Skip to content

Bump the gomod group across 1 directory with 19 updates - #4389

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-1546081051
Open

Bump the gomod group across 1 directory with 19 updates#4389
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-1546081051

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 13 updates in the / directory:

Package From To
code.cloudfoundry.org/bytefmt 0.74.0 0.85.0
github.com/aws/aws-sdk-go-v2/config 1.32.18 1.32.36
github.com/aws/aws-sdk-go-v2/service/ecr 1.57.2 1.60.5
github.com/buildpacks/pack 0.40.6 0.40.9
github.com/google/go-containerregistry 0.21.6 0.21.9
github.com/pivotal/kpack 0.17.1 0.18.0
k8s.io/api 0.36.1 0.36.3
k8s.io/client-go 0.36.1 0.36.3
k8s.io/metrics 0.36.1 0.36.3
k8s.io/pod-security-admission 0.36.1 0.36.3
sigs.k8s.io/gateway-api 1.5.1 1.6.1
github.com/sirupsen/logrus 1.9.4 1.10.0
k8s.io/apiextensions-apiserver 0.36.1 0.36.3

Updates code.cloudfoundry.org/bytefmt from 0.74.0 to 0.85.0

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.18 to 1.32.36

Commits
  • a14f5f1 Release 2026-08-10
  • 339f0b6 Regenerated Clients
  • 0978e3d Update API model
  • 3cc614d Fix codegen mp (#3508)
  • 1434b18 generate response snapshots for json (#3507)
  • ad58f77 Checkout smithy-go on PRs at the commit pointed out by SMITHY_GO_CODEGEN_VERS...
  • c002860 feat: move close-body, logger, and service-metadata work out of the middlewar...
  • f152336 Release 2026-08-07
  • 37d88d7 Regenerated Clients
  • c54b278 Update endpoints model
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.57.2 to 1.60.5

Commits
  • a14f5f1 Release 2026-08-10
  • 339f0b6 Regenerated Clients
  • 0978e3d Update API model
  • 3cc614d Fix codegen mp (#3508)
  • 1434b18 generate response snapshots for json (#3507)
  • ad58f77 Checkout smithy-go on PRs at the commit pointed out by SMITHY_GO_CODEGEN_VERS...
  • c002860 feat: move close-body, logger, and service-metadata work out of the middlewar...
  • f152336 Release 2026-08-07
  • 37d88d7 Regenerated Clients
  • c54b278 Update endpoints model
  • Additional commits viewable in compare view

Updates github.com/buildpacks/pack from 0.40.6 to 0.40.9

Release notes

Sourced from github.com/buildpacks/pack's releases.

pack v0.40.9

Prerequisites

  • A container runtime such as Docker or podman must be available to execute builds.

Install

For instructions on installing pack, see our installation docs.

Run

Run the command pack.

You should see the following output

CLI for building apps using Cloud Native Buildpacks

Usage:
pack [command]


Available Commands:
build                 Generate app image from source code
builder               Interact with builders
buildpack             Interact with buildpacks
extension             Interact with extensions
config                Interact with your local pack config file
inspect               Show information about a built app image
stack                 (deprecated) Interact with stacks
rebase                Rebase app image with latest run image
sbom                  Interact with SBoM
completion            Outputs completion script location
report                Display useful information for reporting an issue
version               Show current 'pack' version
help                  Help about any command


Flags:
--force-color   Force color output
-h, --help          Help for 'pack'
--no-color      Disable color output
-q, --quiet         Show less output
--timestamps    Enable timestamps in output
-v, --verbose       Show more output
--version       Show current 'pack' version


Use "pack [command] --help" for more information about a command.

Info

... (truncated)

Commits
  • 8210eb1 build(deps): bump go-git, otel and klauspost/compress to fix CVEs (#2666)
  • 3253355 build(deps): bump Go to 1.25.12 and safe x/* deps to fix CVEs (#2653)
  • a469ae3 build(deps): bump safe go-dependencies (kaniko, tcell, gomega, x/mod) (#2647)
  • 02d2e69 Add license scan report and status (#2638)
  • 2df3b8c chore: suppress unreachable docker daemon CVEs in grype config (#2644)
  • 7f2f74e build(deps): bump Go directive to 1.25.11 for stdlib security fixes (#2642)
  • 5185a57 build(deps): bump x/crypto, x/net, and go-git for security fixes (#2641)
  • e0e21cd fix(buildpack): fix malformed yank PR template body (#2631)
  • e7ca39a chore: remove direct dependency on github.com/docker/docker (#2617)
  • a7f39ca Suggest heroku/builder:26 instead of heroku/builder:24 (#2611)
  • See full diff in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits
  • 96a9aba Fix lint
  • 51c6302 Better implementation of pointer recursion checking
  • c667114 funcr: Handle and test recursive values
  • f7ffadb Add benchmark for pointer args
  • e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
  • 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
  • 0b40896 build(deps): bump github/codeql-action/upload-sarif
  • 77f671b Bump to Go 1.26
  • cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
  • 3832a11 build(deps): bump github/codeql-action/upload-sarif
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.6 to 0.21.9

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.9

What's Changed

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

v0.21.7

What's Changed

... (truncated)

Commits
  • 7b32099 build(deps): bump the actions group with 3 updates (#2398)
  • 2a4447d fix: remove '.' from unsafe path prefixes (#2400)
  • 43cc3e8 fix: prevent data race on scope refreshes within remote.writer (#2396)
  • 7775aab actions: pin slsa generator version following linter exception (#2395)
  • 2ea098f Bump go version to 1.26.5 (#2388)
  • ec2e586 actions: reformat ALL actions (#2386)
  • ab819b6 actions: fix unformatted action (#2385)
  • eed9a20 actions: update actions to be pinned by hash (#2384)
  • 8a97709 build(deps): bump github.com/moby/moby/client (#2380)
  • d04bf7d tarball: use correct file extension for zstd/uncompressed (#2382)
  • Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.29.0 to 2.32.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.32.1

2.32.1

Fixes

  • Defer AfterAll until repeated spec completes [e647b3b]

v2.32.0

2.32.0

-fd generate RSpec-style documentation output. Thank @​woodie ! --sleep-on-failure pauses a failed spec before teardown. Thanks @​qinqon !

v2.31.0

2.31.0

Add a bunch of Claude Skills via the marketplace:

/plugin marketplace add onsi/ginkgo
/plugin install ginkgo@ginkgo

v2.30.0

2.30.0

Features

Ginkgo now allows extentions/global.Reset to support running multiple suites from within a single process. This may take some massaging on your part (see 1672) but can dramatically speed up codebases with O(hundreds) of test suites.

Thanks @​lawrencejones !

Fixes

  • Fix nested --github-output group for progress report nested inside timeline [4f62d7a]
Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.32.1

Fixes

  • Defer AfterAll until repeated spec completes [e647b3b]

2.32.0

-fd generate RSpec-style documentation output. Thank @​woodie ! --sleep-on-failure pauses a failed spec before teardown. Thanks @​qinqon !

2.31.0

Add a bunch of Claude Skills via the marketplace:

/plugin marketplace add onsi/ginkgo
/plugin install ginkgo@ginkgo

2.30.0

Features

Ginkgo now allows extentions/global.Reset to support running multiple suites from within a single process. This may take some massaging on your part (see 1672) but can dramatically speed up codebases with O(hundreds) of test suites.

Thanks @​lawrencejones !

Fixes

  • Fix nested --github-output group for progress report nested inside timeline [4f62d7a]
Commits
  • f2d0f65 v2.32.1
  • e647b3b Defer AfterAll until repeated spec completes
  • 09bbf5f Properly Punctuate Possessive Pronoun "Its"
  • 9ff1646 v2.32.0
  • 0491f2a Make -fd exclusive of -p/-procs and -randomize-all
  • 334f74a respect SilenceSkips in fd mode, add test
  • 21047ce No need for a new method.
  • 7d281e1 Break out to two methods.
  • 5313727 More integration, fewer changes.
  • b83f524 Fewer new methods.
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.41.0 to 1.42.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

Commits

Updates github.com/pivotal/kpack from 0.17.1 to 0.18.0

Release notes

Sourced from github.com/pivotal/kpack's releases.

kpack v0.18.0

What's Changed

New Contributors

sha256 checksum:

cde8b7df8d31d6a5758ec4880eec45009f17811baf3df5a29b76a144fe200e69  release-0.18.0.yaml

Full Changelog: buildpacks-community/kpack@v0.17.2...v0.18.0

kpack v0.17.2

Full Changelog:

What's Changed

New Contributors

Full Changelog: buildpacks-community/kpack@v0.17.1...v0.17.2

sha256 checksum:

6e3ed15d7a4fa4dec8fc95c7ece023c9951724b840a9c5cb536cf662c0bbdf8d  release-0.17.2.yaml
Commits
  • cfa94ca fix: resolve images for the current architecture in the registry client (#1951)
  • 7245b65 feat: Support running kpack on arm64 clusters (#1949)
  • bfa95d7 reimplement subpath filtering experiment (#1944)
  • c50f129 build: publish genuine multi-arch (amd64+arm64) images via ko-direct build (#...
  • d9fc433 Reject SecretKeyRef in Build/Image env validation (#1945)
  • 6be46df Document the shallow clone resolver feature flag (#1943)
  • a4eb48f Implement subPath filtering (#1936)
  • 156854a Update codegen (#1939)
  • 5e37296 Bump dependencies (#1931)
  • c236024 Bump github.com/secure-systems-lab/go-securesystemslib from 0.9.0 to 0.9.1 (#...
  • Additional commits viewable in compare view

Updates go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5

Commits
  • e16c7af Remove empty go.sum file
  • 6abcd01 Fix unhandled nil-errors in tests
  • 9481db7 Remove suite_test.go and gopkg.in/check.v1
  • 485f5fc Use standard testing library for limit_test.go
  • 3e00046 Use standard testing library for node_test.go
  • f612058 Use standard testing library for decode_test.go
  • 078f958 Use standard testing library encode_test.go
  • 3847ac0 [v3] backport CodeQL workflow
  • 1666663 Revert incorrect gofmt changes
  • 73290cb Retract v3 tags that cannot be installed
  • See full diff in compare view

Updates golang.org/x/text from 0.37.0 to 0.40.0

Commits
  • 724af9c go.mod: update golang.org/x dependencies
  • bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
  • b326f3d go.mod: update golang.org/x dependencies
  • 5ae8e57 unicode/norm: avoid infinite loop on invalid input
  • 0dc94a2 all: fix some comments
  • f4bb632 go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates k8s.io/api from 0.36.1 to 0.36.3

Commits
  • 3fde3c4 Update dependencies to v0.36.3 tag
  • 53c47b9 Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/apimachinery from 0.36.1 to 0.36.3

Commits
  • 40bf4b2 Update dependencies to v0.36.3 tag
  • 34d46be Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 66a3724 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • 2ec982d Merge pull request #139508lalitc375/automated-cherry-pick-of-#139480
  • 6a88102 Fix wrong marking of errors
  • See full diff in compare view

Updates k8s.io/client-go from 0.36.1 to 0.36.3

Commits
  • 44a8af2 Update dependencies to v0.36.3 tag
  • f501ada Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • a43e1d7 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/metrics from 0.36.1 to 0.36.3

Commits
  • f1e88ff Update dependencies to v0.36.3 tag
  • 109dd7a Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • 3f46b26 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates k8s.io/pod-security-admission from 0.36.1 to 0.36.3

Commits
  • be7583b Update dependencies to v0.36.3 tag
  • 77a614e Merge pull request #140296 from jpbetz/cherry-pick-smd-306-revert
  • a0a42a0 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  • See full diff in compare view

Updates sigs.k8s.io/gateway-api from 1.5.1 to 1.6.1

Release notes

Sourced from sigs.k8s.io/gateway-api's releases.

v1.6.1

Major Changes Since v1.6.0

Test & Conformance

  • Change the port used in TCPRouteMultipleRoutesAttachment. (#5053, @​davidjumani)
  • Respect CleanupTestResources for BackendTLSPolicy, TCPRouteMultipleRoutesAttachment and UDPRouteMultipleRoutesAttachment(#5065, @​snorwin)
  • Fix SetupTimeoutConfig() not respecting defaults for ListenerSetMustHaveCondition, ListenerSetListenersMustHaveConditions, and RequiredConsecutiveSuccesses. (#5066, @​immanuwell)
  • Honour tcpRouteMustHaveCondition and udpRouteMustHaveCondition timeouts which were silently ignore. (#5067, @​immanuwell)

Other (Cleanup or Flake)

  • Fix GatewayStaticAddresses test flake by waiting for status.addresses to be published instead of assuming it appears atomically with Programmed. (#5038, @​howardjohn)
  • Fix GatewayInfrastructure test flake by polling for generated infrastructure resources instead of assuming immediate visibility after the gateway is accepted. (#5047, @​howardjohn)
  • Fix flaky TCPRouteWeightedRouting and UDPRouteWeightedRouting conformance tests by adding a data-plane readiness check before performing weighted routing assertions. (#5064, @​arybolovlev)

v1.6.0

Changes Since v1.5.1

GEP & API Graduation

  • UDPRoute & TCPRoute Graduation:
    • UDPRoute has graduated to GA. We recommend using the "v1" API version with this API now. The "v1alpha2" version of this API is deprecated and will be removed in the future. (#4923, @​zac-nixon)
    • TCPRoute has graduated to GA. We recommend using the "v1" API version with this API now. The "v1alpha2" version of this API is deprecated and will be removed in the future. (#4920, @​zac-nixon)
  • GEP Status Updates:

Feature

  • API & Validation Enhancements:
    • API validation updated for HTTPRoute retries: retry.codes must now be unique and retry.attempts must be >= 1. (#4907, @​snorwin)
    • Increase the number of allowed Certificate Authority references from 8 to 16. (#4088, @​root30)
    • The TLSRoute CRD validation has been adjusted to allow up to 1024 hostnames and rules per TLSRoute resource. Operators must validate kube-apiserver, etcd and Gateway controller behavior with representative manifests prior to enabling the new limit in production. (#4332, @​alexanderstephan)
    • BackendTLSPolicy now can be used in combination with other routes types. (#4745, @​rikatz)
    • Allow the usage of up to 16 annotations on the gateway infrastructure object. (#4707, @​wenisman)
  • Conformance Infrastructure:
    • Added conformance tests for UDPRoute (GEP-2645), a new GATEWAY-UDP conformance profile, a SupportTCPRoute feature, and a UDP/TCP echo server in echo-basic gated on UDP_ECHO_SERVER. (#4861, @​zac-nixon)
  • Remove the idleTimeout field from the experimental SessionPersistence API. (#4771, @​gcs278)

Documentation

... (truncated)

Changelog

Sourced from sigs.k8s.io/gateway-api's changelog.

Release Process

This details how releases of Gateway API are delivered. This process is exercised by a Release Manager.

Overview

The Gateway API project is an API project that has the following two components:

  • Kubernetes Custom Resource Definitions (CRDs)
  • Corresponding Go API in the form of sigs.k8s.io/gateway-api Go package

This repository is the home for both of the above components.

Versioning strategy

The versioning strategy for this project is covered in detail in the release documentation.

Releasing a monthly version

Starting point

Make sure all the changes that should be part of the monthly release are merged into main.

Tagging the monthly release

Start by tagging the main branch with a tag of the form monthly-YYYY.MM (for example, monthly-2025.11). Push this to GitHub.

Start the CI workflow

Trigger the monthly-release GitHub workflow, passing it the monthly-YYYY.MM tag just created.

CI handles the rest of the release process, including creating a draft GitHub release which includes an automatically-generated changelog and the various release artifacts. You will need to publish this release after making sure that the correct artifacts are attached to it and that the CHANGELOG is what you want.

Writing the Release Changelog

In many cases, the changelog that GitHub generates is going to be OK. However, if there are significant changes in a given monthly, it can be helpful to write a changelog that's more human-readable. Given the $TAG used for this monthly release as well as the $PREV_TAG used for the

... (truncated)

Commits
  • 8bb74df update vap (#5073)
  • 852914d chore: Prep for v1.6.1 release (#5070)
  • 258e731 fix: honor L4 route timeout YAML overrides (#5067)
  • 5b4813b fix: apply missing conformance timeout defaults (#5066)
  • 6a8b590 [release-1.6] conformance: fix cleanup of stale objects (#5065)
  • cb70397 conformance: wait for TCP and UDP weighted routes to accept traffic (#5064)
  • b72d941 fix: stop verifying reports on release branches (#5062)
  • ef67bf9 fix: change broken airlock link (#5056)
  • ee6cc1c fix: only migrate deprecated status code if not already migrate (#5051)
  • cc27d5e tests: Change port used in TCPRouteMultipleRoutesAttachment (#5053)
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.0

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

  • ~17% lower geomean runtime across the benchmark suite
  • ~27% higher geomean formatter throughput
  • Common enabled logging paths are ~30–44% faster
  • WithError is ~40% faster
  • Chained fields are ~46% faster
  • TextFormatter paths are up to ~40% faster
  • Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

  • Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
  • Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

JSONFormatter itself remains largely unchanged in runtime performance, with small allocation reductions.

🔄 log/slog interoperability

v1.10 adds bidirectional interoperability between Logrus and Go's log/slog:

  • A Logrus slog hook can forward existing Logrus entries to an slog logger.
  • hooks/slog.NewHandler implements slog.Handler, allowing log/slog records to use an existing Logrus logger and its hooks, formatter, and output.
  • The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information.
  • Caller reporting is configured per handler, without requiring Logrus's logger-wide ReportCaller option.
  • Custom slog levels can be mapped to Logrus levels.
  • The hook and handler can be combined, providing a practical path for incrementally migrating from Logrus to log/slog without requiring an all-at-once transition.

This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites can start using an slog backend, while new slog code can continue using an established Logrus setup.

🔒 Concurrency & Correctness

  • Fix reentrant logging deadlocks, including logging from within MarshalJSON or formatter code.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel, contrary to their documented behavior.
  • Eliminate race conditions in entry and formatter p...

    Description has been truncated

@dependabot
Bump the gomod group across 1 directory with 19 updates
945a913 
Bumps the gomod group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) | `0.74.0` | `0.85.0` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.18` | `1.32.36` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.57.2` | `1.60.5` |
| [github.com/buildpacks/pack](https://github.com/buildpacks/pack) | `0.40.6` | `0.40.9` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.6` | `0.21.9` |
| [github.com/pivotal/kpack](https://github.com/pivotal/kpack) | `0.17.1` | `0.18.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.36.1` | `0.36.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.36.1` | `0.36.3` |
| [k8s.io/metrics](https://github.com/kubernetes/metrics) | `0.36.1` | `0.36.3` |
| [k8s.io/pod-security-admission](https://github.com/kubernetes/pod-security-admission) | `0.36.1` | `0.36.3` |
| [sigs.k8s.io/gateway-api](https://github.com/kubernetes-sigs/gateway-api) | `1.5.1` | `1.6.1` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.36.1` | `0.36.3` |



Updates `code.cloudfoundry.org/bytefmt` from 0.74.0 to 0.85.0
- [Release notes](https://github.com/cloudfoundry/bytefmt/releases)
- [Commits](cloudfoundry/bytefmt@v0.74.0...v0.85.0)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.18 to 1.32.36
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.18...config/v1.32.36)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.57.2 to 1.60.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecs/v1.57.2...service/ecr/v1.60.5)

Updates `github.com/buildpacks/pack` from 0.40.6 to 0.40.9
- [Release notes](https://github.com/buildpacks/pack/releases)
- [Changelog](https://github.com/buildpacks/pack/blob/main/RELEASE.md)
- [Commits](buildpacks/pack@v0.40.6...v0.40.9)

Updates `github.com/go-logr/logr` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.3...v1.4.4)

Updates `github.com/google/go-containerregistry` from 0.21.6 to 0.21.9
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.6...v0.21.9)

Updates `github.com/onsi/ginkgo/v2` from 2.29.0 to 2.32.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.29.0...v2.32.1)

Updates `github.com/onsi/gomega` from 1.41.0 to 1.42.1
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.41.0...v1.42.1)

Updates `github.com/pivotal/kpack` from 0.17.1 to 0.18.0
- [Release notes](https://github.com/pivotal/kpack/releases)
- [Changelog](https://github.com/buildpacks-community/kpack/blob/main/RELEASE.md)
- [Commits](buildpacks-community/kpack@v0.17.1...v0.18.0)

Updates `go.yaml.in/yaml/v3` from 3.0.4 to 3.0.5
- [Commits](yaml/go-yaml@v3.0.4...v3.0.5)

Updates `golang.org/x/text` from 0.37.0 to 0.40.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.37.0...v0.40.0)

Updates `k8s.io/api` from 0.36.1 to 0.36.3
- [Commits](kubernetes/api@v0.36.1...v0.36.3)

Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.3
- [Commits](kubernetes/apimachinery@v0.36.1...v0.36.3)

Updates `k8s.io/client-go` from 0.36.1 to 0.36.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.36.1...v0.36.3)

Updates `k8s.io/metrics` from 0.36.1 to 0.36.3
- [Commits](kubernetes/metrics@v0.36.1...v0.36.3)

Updates `k8s.io/pod-security-admission` from 0.36.1 to 0.36.3
- [Commits](kubernetes/pod-security-admission@v0.36.1...v0.36.3)

Updates `sigs.k8s.io/gateway-api` from 1.5.1 to 1.6.1
- [Release notes](https://github.com/kubernetes-sigs/gateway-api/releases)
- [Changelog](https://github.com/kubernetes-sigs/gateway-api/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/gateway-api@v1.5.1...v1.6.1)

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.0
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.4...v1.10.0)

Updates `k8s.io/apiextensions-apiserver` from 0.36.1 to 0.36.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.36.1...v0.36.3)

---
updated-dependencies:
- dependency-name: code.cloudfoundry.org/bytefmt
  dependency-version: 0.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-version: 1.60.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/buildpacks/pack
  dependency-version: 0.40.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.42.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/pivotal/kpack
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: golang.org/x/text
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: k8s.io/api
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: k8s.io/client-go
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: k8s.io/metrics
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: k8s.io/pod-security-admission
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: sigs.k8s.io/gateway-api
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.36.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants