Skip to content

chore(deps): bump the minor group across 1 directory with 6 updates#488

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/minor-5c813418e8
Open

chore(deps): bump the minor group across 1 directory with 6 updates#488
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/minor-5c813418e8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor group with 6 updates in the / directory:

Package From To
github.com/containers/podman/v5 5.8.2 5.8.3
github.com/containifyci/go-self-update 0.2.5 0.2.7
github.com/moby/buildkit 0.30.0 0.31.0
go.podman.io/common 0.67.1 0.68.0
golang.org/x/term 0.43.0 0.44.0
google.golang.org/api 0.282.0 0.285.0

Updates github.com/containers/podman/v5 from 5.8.2 to 5.8.3

Release notes

Sourced from github.com/containers/podman/v5's releases.

v5.8.3

Security

  • This release addresses CVE-2026-44517, where building a Dockerfile using a ADD or COPY instruction accessing a malicious Git repository or tar archive could cause files outside the build context directory to be included in the build context or copied into the build. Please see GHSA-49p4-px3h-rq49 for more details.

Misc

  • Updated Buildah to v1.43.2
  • Updated gvisor-tap-vsock to v0.8.9
Changelog

Sourced from github.com/containers/podman/v5's changelog.

5.8.3

Security

  • This release addresses CVE-2026-44517, where building a Dockerfile using a ADD or COPY instruction accessing a malicious Git repository or tar archive could cause files outside the build context directory to be included in the build context or copied into the build. Please see GHSA-49p4-px3h-rq49 for more details.

Misc

  • Updated Buildah to v1.43.2
  • Updated gvisor-tap-vsock to v0.8.9
Commits
  • 93dbfd0 Bump to v5.8.3
  • 6a33968 Update release notes for v5.8.3
  • 6b8ab91 Bump to gvisor-tap-vsock v0.8.9
  • d3249cd Merge pull request #28885 from Luap99/v5.8
  • 1338dbd Merge pull request #28890 from TomSweeneyRedHat/dev/tsweeney/Buildah-1.43.2-v5.8
  • a082bc9 [v5.8] Bump Buildah to v1.43.2
  • 645c4f3 ci: fix validate-source checks vs stale labels
  • 50c105a Release automation: update org location
  • 925107a ci: use env vars to avoid template expansion in code contexts
  • d97883b ci: use --sandbox for dynamically generated sed scripts
  • Additional commits viewable in compare view

Updates github.com/containifyci/go-self-update from 0.2.5 to 0.2.7

Release notes

Sourced from github.com/containifyci/go-self-update's releases.

v0.2.7

What's Changed

Full Changelog: containifyci/go-self-update@v0...v0.2.7

v0.2.6

What's Changed

Full Changelog: containifyci/go-self-update@v0...v0.2.6

Commits

Updates github.com/moby/buildkit from 0.30.0 to 0.31.0

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.31.0

buildkit 0.31.0

Welcome to the v0.31.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi
  • CrazyMax
  • Sebastiaan van Stijn
  • Bjorn Neergaard
  • Jonathan A. Sternberg
  • Akihiro Suda
  • Bryce Gibson
  • Ava Barron
  • Brian Goff
  • Jiří Moravčík
  • ZRHann
  • Kevin NZUGUEM
  • Maya Chen
  • Natnael Gebremariam
  • Sai Kiran Maggidi
  • okhowang(王沛文)

Notable Changes

  • Built-in Dockerfile frontend has been updated to v1.25.0 changelog
  • Exec steps now support a network proxy feature where all container traffic will be routed through an HTTP proxy server. This allows capturing the network traffic for inspection in build progress and provenance attestation. Source policies can define the requests that build containers are allowed to make and the ones that should be blocked. Network proxy can be enabled for the whole BuildKit daemon or enabled on a per-build basis. #6858 #6816 #6740 #6863
  • The local exporter now supports a mode=delete attribute which will replace the destination directory with the contents of the build result instead of merging it. Similar to the --delete flag in rsync. #6561 #6864
  • LLB APIs now support per-step resource limits for CPU and memory. #6569
  • LLB APIs support a new Passthrough operation that allows defining dependency build graph branches that are required to be built but do not add any outputs to the final result. The state.Requires() client helper can be used to define such dependencies in the build graph. #6829
  • All image results now default to using OCI media types. Previously this was applied based on whether annotations or attestations were needed. oci-mediatypes=false can be used for legacy Docker media types. This change raises the compatibility version of BuildKit v0.31.0 to 30. #6824
  • Local cache exporter now supports the reset option to clear the unreferenced existing cache. #6612
  • The local build result outputs now use a new implementation with better security guarantees in case the destination directory is mutated externally during the transfer. #6561
  • New build metrics about build counts and durations have been added to the OTEL provider. #6736
  • Parallel request limits for registry connections can now be set via configuration file. #6776
  • In special modes where the client does not expose the session connection to transfer credentials, builds can now still fall back to anonymous registry auth instead of erroring. #6760
  • Embedded binfmt emulators in the release image have been updated to QEMU v10.2.3. #6846
  • Runc container runtime has been updated to v1.3.6
  • Created attestations now use in-toto v1 statement format. #6823
  • Due to the upgraded CLI library, the internal buildctl completion scripts flag --generate-bash-completion is no longer supported and has been replaced with --generate-shell-completion. #6848
  • Fix an issue in default GC policy rules where the first rule for prioritizing releasing cache mounts and local sources did not apply. #6856
  • Fix an issue where parent directories could be created with incorrect permissions due to system umask when using BuildKit embedded in Dockerd. #6828
  • Fix possible segfault from race condition when HTTP server returned 401 error. #6791
  • Fix source policy exact match rules losing the destination value during conversion. #6861

... (truncated)

Commits
  • c411f0a Merge pull request #6876 from thaJeztah/bump_runc
  • f292e5c Dockerfile: update runc binary to v1.3.6
  • d31ba4a Merge pull request #6867 from okhowang/fix/platforms-data-race
  • e819928 Merge pull request #6869 from crazy-max/update-policy-helpers
  • e4d0dba chore: update generated files
  • c13539b vendor: update policy-helpers to d5411a945cfc
  • f4f035c Merge pull request #6864 from crazy-max/mode-delete-old-daemon
  • e26b5d4 fix: add mutex to protect Worker.Platforms from data race
  • 9176018 Merge pull request #6861 from ZRHann/fix-sourcepolicy-exact-convert
  • 128c322 Merge pull request #6863 from tonistiigi/exec-proxy-cni-dial-update
  • Additional commits viewable in compare view

Updates go.podman.io/common from 0.67.1 to 0.68.0

Release notes

Sourced from go.podman.io/common's releases.

common/v0.68.0

Please Note!

The Configuration File lookup behavior has changed. Callers of functions in this project that read configuration files should refer to containers-config(5) for details.

What's Changed

... (truncated)

Commits
  • bb6a37c Bump c/common to v0.68.0
  • 0a7b630 Bump c/storage to v1.63.0, c/image to v5.40.0
  • 3c2fa91 Bump to c/image v5.40
  • f871d19 Bump to c/storage v1.63.0 in c/image, c/image to v5.40
  • 550f62f Bump c/storage to v1.63.0
  • 4fa1864 Merge pull request #816 from alexlarsson/fix-composefs-verity
  • 32704ef Merge pull request #855 from containers/renovate/github.com-docker-cli-29.x
  • 98ff31a Merge pull request #853 from mheon/containers_conf_documentation_removals
  • 3e16145 Update module github.com/docker/cli to v29.5.1+incompatible
  • 206fff3 Manpage: remove slirp4netns/boltdb references
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.43.0 to 0.44.0

Commits

Updates google.golang.org/api from 0.282.0 to 0.285.0

Release notes

Sourced from google.golang.org/api's releases.

v0.285.0

0.285.0 (2026-06-16)

Features

v0.284.0

0.284.0 (2026-06-09)

Features

v0.283.0

0.283.0 (2026-06-01)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.285.0 (2026-06-16)

Features

0.284.0 (2026-06-09)

Features

0.283.0 (2026-06-01)

Features

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the minor group across 1 directory with 6 updates
7e93146 
Bumps the minor group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/containers/podman/v5](https://github.com/containers/podman) | `5.8.2` | `5.8.3` |
| [github.com/containifyci/go-self-update](https://github.com/containifyci/go-self-update) | `0.2.5` | `0.2.7` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.30.0` | `0.31.0` |
| [go.podman.io/common](https://github.com/podman-container-tools/container-libs) | `0.67.1` | `0.68.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.43.0` | `0.44.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.282.0` | `0.285.0` |



Updates `github.com/containers/podman/v5` from 5.8.2 to 5.8.3
- [Release notes](https://github.com/containers/podman/releases)
- [Changelog](https://github.com/podman-container-tools/podman/blob/v5.8.3/RELEASE_NOTES.md)
- [Commits](podman-container-tools/podman@v5.8.2...v5.8.3)

Updates `github.com/containifyci/go-self-update` from 0.2.5 to 0.2.7
- [Release notes](https://github.com/containifyci/go-self-update/releases)
- [Commits](containifyci/go-self-update@v0.2.5...v0.2.7)

Updates `github.com/moby/buildkit` from 0.30.0 to 0.31.0
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.30.0...v0.31.0)

Updates `go.podman.io/common` from 0.67.1 to 0.68.0
- [Release notes](https://github.com/podman-container-tools/container-libs/releases)
- [Commits](podman-container-tools/container-libs@common/v0.67.1...common/v0.68.0)

Updates `golang.org/x/term` from 0.43.0 to 0.44.0
- [Commits](golang/term@v0.43.0...v0.44.0)

Updates `google.golang.org/api` from 0.282.0 to 0.285.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.282.0...v0.285.0)

---
updated-dependencies:
- dependency-name: github.com/containers/podman/v5
  dependency-version: 5.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: github.com/containifyci/go-self-update
  dependency-version: 0.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: go.podman.io/common
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: golang.org/x/term
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: google.golang.org/api
  dependency-version: 0.285.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 21, 2026
@dunebot

dunebot Bot commented Jun 21, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

22 similar comments
@dunebot

dunebot Bot commented Jun 21, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 21, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 21, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 21, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 23, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 23, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 23, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 27, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 27, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

@dunebot

dunebot Bot commented Jun 27, 2026

Copy link
Copy Markdown
Contributor

Note

This Pull Request can't be approved by DuneBot because the following status check failed.

Status 'check' has a different state 'failure' then is not success, neutral, skipped, completed, in_progress or queued

❓ Got questions?
Check out DuneBot's Docs
For further assistance reach out to #ask-platform.

You can trigger DuneBot reprocessing by closing and reopen the Pull Request.

This PR comment was generated by DuneBot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants