Update SOPS dependency to fix .ini file decryption#1695
Conversation
Signed-off-by: Andreas Gravgaard Andersen <andreasga22@gmail.com>
matheuscscp
left a comment
There was a problem hiding this comment.
@stefanprodan This is the minimum diff for SOPS 3.12.2. From codex/gpt-5.5:
This PR is probably okay for a patch release, but it is bigger than “INI fix”.
Watch areas:
- SOPS itself: fixes INI, also changes JSON number handling and turns one panic into a normal error.
- Azure: most suspicious area. Key Vault client got regenerated against a newer API version.
- AWS: lots moved, but the risky retry behavior is only enabled if AWS_NEW_RETRIES_2026=true.
- GCP: looks mostly generated/client plumbing; lower concern.
- Docker/runc/Moby: noisy, probably not relevant to controller runtime.
- Crypto/parser deps: mostly hardening/fixes.
Conclusion: I would not block the patch release, but I would leave a note that Azure Key Vault SOPS decrypt is the main thing to keep an eye on.
Do you want the commit message changed? I suppose this, Azure/azure-sdk-for-go#25395, is the
The changelogs of the other direct dependencies doesn't anything particularly noteworthy from what I see (except maybe about azcore changelog1.22.0 (2026-06-04)Features Added
Other Changes
azidentity changelog1.14.0 (2026-06-15)Breaking Changes
Bugs Fixed
Other Changes
1.14.0-beta.3 (2026-02-10)Breaking Changes
Other Changes
1.14.0-beta.2 (2025-11-10)Breaking Changes
Bugs Fixed
aws-sdk-go-v2/credentials changelogv1.19.24 (2026-06-10)
v1.19.23 (2026-06-08)
v1.19.22 (2026-06-04)
v1.19.21 (2026-06-03)
v1.19.20 (2026-06-02)
v1.19.19 (2026-05-29)
v1.19.18 (2026-05-28)
v1.19.17 (2026-05-22)
aws-sdk-go-v2 changelog (from `git diff v1.41.7..v1.42.0 CHANGELOG.md | sed -n 's/^+//p' `)# Release (2026-06-08)General Highlights
Module Highlights
Release (2026-06-05.2)General Highlights
Module Highlights
Release (2026-06-05)General Highlights
Module Highlights
Release (2026-06-04.2)General Highlights
Release (2026-06-04)General Highlights
Module Highlights
Release (2026-06-03.2)Module Highlights
Release (2026-06-03)General Highlights
Module Highlights
Release (2026-06-02)General Highlights
Module Highlights
Release (2026-06-01)Module Highlights
Release (2026-05-29)General Highlights
Module Highlights
Release (2026-05-28)General Highlights
Module Highlights
Release (2026-05-27)General Highlights
Module Highlights
Release (2026-05-26)Module Highlights
Release (2026-05-22)General Highlights
Module Highlights
Release (2026-05-21)General Highlights
Module Highlights
Release (2026-05-20)General Highlights
Module Highlights
Release (2026-05-19)Module Highlights
Release (2026-05-18)Module Highlights
Release (2026-05-15)Module Highlights
Release (2026-05-14)Module Highlights
Release (2026-05-13)Module Highlights
Release (2026-05-07)Module Highlights
Release (2026-05-06)General Highlights
Module Highlights
Release (2026-05-05)Module Highlights
Release (2026-05-04)Module Highlights
Release (2026-05-01)Module Highlights
Release (2026-04-30)Module Highlights
|
|
Successfully created backport PR for |
As mentioned in this comment: #1691 (comment):

There is a bug in SOPS, getsops/sops#2188, which makes the decryption of
.inifiles fail:So I'd like the sops dependency updated to include getsops/sops#2189 (getsops/sops@0ed7356,
>=3.13.2).I did:
And then
make testwhich succeeded locally.