build(deps): Bump the go group with 13 updates #1834

dependabot · 2025-04-07T09:56:09Z

Bumps the go group with 13 updates:

Package	From	To
github.com/Azure/azure-sdk-for-go/sdk/azcore	`1.17.1`	`1.18.0`
github.com/aws/aws-sdk-go-v2/config	`1.29.12`	`1.29.13`
github.com/aws/aws-sdk-go-v2/credentials	`1.17.65`	`1.17.66`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.17.69`	`1.17.71`
github.com/aws/aws-sdk-go-v2/service/kms	`1.38.1`	`1.38.2`
github.com/aws/aws-sdk-go-v2/service/s3	`1.78.2`	`1.79.1`
github.com/aws/aws-sdk-go-v2/service/sts	`1.33.17`	`1.33.18`
github.com/ory/dockertest/v3	`3.11.0`	`3.12.0`
golang.org/x/crypto	`0.36.0`	`0.37.0`
golang.org/x/oauth2	`0.28.0`	`0.29.0`
golang.org/x/sys	`0.31.0`	`0.32.0`
golang.org/x/term	`0.30.0`	`0.31.0`
google.golang.org/grpc	`1.71.0`	`1.71.1`

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.17.1 to 1.18.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.18.0

1.18.0 (2025-04-03)

Features Added

Added AccessToken.RefreshOn and updated BearerTokenPolicy to consider nonzero values of it when deciding whether to request a new token

Commits

429583a Prepare azcore v1.18.0 for release (#24366)
ddc6873 Document persistent cache limitations (#24363)
938ee67 upgrade emitter version (#24364)
c079b5f Fix error in APIView Helper (#24361)
752d3f0 Remove duplicate golang-jwt/jwt dependency in azwebpubsub (#24357)
e0e08e8 Ignore cspell warnings for eng (#24352)
674ac20 Sync eng/common directory with azure-sdk-tools for PR 10038 (#24338)
39cc1a4 Update APIView Helpers (#24354)
786e39d Update logging functions for github actions (#24350)
402d341 Use commonly defined go N0, N-1 versions in test matrix configs (#24296)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.12 to 1.29.13

Commits

bada512 Release 2025-04-03
1862687 Regenerated Clients
662996c Update partitions file
beec308 Update endpoints model
4c943b6 Update API model
a667c23 Release 2025-04-02
a03cebc Regenerated Clients
59c4c08 Update endpoints model
2206d1d Update API model
8c422c5 Release 2025-04-01
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.65 to 1.17.66

Commits

bada512 Release 2025-04-03
1862687 Regenerated Clients
662996c Update partitions file
beec308 Update endpoints model
4c943b6 Update API model
a667c23 Release 2025-04-02
a03cebc Regenerated Clients
59c4c08 Update endpoints model
2206d1d Update API model
8c422c5 Release 2025-04-01
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.69 to 1.17.71

Commits

bada512 Release 2025-04-03
1862687 Regenerated Clients
662996c Update partitions file
beec308 Update endpoints model
4c943b6 Update API model
a667c23 Release 2025-04-02
a03cebc Regenerated Clients
59c4c08 Update endpoints model
2206d1d Update API model
8c422c5 Release 2025-04-01
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.38.1 to 1.38.2

Commits

0bcd933 Release 2023-08-07
bbdb100 Regenerated Clients
3149717 Update SDK's smithy-go dependency to v1.14.1
43a8a6a Update partitions file
2966ce7 Update endpoints model
dad4b72 Update API model
165c8b2 Release 2023-08-04
aefb878 Regenerated Clients
e2be539 Update endpoints model
be8d8ed Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.78.2 to 1.79.1

Commits

bada512 Release 2025-04-03
1862687 Regenerated Clients
662996c Update partitions file
beec308 Update endpoints model
4c943b6 Update API model
a667c23 Release 2025-04-02
a03cebc Regenerated Clients
59c4c08 Update endpoints model
2206d1d Update API model
8c422c5 Release 2025-04-01
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.33.17 to 1.33.18

Commits

c45eaac Release 2025-02-04
7aecaff Regenerated Clients
a11e8e1 Update endpoints model
91f8178 Update API model
d59b658 Release 2025-02-03
e50249f Regenerated Clients
5d245fc Update API model
8574245 delete stuck changelogs
See full diff in compare view

Updates github.com/ory/dockertest/v3 from 3.11.0 to 3.12.0

Release notes

Sourced from github.com/ory/dockertest/v3's releases.

v3.12.0

What's Changed

chore(deps): bump github.com/docker/cli from 26.1.4+incompatible to 27.1.2+incompatible by @dependabot in ory/dockertest#524

chore(deps): bump actions/checkout from 3 to 4 by @dependabot in ory/dockertest#514

chore(deps): bump actions/stale from 4 to 9 by @dependabot in ory/dockertest#526

chore(deps): bump github.com/opencontainers/runc from 1.1.13 to 1.1.15 by @dependabot in ory/dockertest#538

chore(deps): bump actions/checkout from 2 to 4 by @dependabot in ory/dockertest#527

feat: use creds helper by @GuillaumeSmaha in ory/dockertest#520

added AuthConfigs to BuildOptions and pass that to BuildImage by @DGollings in ory/dockertest#488

add multiple test container example by @akoserwal in ory/dockertest#515

fix: trying to bind to an outbound ip returns an empty list of port bindings by @atzoum in ory/dockertest#533

chore(deps): bump golang.org/x/sys from 0.21.0 to 0.28.0 by @dependabot in ory/dockertest#548

chore(deps): bump actions/stale from 4 to 9 by @dependabot in ory/dockertest#550

chore(deps): bump actions/checkout from 2 to 4 by @dependabot in ory/dockertest#549

chore(deps): bump actions/checkout from 2 to 4 by @dependabot in ory/dockertest#555

chore(deps): bump github.com/docker/cli from 27.1.2+incompatible to 27.4.1+incompatible by @dependabot in ory/dockertest#553

chore(deps): bump github.com/opencontainers/runc from 1.1.15 to 1.2.3 by @dependabot in ory/dockertest#551

chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in ory/dockertest#547

feat: add support for BuildKit when building images by @tmc in ory/dockertest#416

chore(deps): bump actions/setup-node from 2.pre.beta to 4.1.0 by @dependabot in ory/dockertest#539

chore(deps): bump actions/stale from 4 to 9 by @dependabot in ory/dockertest#554

New Contributors

@GuillaumeSmaha made their first contribution in ory/dockertest#520

@DGollings made their first contribution in ory/dockertest#488

@akoserwal made their first contribution in ory/dockertest#515

@atzoum made their first contribution in ory/dockertest#533

Full Changelog: ory/dockertest@v3.11.0...v3.12.0

Commits

8a76ff0 chore: update repository templates to ory/meta@bc60...
207b20a chore: update repository templates to ory/meta@83e7...
fabf563 autogen: update license overview
4b1e539 chore: update repository templates to ory/meta@44ef...
46d1a7b chore: update repository templates to ory/meta@c091...
13e6e33 chore(deps): bump actions/stale from 4 to 9 (#554)
91b7d0b chore(deps): bump actions/setup-node from 2.pre.beta to 4.1.0 (#539)
28c8c5b chore(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.5 (#545)
eec3a4f feat: add support for BuildKit when building images (#416)
f6e65ba chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#547)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.36.0 to 0.37.0

Commits

959f8f3 go.mod: update golang.org/x dependencies
769bcd6 ssh: use the configured rand in kex init
d0a798f cryptobyte: fix typo 'octects' into 'octets' for asn1.go
acbcbef acme: remove unnecessary []byte conversion
376eb14 x509roots: support constrained roots
b369b72 crypto/internal/poly1305: implement function update in assembly on loong64
6b853fb ssh/knownhosts: check more than one key
See full diff in compare view

Updates golang.org/x/oauth2 from 0.28.0 to 0.29.0

Commits

65c15a3 oauth2: remove extra period
ce56909 jws: improve fix for CVE-2025-22868
See full diff in compare view

Updates golang.org/x/sys from 0.31.0 to 0.32.0

Commits

01aaa83 all: simplify code by using modern Go constructs
1b2bd6b windows: replace all StringToUTF16 calls with UTF16FromString
1c3b72f unix: update Linux kernel to 6.14
c175b6b windows: add cmsghdr and pktinfo structures
3330b5e unix: support Readv, Preadv, Writev and Pwritev for darwin
7401cce cpu: replace specific instructions with WORD in the function get_cpucfg on lo...
b8f7da6 cpu: add support for detecting cpu features on loong64
f2ce62c windows: add constants for PMTUD socket options
See full diff in compare view

Updates golang.org/x/term from 0.30.0 to 0.31.0

Commits

5d2308b go.mod: update golang.org/x dependencies
e770ddd x/term: disabling auto-completion around GetPassword()
See full diff in compare view

Updates google.golang.org/grpc from 1.71.0 to 1.71.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.71.1

Bug Fixes

grpc: fix a bug causing an extra Read from the compressor if a compressed message is the same size as the limit. This could result in a panic with the built-in gzip compressor (#8178)

xds: restore the behavior of reading the bootstrap config before creating the first xDS client instead of at package init time (#8164)

stats/opentelemetry: use TextMapPropagator and TracerProvider from TraceOptions instead of OpenTelemetry globals (#8166)

client: fix races when an http proxy is configured that could lead to deadlocks or panics (#8195)

client: fix bug causing RPC failures with message "no children to pick from" when using a custom resolver that calls the deprecated NewAddress API (#8149)

wrr: fix slow processing of address updates that could result in problems including RPC failures for servers with a large number of backends (#8179)

Commits

cdbdb75 Change version to v1.71.1 (#8206)
3a93562 Cherry-pick #8195 into v1.71.x (#8202)
208e03b Cherry-pick #8164 #8166 to v1.71.x (#8182)
8b7d2fe grpc: fix bug causing an extra Read if a compressed message is the same size ...
9c81a91 resolver: Make EndpointMap's Get, Set and Delete operations O(1) (#8179) (#8184)
8d46b21 grpc: Add endpoints in resolverWrapper.NewAddress (#8149) (#8151)
4775bba Change version to 1.71.1-dev (#8106)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 13 updates: | Package | From | To | | --- | --- | --- | | [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.17.1` | `1.18.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.29.12` | `1.29.13` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.17.65` | `1.17.66` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.69` | `1.17.71` | | [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.38.1` | `1.38.2` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.78.2` | `1.79.1` | | [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.33.17` | `1.33.18` | | [github.com/ory/dockertest/v3](https://github.com/ory/dockertest) | `3.11.0` | `3.12.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.36.0` | `0.37.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.28.0` | `0.29.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.31.0` | `0.32.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.30.0` | `0.31.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.71.0` | `1.71.1` | Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.17.1 to 1.18.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.17.1...sdk/azcore/v1.18.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.29.12 to 1.29.13 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@config/v1.29.12...config/v1.29.13) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.65 to 1.17.66 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.65...credentials/v1.17.66) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.69 to 1.17.71 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@feature/s3/manager/v1.17.69...feature/s3/manager/v1.17.71) Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.38.1 to 1.38.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.38.1...service/s3/v1.38.2) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.78.2 to 1.79.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.78.2...service/s3/v1.79.1) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.33.17 to 1.33.18 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@service/sns/v1.33.17...service/sns/v1.33.18) Updates `github.com/ory/dockertest/v3` from 3.11.0 to 3.12.0 - [Release notes](https://github.com/ory/dockertest/releases) - [Commits](ory/dockertest@v3.11.0...v3.12.0) Updates `golang.org/x/crypto` from 0.36.0 to 0.37.0 - [Commits](golang/crypto@v0.36.0...v0.37.0) Updates `golang.org/x/oauth2` from 0.28.0 to 0.29.0 - [Commits](golang/oauth2@v0.28.0...v0.29.0) Updates `golang.org/x/sys` from 0.31.0 to 0.32.0 - [Commits](golang/sys@v0.31.0...v0.32.0) Updates `golang.org/x/term` from 0.30.0 to 0.31.0 - [Commits](golang/term@v0.30.0...v0.31.0) Updates `google.golang.org/grpc` from 1.71.0 to 1.71.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.71.0...v1.71.1) --- updated-dependencies: - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.29.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.17.66 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-version: 1.17.71 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/kms dependency-version: 1.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.79.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-version: 1.33.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/ory/dockertest/v3 dependency-version: 3.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/crypto dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/oauth2 dependency-version: 0.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sys dependency-version: 0.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/term dependency-version: 0.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/grpc dependency-version: 1.71.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [getsops/sops](https://github.com/getsops/sops) | minor | `v3.9.4` -> `v3.10.2` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>getsops/sops (getsops/sops)</summary> ### [`v3.10.2`](https://github.com/getsops/sops/releases/tag/v3.10.2) [Compare Source](getsops/sops@v3.10.1...v3.10.2) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.linux.amd64 ### Move the binary in to your PATH mv sops-v3.10.2.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.10.2.checksums.txt \ --certificate sops-v3.10.2.checksums.pem \ --signature sops-v3.10.2.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.10.2.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.10.2.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.10.2/sops-v3.10.2.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact <artifact> \ --provenance-path sops-v3.10.2.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.10.2 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.10.2` - `ghcr.io/getsops/sops:v3.10.2-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.10.2` - `quay.io/getsops/sops:v3.10.2-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.10.2 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`. #### What's Changed - build(deps): Bump the go group with 13 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1834 - Use latest 1.24 Go version for release build by [@hiddeco](https://github.com/hiddeco) in getsops/sops#1836 - Remove reserved keyword check from YAML store's `LoadPlainFile()` by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1829 - build(deps): Bump the go group with 9 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1839 - build(deps): Bump github/codeql-action from 3.28.13 to 3.28.15 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1840 - Release 3.10.2 release by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1841 **Full Changelog**: getsops/sops@v3.10.1...v3.10.2 ### [`v3.10.1`](https://github.com/getsops/sops/releases/tag/v3.10.1) [Compare Source](getsops/sops@v3.10.0...v3.10.1) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.linux.amd64 ### Move the binary in to your PATH mv sops-v3.10.1.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.10.1.checksums.txt \ --certificate sops-v3.10.1.checksums.pem \ --signature sops-v3.10.1.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.10.1.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.10.1.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.10.1/sops-v3.10.1.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact <artifact> \ --provenance-path sops-v3.10.1.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.10.1 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.10.1` - `ghcr.io/getsops/sops:v3.10.1-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.10.1` - `quay.io/getsops/sops:v3.10.1-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.10.1 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`. #### What's Changed - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1826 - Release 3.10.1 by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1827 **Full Changelog**: getsops/sops@v3.10.0...v3.10.1 ### [`v3.10.0`](https://github.com/getsops/sops/releases/tag/v3.10.0) [Compare Source](getsops/sops@v3.9.4...v3.10.0) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.linux.amd64 ### Move the binary in to your PATH mv sops-v3.10.0.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.10.0.checksums.txt \ --certificate sops-v3.10.0.checksums.pem \ --signature sops-v3.10.0.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.10.0.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.10.0.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.10.0/sops-v3.10.0.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact <artifact> \ --provenance-path sops-v3.10.0.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.10.0 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.10.0` - `ghcr.io/getsops/sops:v3.10.0-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.10.0` - `quay.io/getsops/sops:v3.10.0-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.10.0 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`. #### What's Changed - build(deps): Bump alpine from 3.18 to 3.21 in /.release in the docker group across 1 directory by [@dependabot](https://github.com/dependabot) in getsops/sops#1700 - Convert changelog to MarkDown by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1741 - build(deps): Bump the go group with 7 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1743 - build(deps): Bump the go group with 9 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1745 - build(deps): Bump the rust group in /functional-tests with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1744 - build(deps): Bump github/codeql-action from 3.28.5 to 3.28.8 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1746 - build(deps): Bump the go group with 12 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1751 - build(deps): Bump the ci group with 4 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1750 - Add --input-type option for filestatus subcommand by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1601 - Use SOPS_EDITOR before EDITOR by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1611 - Allow users to disable version check via environment variable by [@nicklasfrahm](https://github.com/nicklasfrahm) in getsops/sops#1684 - add duplicate section support to ini store by [@reindlt](https://github.com/reindlt) in getsops/sops#1452 - stores: test for duplicate keys, reserve keyword (yaml only now) by [@holiman](https://github.com/holiman) in getsops/sops#1203 - Add same process option for exec-env by [@ricmatsui](https://github.com/ricmatsui) in getsops/sops#880 - outputs: add trailing newline at the end of JSON files by [@duthils](https://github.com/duthils) in getsops/sops#1476 - set subcommand: add --idempotent flag that will not write the file if no change happened by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1754 - Encrypt and decrypt time.Time objects by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1759 - build(deps): Bump the go group with 8 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1763 - build(deps): Bump tempfile from 3.16.0 to 3.17.0 in /functional-tests in the rust group by [@dependabot](https://github.com/dependabot) in getsops/sops#1762 - build(deps): Bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1761 - fix(docs): typo in README.rst by [@Paredev](https://github.com/Paredev) in getsops/sops#1765 - Add SSH support for age by [@haoqixu](https://github.com/haoqixu) in getsops/sops#1692 - make sure that tests do not pick keys.txt from user's HOME dir by [@tomaszduda23](https://github.com/tomaszduda23) in getsops/sops#1766 - support for age identity with passphrase by [@tomaszduda23](https://github.com/tomaszduda23) in getsops/sops#1400 - build(deps): Bump the rust group in /functional-tests with 4 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1768 - build(deps): Bump the go group with 12 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1769 - build(deps): Bump the ci group with 4 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1770 - build(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 by [@dependabot](https://github.com/dependabot) in getsops/sops#1773 - feat: add age plugin support by [@brianmcgee](https://github.com/brianmcgee) in getsops/sops#1641 - Check GnuPG decryption result for non-empty size by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1776 - vendored age code: consolidate passphrase reading functionality by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1775 - Allow to encrypt and decrypt from stdin by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1690 - build(deps): Bump the go group with 11 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1784 - build(deps): Bump the ci group with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1782 - build(deps): Bump serde_json from 1.0.139 to 1.0.140 in /functional-tests in the rust group; bump Rust to 1.85.0 by [@dependabot](https://github.com/dependabot) in getsops/sops#1783 - build(deps): Bump the go group with 13 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1797 - build(deps): Bump the rust group in /functional-tests with 3 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1796 - build(deps): Bump github/codeql-action from 3.28.10 to 3.28.11 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1795 - build(deps): Bump the go group with 6 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1802 - build(deps): Bump tempfile from 3.18.0 to 3.19.0 in /functional-tests in the rust group by [@dependabot](https://github.com/dependabot) in getsops/sops#1800 - build(deps): Bump docker/login-action from 3.3.0 to 3.4.0 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1801 - build(deps): Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by [@dependabot](https://github.com/dependabot) in getsops/sops#1806 - goreleaser: add windows arm64 by [@duthils](https://github.com/duthils) in getsops/sops#1791 - Add a way to set sops config location via envvar by [@sledzikowy](https://github.com/sledzikowy) in getsops/sops#1701 - build(deps): Bump the go group with 3 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1809 - build(deps): Bump the ci group with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1808 - build(deps): Bump tempfile from 3.19.0 to 3.19.1 in /functional-tests in the rust group by [@dependabot](https://github.com/dependabot) in getsops/sops#1807 - Support --config option in publish subcommand by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1779 - Fix caching of Metadata.DataKey by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1781 - Lint by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1780 - updatekeys subcommand: rename GroupQuorum to ShamirThreshold by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1631 - If --filename-override is specified, convert it to an absolute path same as regular filenames by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1793 - Add support for `oauth2.TokenSource` in GCP KMS by [@matheuscscp](https://github.com/matheuscscp) in getsops/sops#1794 - Added SOPS_AGE_KEY_CMD option to age, fixes [#1323](getsops/sops#1323) by [@danilobuerger](https://github.com/danilobuerger) in getsops/sops#1811 - chore: omitempty metadata to reduce the size of stored config by [@cgetzen](https://github.com/cgetzen) in getsops/sops#1571 - Improve Shamir Secret Sharing code by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1813 - Update all dependencies by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1814 - Run 'gofmt -w' on all .go files by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1817 - Add option to explicitly check for the latest version; deprecate current default of always doing that unless disabled by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1816 - Build using Go 1.24 and drop support for 1.22 by [@hiddeco](https://github.com/hiddeco) in getsops/sops#1819 - Support `GOOGLE_OAUTH_ACCESS_TOKEN` for Google Cloud Platform by [@marensofier](https://github.com/marensofier) in getsops/sops#1578 - Warn about `.sops.yml` files found while searching for `.sops.yaml` by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1820 - Release 3.10.0 by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1815 - Added support for multiarch windows release binaries by [@sabre1041](https://github.com/sabre1041) in getsops/sops#1823 #### New Contributors - [@reindlt](https://github.com/reindlt) made their first contribution in getsops/sops#1452 - [@ricmatsui](https://github.com/ricmatsui) made their first contribution in getsops/sops#880 - [@Paredev](https://github.com/Paredev) made their first contribution in getsops/sops#1765 - [@haoqixu](https://github.com/haoqixu) made their first contribution in getsops/sops#1692 - [@brianmcgee](https://github.com/brianmcgee) made their first contribution in getsops/sops#1641 - [@sledzikowy](https://github.com/sledzikowy) made their first contribution in getsops/sops#1701 - [@matheuscscp](https://github.com/matheuscscp) made their first contribution in getsops/sops#1794 - [@danilobuerger](https://github.com/danilobuerger) made their first contribution in getsops/sops#1811 - [@cgetzen](https://github.com/cgetzen) made their first contribution in getsops/sops#1571 - [@marensofier](https://github.com/marensofier) made their first contribution in getsops/sops#1578 - [@sabre1041](https://github.com/sabre1041) made their first contribution in getsops/sops#1823 **Full Changelog**: getsops/sops@v3.9.4...v3.10.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

dependabot bot added the dependencies Pull requests that update a dependency file label Apr 7, 2025

felixfontein approved these changes Apr 7, 2025

View reviewed changes

felixfontein merged commit 7d4395f into main Apr 7, 2025
15 checks passed

felixfontein deleted the dependabot/go_modules/go-62c5b7fd63 branch April 7, 2025 17:14

BrewTestBot mentioned this pull request Apr 14, 2025

sops 3.10.2 Homebrew/homebrew-core#220086

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): Bump the go group with 13 updates #1834

build(deps): Bump the go group with 13 updates #1834

Uh oh!

dependabot bot commented on behalf of github Apr 7, 2025

Uh oh!

Uh oh!

Uh oh!

build(deps): Bump the go group with 13 updates #1834

build(deps): Bump the go group with 13 updates #1834

Uh oh!

Conversation

dependabot bot commented on behalf of github Apr 7, 2025

sdk/azcore/v1.18.0

1.18.0 (2025-04-03)

Features Added

v3.12.0

What's Changed

New Contributors

Release 1.71.1

Bug Fixes

Uh oh!

Uh oh!

Uh oh!