Skip to content

chore(deps): bump github.com/sylabs/sif/v2 from 2.22.0 to 2.23.0#526

Merged
wagoodman merged 1 commit intomainfrom
dependabot/go_modules/github.com/sylabs/sif/v2-2.23.0
Mar 4, 2026
Merged

chore(deps): bump github.com/sylabs/sif/v2 from 2.22.0 to 2.23.0#526
wagoodman merged 1 commit intomainfrom
dependabot/go_modules/github.com/sylabs/sif/v2-2.23.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 19, 2026 •
edited
Loading

Bumps github.com/sylabs/sif/v2 from 2.22.0 to 2.23.0.

Release notes

Sourced from github.com/sylabs/sif/v2's releases.

v2.23.0

This release drops support for Go 1.24.

What's Changed

Full Changelog: sylabs/sif@v2.22.0...v2.23.0

Commits
  • a9bf1a9 Merge pull request #441 from sylabs/dependabot/go_modules/github.com/sigstore...
  • 35bb6a1 build(deps): bump github.com/sigstore/sigstore from 1.9.5 to 1.10.4
  • e83475c Merge pull request #443 from tri-adam/go-1.26
  • 58a1f73 chore: bump node to latest LTS release
  • 365c0c8 chore: bump golangci-lint to v2.9
  • e3414ac chore: bump module to Go 1.25
  • 45c672d Merge pull request #440 from tri-adam/golangci-lint-2.8
  • dac0e14 chore: bump golangci-lint to v2.8
  • 5e80e73 Merge pull request #436 from sylabs/dependabot/go_modules/main/github.com/spf...
  • 82250fc build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 19, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Feb 19, 2026 •
edited
Loading

Benchmark Test Results

Benchmark results from the latest changes vs base branch 
make .tool/task
make[1]: Entering directory '/home/runner/work/stereoscope/stereoscope'
make[1]: Leaving directory '/home/runner/work/stereoscope/stereoscope'
.tool/task show-benchstat
?   	github.com/anchore/stereoscope	[no test files]
?   	github.com/anchore/stereoscope/examples	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal	0.003s
?   	github.com/anchore/stereoscope/internal/bus	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal/containerd	0.006s
PASS
ok  	github.com/anchore/stereoscope/internal/docker	0.004s
?   	github.com/anchore/stereoscope/internal/log	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal/podman	0.004s
?   	github.com/anchore/stereoscope/pkg/event	[no test files]
?   	github.com/anchore/stereoscope/pkg/event/parsers	[no test files]
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: Intel(R) Xeon(R) Platinum 8370C CPU @ 2.80GHz
BenchmarkTarIndex-4   	   51643	     23229 ns/op	    5699 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   51782	     23020 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   51879	     23098 ns/op	    5701 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   52192	     22818 ns/op	    5701 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   52003	     23716 ns/op	    5701 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   51811	     22893 ns/op	    5699 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   51777	     23040 ns/op	    5700 B/op	      93 allocs/op
PASS
ok  	github.com/anchore/stereoscope/pkg/file	10.049s
PASS
ok  	github.com/anchore/stereoscope/pkg/filetree	0.004s
?   	github.com/anchore/stereoscope/pkg/filetree/filenode	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/image	0.004s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/containerd	0.006s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/docker	0.005s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/oci	0.004s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/oci/credhelpers	0.004s
?   	github.com/anchore/stereoscope/pkg/image/podman	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/image/sif	0.003s
?   	github.com/anchore/stereoscope/pkg/imagetest	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/tree	0.003s
PASS
ok  	github.com/anchore/stereoscope/pkg/tree/node	0.003s
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/test/integration
cpu: Intel(R) Xeon(R) Platinum 8370C CPU @ 2.80GHz
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1591	    784654 ns/op	  274296 B/op	    2217 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1426	    776294 ns/op	  273915 B/op	    2216 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1518	    783550 ns/op	  273845 B/op	    2216 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1507	    859990 ns/op	  273788 B/op	    2216 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1492	    785513 ns/op	  273659 B/op	    2216 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1533	    882487 ns/op	  273539 B/op	    2216 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1522	    787955 ns/op	  273333 B/op	    2215 allocs/op
--- FAIL: BenchmarkSimpleImage_GetImage/podman
    fixture_image_simple_test.go:175: could not get fixture image: unable to detect input for 'stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7', errs: podman not available: no host address
#0 building with "default" instance using docker driver

#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 345B done
#1 DONE 0.0s

#2 [internal] load .dockerignore
#2 transferring context: 2B done
#2 DONE 0.0s

#3 [internal] load build context
#3 transferring context: 209B done
#3 DONE 0.0s

#4 [1/3] ADD file-1.txt /somefile-1.txt
#4 CACHED

#5 [2/3] ADD file-2.txt /somefile-2.txt
#5 CACHED

#6 [3/3] ADD target /
#6 CACHED

#7 exporting to image
#7 exporting layers done
#7 writing image sha256:b83e058bdb5ea4670632aa6e7f5352bce6e39f9076ff2a5e05c1c9a77167d43d done
#7 naming to docker.io/library/stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7 done
#7 naming to docker.io/library/stereoscope-fixture-image-simple:latest done
#7 DONE 0.0s
time="2026-03-04T15:00:41Z" level=warning msg="Failed to check deprecations" error="connection error: desc = \"transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied\""
ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
--- FAIL: BenchmarkSimpleImage_GetImage
    image_fixtures.go:193: using existing image tar: 'test-fixtures/cache/stereoscope-fixture-image-simple-04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7.tar' (size: 22528, modified: 2026-03-04 14:59:54.045965677 +0000 UTC, mode: -rw-r--r--)
    image_fixtures.go:241: Build docker image: name="stereoscope-fixture-image-simple" tag="04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7"
    image_fixtures.go:291: saveImage running: docker image save stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7
    image_fixtures.go:286: 
        	Error Trace:	/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:286
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:162
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:152
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:33
        	            				/home/runner/work/stereoscope/stereoscope/test/integration/fixture_image_simple_test.go:163
        	            				/opt/hostedtoolcache/go/1.25.7/x64/src/testing/benchmark.go:245
        	            				/opt/hostedtoolcache/go/1.25.7/x64/src/runtime/asm_amd64.s:1693
        	Error:      	Received unexpected error:
        	            	exit status 1
        	Test:       	BenchmarkSimpleImage_GetImage
        	Messages:   	could not import docker image to containerd (shell out)
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	  110134	     11026 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	  107760	     10971 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	  108296	     11000 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	  107294	     11092 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	  107995	     10996 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	  109188	     10992 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	  108650	     10947 ns/op	    2616 B/op	      18 allocs/op
--- FAIL: BenchmarkSimpleImage_FetchSquashedContents
    image_fixtures.go:193: using existing image tar: 'test-fixtures/cache/stereoscope-fixture-image-simple-04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7.tar' (size: 22528, modified: 2026-03-04 14:59:54.045965677 +0000 UTC, mode: -rw-r--r--)
    image_fixtures.go:75: error getting fixture image: 'podman' 'image-simple' with request 'podman:stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7': unable to detect input for 'stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7', errs: podman not available: no host address
FAIL
exit status 1
FAIL	github.com/anchore/stereoscope/test/integration	19.060s
?   	github.com/anchore/stereoscope/test/integration/test-fixtures/registry	[no test files]
FAIL
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: Intel(R) Xeon(R) Platinum 8370C CPU @ 2.80GHz
ctr: 
           │ .tmp/benchmark-28d168f.txt │
           │           sec/op           │
TarIndex-4                  23.04µ ± 3%

           │ .tmp/benchmark-28d168f.txt │
           │            B/op            │
TarIndex-4                 5.566Ki ± 0%

           │ .tmp/benchmark-28d168f.txt │
           │         allocs/op          │
TarIndex-4                   93.00 ± 0%

pkg: github.com/anchore/stereoscope/test/integration
                                      │ .tmp/benchmark-28d168f.txt │
                                      │           sec/op           │
SimpleImage_GetImage/docker-archive-4                 785.5µ ± 12%

                                      │ .tmp/benchmark-28d168f.txt │
                                      │            B/op            │
SimpleImage_GetImage/docker-archive-4                 267.4Ki ± 0%

                                      │ .tmp/benchmark-28d168f.txt │
                                      │         allocs/op          │
SimpleImage_GetImage/docker-archive-4                  2.216k ± 0%

ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
                                                   │ .tmp/benchmark-28d168f.txt │
                                                   │           sec/op           │
SimpleImage_FetchSquashedContents/docker-archive-4                  11.00µ ± 1%

                                                   │ .tmp/benchmark-28d168f.txt │
                                                   │            B/op            │
SimpleImage_FetchSquashedContents/docker-archive-4                 2.555Ki ± 0%

                                                   │ .tmp/benchmark-28d168f.txt │
                                                   │         allocs/op          │
SimpleImage_FetchSquashedContents/docker-archive-4                   18.00 ± 0%
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: Intel(R) Xeon(R) Platinum 8370C CPU @ 2.80GHz
ctr: 
           │ .tmp/benchmark-28d168f.txt │
           │           sec/op           │
TarIndex-4                  23.04µ ± 3%

           │ .tmp/benchmark-28d168f.txt │
           │            B/op            │
TarIndex-4                 5.566Ki ± 0%

           │ .tmp/benchmark-28d168f.txt │
           │         allocs/op          │
TarIndex-4                   93.00 ± 0%

pkg: github.com/anchore/stereoscope/test/integration
                                      │ .tmp/benchmark-28d168f.txt │
                                      │           sec/op           │
SimpleImage_GetImage/docker-archive-4                 785.5µ ± 12%

                                      │ .tmp/benchmark-28d168f.txt │
                                      │            B/op            │
SimpleImage_GetImage/docker-archive-4                 267.4Ki ± 0%

                                      │ .tmp/benchmark-28d168f.txt │
                                      │         allocs/op          │
SimpleImage_GetImage/docker-archive-4                  2.216k ± 0%

ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
                                                   │ .tmp/benchmark-28d168f.txt │
                                                   │           sec/op           │
SimpleImage_FetchSquashedContents/docker-archive-4                  11.00µ ± 1%

                                                   │ .tmp/benchmark-28d168f.txt │
                                                   │            B/op            │
SimpleImage_FetchSquashedContents/docker-archive-4                 2.555Ki ± 0%

                                                   │ .tmp/benchmark-28d168f.txt │
                                                   │         allocs/op          │
SimpleImage_FetchSquashedContents/docker-archive-4                   18.00 ± 0%

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/sylabs/sif/v2-2.23.0 branch from 8a17eb7 to d4448c2 Compare February 20, 2026 13:53
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/sylabs/sif/v2-2.23.0 branch from d4448c2 to 3f5c8f1 Compare March 4, 2026 14:34
@dependabot
chore(deps): bump github.com/sylabs/sif/v2 from 2.22.0 to 2.23.0
48063ea 
Bumps [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) from 2.22.0 to 2.23.0.
- [Release notes](https://github.com/sylabs/sif/releases)
- [Commits](sylabs/sif@v2.22.0...v2.23.0)

---
updated-dependencies:
- dependency-name: github.com/sylabs/sif/v2
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/sylabs/sif/v2-2.23.0 branch from 3f5c8f1 to 48063ea Compare March 4, 2026 14:58
@wagoodman wagoodman merged commit fe7e5b5 into main Mar 4, 2026
7 checks passed
@wagoodman wagoodman deleted the dependabot/go_modules/github.com/sylabs/sif/v2-2.23.0 branch March 4, 2026 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@wagoodman