
  • Additional commits viewable in compare view

Updates github.com/anchore/go-struct-converter from 0.0.0-20250211213226-cce56d595160 to 0.1.0

Release notes

Sourced from github.com/anchore/go-struct-converter's releases.

v0.1.0

Initial version that has been in use in tools-golang

Commits

Updates github.com/aws/aws-sdk-go-v2/service/internal/checksum from 1.8.9 to 1.9.0

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/service/internal/checksum's changelog.

Release (2021-08-27)

General Highlights

  • Feature: Updated github.com/aws/smithy-go to latest version
  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/credentials: v1.4.0
    • Feature: Adds support for Tags and TransitiveTagKeys to stscreds.AssumeRoleProvider. Closes aws/aws-sdk-go-v2#723
  • github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue: v1.2.0
    • Bug Fix: Fix unmarshaler's decoding of AttributeValueMemberN into a type that is a string alias.
  • github.com/aws/aws-sdk-go-v2/service/acmpca: v1.7.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/amplify: v1.5.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/amplifybackend: v1.4.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/apigateway: v1.7.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi: v1.4.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/appflow: v1.7.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/applicationinsights: v1.4.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/apprunner: v1.2.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/appstream: v1.6.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/appsync: v1.6.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/athena: v1.6.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.8.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/autoscalingplans: v1.5.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/backup: v1.5.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/batch: v1.7.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/braket: v1.6.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/chimesdkidentity: v1.1.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.1.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/cloudtrail: v1.5.0
    • Feature: Updated API model to latest revision.
  • github.com/aws/aws-sdk-go-v2/service/cloudwatchevents: v1.6.0

... (truncated)

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.88.3 to 1.88.4

Commits

Updates github.com/docker/cli from 28.4.0+incompatible to 28.5.1+incompatible

Commits
  • e180ab8 Merge pull request #6541 from vvoland/6540-28.x
  • 0d799c5 update to go1.24.8
  • 887030f Merge pull request #6522 from thaJeztah/28.x_bump_moby
  • 9c6a0e0 Merge pull request #6531 from thaJeztah/28.x_backport_bump_macos
  • f784471 vendor: github.com/docker/docker cd048300a487 (v28.5.0-dev)
  • d7afcf9 Merge pull request #6529 from thaJeztah/28.x_backport_deprecate_ResolveDefaul...
  • 9d9adf6 gha: add macOS 15, remove macOS 13 (deprecated)
  • d4b7734 cli/command: deprecate ResolveDefaultContext
  • a106161 Merge pull request #6519 from thaJeztah/28.x_backport_authconfig_no_direct_cast
  • 5e42f82 Merge pull request #6518 from thaJeztah/28.x_backport_memstore_notfounderr
  • Additional commits viewable in compare view

Updates github.com/docker/docker-credential-helpers from 0.9.3 to 0.9.4

Release notes

Sourced from github.com/docker/docker-credential-helpers's releases.

v0.9.4

What's Changed

Full Changelog: docker/docker-credential-helpers@v0.9.3...v0.9.4

Commits
  • 84c3413 Merge pull request #387 from thaJeztah/bump_go1.25
  • fcb0b66 update to go1.25.1
  • cf4e41f Merge pull request #388 from thaJeztah/bump_wincred
  • 53f7bdc vendor: github.com/danieljoos/wincred v1.2.3
  • d4602cd Merge pull request #249 from crazy-max/upd-dockerfile
  • ae84c25 Dockerfile: merge build stages
  • 2adf3cf Merge pull request #383 from thaJeztah/bump_go_deps
  • 1fdce4c Dockerfile: update xx to v1.7.0
  • 962a779 update to go1.24.7
  • ec5efac Merge pull request #386 from thaJeztah/bump_golangci_lint
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.16.2 to 5.16.3

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.16.3

What's Changed

Full Changelog: go-git/go-git@v5.16.2...v5.16.3

Commits
  • ad9a3a5 Merge pull request #1633 from baloo/baloo/release-5.x/jj-signed-commits
  • f2c3467 plumbing: support extra headers, support jujutsu signed commit [5.x]
  • c12263d Merge pull request #1646 from baloo/baloo/release-5.x/fixup-windows-ci
  • 111f374 build: disable fuzzing on maintenance branch
  • 15d46ce build: raise timeouts for windows CI tests
  • ce83ba1 Merge pull request #1644 from baloo/baloo/release-5.x/fixup-build
  • b486201 internal: Expand regex to fix build
  • See full diff in compare view

Updates github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.3

This release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop x/crypto and no longer have any external dependencies in go-jose outside of the standard library!

This release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.

What's Changed

Full Changelog: go-jose/go-jose@v4.1.2...v4.1.3

Commits

Updates github.com/gohugoio/hashstructure from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/gohugoio/hashstructure's releases.

v0.6.0

What's Changed

New Contributors

Full Changelog: gohugoio/hashstructure@v0.5.0...v0.6.0

Commits

Updates github.com/hashicorp/go-getter from 1.8.1 to 1.8.2

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.8.2

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.8.1...v1.8.2

Commits

Updates github.com/nwaples/rardecode/v2 from 2.1.1 to 2.2.1

Commits
  • f7e277c reimplement io.WriterTo for Reader
  • 52fb4e8 allow max dictionary size to be set, with default now at 4GB
  • 9f4b0d1 dont let the dictionary be larger than the unpacked file size
  • 153fdf5 Merge pull request #47 from nwaples/bytereader
  • 3f140e5 document RarFS methods
  • b4fc922 change os.FileMode to fs.FileMode
  • edb01e7 add Seek support for uncompressed files
  • 710bda2 add initial Seek support for limitedReader
  • 9deacfb save offset in packetFileReader
  • 4f0a750 change limitedReader to save offset internally
  • Additional commits viewable in compare view

Updates github.com/olekukonko/ll from 0.1.1 to 0.1.2

Commits
  • 3e1aba0 remove stack form fatal , only panic should ahve stack
  • ca1f5e3 update cat and improve inspector readability
  • See full diff in compare view

Updates github.com/shirou/gopsutil/v4 from 4.25.8 to 4.25.9

Release notes

Sourced from github.com/shirou/gopsutil/v4's releases.

v4.25.9

What's Changed

cpu

disk

process

Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v4.25.8...v4.25.9

Commits
  • 208a0f8 Merge pull request #1922 from StefanoBalzarottiNozomi/fix-infinite-loop
  • 34093fe check maxWarning
  • 54b31c3 Merge branch 'master' into fix-infinite-loop
  • b952ecf Merge pull request #1926 from OrbintSoft/famile-procid-without-wmi
  • 91ecede fix
  • 5ea5730 code review, add comments and constants
  • ce7ada1 Merge pull request #1927 from shirou/dependabot/go_modules/github.com/ebiteng...
  • 6dcae85 chore(deps): bump github.com/ebitengine/purego from 0.8.4 to 0.9.0
  • dcb08f1 Merge pull request #1928 from shirou/feat/fix_lint_on_disk_linux
  • a215163 [disk][linux]: fix lint (gofumpt)
  • Additional commits viewable in compare view

Updates github.com/skeema/knownhosts from 1.3.1 to 1.3.2

Commits
  • b9f50b4 ci: use Go 1.24 as per minimum in go.mod
  • 3e58378 update golang.org/x/crypto to v0.42.0; revise IPv6 logic
  • 5b6f59f tests: fix test logic for x/crypto 0.37.0 change
  • eef7455 update dependency golang.org/x/crypto to v0.39.0
  • e3098ef update dependency golang.org/x/crypto to v0.36.0
  • c884d65 ci: add govulncheck; pin goveralls version; use Go 1.23
  • a8761da comments: update to reflect golang.org/x/crypto/ssh/knownhosts change
  • See full diff in compare view

Updates golang.org/x/crypto from 0.42.0 to 0.43.0

Commits
  • 627cb89 go.mod: update golang.org/x dependencies
  • dca4914 acme: fix autocert TestHTTPHandlerDefaultFallback
  • 1336e21 x509roots/fallback: update bundle
  • 2beaa59 ssh: add VerifiedPublicKeyCallback
  • 66c3d8c ssh: add support for FIPS mode
  • ddb4e80 ssh: remove custom contains, use slices.Contains
  • f4d47b0 ssh: return clearer error when signature algorithm is used as key format
  • 96dc232 x509roots/fallback/bundle: add bundle package to export root certs
  • 8c9ba31 all: freeze and deprecate more packages
  • 559e062 ssh/agent: return an error for unexpected message types
  • See full diff in compare view

Updates golang.org/x/mod from 0.28.0 to 0.29.0

Commits

Updates golang.org/x/net from 0.44.0 to 0.45.0

Commits
  • 59706cd html: impose open element stack size limit
  • 6ec8895 html: align in row insertion mode with spec
  • 5393563 http2: fix RFC 9218 write scheduler not being idempotent
  • b2ab371 internal/httpsfv: implement parsing support for date and display string
  • edb764c internal/httpsfv: add parsing functionality for types defined in RFC 8941
  • fbba2c2 internal/httpsfv: add support for consuming Display String and Date type
  • 47a241f http2: make the error channel pool per-Server
  • 51f657b webdav/internal/xml: use the built-in min function
  • f2e909b internal/httpsfv: implement parsing support for Dictionary and List type.
  • 7d8cfce internal/httpsfv: add support for Bare Inner List and Item type.
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.31.0 to 0.32.0

Commits

Updates golang.org/x/sys from 0.36.0 to 0.37.0
<details...

Description has been truncated

Bumps the go-modules group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.25.0` | `2.25.2` |
| [cloud.google.com/go/auth](https://github.com/googleapis/google-cloud-go) | `0.16.5` | `0.17.0` |
| [cloud.google.com/go/iam](https://github.com/googleapis/google-cloud-go) | `1.5.2` | `1.5.3` |
| [cloud.google.com/go/monitoring](https://github.com/googleapis/google-cloud-go) | `1.24.2` | `1.24.3` |
| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.9.2` | `0.9.3` |
| [github.com/anchore/go-struct-converter](https://github.com/anchore/go-struct-converter) | `0.0.0-20250211213226-cce56d595160` | `0.1.0` |
| [github.com/aws/aws-sdk-go-v2/service/internal/checksum](https://github.com/aws/aws-sdk-go-v2) | `1.8.9` | `1.9.0` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.88.3` | `1.88.4` |
| [github.com/docker/cli](https://github.com/docker/cli) | `28.4.0+incompatible` | `28.5.1+incompatible` |
| [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.9.3` | `0.9.4` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.2` | `5.16.3` |
| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.2` | `4.1.3` |
| [github.com/gohugoio/hashstructure](https://github.com/gohugoio/hashstructure) | `0.5.0` | `0.6.0` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.8.1` | `1.8.2` |
| [github.com/nwaples/rardecode/v2](https://github.com/nwaples/rardecode) | `2.1.1` | `2.2.1` |
| [github.com/olekukonko/ll](https://github.com/olekukonko/ll) | `0.1.1` | `0.1.2` |
| [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.25.8` | `4.25.9` |
| [github.com/skeema/knownhosts](https://github.com/skeema/knownhosts) | `1.3.1` | `1.3.2` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.42.0` | `0.43.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.28.0` | `0.29.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.31.0` | `0.32.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.13.0` | `0.14.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.37.0` | `0.38.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.250.0` | `0.252.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.1` | `1.76.0` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.39.0` | `1.39.1` |



Updates `github.com/paketo-buildpacks/packit/v2` from 2.25.0 to 2.25.2
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.25.0...v2.25.2)

Updates `cloud.google.com/go/auth` from 0.16.5 to 0.17.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@auth/v0.16.5...v0.17.0)

Updates `cloud.google.com/go/iam` from 1.5.2 to 1.5.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@iam/v1.5.2...iam/v1.5.3)

Updates `cloud.google.com/go/monitoring` from 1.24.2 to 1.24.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@monitoring/v1.24.2...monitoring/v1.24.3)

Updates `github.com/CycloneDX/cyclonedx-go` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml)
- [Commits](CycloneDX/cyclonedx-go@v0.9.2...v0.9.3)

Updates `github.com/anchore/go-struct-converter` from 0.0.0-20250211213226-cce56d595160 to 0.1.0
- [Release notes](https://github.com/anchore/go-struct-converter/releases)
- [Commits](https://github.com/anchore/go-struct-converter/commits/v0.1.0)

Updates `github.com/aws/aws-sdk-go-v2/service/internal/checksum` from 1.8.9 to 1.9.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/v1.9.0/CHANGELOG.md)
- [Commits](aws/aws-sdk-go-v2@service/tnb/v1.8.9...v1.9.0)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.88.3 to 1.88.4
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.88.3...service/s3/v1.88.4)

Updates `github.com/docker/cli` from 28.4.0+incompatible to 28.5.1+incompatible
- [Commits](docker/cli@v28.4.0...v28.5.1)

Updates `github.com/docker/docker-credential-helpers` from 0.9.3 to 0.9.4
- [Release notes](https://github.com/docker/docker-credential-helpers/releases)
- [Commits](docker/docker-credential-helpers@v0.9.3...v0.9.4)

Updates `github.com/go-git/go-git/v5` from 5.16.2 to 5.16.3
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.16.2...v5.16.3)

Updates `github.com/go-jose/go-jose/v4` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.2...v4.1.3)

Updates `github.com/gohugoio/hashstructure` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/gohugoio/hashstructure/releases)
- [Commits](gohugoio/hashstructure@v0.5.0...v0.6.0)

Updates `github.com/hashicorp/go-getter` from 1.8.1 to 1.8.2
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](hashicorp/go-getter@v1.8.1...v1.8.2)

Updates `github.com/nwaples/rardecode/v2` from 2.1.1 to 2.2.1
- [Commits](nwaples/rardecode@v2.1.1...v2.2.1)

Updates `github.com/olekukonko/ll` from 0.1.1 to 0.1.2
- [Commits](olekukonko/ll@v0.1.1...v0.1.2)

Updates `github.com/shirou/gopsutil/v4` from 4.25.8 to 4.25.9
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.25.8...v4.25.9)

Updates `github.com/skeema/knownhosts` from 1.3.1 to 1.3.2
- [Commits](skeema/knownhosts@v1.3.1...v1.3.2)

Updates `golang.org/x/crypto` from 0.42.0 to 0.43.0
- [Commits](golang/crypto@v0.42.0...v0.43.0)

Updates `golang.org/x/mod` from 0.28.0 to 0.29.0
- [Commits](golang/mod@v0.28.0...v0.29.0)

Updates `golang.org/x/net` from 0.44.0 to 0.45.0
- [Commits](golang/net@v0.44.0...v0.45.0)

Updates `golang.org/x/oauth2` from 0.31.0 to 0.32.0
- [Commits](golang/oauth2@v0.31.0...v0.32.0)

Updates `golang.org/x/sys` from 0.36.0 to 0.37.0
- [Commits](golang/sys@v0.36.0...v0.37.0)

Updates `golang.org/x/term` from 0.35.0 to 0.36.0
- [Commits](golang/term@v0.35.0...v0.36.0)

Updates `golang.org/x/text` from 0.29.0 to 0.30.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.29.0...v0.30.0)

Updates `golang.org/x/time` from 0.13.0 to 0.14.0
- [Commits](golang/time@v0.13.0...v0.14.0)

Updates `golang.org/x/tools` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.37.0...v0.38.0)

Updates `google.golang.org/api` from 0.250.0 to 0.252.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.250.0...v0.252.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250922171735-9219d122eba9 to 0.0.0-20251002232023-7c0ddcbb5797
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.75.1 to 1.76.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.75.1...v1.76.0)

Updates `google.golang.org/protobuf` from 1.36.9 to 1.36.10

Updates `modernc.org/sqlite` from 1.39.0 to 1.39.1
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.39.0...v1.39.1)

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/auth
  dependency-version: 0.17.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/iam
  dependency-version: 1.5.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: cloud.google.com/go/monitoring
  dependency-version: 1.24.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-version: 0.9.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/anchore/go-struct-converter
  dependency-version: 0.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/internal/checksum
  dependency-version: 1.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.88.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/docker/cli
  dependency-version: 28.5.1+incompatible
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/docker/docker-credential-helpers
  dependency-version: 0.9.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.16.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/gohugoio/hashstructure
  dependency-version: 0.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/nwaples/rardecode/v2
  dependency-version: 2.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/olekukonko/ll
  dependency-version: 0.1.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.25.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/skeema/knownhosts
  dependency-version: 1.3.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-version: 0.29.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.45.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/term
  dependency-version: 0.36.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-version: 0.30.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/time
  dependency-version: 0.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools
  dependency-version: 0.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/api
  dependency-version: 0.252.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20251002232023-7c0ddcbb5797
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.76.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: modernc.org/sqlite
  dependency-version: 1.39.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 13, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 13, 2025 16:18
@dependabot dependabot bot requested review from mhdawson and paketo-bot-reviewer and removed request for a team October 13, 2025 16:18
@dependabot dependabot bot added go Pull requests that update Go code dependencies Pull requests that update a dependency file labels Oct 13, 2025
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Oct 13, 2025
@paketo-bot paketo-bot merged commit 25a1ba1 into main Oct 13, 2025
10 of 11 checks passed
@paketo-bot paketo-bot deleted the dependabot/go_modules/go-modules-9103bc0c88 branch October 13, 2025 16:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code semver:patch A change requiring a patch version bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants