chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #617 · securesign/trillian

red-hat-konflux · 2026-04-21T19:35:51Z

This PR contains the following updates:

Package	Type	Update	Change
cloud.google.com/go/iam	indirect	minor	`v1.9.0` → `v1.10.0`
cloud.google.com/go/longrunning	indirect	minor	`v0.11.0` → `v0.12.0`
cloud.google.com/go/trace	indirect	minor	`v1.14.0` → `v1.15.0`
github.com/fatih/color	indirect	minor	`v1.18.0` → `v1.19.0`
github.com/go-sql-driver/mysql	require	minor	`v1.9.3` → `v1.10.0`
github.com/goccy/go-json	indirect	patch	`v0.10.5` → `v0.10.6`
github.com/mattn/go-isatty	indirect	patch	`v0.0.21` → `v0.0.22`
github.com/prometheus/prometheus	indirect	minor	`v0.304.2` → `v0.311.3`
google.golang.org/api	require	minor	`v0.276.0` → `v0.278.0`
google.golang.org/genproto	require	digest	`e10c466` → `60b97b3`
google.golang.org/genproto/googleapis/api	require	digest	`e10c466` → `60b97b3`
google.golang.org/genproto/googleapis/rpc	require	digest	`e10c466` → `60b97b3`
k8s.io/kube-openapi	indirect	digest	`ec9c827` → `3334182`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/longrunning)

`v0.12.0`

Compare Source

pubsub: Subscription.Receive now uses streaming pull.
pubsub: add Client.TopicInProject to access topics in a different project
than the client.
errors: renamed errorreporting. The errors package will be removed shortly.
datastore: improved retry behavior.
bigquery: support updates to dataset metadata, with etags.
bigquery: add etag support to Table.Update (BREAKING: etag argument added).
bigquery: generate all job IDs on the client.
storage: support bucket lifecycle configurations.

fatih/color (github.com/fatih/color)

`v1.19.0`

Compare Source

What's Changed

Bump golang.org/x/sys from 0.25.0 to 0.28.0 by @dependabot[bot] in #246
Fix for issue #230 set/unsetwriter symmetric wrt color support detection by @ataypamart in #243
chore: go mod cleanup by @sashamelentyev in #244
Bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot[bot] in #249
Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by @dependabot[bot] in #248
Update CI and go deps by @fatih in #254
Bump golang.org/x/sys from 0.31.0 to 0.37.0 by @dependabot[bot] in #268
fix: include escape codes in byte counts from Fprint, Fprintf by @qualidafial in #282
Bump golang.org/x/sys from 0.37.0 to 0.40.0 by @dependabot[bot] in #277
fix: add nil check for os.Stdout to prevent panic on Windows services by @majiayu000 in #275
Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0 by @dependabot[bot] in #259
Bump actions/checkout from 4 to 6 by @dependabot[bot] in #273
Optimize Color.Equals performance (O(n²) → O(n)) by @UnSubble in #269
Bump actions/setup-go from 5 to 6 by @dependabot[bot] in #266

New Contributors

@ataypamart made their first contribution in #243
@sashamelentyev made their first contribution in #244
@qualidafial made their first contribution in #282
@majiayu000 made their first contribution in #275
@UnSubble made their first contribution in #269

Full Changelog: fatih/color@v1.18.0...v1.19.0

go-sql-driver/mysql (github.com/go-sql-driver/mysql)

`v1.10.0`

Compare Source

Fix getSystemVar("max_allowed_packet") potentially returned wrong value. (#1754)
This affects only when maxAllowedPacket=0 is set.
Bump filippo.io/edwards25519 from 1.1.1 to 1.2.0. (#1756)
While older versions have reported CVEs, they do not affect go-mysql.
Update Go versions to 1.24-1.26. (#1763)
Enhance interpolateParams to correctly handle placeholders. (#1732)
The question mark (?) within strings and comments will no longer be treated as a placeholder.

goccy/go-json (github.com/goccy/go-json)

`v0.10.6`: 0.10.6

Compare Source

What's Changed

fix: panic on embedded struct with recursive by @NgoKimPhu in #483

New Contributors

@NgoKimPhu made their first contribution in #483

Full Changelog: goccy/go-json@v0.10.5...v0.10.6

mattn/go-isatty (github.com/mattn/go-isatty)

`v0.0.22`

Compare Source

prometheus/prometheus (github.com/prometheus/prometheus)

googleapis/google-api-go-client (google.golang.org/api)

`v0.278.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3582) (76b1187)
all: Auto-regenerate discovery clients (#3584) (e36c883)

`v0.277.0`

Compare Source

Features

all: Auto-regenerate discovery clients (#3567) (3958295)
all: Auto-regenerate discovery clients (#3571) (ca9851e)
all: Auto-regenerate discovery clients (#3574) (8efb1af)
all: Auto-regenerate discovery clients (#3575) (de49bb5)
all: Auto-regenerate discovery clients (#3577) (ce68c87)
all: Auto-regenerate discovery clients (#3578) (8be033e)
all: Auto-regenerate discovery clients (#3579) (bc6990e)
all: Auto-regenerate discovery clients (#3580) (2de1a5a)
all: Auto-regenerate discovery clients (#3581) (0c219d9)

Bug Fixes

idtoken: Avoid double impersonation in tokenSourceFromBytes (#3576) (75172cf), refs #2301

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-04-21T19:35:52Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

10 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go/spanner`	`v1.90.0` -> `v1.91.0`
`k8s.io/klog/v2`	`v2.130.1` -> `v2.140.0`
`cloud.google.com/go/monitoring`	`v1.27.0` -> `v1.28.0`
`github.com/emicklei/go-restful/v3`	`v3.12.2` -> `v3.13.0`
`github.com/envoyproxy/go-control-plane/envoy`	`v1.36.0` -> `v1.37.0`
`github.com/googleapis/gax-go/v2`	`v2.21.0` -> `v2.22.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.40.0` -> `v1.42.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`	`v1.40.0` -> `v1.42.0`
`go.yaml.in/yaml/v2`	`v2.4.3` -> `v2.4.4`
`sigs.k8s.io/structured-merge-diff/v6`	`v6.3.0` -> `v6.3.2`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Apr 21, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 18 times, most recently from 0dfd4b2 to 441a764 Compare April 29, 2026 19:02

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 10 times, most recently from 64ae2da to 467dc07 Compare May 2, 2026 18:44

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 11 times, most recently from fc318db to e12a6da Compare May 5, 2026 22:39

chore(deps): update go dependencies

fa6b361

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch from e12a6da to fa6b361 Compare May 6, 2026 02:34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update go dependencies#617

chore(deps): update go dependencies#617
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.3from
konflux/mintmaker/release-1.3/go-deps

red-hat-konflux Bot commented Apr 21, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Apr 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented Apr 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

v0.10.6: 0.10.6

What's Changed

New Contributors

Features

Features

Bug Fixes

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Apr 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Apr 21, 2026 •

edited

Loading

`v0.10.6`: 0.10.6

red-hat-konflux Bot commented Apr 21, 2026 •

edited

Loading