Update all dependencies by bootc-bot[bot] · Pull Request #119 · bootc-dev/podman-bootc

bootc-bot · 2025-09-08T00:35:31Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/adrg/xdg	`v0.4.0` → `v0.5.3`
github.com/containers/gvisor-tap-vsock	`v0.7.3` → `v0.8.8`
github.com/distribution/reference	`v0.5.0` → `v0.6.0`
github.com/gofrs/flock	`v0.8.1` → `v0.13.0`
github.com/onsi/ginkgo/v2	`v2.17.1` → `v2.28.2`
github.com/onsi/gomega	`v1.32.0` → `v1.39.1`
github.com/sirupsen/logrus	`v1.9.3` → `v1.9.4`
github.com/spf13/cobra	`v1.8.0` → `v1.10.2`
golang.org/x/sys	`v0.26.0` → `v0.43.0`
golang.org/x/term	`v0.25.0` → `v0.42.0`
libvirt.org/go/libvirt	`v1.10002.0` → `v1.12002.0`

Release Notes

adrg/xdg (github.com/adrg/xdg)

`v0.5.3`

Compare Source

Changelog

Updated xdg.SearchRuntimeFile to also look in the operating system's temporary directory for runtime files.
This covers unlikely cases in which runtime files cannot be written relative to the base runtime directory either because it does not exist or it is not accessible, so xdg.RuntimeFile suggests the operating system's temporary directory as a suitable fallback location.

Internal

Improved package testing.

`v0.5.2`

Compare Source

Changelog

Updated logic of xdg.RuntimeFile: due to the special nature of the runtime directory, the function no longer attempts to create it if it does not exist. If that's the case, the function uses the operating system's temporary directory as a fallback. The function still creates subdirectories relative to the base runtime directory or its fallback.

Justification: the creation of the runtime directory is not in the scope of this package as it has special requirements defined by the XDG Base Directory Specification. Relevant excerpt:

The lifetime of the directory MUST be bound to the user being logged in. It MUST be created when the user first logs in and if the user fully logs out the directory MUST be removed. If the user logs in more than once they should get pointed to the same directory, and it is mandatory that the directory continues to exist from their first login to their last logout on the system, and not removed in between. Files in the directory MUST not survive reboot or a full logout/login cycle.

Also, on Linux, the parent directories of the default user runtime directory are owned by the root user so they cannot be created by a regular user. pam_systemd is usually responsible for creating the runtime directory (/run/user/$UID).

`v0.5.1`

Compare Source

Changelog

Added support for the non-standard XDG_BIN_HOME base directory.
See XDG base directories README section for more details.
Added more config and data search locations on macOS.
- Added ~/.config at the end of the list of default locations for XDG_CONFIG_DIRS.
- Added ~/.local/share at the end of the list of default locations for XDG_DATA_DIRS.
Added more application search locations on Windows:
- %ProgramFiles%
- %ProgramFiles%\Common Files
- %LOCALAPPDATA%\Programs
- %LOCALAPPDATA%\Programs\Common

Internal

Updated golang.org/x/sys dependency to the latest version.
Improved package testing.

`v0.5.0`

Compare Source

Changelog

user-dirs.dirs config file is now parsed on Unix-like operating systems (except for macOS and Plan 9).
See XDG user directories README section for more details.
Updated golang.org/x/sys dependency to the latest version.

Internal

Moved all path related functionality in internal pathutil package.
Added internal userdirs package:
- Moved xdg.UserDirectories to userdirs.Directories.
- Added parsing functions for user-dirs.dirs config file.
Improved package testing.

containers/gvisor-tap-vsock (github.com/containers/gvisor-tap-vsock)

`v0.8.8`

Compare Source

What's Changed

Enable config file based configuration by @MrEcco in #484
feat: add notification mechanism for network lifecycle events by @vyasgun in #566
Fix broken DNS lookups for responses with long TXT records or multiple TXT records by @fessyfoo in #561
Implement client.ListDHCPLeases() and add REST API documentation by @cfergeau in #557
Remove use of go-version-file in github actions, and document how to update the gvisor go module by @cfergeau in #589
Replace VFKT handshake with MSG_PEEK for vfkit connection identification by @vyasgun in #530
Add make cross-lint target for cross-platform linting by @vyasgun in #538
Misc code cleanups by @cfergeau in #551, #552, #555, and #602
tests: Rename SSH keys files by @evidolob in #565

Dependencies Updates

build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #575
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #544
build(deps): bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #564 and #586
build(deps): bump github.com/coreos/stream-metadata-go from 0.4.9 to 0.4.10 by @dependabot[bot] in #553
build(deps): bump github.com/foxcpp/go-mockdns from 1.1.0 to 1.2.0 by @dependabot[bot] in #588
build(deps): bump github.com/golangci/golangci-lint/v2 from 2.3.1 to 2.8.0 in /tools by @dependabot[bot] in #537, #556, #567, #573, #578, and #590
build(deps): bump github.com/miekg/dns from 1.1.68 to 1.1.72 by @dependabot[bot] in #585, #593, and #601
build(deps): bump github.com/onsi/gomega from 1.38.0 to 1.39.1 by @dependabot[bot] in #541, #583, #592, and #603
build(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by @dependabot[bot] in #598
build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in #542
build(deps): bump golang.org/x/crypto from 0.41.0 to 0.47.0 by @dependabot[bot] in #549, #558, #574, #579, and #595
build(deps): bump golang.org/x/mod from 0.27.0 to 0.32.0 by @dependabot[bot] in #548, #560, #571, #581, and #594
build(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 by @dependabot[bot] in #591

New Contributors

@MrEcco made their first contribution in #484
@fessyfoo made their first contribution in #561

Full Changelog: containers/gvisor-tap-vsock@v0.8.7...v0.8.8

`v0.8.7`

Compare Source

What's Changed

Added EC2 Metadata Service Access Flag by @dpdornseifer in #512
Don't show an ERROR when ignoring a RELEASE message by @jandubois in #529
Do not use RUN statement by @gbraad in #511
golangci-lint: migrate configuration to v2 schema by @vyasgun in #510
packit: Switch back to fedora-all alias by @cfergeau in #506

Dependency Updates

build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #536
build(deps): bump github.com/coreos/stream-metadata-go from 0.4.7 to 0.4.8 by @dependabot[bot] in #517 and #526
build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /tools by @dependabot[bot] in #518
build(deps): bump github.com/golangci/golangci-lint/v2 from 2.1.6 to 2.3.1 in /tools by @dependabot[bot] in #519 and #532
build(deps): bump github.com/miekg/dns from 1.1.65 to 1.1.68 by @dependabot[bot] in #507, #523 and #531
build(deps): bump github.com/onsi/gomega from 1.37.0 to 1.38.0 by @dependabot[bot] in #527
build(deps): bump github.com/vishvananda/netlink from 1.3.0 to 1.3.1 by @dependabot[bot] in #509
build(deps): bump golang.org/x/crypto from 0.38.0 to 0.41.0 by @dependabot[bot] in #515, #525 and #535
build(deps): bump golang.org/x/mod from 0.24.0 to 0.27.0 by @dependabot[bot] in #514, #522 and #534
build(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 by @dependabot[bot] in #516

New Contributors

@dpdornseifer made their first contribution in #512

Full Changelog: containers/gvisor-tap-vsock@v0.8.6...v0.8.7

`v0.8.6`

Compare Source

The main change in this release is a slight change of behaviour with the gvproxy --debug option. In previous releases, it was creating a capture.pcap file in gvproxy’s working directory. This was problematic for some users, as if this directory is not writable, gvproxy exits with an error.

Starting with 0.8.6, --debug will no longer dump network traffic automatically. If you need network traffic dumps, there’s a new --pcap option, and the path where to dump the data is configurable.

If this behaviour change is problematic for you, please file an issue so that we can revisit this in future releases.

What's Changed

gvproxy: Add --pcap option by @cfergeau in #501
Dockerfile changes to build gvforwarder by @vyasgun in #460
Add building image as a separate step to CI workflow by @vyasgun in #498
Document how gvisor-tap-vsock releases are made by @cfergeau in #461

Dependency Updates

build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot in #499
build(deps): bump golang.org/x/crypto from 0.36.0 to 0.38.0 by @dependabot in #495 and #503
build(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 by @dependabot in #494
build(deps): bump github.com/coreos/stream-metadata-go from 0.4.5 to 0.4.7 by @dependabot in #491 and #502
build(deps): bump github.com/miekg/dns from 1.1.63 to 1.1.65 by @dependabot in #496
build(deps): bump github.com/onsi/gomega from 1.36.2 to 1.37.0 by @dependabot in #492

Full Changelog: containers/gvisor-tap-vsock@v0.8.5...v0.8.6

`v0.8.5`

Compare Source

What's Changed

fix vfkit socket disposal by @lstocchi in #486
Upgrade to go '1.23.7' by @evidolob in #488
build(deps): bump golang.org/x/crypto from 0.32.0 to 0.36.0 by @dependabot in #482
build(deps): bump golang.org/x/mod from 0.22.0 to 0.24.0 by @dependabot in #483
build(deps): bump golang.org/x/net from 0.33.0 to 0.36.0 by @dependabot in #487

Full Changelog: containers/gvisor-tap-vsock@v0.8.4...v0.8.5

`v0.8.4`

Compare Source

What's Changed

Remove filewatcher package by @jandubois in #469
gvproxy: command: Add AddServiceEndpoint by @cfergeau in #468
Trim 'search' list field on macOS by @evidolob in #478

Full Changelog: containers/gvisor-tap-vsock@v0.8.3...v0.8.4

`v0.8.3`

Compare Source

What's Changed

OWNERS: Add Yevhen and Luca as approvers by @cfergeau in #459
Enable debugger for tests on macOS by @evidolob in #446
Use poll-based approach to subscribe to file changes by @fatanugraha in #463
Revert PR #339 by @evidolob in #467
Upload and Download tests against vfkit by @vyasgun in #453
Add --services flag to start API without using --listen flag by @lstocchi in #429

Dependencies updates

build(deps): bump github.com/miekg/dns from 1.1.62 to 1.1.63 by @dependabot in #465

Full Changelog: containers/gvisor-tap-vsock@v0.8.2...v0.8.3

`v0.8.2`

Compare Source

What's Changed

Allow empty list of nameservers by @jandubois in #443
Sync DNS Resolver Nameserver List by @fatanugraha in #450
Fix PortsForwarder.Expose() proxy check by @cpick in #441
Fix small error typo by @cpick in #440
Warn user and keep executing if Event Log Service is stopped by @lstocchi in #442
Tests: basic implementation for testing against vfkit by @lstocchi in #427
Run unit tests on linux by @lstocchi in #457

Dependencies updates

build(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0 by @dependabot in #438
build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0 by @dependabot in #445
build(deps): bump github.com/onsi/gomega from 1.36.0 to 1.36.2 by @dependabot in #444
build(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0 by @dependabot in #448

New Contributors

@cpick made their first contribution in #440
@jandubois made their first contribution in #443

Full Changelog: containers/gvisor-tap-vsock@v0.8.1...v0.8.2

`v0.8.1`

Compare Source

This release fixes a few regressions in the DNS code introduced in v0.8.0, and a race condition in one of our test cases.
There are also a few dependencies updates.

What's Changed

Use all configured ipv4 dns services by @evidolob in #426
Avoid crash with empty resolv.conf by @siretart in #420
win-sshproxy.tid created before thread id is available by @lstocchi in #433

Dependency updates

build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0 by @dependabot in #415
build(deps): bump github.com/onsi/gomega from 1.34.2 to 1.35.1 by @dependabot in #414
build(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0 by @dependabot in #423
build(deps): bump github.com/coreos/stream-metadata-go from 0.4.4 to 0.4.5 by @dependabot in #421
build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #430
build(deps): bump github.com/onsi/gomega from 1.35.1 to 1.36.0 by @dependabot in #431

New Contributors

@siretart made their first contribution in #420
@lstocchi made their first contribution in #433

Full Changelog: containers/gvisor-tap-vsock@v0.8.0...v0.8.1

`v0.8.0`

Compare Source

What's Changed

Fix consistent udp packet loss after the proxy read loop stopped by @fatanugraha in #393
Replace dns "resolver" calls with "dns.Exchange" func by @evidolob in #339
Check 'hosts' file records, during handling DNS requests by @evidolob in #401
Disable ssh port forwarding when value of -ssh-port is -1 by @vyasgun in #403
Move several log messages to the debug level by @AkihiroSuda in #408

Dependency Updates

go.mod: remove replace inet.af/tcpproxy => github.com/inetaf/tcpproxy by @AkihiroSuda in #409
packit: Don't attempt to build on f39 by @cfergeau in #400
OWNERS: Add Yevhen to 'reviewers' by @cfergeau in #396
Update to gvisor release-20240916.0 by @AkihiroSuda in #410
build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0 by @dependabot in #405
build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0 by @dependabot in https://github.com/containers/gvisor-tap-vsock/
pull/395
build(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2 by @dependabot in #391
build(deps): bump github.com/fsnotify/fsnotify from 1.4.9 to 1.7.0 by @dependabot in #406

New Contributors

@fatanugraha made their first contribution in #393
@vyasgun made their first contribution in #403

Full Changelog: containers/gvisor-tap-vsock@v0.7.5...v0.8.0

`v0.7.5`

Compare Source

This release fixes a podman regression: containers/podman#23616

What's Changed

deps: Revert inetaf/tcpproxy commit 2862066 by @cfergeau in #386
ghactions: Automatically create gh releases by @cfergeau in #374

Dependency updates

build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.1 by @dependabot in #376
build(deps): bump golang.org/x/sys from 0.22.0 to 0.24.0 by @dependabot in #381
build(deps): bump github.com/miekg/dns from 1.1.61 to 1.1.62 by @dependabot in #382
build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 by @dependabot in #380
Update golangci-lint to v1.60.1 by @cfergeau in #384
build(deps): bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.2.1 by @dependabot in #388
build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0 by @dependabot in #389

Full Changelog: containers/gvisor-tap-vsock@v0.7.4...v0.7.5

`v0.7.4`

Compare Source

What's Changed

handle ENOBUFS when writing to VM socket by @Luap99 in #370
Fix OS specific url handling for unix:// scheme in transport by @arixmkii in #373
build: Build arm64 Windows binaries by @cfergeau in #341
Fix lint error by @evidolob in #335
README: Clarify that the host HTTP API is not always there by @cfergeau in #346
Packit: remove EL8 and enable C10S downstream update by @lsm5 in #360
Add DNS '8.8.8.8' server to use in test by @evidolob in #334
test: Use ubuntu runner instead of macos runner for tests by @cfergeau in #359
Allow testsuite to run on Apple Silicon hardware by @cfergeau in #362

Dependency Updates

build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 by @dependabot in #328
build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #331
build(deps): bump golangci/golangci-lint-action from 3 to 4 by @dependabot in #329
build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 by @dependabot in #333
build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0 by @dependabot in #332
go.mod: Change inet.af/tcpproxy to github.com/inetaf/tcpproxy by @praveenkumar in #338
build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 by @dependabot in #342
build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in #343
build(deps): bump google.golang.org/protobuf from 1.28.0 to 1.33.0 in /tools by @dependabot in #336
build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0 by @dependabot in #337
build(deps): bump golangci/golangci-lint-action from 4 to 6 by @dependabot in #354
build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0 by @dependabot in #349
build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2 by @dependabot in #350
build(deps): bump github.com/miekg/dns from 1.1.58 to 1.1.59 by @dependabot in #347
build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.1 by @dependabot in #352
build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0 by @dependabot in #355
build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 by @dependabot in #364
build(deps): bump github.com/miekg/dns from 1.1.59 to 1.1.61 by @dependabot in #365
go.mod: Update github.com/insomniacslk/dhcp to latest git main by @cfergeau in #366
build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #369

New Contributors

@evidolob made their first contribution in #335

Full Changelog: containers/gvisor-tap-vsock@v0.7.3...v0.7.4

distribution/reference (github.com/distribution/reference)

`v0.6.0`

Compare Source

What's Changed

remove deprecated SplitHostname by @thaJeztah in #5
refactor splitDockerDomain to include more documentation by @thaJeztah in #7
fix typo in readme by @xrstf in #10
Exclude domain from name length check by @ozairasim in #9

New Contributors

@xrstf made their first contribution in #10
@ozairasim made their first contribution in #9

Full Changelog: distribution/reference@v0.5.0...v0.6.0

gofrs/flock (github.com/gofrs/flock)

`v0.13.0`

Compare Source

What's Changed

Minimum Go version 1.24

feat: add Stat method by @ferhatelmas in #127
chore(deps): bump golang.org/x/sys from 0.22.0 to 0.37.0

Full Changelog: gofrs/flock@v0.12.1...v0.13.0

`v0.12.1`

Compare Source

What's Changed

tests: add tests about directory support by @ldez in #89
chore(deps): bump golang.org/x/sys from 0.21.0 to 0.22.0 in the all group by @dependabot in #90
fix: missing read-write flag in reopenFDOnError by @crazy-max in #95

New Contributors

@crazy-max made their first contribution in #95

Full Changelog: gofrs/flock@v0.12.0...v0.12.1

`v0.12.0`

Compare Source

What's Changed

feat: differentiation of Solaris and Illumos by @ldez in #80
feat(windows): replace custom implementation with golang.org/x/sys/windows by @ldez in #81
fix: update fnctl implementation by @ldez in #84
feat: use runtime errors instead of compilation errors for unsupported platforms by @ldez in #85
refactor: use x/sys/* instead of Syscall when possible by @ldez in #87

Full Changelog: gofrs/flock@v0.11.0...v0.12.0

`v0.11.0`

Compare Source

What's Changed

feat: add options to define flag and permissions of the file by @ldez in #76
tests: remove files generated during tests by @ldez in #77

Full Changelog: gofrs/flock@v0.10.0...v0.11.0

`v0.10.0`

Compare Source

What's Changed

feat: add support for Illumos/Solaris by @gaige in #63
chore: migrate from gopkg.in/check to stretchr/testify by @ldez in #70
docs: remove reference to sync.Locker by @ldez in #66

New Contributors

@gaige made their first contribution in #63

Full Changelog: gofrs/flock@v0.9.0...v0.10.0

`v0.9.0`

Compare Source

What's Changed

chore: add go modules by @moskyb in #57
chore(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 by @dependabot in #65
fix: replace Syscall6 with SyscallN on Windows by @ldez

New Contributors

@moskyb made their first contribution in #57
@ldez made their first contribution in #64

Full Changelog: gofrs/flock@v0.8.1...v0.9.0

onsi/ginkgo (github.com/onsi/ginkgo/v2)

`v2.28.2`

Compare Source

2.28.2

Add ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]
Implement shell completion [94151c8]
Add asan CLI option mirroring msan implementation [4d21dbb]
Bump uri from 1.0.3 to 1.0.4 in /docs (#1630) [c102161]
fix aspect ratio [9619647]
update logos [5779304]

`v2.28.1`

Compare Source

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

`v2.28.0`

Compare Source

2.28.0

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @Icarus9913 for working on this!

`v2.27.5`

Compare Source

2.27.5

Fixes

Don't make a new formatter for each GinkgoT(); that's just silly and uses precious memory

`v2.27.4`

Compare Source

2.27.4

Fixes

CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]

`v2.27.3`

Compare Source

2.27.3

Fixes

report exit result in case of failure [1c9f356]
fix data race [ece19c8]

`v2.27.2`

Compare Source

2.27.2

Fixes

inline automaxprocs to simplify dependencies; this will be removed when Go 1.26 comes out [a69113a]

Maintenance

Fix syntax errors and typo [a99c6e0]
Fix paragraph position error [f993df5]

`v2.27.1`

Compare Source

2.27.1

Fixes

Fix Ginkgo Reporter slice-bounds panic [606c1cb]
Bug Fix: Add GinkoTBWrapper.Attr() and GinkoTBWrapper.Output() [a6463b3]

`v2.27.0`

Compare Source

2.27.0

Features

Transforming Nodes during Tree Construction

This release adds support for NodeArgsTransformers that can be registered with AddTreeConstructionNodeArgsTransformer.

These are called during the tree construction phase as nodes are constructed and can modify the node strings and decorators. This enables frameworks built on top of Ginkgo to modify Ginkgo nodes and enforce conventions.

Learn more here.

Spec Prioritization

A new SpecPriority(int) decorator has been added. Ginkgo will honor priority when ordering specs, ensuring that higher priority specs start running before lower priority specs

Learn more here.

Maintenance

Bump rexml from 3.4.0 to 3.4.2 in /docs (#1595) [1333dae]
Bump github.com/gkampitakis/go-snaps from 0.5.14 to 0.5.15 (#1600) [17ae63e]

`v2.26.0`

Compare Source

2.26.0

Features

Ginkgo can now generate json-formatted reports that are compatible with the go test json format. Use ginkgo --gojson-report=report.go.json. This is not intended to be a replacement for Ginkgo's native json format which is more information rich and better models Ginkgo's test structure semantics.

`v2.25.3`

[Compare Source](https://redirect.github.com/onsi/ginkgo/compare/v

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone UTC)

Branch creation
- "on sunday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

bootc-bot · 2025-09-08T01:39:04Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

bootc-bot · 2025-09-08T12:16:53Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

14 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.22.6` -> `1.24.0`
`golang.org/x/crypto`	`v0.28.0` -> `v0.41.0`
`github.com/Microsoft/go-winio`	`v0.6.1` -> `v0.6.2`
`github.com/fsnotify/fsnotify`	`v1.7.0` -> `v1.8.0`
`github.com/go-logr/logr`	`v1.4.1` -> `v1.4.3`
`github.com/google/go-cmp`	`v0.6.0` -> `v0.7.0`
`github.com/google/pprof`	`v0.0.0-20230323073829-e72429f035bd` -> `v0.0.0-20250403155104-27863c87afa6`
`github.com/spf13/pflag`	`v1.0.5` -> `v1.0.9`
`golang.org/x/mod`	`v0.17.0` -> `v0.27.0`
`golang.org/x/net`	`v0.30.0` -> `v0.43.0`
`golang.org/x/sync`	`v0.8.0` -> `v0.16.0`
`golang.org/x/text`	`v0.19.0` -> `v0.28.0`
`golang.org/x/time`	`v0.3.0` -> `v0.5.0`
`golang.org/x/tools`	`v0.21.1-0.20240508182429-e35e4ccd0d2d` -> `v0.36.0`
`google.golang.org/protobuf`	`v1.35.1` -> `v1.36.7`

bootc-bot · 2025-12-18T10:13:13Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

93 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.22.6` -> `1.25.0`
`dario.cat/mergo`	`v1.0.0` -> `v1.0.2`
`github.com/Azure/go-ansiterm`	`v0.0.0-20230124172434-306776ec8161` -> `v0.0.0-20250102033503-faa5f7b0171c`
`github.com/BurntSushi/toml`	`v1.3.2` -> `v1.5.0`
`github.com/Microsoft/go-winio`	`v0.6.1` -> `v0.6.2`
`github.com/Microsoft/hcsshim`	`v0.12.0-rc.3` -> `v0.13.0`
`github.com/cilium/ebpf`	`v0.11.0` -> `v0.17.3`
`github.com/containerd/cgroups/v3`	`v3.0.3` -> `v3.0.5`
`github.com/containerd/containerd`	`v1.7.13` -> `v1.7.23`
`github.com/containerd/errdefs`	`v0.1.0` -> `v1.0.0`
`github.com/containerd/stargz-snapshotter/estargz`	`v0.15.1` -> `v0.17.0`
`github.com/containerd/typeurl/v2`	`v2.1.1` -> `v2.2.3`
`github.com/containers/buildah`	`v1.35.3` -> `v1.43.1`
`github.com/containers/image/v5`	`v5.30.0` -> `v5.36.2`
`github.com/containers/libhvee`	`v0.7.0` -> `v0.10.1-0.20250829163521-178d10e67860`
`github.com/containers/ocicrypt`	`v1.1.9` -> `v1.2.1`
`github.com/containers/psgo`	`v1.9.0` -> `v1.9.1-0.20250826150930-4ae76f200c86`
`github.com/containers/storage`	`v1.53.0` -> `v1.59.1`
`github.com/coreos/go-systemd/v22`	`v22.5.1-0.20231103132048-7d375ecc2b09` -> `v22.6.0`
`github.com/crc-org/crc/v2`	`v2.32.0` -> `v2.48.0`
`github.com/crc-org/vfkit`	`v0.5.1` -> `v0.6.1`
`github.com/cyberphone/json-canonicalization`	`v0.0.0-20231217050601-ba74d44ecf5f` -> `v0.0.0-20241213102144-19d51d7fe467`
`github.com/cyphar/filepath-securejoin`	`v0.2.4` -> `v0.5.2`
`github.com/digitalocean/go-qemu`	`v0.0.0-20230711162256-2e3d0186973e` -> `v0.0.0-20250212194115-ee9b0668d242`
`github.com/docker/docker`	`v25.0.3+incompatible` -> `v28.5.1+incompatible`
`github.com/docker/docker-credential-helpers`	`v0.8.1` -> `v0.9.4`
`github.com/docker/go-connections`	`v0.5.0` -> `v0.6.0`
`github.com/fsnotify/fsnotify`	`v1.7.0` -> `v1.9.0`
`github.com/fsouza/go-dockerclient`	`v1.10.1` -> `v1.12.2`
`github.com/go-jose/go-jose/v3`	`v3.0.3` -> `v3.0.4`
`github.com/go-logr/logr`	`v1.4.1` -> `v1.4.3`
`github.com/go-openapi/analysis`	`v0.21.4` -> `v0.23.0`
`github.com/go-openapi/errors`	`v0.21.1` -> `v0.22.0`
`github.com/go-openapi/jsonpointer`	`v0.19.6` -> `v0.21.0`
`github.com/go-openapi/jsonreference`	`v0.20.2` -> `v0.21.0`
`github.com/go-openapi/loads`	`v0.21.2` -> `v0.22.0`
`github.com/go-openapi/runtime`	`v0.26.0` -> `v0.28.0`
`github.com/go-openapi/spec`	`v0.20.9` -> `v0.21.0`
`github.com/go-openapi/strfmt`	`v0.22.2` -> `v0.23.0`
`github.com/go-openapi/swag`	`v0.22.10` -> `v0.23.0`
`github.com/go-openapi/validate`	`v0.22.1` -> `v0.24.0`
`github.com/godbus/dbus/v5`	`v5.1.1-0.20230522191255-76236955d466` -> `v5.1.1-0.20241109141217-c266b19b28e9`
`github.com/golang/groupcache`	`v0.0.0-20210331224755-41bb18bfe9da` -> `v0.0.0-20241129210726-2c02b8208cf8`
`github.com/golang/protobuf`	`v1.5.3` -> `v1.5.4`
`github.com/google/go-cmp`	`v0.6.0` -> `v0.7.0`
`github.com/google/go-containerregistry`	`v0.19.0` -> `v0.20.6`
`github.com/google/pprof`	`v0.0.0-20230323073829-e72429f035bd` -> `v0.0.0-20260115054156-294ebfa9ad83`
`github.com/gorilla/schema`	`v1.2.1` -> `v1.4.1`
`github.com/klauspost/compress`	`v1.17.7` -> `v1.18.0`
`github.com/klauspost/cpuid/v2`	`v2.2.8` -> `v2.2.10`
`github.com/letsencrypt/boulder`	`v0.0.0-20230907030200-6d76a0f91e1e` -> `v0.0.0-20240620165639-de9c06129bec`
`github.com/lufia/plan9stats`	`v0.0.0-20211012122336-39d0f177ccd0` -> `v0.0.0-20240909124753-873cd0166683`
`github.com/mattn/go-colorable`	`v0.1.13` -> `v0.1.14`
`github.com/mattn/go-runewidth`	`v0.0.15` -> `v0.0.16`
`github.com/mattn/go-sqlite3`	`v1.14.22` -> `v1.14.32`
`github.com/mistifyio/go-zfs/v3`	`v3.0.1` -> `v3.1.0`
`github.com/moby/buildkit`	`v0.12.5` -> `v0.25.1`
`github.com/moby/sys/mountinfo`	`v0.7.1` -> `v0.7.2`
`github.com/moby/sys/sequential`	`v0.5.0` -> `v0.6.0`
`github.com/moby/sys/user`	`v0.1.0` -> `v0.4.0`
`github.com/opencontainers/image-spec`	`v1.1.0` -> `v1.1.1`
`github.com/opencontainers/runc`	`v1.1.12` -> `v1.3.4`
`github.com/opencontainers/runtime-spec`	`v1.2.0` -> `v1.2.1`
`github.com/opencontainers/runtime-tools`	`v0.9.1-0.20230914150019-408c51e934dc` -> `v0.9.1-0.20250523060157-0ea5ed0382a2`
`github.com/opencontainers/selinux`	`v1.11.0` -> `v1.13.1`
`github.com/openshift/imagebuilder`	`v1.2.6` -> `v1.2.19`
`github.com/pkg/sftp`	`v1.13.6` -> `v1.13.9`
`github.com/power-devops/perfstat`	`v0.0.0-20210106213030-5aafc221ea8c` -> `v0.0.0-20240221224432-82ca36839d55`
`github.com/proglottis/gpgme`	`v0.1.3` -> `v0.1.5`
`github.com/secure-systems-lab/go-securesystemslib`	`v0.8.0` -> `v0.9.1`
`github.com/sigstore/fulcio`	`v1.4.3` -> `v1.7.1`
`github.com/sigstore/rekor`	`v1.2.2` -> `v1.3.6`
`github.com/sigstore/sigstore`	`v1.8.2` -> `v1.9.5`
`github.com/tchap/go-patricia/v2`	`v2.3.1` -> `v2.3.3`
`github.com/tklauser/go-sysconf`	`v0.3.12` -> `v0.3.15`
`github.com/tklauser/numcpus`	`v0.6.1` -> `v0.10.0`
`github.com/ulikunitz/xz`	`v0.5.11` -> `v0.5.15`
`github.com/vbatts/tar-split`	`v0.11.5` -> `v0.12.1`
`github.com/vbauerster/mpb/v8`	`v8.7.2` -> `v8.10.2`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.45.0` -> `v0.61.0`
`go.opentelemetry.io/otel`	`v1.22.0` -> `v1.36.0`
`go.opentelemetry.io/otel/metric`	`v1.22.0` -> `v1.36.0`
`golang.org/x/exp`	`v0.0.0-20240222234643-814bf88cf225` -> `v0.0.0-20250408133849-7e4ce0ab07d0`
`golang.org/x/mod`	`v0.17.0` -> `v0.34.0`
`golang.org/x/net`	`v0.30.0` -> `v0.52.0`
`golang.org/x/sync`	`v0.8.0` -> `v0.20.0`
`golang.org/x/text`	`v0.19.0` -> `v0.36.0`
`golang.org/x/time`	`v0.3.0` -> `v0.11.0`
`golang.org/x/tools`	`v0.21.1-0.20240508182429-e35e4ccd0d2d` -> `v0.43.0`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20231212172506-995d672761c0` -> `v0.0.0-20250414145226-207652e42e2e`
`google.golang.org/grpc`	`v1.61.0` -> `v1.72.2`
`google.golang.org/protobuf`	`v1.35.1` -> `v1.36.9`
`sigs.k8s.io/yaml`	`v1.4.0` -> `v1.6.0`
`tags.cncf.io/container-device-interface`	`v0.6.2` -> `v1.0.1`

Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>

bootc-bot Bot force-pushed the bootc-renovate/all branch from 06ed494 to 1dfe0b7 Compare September 8, 2025 12:16

bootc-bot Bot changed the title ~~Update actions/checkout action to v5~~ Update all dependencies Sep 8, 2025

bootc-bot Bot force-pushed the bootc-renovate/all branch from 1dfe0b7 to 3179935 Compare September 9, 2025 13:19

bootc-bot Bot force-pushed the bootc-renovate/all branch from 3179935 to 282bf6f Compare September 24, 2025 16:12

bootc-bot Bot force-pushed the bootc-renovate/all branch 4 times, most recently from 47db32d to 2ab0deb Compare October 8, 2025 16:12

bootc-bot Bot force-pushed the bootc-renovate/all branch 2 times, most recently from 928437b to af92060 Compare October 13, 2025 22:10

bootc-bot Bot force-pushed the bootc-renovate/all branch 3 times, most recently from acc30b4 to 125aae8 Compare October 27, 2025 20:10

bootc-bot Bot force-pushed the bootc-renovate/all branch 3 times, most recently from b894e83 to 960c46f Compare November 11, 2025 17:11

bootc-bot Bot force-pushed the bootc-renovate/all branch 6 times, most recently from e503fa5 to f3695e5 Compare December 8, 2025 16:13

bootc-bot Bot force-pushed the bootc-renovate/all branch from f3695e5 to f5c9700 Compare December 8, 2025 18:16

bootc-bot Bot force-pushed the bootc-renovate/all branch 4 times, most recently from decd882 to 80c5d60 Compare January 12, 2026 23:11

bootc-bot Bot force-pushed the bootc-renovate/all branch 2 times, most recently from 61d5e77 to 3a35958 Compare January 15, 2026 19:16

bootc-bot Bot force-pushed the bootc-renovate/all branch from 3a35958 to d138d10 Compare January 22, 2026 14:23

bootc-bot Bot force-pushed the bootc-renovate/all branch 6 times, most recently from 72148c5 to 43fb814 Compare February 10, 2026 19:33

bootc-bot Bot force-pushed the bootc-renovate/all branch 2 times, most recently from 6c1055a to 6f179dd Compare March 8, 2026 12:18

bootc-bot Bot force-pushed the bootc-renovate/all branch from 6f179dd to 9ba5c17 Compare March 11, 2026 13:36

bootc-bot Bot changed the title ~~Update all dependencies~~ fix(deps): update all dependencies Mar 19, 2026

bootc-bot Bot force-pushed the bootc-renovate/all branch 2 times, most recently from 20cca79 to 2266d40 Compare April 1, 2026 16:33

bootc-bot Bot changed the title ~~fix(deps): update all dependencies~~ Update all dependencies Apr 2, 2026

bootc-bot Bot force-pushed the bootc-renovate/all branch 2 times, most recently from 15454eb to 41652a1 Compare April 9, 2026 12:35

bootc-bot Bot force-pushed the bootc-renovate/all branch from 41652a1 to 74eefe4 Compare April 27, 2026 03:18

Update all dependencies

b2291cb

Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>

bootc-bot Bot force-pushed the bootc-renovate/all branch from 74eefe4 to b2291cb Compare April 27, 2026 17:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update all dependencies#119

Update all dependencies#119
bootc-bot[bot] wants to merge 1 commit intomainfrom
bootc-renovate/all

bootc-bot Bot commented Sep 8, 2025 •

edited

Loading

Uh oh!

bootc-bot Bot commented Sep 8, 2025

Uh oh!

bootc-bot Bot commented Sep 8, 2025

Uh oh!

bootc-bot Bot commented Dec 18, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

bootc-bot Bot commented Sep 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changelog

Internal

Changelog

Changelog

Internal

Changelog

Internal

What's Changed

Dependencies Updates

New Contributors

What's Changed

Dependency Updates

New Contributors

What's Changed

Dependency Updates

What's Changed

What's Changed

What's Changed

Dependencies updates

What's Changed

Dependencies updates

New Contributors

What's Changed

Dependency updates

New Contributors

What's Changed

Dependency Updates

New Contributors

What's Changed

Dependency updates

What's Changed

Dependency Updates

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

2.28.2

2.28.1

2.28.0

2.27.5

Fixes

2.27.4

Fixes

2.27.3

Fixes

2.27.2

Fixes

Maintenance

2.27.1

Fixes

2.27.0

Features

Transforming Nodes during Tree Construction

Spec Prioritization

Maintenance

2.26.0

Features

Configuration

Uh oh!

bootc-bot Bot commented Sep 8, 2025

Edited/Blocked Notification

Uh oh!

bootc-bot Bot commented Sep 8, 2025

ℹ Artifact update notice

File name: go.mod

Uh oh!

bootc-bot Bot commented Dec 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

bootc-bot Bot commented Sep 8, 2025 •

edited

Loading

bootc-bot Bot commented Dec 18, 2025 •

edited

Loading