Skip to content

Bump the go-deps group across 1 directory with 3 updates#1698

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-a277424cd4
Closed

Bump the go-deps group across 1 directory with 3 updates#1698
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-a277424cd4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 3 updates in the / directory: github.com/cyphar/filepath-securejoin, github.com/getsops/sops/v3 and github.com/google/cel-go.

Updates github.com/cyphar/filepath-securejoin from 0.6.1 to 0.7.0

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.7.0] - 2025-06-17

You talk of times of peace for all, and then prepare for war.

Changed

  • Update to cyphar.com/go-pathrs@0.2.5, which included a build-time API breakage that we needed to work around. The API of this library is unchanged by this, but users should make sure to update to v0.7.0 of filepath-securejoin if they use the libpathrs built tag and have update to libpathrs v0.2.5.
Commits
  • 8096a95 VERSION: release v0.7.0
  • 1324ccb merge #101 into cyphar/filepath-securejoin:main
  • dd8f0bb deps: bump to cyphar.com/go-pathrs@v0.2.5
  • c9a7725 gha: bump golangci-lint to v2.12
  • 2e968bd Merge pull request #91 from cyphar/dependabot/github_actions/actions/download...
  • 2879148 Merge pull request #90 from cyphar/dependabot/github_actions/actions/upload-a...
  • 07b805b build(deps): bump actions/download-artifact from 6 to 7
  • 8507844 build(deps): bump actions/upload-artifact from 5 to 6
  • daef0cf Merge pull request #89 from cyphar/dependabot/github_actions/actions/checkout-6
  • 95f8ea4 build(deps): bump actions/checkout from 5 to 6
  • Additional commits viewable in compare view

Updates github.com/getsops/sops/v3 from 3.13.1 to 3.13.2

Release notes

Sourced from github.com/getsops/sops/v3's releases.

v3.13.2

Installation

To install sops, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

# Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.13.2/sops-v3.13.2.linux.amd64
Move the binary in to your PATH
mv sops-v3.13.2.linux.amd64 /usr/local/bin/sops
Make the binary executable
chmod +x /usr/local/bin/sops

Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.13.2/sops-v3.13.2.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.13.2/sops-v3.13.2.checksums.sigstore.json
Verify the checksums file
cosign verify-blob sops-v3.13.2.checksums.txt 
--bundle sops-v3.13.2.checksums.sigstore.json 
--certificate-identity-regexp=https://github.com/getsops 
--certificate-oidc-issuer=https://token.actions.githubusercontent.com

Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:

# Verify the binary using the checksums file
sha256sum -c sops-v3.13.2.checksums.txt --ignore-missing

Verify artifact provenance

The SLSA provenance of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an in-toto link metadata file named sops-v3.13.2.intoto.jsonl. To verify the provenance of an artifact, you can utilize the slsa-verifier tool:

# Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.13.2/sops-v3.13.2.intoto.jsonl
</tr></table>

... (truncated)

Changelog

Sourced from github.com/getsops/sops/v3's changelog.

3.13.2

Improvements:

Bugfixes:

  • When using --user in the sops exec-file and sops exec-env subcommands, supplementary groups are now reset to the ones of the supplied user (#2194).
  • When using --user in the sops exec-file and sops exec-env subcommands, make sure that HOME, USER, and LOGNAME are set to the correct values for the supplied user (#2230).
  • AWS KMS: Handle pointers when serializing AWS context (#2219).
  • JSON store: Preverse large integers that fit into int64 (#2222).
  • INI store: Restore old behavior of double-escaping newlines in metadata, and adjust code to handle both the 3.13.0/3.13.1 single-escaped newlines as well as double-escaped newlines (#2189).
  • Fix panic when expecting a string for encrypted data, but when encountering something else (#2227).

Project changes:

  • CI dependency updates (#2184), (#2192), (#2196), (#2211), (#2228), (#2236).
  • Rust dependency updates for functional tests (#2191).
  • Build alpine container in CI (#2217).
  • Improve make test by unsetting all age environment variables (#2208).
  • Shorten lines in MarkDown files (#2206).
Commits
  • 15e36f9 Merge pull request #2232 from felixfontein/release-3.13.2
  • 0d49dff Add changelog for 3.13.2.
  • 72d9f5a Bump version to 3.13.2.
  • 8a62945 Merge pull request #2236 from getsops/dependabot/github_actions/ci-35246068e4
  • 59d36c6 build(deps): Bump the ci group with 2 updates
  • ed14c0b Merge pull request #2233 from getsops/dependabot/go_modules/github.com/openco...
  • ff43b27 build(deps): Bump github.com/opencontainers/runc from 1.2.8 to 1.3.6
  • 1c13f06 Merge pull request #2231 from felixfontein/deps
  • 818f7d9 Update all dependencies.
  • bb4f688 Merge pull request #2206 from felixfontein/mdl2
  • Additional commits viewable in compare view

Updates github.com/google/cel-go from 0.26.1 to 0.29.1

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.29.1

What's Changed

Full Changelog: cel-expr/cel-go@v0.29.0...v0.29.1

Release v0.29.0

What's Changed

New Features

Bug Fixes

Cost Tracking

Testing & Tooling

Documentation

Release v0.28.1

What's Changed

... (truncated)

Commits
  • 6d10c55 cel/prompt.go: convert CRLF to LF line ending (#1359)
  • fa16799 avoid repeated construction of cost tracker (#1357)
  • ea3d5c0 feat(ext): add json encoder (#1340)
  • a4d0d64 startsWith / endsWith runtime cost agreement with checked cost (#1351)
  • d4efa77 Ensure receiver and global matches cost estimates agree (#1350)
  • 13cff33 ext/lists: add max size check to genRange() to prevent OOM (#1310)
  • f0ffa7e Execution frame integration with updated IntepretableV2 (#1344)
  • f1ec2f6 guard int32/uint32 map key narrowing in qualifyInternal (#1337)
  • 258e7c8 Managed execution frame with async call foundations (#1316)
  • 14f6746 validate offset on empty-string path in indexOf and lastIndexOf (#1335)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-deps group across 1 directory with 3 updates
179b02f 
Bumps the go-deps group with 3 updates in the / directory: [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin), [github.com/getsops/sops/v3](https://github.com/getsops/sops) and [github.com/google/cel-go](https://github.com/google/cel-go).


Updates `github.com/cyphar/filepath-securejoin` from 0.6.1 to 0.7.0
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.6.1...v0.7.0)

Updates `github.com/getsops/sops/v3` from 3.13.1 to 3.13.2
- [Release notes](https://github.com/getsops/sops/releases)
- [Changelog](https://github.com/getsops/sops/blob/main/CHANGELOG.md)
- [Commits](getsops/sops@v3.13.1...v3.13.2)

Updates `github.com/google/cel-go` from 0.26.1 to 0.29.1
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](cel-expr/cel-go@v0.26.1...v0.29.1)

---
updated-dependencies:
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/getsops/sops/v3
  dependency-version: 3.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/google/cel-go
  dependency-version: 0.29.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency label Jul 6, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 7, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 7, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/go-deps-a277424cd4 branch July 7, 2026 09:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants