chore(deps): Bump the all group across 1 directory with 13 updates #1395

dependabot · 2025-10-06T22:26:00Z

Bumps the all group with 8 updates in the /lib directory:

Package	From	To
github.com/go-git/go-git/v5	`5.16.2`	`5.16.3`
github.com/go-playground/validator/v10	`10.27.0`	`10.28.0`
github.com/kevinburke/ssh_config	`1.2.0`	`1.4.0`
github.com/kluctl/go-embed-python	`0.0.0-3.11.11-20241219-1`	`0.0.0-3.13.1-20241219-1`
github.com/mattn/go-runewidth	`0.0.16`	`0.0.19`
github.com/stretchr/testify	`1.10.0`	`1.11.1`
k8s.io/apimachinery	`0.33.2`	`0.34.1`
k8s.io/client-go	`0.33.2`	`0.34.1`

Updates github.com/go-git/go-git/v5 from 5.16.2 to 5.16.3

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.16.3

What's Changed

internal: Expand regex to fix build [5.x] by @baloo in go-git/go-git#1644

build: raise timeouts for windows CI tests and disable CIFuzz [5.x] by @baloo in go-git/go-git#1646

plumbing: support commits extra headers, support jujutsu signed commit [5.x] by @baloo in go-git/go-git#1633

Full Changelog: go-git/go-git@v5.16.2...v5.16.3

Commits

ad9a3a5 Merge pull request #1633 from baloo/baloo/release-5.x/jj-signed-commits
f2c3467 plumbing: support extra headers, support jujutsu signed commit [5.x]
c12263d Merge pull request #1646 from baloo/baloo/release-5.x/fixup-windows-ci
111f374 build: disable fuzzing on maintenance branch
15d46ce build: raise timeouts for windows CI tests
ce83ba1 Merge pull request #1644 from baloo/baloo/release-5.x/fixup-build
b486201 internal: Expand regex to fix build
See full diff in compare view

Updates github.com/go-playground/validator/v10 from 10.27.0 to 10.28.0

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.28.0

What's Changed

Update workflow.yml to support 2 most recent major versions by @nodivbyzero in go-playground/validator#1417

Bump actions/checkout from 4 to 5 by @dependabot[bot] in go-playground/validator#1456

Go 1.25 support by @nodivbyzero in go-playground/validator#1459

Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 by @dependabot[bot] in go-playground/validator#1463

Bump golang.org/x/text from 0.22.0 to 0.29.0 by @dependabot[bot] in go-playground/validator#1464

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in go-playground/validator#1465

Bump golang.org/x/crypto from 0.33.0 to 0.42.0 by @dependabot[bot] in go-playground/validator#1467

fix: should panic when define duplicate field param in required_if by @duyquang6 in go-playground/validator#1468

Fixed missing keys from returned errors in map validation by @gelozr in go-playground/validator#1284

Added https_url tag by @ahmedkamalio in go-playground/validator#1461

docs: add description for 'port' validator by @nodivbyzero in go-playground/validator#1435

Add alphaspace validator by @takaaa220 in go-playground/validator#1343

New Contributors

@duyquang6 made their first contribution in go-playground/validator#1468

@gelozr made their first contribution in go-playground/validator#1284

@ahmedkamalio made their first contribution in go-playground/validator#1461

@takaaa220 made their first contribution in go-playground/validator#1343

Full Changelog: go-playground/validator@v10.27.0...v10.28.0

Commits

bdc3a7d Add alphaspace validator (#1343)
63594a0 docs: add description for 'port' validator (#1435)
45f3a8e Added https_url tag (#1461)
7a23bca Remove Go version 1.23 from CI workflow
13130d2 Fixed missing keys from returned errors in map validation (#1284)
94e89f0 fix: should panic when define duplicate field param in required_if (#1468)
6905468 Bump golang.org/x/crypto from 0.33.0 to 0.42.0 (#1467)
77ef70e Bump actions/setup-go from 5 to 6 (#1465)
78d05ae Bump golang.org/x/text from 0.22.0 to 0.29.0 (#1464)
34aea1f Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 (#1463)
Additional commits viewable in compare view

Updates github.com/kevinburke/ssh_config from 1.2.0 to 1.4.0

Changelog

Sourced from github.com/kevinburke/ssh_config's changelog.

Changes

Version 1.4 (released August 2025)

Remove .gitattributes file (which was used to test different line endings, and caused issues in some build environments).

Version 1.3 (released February 2025)

Add go.mod file (although this project has no dependencies).

Various updates to CI and build environment

config: add UserSettings.ConfigFinder

Version 1.2

Previously, if a Host declaration or a value had trailing whitespace, that whitespace would have been included as part of the value. This led to unexpected consequences. For example:
Host example       # A comment
    HostName example.com      # Another comment
Prior to version 1.2, the value for Host would have been "example " and the value for HostName would have been "example.com ". Both of these are unintuitive.

Instead, we strip the trailing whitespace in the configuration, which leads to more intuitive behavior.

Commits

d87420c 1.4.0
6cb5d6c config: change release format to "1.3.0"
bf7d55a CHANGELOG,AUTHORS.txt: add notes and add Simon Josefsson
d227026 Store tests/dos-lines as CRLF in git instead of using .gitattributes (#72)
1bd630c 1.3
200a8b4 .github: update CI for more recent Go versions
1d09c0b .github: set latest Go versions
974a52c .github: use Go 1.19
3c7724c README.md: update donate information
7df8445 go.mod: add
Additional commits viewable in compare view

Updates github.com/kluctl/go-embed-python from 0.0.0-3.11.11-20241219-1 to 0.0.0-3.13.1-20241219-1

Commits

694241b added python 3.13.1 from python-standalone 20241219
See full diff in compare view

Updates github.com/mattn/go-runewidth from 0.0.16 to 0.0.19

Commits

7770d04 Merge pull request #78 from josharian/josh/optimize-intable
f53b71c Merge pull request #86 from mattn/fix-github-actions
a09d510 Merge branch 'master' into fix-github-actions
778f900 Merge pull request #83 from clipperhouse/benchmark-allocs
bfbd30c fix test.yaml
61f04f3 Merge pull request #82 from clipperhouse/graphemes-string-width
db39519 Rename
b3b19f2 Rename
94c0db1 Merge pull request #85 from mattn/fix-windows-terminal
76bca58 fix comment
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Backport #1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Call stack perf change for CallerInfo by @mikeauclair in stretchr/testify#1614

Lazily render mock diff output on successful match by @mikeauclair in stretchr/testify#1615

assert: check early in Eventually, EventuallyWithT, and Never by @cszczepaniak in stretchr/testify#1427

assert: add IsNotType by @bartventer in stretchr/testify#1730

assert.JSONEq: shortcut if same strings by @dolmen in stretchr/testify#1754

assert.YAMLEq: shortcut if same strings by @dolmen in stretchr/testify#1755

assert: faster and simpler isEmpty using reflect.Value.IsZero by @dolmen in stretchr/testify#1761

suite: faster methods filtering (internal refactor) by @dolmen in stretchr/testify#1758

Fixes

assert.ErrorAs: log target type by @craig65535 in stretchr/testify#1345

Fix failure message formatting for Positive and Negative asserts in stretchr/testify#1062

Improve ErrorIs message when error is nil but an error was expected by @tsioftas in stretchr/testify#1681

fix Subset/NotSubset when calling with mixed input types by @siliconbrain in stretchr/testify#1729

Improve ErrorAs failure message when error is nil by @ccoVeille in stretchr/testify#1734

mock.AssertNumberOfCalls: improve error msg by @3scalation in stretchr/testify#1743

Documentation, Build & CI

docs: Fix typo in README by @alexandear in stretchr/testify#1688

Replace deprecated io/ioutil with io and os by @alexandear in stretchr/testify#1684

Document consequences of calling t.FailNow() by @greg0ire in stretchr/testify#1710

chore: update docs for Unset #1621 by @techfg in stretchr/testify#1709

README: apply gofmt to examples by @alexandear in stretchr/testify#1687

refactor: use %q and %T to simplify fmt.Sprintf by @alexandear in stretchr/testify#1674

Propose Christophe Colombier (ccoVeille) as approver by @brackendawson in stretchr/testify#1716

Update documentation for the Error function in assert or require package by @architagr in stretchr/testify#1675

assert: remove deprecated build constraints by @alexandear in stretchr/testify#1671

assert: apply gofumpt to internal test suite by @ccoVeille in stretchr/testify#1739

CI: fix shebang in .ci.*.sh scripts by @dolmen in stretchr/testify#1746

assert,require: enable parallel testing on (almost) all top tests by @dolmen in stretchr/testify#1747

suite.Passed: add one more status test report by @Ararsa-Derese in stretchr/testify#1706

Add Helper() method in internal mocks and assert.CollectT by @dolmen in stretchr/testify#1423

assert.Same/NotSame: improve usage of Sprintf by @ccoVeille in stretchr/testify#1742

mock: enable parallel testing on internal testsuite by @dolmen in stretchr/testify#1756

suite: cleanup use of 'testing' internals at runtime by @dolmen in stretchr/testify#1751

assert: check test failure message for Empty and NotEmpty by @ccoVeille in stretchr/testify#1745

... (truncated)

Commits

2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
af8c912 Backport #1786 to release/1.11
b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
69831f3 build(deps): bump actions/checkout from 4 to 5
a53be35 Improve captureTestingT helper
aafb604 mock: improve formatting of error message
7218e03 improve error msg
929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
bc7459e suite: faster filtering of methods (-testify.m)
7d37b5c suite: refactor methodFilter
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.39.0 to 0.42.0

Commits

5307a0c go.mod: update golang.org/x dependencies
9d77937 acme: include order problem in OrderError
8f580de ssh: remove Go 1.24 build tag for ML-KEM kex
a4d1237 ssh/knownhosts: improve IPv6 support in Normalize
b8d8dae curve25519: include potential fips140=only error in panic message
f5a2eab ssh: use curve25519.X25519 instead of curve25519.ScalarMult
44ecf3a all: upgrade go directive to at least 1.24.0 [generated]
ef5341b go.mod: update golang.org/x dependencies
b999374 acme: fix pebble subprocess output data race
c247dea x509roots/fallback: store bundle certs directly in DER
Additional commits viewable in compare view

Updates golang.org/x/net from 0.41.0 to 0.43.0

Commits

e74bc31 go.mod: update golang.org/x dependencies
af6926e http2: remove references to defunct http2.golang.org test server
76358aa go.mod: update golang.org/x dependencies
See full diff in compare view

Updates golang.org/x/sys from 0.33.0 to 0.36.0

Commits

b06ce05 windows: add FILE_ZERO_DATA_INFORMATION
689cc11 unix: fix Listen on solaris
a4712b9 plan9: drop go version tags for unsupported versions
0293703 unix: add IFAL_* consts and ifaddrlblmsg on linux
ab85cbb unix/linux: extend rtnetlink constants
9bd3753 unix: switch (*CPUSet).Zero to clear builtin
899c232 windows/mkwinsyscall: use syscall.SyscallN instead of syscall.Syscall{6,9,12,15}
543f21a all: upgrade go directive to at least 1.24.0 [generated]
5b936e1 unix/linux: update to Linux kernel 6.16, Go to 1.24.5
3a82703 unix: remove redundant xnu version check for {p}readv/{p}writev
Additional commits viewable in compare view

Updates golang.org/x/text from 0.26.0 to 0.29.0

Commits

e69f31b go.mod: update golang.org/x dependencies
60c9786 all: upgrade go directive to at least 1.24.0 [generated]
425d715 go.mod: update golang.org/x dependencies
b6d2645 go.mod: update golang.org/x dependencies
See full diff in compare view

Updates k8s.io/apimachinery from 0.33.2 to 0.34.1

Commits

b72d93d Merge remote-tracking branch 'origin/master' into release-1.34
cd8b91c clarify that staging repos are automatically published
8c59599 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
ec3cea5 link to what a staging repository is
e4db694 docs: clarify that this is a staging repository and not for direct contributions
04507a3 Merge pull request #132942 from thockin/kyaml
50e39b1 Merge pull request #132935 from benluddy/cbor-bump-custom-marshalers
7d108e8 Re-vendor sigs.k8s.io/yaml @ v1.6.0
58c4eb0 Merge pull request #133130 from ylink-lfs/chore/residual_boolptr_removal
38a24e6 chore: residual boolptr and intptr removal
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.33.2 to 0.34.1

Commits

d033c49 Update dependencies to v0.34.1 tag
97396af Merge remote-tracking branch 'origin/master' into release-1.34
5f737f3 clarify that staging repos are automatically published
0b8655b add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
c00384c link to what a staging repository is
b53b1f8 docs: clarify that this is a staging repository and not for direct contributions
42e6182 KEP-5075: generated codes from make update
da11948 Merge pull request #130653 from yliaog/master
3b7d818 extended resource backed by DRA: codegen
bb11581 Merge pull request #130160 from KobayashiD27/dra-device-binding-conditions
Additional commits viewable in compare view

Updates sigs.k8s.io/yaml from 1.5.0 to 1.6.0

Release notes

Sourced from sigs.k8s.io/yaml's releases.

v1.6.0

What's Changed

Add "kyaml" support and yamlfmt by @thockin in kubernetes-sigs/yaml#132

Commits

048d724 Merge pull request #132 from thockin/master
23c836c Bolster tests, mostly in error-handling
2e3340b Add compact output tests
4a4f539 Add test case for tabs in multi-line strings
13509ad Change which methods get a newline and fix tests
59c2c43 Add compact mode so KYAML can be used in more places
abc1add kyaml: Implement escaping closer to YAML spec
7749171 Add a yamlfmt cmd
a932007 Add KYAML support
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 8 updates in the /lib directory: | Package | From | To | | --- | --- | --- | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.2` | `5.16.3` | | [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.27.0` | `10.28.0` | | [github.com/kevinburke/ssh_config](https://github.com/kevinburke/ssh_config) | `1.2.0` | `1.4.0` | | [github.com/kluctl/go-embed-python](https://github.com/kluctl/go-embed-python) | `0.0.0-3.11.11-20241219-1` | `0.0.0-3.13.1-20241219-1` | | [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.16` | `0.0.19` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.33.2` | `0.34.1` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.33.2` | `0.34.1` | Updates `github.com/go-git/go-git/v5` from 5.16.2 to 5.16.3 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.16.2...v5.16.3) Updates `github.com/go-playground/validator/v10` from 10.27.0 to 10.28.0 - [Release notes](https://github.com/go-playground/validator/releases) - [Commits](go-playground/validator@v10.27.0...v10.28.0) Updates `github.com/kevinburke/ssh_config` from 1.2.0 to 1.4.0 - [Changelog](https://github.com/kevinburke/ssh_config/blob/master/CHANGELOG.md) - [Commits](kevinburke/ssh_config@v1.2...v1.4.0) Updates `github.com/kluctl/go-embed-python` from 0.0.0-3.11.11-20241219-1 to 0.0.0-3.13.1-20241219-1 - [Commits](kluctl/go-embed-python@v0.0.0-3.11.11-20241219-1...v0.0.0-3.13.1-20241219-1) Updates `github.com/mattn/go-runewidth` from 0.0.16 to 0.0.19 - [Commits](mattn/go-runewidth@v0.0.16...v0.0.19) Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.10.0...v1.11.1) Updates `golang.org/x/crypto` from 0.39.0 to 0.42.0 - [Commits](golang/crypto@v0.39.0...v0.42.0) Updates `golang.org/x/net` from 0.41.0 to 0.43.0 - [Commits](golang/net@v0.41.0...v0.43.0) Updates `golang.org/x/sys` from 0.33.0 to 0.36.0 - [Commits](golang/sys@v0.33.0...v0.36.0) Updates `golang.org/x/text` from 0.26.0 to 0.29.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.26.0...v0.29.0) Updates `k8s.io/apimachinery` from 0.33.2 to 0.34.1 - [Commits](kubernetes/apimachinery@v0.33.2...v0.34.1) Updates `k8s.io/client-go` from 0.33.2 to 0.34.1 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.33.2...v0.34.1) Updates `sigs.k8s.io/yaml` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.16.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/go-playground/validator/v10 dependency-version: 10.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/kevinburke/ssh_config dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/kluctl/go-embed-python dependency-version: 0.0.0-3.13.1-20241219-1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/mattn/go-runewidth dependency-version: 0.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/stretchr/testify dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/crypto dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/net dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/sys dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/text dependency-version: 0.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/apimachinery dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/client-go dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: sigs.k8s.io/yaml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 6, 2025

dependabot bot force-pushed the dependabot/go_modules/lib/all-5c1e3f4955 branch from 63274e9 to 5576af5 Compare November 3, 2025 22:21

dependabot bot force-pushed the dependabot/go_modules/lib/all-5c1e3f4955 branch 2 times, most recently from e07183b to e8223a5 Compare December 19, 2025 22:11

dependabot bot force-pushed the dependabot/go_modules/lib/all-5c1e3f4955 branch from e8223a5 to 465cb64 Compare December 22, 2025 22:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump the all group across 1 directory with 13 updates #1395

chore(deps): Bump the all group across 1 directory with 13 updates #1395

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

chore(deps): Bump the all group across 1 directory with 13 updates #1395

Are you sure you want to change the base?

chore(deps): Bump the all group across 1 directory with 13 updates #1395

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.16.3

What's Changed

Release 10.28.0

What's Changed

New Contributors

Changes

Version 1.4 (released August 2025)

Version 1.3 (released February 2025)

Version 1.2

v1.11.1

What's Changed

v1.11.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

v1.6.0

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Oct 6, 2025 •

edited

Loading