Update go modules (release-v0.7) (patch)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cuelang.org/go	v0.16.0 → v0.16.1
cuelang.org/go	v0.15.1 → v0.15.4
github.com/conforma/go-containerregistry	v0.20.7-0.20250703195040-6f40a3734728 → v0.20.7
github.com/enterprise-contract/enterprise-contract-controller/api	v0.1.257 → v0.1.296
github.com/gkampitakis/go-snaps	v0.5.19 → v0.5.23
github.com/go-git/go-billy/v5	v5.9.0 → v5.9.1
github.com/google/go-containerregistry	v0.21.7 → v0.21.9
github.com/mattn/go-isatty	v0.0.20 → v0.0.24
github.com/package-url/packageurl-go	v0.1.3 → v0.1.7
github.com/secure-systems-lab/go-securesystemslib	v0.11.0 → v0.11.1
github.com/sigstore/cosign/v2	v2.4.1 → v2.4.3
github.com/sigstore/cosign/v2	v2.6.2 → v2.6.5
github.com/sigstore/rekor	v1.5.3 → v1.5.4
github.com/sigstore/sigstore	v1.10.8 → v1.10.9
github.com/sirupsen/logrus	v1.10.1 → v1.10.2
github.com/tektoncd/chains	v0.26.2 → v0.26.9
github.com/tektoncd/cli	v0.44.1 → v0.44.2
github.com/tektoncd/cli	v0.44.0 → v0.44.2
k8s.io/api	v0.36.0 → v0.36.4
k8s.io/apiextensions-apiserver	v0.35.4 → v0.35.8
k8s.io/apimachinery	v0.36.3 → v0.36.4
k8s.io/apimachinery	v0.36.0 → v0.36.4
k8s.io/client-go	v0.36.3 → v0.36.4
k8s.io/client-go	v0.36.0 → v0.36.4
k8s.io/kubernetes	v1.34.3 → v1.34.11

---

Release Notes

cue-lang/cue (cuelang.org/go)

v0.16.1

Compare Source

Language

The fallback keyword in the aliasv2 experiment is replaced by otherwise, which is clearer. cue fmt or cue fix can be used to rewrite existing code.

Evaluator

Fix a regression where the compiler could add comments to the input AST value, which could lead to increased memory usage.

Fix a bug where exporting certain schemas could result in "cannot have both alias and field in same scope" errors.

cmd/cue

Fix a panic which could occur when using non-label expressions in the --path flag.

Teach cue login to give helpful errors when used with OCI registries which don't support the OAuth2 device flow.

Go API

Fix a regression where cue.Context.Encode could panic on custom marshaler types with pointer receivers.

Full list of changes since v0.16.0

• internal/cueversion: bump to v0.16.1 by @​mvdan in 6d609d7
• internal/ci: build releases with Go 1.26.2 by @​mvdan in cedf4c8
• update all golang.org/x/... dependencies by @​mvdan in b4efeef
• all: rename fallback keyword to otherwise by @​mpvl in f813811
• lsp/cache: improve rename by @​cuematthew in 8e47027
• integration/workspace: add test showing bad behaviour by @​cuematthew in a5e0ef5
• cmd/cue: suggest docker/podman login when OAuth2 device flow is unsupported by @​mvdan in c169605
• cmd/cue: add testscript for cue login when device code endpoint is unsupported by @​mvdan in d7c882a
• cmd/cue: clarify how to authenticate with standard OCI registries by @​mvdan in 2613edf
• internal/core/compile: avoid mutating AST by @​rogpeppe in e4b0516
• internal/core/export: fix alias/field name conflict in pattern constraints by @​mvdan in 1e46409
• internal/core/export: add regression test for alias/field name conflict by @​mvdan in 1654f66
• pkg: fix godoc mistakes across several packages by @​mvdan in eae9aaf
• internal/core/convert: fix panic when encoding pointer-receiver marshalers by @​mvdan in 8e39aec
• cmd/cue: return an error for non-label --path expressions instead of panicking by @​mvdan in 5a55849
• encoding: add godoc hints for cue/ast result types by @​mvdan in 682c663

conforma/go-containerregistry (github.com/conforma/go-containerregistry)

v0.20.7

Compare Source

enterprise-contract/enterprise-contract-controller (github.com/enterprise-contract/enterprise-contract-controller/api)

v0.1.296: API Release api/v0.1.296

What's Changed

• Update github actions (main) (minor) by @​renovate[bot] in #​632

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.295...api/v0.1.296

v0.1.295: API Release api/v0.1.295

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.294 (main) by @​renovate[bot] in #​768

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.294...api/v0.1.295

v0.1.294: API Release api/v0.1.294

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.293 (main) by @​renovate[bot] in #​767

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.293...api/v0.1.294

v0.1.293: API Release api/v0.1.293

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.292 (main) by @​renovate[bot] in #​766

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.292...api/v0.1.293

v0.1.292: API Release api/v0.1.292

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.291 (main) by @​renovate[bot] in #​765

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.291...api/v0.1.292

v0.1.291: API Release api/v0.1.291

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.290 (main) by @​renovate[bot] in #​764

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.290...api/v0.1.291

v0.1.290: API Release api/v0.1.290

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.289 (main) by @​renovate[bot] in #​763

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.289...api/v0.1.290

v0.1.289: API Release api/v0.1.289

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.288 (main) by @​renovate[bot] in #​762

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.288...api/v0.1.289

v0.1.288: API Release api/v0.1.288

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.287 (main) by @​renovate[bot] in #​761

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.287...api/v0.1.288

v0.1.287: API Release api/v0.1.287

What's Changed

• Add CODEOWNERS designating the devs team as code owners by @​robnester-rh in #​760

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.286...api/v0.1.287

v0.1.286: API Release api/v0.1.286

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.285 (main) by @​renovate[bot] in #​759

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.285...api/v0.1.286

v0.1.285: API Release api/v0.1.285

What's Changed

• ci: pin conforma actions and reusable workflows to commit SHAs by @​robnester-rh in #​757

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.284...api/v0.1.285

v0.1.284: API Release api/v0.1.284

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.281 (main) by @​renovate[bot] in #​751

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.283...api/v0.1.284

v0.1.283: API Release api/v0.1.283

What's Changed

• Update github actions (main) (patch) by @​renovate[bot] in #​756

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.282...api/v0.1.283

v0.1.282: API Release api/v0.1.282

What's Changed

• ci: repair envtest setup so the Checks test job passes by @​robnester-rh in #​758

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.281...api/v0.1.282

v0.1.281: API Release api/v0.1.281

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.280 (main) by @​renovate[bot] in #​750

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.280...api/v0.1.281

v0.1.280: API Release api/v0.1.280

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.279 (main) by @​renovate[bot] in #​749

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.279...api/v0.1.280

v0.1.279: API Release api/v0.1.279

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.278 (main) by @​renovate[bot] in #​748

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.278...api/v0.1.279

v0.1.278: API Release api/v0.1.278

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.277 (main) by @​renovate[bot] in #​747

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.277...api/v0.1.278

v0.1.277: API Release api/v0.1.277

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.276 (main) by @​renovate[bot] in #​746

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.276...api/v0.1.277

v0.1.276: API Release api/v0.1.276

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.275 (main) by @​renovate[bot] in #​745

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.275...api/v0.1.276

v0.1.275: API Release api/v0.1.275

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.274 (main) by @​renovate[bot] in #​744

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.274...api/v0.1.275

v0.1.274: API Release api/v0.1.274

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.273 (main) by @​renovate[bot] in #​743

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.273...api/v0.1.274

v0.1.273: API Release api/v0.1.273

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.272 (main) by @​renovate[bot] in #​742

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.272...api/v0.1.273

v0.1.272: API Release api/v0.1.272

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.271 (main) by @​renovate[bot] in #​741

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.271...api/v0.1.272

v0.1.271: API Release api/v0.1.271

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.270 (main) by @​renovate[bot] in #​740

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.270...api/v0.1.271

v0.1.270: API Release api/v0.1.270

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.269 (main) by @​renovate[bot] in #​739

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.269...api/v0.1.270

v0.1.269: API Release api/v0.1.269

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.268 (main) by @​renovate[bot] in #​738

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.268...api/v0.1.269

v0.1.268: API Release api/v0.1.268

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.267 (main) by @​renovate[bot] in #​737

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.267...api/v0.1.268

v0.1.267: API Release api/v0.1.267

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.266 (main) by @​renovate[bot] in #​736

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.266...api/v0.1.267

v0.1.266: API Release api/v0.1.266

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.265 (main) by @​renovate[bot] in #​735

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.265...api/v0.1.266

v0.1.265: API Release api/v0.1.265

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.264 (main) by @​renovate[bot] in #​734

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.264...api/v0.1.265

v0.1.264: API Release api/v0.1.264

What's Changed

• Update github/codeql-action action to v4.31.11 (main) by @​renovate[bot] in #​732
• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.263 (main) by @​renovate[bot] in #​733

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.263...api/v0.1.264

v0.1.263: API Release api/v0.1.263

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.262 (main) by @​renovate[bot] in #​731
• Update actions/checkout action to v6.0.2 (main) by @​renovate[bot] in #​730

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.262...api/v0.1.263

v0.1.262: API Release api/v0.1.262

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.261 (main) by @​renovate[bot] in #​729

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.261...api/v0.1.262

v0.1.261: API Release api/v0.1.261

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.260 (main) by @​renovate[bot] in #​728

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.260...api/v0.1.261

v0.1.260: API Release api/v0.1.260

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.259 (main) by @​renovate[bot] in #​727

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.259...api/v0.1.260

v0.1.259: API Release api/v0.1.259

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.258 (main) by @​renovate[bot] in #​726

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.258...api/v0.1.259

v0.1.258: API Release api/v0.1.258

What's Changed

• Update module github.com/enterprise-contract/enterprise-contract-controller/api to v0.1.257 (main) by @​renovate[bot] in #​725

Full Changelog: enterprise-contract/enterprise-contract-controller@api/v0.1.257...api/v0.1.258

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

v0.5.23

Compare Source

What's Changed

• Fix Skipf test format for Go vet by @​HNO3Miracle in #​160
• feat: support labeling snapshots by @​G-Rath in #​152

New Contributors

• @​HNO3Miracle made their first contribution in #​160

Full Changelog: gkampitakis/go-snaps@v0.5.22...v0.5.23

v0.5.22

Compare Source

What's Changed

• Enhance README with additional Any matcher example by @​MoritzHeld in #​157
• fix: create snapshot files with 0644 instead of os.ModePerm by @​gkampitakis in #​159

New Contributors

• @​MoritzHeld made their first contribution in #​157

Full Changelog: gkampitakis/go-snaps@v0.5.21...v0.5.22

v0.5.21

Compare Source

What's Changed

• support nested arrays in json matchers by @​gkampitakis in #​145

Full Changelog: gkampitakis/go-snaps@v0.5.20...v0.5.21

v0.5.20

Compare Source

What's Changed

• feat: support setting serializer on config by @​gkampitakis in #​154

Full Changelog: gkampitakis/go-snaps@v0.5.19...v0.5.20

go-git/go-billy (github.com/go-git/go-billy/v5)

v5.9.1

Compare Source

What's Changed

• build: Update module golang.org/x/net to v0.55.0 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in #​216
• build: Update module golang.org/x/text to v0.39.0 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in #​230
• build: Update module golang.org/x/net to v0.56.0 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in #​229

Full Changelog: go-git/go-billy@v5.9.0...v5.9.1

google/go-containerregistry (github.com/google/go-containerregistry)

v0.21.9

Compare Source

What's Changed

• actions: pin slsa generator by version by @​Subserial in #​2395
• fix: prevent data race on scope refreshes within remote.writer by @​Subserial in #​2396
• fix: remove '.' from unsafe path prefixes by @​Subserial in #​2400
• build(deps): bump the actions group with 3 updates by @​dependabot[bot] in #​2398

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

Compare Source

The artifacts attached to this release are missing SLSA provenance, see #​2390.

What's Changed

• build(deps): bump the go-deps group across 1 directory with 3 updates by @​dependabot[bot] in #​2353
• build(deps): bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /cmd/krane by @​dependabot[bot] in #​2367
• build(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /pkg/authn/k8schain by @​dependabot[bot] in #​2368
• build(deps): bump golang.org/x/net from 0.49.0 to 0.55.0 in /pkg/authn/kubernetes by @​dependabot[bot] in #​2363
• build(deps): bump the go-deps group across 3 directories with 7 updates by @​dependabot[bot] in #​2377
• build(deps): bump the actions group across 1 directory with 5 updates by @​dependabot[bot] in #​2375
• Reject unsafe Windows archive paths in Extract by @​Haihan-Jiang in #​2330
• feat(goreleaser): add loong64 build support for crane/gcrane/krane by @​xuxiaowei-com-cn in #​2358
• Document tag and digest reference semantics by @​Haihan-Jiang in #​2325
• remote: release pull limiter slot when body is read to EOF by @​knQzx in #​2373
• tarball: bounds-check layer index in uncompressed LayerByDiffID by @​arpitjain099 in #​2370
• authn: read Podman auth from XDG config by @​vigneshakaviki in #​2379
• transport: per-host bearer token exchange on cross-host redirect by @​amitzig in #​2360
• mutate: bounds-check layer index when building rebase addendums by @​arpitjain099 in #​2371
• fix(daemon): copy ExposedPorts from source config in computeImageConfig by @​x64vps in #​2356
• feat(remote): add WithReferrersTagFallback option by @​kevinmdavis in #​2366
• mutate: apply opaque-directory whiteouts (.wh..wh..opq) in Extract by @​sadmanf in #​2372
• tarball: use correct file extension for zstd/uncompressed by @​milas in #​2382
• build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 in the go-deps group across 1 directory by @​dependabot[bot] in #​2380
• actions: update actions to be pinned by hash by @​Subserial in #​2384
• Bump go version to 1.26.5 by @​Subserial in #​2388

New Contributors

• @​xuxiaowei-com-cn made their first contribution in #​2358
• @​knQzx made their first contribution in #​2373
• @​arpitjain099 made their first contribution in #​2370
• @​vigneshakaviki made their first contribution in #​2379
• @​amitzig made their first contribution in #​2360
• @​x64vps made their first contribution in #​2356
• @​kevinmdavis made their first contribution in #​2366
• @​sadmanf made their first contribution in #​2372

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

mattn/go-isatty (github.com/mattn/go-isatty)

v0.0.24

Compare Source

v0.0.23

Compare Source

v0.0.22

Compare Source

v0.0.21

Compare Source

package-url/packageurl-go (github.com/package-url/packageurl-go)

v0.1.7

Compare Source

What's Changed

• Merge identical return branches in adjustMlflowName by @​gshk99 in #​92
• Percent-decode subpath when parsing by @​sueun-dev in #​96
• make brew name and namespace lower-case by @​william-elastisys in #​102
• Reject npm purl with bare scope and no name by @​arpitjain099 in #​95
• Percent-encode sub-delimiters in name/version path segments by @​czunker in #​93
• add support for vcpkg purl-type by @​william-elastisys in #​105
• make cpan namespace optional by @​william-elastisys in #​103

New Contributors

• @​gshk99 made their first contribution in [#​92](https://redirect.github.com/package-url/packageurl-g

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 23 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=5 days

Details:

Package	Change
github.com/go-openapi/strfmt	v0.26.4 -> v0.27.0
github.com/coreos/go-oidc/v3	v3.19.0 -> v3.20.0
github.com/gkampitakis/ciinfo	v0.3.2 -> v0.3.4
github.com/go-chi/chi/v5	v5.3.0 -> v5.3.1
github.com/go-openapi/analysis	v0.25.2 -> v0.26.0
github.com/go-openapi/jsonpointer	v0.23.1 -> v1.0.0
github.com/go-openapi/jsonreference	v0.21.6 -> v1.0.0
github.com/go-openapi/loads	v0.24.0 -> v0.25.1
github.com/go-openapi/runtime	v0.32.4 -> v0.32.5
github.com/go-openapi/spec	v0.22.6 -> v0.22.9
github.com/go-openapi/swag/conv	v0.27.0 -> v0.28.0
github.com/go-openapi/swag/fileutils	v0.26.1 -> v0.28.0
github.com/go-openapi/swag/jsonutils	v0.26.1 -> v0.28.0
github.com/go-openapi/swag/loading	v0.26.1 -> v0.28.0
github.com/go-openapi/swag/mangling	v0.26.1 -> v0.28.0
github.com/go-openapi/swag/stringutils	v0.26.1 -> v0.28.0
github.com/go-openapi/swag/typeutils	v0.27.0 -> v0.28.0
github.com/go-openapi/swag/yamlutils	v0.26.1 -> v0.28.0
github.com/go-openapi/validate	v0.26.0 -> v0.26.3
github.com/goccy/go-yaml	v1.18.0 -> v1.19.2
github.com/maruel/natural	v1.1.1 -> v1.3.0
github.com/tidwall/gjson	v1.18.0 -> v1.19.0
sigs.k8s.io/structured-merge-diff/v6	v6.3.2 -> v6.3.3

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 31 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=5 days

Details:

Package	Change
github.com/go-openapi/strfmt	v0.26.4 -> v0.27.0
cloud.google.com/go/iam	v1.11.0 -> v1.13.0
cloud.google.com/go/monitoring	v1.25.0 -> v1.29.0
cloud.google.com/go/storage	v1.62.0 -> v1.62.2
github.com/coreos/go-oidc/v3	v3.19.0 -> v3.20.0
github.com/gkampitakis/ciinfo	v0.3.2 -> v0.3.4
github.com/go-chi/chi/v5	v5.3.0 -> v5.3.1
github.com/go-openapi/analysis	v0.25.2 -> v0.26.0
github.com/go-openapi/jsonpointer	v0.23.1 -> v1.0.0
github.com/go-openapi/jsonreference	v0.21.6 -> v1.0.0
github.com/go-openapi/loads	v0.24.0 -> v0.25.1
github.com/go-openapi/runtime	v0.32.4 -> v0.32.5
github.com/go-openapi/spec	v0.22.6 -> v0.22.9
github.com/go-openapi/swag/conv	v0.27.0 -> v0.28.0
github.com/go-openapi/swag/fileutils	v0.26.1 -> v0.28.0
github.com/go-openapi/swag/jsonutils	v0.26.1 -> v0.28.0
github.com/go-openapi/swag/loading	v0.26.1 -> v0.28.0
github.com/go-openapi/swag/mangling	v0.26.1 -> v0.28.0
github.com/go-openapi/swag/stringutils	v0.26.1 -> v0.28.0
github.com/go-openapi/swag/typeutils	v0.27.0 -> v0.28.0
github.com/go-openapi/swag/yamlutils	v0.26.1 -> v0.28.0
github.com/go-openapi/validate	v0.26.0 -> v0.26.3
github.com/goccy/go-yaml	v1.18.0 -> v1.19.2
github.com/golang/snappy	v0.0.4 -> v1.0.0
github.com/googleapis/enterprise-certificate-proxy	v0.3.16 -> v0.3.18
github.com/googleapis/gax-go/v2	v2.22.0 -> v2.23.0
github.com/maruel/natural	v1.1.1 -> v1.3.0
github.com/tidwall/gjson	v1.18.0 -> v1.19.0
google.golang.org/api	v0.286.0 -> v0.290.0
google.golang.org/genproto	v0.0.0-20260406210006-6f92a3bedf2d -> v0.0.0-20260622175928-b703f567277d
k8s.io/api	v0.36.3 -> v0.36.4

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 17 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=5 days

Details:

Package	Change
cloud.google.com/go/kms	v1.31.0 -> v1.33.0
cloud.google.com/go/longrunning	v1.0.0 -> v1.2.0
github.com/Azure/azure-sdk-for-go/sdk/azcore	v1.21.1 -> v1.22.0
github.com/aws/aws-sdk-go-v2/service/kms	v1.52.0 -> v1.54.0
github.com/coreos/go-oidc/v3	v3.19.0 -> v3.20.0
github.com/googleapis/enterprise-certificate-proxy	v0.3.16 -> v0.3.17
github.com/googleapis/gax-go/v2	v2.22.0 -> v2.23.0
github.com/hashicorp/vault/api	v1.22.0 -> v1.23.0
github.com/in-toto/go-witness	v0.9.1 -> v0.9.2
github.com/jellydator/ttlcache/v3	v3.4.0 -> v3.4.1
github.com/sigstore/cosign/v2	v2.6.2 -> v2.6.4
github.com/sigstore/sigstore	v1.10.8 -> v1.10.9
github.com/sigstore/sigstore/pkg/signature/kms/aws	v1.10.8 -> v1.10.9
github.com/sigstore/sigstore/pkg/signature/kms/azure	v1.10.8 -> v1.10.9
github.com/sigstore/sigstore/pkg/signature/kms/gcp	v1.10.8 -> v1.10.9
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	v1.10.8 -> v1.10.9
google.golang.org/api	v0.286.0 -> v0.287.1

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 4:33 PM UTC · Completed 4:42 PM UTC

Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 9:06 PM UTC · Completed 9:13 PM UTC

Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:40 AM UTC · Completed 1:47 AM UTC

Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 6:38 PM UTC · Completed 6:46 PM UTC

Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 10:03 PM UTC · Completed 10:10 PM UTC

Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 7:32 PM UTC · Completed 7:44 PM UTC

Commit: 87c4a29 · View workflow run →

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: de469f77-3e76-42fe-ab02-bfd813cd16e5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:03 AM UTC · Completed 2:09 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $1.97

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 3:10 AM UTC · Completed 3:20 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $4.94

[fullsend-ai-review]

Risk Assessment: moderate (2/5)

Details

Bot-authored Renovate patch-level go module update on a maintenance branch: change-size composite and dependency-file signals are high (8 dep files, 948 lines, large blast radius), but offset by zero protected paths, zero security-sensitive files, no CI changes, and Tier 2 churn/author/fix averages that round to a low-moderate baseline, yielding a composite of 2 (moderate).

Previous run

Risk Assessment: moderate (2/5)

Details

Renovate-bot PR touching 8 files (all go.mod/go.sum across 4 modules) with a strong dependency-file signal (5), tempered by no protected paths, no CI edits, no source changes, and trivial revertibility.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:40 AM UTC · Completed 2:49 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $4.19

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 3:16 PM UTC · Completed 3:24 PM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $4.30

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:49 AM UTC · Completed 1:55 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $2.69

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:13 AM UTC · Completed 2:20 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $2.96

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 10:16 PM UTC · Completed 10:22 PM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $2.18