build(deps): Bump the go group across 1 directory with 13 updates #1715

dependabot · 2024-12-21T08:50:43Z

Bumps the go group with 8 updates in the / directory:

Package	From	To
cloud.google.com/go/kms	`1.20.2`	`1.20.3`
cloud.google.com/go/storage	`1.48.0`	`1.49.0`
github.com/aws/aws-sdk-go-v2	`1.32.6`	`1.32.7`
github.com/aws/aws-sdk-go-v2/config	`1.28.6`	`1.28.7`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.17.43`	`1.17.44`
github.com/aws/aws-sdk-go-v2/service/kms	`1.37.7`	`1.37.8`
google.golang.org/grpc	`1.68.1`	`1.69.2`
google.golang.org/protobuf	`1.35.2`	`1.36.0`

Updates cloud.google.com/go/kms from 1.20.2 to 1.20.3

Release notes

Sourced from cloud.google.com/go/kms's releases.

kms: v1.20.3

1.20.3 (2024-12-18)

Documentation

kms: Code documentation improvements (4254053)

Commits

5f985ab chore: release main (#11312)
1946e3d feat(memorystore): new clients (#11310)
720f7e9 feat(shopping): new clients (#11311)
4254053 feat(storagetransfer): support cross-bucket replication (#11291)
4c5e4f0 test(spanner): temporarily skip TestRequestIDHeader if using multiplexedSessi...
10960c1 feat(spanner): implement generation and propagation of "x-goog-spanner-reques...
300865f chore: update grpc dep (#11304)
2f99c97 test(storage): fix go vet for test errors (#11299)
9724361 docs: document how to enable logging (#11298)
6cf33a8 docs(bigtable): Adding shut down log (#11293)
Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.48.0 to 1.49.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.49.0

1.49.0 (2024-12-21)

Features

storage/internal: Add finalize_time field in Object metadata (46fc993)

storage/internal: Add MoveObject RPC (46fc993)

storage: Add ObjectHandle.Move method (#11302) (a3cb8c4)

storage: Return file metadata on read (#11212) (d49263b)

Bug Fixes

storage/dataflux: Address deadlock when reading from ranges (#11303) (32cbf56)

storage: Disable allow non-default credentials flag (#11337) (145ddf4)

storage: Monitored resource detection (#11197) (911bcd8)

storage: Update golang.org/x/net to v0.33.0 (e9b0b69)

Commits

d773366 chore(main): release spanner 1.49.0 (#8468)
2c65345 test(datastore): Correct read time before creating entities (#8475)
6a45f26 feat(auth): add base auth package (#8465)
14aa857 test(datastore): Truncate transaction read time to millisecond (#8473)
3dda7b2 feat(spanner/spannertest): support INSERT DML (#7820)
6c21558 fix(spanner): Transaction was started in a different session (#8467)
911f31e chore(main): release datastore 1.14.0 (#8351)
37681ff feat(datastore): Support aggregation query in transaction (#8439)
a9fff18 feat(datastore): SUM and AVG aggregations (#8307)
fa6e827 fix(bigquery): value for datasetID on foreign keys (#8447)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.32.6 to 1.32.7

Commits

5a96470 Release 2024-12-19
653aa80 Regenerated Clients
d02b239 Update endpoints model
698d709 Update API model
885de40 Fix improper use of Printf-style functions (#2934)
858298a Release 2024-12-18
f58264a Regenerated Clients
df31082 Update endpoints model
346690e Update API model
4515454 Release 2024-12-17
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.28.6 to 1.28.7

Commits

5a96470 Release 2024-12-19
653aa80 Regenerated Clients
d02b239 Update endpoints model
698d709 Update API model
885de40 Fix improper use of Printf-style functions (#2934)
858298a Release 2024-12-18
f58264a Regenerated Clients
df31082 Update endpoints model
346690e Update API model
4515454 Release 2024-12-17
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.47 to 1.17.48

Commits

5a96470 Release 2024-12-19
653aa80 Regenerated Clients
d02b239 Update endpoints model
698d709 Update API model
885de40 Fix improper use of Printf-style functions (#2934)
858298a Release 2024-12-18
f58264a Regenerated Clients
df31082 Update endpoints model
346690e Update API model
4515454 Release 2024-12-17
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.43 to 1.17.44

Commits

2f70834 Release 2024-11-07
ef9a3c3 Regenerated Clients
c054fe7 Update endpoints model
b68675c Update API model
1d989f3 send opt-in query-compatible header where applicable (#2891)
5d0eb23 Merge pull request #2889 from aws/customize-identity-store-exception-message
a39caf3 adding new line and inline comments
2ae3246 refactor logic to use switch case
7c4bde0 add changelog
f01c284 regenerating clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.37.7 to 1.37.8

Commits

5a96470 Release 2024-12-19
653aa80 Regenerated Clients
d02b239 Update endpoints model
698d709 Update API model
885de40 Fix improper use of Printf-style functions (#2934)
858298a Release 2024-12-18
f58264a Regenerated Clients
df31082 Update endpoints model
346690e Update API model
4515454 Release 2024-12-17
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.71.0 to 1.71.1

Commits

5a96470 Release 2024-12-19
653aa80 Regenerated Clients
d02b239 Update endpoints model
698d709 Update API model
885de40 Fix improper use of Printf-style functions (#2934)
858298a Release 2024-12-18
f58264a Regenerated Clients
df31082 Update endpoints model
346690e Update API model
4515454 Release 2024-12-17
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.33.2 to 1.33.3

Commits

427c682 Release 2024-03-18
93e06ff Regenerated Clients
58be623 Update endpoints model
9927740 Update API model
e5b7766 add ratelimit.None (#2562)
10c4487 Release 2024-03-15
db0b1ab Regenerated Clients
92c0060 Update endpoints model
e5bb86e Update API model
49b368e Release 2024-03-14
Additional commits viewable in compare view

Updates google.golang.org/api from 0.210.0 to 0.214.0

Release notes

Sourced from google.golang.org/api's releases.

v0.214.0

0.214.0 (2024-12-19)

Features

all: Auto-regenerate discovery clients (#2926) (7a17059)

all: Auto-regenerate discovery clients (#2931) (946a672)

v0.213.0

0.213.0 (2024-12-17)

Features

all: Auto-regenerate discovery clients (#2924) (a07467e)

v0.212.0

0.212.0 (2024-12-16)

Features

Add logging support (#2856) (ccc9019)

all: Auto-regenerate discovery clients (#2909) (c3b4421)

all: Auto-regenerate discovery clients (#2912) (f9e9be1)

all: Auto-regenerate discovery clients (#2916) (b46f348)

all: Auto-regenerate discovery clients (#2919) (5a3b270)

all: Auto-regenerate discovery clients (#2920) (ed29945)

all: Auto-regenerate discovery clients (#2922) (4fd4833)

Pass through logging in options (#2923) (2884c4e)

v0.211.0

0.211.0 (2024-12-10)

Features

all: Auto-regenerate discovery clients (#2897) (a7a9149)

all: Auto-regenerate discovery clients (#2899) (587a11d)

all: Auto-regenerate discovery clients (#2902) (d4cb90f)

all: Auto-regenerate discovery clients (#2903) (6528fb2)

all: Auto-regenerate discovery clients (#2905) (f37ece7)

all: Auto-regenerate discovery clients (#2906) (91960b1)

transport: Remove deprecated EXPERIMENTAL OpenCensus trace context propagation (#2901) (2b3363e)

Bug Fixes

Remove dep hacks for old cycle deps (#2908) (f4c1ac6), refs #2559

Changelog

Sourced from google.golang.org/api's changelog.

0.214.0 (2024-12-19)

Features

all: Auto-regenerate discovery clients (#2926) (7a17059)

all: Auto-regenerate discovery clients (#2931) (946a672)

0.213.0 (2024-12-17)

Features

all: Auto-regenerate discovery clients (#2924) (a07467e)

0.212.0 (2024-12-16)

Features

Add logging support (#2856) (ccc9019)

all: Auto-regenerate discovery clients (#2909) (c3b4421)

all: Auto-regenerate discovery clients (#2912) (f9e9be1)

all: Auto-regenerate discovery clients (#2916) (b46f348)

all: Auto-regenerate discovery clients (#2919) (5a3b270)

all: Auto-regenerate discovery clients (#2920) (ed29945)

all: Auto-regenerate discovery clients (#2922) (4fd4833)

Pass through logging in options (#2923) (2884c4e)

0.211.0 (2024-12-10)

Features

all: Auto-regenerate discovery clients (#2897) (a7a9149)

all: Auto-regenerate discovery clients (#2899) (587a11d)

all: Auto-regenerate discovery clients (#2902) (d4cb90f)

all: Auto-regenerate discovery clients (#2903) (6528fb2)

all: Auto-regenerate discovery clients (#2905) (f37ece7)

all: Auto-regenerate discovery clients (#2906) (91960b1)

transport: Remove deprecated EXPERIMENTAL OpenCensus trace context propagation (#2901) (2b3363e)

Bug Fixes

Remove dep hacks for old cycle deps (#2908) (f4c1ac6), refs #2559

Commits

b9b7179 chore(main): release 0.214.0 (#2927)
aa743b8 chore(all): update module golang.org/x/net to v0.33.0 [SECURITY] (#2930)
946a672 feat(all): auto-regenerate discovery clients (#2931)
7a17059 feat(all): auto-regenerate discovery clients (#2926)
86fdd4e chore(main): release 0.213.0 (#2925)
a07467e feat(all): auto-regenerate discovery clients (#2924)
59f3d22 chore(all): update all (#2921)
5b935e8 chore(main): release 0.212.0 (#2910)
2884c4e feat: pass through logging in options (#2923)
ccc9019 feat: add logging support (#2856)
Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20241118233622-e639e219e697 to 0.0.0-20241209162323-e6fa225c2576

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.68.1 to 1.69.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.69.2

Bug Fixes

stats/experimental: add type aliases for symbols (Metrics/etc) that were moved to the stats package (#7929).

client: set user-agent string to the correct version.

Release 1.69.0

Known Issues

The recently added grpc.NewClient function is incompatible with forward proxies, because it resolves the target hostname on the client instead of passing the hostname to the proxy. A fix is expected to be a part of grpc-go v1.70. (#7556)

New Features

stats/opentelemetry: Introduce new APIs to enable OpenTelemetry instrumentation for metrics on servers and clients (#7874)

xdsclient: add support to fallback to lower priority servers when higher priority ones are down (#7701)

dns: Add support for link local IPv6 addresses (#7889)

The new experimental pickfirst LB policy (disabled by default) supports Happy Eyeballs, interleaving IPv4 and IPv6 address as described in RFC-8305 section 4, to attempt connections to multiple backends concurrently. The experimental pickfirst policy can be enabled by setting the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST to true. (#7725, #7742)

balancer/pickfirst: Emit metrics from the pick_first load balancing policy (#7839)

grpc: export MethodHandler, which is the type of an already-exported field in MethodDesc (#7796)

Special Thanks: @mohdjishin

Bug Fixes

credentials/google: set scope for application default credentials (#7887)

Special Thanks: @halvards

xds: fix edge-case issues where some clients or servers would not initialize correctly or would not receive errors when resources are invalid or unavailable if another channel or server with the same target was already in use . (#7851, #7853)

examples: fix the debugging example, which was broken by a recent change (#7833)

Behavior Changes

client: update retry attempt backoff to apply jitter per updates to gRFC A6. (#7869)

Special Thanks: @isgj

balancer/weightedroundrobin: use the pick_first LB policy to manage connections (#7826)

API Changes

balancer: An internal method is added to the balancer.SubConn interface to force implementors to embed a delegate implementation. This requirement is present in the interface documentation, but wasn't enforced earlier. (#7840)

Performance Improvements

mem: implement a ReadAll() method for more efficient io.Reader consumption (#7653)

Special Thanks: @ash2k

mem: use slice capacity instead of length to determine whether to pool buffers or directly allocate them (#7702)

Special Thanks: @PapaCharlie

Documentation

examples/csm_observability: Add xDS Credentials and switch server to be xDS enabled (#7875)

Release 1.68.2

Dependencies

... (truncated)

Commits

b615b35 Change version to 1.69.2 (#7947)
6b36a3e experimental/stats: re-add type aliases for migration (#7929) (#7941)
4535c6d Change version to 1.69.2-dev (#7928)
b6e7c72 examples/features/csm_observability: Make CSM Observability example server li...
9355fbc Change version to 1.69.1 (#7927)
927a1e1 Change version to 1.69.1-dev (#7902)
97d633a Change version to 1.69.0 (#7901)
317271b pickfirst: Register a health listener when used as a leaf policy (#7832)
5565631 balancer/pickfirst: replace grpc.Dial with grpc.NewClient in tests (#7879)
634497b test: Split import paths for generated message and service code (#7891)
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.35.2 to 1.36.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) | `1.20.2` | `1.20.3` | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.48.0` | `1.49.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.32.6` | `1.32.7` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.28.6` | `1.28.7` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.43` | `1.17.44` | | [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.37.7` | `1.37.8` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.68.1` | `1.69.2` | | google.golang.org/protobuf | `1.35.2` | `1.36.0` | Updates `cloud.google.com/go/kms` from 1.20.2 to 1.20.3 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@kms/v1.20.2...kms/v1.20.3) Updates `cloud.google.com/go/storage` from 1.48.0 to 1.49.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@spanner/v1.48.0...spanner/v1.49.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.32.6 to 1.32.7 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.32.6...v1.32.7) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.28.6 to 1.28.7 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.28.6...config/v1.28.7) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.47 to 1.17.48 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.47...credentials/v1.17.48) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.43 to 1.17.44 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.43...credentials/v1.17.44) Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.37.7 to 1.37.8 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/kms/v1.37.7...service/kms/v1.37.8) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.71.0 to 1.71.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.71.0...service/s3/v1.71.1) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.33.2 to 1.33.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ivs/v1.33.2...service/ivs/v1.33.3) Updates `google.golang.org/api` from 0.210.0 to 0.214.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.210.0...v0.214.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20241118233622-e639e219e697 to 0.0.0-20241209162323-e6fa225c2576 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.68.1 to 1.69.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.68.1...v1.69.2) Updates `google.golang.org/protobuf` from 1.35.2 to 1.36.0 --- updated-dependencies: - dependency-name: cloud.google.com/go/kms dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: cloud.google.com/go/storage dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/kms dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [getsops/sops](https://github.com/getsops/sops) | patch | `v3.9.2` -> `v3.9.3` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>getsops/sops (getsops/sops)</summary> ### [`v3.9.3`](https://github.com/getsops/sops/releases/tag/v3.9.3) [Compare Source](getsops/sops@v3.9.2...v3.9.3) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.9.3/sops-v3.9.3.linux.amd64 ### Move the binary in to your PATH mv sops-v3.9.3.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.9.3/sops-v3.9.3.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.9.3/sops-v3.9.3.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.9.3/sops-v3.9.3.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.9.3.checksums.txt \ --certificate sops-v3.9.3.checksums.pem \ --signature sops-v3.9.3.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.9.3.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.9.3.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.9.3/sops-v3.9.3.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact <artifact> \ --provenance-path sops-v3.9.3.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.9.3 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.9.3` - `ghcr.io/getsops/sops:v3.9.3-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.9.3` - `quay.io/getsops/sops:v3.9.3-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.9.3 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`. #### What's Changed - build(deps): Bump the go group with 10 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1699 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1698 - build(deps): Bump golang.org/x/crypto from 0.30.0 to 0.31.0 by [@dependabot](https://github.com/dependabot) in getsops/sops#1703 - build(deps): Bump the ci group with 4 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1708 - build(deps): Bump the rust group in /functional-tests with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1707 - CI: add 'persist-credentials: false' to checkout actions by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1704 - build(deps): Bump filippo.io/age from 1.2.0 to 1.2.1 by [@dependabot](https://github.com/dependabot) in getsops/sops#1710 - Bump golang.org/x/net to 0.33.0 to address CVE-2024-45338 by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1714 - build(deps): Bump the go group across 1 directory with 13 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1715 - build(deps): Bump serde_json from 1.0.133 to 1.0.134 in /functional-tests in the rust group by [@dependabot](https://github.com/dependabot) in getsops/sops#1716 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1717 - GnuPG: do not incorrectly trim fingerprint in presence of exclamation marks for specfic subkey selection by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1720 - Tests: use container images from https://github.com/getsops/ci-container-images by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1722 - updatekeys subcommand: fix input-type CLI flag being ignored by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1721 - Update all Go dependencies by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1723 - build(deps): Bump the rust group in /functional-tests with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1725 - Release 3.9.3 by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1724 **Full Changelog**: getsops/sops@v3.9.2...v3.9.3 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

dependabot bot added the dependencies Pull requests that update a dependency file label Dec 21, 2024

felixfontein approved these changes Dec 21, 2024

View reviewed changes

felixfontein merged commit 73fadcf into main Dec 21, 2024
15 checks passed

felixfontein deleted the dependabot/go_modules/go-314c644516 branch December 21, 2024 08:59

BrewTestBot mentioned this pull request Dec 31, 2024

sops 3.9.3 Homebrew/homebrew-core#202843

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): Bump the go group across 1 directory with 13 updates #1715

build(deps): Bump the go group across 1 directory with 13 updates #1715

Uh oh!

dependabot bot commented on behalf of github Dec 21, 2024

Uh oh!

Uh oh!

Uh oh!

build(deps): Bump the go group across 1 directory with 13 updates #1715

build(deps): Bump the go group across 1 directory with 13 updates #1715

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 21, 2024

kms: v1.20.3

1.20.3 (2024-12-18)

Documentation

storage: v1.49.0

1.49.0 (2024-12-21)

Features

Bug Fixes

v0.214.0

0.214.0 (2024-12-19)

Features

v0.213.0

0.213.0 (2024-12-17)

Features

v0.212.0

0.212.0 (2024-12-16)

Features

v0.211.0

0.211.0 (2024-12-10)

Features

Bug Fixes

0.214.0 (2024-12-19)

Features

0.213.0 (2024-12-17)

Features

0.212.0 (2024-12-16)

Features

0.211.0 (2024-12-10)

Features

Bug Fixes

Release 1.69.2

Bug Fixes

Release 1.69.0

Known Issues

New Features

Bug Fixes

Behavior Changes

API Changes

Performance Improvements

Documentation

Release 1.68.2

Dependencies

Uh oh!

Uh oh!

Uh oh!