build(deps): Bump the go group with 16 updates #1732

dependabot · 2025-01-13T10:04:41Z

Bumps the go group with 16 updates:

Package	From	To
cloud.google.com/go/kms	`1.20.4`	`1.20.5`
cloud.google.com/go/storage	`1.49.0`	`1.50.0`
github.com/Azure/azure-sdk-for-go/sdk/azcore	`1.16.0`	`1.17.0`
github.com/ProtonMail/go-crypto	`1.1.3`	`1.1.4`
github.com/aws/aws-sdk-go-v2	`1.32.7`	`1.32.8`
github.com/aws/aws-sdk-go-v2/config	`1.28.7`	`1.28.10`
github.com/aws/aws-sdk-go-v2/credentials	`1.17.48`	`1.17.51`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.17.45`	`1.17.48`
github.com/aws/aws-sdk-go-v2/service/kms	`1.37.8`	`1.37.10`
github.com/aws/aws-sdk-go-v2/service/s3	`1.72.0`	`1.72.2`
github.com/aws/aws-sdk-go-v2/service/sts	`1.33.3`	`1.33.6`
golang.org/x/net	`0.33.0`	`0.34.0`
google.golang.org/api	`0.214.0`	`0.216.0`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20241223144023-3abc09e42ca8`	`0.0.0-20250102185135-69823020774d`
google.golang.org/grpc	`1.69.2`	`1.69.4`
google.golang.org/protobuf	`1.36.1`	`1.36.2`

Updates cloud.google.com/go/kms from 1.20.4 to 1.20.5

Release notes

Sourced from cloud.google.com/go/kms's releases.

kms: v1.20.5

1.20.5 (2025-01-08)

Documentation

kms: Modify enum comment (2e4feb9)

Commits

0ddf338 chore: release main (#11374)
b9d92ad chore(main): release auth 0.14.0 (#11325)
a1bc682 chore: fix automation for ai release (#11417)
56d704e fix(storage): return the appropriate error for method not supported (#11416)
d851c5d feat(cloudquotas): new client(s) (#11406)
5b04931 feat(ai): new client(s) (#11407)
24b086c test(storage): run metrics test only in grpc (#11415)
54bfc32 fix(storage): add mutex around uses of mrd variables (#11405)
893d27a feat(oracledatabase): A new value ACCOUNT_SUSPENDED is added to enum `State...
7abfaaa test(bigtable): Pass reverse flag from proxy to library (#11395)
Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.49.0 to 1.50.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.50.0

1.50.0 (2025-01-09)

Features

storage/internal: Add new appendable Object to BidiWrite API (2e4feb9)

storage/internal: Add new preview BidiReadObject API (2e4feb9)

storage: Add support for gRPC bi-directional multi-range reads. This API is in private preview and not generally and is not yet available for general use. (#11377) (b4d86a5)

storage: Add support for ReadHandle, a gRPC feature that allows for accelerated resumption of streams when one is interrupted. ReadHandle requires the bi-directional read API, which is in private preview and is not yet available for general use. (#11377) (b4d86a5)

storage: Support appendable semantics for writes in gRPC. This API is in preview. (#11377) (b4d86a5)

storage: Refactor gRPC writer flow (#11377) (b4d86a5)

Bug Fixes

storage: Add mutex around uses of mrd variables (#11405) (54bfc32)

storage: Return the appropriate error for method not supported (#11416) (56d704e)

Documentation

storage/internal: Add IAM information to RPC comments for reference documentation (2e4feb9)

storage: Add preview comment to NewMultiRangeDownloader (#11420) (4ec1d66)

Commits

22ab199 chore(main): release spanner 1.50.0 (#8484)
a79e693 feat(auth): add idtoken package (#8580)
5feb3ea chore(alloydb/connectors): add config to generate apiv1 (#8636)
57fc1a6 feat(networkconnectivity): add Network Connectivity Center APIs related to VP...
38b957d chore(main): release bigtable 1.20.0 (#8243)
69a8347 feat(auth): add grpctransport package (#8625)
852a230 chore(auth): cleanup some small todos (#8628)
dd0b039 chore: fix publish job (#8627)
2b5a2b5 chore(bigtable): switch to google.golang.org/protobuf (#8626)
6933c5a feat(auth/oauth2adapt): adds a new module to translate types (#8595)
Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.16.0 to 1.17.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.17.0

1.17.0 (2025-01-07)

Features Added

Added field OperationLocationResultPath to runtime.NewPollerOptions[T] for LROs that use the Operation-Location pattern.

Support encoding.TextMarshaler and encoding.TextUnmarshaler interfaces in arm.ResourceID.

Commits

525870f Prepare azcore v1.17.0 for release (#23907)
52b9e5f Fix incorrect variable name (#23903)
8feeabd Added BlobProperties field to BlobPrefix in listblob response (#23801)
bcb396b automation support data plan (#23879)
8c76043 [Release] sdk/resourcemanager/cosmos/armcosmos/4.0.0-beta.2 (#23863)
933ca99 documentation correction for create container error (#23888)
ba0c64b [skip ci]
d9d44c0 [Release] sdk/resourcemanager/deviceregistry/armdeviceregistry/0.2.0 generati...
f32543f Add Documentation for MPG SDK generation (#23837)
310191a bump to @azure-tools/typespec-go 0.3.5 (#23881)
Additional commits viewable in compare view

Updates github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.1.4

What's Changed

Emit armor headers in sorted order by @andrewgdotcom in ProtonMail/go-crypto#255

Reduce memory usage when AEAD en/decrypting large messages by @twiss in ProtonMail/go-crypto#259

Update artifact actions to v4 by @twiss in ProtonMail/go-crypto#260

Full Changelog: ProtonMail/go-crypto@v1.1.3...v1.1.4

Release v1.1.4-proton

What's Changed

This release is v1.1.4 with support for the following non-standardized features:

Presistent symmetric keys draft-ietf-openpgp-persistent-symmetric-keys-00

Automatic forwarding draft-wussler-openpgp-forwarding-00

Post-quantum algorithms draft-ietf-openpgp-pqc

Commits

3de0301 Update artifact actions to v4 (#260)
be3aef0 Merge pull request #259 from ProtonMail/less-memory-large-msgs
1fd5ec8 Add tests for reusing buffer in OCB en/decryption
df3ee02 Buffer decrypted bytes more efficiently
04cfaf2 Reuse plaintext slice for ciphertext when encrypting
fee7824 Reuse ciphertext slice for plaintext when decrypting
6fa7f91 Preallocate the chunk size rather than buffering
add07bd Don't allocate the nonce for each chunk
b01f065 Emit armor headers in deterministically sorted order (#255)
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.32.7 to 1.32.8

Commits

31c2f3f Release 2025-01-09
ed70e6b Regenerated Clients
5aef5b0 Update partitions file
6e21e3f Update endpoints model
9017824 Update API model
ebb7c02 retry net.ErrClosed by default (#2949)
19d2a28 Release 2025-01-08
e153a59 Regenerated Clients
349cb94 Update endpoints model
740de30 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.28.7 to 1.28.10

Commits

7a7d202 Release 2025-01-10
fdaa7e2 Regenerated Clients
52aba54 Update endpoints model
7263a7a Update API model
31c2f3f Release 2025-01-09
ed70e6b Regenerated Clients
5aef5b0 Update partitions file
6e21e3f Update endpoints model
9017824 Update API model
ebb7c02 retry net.ErrClosed by default (#2949)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.48 to 1.17.51

Commits

7a7d202 Release 2025-01-10
fdaa7e2 Regenerated Clients
52aba54 Update endpoints model
7263a7a Update API model
31c2f3f Release 2025-01-09
ed70e6b Regenerated Clients
5aef5b0 Update partitions file
6e21e3f Update endpoints model
9017824 Update API model
ebb7c02 retry net.ErrClosed by default (#2949)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.45 to 1.17.48

Commits

5a96470 Release 2024-12-19
653aa80 Regenerated Clients
d02b239 Update endpoints model
698d709 Update API model
885de40 Fix improper use of Printf-style functions (#2934)
858298a Release 2024-12-18
f58264a Regenerated Clients
df31082 Update endpoints model
346690e Update API model
4515454 Release 2024-12-17
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.37.8 to 1.37.10

Commits

31c2f3f Release 2025-01-09
ed70e6b Regenerated Clients
5aef5b0 Update partitions file
6e21e3f Update endpoints model
9017824 Update API model
ebb7c02 retry net.ErrClosed by default (#2949)
19d2a28 Release 2025-01-08
e153a59 Regenerated Clients
349cb94 Update endpoints model
740de30 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.72.0 to 1.72.2

Commits

31c2f3f Release 2025-01-09
ed70e6b Regenerated Clients
5aef5b0 Update partitions file
6e21e3f Update endpoints model
9017824 Update API model
ebb7c02 retry net.ErrClosed by default (#2949)
19d2a28 Release 2025-01-08
e153a59 Regenerated Clients
349cb94 Update endpoints model
740de30 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.33.3 to 1.33.6

Commits

7a7d202 Release 2025-01-10
fdaa7e2 Regenerated Clients
52aba54 Update endpoints model
7263a7a Update API model
31c2f3f Release 2025-01-09
ed70e6b Regenerated Clients
5aef5b0 Update partitions file
6e21e3f Update endpoints model
9017824 Update API model
ebb7c02 retry net.ErrClosed by default (#2949)
Additional commits viewable in compare view

Updates golang.org/x/net from 0.33.0 to 0.34.0

Commits

8da7ed1 go.mod: update golang.org/x dependencies
2124140 all: make function and struct comments match the names
e9d95ba http2: do not surface errors from a conn's idle timer expiring
c2be992 quic: remember which remote connection IDs have been retired
See full diff in compare view

Updates google.golang.org/api from 0.214.0 to 0.216.0

Release notes

Sourced from google.golang.org/api's releases.

v0.216.0

0.216.0 (2025-01-09)

Features

all: Auto-regenerate discovery clients (#2946) (fe72ad1)

all: Auto-regenerate discovery clients (#2947) (0386e0f)

all: Auto-regenerate discovery clients (#2948) (a04a14b)

all: Auto-regenerate discovery clients (#2950) (7ad3a5f)

all: Auto-regenerate discovery clients (#2951) (d6e4f8d)

all: Auto-regenerate discovery clients (#2953) (01a17b3)

all: Auto-regenerate discovery clients (#2954) (d4f41c6)

v0.215.0

0.215.0 (2025-01-01)

Features

all: Auto-regenerate discovery clients (#2933) (509aecd)

all: Auto-regenerate discovery clients (#2935) (b89d85a)

all: Auto-regenerate discovery clients (#2936) (c1849c7)

all: Auto-regenerate discovery clients (#2942) (d20ddf3)

Changelog

Sourced from google.golang.org/api's changelog.

0.216.0 (2025-01-09)

Features

all: Auto-regenerate discovery clients (#2946) (fe72ad1)

all: Auto-regenerate discovery clients (#2947) (0386e0f)

all: Auto-regenerate discovery clients (#2948) (a04a14b)

all: Auto-regenerate discovery clients (#2950) (7ad3a5f)

all: Auto-regenerate discovery clients (#2951) (d6e4f8d)

all: Auto-regenerate discovery clients (#2953) (01a17b3)

all: Auto-regenerate discovery clients (#2954) (d4f41c6)

0.215.0 (2025-01-01)

Features

all: Auto-regenerate discovery clients (#2933) (509aecd)

all: Auto-regenerate discovery clients (#2935) (b89d85a)

all: Auto-regenerate discovery clients (#2936) (c1849c7)

all: Auto-regenerate discovery clients (#2942) (d20ddf3)

Commits

91e61ae chore(main): release 0.216.0 (#2952)
d4f41c6 feat(all): auto-regenerate discovery clients (#2954)
01a17b3 feat(all): auto-regenerate discovery clients (#2953)
d6e4f8d feat(all): auto-regenerate discovery clients (#2951)
2ee9da3 chore(all): update all (#2949)
7ad3a5f feat(all): auto-regenerate discovery clients (#2950)
a04a14b feat(all): auto-regenerate discovery clients (#2948)
0386e0f feat(all): auto-regenerate discovery clients (#2947)
fe72ad1 feat(all): auto-regenerate discovery clients (#2946)
139725e chore: bump min Go version to 1.22 (#2944)
Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20241223144023-3abc09e42ca8 to 0.0.0-20250102185135-69823020774d

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.69.2 to 1.69.4

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.69.4

Bug Fixes

rbac: fix support for :path header matchers, which would previously never successfully match (#7965).

Documentation

examples/features/csm_observability: update example client and server to use the helloworld service instead of echo service (#7945).

Release 1.69.3

Bug Fixes

rbac: fix support for :path header matchers, which would previously never successfully match (#7965).

Documentation

examples/features/csm_observability: update example client and server to use the helloworld service instead of echo service (#7945).

Commits

4103cfc Change version to 1.69.4 (#8005)
cf6ddaa Change version to 1.69.4-dev (#8001)
94a0c2c Change version to 1.69.3 (#8000)
ec41560 Cherry pick #7965 #7945 to v1.69.x (#7996)
3b328ba Change version to 1.69.3-dev (#7948)
See full diff in compare view

Updates google.golang.org/protobuf from 1.36.1 to 1.36.2

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 16 updates: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) | `1.20.4` | `1.20.5` | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.49.0` | `1.50.0` | | [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.16.0` | `1.17.0` | | [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.1.3` | `1.1.4` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.32.7` | `1.32.8` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.28.7` | `1.28.10` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.17.48` | `1.17.51` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.45` | `1.17.48` | | [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.37.8` | `1.37.10` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.72.0` | `1.72.2` | | [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.33.3` | `1.33.6` | | [golang.org/x/net](https://github.com/golang/net) | `0.33.0` | `0.34.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.214.0` | `0.216.0` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20241223144023-3abc09e42ca8` | `0.0.0-20250102185135-69823020774d` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.69.2` | `1.69.4` | | google.golang.org/protobuf | `1.36.1` | `1.36.2` | Updates `cloud.google.com/go/kms` from 1.20.4 to 1.20.5 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@kms/v1.20.4...kms/v1.20.5) Updates `cloud.google.com/go/storage` from 1.49.0 to 1.50.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@spanner/v1.49.0...spanner/v1.50.0) Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.16.0 to 1.17.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.16.0...sdk/azcore/v1.17.0) Updates `github.com/ProtonMail/go-crypto` from 1.1.3 to 1.1.4 - [Release notes](https://github.com/ProtonMail/go-crypto/releases) - [Commits](ProtonMail/go-crypto@v1.1.3...v1.1.4) Updates `github.com/aws/aws-sdk-go-v2` from 1.32.7 to 1.32.8 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@v1.32.7...v1.32.8) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.28.7 to 1.28.10 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@config/v1.28.7...config/v1.28.10) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.48 to 1.17.51 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.48...credentials/v1.17.51) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.45 to 1.17.48 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.45...credentials/v1.17.48) Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.37.8 to 1.37.10 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/kms/v1.37.8...service/kms/v1.37.10) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.72.0 to 1.72.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.72.0...service/s3/v1.72.2) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.33.3 to 1.33.6 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/ivs/v1.33.3...service/sts/v1.33.6) Updates `golang.org/x/net` from 0.33.0 to 0.34.0 - [Commits](golang/net@v0.33.0...v0.34.0) Updates `google.golang.org/api` from 0.214.0 to 0.216.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.214.0...v0.216.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20241223144023-3abc09e42ca8 to 0.0.0-20250102185135-69823020774d - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.69.2 to 1.69.4 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.69.2...v1.69.4) Updates `google.golang.org/protobuf` from 1.36.1 to 1.36.2 --- updated-dependencies: - dependency-name: cloud.google.com/go/kms dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: cloud.google.com/go/storage dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/ProtonMail/go-crypto dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/kms dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <[email protected]>

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [getsops/sops](https://github.com/getsops/sops) | patch | `v3.9.3` -> `v3.9.4` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>getsops/sops (getsops/sops)</summary> ### [`v3.9.4`](https://github.com/getsops/sops/releases/tag/v3.9.4) [Compare Source](getsops/sops@v3.9.3...v3.9.4) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.linux.amd64 ### Move the binary in to your PATH mv sops-v3.9.4.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.9.4.checksums.txt \ --certificate sops-v3.9.4.checksums.pem \ --signature sops-v3.9.4.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.9.4.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.9.4.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact <artifact> \ --provenance-path sops-v3.9.4.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.9.4 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.9.4` - `ghcr.io/getsops/sops:v3.9.4-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.9.4` - `quay.io/getsops/sops:v3.9.4-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.9.4 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`. #### What's Changed - build(deps): Bump the go group with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1727 - build(deps): Bump tempfile from 3.14.0 to 3.15.0 in /functional-tests in the rust group by [@dependabot](https://github.com/dependabot) in getsops/sops#1728 - build(deps): Bump the go group with 16 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1732 - build(deps): Bump the ci group with 3 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1730 - build(deps): Bump serde_json from 1.0.134 to 1.0.135 in /functional-tests in the rust group by [@dependabot](https://github.com/dependabot) in getsops/sops#1731 - build(deps): Bump the go group with 12 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1734 - build(deps): Bump serde_json from 1.0.135 to 1.0.137 in /functional-tests in the rust group by [@dependabot](https://github.com/dependabot) in getsops/sops#1735 - Fix ToString for AWS KMS to include role, context, and profile by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1733 - build(deps): Bump the ci group with 3 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1738 - build(deps): Bump the go group with 6 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1739 - Release 3.9.4 by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1740 **Full Changelog**: getsops/sops@v3.9.3...v3.9.4 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

dependabot bot added the dependencies Pull requests that update a dependency file label Jan 13, 2025

felixfontein approved these changes Jan 13, 2025

View reviewed changes

felixfontein merged commit 9efc96d into main Jan 13, 2025
15 checks passed

felixfontein deleted the dependabot/go_modules/go-52f760f5e3 branch January 13, 2025 16:09

BrewTestBot mentioned this pull request Jan 25, 2025

sops 3.9.4 Homebrew/homebrew-core#205509

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump the go group with 16 updates #1732

build(deps): Bump the go group with 16 updates #1732

dependabot bot commented on behalf of github Jan 13, 2025

build(deps): Bump the go group with 16 updates #1732

build(deps): Bump the go group with 16 updates #1732

Conversation

dependabot bot commented on behalf of github Jan 13, 2025

kms: v1.20.5

1.20.5 (2025-01-08)

Documentation

storage: v1.50.0

1.50.0 (2025-01-09)

Features

Bug Fixes

Documentation

sdk/azcore/v1.17.0

1.17.0 (2025-01-07)

Features Added

Release v1.1.4

What's Changed

Release v1.1.4-proton

What's Changed

v0.216.0

0.216.0 (2025-01-09)

Features

v0.215.0

0.215.0 (2025-01-01)

Features

0.216.0 (2025-01-09)

Features

0.215.0 (2025-01-01)

Features

Release 1.69.4

Bug Fixes

Documentation

Release 1.69.3

Bug Fixes

Documentation