Skip to content

Bump the all group across 1 directory with 24 updates - #694

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-f2ea427eb0
Open

Bump the all group across 1 directory with 24 updates#694
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-f2ea427eb0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 24 updates in the / directory:

Package From To
github.com/sigstore/sigstore-go 1.3.0 1.4.0
github.com/digitorus/pkcs7 0.0.0-20230818184609-3a137a874352 0.0.0-20260821105541-05f79448fa77
github.com/go-openapi/jsonreference 1.0.2 1.0.3
github.com/go-openapi/runtime 0.33.3 0.33.4
github.com/go-openapi/runtime/server-middleware 0.33.3 0.33.4
github.com/go-openapi/strfmt 0.27.2 0.27.4
github.com/go-openapi/validate 1.0.0 1.0.1
github.com/google/certificate-transparency-go 1.3.3 1.4.0
github.com/grpc-ecosystem/grpc-gateway/v2 2.31.0 2.32.0
github.com/sigstore/rekor 1.5.4 1.5.5
github.com/sigstore/rekor-tiles/v2 2.3.0 2.4.0
github.com/sigstore/sigstore 1.11.0 1.11.1
github.com/sigstore/timestamp-authority/v2 2.1.4 2.2.0
github.com/spf13/pflag 1.0.10 1.1.0
go.yaml.in/yaml/v3 3.0.5 3.0.6
golang.org/x/crypto 0.57.0 0.58.0
golang.org/x/mod 0.41.0 0.42.0
golang.org/x/net 0.59.0 0.62.0
golang.org/x/term 0.46.0 0.47.0
golang.org/x/text 0.42.0 0.43.0
golang.org/x/tools 0.50.0 0.52.0
google.golang.org/genproto/googleapis/api 0.0.0-20260928230214-8a89bd6388cc 0.0.0-20261012220534-4341edf3f941
google.golang.org/genproto/googleapis/rpc 0.0.0-20260928230214-8a89bd6388cc 0.0.0-20261005182115-fad411399dd8
google.golang.org/grpc 1.84.0 1.85.0

Updates github.com/sigstore/sigstore-go from 1.3.0 to 1.4.0

Release notes

Sourced from github.com/sigstore/sigstore-go's releases.

v1.4.0

What's Changed

New Contributors

Full Changelog: sigstore/sigstore-go@v1.3.0...v1.4.0

Commits
  • be417d9 sign: accept custom transports for Rekor clients (#690)
  • 42c420a fix(verify): use pointer receiver for ErrVerification methods (#689)
  • 924d9a6 Bump github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6 (#688)
  • f203a5a Bump the minor-patch group across 1 directory with 4 updates (#687)
  • 0161b20 sign: allow callers to set the User-Agent for Fulcio, TSA and Rekor (#686)
  • 35e12bb Drop patch version from go directive in go.mod (#685)
  • 29ea8ed Bump the minor-patch group across 1 directory with 5 updates (#683)
  • b9b4e28 Bump the minor-patch group across 2 directories with 9 updates (#681)
  • e55f0ed Bump google.golang.org/grpc from 1.82.1 to 1.83.2 (#674)
  • a061819 bound fuzz tests to 64kb inputs (#680)
  • Additional commits viewable in compare view

Updates github.com/digitorus/pkcs7 from 0.0.0-20230818184609-3a137a874352 to 0.0.0-20260821105541-05f79448fa77

Commits

Updates github.com/go-openapi/jsonreference from 1.0.2 to 1.0.3

Release notes

Sourced from github.com/go-openapi/jsonreference's releases.

v1.0.3

1.0.3 - 2026-09-25

Full Changelog: go-openapi/jsonreference@v1.0.2...v1.0.3

4 commits in this release.

Fixed bugs

  • fix: remove repeated default ports from a URL host in linear time by @​fredbi in #123 ...

Security

  • chore(security): upgraded go-openapi/jsonpointer by @​fredbi ...

Updates

People who contributed to this release

jsonreference license terms

License

Commits
  • 90b39fb chore(security): upgraded go-openapi/jsonpointer
  • 01d7aa2 fix: remove repeated default ports from a URL host in linear time (#123)
  • 2b801d1 build(deps): bump github.com/go-openapi/testify/v2
  • d2410e2 build(deps): bump the development-dependencies group with 9 updates
  • See full diff in compare view

Updates github.com/go-openapi/runtime from 0.33.3 to 0.33.4

Release notes

Sourced from github.com/go-openapi/runtime's releases.

v0.33.4

0.33.4 - 2026-10-28

redoc v3

Full Changelog: go-openapi/runtime@v0.33.3...v0.33.4

9 commits in this release.

Fixed bugs

  • fix(docui): load Redoc v3 as an ES module, keep v2 with WithRedocV2 by @​fredbi in #552 ...

Miscellaneous tasks

Updates

People who contributed to this release

runtime license terms

License

Per-module changes

... (truncated)

Commits
  • 6ac8b4c chore: prepare release v0.33.4
  • a060220 chore: updated golang.org/X/net (#553)
  • 9ef9fed fix(docui): load Redoc v3 as an ES module, keep v2 with WithRedocV2 (#552)
  • 2e27320 build(deps): bump the go-openapi-dependencies group across 3 directories with...
  • 689c32a build(deps): bump actions/upload-artifact
  • dc08ff1 build(deps): bump golang.org/x/sync
  • 80fa728 build(deps): bump the other-dependencies group across 1 directory with 3 updates
  • 3e3eb7f build(deps): bump the development-dependencies group with 10 updates
  • afc7296 build(deps): bump the go-openapi-dependencies group across 3 directories with...
  • See full diff in compare view

Updates github.com/go-openapi/runtime/server-middleware from 0.33.3 to 0.33.4

Release notes

Sourced from github.com/go-openapi/runtime/server-middleware's releases.

v0.33.4

0.33.4 - 2026-10-28

redoc v3

Full Changelog: go-openapi/runtime@v0.33.3...v0.33.4

9 commits in this release.

Fixed bugs

  • fix(docui): load Redoc v3 as an ES module, keep v2 with WithRedocV2 by @​fredbi in #552 ...

Miscellaneous tasks

Updates

People who contributed to this release

runtime license terms

License

Per-module changes

... (truncated)

Commits
  • 6ac8b4c chore: prepare release v0.33.4
  • a060220 chore: updated golang.org/X/net (#553)
  • 9ef9fed fix(docui): load Redoc v3 as an ES module, keep v2 with WithRedocV2 (#552)
  • 2e27320 build(deps): bump the go-openapi-dependencies group across 3 directories with...
  • 689c32a build(deps): bump actions/upload-artifact
  • dc08ff1 build(deps): bump golang.org/x/sync
  • 80fa728 build(deps): bump the other-dependencies group across 1 directory with 3 updates
  • 3e3eb7f build(deps): bump the development-dependencies group with 10 updates
  • afc7296 build(deps): bump the go-openapi-dependencies group across 3 directories with...
  • See full diff in compare view

Updates github.com/go-openapi/strfmt from 0.27.2 to 0.27.4

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.27.4

0.27.4 - 2026-10-19

Full Changelog: go-openapi/strfmt@v0.27.3...v0.27.4

5 commits in this release.

Miscellaneous tasks

Updates

  • build(deps): bump go.mongodb.org/mongo-driver/v2 from 2.9.1 to 2.9.2 in the other-dependencies group across 1 directory by @​dependabot[bot] in #317 ...
  • build(deps): bump go.mongodb.org/mongo-driver/v2 from 2.9.1 to 2.9.2 in the other-dependencies group across 1 directory by @​dependabot[bot] in #318 ...
  • build(deps): bump the golang-org-dependencies group across 1 directory with 2 updates by @​dependabot[bot] in #316 ...
  • build(deps): bump the development-dependencies group with 10 updates by @​dependabot[bot] in #315 ...

People who contributed to this release

strfmt license terms

License

Per-module changes

enable/mongodb (0.27.4)

Miscellaneous tasks

... (truncated)

Commits
  • f4233e3 chore: prepare release v0.27.4
  • f993be0 build(deps): bump go.mongodb.org/mongo-driver/v2 (#317)
  • f468f40 build(deps): bump go.mongodb.org/mongo-driver/v2 (#318)
  • a4ec59a build(deps): bump the golang-org-dependencies group across 1 directory with 2...
  • 2df7671 build(deps): bump the development-dependencies group with 10 updates
  • aa03419 chore: prepare release v0.27.3
  • 9cf99be fix: reject a duration sum that wraps past 2^64 (#312)
  • 7d71caa doc: updated contributors file
  • a01773a build(deps): bump github.com/go-openapi/errors
  • 2c2378a build(deps): bump the other-dependencies group across 3 directories with 3 up...
  • Additional commits viewable in compare view

Updates github.com/go-openapi/validate from 1.0.0 to 1.0.1

Release notes

Sourced from github.com/go-openapi/validate's releases.

v1.0.1

1.0.1 - 2026-10-20

Full Changelog: go-openapi/validate@v1.0.0...v1.0.1

10 commits in this release.

Documentation

Miscellaneous tasks

Updates

People who contributed to this release

validate license terms

License

Commits
  • 269dfbe chore: update strfmt and golang.org dependencies (#307)
  • 16f7a05 Recursion guard (#306)
  • d16ffd7 chore(deps): bump the go-openapi-dependencies group across 1 directory with 2...
  • 9b52ade chore(deps): bump the development-dependencies group with 9 updates
  • d56dbb5 doc: updated contributors file
  • 534d81d chore(deps): bump github.com/go-openapi/jsonpointer
  • 0ba214d chore(deps): bump github.com/go-openapi/errors
  • a30278f chore(deps): bump github.com/go-openapi/testify/v2
  • ea2780b chore(deps): bump the development-dependencies group with 9 updates
  • 9865f54 chore(deps): bump the go-openapi-dependencies group with 10 updates
  • See full diff in compare view

Updates github.com/google/certificate-transparency-go from 1.3.3 to 1.4.0

Release notes

Sourced from github.com/google/certificate-transparency-go's releases.

v1.4.0

Full Changelog: google/certificate-transparency-go@v1.3.3...v1.4.0

Changelog

Sourced from github.com/google/certificate-transparency-go's changelog.

CERTIFICATE-TRANSPARENCY-GO Changelog

HEAD

  • Bump trillian to v1.8.0, and drop tracing support by @​phbnf
  • Fix tls.Unmarshal decoding a Uint24 field from the start of the buffer instead of the field's offset by @​robstradling
  • Switch Ed25519 import from deprecated golang.org/x/crypto/ed25519 to stdlib crypto/ed25519 by @​JasonPowr
  • Added --emit_proxy_headers flag to ctfe by @​mhutchinson
Commits

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.31.0 to 2.32.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.32.0

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0

Commits
  • 9b13706 Gate strict ** matching from #7412 behind strict_deep_wildcard generator ...
  • e2bc4bb chore(deps): update googleapis digest to a6f4580 (#7526)
  • 796f2c3 chore(deps): update googleapis digest to d7dd444 (#7525)
  • 4f04466 chore(deps): update golang.org/x/exp digest to f0251eb (#7524)
  • a62432a chore(deps): update golang.org/x/exp digest to 2ab7f3c (#7519)
  • 596056e chore(deps): update googleapis digest to b6efa15 (#7520)
  • 52de616 chore(deps): update googleapis digest to 0b2e1ee (#7518)
  • 14c1da7 fix(deps): update google.golang.org/genproto/googleapis/api digest to 4341edf...
  • 9b863f4 chore(deps): update googleapis digest to f5f34cc (#7514)
  • 04c1457 chore(deps): update goreleaser/goreleaser-action digest to a4f02ab (#7515)
  • Additional commits viewable in compare view

Updates github.com/sigstore/rekor from 1.5.4 to 1.5.5

Release notes

Sourced from github.com/sigstore/rekor's releases.

v1.5.5

Changelog

This release is built with Go 1.27.3 and updates the PGP dependency to no longer use the unmaintained x/crypto package.

  • 206912e3cf61ba3fed587896e10d4812411e6913 build releases w/ go 1.27.3 toolchain on golang-cross v1.27.2-0 (#3029)
  • 8ae33bde942047f3f8003a01625c577687c605d9 Replace cyberphone/json-canonicalization with encoding/json/jsontext (#3028)
  • 6da522bd9133aae992a1a725baeb4b093e447a1a Replace hashicorp/go-retryablehttp with std lib retry transport (#2933)
  • 2192dfbb5633472a97c1a8a33bb9167767fc0e32 re-implement pgp v3 signature support (#3018)
  • b7e5e99f66562fbbbba531303efe8f7278e14c17 feat: serve the API over TLS with a configurable TLS policy (#2920)
  • 37d393838e056aa397aa308ceda6f8b6498dcd30 fix broken sigv3 parsing, add tests (#2959)
  • d8bd80452e41ae5be1d792f391531ff742e8246b dsse parsing cpu/memory optimization (#2946)
  • db458f0eefd738dd4dfd0df8b451142b345716a3 ensure invalid treeIDs always return with 400 errors (#2958)
  • 9651c3f007a7afdd45f380b837f34d2e47f6b4f0 use WithCancel ctx for async tasks (#2947)
  • eee7d8d644f5713e3c1ace419425aa3ceadc46d7 Update 413 status code error handling (#2813)

Thanks for all contributors!

Changelog

Sourced from github.com/sigstore/rekor's changelog.

v1.5.5

Features

  • feat: serve the API over TLS with a configurable TLS policy (#2920)

Bug Fixes

  • re-implement pgp v3 signature support (#3018)
  • fix broken PGP sigv3 parsing, add tests (#2959)
  • ensure invalid treeIDs always return with 400 errors (#2958)
  • use WithCancel ctx for async tasks (#2947)
  • Update 413 status code error handling (#2813)

Improvements

  • Replace cyberphone/json-canonicalization with encoding/json/jsontext (#3028)
  • Replace hashicorp/go-retryablehttp with std lib retry transport (#2933)
  • Drop patch version from go directive in go.mod (#3027)
  • Bump sigstore/sigstore to v1.11, bump min Go version to 1.27, modernize code (#2992)
  • bump go-openapi and mysql driver (#2985)
  • remove gocovmerge for go tool cover (#2963)
  • build releases w/ go 1.27.0 toolchain (#2960)
  • dsse parsing cpu/memory optimization (#2946)
  • numerous upgraded dependencies
  • builds use go 1.27 (including JSON, gc improvements)

Contributors

  • Anitha Natarajan
  • Bob Callaway
  • Hayden
  • Radoslav Dimitrov
  • Stef Graces
Commits
  • 206912e build releases w/ go 1.27.3 toolchain on golang-cross v1.27.2-0 (#3029)
  • be7483f add changelog for v1.5.5 (#2961)
  • 8ae33bd Replace cyberphone/json-canonicalization with encoding/json/jsontext (#3028)
  • 6da522b Replace hashicorp/go-retryablehttp with std lib retry transport (#2933)
  • 2192dfb re-implement pgp v3 signature support (#3018)
  • 7a6bb48 build(deps): Bump github.com/go-chi/chi/v5 from 5.3.2 to 5.5.0 (#3022)
  • ec44788 build(deps): Bump golang.org/x/net from 0.59.0 to 0.61.0 (#3023)
  • 7582306 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.8.0 to 2.9.0 (#3024)
  • 504f816 build(deps): Bump cloud.google.com/go/profiler from 0.6.0 to 0.7.0 (#3025)
  • fb3f514 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#3020)
  • Additional commits viewable in compare view

Updates github.com/sigstore/rekor-tiles/v2 from 2.3.0 to 2.4.0

Release notes

Sourced from github.com/sigstore/rekor-tiles/v2's releases.

v2.4.0

What's Changed

v2.4.0 implements a new leaf type and adds support for ML-DSA signatures, as outlined in https://blog.sigstore.dev/pqc-sigstore/. This feature is very much experimental and should not be used in a production environment yet.

Full Changelog: sigstore/rekor-tiles@v2.3.0...v2.4.0

Commits
  • 16bc64c Bump Go builder to 1.27.3, update Distroless base image (#1042)
  • 2a738c7 Base64-encode all values, for both credential formats (#1041)
  • 30b004b Bump the go-minor-patch-updates group across 1 directory with 10 updates (#1040)
  • 04dccd2 Add GCP backend support for identity log (#1035)
  • 7888cca Support ML-DSA-44 for checkpoint signature (#879)
  • a7ec779 Bump the docker-updates group across 1 directory with 3 updates (#1037)
  • 7d81044 Bump the actions-minor-patch-updates group with 3 updates (#1039)

@dependabot
Bump the all group across 1 directory with 24 updates
ae0dd58 
Bumps the all group with 24 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `1.3.0` | `1.4.0` |
| [github.com/digitorus/pkcs7](https://github.com/digitorus/pkcs7) | `0.0.0-20230818184609-3a137a874352` | `0.0.0-20260821105541-05f79448fa77` |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `1.0.2` | `1.0.3` |
| [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) | `0.33.3` | `0.33.4` |
| [github.com/go-openapi/runtime/server-middleware](https://github.com/go-openapi/runtime) | `0.33.3` | `0.33.4` |
| [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) | `0.27.2` | `0.27.4` |
| [github.com/go-openapi/validate](https://github.com/go-openapi/validate) | `1.0.0` | `1.0.1` |
| [github.com/google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) | `1.3.3` | `1.4.0` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.31.0` | `2.32.0` |
| [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.5.4` | `1.5.5` |
| [github.com/sigstore/rekor-tiles/v2](https://github.com/sigstore/rekor-tiles) | `2.3.0` | `2.4.0` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.11.0` | `1.11.1` |
| [github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority) | `2.1.4` | `2.2.0` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.10` | `1.1.0` |
| [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) | `3.0.5` | `3.0.6` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.41.0` | `0.42.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.59.0` | `0.62.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.50.0` | `0.52.0` |
| [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20260928230214-8a89bd6388cc` | `0.0.0-20261012220534-4341edf3f941` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260928230214-8a89bd6388cc` | `0.0.0-20261005182115-fad411399dd8` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.84.0` | `1.85.0` |



Updates `github.com/sigstore/sigstore-go` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](sigstore/sigstore-go@v1.3.0...v1.4.0)

Updates `github.com/digitorus/pkcs7` from 0.0.0-20230818184609-3a137a874352 to 0.0.0-20260821105541-05f79448fa77
- [Commits](https://github.com/digitorus/pkcs7/commits)

Updates `github.com/go-openapi/jsonreference` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/go-openapi/jsonreference/releases)
- [Commits](go-openapi/jsonreference@v1.0.2...v1.0.3)

Updates `github.com/go-openapi/runtime` from 0.33.3 to 0.33.4
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](go-openapi/runtime@v0.33.3...v0.33.4)

Updates `github.com/go-openapi/runtime/server-middleware` from 0.33.3 to 0.33.4
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](go-openapi/runtime@v0.33.3...v0.33.4)

Updates `github.com/go-openapi/strfmt` from 0.27.2 to 0.27.4
- [Release notes](https://github.com/go-openapi/strfmt/releases)
- [Commits](go-openapi/strfmt@v0.27.2...v0.27.4)

Updates `github.com/go-openapi/validate` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/go-openapi/validate/releases)
- [Commits](go-openapi/validate@v1.0.0...v1.0.1)

Updates `github.com/google/certificate-transparency-go` from 1.3.3 to 1.4.0
- [Release notes](https://github.com/google/certificate-transparency-go/releases)
- [Changelog](https://github.com/google/certificate-transparency-go/blob/master/CHANGELOG.md)
- [Commits](google/certificate-transparency-go@v1.3.3...v1.4.0)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.31.0 to 2.32.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.31.0...v2.32.0)

Updates `github.com/sigstore/rekor` from 1.5.4 to 1.5.5
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](sigstore/rekor@v1.5.4...v1.5.5)

Updates `github.com/sigstore/rekor-tiles/v2` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/sigstore/rekor-tiles/releases)
- [Changelog](https://github.com/sigstore/rekor-tiles/blob/main/RELEASE.md)
- [Commits](sigstore/rekor-tiles@v2.3.0...v2.4.0)

Updates `github.com/sigstore/sigstore` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.11.0...v1.11.1)

Updates `github.com/sigstore/timestamp-authority/v2` from 2.1.4 to 2.2.0
- [Release notes](https://github.com/sigstore/timestamp-authority/releases)
- [Changelog](https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md)
- [Commits](sigstore/timestamp-authority@v2.1.4...v2.2.0)

Updates `github.com/spf13/pflag` from 1.0.10 to 1.1.0
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.10...v1.1.0)

Updates `go.yaml.in/yaml/v3` from 3.0.5 to 3.0.6
- [Release notes](https://github.com/yaml/go-yaml/releases)
- [Commits](yaml/go-yaml@v3.0.5...v3.0.6)

Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0
- [Commits](golang/crypto@v0.57.0...v0.58.0)

Updates `golang.org/x/mod` from 0.41.0 to 0.42.0
- [Commits](golang/mod@v0.41.0...v0.42.0)

Updates `golang.org/x/net` from 0.59.0 to 0.62.0
- [Commits](golang/net@v0.59.0...v0.62.0)

Updates `golang.org/x/term` from 0.46.0 to 0.47.0
- [Commits](golang/term@v0.46.0...v0.47.0)

Updates `golang.org/x/text` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.42.0...v0.43.0)

Updates `golang.org/x/tools` from 0.50.0 to 0.52.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.50.0...v0.52.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261012220534-4341edf3f941
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260928230214-8a89bd6388cc to 0.0.0-20261005182115-fad411399dd8
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.84.0 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.84.0...v1.85.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/digitorus/pkcs7
  dependency-version: 0.0.0-20260821105541-05f79448fa77
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 1.0.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/runtime
  dependency-version: 0.33.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/runtime/server-middleware
  dependency-version: 0.33.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/strfmt
  dependency-version: 0.27.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-openapi/validate
  dependency-version: 1.0.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/google/certificate-transparency-go
  dependency-version: 1.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/sigstore/rekor
  dependency-version: 1.5.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/rekor-tiles/v2
  dependency-version: 2.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.11.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/timestamp-authority/v2
  dependency-version: 2.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: golang.org/x/crypto
  dependency-version: 0.58.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/mod
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/net
  dependency-version: 0.62.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/term
  dependency-version: 0.47.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/tools
  dependency-version: 0.52.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20261012220534-4341edf3f941
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20261005182115-fad411399dd8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: google.golang.org/grpc
  dependency-version: 1.85.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from a team as code owners November 8, 2026 16:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants