Skip to content

chore(deps): bump the minor group across 1 directory with 7 updates#3771

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/main/minor-5bd023cf36
Closed

chore(deps): bump the minor group across 1 directory with 7 updates#3771
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/main/minor-5bd023cf36

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Aug 1, 2025

Bumps the minor group with 5 updates in the / directory:

Package From To
github.com/containerd/containerd/v2 2.0.5 2.1.4
github.com/containers/image/v5 5.35.0 5.36.0
github.com/moby/buildkit 0.22.0 0.23.2
github.com/spf13/pflag 1.0.6 1.0.7
google.golang.org/grpc 1.73.0 1.74.2

Updates github.com/containerd/containerd/v2 from 2.0.5 to 2.1.4

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.1.4

Welcome to the v2.1.4 release of containerd!

The fourth patch release for containerd 2.1 contains various fixes and updates.

Highlights

Container Runtime Interface (CRI)

  • Fix containerd panic when sandbox extension is missing (#12076)
  • Update status response to return stable order for runtime handlers (#12054)

Go client

  • Fix lazy gRPC connection mode waiting for connect on client creation (#12079)

Image Distribution

  • Fix resolve deadlock issue in docker fetcher open (#12127)

Image Storage

  • Update erofs snapshotter to make immutable optional (#12091)
  • Fix erofs filesystem UUID for tar-converted layers (#12058)

Runtime

  • Fix close container io not closed when runtime create failed (#12009)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Derek McGowan
  • Phil Estes
  • Eric Mountain
  • Maksym Pavlenko
  • Gao Xiang
  • Kirtana Ashok
  • ningmingxiao
  • Akihiro Suda
  • Austin Vazquez
  • Paweł Gronowski
  • Sebastiaan van Stijn
  • Wei Fu
  • jinda.ljd

Changes

... (truncated)

Commits
  • 75cb2b7 Merge pull request #12159 from dmcgowan/prepare-v2.1.4
  • 112e413 Add release notes for v2.1.4
  • 341b254 Merge pull request #12127 from k8s-infra-cherrypick-robot/cherry-pick-12126-t...
  • add2dcf Ensure fetcher always closes body and properly calls release
  • 34a1cb1 fix(dockerFetcher): resolve deadlock issue in dockerFetcher open
  • 1a989e4 Merge pull request #12115 from austinvazquez/cherry-pick-c5ad254a3a18ca2e318f...
  • 82c4d68 ci: bump Go 1.23.11, 1.24.5
  • 8dfd980 Merge pull request #12119 from kiashok/backport-windows-fixes-2.1
  • 6cc2a8d Fix intermittent test failures on Windows CIs
  • 6adc693 Remove WS2025 from CIs due to regression
  • Additional commits viewable in compare view

Updates github.com/containers/image/v5 from 5.35.0 to 5.36.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.36.0

What's Changed

... (truncated)

Commits
  • 08ce6b4 Bump to c/image v5.36.0
  • b5e2b66 Bump to c/storage v1.59.0
  • 9e95082 Merge pull request #2898 from containers/renovate/golangci-golangci-lint-2.x
  • 70d266a Update dependency golangci/golangci-lint to v2.2.2
  • ccfad4e Merge pull request #2897 from containers/renovate/golang.org-x-crypto-0.x
  • 2b0ee9e Update module golang.org/x/crypto to v0.40.0
  • e412678 Merge pull request #2896 from mtrmac/simplesequoia-stub
  • 6b65ae3 Add a new Signer API for creating simple signing signatures with Sequoia-PGP
  • d9a97d8 Merge pull request #2894 from containers/renovate/github.com-docker-docker-28.x
  • 8a4cfcb Update module github.com/docker/docker to v28.3.2+incompatible
  • Additional commits viewable in compare view

Updates github.com/docker/cli from 28.1.1+incompatible to 28.3.2+incompatible

Commits
  • 578ccf6 Merge pull request #6170 from thaJeztah/e2e_newline_check
  • 0c5e258 e2e/global: TestPromptExitCode: check for trailing newline
  • 30cad38 Merge pull request #6167 from vvoland/update-go
  • 9bcc886 update to go1.24.5
  • 3302212 Merge pull request #6163 from Benehiko/env-credential-warn
  • ccd5bd8 registry: warn of DOCKER_AUTH_CONFIG usage in login and logout
  • dec07e6 tui/note: add warning note type
  • 28f19a9 Merge pull request #6162 from ArthurFlag/ENGDOCS-2807-cdi-docs-update
  • 219e5ca Merge pull request #6165 from thaJeztah/bump_engine_28.3.1
  • 7e040d9 docs: cdi is not experimental anymore
  • Additional commits viewable in compare view

Updates github.com/docker/docker from 28.1.1+incompatible to 28.3.2+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

28.3.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • Fix --use-api-socket not working correctly when targeting a remote daemon. docker/cli#6157
  • Fix stray "otel error" logs being printed if debug logging is enabled. docker/cli#6160
  • Quote SSH arguments when connecting to a remote daemon over an SSH connection to avoid unexpected expansion. docker/cli#6147
  • Warn when DOCKER_AUTH_CONFIG is set during docker login and docker logout. docker/cli#6163

Packaging updates

28.3.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Packaging updates

28.3.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New

... (truncated)

Commits

Updates github.com/moby/buildkit from 0.22.0 to 0.23.2

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.23.2

Welcome to the v0.23.2 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax
  • Tõnis Tiigi

Notable Changes

  • Fix attestation filename in local exporter. #6051
  • Fix expired cache URLs in GitHub Actions cache exporter. #6053

Dependency Changes

  • github.com/tonistiigi/go-actions-cache 388a2ec8cdf8 -> 378c5ed1ddd9

Previous release can be found at v0.23.1

v0.23.1

Welcome to the v0.23.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Derek McGowan

Notable Changes

  • Fix a possible issue where pulling images from some registries that don't handle the Range header correctly(Artifactory) would fail. #6040

Dependency Changes

  • github.com/containerd/containerd/v2 v2.1.1 -> v2.1.3

Previous release can be found at v0.23.0

v0.23.0

Welcome to the v0.23.0 release of buildkit!

... (truncated)

Commits
  • 40b2ede Merge pull request #6056 from crazy-max/v0.23_picks_0.23.2
  • 858cb7c gha cache: reload expired cache URLs
  • a8a1485 test: provenance local export
  • 090ffce local: fix attestation filename
  • c51ecee frontend: group provenance tests
  • 0a23057 Merge pull request #6039 from tonistiigi/v0.23-container-patch
  • 1d9a271 Update containerd to v2.1.3
  • cc8ff80 Merge pull request #6031 from tonistiigi/v0.23-rc2-picks
  • 2a2ea09 resolver: allow reference matches for local image lookups
  • 7fdda10 Merge pull request #6027 from crazy-max/fix-docs-provenance
  • Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.6 to 1.0.7

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.7

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.6...v1.0.7

Commits
  • f9cbdd9 Merge pull request #348 from max-frank/add-time-flag-support
  • e3be2eb Reduce duplication by forwarding to sibling functions
  • 7cc25e3 Don't export TimeValue (yet)
  • d15848d Remove unnecessary time test stderr dev null redirect
  • c5ce22e Use time.Time for expectations in time flag tests
  • 1992c5a Add support for time.Time flags
  • 1c62fb2 Merge pull request #431 from LeGEC/430-fix-usage-message-for-func-flags
  • 1a4b5b2 fix discrepancy in order of arguments for Func() and BoolFunc() #433
  • 4730aa0 fix help message for Func and BoolFunc flags #430
  • f4c97c2 minor: fix typos in comments
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.73.0 to 1.74.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.74.2

New Features

  • grpc: introduce new DialOptions and ServerOptions (WithStaticStreamWindowSize, WithStaticConnWindowSize, StaticStreamWindowSize, StaticConnWindowSize) that force fixed window sizes for all HTTP/2 connections. By default, gRPC uses dynamic sizing of these windows based upon a BDP estimation algorithm. The existing options (WithInitialWindowSize, etc) also disable BDP estimation, but this behavior will be changed in a following release. (#8283)

API Changes

  • balancer: add ExitIdle method to Balancer interface. Earlier, implementing this method was optional. (#8367)

Behavior Changes

  • xds: Remove the GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST environment variable that allows disabling the least request balancer with xDS. Least request was made available by default with xDS in v1.72.0. (#8248)
  • server: allow 0s grpc-timeout header values, which older gRPC-Java versions could send. This restores the behavior of grpc-go before v1.73.0. (#8439)

Bug Fixes

  • googledirectpath: avoid logging the error message Attempt to set a bootstrap configuration... when creating multiple directpath channels. (#8419)

Performance Improvements

  • transport: reduce heap allocations by pooling objects and avoiding method-to-closure conversions. (#8361)
  • transport: reduce heap allocations by re-using mem.Reader objects. (#8360)

Documentation

  • examples: add examples to demonstrate enabling experimental metrics using the OpenTelemetry plugin. (#8388)

Release 1.74.1

Version 1.74.1 retracts release v1.74.0 and itself. Release 1.74.0 was accidentally tagged on the wrong commit and should not be used. Version 1.73.0 should be used until 1.74.2 is released.

Release 1.74.0 was accidentally tagged on the wrong commit and should not be used. Version 1.73.0 should be used until 1.74.1 is released.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 1, 2025
@dtrudg
Copy link
Copy Markdown
Member

dtrudg commented Aug 1, 2025

@dependabot ignore github.com/containerd/containerd/v2 minor version

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Aug 1, 2025

OK, I won't notify you about version 2.1.x of github.com/containerd/containerd/v2 again, unless you unignore it.

Bumps the minor group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.0.5` | `2.1.4` |
| [github.com/containers/image/v5](https://github.com/containers/image) | `5.35.0` | `5.36.0` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.22.0` | `0.23.2` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.7` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.73.0` | `1.74.2` |



Updates `github.com/containerd/containerd/v2` from 2.0.5 to 2.1.4
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.0.5...v2.1.4)

Updates `github.com/containers/image/v5` from 5.35.0 to 5.36.0
- [Release notes](https://github.com/containers/image/releases)
- [Commits](containers/image@v5.35.0...v5.36.0)

Updates `github.com/docker/cli` from 28.1.1+incompatible to 28.3.2+incompatible
- [Commits](docker/cli@v28.1.1...v28.3.2)

Updates `github.com/docker/docker` from 28.1.1+incompatible to 28.3.2+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v28.1.1...v28.3.2)

Updates `github.com/moby/buildkit` from 0.22.0 to 0.23.2
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.22.0...v0.23.2)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.7)

Updates `google.golang.org/grpc` from 1.73.0 to 1.74.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.73.0...v1.74.2)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: github.com/containers/image/v5
  dependency-version: 5.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: github.com/docker/cli
  dependency-version: 28.3.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: github.com/docker/docker
  dependency-version: 28.3.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: google.golang.org/grpc
  dependency-version: 1.74.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/main/minor-5bd023cf36 branch from ba0995c to d0782f7 Compare August 1, 2025 09:10
@dtrudg
Copy link
Copy Markdown
Member

dtrudg commented Aug 1, 2025

Close - no combination here is compatible. We need Go 1.24.3 as minimum to unblock the web of dep updates.

@dtrudg dtrudg closed this Aug 1, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Aug 1, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/go_modules/main/minor-5bd023cf36 branch August 1, 2025 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant