Repository navigation
chore(deps): update go - #152
Closed
bootc-bot[bot] wants to merge 1 commit into
Closed
bootc-bot[bot] wants to merge 1 commit into
bootc-bot[bot] wants to merge 1 commit into
Conversation
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
bootc-bot
Bot
force-pushed
the
bootc-renovate/go
branch
from
October 25, 2026 01:10
74dcf14 to
910d110
Compare
HarshwardhanPatil07
left a comment
HarshwardhanPatil07
left a comment
Member
There was a problem hiding this comment.
so many things failing and needs manual updation here
Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com> Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>
bootc-bot
Bot
force-pushed
the
bootc-renovate/go
branch
from
October 26, 2026 08:43
910d110 to
1271dba
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
v0.2.5→v0.2.68c912ac→51075c6v0.6.3-0.20260930231756-f19d9717deb0→v0.6.4v1.6.3→v1.6.519d51d7→32a4819v0.9.10→v0.9.12v3.13.0→v3.14.0v1.13.2→v1.13.3v2.9.1→v2.9.6v4.1.5→v4.1.6v1.0.0→v1.0.2v1.0.0→v1.0.3v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.7.0→v0.7.1545e8a4→1facf8fv1.5.0→v1.6.0v1.2.7→v1.3.0v0.31.2→v0.34.1v0.3.0→v0.3.3v0.4.0→v0.5.08a4db57→bd3b0bdv1.2.21→v1.2.22v2.3.1→v2.4.3v1.13.11→v1.13.120393e58→8ae5a48v0.11.0→v0.12.0v1.8.8→v1.9.1v1.10.11→v1.11.1v0.2.1→v0.2.3v8.16.2→v8.16.3v0.71.0→v0.72.0v1.46.0→v1.47.0v1.46.0→v1.47.0v1.46.0→v1.47.0v1.45.2→v1.46.0v2.4.4→v3.0.5v0.41.0→v0.42.0v0.60.0→v0.61.0v0.15.0→v0.16.0v0.51.0→v0.52.0da73d73→ce908d2da73d73→ce908d2v1.83.2→v1.84.0v4.13.0→v5.9.11d427ff9→ca3452abe93311→ca04ba52d32026→11ed52ev6.4.2→v7.0.1Release Notes
cyphar/libpathrs (cyphar.com/go-pathrs)
v0.2.6: libpathrs v0.2.6 -- "If only, if only," the woodpecker sighs, "The bark on the tree was as soft as the skies."Compare Source
This release includes a few fixes related to CGo and finicky compiler
issues, as well as replacing some assertions that caused issues with
runc with some more graceful handling of unexpected conditions.
Fixed:
The new
--{enable,disable}-*arguments forinstall.shto control sharedlibrary installation were incorrectly called
--disable-dynamicrather thanautoconf's
--disable-shared. We have added new--{enable,disable}-sharedflags and the old ones are kept for compatibility.
go-pathrs: Fix build failures when building the Go bindings with Clang. CGo's
handling of numerical C constants is somewhat compiler-dependent and some of
our sanity checking code would previously fail to compile under
CC=clang.(#401)
Previously, if a downstream regenerated our
include/pathrs.hheader withusing
cbindgen >= v0.29.3, the header would use C23 features that wouldcause go-pathrs to fail to build. We now have worked around the issue for
go-pathrs but we still have not updated our headers because our Python
bindings have other issues with the new headers. See the discussion in
mozilla/cbindgen#1156 for more details.
Changed:
runc closes all open file descriptors before executing user code in order to
avoid some particularly hairy security bugs. Unfortunately, this also
invalidates the cached
ProcfsHandlein libpathrs, which could cause runc tolater crash if a subsequent procfs operation was attempted (which happened in
the error path of runc).
Most downstream users will never run into this issue, but we now handle
the problem a bit more gracefully -- if libpathrs detects this problematic
condition, the cached handle is locked out of use and all
ProcfsHandleBuilder::buildinvocations will produce a new handle. (#413, opencontainers/runc#5438)
Thanks to the following contributors who made this release possible:
Signed-off-by: Aleksa Sarai cyphar@cyphar.com
This release is dedicated to our dearest Yuki, who passed away a year
ago today in our arms after bravely fighting heart disease for a year.
You were the bestest and most loving little boy, we miss your rumbling
purrs, your aggressive head rubs and drooling all over our faces while
we slept. We always said you had such a big heart, I only wish we
could've fixed it for you. We're so grateful to have been blessed with
our time with you, even if it was far shorter than it should've been.
You'll always be in our hearts, Yuki. Rest softly, our beautiful boy.
🖤 Yuki 2021-2025
An estimated one in seven (~15%) of cats are diagnosed with Hypertrophic
Cardiomyopathy (HCM) or similar heart diseases in their lifetimes, and it is
still sadly a death sentence. If you are a cat lover, please consider donating
to charities that are funding research into better diagnostics and treatment.
And don't forget to cherish your furry friends, your time with them may be
shorter than you expect.
Microsoft/go-winio (github.com/Microsoft/go-winio)
v0.6.4Compare Source
What's Changed
Full Changelog: microsoft/go-winio@v0.6.3...v0.6.4
cloudflare/circl (github.com/cloudflare/circl)
v1.6.5: CIRCL v1.6.5Compare Source
What's Changed
ato challenge derivation. by @cjpatton in #663ed25519: document another divergence with crypto/ed25519 by @bwesterb in #671New Contributors
Full Changelog: cloudflare/circl@v1.6.4...v1.6.5
v1.6.4: CIRCL v1.6.4Compare Source
What's Changed
New Contributors
Full Changelog: cloudflare/circl@v1.6.3...v1.6.4
docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)
v0.9.12Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.11...v0.9.12
v0.9.11Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.10...v0.9.11
emicklei/go-restful (github.com/emicklei/go-restful/v3)
v3.14.0Compare Source
fsouza/go-dockerclient (github.com/fsouza/go-dockerclient)
v1.13.3Compare Source
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.9.6Compare Source
v2.9.6 fixes 12 bugs, including an important fix for apps that decode CBOR maps into Go maps, and has one behavior change. API is unchanged but more errors are detected.
Most of these bugs were identified while improving tests and reviewing code for an upcoming release.
Tests and fuzz tests were extended.
Upgrading to v2.9.6 from all prior versions is recommended.
🐞 Important Fix
For use cases outside the "not affected by this bug" list below, decoding a CBOR null or undefined map key or value (including
55799(null)) into a Go map whose key or value type is of bool, integer, float, or string kind kept the previous map entry's key or value (instead of the zero value). See PR #855 for details.Not affected by this bug:
map[any]any, and intoany(with unchangedDefaultMapType).Decoding CBOR null or undefined into an interface that holds a value now sets it to nil, matching encoding/json (v1 and v2). Previously, the interface kept its value (PR #827), which was not the intended behavior.
🛠 Bug fixes
Some of these bugs could only be triggered by incorrect usage in user apps, such as invalid struct tags or an unsupported DefaultByteStringType setting, etc. None of these bugs were reported by a project affected by them.
Decoding
Encoding
📖 Documentation
Full Changelog: fxamacker/cbor@v2.9.4...v2.9.6
v2.9.5Compare Source
This version was tagged from the default branch by mistake and is retracted.
Use v2.9.6 (https://github.com/fxamacker/cbor/releases/tag/v2.9.6) instead.
v2.9.4Compare Source
This release fixes potential panics when decoding a CBOR map whose key decodes to an uncomparable Go value under certain conditions.
Not affected: user apps that don't register tag types and don't use map key types that are either named empty interfaces (e.g.
type MyAny any) or contain interfaces.These potential panics can be encountered when one of these two conditions is met:
TagSetinterface) that is an array or struct with uncomparable orinterface{}element or field type, orThis was identified while improving tests and reviewing code for an upcoming release.
Tests and fuzz tests were extended to cover this bug.
Upgrading to v2.9.4 is recommended.
What's Changed
Full Changelog: fxamacker/cbor@v2.9.3...v2.9.4
v2.9.3Compare Source
This release fixes a potential panic when decoding into a
time.Timefrom a CBOR byte string, map, or array under certain conditions.Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with
timeTag = DecTagRequired.Upgrading to v2.9.3 is recommended.
The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.
What's Changed
Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3
v2.9.2Compare Source
This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.
Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).
The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.
This release passed fuzz tests (billions of execs) and it is production quality.
What's Changed
CI / GitHub Actions and Docs
🔎 Details...
Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2
Details
[!IMPORTANT]
✂ PR body was truncated to here.
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.