Skip to content

build(deps): Bump the go group with 13 updates #1797

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Mar 10, 2025
Merged

build(deps): Bump the go group with 13 updates #1797

merged 1 commit into from
Mar 10, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 10, 2025

Bumps the go group with 13 updates:

Package From To
github.com/aws/aws-sdk-go-v2/config 1.29.8 1.29.9
github.com/aws/aws-sdk-go-v2/credentials 1.17.61 1.17.62
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.17.64 1.17.65
github.com/aws/aws-sdk-go-v2/service/kms 1.38.0 1.38.1
github.com/aws/aws-sdk-go-v2/service/s3 1.78.0 1.78.1
github.com/aws/aws-sdk-go-v2/service/sts 1.33.16 1.33.17
golang.org/x/crypto 0.35.0 0.36.0
golang.org/x/net 0.35.0 0.37.0
golang.org/x/sys 0.30.0 0.31.0
golang.org/x/term 0.29.0 0.30.0
google.golang.org/api 0.223.0 0.224.0
google.golang.org/genproto/googleapis/rpc 0.0.0-20250219182151-9fdb1cabc7b2 0.0.0-20250227231956-55c901821b1e
google.golang.org/grpc 1.70.0 1.71.0

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.8 to 1.29.9

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.61 to 1.17.62

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.64 to 1.17.65

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.38.0 to 1.38.1

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/service/kms's changelog.

Release (2023-08-01)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/batch: v1.26.0
    • Feature: This release adds support for price capacity optimized allocation strategy for Spot Instances.
  • github.com/aws/aws-sdk-go-v2/service/databasemigrationservice: v1.29.0
    • Feature: Adding new API describe-engine-versions which provides information about the lifecycle of a replication instance's version.
  • github.com/aws/aws-sdk-go-v2/service/internetmonitor: v1.5.0
    • Feature: This release adds a new feature for Amazon CloudWatch Internet Monitor that enables customers to set custom thresholds, for performance and availability drops, for impact limited to a single city-network to trigger creation of a health event.
  • github.com/aws/aws-sdk-go-v2/service/medialive: v1.34.0
    • Feature: AWS Elemental Link devices now report their Availability Zone. Link devices now support the ability to change their Availability Zone.
  • github.com/aws/aws-sdk-go-v2/service/polly: v1.29.0
    • Feature: Amazon Polly adds new French Belgian voice - Isabelle. Isabelle is available as Neural voice only.
  • github.com/aws/aws-sdk-go-v2/service/rds: v1.50.0
    • Feature: Added support for deleted clusters PiTR.
  • github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.97.0
    • Feature: Add Stairs TrafficPattern and FlatInvocations to RecommendationJobStoppingConditions

Release (2023-07-31)

General Highlights

  • Feature: Adds support for smithy-modeled endpoint resolution. A new rules-based endpoint resolution will be added to the SDK which will supercede and deprecate existing endpoint resolution. Specifically, EndpointResolver will be deprecated while BaseEndpoint and EndpointResolverV2 will take its place. For more information, please see the Endpoints section in our Developer Guide.
  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder: v1.12.0
    • Feature: Amplify Studio releases GraphQL support for codegen job action.
  • github.com/aws/aws-sdk-go-v2/service/autoscaling: v1.30.0
    • Feature: You can now configure an instance refresh to set its status to 'failed' when it detects that a specified CloudWatch alarm has gone into the ALARM state. You can also choose to roll back the instance refresh automatically when the alarm threshold is met.
  • github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.3.0
    • Feature: This release introduces custom SQL queries - an expanded set of SQL you can run. This release adds analysis templates, a new resource for storing pre-defined custom SQL queries ahead of time. This release also adds the Custom analysis rule, which lets you approve analysis templates for querying.
  • github.com/aws/aws-sdk-go-v2/service/codestarconnections: v1.15.0
    • Feature: New integration with the Gitlab provider type.
  • github.com/aws/aws-sdk-go-v2/service/drs: v1.15.0
    • Feature: Add support for in-aws right sizing
  • github.com/aws/aws-sdk-go-v2/service/inspector2: v1.16.0
    • Feature: This release adds 1 new API: BatchGetFindingDetails to retrieve enhanced vulnerability intelligence details for findings.
  • github.com/aws/aws-sdk-go-v2/service/lookoutequipment: v1.18.0
    • Feature: This release includes new import resource, model versioning and resource policy features.
  • github.com/aws/aws-sdk-go-v2/service/omics: v1.6.0
    • Feature: Add CreationType filter for ListReadSets
  • github.com/aws/aws-sdk-go-v2/service/rds: v1.49.0
    • Feature: This release adds support for Aurora MySQL local write forwarding, which allows for forwarding of write operations from reader DB instances to the writer DB instance.
  • github.com/aws/aws-sdk-go-v2/service/route53: v1.29.0
    • Feature: Amazon Route 53 now supports the Israel (Tel Aviv) Region (il-central-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
  • github.com/aws/aws-sdk-go-v2/service/scheduler: v1.2.0
    • Feature: This release introduces automatic deletion of schedules in EventBridge Scheduler. If configured, EventBridge Scheduler automatically deletes a schedule after the schedule has completed its last invocation.

... (truncated)

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.78.0 to 1.78.1

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.33.16 to 1.33.17

Commits

Updates golang.org/x/crypto from 0.35.0 to 0.36.0

Commits
  • 49bf5b8 go.mod: update golang.org/x dependencies
  • 24852b6 ssh: add decode support for banners
  • bbc689c ssh: use a more straightforward return value
  • See full diff in compare view

Updates golang.org/x/net from 0.35.0 to 0.37.0

Commits
  • 99b3ae0 go.mod: update golang.org/x dependencies
  • 85d1d54 go.mod: update golang.org/x dependencies
  • cde1dda proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts
  • fe7f039 publicsuffix: spruce up code gen and speed up PublicSuffix
  • 459513d internal/http3: move more common stream processing to genericConn
  • aad0180 http2: fix flakiness from t.Log when GOOS=js
  • b73e574 http2: don't log expected errors from writing invalid trailers
  • 5f45c77 internal/http3: make read-data tests usable for server handlers
  • 43c2540 http2, internal/httpcommon: reject userinfo in :authority
  • 1d78a08 http2, internal/httpcommon: factor out server header logic for h2/h3
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.30.0 to 0.31.0

Commits
  • 74cfc93 all: upgrade go directive to at least 1.23.0 [generated]
  • See full diff in compare view

Updates golang.org/x/term from 0.29.0 to 0.30.0

Commits
  • 04218fd go.mod: update golang.org/x dependencies
  • 208db03 all: upgrade go directive to at least 1.23.0 [generated]
  • See full diff in compare view

Updates google.golang.org/api from 0.223.0 to 0.224.0

Release notes

Sourced from google.golang.org/api's releases.

v0.224.0

0.224.0 (2025-03-06)

Features

Bug Fixes

Changelog

Sourced from google.golang.org/api's changelog.

0.224.0 (2025-03-06)

Features

Bug Fixes

Commits

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20250219182151-9fdb1cabc7b2 to 0.0.0-20250227231956-55c901821b1e

Commits

Updates google.golang.org/grpc from 1.70.0 to 1.71.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.71.0

API Changes

  • balancer: Custom LB policies that record metrics must use the new MetricsRecorder method on Balancer.ClientConn instead of the removed Balancer.BuildOptions.MetricsRecorder field to obtain a metrics recorder. (#8027)
  • balancer: balancer.ClientConn implementations must now embed a delegate implementation. This allows grpc-go to add new methods to the interface and remain backward compatible. (#8026)
  • balancer/endpointsharding: The constructor accepts the child balancer's builder and a struct with optional configuration. (#8052)

New Features

  • xds: Add support for dualstack via the additional_addresses field in the Endpoint resource. To disable this feature, set the environment variable GRPC_EXPERIMENTAL_XDS_DUALSTACK_ENDPOINTS=false. (#8134)
  • stats/opentelemetry: Add experimental support for OpenTelemetry tracing. (#7852)
  • xds/internal/xdsclient: Add counter metrics for valid and invalid resource updates. (#8038)
  • balancer/leastrequest, roundrobin: Add dualstack support. (#7969, #7966)
  • balancer/endpointsharding: Balancers created with the new DisableAutoReconnect option will not attempt to call ExitIdle automatically on their children when the children report idle. (#8052)

Bug Fixes

  • client: Fix support for proxies when using grpc.NewClient so the target is resolved by the proxy as expected. (#7881)
    • Added WithLocalDNSResolution() dial option to explicitly force target resolution on the client instead. (#7881)
  • weightedtarget: Return erroring picker when no targets are configured. (#8070)
  • xds: Fail RPCs with UNAVAILABLE when the EDS resource is missing or contains no endpoints (#8070)
  • xdsclient: Fix a bug where connectivity failures were reported to resource watchers before trying all listed servers. (#8075)
  • grpc: Fix the number of bytes reported in the error message when encoded messages are larger than 4GB. (#8033)
  • xds: Fixed a bug preventing tests from creating multiple servers or channels with different bootstrap configs. (#8050)
  • grpc: Fix message length checks when compression is enabled and maxReceiveMessageSize is MaxInt (#7918)

Documentation

  • client: Improve documentation of grpc.NewClient and ClientConn.CanonicalTarget by providing examples. (#8078)
  • examples/features/dualstack: New example demonstrating usage of endpoints and dualstack functionality. (#8098)
Commits
  • d01db5c Change version to 1.71.0 (#8105)
  • 012f8bf xds: Enable dualstack flag (#8134)
  • bf0c885 examples/features/dualstack: Demonstrate Dual Stack functionality (#8098) (#8...
  • 05bdd66 ringhash: Remove TODO comment (#8096)
  • ddb2484 xds: remove obsolete xDS transport custom dialer option (#8079)
  • 8528f43 cleanup: replace Dial with NewClient (#7975)
  • ae2a04f ringhash: Replace DNS resolver before sending xDS Update in test (#8091)
  • e55819e lazy: Use channel to wait for resolver error being received in test (#8088)
  • b524c08 xdsclient: include xds node ID in errors from the WatchResource API (#8093)
  • 91eb6aa client: improve documentation of target strings (#8078)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): Bump the go group with 13 updates
7792817 
Bumps the go group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.29.8` | `1.29.9` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.17.61` | `1.17.62` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.64` | `1.17.65` |
| [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.38.0` | `1.38.1` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.78.0` | `1.78.1` |
| [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.33.16` | `1.33.17` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.35.0` | `0.36.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.35.0` | `0.37.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.30.0` | `0.31.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.29.0` | `0.30.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.223.0` | `0.224.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250219182151-9fdb1cabc7b2` | `0.0.0-20250227231956-55c901821b1e` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.70.0` | `1.71.0` |


Updates `github.com/aws/aws-sdk-go-v2/config` from 1.29.8 to 1.29.9
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.29.8...config/v1.29.9)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.61 to 1.17.62
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.61...credentials/v1.17.62)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.64 to 1.17.65
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@feature/s3/manager/v1.17.64...feature/s3/manager/v1.17.65)

Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.38.0 to 1.38.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/service/s3/v1.38.1/CHANGELOG.md)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.38.0...service/s3/v1.38.1)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.78.0 to 1.78.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.78.0...service/s3/v1.78.1)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.33.16 to 1.33.17
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/sns/v1.33.16...service/sns/v1.33.17)

Updates `golang.org/x/crypto` from 0.35.0 to 0.36.0
- [Commits](golang/crypto@v0.35.0...v0.36.0)

Updates `golang.org/x/net` from 0.35.0 to 0.37.0
- [Commits](golang/net@v0.35.0...v0.37.0)

Updates `golang.org/x/sys` from 0.30.0 to 0.31.0
- [Commits](golang/sys@v0.30.0...v0.31.0)

Updates `golang.org/x/term` from 0.29.0 to 0.30.0
- [Commits](golang/term@v0.29.0...v0.30.0)

Updates `google.golang.org/api` from 0.223.0 to 0.224.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.223.0...v0.224.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250219182151-9fdb1cabc7b2 to 0.0.0-20250227231956-55c901821b1e
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.70.0 to 1.71.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.70.0...v1.71.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kms
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 10, 2025
@felixfontein felixfontein merged commit 7e0377d into main Mar 10, 2025
15 checks passed
@felixfontein felixfontein deleted the dependabot/go_modules/go-7a003d4368 branch March 10, 2025 17:15
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Apr 20, 2025
@tmeijn
build(deps): update getsops/sops to v3.10.2
2781c8f 
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [getsops/sops](https://github.com/getsops/sops) | minor | `v3.9.4` -> `v3.10.2` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>getsops/sops (getsops/sops)</summary>

### [`v3.10.2`](https://github.com/getsops/sops/releases/tag/v3.10.2)

[Compare Source](getsops/sops@v3.10.1...v3.10.2)

#### Installation

To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

```shell

### Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.linux.amd64

### Move the binary in to your PATH
mv sops-v3.10.2.linux.amd64 /usr/local/bin/sops

### Make the binary executable
chmod +x /usr/local/bin/sops
```

##### Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands:

```shell

### Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.checksums.pem
curl -LO https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.checksums.sig

### Verify the checksums file
cosign verify-blob sops-v3.10.2.checksums.txt \
  --certificate sops-v3.10.2.checksums.pem \
  --signature sops-v3.10.2.checksums.sig \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:

```shell

### Verify the binary using the checksums file
sha256sum -c sops-v3.10.2.checksums.txt --ignore-missing
```

##### Verify artifact provenance

The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.10.2.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool:

```shell

### Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.intoto.jsonl

### Verify the provenance of the artifact
slsa-verifier verify-artifact <artifact> \
  --provenance-path sops-v3.10.2.intoto.jsonl \
  --source-uri github.com/getsops/sops \
  --source-tag v3.10.2
```

#### Container Images

The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies.

These container images are available for the following architectures: `linux/amd64` and `linux/arm64`.

##### GitHub Container Registry

-   `ghcr.io/getsops/sops:v3.10.2`
-   `ghcr.io/getsops/sops:v3.10.2-alpine`

##### Quay.io

-   `quay.io/getsops/sops:v3.10.2`
-   `quay.io/getsops/sops:v3.10.2-alpine`

##### Verify container image signature

The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command:

```shell
cosign verify ghcr.io/getsops/sops:v3.10.2 \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  -o text
```

##### Verify container image provenance

The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers).

#### Software Bill of Materials

The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`.

#### What's Changed

-   build(deps): Bump the go group with 13 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1834
-   Use latest 1.24 Go version for release build by [@&#8203;hiddeco](https://github.com/hiddeco) in getsops/sops#1836
-   Remove reserved keyword check from YAML store's `LoadPlainFile()` by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1829
-   build(deps): Bump the go group with 9 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1839
-   build(deps): Bump github/codeql-action from 3.28.13 to 3.28.15 in the ci group by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1840
-   Release 3.10.2 release by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1841

**Full Changelog**: getsops/sops@v3.10.1...v3.10.2

### [`v3.10.1`](https://github.com/getsops/sops/releases/tag/v3.10.1)

[Compare Source](getsops/sops@v3.10.0...v3.10.1)

#### Installation

To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

```shell

### Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.linux.amd64

### Move the binary in to your PATH
mv sops-v3.10.1.linux.amd64 /usr/local/bin/sops

### Make the binary executable
chmod +x /usr/local/bin/sops
```

##### Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands:

```shell

### Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.pem
curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.sig

### Verify the checksums file
cosign verify-blob sops-v3.10.1.checksums.txt \
  --certificate sops-v3.10.1.checksums.pem \
  --signature sops-v3.10.1.checksums.sig \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:

```shell

### Verify the binary using the checksums file
sha256sum -c sops-v3.10.1.checksums.txt --ignore-missing
```

##### Verify artifact provenance

The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.10.1.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool:

```shell

### Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.intoto.jsonl

### Verify the provenance of the artifact
slsa-verifier verify-artifact <artifact> \
  --provenance-path sops-v3.10.1.intoto.jsonl \
  --source-uri github.com/getsops/sops \
  --source-tag v3.10.1
```

#### Container Images

The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies.

These container images are available for the following architectures: `linux/amd64` and `linux/arm64`.

##### GitHub Container Registry

-   `ghcr.io/getsops/sops:v3.10.1`
-   `ghcr.io/getsops/sops:v3.10.1-alpine`

##### Quay.io

-   `quay.io/getsops/sops:v3.10.1`
-   `quay.io/getsops/sops:v3.10.1-alpine`

##### Verify container image signature

The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command:

```shell
cosign verify ghcr.io/getsops/sops:v3.10.1 \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  -o text
```

##### Verify container image provenance

The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers).

#### Software Bill of Materials

The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`.

#### What's Changed

-   build(deps): Bump the ci group with 2 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1826
-   Release 3.10.1 by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1827

**Full Changelog**: getsops/sops@v3.10.0...v3.10.1

### [`v3.10.0`](https://github.com/getsops/sops/releases/tag/v3.10.0)

[Compare Source](getsops/sops@v3.9.4...v3.10.0)

#### Installation

To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

```shell

### Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.linux.amd64

### Move the binary in to your PATH
mv sops-v3.10.0.linux.amd64 /usr/local/bin/sops

### Make the binary executable
chmod +x /usr/local/bin/sops
```

##### Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands:

```shell

### Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.pem
curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.sig

### Verify the checksums file
cosign verify-blob sops-v3.10.0.checksums.txt \
  --certificate sops-v3.10.0.checksums.pem \
  --signature sops-v3.10.0.checksums.sig \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:

```shell

### Verify the binary using the checksums file
sha256sum -c sops-v3.10.0.checksums.txt --ignore-missing
```

##### Verify artifact provenance

The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.10.0.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool:

```shell

### Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.intoto.jsonl

### Verify the provenance of the artifact
slsa-verifier verify-artifact <artifact> \
  --provenance-path sops-v3.10.0.intoto.jsonl \
  --source-uri github.com/getsops/sops \
  --source-tag v3.10.0
```

#### Container Images

The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies.

These container images are available for the following architectures: `linux/amd64` and `linux/arm64`.

##### GitHub Container Registry

-   `ghcr.io/getsops/sops:v3.10.0`
-   `ghcr.io/getsops/sops:v3.10.0-alpine`

##### Quay.io

-   `quay.io/getsops/sops:v3.10.0`
-   `quay.io/getsops/sops:v3.10.0-alpine`

##### Verify container image signature

The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command:

```shell
cosign verify ghcr.io/getsops/sops:v3.10.0 \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  -o text
```

##### Verify container image provenance

The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers).

#### Software Bill of Materials

The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`.

#### What's Changed

-   build(deps): Bump alpine from 3.18 to 3.21 in /.release in the docker group across 1 directory by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1700
-   Convert changelog to MarkDown by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1741
-   build(deps): Bump the go group with 7 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1743
-   build(deps): Bump the go group with 9 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1745
-   build(deps): Bump the rust group in /functional-tests with 2 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1744
-   build(deps): Bump github/codeql-action from 3.28.5 to 3.28.8 in the ci group by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1746
-   build(deps): Bump the go group with 12 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1751
-   build(deps): Bump the ci group with 4 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1750
-   Add --input-type option for filestatus subcommand by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1601
-   Use SOPS_EDITOR before EDITOR by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1611
-   Allow users to disable version check via environment variable by [@&#8203;nicklasfrahm](https://github.com/nicklasfrahm) in getsops/sops#1684
-   add duplicate section support to ini store by [@&#8203;reindlt](https://github.com/reindlt) in getsops/sops#1452
-   stores: test for duplicate keys, reserve keyword (yaml only now) by [@&#8203;holiman](https://github.com/holiman) in getsops/sops#1203
-   Add same process option for exec-env by [@&#8203;ricmatsui](https://github.com/ricmatsui) in getsops/sops#880
-   outputs: add trailing newline at the end of JSON files by [@&#8203;duthils](https://github.com/duthils) in getsops/sops#1476
-   set subcommand: add --idempotent flag that will not write the file if no change happened by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1754
-   Encrypt and decrypt time.Time objects by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1759
-   build(deps): Bump the go group with 8 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1763
-   build(deps): Bump tempfile from 3.16.0 to 3.17.0 in /functional-tests in the rust group by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1762
-   build(deps): Bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 in the ci group by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1761
-   fix(docs): typo in README.rst by [@&#8203;Paredev](https://github.com/Paredev) in getsops/sops#1765
-   Add SSH support for age by [@&#8203;haoqixu](https://github.com/haoqixu) in getsops/sops#1692
-   make sure that tests do not pick keys.txt from user's HOME dir by [@&#8203;tomaszduda23](https://github.com/tomaszduda23) in getsops/sops#1766
-   support for age identity with passphrase by [@&#8203;tomaszduda23](https://github.com/tomaszduda23) in getsops/sops#1400
-   build(deps): Bump the rust group in /functional-tests with 4 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1768
-   build(deps): Bump the go group with 12 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1769
-   build(deps): Bump the ci group with 4 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1770
-   build(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1773
-   feat: add age plugin support by [@&#8203;brianmcgee](https://github.com/brianmcgee) in getsops/sops#1641
-   Check GnuPG decryption result for non-empty size by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1776
-   vendored age code: consolidate passphrase reading functionality by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1775
-   Allow to encrypt and decrypt from stdin by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1690
-   build(deps): Bump the go group with 11 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1784
-   build(deps): Bump the ci group with 5 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1782
-   build(deps): Bump serde_json from 1.0.139 to 1.0.140 in /functional-tests in the rust group; bump Rust to 1.85.0 by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1783
-   build(deps): Bump the go group with 13 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1797
-   build(deps): Bump the rust group in /functional-tests with 3 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1796
-   build(deps): Bump github/codeql-action from 3.28.10 to 3.28.11 in the ci group by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1795
-   build(deps): Bump the go group with 6 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1802
-   build(deps): Bump tempfile from 3.18.0 to 3.19.0 in /functional-tests in the rust group by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1800
-   build(deps): Bump docker/login-action from 3.3.0 to 3.4.0 in the ci group by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1801
-   build(deps): Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1806
-   goreleaser: add windows arm64 by [@&#8203;duthils](https://github.com/duthils) in getsops/sops#1791
-   Add a way to set sops config location via envvar by [@&#8203;sledzikowy](https://github.com/sledzikowy) in getsops/sops#1701
-   build(deps): Bump the go group with 3 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1809
-   build(deps): Bump the ci group with 5 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1808
-   build(deps): Bump tempfile from 3.19.0 to 3.19.1 in /functional-tests in the rust group by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1807
-   Support --config option in publish subcommand by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1779
-   Fix caching of Metadata.DataKey by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1781
-   Lint by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1780
-   updatekeys subcommand: rename GroupQuorum to ShamirThreshold by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1631
-   If --filename-override is specified, convert it to an absolute path same as regular filenames by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1793
-   Add support for `oauth2.TokenSource` in GCP KMS by [@&#8203;matheuscscp](https://github.com/matheuscscp) in getsops/sops#1794
-   Added SOPS_AGE_KEY_CMD option to age, fixes [#&#8203;1323](getsops/sops#1323) by [@&#8203;danilobuerger](https://github.com/danilobuerger) in getsops/sops#1811
-   chore: omitempty metadata to reduce the size of stored config by [@&#8203;cgetzen](https://github.com/cgetzen) in getsops/sops#1571
-   Improve Shamir Secret Sharing code by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1813
-   Update all dependencies by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1814
-   Run 'gofmt -w' on all .go files by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1817
-   Add option to explicitly check for the latest version; deprecate current default of always doing that unless disabled by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1816
-   Build using Go 1.24 and drop support for 1.22 by [@&#8203;hiddeco](https://github.com/hiddeco) in getsops/sops#1819
-   Support `GOOGLE_OAUTH_ACCESS_TOKEN` for Google Cloud Platform  by [@&#8203;marensofier](https://github.com/marensofier) in getsops/sops#1578
-   Warn about `.sops.yml` files found while searching for `.sops.yaml` by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1820
-   Release 3.10.0 by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1815
-   Added support for multiarch windows release binaries by [@&#8203;sabre1041](https://github.com/sabre1041) in getsops/sops#1823

#### New Contributors

-   [@&#8203;reindlt](https://github.com/reindlt) made their first contribution in getsops/sops#1452
-   [@&#8203;ricmatsui](https://github.com/ricmatsui) made their first contribution in getsops/sops#880
-   [@&#8203;Paredev](https://github.com/Paredev) made their first contribution in getsops/sops#1765
-   [@&#8203;haoqixu](https://github.com/haoqixu) made their first contribution in getsops/sops#1692
-   [@&#8203;brianmcgee](https://github.com/brianmcgee) made their first contribution in getsops/sops#1641
-   [@&#8203;sledzikowy](https://github.com/sledzikowy) made their first contribution in getsops/sops#1701
-   [@&#8203;matheuscscp](https://github.com/matheuscscp) made their first contribution in getsops/sops#1794
-   [@&#8203;danilobuerger](https://github.com/danilobuerger) made their first contribution in getsops/sops#1811
-   [@&#8203;cgetzen](https://github.com/cgetzen) made their first contribution in getsops/sops#1571
-   [@&#8203;marensofier](https://github.com/marensofier) made their first contribution in getsops/sops#1578
-   [@&#8203;sabre1041](https://github.com/sabre1041) made their first contribution in getsops/sops#1823

**Full Changelog**: getsops/sops@v3.9.4...v3.10.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjIuMyIsInVwZGF0ZWRJblZlciI6IjM5LjI0MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@felixfontein felixfontein felixfontein approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@felixfontein